ci2-android-6-1/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci2-android-6-1/syz-executor575615508 <...> rocess permissive=1 [ 14.751826][ T28] audit: type=1400 audit(1786696716.228:63): avc: denied { siginh } for pid=225 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.232' (ED25519) to the list of known hosts. execve("ci2-android-6-1/syz-executor575615508", ["ci2-android-6-1/syz-executor575615508"], 0x7ffd01115320 /* 10 vars */) = 0 brk(NULL) = 0x5555721e1000 brk(0x5555721e1e00) = 0x5555721e1e00 arch_prctl(ARCH_SET_FS, 0x5555721e1480) = 0 set_tid_address(0x5555721e1750) = 305 set_robust_list(0x5555721e1760, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 32, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci2-android-6-1/syz-executor575615508", 4096) = 43 getrandom("\xea\xc2\xb8\x4d\x54\x7f\x37\x82", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555721e1e00 brk(0x555572202e00) = 0x555572202e00 brk(0x555572203000) = 0x555572203000 mprotect(0x7f1cd64af000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 306 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 openat(AT_FDCWD, "/sys/kernel/debug/x86/nmi_longest_ns", O_WRONLY|O_CLOEXEC) = 3 write(3, "10000000000", 11) = 11 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/hung_task_check_interval_secs", O_WRONLY|O_CLOEXEC) = 3 write(3, "20", 2) = 2 close(3) = 0 openat(AT_FDCWD, "/proc/sys/net/core/bpf_jit_kallsyms", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/net/core/bpf_jit_harden", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/kptr_restrict", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/softlockup_all_cpu_backtrace", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3 write(3, "100", 3) = 3 close(3) = 0 openat(AT_FDCWD, "/proc/sys/vm/oom_dump_tasks", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/debug/exception-trace", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/printk", O_WRONLY|O_CLOEXEC) = 3 write(3, "7 4 1 3", 7) = 7 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/keys/gc_delay", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/vm/oom_kill_allocating_task", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/failslab/task-filter", O_WRONLY|O_CLOEXEC) = 3 write(3, "Y", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/task-filter", O_WRONLY|O_CLOEXEC) = 3 write(3, "Y", 1) = 1 close(3) = 0 ci2-android-6-1/strace-static-x86_64: Process 306 attached [pid 305] openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/task-filter", O_WRONLY|O_CLOEXEC [pid 306] set_robust_list(0x5555721e1760, 24 [pid 305] <... openat resumed>) = 3 [pid 306] <... set_robust_list resumed>) = 0 [pid 305] write(3, "Y", 1) = 1 [pid 305] close(3 [pid 306] rt_sigprocmask(SIG_SETMASK, [] [pid 305] <... close resumed>) = 0 [pid 306] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 305] openat(AT_FDCWD, "/sys/kernel/debug/fail_usercopy/task-filter", O_WRONLY|O_CLOEXEC) = 3 [pid 305] write(3, "Y", 1) = 1 [pid 305] close(3) = 0 [pid 305] openat(AT_FDCWD, "/sys/kernel/debug/fail_make_request/task-filter", O_WRONLY|O_CLOEXEC) = 3 [pid 305] write(3, "Y", 1) = 1 [pid 305] close(3) = 0 [pid 305] openat(AT_FDCWD, "/sys/kernel/debug/fail_io_timeout/task-filter", O_WRONLY|O_CLOEXEC) = 3 [pid 305] write(3, "Y", 1) = 1 [pid 305] close(3) = 0 [pid 305] openat(AT_FDCWD, "/sys/kernel/debug/fail_iommufd/task-filter", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 305] openat(AT_FDCWD, "/proc/sys/kernel/ctrl-alt-del", O_WRONLY|O_CLOEXEC) = 3 [pid 305] write(3, "0", 1) = 1 [pid 305] close(3) = 0 [pid 305] openat(AT_FDCWD, "/proc/sys/kernel/cad_pid", O_WRONLY|O_CLOEXEC) = 3 [pid 305] write(3, "306", 3) = 3 [pid 305] close(3) = 0 [pid 305] kill(306, SIGKILL) = 0 [pid 306] +++ killed by SIGKILL +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=306, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGSEGV, {sa_handler=0x7f1cd63eb1b0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 rt_sigaction(SIGBUS, {sa_handler=0x7f1cd63eb1b0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 308 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 308 attached [pid 308] set_robust_list(0x5555721e1760, 24) = 0 [pid 308] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 308] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 308] setpgid(0, 0) = 0 [pid 308] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 308] write(3, "1000", 4) = 4 [pid 308] close(3) = 0 executing program [pid 308] write(1, "executing program\n", 18) = 18 [pid 308] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 308] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 308] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 308] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 308] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 308] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[309]}, 88) = 309 [pid 308] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 308] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 309 attached [pid 309] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 309] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 309] memfd_create("syzkaller", 0) = 3 [pid 309] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 309] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 309] munmap(0x7f1ccdfc0000, 138412032) = 0 [ 24.388005][ T28] audit: type=1400 audit(1786696725.868:64): avc: denied { execmem } for pid=305 comm="syz-executor575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 24.413118][ T28] audit: type=1400 audit(1786696725.888:65): avc: denied { read write } for pid=305 comm="syz-executor575" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [pid 309] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 309] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 309] close(3) = 0 [pid 309] close(4) = 0 [pid 309] mkdir("./file1", 0777) = 0 [ 24.437698][ T28] audit: type=1400 audit(1786696725.888:66): avc: denied { open } for pid=305 comm="syz-executor575" path="/dev/loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 24.440100][ T309] loop0: detected capacity change from 0 to 1024 [pid 309] mount("/dev/loop0", "./file1", "ext4", MS_RELATIME, "block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grp"...) = 0 [pid 309] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 309] chdir("./file1") = 0 [pid 309] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 309] ioctl(4, LOOP_CLR_FD) = 0 [ 24.462081][ T28] audit: type=1400 audit(1786696725.888:67): avc: denied { ioctl } for pid=305 comm="syz-executor575" path="/dev/loop0" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 24.494199][ T28] audit: type=1400 audit(1786696725.968:68): avc: denied { mounton } for pid=308 comm="syz-executor575" path="/root/file1" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 24.506543][ T309] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [pid 309] close(4) = 0 [pid 309] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... futex resumed>) = 0 [pid 308] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... futex resumed>) = 1 [pid 309] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 309] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... futex resumed>) = 0 [pid 308] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... futex resumed>) = 1 [pid 309] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 309] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... futex resumed>) = 0 [pid 308] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... futex resumed>) = 1 [pid 309] symlinkat("\x2e\x02", 4, "./file0") = -1 EEXIST (File exists) [pid 309] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... futex resumed>) = 0 [pid 308] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... futex resumed>) = 1 [pid 309] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 309] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... futex resumed>) = 0 [pid 308] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... futex resumed>) = 1 [pid 309] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 309] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 [pid 309] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 308] <... futex resumed>) = 0 [pid 308] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 24.525622][ T28] audit: type=1400 audit(1786696726.018:69): avc: denied { mount } for pid=308 comm="syz-executor575" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 24.547995][ T28] audit: type=1400 audit(1786696726.028:70): avc: denied { append } for pid=308 comm="syz-executor575" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [pid 309] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x200000000000 [pid 309] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... futex resumed>) = 0 [pid 308] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 309] <... futex resumed>) = 1 [pid 309] memfd_create("syzkaller", 0) = 6 [pid 309] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 309] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 309] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 309] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7 [pid 309] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 309] ioctl(7, LOOP_CLR_FD) = 0 [pid 309] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 309] close(7) = 0 [pid 309] close(6) = 0 [pid 309] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 308] <... futex resumed>) = 0 [pid 308] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] chdir(0x200000000040) = 0 [pid 309] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 308] <... futex resumed>) = 0 [pid 308] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 24.572868][ T28] audit: type=1400 audit(1786696726.058:71): avc: denied { map } for pid=308 comm="syz-executor575" path="/dev/loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 24.602267][ T28] audit: type=1400 audit(1786696726.078:72): avc: denied { setattr } for pid=308 comm="syz-executor575" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 24.602283][ T309] ================================================================== [pid 309] fchmodat(AT_FDCWD, 0x200000000300, 0177520 [pid 308] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 308] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 308] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [ 24.602290][ T309] BUG: KASAN: use-after-free in xattr_find_entry+0x2f5/0x300 [ 24.640083][ T309] Read of size 4 at addr ffff888125796004 by task syz-executor575/309 [ 24.648232][ T309] [ 24.650549][ T309] CPU: 0 PID: 309 Comm: syz-executor575 Not tainted syzkaller #0 [ 24.658254][ T309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 24.668317][ T309] Call Trace: [ 24.671588][ T309] [ 24.674500][ T309] __dump_stack+0x21/0x24 [ 24.678817][ T309] dump_stack_lvl+0x110/0x170 [ 24.683481][ T309] ? __cfi_dump_stack_lvl+0x8/0x8 [ 24.688501][ T309] ? __ext4_get_inode_loc+0x5a2/0xd60 [ 24.693864][ T309] ? xattr_find_entry+0x2f5/0x300 [ 24.699397][ T309] print_address_description+0x71/0x200 [ 24.704985][ T309] print_report+0x4a/0x60 [ 24.709309][ T309] kasan_report+0x122/0x150 [ 24.713816][ T309] ? xattr_find_entry+0x2f5/0x300 [ 24.718831][ T309] __asan_report_load4_noabort+0x14/0x20 [ 24.724456][ T309] xattr_find_entry+0x2f5/0x300 [ 24.729302][ T309] ext4_xattr_ibody_get+0x245/0x4d0 [ 24.734490][ T309] ? __cfi_ext4_xattr_ibody_get+0x10/0x10 [ 24.740194][ T309] ? down_read+0xa6/0xf0 [ 24.744419][ T309] ? __cfi_down_read+0x10/0x10 [ 24.749183][ T309] ext4_xattr_get+0x122/0x650 [ 24.753859][ T309] ? get_cached_acl+0x2a0/0x2f0 [ 24.758713][ T309] ? __kasan_check_write+0x14/0x20 [ 24.763805][ T309] ext4_get_acl+0x85/0x6c0 [ 24.768207][ T309] ? _raw_spin_lock+0x94/0xf0 [ 24.772875][ T309] get_acl+0x16f/0x280 [ 24.776930][ T309] posix_acl_chmod+0xe9/0x260 [ 24.781592][ T309] ext4_setattr+0xd4e/0x1c80 [ 24.786168][ T309] ? current_time+0x19b/0x2c0 [ 24.790829][ T309] ? __cfi_current_time+0x10/0x10 [ 24.795838][ T309] ? __cfi_ext4_setattr+0x10/0x10 [ 24.800942][ T309] notify_change+0xd33/0x1030 [ 24.805605][ T309] chmod_common+0x21a/0x3c0 [ 24.810089][ T309] ? __cfi_chmod_common+0x10/0x10 [ 24.815097][ T309] ? user_path_at_empty+0x162/0x1c0 [ 24.820276][ T309] do_fchmodat+0xd4/0x1a0 [ 24.824588][ T309] ? do_faccessat+0x9b0/0x9b0 [ 24.829348][ T309] ? fpregs_restore_userregs+0x128/0x260 [ 24.834967][ T309] __x64_sys_fchmodat+0x7b/0x90 [ 24.839816][ T309] x64_sys_call+0x752/0x9a0 [ 24.844304][ T309] do_syscall_64+0x4c/0xa0 [ 24.848705][ T309] ? clear_bhb_loop+0x30/0x80 [ 24.853360][ T309] ? clear_bhb_loop+0x30/0x80 [ 24.858102][ T309] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 24.864071][ T309] RIP: 0033:0x7f1cd640db39 [ 24.868467][ T309] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 24.888325][ T309] RSP: 002b:00007f1cd63e0168 EFLAGS: 00000246 ORIG_RAX: 000000000000010c [ 24.896747][ T309] RAX: ffffffffffffffda RBX: 00007f1cd64b5e28 RCX: 00007f1cd640db39 [ 24.904714][ T309] RDX: 00000000ffffff50 RSI: 0000200000000300 RDI: 00000000ffffff9c [ 24.912685][ T309] RBP: 00007f1cd64b5e20 R08: 00007f1cd63e0cdc R09: 0000000000000000 [ 24.920644][ T309] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1cd64b5e2c [ 24.928601][ T309] R13: 0000000000000006 R14: 00007ffccc0b7d10 R15: 00007ffccc0b7df8 [ 24.936591][ T309] [ 24.939594][ T309] [ 24.941899][ T309] The buggy address belongs to the physical page: [ 24.948327][ T309] page:ffffea000495e580 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x125796 [ 24.958551][ T309] flags: 0x4000000000000000(zone=1) [ 24.963745][ T309] raw: 4000000000000000 ffffea000495e688 ffffea000495eb08 0000000000000000 [ 24.972411][ T309] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 24.980984][ T309] page dumped because: kasan: bad access detected [ 24.987394][ T309] page_owner tracks the page as freed [ 24.992749][ T309] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 307, tgid 307 (udevd), ts 24597311849, free_ts 24597715175 [ 25.009660][ T309] post_alloc_hook+0x1f5/0x210 [ 25.014418][ T309] prep_new_page+0x1c/0x110 [ 25.018906][ T309] get_page_from_freelist+0x2ca9/0x2d20 [ 25.024438][ T309] __alloc_pages+0x1fa/0x610 [ 25.029015][ T309] __folio_alloc+0x12/0x40 [ 25.033423][ T309] shmem_alloc_and_acct_folio+0x6dd/0x8c0 [ 25.039127][ T309] shmem_get_folio_gfp+0xd6d/0x20f0 [ 25.044306][ T309] shmem_write_begin+0xea/0x2c0 [ 25.049140][ T309] generic_perform_write+0x32d/0x740 [ 25.054407][ T309] __generic_file_write_iter+0x17a/0x230 [ 25.060020][ T309] generic_file_write_iter+0xae/0x310 [ 25.065379][ T309] vfs_write+0x5ef/0xd00 [ 25.069708][ T309] ksys_write+0x14a/0x260 [ 25.074036][ T309] __x64_sys_write+0x7b/0x90 [ 25.078618][ T309] x64_sys_call+0x27b/0x9a0 [ 25.083111][ T309] do_syscall_64+0x4c/0xa0 [ 25.087512][ T309] page last free stack trace: [ 25.092173][ T309] free_unref_page_prepare+0x80c/0x820 [ 25.097634][ T309] free_unref_page_list+0x117/0x8d0 [ 25.102835][ T309] release_pages+0xc7e/0xce0 [ 25.107422][ T309] __pagevec_release+0x71/0xe0 [ 25.112200][ T309] shmem_undo_range+0x564/0x14e0 [ 25.117125][ T309] shmem_evict_inode+0x21f/0x9c0 [ 25.122061][ T309] evict+0x4c4/0x8c0 [ 25.125944][ T309] iput+0x633/0x690 [ 25.129741][ T309] dentry_unlink_inode+0x346/0x3f0 [ 25.134831][ T309] __dentry_kill+0x46c/0x680 [ 25.139407][ T309] dentry_kill+0xc0/0x2a0 [ 25.143719][ T309] dput+0x42/0x80 [ 25.147336][ T309] do_renameat2+0xa33/0xfc0 [ 25.151824][ T309] __x64_sys_rename+0x86/0x90 [ 25.156485][ T309] x64_sys_call+0x300/0x9a0 [ 25.160975][ T309] do_syscall_64+0x4c/0xa0 [ 25.165377][ T309] [ 25.167684][ T309] Memory state around the buggy address: [ 25.173294][ T309] ffff888125795f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 25.181335][ T309] ffff888125795f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [pid 308] exit_group(0) = ? [ 25.189375][ T309] >ffff888125796000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 25.197417][ T309] ^ [ 25.201482][ T309] ffff888125796080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 25.209530][ T309] ffff888125796100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 25.217574][ T309] ================================================================== [ 25.226443][ T309] Disabling lock debugging due to kernel taint [pid 309] <... fchmodat resumed>) = ? [pid 309] +++ exited with 0 +++ [pid 308] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=308, si_uid=0, si_status=0, si_utime=0, si_stime=8 /* 0.08 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 314 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 314 attached [pid 314] set_robust_list(0x5555721e1760, 24) = 0 [pid 314] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 314] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 314] setpgid(0, 0) = 0 [pid 314] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 314] write(3, "1000", 4) = 4 [pid 314] close(3) = 0 executing program [pid 314] write(1, "executing program\n", 18) = 18 [pid 314] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 314] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 314] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 314] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 314] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 314] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 314] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 315 attached => {parent_tid=[315]}, 88) = 315 [pid 315] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 314] rt_sigprocmask(SIG_SETMASK, [] [pid 315] rt_sigprocmask(SIG_SETMASK, [] [pid 314] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 314] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 315] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 314] <... futex resumed>) = 0 [pid 314] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 315] memfd_create("syzkaller", 0) = 3 [pid 315] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 315] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 315] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 315] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 315] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 315] ioctl(4, LOOP_CLR_FD) = 0 [pid 315] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 315] close(4) = 0 [pid 315] close(3) = 0 [pid 315] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 315] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 314] <... futex resumed>) = 0 [pid 314] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 315] <... futex resumed>) = 0 [pid 315] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 315] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 315] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 314] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 314] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 315] <... futex resumed>) = 0 [pid 315] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 315] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 315] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 314] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 314] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 315] <... futex resumed>) = 0 [pid 315] symlinkat("\x2e\x02", 3, "./file0" [pid 314] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 315] <... symlinkat resumed>) = 0 [pid 315] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 315] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 314] <... futex resumed>) = 0 [pid 314] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 315] <... futex resumed>) = 0 [pid 315] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 315] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 315] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 314] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 314] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 315] <... futex resumed>) = 0 [pid 315] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 315] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 315] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 315] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 314] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 314] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 315] <... futex resumed>) = 0 [pid 314] <... futex resumed>) = 1 [pid 315] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0 [pid 314] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 315] <... mmap resumed>) = 0x200000000000 [pid 315] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 314] <... futex resumed>) = 0 [pid 314] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 314] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 315] memfd_create("syzkaller", 0) = 5 [pid 315] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 315] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 315] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 315] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 315] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [ 25.230516][ T28] audit: type=1400 audit(1786696726.718:73): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 25.232844][ T309] EXT4-fs error (device loop0): xattr_find_entry:297: inode #12: comm syz-executor575: corrupted xattr entries [ 25.266912][ T309] EXT4-fs (loop0): Remounting filesystem read-only [pid 315] ioctl(6, LOOP_CLR_FD) = 0 [pid 315] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 315] close(6) = 0 [pid 315] close(5) = 0 [pid 315] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 314] <... futex resumed>) = 0 [pid 314] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 314] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 315] <... futex resumed>) = 1 [pid 315] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 315] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 314] <... futex resumed>) = 0 [pid 314] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 314] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 315] <... futex resumed>) = 1 [pid 315] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 315] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 314] <... futex resumed>) = 0 [pid 314] exit_group(0) = ? [pid 315] <... futex resumed>) = ? [pid 315] +++ exited with 0 +++ [pid 314] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=314, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 316 ci2-android-6-1/strace-static-x86_64: Process 316 attached [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 316] set_robust_list(0x5555721e1760, 24 [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 316] <... set_robust_list resumed>) = 0 [pid 316] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 316] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 316] setpgid(0, 0) = 0 [pid 316] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 316] write(3, "1000", 4) = 4 [pid 316] close(3) = 0 [pid 316] write(1, "executing program\n", 18) = 18 executing program [pid 316] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 316] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 316] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 316] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 316] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 316] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 316] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 317 attached [pid 317] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 317] rt_sigprocmask(SIG_SETMASK, [] [pid 316] <... clone3 resumed> => {parent_tid=[317]}, 88) = 317 [pid 317] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 316] rt_sigprocmask(SIG_SETMASK, [] [pid 317] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 316] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 316] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 316] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 317] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 317] memfd_create("syzkaller", 0) = 3 [pid 317] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 317] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 317] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 317] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 317] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 317] ioctl(4, LOOP_CLR_FD) = 0 [pid 317] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 317] close(4) = 0 [pid 317] close(3) = 0 [pid 317] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 316] <... futex resumed>) = 0 [pid 316] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 316] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 317] <... futex resumed>) = 1 [pid 317] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 317] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 316] <... futex resumed>) = 0 [pid 316] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 316] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 317] <... futex resumed>) = 1 [pid 317] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 317] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 316] <... futex resumed>) = 0 [pid 316] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 316] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 317] <... futex resumed>) = 1 [pid 317] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 317] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 316] <... futex resumed>) = 0 [pid 316] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 316] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 317] <... futex resumed>) = 1 [pid 317] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 317] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 316] <... futex resumed>) = 0 [pid 316] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 317] <... futex resumed>) = 1 [pid 316] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 317] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 317] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 317] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 317] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 316] <... futex resumed>) = 0 [pid 316] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 316] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 317] <... futex resumed>) = 0 [pid 317] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 317] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 316] <... futex resumed>) = 0 [pid 316] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 317] memfd_create("syzkaller", 0 [pid 316] <... futex resumed>) = 0 [pid 316] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 317] <... memfd_create resumed>) = 5 [pid 317] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 317] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 317] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 317] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 317] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 317] ioctl(6, LOOP_CLR_FD) = 0 [pid 317] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 317] close(6) = 0 [pid 317] close(5) = 0 [pid 317] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 316] <... futex resumed>) = 0 [pid 316] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 316] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 317] <... futex resumed>) = 1 [pid 317] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 317] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 316] <... futex resumed>) = 0 [pid 316] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 316] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 317] <... futex resumed>) = 1 [pid 317] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 317] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 316] <... futex resumed>) = 0 [pid 316] exit_group(0) = ? [pid 317] <... futex resumed>) = ? [pid 317] +++ exited with 0 +++ [pid 316] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=316, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 318 attached [pid 318] set_robust_list(0x5555721e1760, 24 [pid 305] <... clone resumed>, child_tidptr=0x5555721e1750) = 318 [pid 318] <... set_robust_list resumed>) = 0 [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 318] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 318] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 318] setpgid(0, 0) = 0 [pid 318] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 318] write(3, "1000", 4) = 4 [pid 318] close(3) = 0 executing program [pid 318] write(1, "executing program\n", 18) = 18 [pid 318] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 318] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 318] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 318] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 318] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 318] rt_sigprocmask(SIG_BLOCK, ~[] [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 318] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 318] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[319]}, 88) = 319 [pid 318] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 318] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 318] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 319 attached [pid 319] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 319] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 319] memfd_create("syzkaller", 0) = 3 [pid 319] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 319] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 319] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 319] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 319] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 319] ioctl(4, LOOP_CLR_FD) = 0 [pid 319] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 319] close(4) = 0 [pid 319] close(3) = 0 [pid 319] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 318] <... futex resumed>) = 0 [pid 318] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 318] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 319] <... futex resumed>) = 1 [pid 319] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 319] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 318] <... futex resumed>) = 0 [pid 318] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 318] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 319] <... futex resumed>) = 1 [pid 319] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 319] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 318] <... futex resumed>) = 0 [pid 318] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 318] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 319] <... futex resumed>) = 1 [pid 319] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 319] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 318] <... futex resumed>) = 0 [pid 318] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 318] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 319] <... futex resumed>) = 1 [pid 319] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 319] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 318] <... futex resumed>) = 0 [pid 318] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 318] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 319] <... futex resumed>) = 1 [pid 319] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 319] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 319] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 318] <... futex resumed>) = 0 [pid 318] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 318] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 319] <... futex resumed>) = 1 [pid 319] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 319] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 318] <... futex resumed>) = 0 [pid 318] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 318] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 319] memfd_create("syzkaller", 0) = 5 [pid 319] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 319] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 319] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 319] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 319] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 319] ioctl(6, LOOP_CLR_FD) = 0 [pid 319] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 319] close(6) = 0 [pid 319] close(5) = 0 [pid 319] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 318] <... futex resumed>) = 0 [pid 318] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 318] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 319] <... futex resumed>) = 1 [pid 319] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 319] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 318] <... futex resumed>) = 0 [pid 318] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 318] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 319] <... futex resumed>) = 1 [pid 319] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 319] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 318] <... futex resumed>) = 0 [pid 318] exit_group(0) = ? [pid 319] <... futex resumed>) = ? [pid 319] +++ exited with 0 +++ [pid 318] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=318, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 320 ci2-android-6-1/strace-static-x86_64: Process 320 attached [pid 320] set_robust_list(0x5555721e1760, 24) = 0 [pid 320] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 320] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 320] setpgid(0, 0) = 0 [pid 320] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 320] write(3, "1000", 4) = 4 [pid 320] close(3) = 0 [pid 320] write(1, "executing program\n", 18) = 18 executing program [pid 320] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 320] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 320] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 320] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 320] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 320] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 320] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[321]}, 88) = 321 [pid 320] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 320] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 320] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 321 attached [pid 321] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 321] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 321] memfd_create("syzkaller", 0 [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 321] <... memfd_create resumed>) = 3 [pid 321] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 321] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 321] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 321] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 321] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 321] ioctl(4, LOOP_CLR_FD) = 0 [pid 321] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 321] close(4) = 0 [pid 321] close(3) = 0 [pid 321] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 320] <... futex resumed>) = 0 [pid 320] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 320] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 321] <... futex resumed>) = 1 [pid 321] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 321] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 320] <... futex resumed>) = 0 [pid 320] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 320] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 321] <... futex resumed>) = 1 [pid 321] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 321] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 320] <... futex resumed>) = 0 [pid 320] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 320] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 321] <... futex resumed>) = 1 [pid 321] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 321] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 320] <... futex resumed>) = 0 [pid 320] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 320] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 321] <... futex resumed>) = 1 [pid 321] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 321] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 320] <... futex resumed>) = 0 [pid 320] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 320] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 321] <... futex resumed>) = 1 [pid 321] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 321] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 321] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 320] <... futex resumed>) = 0 [pid 320] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 320] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 321] <... futex resumed>) = 1 [pid 321] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 321] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 320] <... futex resumed>) = 0 [pid 320] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 320] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 321] <... futex resumed>) = 1 [pid 321] memfd_create("syzkaller", 0) = 5 [pid 321] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 321] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 321] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 321] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 321] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 321] ioctl(6, LOOP_CLR_FD) = 0 [pid 321] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 321] close(6) = 0 [pid 321] close(5) = 0 [pid 321] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 320] <... futex resumed>) = 0 [pid 320] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 320] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 321] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 321] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 320] <... futex resumed>) = 0 [pid 320] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 320] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 321] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 321] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 320] <... futex resumed>) = 0 [pid 321] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 320] exit_group(0) = ? [pid 321] <... futex resumed>) = ? [pid 321] +++ exited with 0 +++ [pid 320] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=320, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 322 attached , child_tidptr=0x5555721e1750) = 322 [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 322] set_robust_list(0x5555721e1760, 24 [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 322] <... set_robust_list resumed>) = 0 [pid 322] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 322] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 322] setpgid(0, 0) = 0 [pid 322] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 322] write(3, "1000", 4) = 4 [pid 322] close(3) = 0 executing program [pid 322] write(1, "executing program\n", 18) = 18 [pid 322] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 322] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 322] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 322] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 322] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 322] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 322] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[323]}, 88) = 323 [pid 322] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 322] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 322] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 323 attached [pid 323] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 323] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 323] memfd_create("syzkaller", 0) = 3 [pid 323] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 323] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 323] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 323] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 323] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 323] ioctl(4, LOOP_CLR_FD) = 0 [pid 323] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 323] close(4) = 0 [pid 323] close(3) = 0 [pid 323] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 322] <... futex resumed>) = 0 [pid 322] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 322] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 323] <... futex resumed>) = 1 [pid 323] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 323] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 322] <... futex resumed>) = 0 [pid 322] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 322] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 323] <... futex resumed>) = 1 [pid 323] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 323] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 322] <... futex resumed>) = 0 [pid 322] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 322] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 323] <... futex resumed>) = 1 [pid 323] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 323] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 322] <... futex resumed>) = 0 [pid 322] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 322] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 323] <... futex resumed>) = 1 [pid 323] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 323] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 322] <... futex resumed>) = 0 [pid 322] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 322] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 323] <... futex resumed>) = 1 [pid 323] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 323] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 323] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 322] <... futex resumed>) = 0 [pid 322] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 322] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 323] <... futex resumed>) = 1 [pid 323] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 323] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 322] <... futex resumed>) = 0 [pid 322] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 322] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 323] <... futex resumed>) = 1 [pid 323] memfd_create("syzkaller", 0) = 5 [pid 323] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 323] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 323] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 323] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 323] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 323] ioctl(6, LOOP_CLR_FD) = 0 [pid 323] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 323] close(6) = 0 [pid 323] close(5) = 0 [pid 323] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 322] <... futex resumed>) = 0 [pid 322] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 322] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 323] <... futex resumed>) = 1 [pid 323] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 323] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 322] <... futex resumed>) = 0 [pid 322] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 322] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 323] <... futex resumed>) = 1 [pid 323] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 323] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 322] <... futex resumed>) = 0 [pid 322] exit_group(0) = ? [pid 323] <... futex resumed>) = ? [pid 323] +++ exited with 0 +++ [pid 322] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=322, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 324 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 324 attached [pid 324] set_robust_list(0x5555721e1760, 24) = 0 [pid 324] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 324] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 324] setpgid(0, 0) = 0 [pid 324] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 324] write(3, "1000", 4) = 4 [pid 324] close(3) = 0 [pid 324] write(1, "executing program\n", 18) = 18 [pid 324] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 324] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 324] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 324] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 324] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 324] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 324] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[325]}, 88) = 325 [pid 324] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 324] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 executing program [pid 324] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 325 attached [pid 325] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 325] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 325] memfd_create("syzkaller", 0) = 3 [pid 325] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 325] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 325] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 325] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 325] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 325] ioctl(4, LOOP_CLR_FD) = 0 [pid 325] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 325] close(4) = 0 [pid 325] close(3) = 0 [pid 325] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 324] <... futex resumed>) = 0 [pid 324] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 324] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 325] <... futex resumed>) = 1 [pid 325] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 325] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 324] <... futex resumed>) = 0 [pid 324] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 324] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 325] <... futex resumed>) = 1 [pid 325] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 325] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 324] <... futex resumed>) = 0 [pid 324] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 324] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 325] <... futex resumed>) = 1 [pid 325] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 325] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 324] <... futex resumed>) = 0 [pid 324] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 324] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 325] <... futex resumed>) = 1 [pid 325] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 325] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 324] <... futex resumed>) = 0 [pid 324] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 324] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 325] <... futex resumed>) = 1 [pid 325] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 325] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 325] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 324] <... futex resumed>) = 0 [pid 324] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 324] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 325] <... futex resumed>) = 1 [pid 325] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 325] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 324] <... futex resumed>) = 0 [pid 324] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 324] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 325] <... futex resumed>) = 1 [pid 325] memfd_create("syzkaller", 0) = 5 [pid 325] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 325] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 325] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 325] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 325] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 325] ioctl(6, LOOP_CLR_FD) = 0 [pid 325] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 325] close(6) = 0 [pid 325] close(5) = 0 [pid 325] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 324] <... futex resumed>) = 0 [pid 324] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 324] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 325] <... futex resumed>) = 1 [pid 325] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 325] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 324] <... futex resumed>) = 0 [pid 324] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 324] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 325] <... futex resumed>) = 1 [pid 325] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 325] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 324] <... futex resumed>) = 0 [pid 324] exit_group(0) = ? [pid 325] <... futex resumed>) = ? [pid 325] +++ exited with 0 +++ [pid 324] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=324, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 326 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 326 attached [pid 326] set_robust_list(0x5555721e1760, 24) = 0 [pid 326] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 326] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 326] setpgid(0, 0) = 0 [pid 326] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 326] write(3, "1000", 4) = 4 [pid 326] close(3) = 0 executing program [pid 326] write(1, "executing program\n", 18) = 18 [pid 326] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 326] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 326] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 326] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 326] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 326] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 326] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 327 attached => {parent_tid=[327]}, 88) = 327 [pid 326] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 326] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 326] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 327] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 327] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 327] memfd_create("syzkaller", 0) = 3 [pid 327] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 327] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 327] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 327] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 327] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 327] ioctl(4, LOOP_CLR_FD) = 0 [pid 327] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 327] close(4) = 0 [pid 327] close(3) = 0 [pid 327] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 326] <... futex resumed>) = 0 [pid 326] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 326] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 327] <... futex resumed>) = 1 [pid 327] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 327] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 326] <... futex resumed>) = 0 [pid 326] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 326] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 327] <... futex resumed>) = 1 [pid 327] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 327] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 326] <... futex resumed>) = 0 [pid 326] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 326] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 327] <... futex resumed>) = 1 [pid 327] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 327] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 326] <... futex resumed>) = 0 [pid 326] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 326] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 327] <... futex resumed>) = 1 [pid 327] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 327] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 326] <... futex resumed>) = 0 [pid 326] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 326] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 327] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 327] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 327] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 326] <... futex resumed>) = 0 [pid 326] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 326] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 327] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 327] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 326] <... futex resumed>) = 0 [pid 326] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 326] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 327] memfd_create("syzkaller", 0) = 5 [pid 327] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 327] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 327] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 327] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 327] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 327] ioctl(6, LOOP_CLR_FD) = 0 [pid 327] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 327] close(6) = 0 [pid 327] close(5) = 0 [pid 327] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 327] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 326] <... futex resumed>) = 0 [pid 326] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 326] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 327] <... futex resumed>) = 0 [pid 327] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 327] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 326] <... futex resumed>) = 0 [pid 326] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 326] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 327] <... futex resumed>) = 1 [pid 327] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 327] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 326] <... futex resumed>) = 0 [pid 326] exit_group(0) = ? [pid 327] <... futex resumed>) = ? [pid 327] +++ exited with 0 +++ [pid 326] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=326, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 328 attached [pid 328] set_robust_list(0x5555721e1760, 24) = 0 [pid 328] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 328] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 328] setpgid(0, 0) = 0 [pid 328] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 328] write(3, "1000", 4) = 4 [pid 328] close(3) = 0 [pid 328] write(1, "executing program\n", 18) = 18 [pid 328] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 305] <... clone resumed>, child_tidptr=0x5555721e1750) = 328 executing program [pid 328] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 328] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 328] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 328] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 328] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 328] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[329]}, 88) = 329 [pid 328] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 328] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 328] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 329 attached [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 329] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 329] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 329] memfd_create("syzkaller", 0 [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 329] <... memfd_create resumed>) = 3 [pid 329] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 329] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 329] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 329] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 329] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 329] ioctl(4, LOOP_CLR_FD) = 0 [pid 329] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 329] close(4) = 0 [pid 329] close(3) = 0 [pid 329] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 328] <... futex resumed>) = 0 [pid 328] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 328] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 329] <... futex resumed>) = 1 [pid 329] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 329] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 328] <... futex resumed>) = 0 [pid 328] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 328] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 329] <... futex resumed>) = 1 [pid 329] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 329] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 328] <... futex resumed>) = 0 [pid 328] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 328] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 329] <... futex resumed>) = 1 [pid 329] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 329] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 328] <... futex resumed>) = 0 [pid 328] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 328] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 329] <... futex resumed>) = 1 [pid 329] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 329] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 328] <... futex resumed>) = 0 [pid 328] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 328] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 329] <... futex resumed>) = 1 [pid 329] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 329] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 329] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 328] <... futex resumed>) = 0 [pid 328] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 328] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 329] <... futex resumed>) = 1 [pid 329] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 329] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 328] <... futex resumed>) = 0 [pid 328] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 328] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 329] <... futex resumed>) = 1 [pid 329] memfd_create("syzkaller", 0) = 5 [pid 329] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 329] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 329] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 329] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 329] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 329] ioctl(6, LOOP_CLR_FD) = 0 [pid 329] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 329] close(6) = 0 [pid 329] close(5) = 0 [pid 329] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 328] <... futex resumed>) = 0 [pid 328] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 328] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 329] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 329] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 328] <... futex resumed>) = 0 [pid 328] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 328] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 329] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 329] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 328] <... futex resumed>) = 0 [pid 328] exit_group(0 [pid 329] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 328] <... exit_group resumed>) = ? [pid 329] <... futex resumed>) = ? [pid 329] +++ exited with 0 +++ [pid 328] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=328, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 330 ci2-android-6-1/strace-static-x86_64: Process 330 attached [pid 330] set_robust_list(0x5555721e1760, 24) = 0 [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 330] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 330] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 330] setpgid(0, 0) = 0 [pid 330] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 330] write(3, "1000", 4) = 4 [pid 330] close(3) = 0 [pid 330] write(1, "executing program\n", 18) = 18 [pid 330] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 330] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 executing program [pid 330] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 330] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 330] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 330] rt_sigprocmask(SIG_BLOCK, ~[] [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 330] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 330] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[331]}, 88) = 331 [pid 330] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 330] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 330] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 331 attached [pid 331] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 331] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 331] memfd_create("syzkaller", 0) = 3 [pid 331] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 331] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 331] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 331] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 331] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 331] ioctl(4, LOOP_CLR_FD) = 0 [pid 331] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 331] close(4) = 0 [pid 331] close(3) = 0 [pid 331] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 330] <... futex resumed>) = 0 [pid 330] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 330] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 331] <... futex resumed>) = 1 [pid 331] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 331] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 330] <... futex resumed>) = 0 [pid 330] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 330] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 331] <... futex resumed>) = 1 [pid 331] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 331] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 330] <... futex resumed>) = 0 [pid 330] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 330] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 331] <... futex resumed>) = 1 [pid 331] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 331] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 330] <... futex resumed>) = 0 [pid 330] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 330] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 331] <... futex resumed>) = 1 [pid 331] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 331] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 330] <... futex resumed>) = 0 [pid 330] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 330] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 331] <... futex resumed>) = 1 [pid 331] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 331] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 331] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 330] <... futex resumed>) = 0 [pid 330] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 330] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 331] <... futex resumed>) = 1 [pid 331] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 331] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 330] <... futex resumed>) = 0 [pid 330] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 330] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 331] <... futex resumed>) = 1 [pid 331] memfd_create("syzkaller", 0) = 5 [pid 331] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 331] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 331] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 331] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 331] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 331] ioctl(6, LOOP_CLR_FD) = 0 [pid 331] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 331] close(6) = 0 [pid 331] close(5) = 0 [pid 331] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 330] <... futex resumed>) = 0 [pid 330] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 330] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 331] <... futex resumed>) = 1 [pid 331] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 331] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 330] <... futex resumed>) = 0 [pid 330] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 330] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 331] <... futex resumed>) = 1 [pid 331] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 331] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 330] <... futex resumed>) = 0 [pid 330] exit_group(0) = ? [pid 331] <... futex resumed>) = ? [pid 331] +++ exited with 0 +++ [pid 330] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=330, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 332 ci2-android-6-1/strace-static-x86_64: Process 332 attached [pid 332] set_robust_list(0x5555721e1760, 24) = 0 [pid 332] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 332] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 332] setpgid(0, 0) = 0 [pid 332] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 332] write(3, "1000", 4) = 4 [pid 332] close(3) = 0 [pid 332] write(1, "executing program\n", 18) = 18 executing program [pid 332] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 332] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 332] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 332] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 332] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 332] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 332] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[333]}, 88) = 333 [pid 332] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 332] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 332] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 333 attached [pid 333] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 333] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 333] memfd_create("syzkaller", 0) = 3 [pid 333] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 333] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 333] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 333] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 333] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 333] ioctl(4, LOOP_CLR_FD) = 0 [pid 333] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 333] close(4) = 0 [pid 333] close(3) = 0 [pid 333] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 332] <... futex resumed>) = 0 [pid 332] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 332] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 333] <... futex resumed>) = 1 [pid 333] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 333] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 332] <... futex resumed>) = 0 [pid 332] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 332] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 333] <... futex resumed>) = 1 [pid 333] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 333] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 332] <... futex resumed>) = 0 [pid 332] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 332] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 333] <... futex resumed>) = 1 [pid 333] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 333] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 332] <... futex resumed>) = 0 [pid 332] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 332] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 333] <... futex resumed>) = 1 [pid 333] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 333] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 332] <... futex resumed>) = 0 [pid 332] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 332] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 333] <... futex resumed>) = 1 [pid 333] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 333] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 333] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 332] <... futex resumed>) = 0 [pid 332] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 332] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 333] <... futex resumed>) = 1 [pid 333] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 333] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 332] <... futex resumed>) = 0 [pid 332] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 332] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 333] <... futex resumed>) = 1 [pid 333] memfd_create("syzkaller", 0) = 5 [pid 333] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 333] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 333] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 333] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 333] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 333] ioctl(6, LOOP_CLR_FD) = 0 [pid 333] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 333] close(6) = 0 [pid 333] close(5) = 0 [pid 333] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 332] <... futex resumed>) = 0 [pid 332] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 332] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 333] <... futex resumed>) = 1 [pid 333] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 333] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 332] <... futex resumed>) = 0 [pid 332] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 332] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 333] <... futex resumed>) = 1 [pid 333] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 333] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 332] <... futex resumed>) = 0 [pid 332] exit_group(0) = ? [pid 333] <... futex resumed>) = ? [pid 333] +++ exited with 0 +++ [pid 332] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=332, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 334 ci2-android-6-1/strace-static-x86_64: Process 334 attached [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 334] set_robust_list(0x5555721e1760, 24) = 0 [pid 334] rt_sigprocmask(SIG_SETMASK, [] [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 334] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 334] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 334] setpgid(0, 0) = 0 [pid 334] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 334] write(3, "1000", 4) = 4 [pid 334] close(3) = 0 [pid 334] write(1, "executing program\n", 18) = 18 [pid 334] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 334] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 334] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 334] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 334] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 334] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 334] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[335]}, 88) = 335 [pid 334] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 334] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 334] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 335 attached [pid 335] set_robust_list(0x7f1cd63e09a0, 24) = 0 executing program [pid 335] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 335] memfd_create("syzkaller", 0) = 3 [pid 335] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 335] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 335] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 335] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 335] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 335] ioctl(4, LOOP_CLR_FD) = 0 [pid 335] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 335] close(4) = 0 [pid 335] close(3) = 0 [pid 335] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 334] <... futex resumed>) = 0 [pid 334] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 334] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 335] <... futex resumed>) = 1 [pid 335] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 335] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 334] <... futex resumed>) = 0 [pid 334] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 334] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 335] <... futex resumed>) = 1 [pid 335] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 335] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 334] <... futex resumed>) = 0 [pid 334] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 334] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 335] <... futex resumed>) = 1 [pid 335] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 335] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 334] <... futex resumed>) = 0 [pid 334] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 334] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 335] <... futex resumed>) = 1 [pid 335] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 335] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 334] <... futex resumed>) = 0 [pid 334] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 334] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 335] <... futex resumed>) = 1 [pid 335] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 335] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 335] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 334] <... futex resumed>) = 0 [pid 334] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 334] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 335] <... futex resumed>) = 1 [pid 335] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 335] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 334] <... futex resumed>) = 0 [pid 335] memfd_create("syzkaller", 0 [pid 334] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 335] <... memfd_create resumed>) = 5 [pid 334] <... futex resumed>) = 0 [pid 335] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 334] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 335] <... mmap resumed>) = 0x7f1ccdfc0000 [pid 335] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 335] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 335] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 335] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 335] ioctl(6, LOOP_CLR_FD) = 0 [pid 335] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 335] close(6) = 0 [pid 335] close(5) = 0 [pid 335] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 334] <... futex resumed>) = 0 [pid 335] chdir(0x200000000040 [pid 334] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 335] <... chdir resumed>) = -1 ENOENT (No such file or directory) [pid 334] <... futex resumed>) = 0 [pid 335] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 334] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 335] <... futex resumed>) = 0 [pid 334] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 335] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 334] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 335] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 334] <... futex resumed>) = 0 [pid 335] fchmodat(AT_FDCWD, 0x200000000300, 0177520 [pid 334] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 335] <... fchmodat resumed>) = 0 [pid 335] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 334] <... futex resumed>) = 0 [pid 334] exit_group(0) = ? [pid 335] +++ exited with 0 +++ [pid 334] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=334, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 336 ci2-android-6-1/strace-static-x86_64: Process 336 attached [pid 305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 336] set_robust_list(0x5555721e1760, 24) = 0 [pid 336] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 336] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 336] setpgid(0, 0) = 0 [pid 336] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 336] write(3, "1000", 4) = 4 [pid 336] close(3) = 0 [pid 336] write(1, "executing program\n", 18) = 18 executing program [pid 336] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 336] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 336] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 336] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 336] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 336] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 336] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 337 attached => {parent_tid=[337]}, 88) = 337 [pid 337] set_robust_list(0x7f1cd63e09a0, 24 [pid 336] rt_sigprocmask(SIG_SETMASK, [] [pid 337] <... set_robust_list resumed>) = 0 [pid 336] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 337] rt_sigprocmask(SIG_SETMASK, [] [pid 336] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 337] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 336] <... futex resumed>) = 0 [pid 337] memfd_create("syzkaller", 0 [pid 336] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 337] <... memfd_create resumed>) = 3 [pid 337] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 337] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 337] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 337] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 337] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 337] ioctl(4, LOOP_CLR_FD) = 0 [pid 337] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 337] close(4) = 0 [pid 337] close(3) = 0 [pid 337] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 336] <... futex resumed>) = 0 [pid 337] <... futex resumed>) = 1 [pid 336] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 337] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL [pid 336] <... futex resumed>) = 0 [pid 336] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 337] <... quotactl resumed>) = -1 EFAULT (Bad address) [pid 337] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 336] <... futex resumed>) = 0 [pid 337] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 336] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 337] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 336] <... futex resumed>) = 0 [pid 337] openat(AT_FDCWD, ".", O_RDONLY [pid 336] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 337] <... openat resumed>) = 3 [pid 337] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 336] <... futex resumed>) = 0 [pid 337] <... futex resumed>) = 1 [pid 336] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 337] symlinkat("\x2e\x02", 3, "./file0" [pid 336] <... futex resumed>) = 0 [pid 336] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 337] <... symlinkat resumed>) = -1 EEXIST (File exists) [pid 337] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 336] <... futex resumed>) = 0 [pid 337] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM [pid 336] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 337] <... mprotect resumed>) = 0 [pid 336] <... futex resumed>) = 0 [pid 337] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 336] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 337] <... futex resumed>) = 0 [pid 336] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 337] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 336] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 337] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 336] <... futex resumed>) = 0 [pid 337] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 336] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 337] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 337] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 336] <... futex resumed>) = 0 [pid 336] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 336] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 337] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 337] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 336] <... futex resumed>) = 0 [pid 336] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 336] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 337] memfd_create("syzkaller", 0) = 5 [pid 337] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 337] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 337] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 337] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 337] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 337] ioctl(6, LOOP_CLR_FD) = 0 [pid 337] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 337] close(6) = 0 [pid 337] close(5) = 0 [pid 337] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 336] <... futex resumed>) = 0 [pid 336] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 336] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 337] <... futex resumed>) = 1 [pid 337] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 337] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 336] <... futex resumed>) = 0 [pid 336] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 336] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 337] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 337] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 336] <... futex resumed>) = 0 [pid 336] exit_group(0) = ? [pid 337] <... futex resumed>) = ? [pid 337] +++ exited with 0 +++ [pid 336] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=336, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 338 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 338 attached [pid 338] set_robust_list(0x5555721e1760, 24) = 0 [pid 338] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 338] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 338] setpgid(0, 0) = 0 [pid 338] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 338] write(3, "1000", 4) = 4 [pid 338] close(3) = 0 [pid 338] write(1, "executing program\n", 18) = 18 executing program [pid 338] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 338] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 338] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 338] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 338] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 338] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[339]}, 88) = 339 [pid 338] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 338] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 339 attached [pid 339] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 339] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 339] memfd_create("syzkaller", 0) = 3 [pid 339] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 339] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 339] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 339] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 339] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 339] ioctl(4, LOOP_CLR_FD) = 0 [pid 339] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 339] close(4) = 0 [pid 339] close(3) = 0 [pid 339] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 338] <... futex resumed>) = 0 [pid 338] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 339] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 339] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 338] <... futex resumed>) = 0 [pid 338] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 339] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 339] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 338] <... futex resumed>) = 0 [pid 338] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 339] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 339] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 338] <... futex resumed>) = 0 [pid 338] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 339] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 339] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 338] <... futex resumed>) = 0 [pid 338] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 339] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 339] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 339] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 338] <... futex resumed>) = 0 [pid 338] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 339] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 339] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 338] <... futex resumed>) = 0 [pid 338] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 339] memfd_create("syzkaller", 0) = 5 [pid 339] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 339] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 339] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 339] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 339] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 339] ioctl(6, LOOP_CLR_FD) = 0 [pid 339] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 339] close(6) = 0 [pid 339] close(5) = 0 [pid 339] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 338] <... futex resumed>) = 0 [pid 338] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 339] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 339] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 338] <... futex resumed>) = 0 [pid 338] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 338] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 339] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 339] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 338] <... futex resumed>) = 0 [pid 338] exit_group(0) = ? [pid 339] +++ exited with 0 +++ [pid 338] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=338, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 340 attached , child_tidptr=0x5555721e1750) = 340 [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 340] set_robust_list(0x5555721e1760, 24 [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 340] <... set_robust_list resumed>) = 0 [pid 340] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 340] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 340] setpgid(0, 0) = 0 [pid 340] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 340] write(3, "1000", 4) = 4 [pid 340] close(3) = 0 [pid 340] write(1, "executing program\n", 18) = 18 executing program [pid 340] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 340] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 340] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 340] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 340] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 340] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 340] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 341 attached => {parent_tid=[341]}, 88) = 341 [pid 341] set_robust_list(0x7f1cd63e09a0, 24 [pid 340] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 340] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 340] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 341] <... set_robust_list resumed>) = 0 [pid 341] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 341] memfd_create("syzkaller", 0) = 3 [pid 341] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 341] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 341] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 341] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 341] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 341] ioctl(4, LOOP_CLR_FD) = 0 [pid 341] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 341] close(4) = 0 [pid 341] close(3) = 0 [pid 341] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 340] <... futex resumed>) = 0 [pid 340] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 340] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 341] <... futex resumed>) = 1 [pid 341] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 341] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 340] <... futex resumed>) = 0 [pid 340] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 340] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 341] <... futex resumed>) = 1 [pid 341] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 341] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 340] <... futex resumed>) = 0 [pid 340] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 340] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 341] <... futex resumed>) = 1 [pid 341] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 341] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 340] <... futex resumed>) = 0 [pid 340] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 340] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 341] <... futex resumed>) = 1 [pid 341] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 341] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 340] <... futex resumed>) = 0 [pid 341] <... futex resumed>) = 1 [pid 340] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 341] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 341] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 340] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 341] <... openat resumed>) = 4 [pid 341] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 340] <... futex resumed>) = 0 [pid 340] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 340] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 341] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 341] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 340] <... futex resumed>) = 0 [pid 340] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 340] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 341] memfd_create("syzkaller", 0) = 5 [pid 341] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 341] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 341] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 341] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 341] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 341] ioctl(6, LOOP_CLR_FD) = 0 [pid 341] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 341] close(6) = 0 [pid 341] close(5) = 0 [pid 341] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 340] <... futex resumed>) = 0 [pid 340] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 340] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 341] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 341] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 340] <... futex resumed>) = 0 [pid 340] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 340] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 341] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 341] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 340] <... futex resumed>) = 0 [pid 340] exit_group(0) = ? [pid 341] +++ exited with 0 +++ [pid 340] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=340, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 342 ci2-android-6-1/strace-static-x86_64: Process 342 attached [pid 342] set_robust_list(0x5555721e1760, 24) = 0 [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 342] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 342] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 342] setpgid(0, 0) = 0 [pid 342] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 342] write(3, "1000", 4) = 4 [pid 342] close(3) = 0 [pid 342] write(1, "executing program\n", 18) = 18 executing program [pid 342] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 342] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 342] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 342] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 342] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 342] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[343]}, 88) = 343 [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 342] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 342] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 343 attached [pid 343] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 343] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 343] memfd_create("syzkaller", 0) = 3 [pid 343] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 343] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 343] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 343] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 343] ioctl(4, LOOP_CLR_FD) = 0 [pid 343] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 343] close(4) = 0 [pid 343] close(3) = 0 [pid 343] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... futex resumed>) = 0 [pid 342] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 343] <... futex resumed>) = 1 [pid 343] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 343] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... futex resumed>) = 0 [pid 342] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 343] <... futex resumed>) = 1 [pid 343] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 343] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... futex resumed>) = 0 [pid 342] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 343] <... futex resumed>) = 1 [pid 343] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 343] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... futex resumed>) = 0 [pid 342] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 343] <... futex resumed>) = 1 [pid 343] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 343] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... futex resumed>) = 0 [pid 342] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 343] <... futex resumed>) = 1 [pid 343] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 343] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 343] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... futex resumed>) = 0 [pid 342] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 343] <... futex resumed>) = 1 [pid 343] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 343] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... futex resumed>) = 0 [pid 342] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 343] <... futex resumed>) = 1 [pid 343] memfd_create("syzkaller", 0) = 5 [pid 343] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 343] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 343] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 343] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 343] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 343] ioctl(6, LOOP_CLR_FD) = 0 [pid 343] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 343] close(6) = 0 [pid 343] close(5) = 0 [pid 343] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... futex resumed>) = 0 [pid 342] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 343] <... futex resumed>) = 1 [pid 343] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 343] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... futex resumed>) = 0 [pid 342] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 343] <... futex resumed>) = 1 [pid 343] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 343] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... futex resumed>) = 0 [pid 342] exit_group(0) = ? [pid 343] <... futex resumed>) = ? [pid 343] +++ exited with 0 +++ [pid 342] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=342, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 344 attached [pid 344] set_robust_list(0x5555721e1760, 24) = 0 [pid 344] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 344] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 344] setpgid(0, 0) = 0 [pid 344] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 344] write(3, "1000", 4) = 4 [pid 344] close(3) = 0 [pid 344] write(1, "executing program\n", 18) = 18 executing program [pid 344] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 344] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 344] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 344] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 344] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 344] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 344] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[345]}, 88) = 345 [pid 344] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 344] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 344] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 345 attached [pid 345] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 345] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 345] memfd_create("syzkaller", 0) = 3 [pid 345] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 305] <... clone resumed>, child_tidptr=0x5555721e1750) = 344 [pid 345] <... mmap resumed>) = 0x7f1ccdfc0000 [pid 305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 345] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 345] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 345] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 345] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 345] ioctl(4, LOOP_CLR_FD) = 0 [pid 345] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 345] close(4) = 0 [pid 345] close(3) = 0 [pid 345] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 344] <... futex resumed>) = 0 [pid 344] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 344] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 345] <... futex resumed>) = 1 [pid 345] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 345] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 344] <... futex resumed>) = 0 [pid 344] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 344] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 345] <... futex resumed>) = 1 [pid 345] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 345] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 344] <... futex resumed>) = 0 [pid 344] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 344] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 345] <... futex resumed>) = 1 [pid 345] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 345] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 344] <... futex resumed>) = 0 [pid 344] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 344] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 345] <... futex resumed>) = 1 [pid 345] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 345] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 344] <... futex resumed>) = 0 [pid 344] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 344] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 345] <... futex resumed>) = 1 [pid 345] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 345] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 345] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 344] <... futex resumed>) = 0 [pid 344] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 344] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 345] <... futex resumed>) = 1 [pid 345] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 345] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 344] <... futex resumed>) = 0 [pid 344] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 344] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 345] <... futex resumed>) = 1 [pid 345] memfd_create("syzkaller", 0) = 5 [pid 345] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 345] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 345] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 345] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 345] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 345] ioctl(6, LOOP_CLR_FD) = 0 [pid 345] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 345] close(6) = 0 [pid 345] close(5) = 0 [pid 345] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 344] <... futex resumed>) = 0 [pid 344] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 344] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 345] <... futex resumed>) = 1 [pid 345] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 345] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 344] <... futex resumed>) = 0 [pid 344] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 344] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 345] <... futex resumed>) = 1 [pid 345] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 345] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 344] <... futex resumed>) = 0 [pid 344] exit_group(0) = ? [pid 345] <... futex resumed>) = ? [pid 345] +++ exited with 0 +++ [pid 344] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=344, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 346 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 346 attached [pid 346] set_robust_list(0x5555721e1760, 24) = 0 [pid 346] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 346] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 346] setpgid(0, 0) = 0 [pid 346] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 346] write(3, "1000", 4) = 4 [pid 346] close(3) = 0 [pid 346] write(1, "executing program\n", 18) = 18 executing program [pid 346] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 346] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 346] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 346] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 346] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 346] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 346] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[347]}, 88) = 347 [pid 346] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 346] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 346] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 347 attached [pid 347] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 347] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 347] memfd_create("syzkaller", 0) = 3 [pid 347] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 347] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 347] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 347] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 347] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 347] ioctl(4, LOOP_CLR_FD) = 0 [pid 347] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 347] close(4) = 0 [pid 347] close(3) = 0 [pid 347] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 346] <... futex resumed>) = 0 [pid 346] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 346] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 347] <... futex resumed>) = 1 [pid 347] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 347] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 346] <... futex resumed>) = 0 [pid 346] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 346] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 347] <... futex resumed>) = 1 [pid 347] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 347] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 346] <... futex resumed>) = 0 [pid 346] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 346] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 347] <... futex resumed>) = 1 [pid 347] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 347] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 346] <... futex resumed>) = 0 [pid 346] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 346] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 347] <... futex resumed>) = 1 [pid 347] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 347] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 346] <... futex resumed>) = 0 [pid 346] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 346] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 347] <... futex resumed>) = 1 [pid 347] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 347] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 347] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 347] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 346] <... futex resumed>) = 0 [pid 346] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 346] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 347] <... futex resumed>) = 0 [pid 347] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 347] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 346] <... futex resumed>) = 0 [pid 346] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 346] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 347] memfd_create("syzkaller", 0) = 5 [pid 347] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 347] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 347] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 347] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 347] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 347] ioctl(6, LOOP_CLR_FD) = 0 [pid 347] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 347] close(6) = 0 [pid 347] close(5) = 0 [pid 347] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 346] <... futex resumed>) = 0 [pid 346] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 346] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 347] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 347] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 346] <... futex resumed>) = 0 [pid 346] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 346] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 347] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 347] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 346] <... futex resumed>) = 0 [pid 346] exit_group(0) = ? [pid 347] +++ exited with 0 +++ [pid 346] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=346, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 348 attached [pid 348] set_robust_list(0x5555721e1760, 24) = 0 [pid 348] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 305] <... clone resumed>, child_tidptr=0x5555721e1750) = 348 [pid 348] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 348] setpgid(0, 0) = 0 [pid 348] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 348] write(3, "1000", 4) = 4 [pid 348] close(3) = 0 [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 348] write(1, "executing program\n", 18) = 18 [pid 348] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 348] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 executing program [pid 348] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 348] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 348] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 348] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 348] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[349]}, 88) = 349 [pid 348] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 348] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 348] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 349 attached [pid 349] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 349] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 349] memfd_create("syzkaller", 0) = 3 [pid 349] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 349] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 349] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 349] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 349] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 349] ioctl(4, LOOP_CLR_FD) = 0 [pid 349] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 349] close(4) = 0 [pid 349] close(3) = 0 [pid 349] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 348] <... futex resumed>) = 0 [pid 348] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 348] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 349] <... futex resumed>) = 1 [pid 349] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 349] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 348] <... futex resumed>) = 0 [pid 348] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 348] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 349] <... futex resumed>) = 1 [pid 349] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 349] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 348] <... futex resumed>) = 0 [pid 348] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 348] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 349] <... futex resumed>) = 1 [pid 349] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 349] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 348] <... futex resumed>) = 0 [pid 348] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 348] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 349] <... futex resumed>) = 1 [pid 349] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 349] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 348] <... futex resumed>) = 0 [pid 348] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 348] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 349] <... futex resumed>) = 1 [pid 349] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 349] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 349] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 348] <... futex resumed>) = 0 [pid 348] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 348] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 349] <... futex resumed>) = 1 [pid 349] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 349] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 348] <... futex resumed>) = 0 [pid 348] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 348] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 349] <... futex resumed>) = 1 [pid 349] memfd_create("syzkaller", 0) = 5 [pid 349] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 349] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 349] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 349] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 349] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 349] ioctl(6, LOOP_CLR_FD) = 0 [pid 349] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 349] close(6) = 0 [pid 349] close(5) = 0 [pid 349] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 348] <... futex resumed>) = 0 [pid 348] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 348] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 349] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 349] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 348] <... futex resumed>) = 0 [pid 349] fchmodat(AT_FDCWD, 0x200000000300, 0177520 [pid 348] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 348] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 349] <... fchmodat resumed>) = 0 [pid 349] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 348] <... futex resumed>) = 0 [pid 348] exit_group(0) = ? [pid 349] +++ exited with 0 +++ [pid 348] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=348, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 350 ci2-android-6-1/strace-static-x86_64: Process 350 attached [pid 350] set_robust_list(0x5555721e1760, 24) = 0 [pid 350] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 350] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 350] <... prctl resumed>) = 0 [pid 350] setpgid(0, 0) = 0 [pid 350] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 350] write(3, "1000", 4 [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 350] <... write resumed>) = 4 [pid 350] close(3) = 0 executing program [pid 350] write(1, "executing program\n", 18) = 18 [pid 350] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 350] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 350] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 350] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 350] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 350] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 350] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[351]}, 88) = 351 [pid 350] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 350] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 350] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 351 attached [pid 351] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 351] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 351] memfd_create("syzkaller", 0) = 3 [pid 351] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 351] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 351] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 351] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 351] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 351] ioctl(4, LOOP_CLR_FD) = 0 [pid 351] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 351] close(4) = 0 [pid 351] close(3) = 0 [pid 351] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 351] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 350] <... futex resumed>) = 0 [pid 350] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 350] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 351] <... futex resumed>) = 0 [pid 351] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 351] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 350] <... futex resumed>) = 0 [pid 350] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 350] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 351] <... futex resumed>) = 1 [pid 351] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 351] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 350] <... futex resumed>) = 0 [pid 350] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 350] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 351] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 351] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 350] <... futex resumed>) = 0 [pid 350] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 350] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 351] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 351] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 350] <... futex resumed>) = 0 [pid 350] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 350] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 351] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 351] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 351] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 350] <... futex resumed>) = 0 [pid 350] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 350] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 351] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 351] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 350] <... futex resumed>) = 0 [pid 350] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 350] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 351] memfd_create("syzkaller", 0) = 5 [pid 351] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 351] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 351] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 351] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 351] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 351] ioctl(6, LOOP_CLR_FD) = 0 [pid 351] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 351] close(6) = 0 [pid 351] close(5) = 0 [pid 351] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 350] <... futex resumed>) = 0 [pid 350] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 350] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 351] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 351] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 350] <... futex resumed>) = 0 [pid 350] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 350] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 351] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 351] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 350] <... futex resumed>) = 0 [pid 350] exit_group(0) = ? [pid 351] +++ exited with 0 +++ [pid 350] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=350, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 352 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 352 attached [pid 352] set_robust_list(0x5555721e1760, 24) = 0 [pid 352] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 352] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 352] setpgid(0, 0) = 0 [pid 352] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 352] write(3, "1000", 4) = 4 [pid 352] close(3) = 0 [pid 352] write(1, "executing program\n", 18) = 18 executing program [pid 352] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 352] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 352] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 352] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 352] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 352] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 352] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[353]}, 88) = 353 [pid 352] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 352] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 352] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 353 attached [pid 353] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 353] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 353] memfd_create("syzkaller", 0) = 3 [pid 353] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 353] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 353] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 353] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 353] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 353] ioctl(4, LOOP_CLR_FD) = 0 [pid 353] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 353] close(4) = 0 [pid 353] close(3) = 0 [pid 353] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 352] <... futex resumed>) = 0 [pid 352] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 352] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 353] <... futex resumed>) = 1 [pid 353] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 353] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 352] <... futex resumed>) = 0 [pid 352] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 352] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 353] <... futex resumed>) = 1 [pid 353] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 353] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 352] <... futex resumed>) = 0 [pid 352] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 352] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 353] <... futex resumed>) = 1 [pid 353] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 353] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 352] <... futex resumed>) = 0 [pid 352] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 352] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 353] <... futex resumed>) = 1 [pid 353] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 353] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 352] <... futex resumed>) = 0 [pid 352] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 352] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 353] <... futex resumed>) = 1 [pid 353] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 353] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 353] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 352] <... futex resumed>) = 0 [pid 352] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 352] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 353] <... futex resumed>) = 1 [pid 353] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 353] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 352] <... futex resumed>) = 0 [pid 352] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 352] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 353] <... futex resumed>) = 1 [pid 353] memfd_create("syzkaller", 0) = 5 [pid 353] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 353] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 353] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 353] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 353] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 353] ioctl(6, LOOP_CLR_FD) = 0 [pid 353] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 353] close(6) = 0 [pid 353] close(5) = 0 [pid 353] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 352] <... futex resumed>) = 0 [pid 352] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 352] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 353] <... futex resumed>) = 1 [pid 353] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 353] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 352] <... futex resumed>) = 0 [pid 352] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 352] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 353] <... futex resumed>) = 1 [pid 353] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 353] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 352] <... futex resumed>) = 0 [pid 352] exit_group(0) = ? [pid 353] <... futex resumed>) = ? [pid 353] +++ exited with 0 +++ [pid 352] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=352, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 354 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 354 attached [pid 354] set_robust_list(0x5555721e1760, 24) = 0 [pid 354] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 354] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 354] setpgid(0, 0) = 0 [pid 354] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 354] write(3, "1000", 4) = 4 [pid 354] close(3) = 0 executing program [pid 354] write(1, "executing program\n", 18) = 18 [pid 354] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 354] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 354] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 354] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 354] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 354] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 354] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[355]}, 88) = 355 [pid 354] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 354] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 354] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 355 attached [pid 355] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 355] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 355] memfd_create("syzkaller", 0) = 3 [pid 355] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 355] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 355] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 355] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 355] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 355] ioctl(4, LOOP_CLR_FD) = 0 [pid 355] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 355] close(4) = 0 [pid 355] close(3) = 0 [pid 355] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 354] <... futex resumed>) = 0 [pid 354] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 354] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 355] <... futex resumed>) = 1 [pid 355] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 355] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 354] <... futex resumed>) = 0 [pid 354] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 354] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 355] <... futex resumed>) = 1 [pid 355] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 355] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 354] <... futex resumed>) = 0 [pid 354] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 354] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 355] <... futex resumed>) = 1 [pid 355] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 355] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 354] <... futex resumed>) = 0 [pid 354] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 354] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 355] <... futex resumed>) = 1 [pid 355] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 355] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 354] <... futex resumed>) = 0 [pid 354] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 354] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 355] <... futex resumed>) = 1 [pid 355] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 355] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 355] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 354] <... futex resumed>) = 0 [pid 354] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 354] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 355] <... futex resumed>) = 1 [pid 355] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 355] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 354] <... futex resumed>) = 0 [pid 354] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 354] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 355] <... futex resumed>) = 1 [pid 355] memfd_create("syzkaller", 0) = 5 [pid 355] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 355] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 355] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 355] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 355] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 355] ioctl(6, LOOP_CLR_FD) = 0 [pid 355] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 355] close(6) = 0 [pid 355] close(5) = 0 [pid 355] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 354] <... futex resumed>) = 0 [pid 354] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 354] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 355] <... futex resumed>) = 1 [pid 355] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 355] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 354] <... futex resumed>) = 0 [pid 354] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 354] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 355] <... futex resumed>) = 1 [pid 355] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 355] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 354] <... futex resumed>) = 0 [pid 354] exit_group(0) = ? [pid 355] <... futex resumed>) = ? [pid 355] +++ exited with 0 +++ [pid 354] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=354, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 executing program clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 356 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 356 attached [pid 356] set_robust_list(0x5555721e1760, 24) = 0 [pid 356] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 356] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 356] setpgid(0, 0) = 0 [pid 356] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 356] write(3, "1000", 4) = 4 [pid 356] close(3) = 0 [pid 356] write(1, "executing program\n", 18) = 18 [pid 356] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 356] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 356] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 356] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 356] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 356] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 356] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[357]}, 88) = 357 [pid 356] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 356] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 356] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 357 attached [pid 357] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 357] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 357] memfd_create("syzkaller", 0) = 3 [pid 357] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 357] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 357] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 357] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 357] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 357] ioctl(4, LOOP_CLR_FD) = 0 [pid 357] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 357] close(4) = 0 [pid 357] close(3) = 0 [pid 357] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 356] <... futex resumed>) = 0 [pid 356] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 356] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 357] <... futex resumed>) = 1 [pid 357] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 357] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 356] <... futex resumed>) = 0 [pid 356] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 356] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 357] <... futex resumed>) = 1 [pid 357] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 357] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 356] <... futex resumed>) = 0 [pid 356] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 356] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 357] <... futex resumed>) = 1 [pid 357] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 357] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 356] <... futex resumed>) = 0 [pid 356] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 356] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 357] <... futex resumed>) = 1 [pid 357] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 357] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 356] <... futex resumed>) = 0 [pid 356] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 356] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 357] <... futex resumed>) = 1 [pid 357] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 357] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 357] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 356] <... futex resumed>) = 0 [pid 356] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 356] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 357] <... futex resumed>) = 1 [pid 357] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 357] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 356] <... futex resumed>) = 0 [pid 356] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 356] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 357] <... futex resumed>) = 1 [pid 357] memfd_create("syzkaller", 0) = 5 [pid 357] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 357] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 357] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 357] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 357] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 357] ioctl(6, LOOP_CLR_FD) = 0 [pid 357] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 357] close(6) = 0 [pid 357] close(5) = 0 [pid 357] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 356] <... futex resumed>) = 0 [pid 356] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 356] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 357] <... futex resumed>) = 1 [pid 357] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 357] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 356] <... futex resumed>) = 0 [pid 356] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 356] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 357] <... futex resumed>) = 1 [pid 357] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 357] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 356] <... futex resumed>) = 0 [pid 356] exit_group(0) = ? [pid 357] <... futex resumed>) = ? [pid 357] +++ exited with 0 +++ [pid 356] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=356, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 358 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 358 attached [pid 358] set_robust_list(0x5555721e1760, 24) = 0 [pid 358] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 358] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 358] setpgid(0, 0) = 0 [pid 358] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 358] write(3, "1000", 4) = 4 [pid 358] close(3) = 0 [pid 358] write(1, "executing program\n", 18) = 18 [pid 358] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 358] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 358] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 358] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 358] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 358] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 358] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[359]}, 88) = 359 [pid 358] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 358] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 358] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 359 attached [pid 359] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 359] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 359] memfd_create("syzkaller", 0) = 3 [pid 359] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 359] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 359] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 359] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 359] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 359] ioctl(4, LOOP_CLR_FD) = 0 executing program [pid 359] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 359] close(4) = 0 [pid 359] close(3) = 0 [pid 359] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 358] <... futex resumed>) = 0 [pid 358] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 358] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 359] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 359] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 358] <... futex resumed>) = 0 [pid 358] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 358] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 359] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 359] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 358] <... futex resumed>) = 0 [pid 358] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 358] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 359] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 359] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 358] <... futex resumed>) = 0 [pid 358] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 358] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 359] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 359] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 358] <... futex resumed>) = 0 [pid 358] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 358] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 359] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 359] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 359] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 358] <... futex resumed>) = 0 [pid 358] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 358] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 359] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 359] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 358] <... futex resumed>) = 0 [pid 358] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 358] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 359] memfd_create("syzkaller", 0) = 5 [pid 359] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 359] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 359] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 359] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 359] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 359] ioctl(6, LOOP_CLR_FD) = 0 [pid 359] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 359] close(6) = 0 [pid 359] close(5) = 0 [pid 359] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 358] <... futex resumed>) = 0 [pid 358] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 358] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 359] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 359] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 358] <... futex resumed>) = 0 [pid 358] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 358] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 359] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 359] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 358] <... futex resumed>) = 0 [pid 358] exit_group(0) = ? [pid 359] +++ exited with 0 +++ [pid 358] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=358, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 360 ci2-android-6-1/strace-static-x86_64: Process 360 attached [pid 305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 360] set_robust_list(0x5555721e1760, 24) = 0 [pid 360] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 360] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 360] setpgid(0, 0) = 0 [pid 360] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 360] write(3, "1000", 4) = 4 [pid 360] close(3) = 0 [pid 360] write(1, "executing program\n", 18) = 18 executing program [pid 360] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 360] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 360] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 360] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 360] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 360] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 360] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 361 attached [pid 361] set_robust_list(0x7f1cd63e09a0, 24 [pid 360] <... clone3 resumed> => {parent_tid=[361]}, 88) = 361 [pid 361] <... set_robust_list resumed>) = 0 [pid 360] rt_sigprocmask(SIG_SETMASK, [] [pid 361] rt_sigprocmask(SIG_SETMASK, [] [pid 360] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 361] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 360] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 361] memfd_create("syzkaller", 0 [pid 360] <... futex resumed>) = 0 [pid 360] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 361] <... memfd_create resumed>) = 3 [pid 361] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 361] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 361] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 361] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 361] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 361] ioctl(4, LOOP_CLR_FD) = 0 [pid 361] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 361] close(4) = 0 [pid 361] close(3) = 0 [pid 361] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] <... futex resumed>) = 0 [pid 361] <... futex resumed>) = 1 [pid 360] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 361] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL [pid 360] <... futex resumed>) = 0 [pid 361] <... quotactl resumed>) = -1 EFAULT (Bad address) [pid 360] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 361] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 360] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 361] <... futex resumed>) = 0 [pid 360] <... futex resumed>) = 0 [pid 361] openat(AT_FDCWD, ".", O_RDONLY [pid 360] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 361] <... openat resumed>) = 3 [pid 361] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 360] <... futex resumed>) = 0 [pid 361] symlinkat("\x2e\x02", 3, "./file0" [pid 360] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 361] <... symlinkat resumed>) = -1 EEXIST (File exists) [pid 360] <... futex resumed>) = 0 [pid 361] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 361] <... futex resumed>) = 0 [pid 360] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 361] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 360] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 361] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 360] <... futex resumed>) = 0 [pid 361] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM [pid 360] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 361] <... mprotect resumed>) = 0 [pid 361] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 360] <... futex resumed>) = 0 [pid 361] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 360] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 361] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 360] <... futex resumed>) = 0 [pid 361] <... openat resumed>) = 4 [pid 360] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 361] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 361] <... futex resumed>) = 0 [pid 360] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 361] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0 [pid 360] <... futex resumed>) = 0 [pid 360] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 361] <... mmap resumed>) = 0x200000000000 [pid 361] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 360] <... futex resumed>) = 0 [pid 360] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 361] memfd_create("syzkaller", 0 [pid 360] <... futex resumed>) = 0 [pid 361] <... memfd_create resumed>) = 5 [pid 360] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 361] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 361] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 361] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 361] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 361] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 361] ioctl(6, LOOP_CLR_FD) = 0 [pid 361] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 361] close(6) = 0 [pid 361] close(5) = 0 [pid 361] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 360] <... futex resumed>) = 0 [pid 360] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 360] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 361] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 361] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 360] <... futex resumed>) = 0 [pid 360] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 360] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 361] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 361] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 360] <... futex resumed>) = 0 [pid 360] exit_group(0) = ? [pid 361] +++ exited with 0 +++ [pid 360] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=360, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 362 ci2-android-6-1/strace-static-x86_64: Process 362 attached [pid 305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 362] set_robust_list(0x5555721e1760, 24) = 0 [pid 362] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 362] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 362] setpgid(0, 0) = 0 [pid 362] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 362] write(3, "1000", 4) = 4 [pid 362] close(3) = 0 executing program [pid 362] write(1, "executing program\n", 18) = 18 [pid 362] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 362] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 362] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 362] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 362] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 362] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 362] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 363 attached => {parent_tid=[363]}, 88) = 363 [pid 363] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 362] rt_sigprocmask(SIG_SETMASK, [] [pid 363] rt_sigprocmask(SIG_SETMASK, [] [pid 362] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 363] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 362] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 362] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 363] memfd_create("syzkaller", 0) = 3 [pid 363] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 363] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 363] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 363] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 363] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 363] ioctl(4, LOOP_CLR_FD) = 0 [pid 363] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 363] close(4) = 0 [pid 363] close(3) = 0 [pid 363] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 362] <... futex resumed>) = 0 [pid 362] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 362] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 363] <... futex resumed>) = 1 [pid 363] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 363] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 362] <... futex resumed>) = 0 [pid 362] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 362] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 363] <... futex resumed>) = 1 [pid 363] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 363] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 362] <... futex resumed>) = 0 [pid 362] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 362] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 363] <... futex resumed>) = 1 [pid 363] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 363] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 362] <... futex resumed>) = 0 [pid 362] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 362] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 363] <... futex resumed>) = 1 [pid 363] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 363] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 362] <... futex resumed>) = 0 [pid 362] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 362] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 363] <... futex resumed>) = 1 [pid 363] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 363] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 363] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 362] <... futex resumed>) = 0 [pid 362] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 362] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 363] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 363] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 362] <... futex resumed>) = 0 [pid 362] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 362] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 363] memfd_create("syzkaller", 0) = 5 [pid 363] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 363] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 363] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 363] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 363] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 363] ioctl(6, LOOP_CLR_FD) = 0 [pid 363] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 363] close(6) = 0 [pid 363] close(5) = 0 [pid 363] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 362] <... futex resumed>) = 0 [pid 362] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 362] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 363] <... futex resumed>) = 1 [pid 363] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 363] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 362] <... futex resumed>) = 0 [pid 362] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 362] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 363] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 363] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 362] <... futex resumed>) = 0 [pid 362] exit_group(0) = ? [pid 363] +++ exited with 0 +++ [pid 362] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=362, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 364 ci2-android-6-1/strace-static-x86_64: Process 364 attached [pid 364] set_robust_list(0x5555721e1760, 24) = 0 [pid 364] rt_sigprocmask(SIG_SETMASK, [] [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 364] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 364] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 364] setpgid(0, 0) = 0 [pid 364] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 364] write(3, "1000", 4) = 4 [pid 364] close(3) = 0 executing program [pid 364] write(1, "executing program\n", 18) = 18 [pid 364] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 364] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 364] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 364] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 364] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 364] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 364] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[365]}, 88) = 365 [pid 364] rt_sigprocmask(SIG_SETMASK, [] [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 364] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 364] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 364] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 365 attached [pid 365] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 365] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 365] memfd_create("syzkaller", 0) = 3 [pid 365] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 365] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 365] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 365] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 365] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 365] ioctl(4, LOOP_CLR_FD) = 0 [pid 365] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 365] close(4) = 0 [pid 365] close(3) = 0 [pid 365] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] <... futex resumed>) = 0 [pid 364] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 364] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 365] <... futex resumed>) = 1 [pid 365] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 365] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] <... futex resumed>) = 0 [pid 364] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 364] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 365] <... futex resumed>) = 1 [pid 365] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 365] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] <... futex resumed>) = 0 [pid 364] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 364] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 365] <... futex resumed>) = 1 [pid 365] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 365] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] <... futex resumed>) = 0 [pid 364] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 364] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 365] <... futex resumed>) = 1 [pid 365] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 365] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] <... futex resumed>) = 0 [pid 364] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 364] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 365] <... futex resumed>) = 1 [pid 365] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 365] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 365] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] <... futex resumed>) = 0 [pid 364] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 364] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 365] <... futex resumed>) = 1 [pid 365] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 365] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] <... futex resumed>) = 0 [pid 364] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 364] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 365] <... futex resumed>) = 1 [pid 365] memfd_create("syzkaller", 0) = 5 [pid 365] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 365] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 365] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 365] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 365] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 365] ioctl(6, LOOP_CLR_FD) = 0 [pid 365] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 365] close(6) = 0 [pid 365] close(5) = 0 [pid 365] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] <... futex resumed>) = 0 [pid 364] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 364] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 365] <... futex resumed>) = 1 [pid 365] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 365] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] <... futex resumed>) = 0 [pid 364] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 364] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 365] <... futex resumed>) = 1 [pid 365] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 365] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] <... futex resumed>) = 0 [pid 364] exit_group(0) = ? [pid 365] <... futex resumed>) = ? [pid 365] +++ exited with 0 +++ [pid 364] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=364, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 366 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 366 attached [pid 366] set_robust_list(0x5555721e1760, 24) = 0 [pid 366] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 366] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 366] setpgid(0, 0) = 0 [pid 366] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 366] write(3, "1000", 4) = 4 [pid 366] close(3) = 0 [pid 366] write(1, "executing program\n", 18) = 18 executing program [pid 366] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 366] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 366] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 366] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 366] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 366] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 366] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 367 attached => {parent_tid=[367]}, 88) = 367 [pid 367] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 366] rt_sigprocmask(SIG_SETMASK, [] [pid 367] rt_sigprocmask(SIG_SETMASK, [] [pid 366] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 367] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 366] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 366] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 367] memfd_create("syzkaller", 0) = 3 [pid 367] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 367] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 367] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 367] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 367] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 367] ioctl(4, LOOP_CLR_FD) = 0 [pid 367] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 367] close(4) = 0 [pid 367] close(3) = 0 [pid 367] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 366] <... futex resumed>) = 0 [pid 366] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 366] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 367] <... futex resumed>) = 1 [pid 367] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 367] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 366] <... futex resumed>) = 0 [pid 366] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 366] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 367] <... futex resumed>) = 1 [pid 367] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 367] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 366] <... futex resumed>) = 0 [pid 366] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 366] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 367] <... futex resumed>) = 1 [pid 367] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 367] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 366] <... futex resumed>) = 0 [pid 366] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 366] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 367] <... futex resumed>) = 1 [pid 367] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 367] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 366] <... futex resumed>) = 0 [pid 366] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 367] <... futex resumed>) = 1 [pid 366] <... futex resumed>) = 0 [pid 366] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 367] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 367] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 367] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 366] <... futex resumed>) = 0 [pid 366] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 366] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 367] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 367] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 366] <... futex resumed>) = 0 [pid 366] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 366] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 367] memfd_create("syzkaller", 0) = 5 [pid 367] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 367] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 367] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 367] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 367] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 367] ioctl(6, LOOP_CLR_FD) = 0 [pid 367] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 367] close(6) = 0 [pid 367] close(5) = 0 [pid 367] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 367] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 366] <... futex resumed>) = 0 [pid 366] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 366] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 367] <... futex resumed>) = 0 [pid 367] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 367] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 367] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 366] <... futex resumed>) = 0 [pid 366] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 366] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 367] <... futex resumed>) = 0 [pid 367] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 367] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 366] <... futex resumed>) = 0 [pid 366] exit_group(0) = ? [pid 367] <... futex resumed>) = ? [pid 367] +++ exited with 0 +++ [pid 366] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=366, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 368 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 368 attached [pid 368] set_robust_list(0x5555721e1760, 24) = 0 [pid 368] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 368] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 368] setpgid(0, 0) = 0 [pid 368] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 368] write(3, "1000", 4) = 4 [pid 368] close(3) = 0 [pid 368] write(1, "executing program\n", 18) = 18 executing program [pid 368] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 368] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 368] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 368] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 368] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 368] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 368] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[369]}, 88) = 369 [pid 368] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 368] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 368] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 369 attached [pid 369] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 369] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 369] memfd_create("syzkaller", 0) = 3 [pid 369] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 369] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 369] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 369] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 369] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 369] ioctl(4, LOOP_CLR_FD) = 0 [pid 369] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 369] close(4) = 0 [pid 369] close(3) = 0 [pid 369] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 368] <... futex resumed>) = 0 [pid 368] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 368] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 369] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 369] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 368] <... futex resumed>) = 0 [pid 369] <... futex resumed>) = 1 [pid 368] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 368] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 369] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 369] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 368] <... futex resumed>) = 0 [pid 368] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 368] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 369] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 369] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 368] <... futex resumed>) = 0 [pid 368] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 368] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 369] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 369] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 368] <... futex resumed>) = 0 [pid 368] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 368] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 369] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 369] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 369] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 368] <... futex resumed>) = 0 [pid 368] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 368] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 369] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 369] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 368] <... futex resumed>) = 0 [pid 368] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 368] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 369] memfd_create("syzkaller", 0) = 5 [pid 369] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 369] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 369] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 369] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 369] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 369] ioctl(6, LOOP_CLR_FD) = 0 [pid 369] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 369] close(6) = 0 [pid 369] close(5) = 0 [pid 369] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 368] <... futex resumed>) = 0 [pid 368] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 368] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 369] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 369] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 368] <... futex resumed>) = 0 [pid 368] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 368] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 369] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 369] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 368] <... futex resumed>) = 0 [pid 368] exit_group(0) = ? [pid 369] +++ exited with 0 +++ [pid 368] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=368, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 370 ci2-android-6-1/strace-static-x86_64: Process 370 attached [pid 305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 370] set_robust_list(0x5555721e1760, 24) = 0 [pid 370] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 370] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 370] setpgid(0, 0) = 0 [pid 370] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 370] write(3, "1000", 4) = 4 [pid 370] close(3) = 0 [pid 370] write(1, "executing program\n", 18) = 18 executing program [pid 370] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 370] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 370] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 370] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 370] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 370] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 370] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 371 attached => {parent_tid=[371]}, 88) = 371 [pid 371] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 370] rt_sigprocmask(SIG_SETMASK, [] [pid 371] rt_sigprocmask(SIG_SETMASK, [] [pid 370] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 371] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 370] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 371] memfd_create("syzkaller", 0 [pid 370] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 371] <... memfd_create resumed>) = 3 [pid 371] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 371] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 371] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 371] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 371] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 371] ioctl(4, LOOP_CLR_FD) = 0 [pid 371] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 371] close(4) = 0 [pid 371] close(3) = 0 [pid 371] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 370] <... futex resumed>) = 0 [pid 370] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 371] <... futex resumed>) = 1 [pid 371] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 370] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 371] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 371] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 370] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 370] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 370] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 371] <... futex resumed>) = 0 [pid 371] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 371] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 370] <... futex resumed>) = 0 [pid 370] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 370] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 371] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 371] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 370] <... futex resumed>) = 0 [pid 370] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 370] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 371] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 371] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 370] <... futex resumed>) = 0 [pid 370] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 370] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 371] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 371] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 371] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 370] <... futex resumed>) = 0 [pid 370] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 370] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 371] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 371] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 370] <... futex resumed>) = 0 [pid 370] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 370] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 371] memfd_create("syzkaller", 0) = 5 [pid 371] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 371] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 371] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 371] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 371] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 371] ioctl(6, LOOP_CLR_FD) = 0 [pid 371] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 371] close(6) = 0 [pid 371] close(5) = 0 [pid 371] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 370] <... futex resumed>) = 0 [pid 371] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 370] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 371] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 370] <... futex resumed>) = 0 [pid 371] chdir(0x200000000040 [pid 370] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 371] <... chdir resumed>) = -1 ENOENT (No such file or directory) [pid 371] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 370] <... futex resumed>) = 0 [pid 371] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 370] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 371] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 370] <... futex resumed>) = 0 [pid 370] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 371] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 371] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 370] <... futex resumed>) = 0 [pid 371] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 370] exit_group(0) = ? [pid 371] <... futex resumed>) = ? [pid 371] +++ exited with 0 +++ [pid 370] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=370, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 372 ci2-android-6-1/strace-static-x86_64: Process 372 attached [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 372] set_robust_list(0x5555721e1760, 24) = 0 [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 372] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 372] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 372] setpgid(0, 0) = 0 [pid 372] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 372] write(3, "1000", 4) = 4 [pid 372] close(3) = 0 executing program [pid 372] write(1, "executing program\n", 18) = 18 [pid 372] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 372] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 372] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 372] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 372] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 372] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 372] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 373 attached => {parent_tid=[373]}, 88) = 373 [pid 373] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 372] rt_sigprocmask(SIG_SETMASK, [] [pid 373] rt_sigprocmask(SIG_SETMASK, [] [pid 372] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 373] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 372] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 373] memfd_create("syzkaller", 0 [pid 372] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 373] <... memfd_create resumed>) = 3 [pid 373] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 373] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 373] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 373] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 373] ioctl(4, LOOP_CLR_FD) = 0 [pid 373] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 373] close(4) = 0 [pid 373] close(3) = 0 [pid 373] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... futex resumed>) = 0 [pid 372] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... futex resumed>) = 1 [pid 372] <... futex resumed>) = 0 [pid 373] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 373] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 373] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 372] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 372] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 372] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... futex resumed>) = 0 [pid 373] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 373] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 373] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 372] <... futex resumed>) = 0 [pid 372] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 372] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... futex resumed>) = 0 [pid 373] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 373] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... futex resumed>) = 0 [pid 372] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 372] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... futex resumed>) = 1 [pid 373] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 373] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 372] <... futex resumed>) = 0 [pid 372] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 372] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 373] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 373] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 372] <... futex resumed>) = 0 [pid 372] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 372] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 373] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 372] <... futex resumed>) = 0 [pid 372] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 372] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 373] memfd_create("syzkaller", 0) = 5 [pid 373] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 373] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 373] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 373] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 373] ioctl(6, LOOP_CLR_FD) = 0 [pid 373] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 373] close(6) = 0 [pid 373] close(5) = 0 [pid 373] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 372] <... futex resumed>) = 0 [pid 373] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 372] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 372] <... futex resumed>) = 0 [pid 372] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 373] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 372] <... futex resumed>) = 0 [pid 373] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 372] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 372] <... futex resumed>) = 0 [pid 373] fchmodat(AT_FDCWD, 0x200000000300, 0177520 [pid 372] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... fchmodat resumed>) = 0 [pid 373] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 372] <... futex resumed>) = 0 [pid 373] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 372] exit_group(0) = ? [pid 373] <... futex resumed>) = ? [pid 373] +++ exited with 0 +++ [pid 372] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=372, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 374 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 374 attached [pid 374] set_robust_list(0x5555721e1760, 24) = 0 [pid 374] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 374] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 374] setpgid(0, 0) = 0 [pid 374] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 374] write(3, "1000", 4) = 4 [pid 374] close(3) = 0 [pid 374] write(1, "executing program\n", 18) = 18 executing program [pid 374] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 374] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 374] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 374] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 374] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 374] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 374] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[375]}, 88) = 375 [pid 374] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 374] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 374] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 375 attached [pid 375] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 375] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 375] memfd_create("syzkaller", 0) = 3 [pid 375] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 375] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 375] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 375] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 375] ioctl(4, LOOP_CLR_FD) = 0 [pid 375] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 375] close(4) = 0 [pid 375] close(3) = 0 [pid 375] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 375] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 374] <... futex resumed>) = 0 [pid 374] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 375] <... futex resumed>) = 0 [pid 375] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 374] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 375] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 374] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 374] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 375] <... futex resumed>) = 0 [pid 375] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 375] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 375] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 374] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 374] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... futex resumed>) = 0 [pid 374] <... futex resumed>) = 1 [pid 375] symlinkat("\x2e\x02", 3, "./file0" [pid 374] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... symlinkat resumed>) = -1 EEXIST (File exists) [pid 375] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 374] <... futex resumed>) = 0 [pid 375] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM [pid 374] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... mprotect resumed>) = 0 [pid 374] <... futex resumed>) = 0 [pid 375] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... futex resumed>) = 0 [pid 374] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 375] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 374] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 374] <... futex resumed>) = 0 [pid 375] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 374] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 375] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 374] <... futex resumed>) = 0 [pid 375] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 374] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0 [pid 374] <... futex resumed>) = 0 [pid 374] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... mmap resumed>) = 0x200000000000 [pid 375] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 374] <... futex resumed>) = 0 [pid 375] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 374] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 374] <... futex resumed>) = 0 [pid 375] memfd_create("syzkaller", 0 [pid 374] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 375] <... memfd_create resumed>) = 5 [pid 375] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 375] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 375] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 375] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 375] ioctl(6, LOOP_CLR_FD) = 0 [pid 375] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 375] close(6) = 0 [pid 375] close(5) = 0 [pid 375] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 374] <... futex resumed>) = 0 [pid 375] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 374] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 374] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... futex resumed>) = 0 [pid 375] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 375] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 374] <... futex resumed>) = 0 [pid 374] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 374] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 375] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 374] <... futex resumed>) = 0 [pid 374] exit_group(0) = ? [pid 375] +++ exited with 0 +++ [pid 374] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=374, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 376 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 376 attached [pid 376] set_robust_list(0x5555721e1760, 24) = 0 [pid 376] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 376] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 376] setpgid(0, 0) = 0 [pid 376] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 376] write(3, "1000", 4) = 4 [pid 376] close(3) = 0 [pid 376] write(1, "executing program\n", 18) = 18 executing program [pid 376] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 376] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 376] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 376] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 376] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 376] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 376] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[377]}, 88) = 377 [pid 376] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 376] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 376] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 377 attached [pid 377] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 377] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 377] memfd_create("syzkaller", 0) = 3 [pid 377] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 377] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 377] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 377] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 377] ioctl(4, LOOP_CLR_FD) = 0 [pid 377] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 377] close(4) = 0 [pid 377] close(3) = 0 [pid 377] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... futex resumed>) = 0 [pid 376] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 376] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... futex resumed>) = 1 [pid 377] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 377] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... futex resumed>) = 0 [pid 376] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 376] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... futex resumed>) = 1 [pid 377] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 377] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... futex resumed>) = 0 [pid 376] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 376] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... futex resumed>) = 1 [pid 377] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 377] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... futex resumed>) = 0 [pid 376] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 376] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... futex resumed>) = 1 [pid 377] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 377] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... futex resumed>) = 0 [pid 376] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 376] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... futex resumed>) = 1 [pid 377] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 377] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 377] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 376] <... futex resumed>) = 0 [pid 376] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 376] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 377] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... futex resumed>) = 0 [pid 376] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 376] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 377] <... futex resumed>) = 1 [pid 377] memfd_create("syzkaller", 0) = 5 [pid 377] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 377] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 377] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 377] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 377] ioctl(6, LOOP_CLR_FD) = 0 [pid 377] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 377] close(6) = 0 [pid 377] close(5) = 0 [pid 377] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 376] <... futex resumed>) = 0 [pid 376] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 376] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 377] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 376] <... futex resumed>) = 0 [pid 376] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 377] fchmodat(AT_FDCWD, 0x200000000300, 0177520 [pid 376] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... fchmodat resumed>) = 0 [pid 377] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 377] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 376] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 376] exit_group(0) = ? [pid 377] <... futex resumed>) = ? [pid 377] +++ exited with 0 +++ [pid 376] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=376, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 378 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 378 attached [pid 378] set_robust_list(0x5555721e1760, 24) = 0 [pid 378] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 378] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 378] setpgid(0, 0) = 0 [pid 378] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 378] write(3, "1000", 4) = 4 [pid 378] close(3) = 0 [pid 378] write(1, "executing program\n", 18) = 18 executing program [pid 378] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 378] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 378] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 378] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 378] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 378] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[379]}, 88) = 379 [pid 378] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 378] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 379 attached [pid 379] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 379] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 379] memfd_create("syzkaller", 0) = 3 [pid 379] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 379] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 379] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 379] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 379] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 379] ioctl(4, LOOP_CLR_FD) = 0 [pid 379] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 379] close(4) = 0 [pid 379] close(3) = 0 [pid 379] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 379] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 378] <... futex resumed>) = 0 [pid 378] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 379] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 379] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 379] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 379] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 378] <... futex resumed>) = 0 [pid 378] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 378] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 379] <... futex resumed>) = 0 [pid 379] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 379] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] <... futex resumed>) = 0 [pid 378] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 379] <... futex resumed>) = 1 [pid 379] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 379] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 378] <... futex resumed>) = 0 [pid 378] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 379] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 379] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 379] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL) = 0 [pid 378] <... futex resumed>) = 1 [pid 378] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 378] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 379] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 379] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 379] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 378] <... futex resumed>) = 0 [pid 378] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 379] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 379] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 378] <... futex resumed>) = 0 [pid 378] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 379] memfd_create("syzkaller", 0) = 5 [pid 379] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 379] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 379] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 379] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 379] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 379] ioctl(6, LOOP_CLR_FD) = 0 [pid 379] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 379] close(6) = 0 [pid 379] close(5) = 0 [pid 379] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 378] <... futex resumed>) = 0 [pid 378] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 379] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 379] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 378] <... futex resumed>) = 0 [pid 378] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 379] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 379] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 378] <... futex resumed>) = 0 [pid 379] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 378] exit_group(0) = ? [pid 379] <... futex resumed>) = ? [pid 379] +++ exited with 0 +++ [pid 378] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=378, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 380 ci2-android-6-1/strace-static-x86_64: Process 380 attached [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 380] set_robust_list(0x5555721e1760, 24 [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 380] <... set_robust_list resumed>) = 0 [pid 380] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 380] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 380] setpgid(0, 0) = 0 [pid 380] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 380] write(3, "1000", 4) = 4 [pid 380] close(3) = 0 [pid 380] write(1, "executing program\n", 18) = 18 executing program [pid 380] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 380] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 380] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 380] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 380] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 380] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 380] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 381 attached => {parent_tid=[381]}, 88) = 381 [pid 381] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 380] rt_sigprocmask(SIG_SETMASK, [] [pid 381] rt_sigprocmask(SIG_SETMASK, [] [pid 380] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 380] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 381] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 380] <... futex resumed>) = 0 [pid 381] memfd_create("syzkaller", 0 [pid 380] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 381] <... memfd_create resumed>) = 3 [pid 381] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 381] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 381] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 381] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 381] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 381] ioctl(4, LOOP_CLR_FD) = 0 [pid 381] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 381] close(4) = 0 [pid 381] close(3) = 0 [pid 381] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] <... futex resumed>) = 0 [pid 380] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 380] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 381] <... futex resumed>) = 1 [pid 381] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 381] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] <... futex resumed>) = 0 [pid 380] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 380] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 381] <... futex resumed>) = 1 [pid 381] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 381] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] <... futex resumed>) = 0 [pid 380] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 380] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 381] <... futex resumed>) = 1 [pid 381] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 381] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] <... futex resumed>) = 0 [pid 380] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 380] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 381] <... futex resumed>) = 1 [pid 381] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 381] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] <... futex resumed>) = 0 [pid 380] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 380] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 381] <... futex resumed>) = 1 [pid 381] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 381] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 381] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] <... futex resumed>) = 0 [pid 380] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 380] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 381] <... futex resumed>) = 1 [pid 381] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 381] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 380] <... futex resumed>) = 0 [pid 380] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 380] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 381] memfd_create("syzkaller", 0) = 5 [pid 381] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 381] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 381] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 381] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 381] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 381] ioctl(6, LOOP_CLR_FD) = 0 [pid 381] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 381] close(6) = 0 [pid 381] close(5) = 0 [pid 381] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] <... futex resumed>) = 0 [pid 380] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 380] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 381] <... futex resumed>) = 1 [pid 381] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 381] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] <... futex resumed>) = 0 [pid 380] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 380] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 381] <... futex resumed>) = 1 [pid 381] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 381] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] <... futex resumed>) = 0 [pid 380] exit_group(0) = ? [pid 381] <... futex resumed>) = ? [pid 381] +++ exited with 0 +++ [pid 380] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=380, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 382 ci2-android-6-1/strace-static-x86_64: Process 382 attached [pid 382] set_robust_list(0x5555721e1760, 24) = 0 [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 382] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 382] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 382] <... prctl resumed>) = 0 [pid 382] setpgid(0, 0) = 0 [pid 382] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 382] write(3, "1000", 4) = 4 [pid 382] close(3) = 0 executing program [pid 382] write(1, "executing program\n", 18) = 18 [pid 382] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 382] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 382] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 382] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 382] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 382] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[383]}, 88) = 383 [pid 382] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 382] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 383 attached [pid 383] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 383] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 383] memfd_create("syzkaller", 0) = 3 [pid 383] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 383] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 383] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 383] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 383] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 383] ioctl(4, LOOP_CLR_FD) = 0 [pid 383] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 383] close(4) = 0 [pid 383] close(3) = 0 [pid 383] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 382] <... futex resumed>) = 0 [pid 382] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 383] <... futex resumed>) = 1 [pid 383] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 383] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 382] <... futex resumed>) = 0 [pid 382] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 383] <... futex resumed>) = 1 [pid 383] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 383] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 382] <... futex resumed>) = 0 [pid 382] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 383] <... futex resumed>) = 1 [pid 383] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 383] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 382] <... futex resumed>) = 0 [pid 382] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 383] <... futex resumed>) = 1 [pid 383] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 383] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 382] <... futex resumed>) = 0 [pid 382] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 383] <... futex resumed>) = 1 [pid 383] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 383] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 383] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 382] <... futex resumed>) = 0 [pid 382] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 383] <... futex resumed>) = 1 [pid 383] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 383] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 382] <... futex resumed>) = 0 [pid 382] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 383] <... futex resumed>) = 1 [pid 383] memfd_create("syzkaller", 0) = 5 [pid 383] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 383] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 383] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 383] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 383] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 383] ioctl(6, LOOP_CLR_FD) = 0 [pid 383] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 383] close(6) = 0 [pid 383] close(5) = 0 [pid 383] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 383] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 382] <... futex resumed>) = 0 [pid 382] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 383] <... futex resumed>) = 0 [pid 382] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 383] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 383] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 383] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 382] <... futex resumed>) = 0 [pid 382] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 383] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 383] fchmodat(AT_FDCWD, 0x200000000300, 0177520 [pid 382] <... futex resumed>) = 0 [pid 383] <... fchmodat resumed>) = 0 [pid 382] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 383] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 383] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 382] <... futex resumed>) = 0 [pid 382] exit_group(0) = ? [pid 383] <... futex resumed>) = ? [pid 383] +++ exited with 0 +++ [pid 382] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=382, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 384 rt_sigprocmask(SIG_SETMASK, []ci2-android-6-1/strace-static-x86_64: Process 384 attached , NULL, 8) = 0 [pid 384] set_robust_list(0x5555721e1760, 24) = 0 [pid 384] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 384] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 384] setpgid(0, 0) = 0 [pid 384] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 384] write(3, "1000", 4) = 4 [pid 384] close(3) = 0 [pid 384] write(1, "executing program\n", 18) = 18 executing program [pid 384] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 384] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 384] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 384] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 384] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 384] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 384] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[385]}, 88) = 385 [pid 384] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 384] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 384] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 385 attached [pid 385] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 385] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 385] memfd_create("syzkaller", 0) = 3 [pid 385] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 385] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 385] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 385] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 385] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 385] ioctl(4, LOOP_CLR_FD) = 0 [pid 385] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 385] close(4) = 0 [pid 385] close(3) = 0 [pid 385] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 384] <... futex resumed>) = 0 [pid 384] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 384] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 385] <... futex resumed>) = 1 [pid 385] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 385] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 384] <... futex resumed>) = 0 [pid 384] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 384] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 385] <... futex resumed>) = 1 [pid 385] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 385] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 384] <... futex resumed>) = 0 [pid 384] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 384] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 385] <... futex resumed>) = 1 [pid 385] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 385] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 384] <... futex resumed>) = 0 [pid 384] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 384] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 385] <... futex resumed>) = 1 [pid 385] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 385] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 384] <... futex resumed>) = 0 [pid 384] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 384] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 385] <... futex resumed>) = 1 [pid 385] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 385] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 385] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 384] <... futex resumed>) = 0 [pid 384] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 384] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 385] <... futex resumed>) = 1 [pid 385] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 385] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 384] <... futex resumed>) = 0 [pid 384] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 384] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 385] <... futex resumed>) = 1 [pid 385] memfd_create("syzkaller", 0) = 5 [pid 385] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 385] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 385] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 385] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 385] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 385] ioctl(6, LOOP_CLR_FD) = 0 [pid 385] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 385] close(6) = 0 [pid 385] close(5) = 0 [pid 385] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 384] <... futex resumed>) = 0 [pid 384] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 384] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 385] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 385] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 384] <... futex resumed>) = 0 [pid 384] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 384] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 385] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 385] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 384] <... futex resumed>) = 0 [pid 385] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 384] exit_group(0) = ? [pid 385] <... futex resumed>) = ? [pid 385] +++ exited with 0 +++ [pid 384] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=384, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 386 attached [pid 386] set_robust_list(0x5555721e1760, 24 [pid 305] <... clone resumed>, child_tidptr=0x5555721e1750) = 386 [pid 386] <... set_robust_list resumed>) = 0 [pid 386] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 386] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 386] setpgid(0, 0) = 0 [pid 386] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 386] write(3, "1000", 4) = 4 [pid 386] close(3) = 0 executing program [pid 386] write(1, "executing program\n", 18) = 18 [pid 386] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 386] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 386] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 386] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 386] <... mmap resumed>) = 0x7f1cd63c0000 [pid 386] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 386] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 386] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[387]}, 88) = 387 [pid 386] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 386] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 386] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 387 attached [pid 387] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 387] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 387] memfd_create("syzkaller", 0) = 3 [pid 387] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 387] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 387] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 387] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 387] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 387] ioctl(4, LOOP_CLR_FD) = 0 [pid 387] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 387] close(4) = 0 [pid 387] close(3) = 0 [pid 387] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 386] <... futex resumed>) = 0 [pid 386] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 386] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 387] <... futex resumed>) = 1 [pid 387] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 387] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 386] <... futex resumed>) = 0 [pid 386] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 386] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 387] <... futex resumed>) = 1 [pid 387] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 387] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 386] <... futex resumed>) = 0 [pid 386] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 386] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 387] <... futex resumed>) = 1 [pid 387] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 387] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 386] <... futex resumed>) = 0 [pid 386] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 386] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 387] <... futex resumed>) = 1 [pid 387] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 387] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 386] <... futex resumed>) = 0 [pid 386] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 386] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 387] <... futex resumed>) = 1 [pid 387] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 387] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 387] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 386] <... futex resumed>) = 0 [pid 386] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 386] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 387] <... futex resumed>) = 1 [pid 387] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 387] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 386] <... futex resumed>) = 0 [pid 386] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 386] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 387] <... futex resumed>) = 1 [pid 387] memfd_create("syzkaller", 0) = 5 [pid 387] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 387] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 387] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 387] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 387] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 387] ioctl(6, LOOP_CLR_FD) = 0 [pid 387] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 387] close(6) = 0 [pid 387] close(5) = 0 [pid 387] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 387] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 386] <... futex resumed>) = 0 [pid 386] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 386] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 387] <... futex resumed>) = 0 [pid 387] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 387] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 386] <... futex resumed>) = 0 [pid 386] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 386] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 387] <... futex resumed>) = 1 [pid 387] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 387] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 386] <... futex resumed>) = 0 [pid 386] exit_group(0 [pid 387] ???( [pid 386] <... exit_group resumed>) = ? [pid 387] <... ??? resumed>) = ? [pid 387] +++ exited with 0 +++ [pid 386] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=386, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 388 ci2-android-6-1/strace-static-x86_64: Process 388 attached [pid 388] set_robust_list(0x5555721e1760, 24) = 0 [pid 388] rt_sigprocmask(SIG_SETMASK, [] [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 388] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 388] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 388] setpgid(0, 0) = 0 [pid 388] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 388] <... openat resumed>) = 3 [pid 388] write(3, "1000", 4) = 4 [pid 388] close(3) = 0 [pid 388] write(1, "executing program\n", 18) = 18 [pid 388] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 executing program [pid 388] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 388] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 388] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 388] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 388] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 388] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[389]}, 88) = 389 [pid 388] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 388] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 388] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 389 attached [pid 389] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 389] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 389] memfd_create("syzkaller", 0) = 3 [pid 389] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 389] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 389] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 389] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 389] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 389] ioctl(4, LOOP_CLR_FD) = 0 [pid 389] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 389] close(4) = 0 [pid 389] close(3) = 0 [pid 389] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 388] <... futex resumed>) = 0 [pid 388] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 388] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 389] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 389] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 388] <... futex resumed>) = 0 [pid 388] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 388] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 389] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 389] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 388] <... futex resumed>) = 0 [pid 388] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 388] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 389] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 389] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 388] <... futex resumed>) = 0 [pid 388] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 388] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 389] <... futex resumed>) = 1 [pid 389] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 389] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 388] <... futex resumed>) = 0 [pid 388] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 388] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 389] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 389] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 389] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 388] <... futex resumed>) = 0 [pid 388] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 388] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 389] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 389] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 388] <... futex resumed>) = 0 [pid 388] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 388] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 389] memfd_create("syzkaller", 0) = 5 [pid 389] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 389] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 389] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 389] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 389] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 389] ioctl(6, LOOP_CLR_FD) = 0 [pid 389] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 389] close(6) = 0 [pid 389] close(5) = 0 [pid 389] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 388] <... futex resumed>) = 0 [pid 388] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 388] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 389] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 389] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 388] <... futex resumed>) = 0 [pid 388] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 388] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 389] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 389] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 388] <... futex resumed>) = 0 [pid 389] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 388] exit_group(0 [pid 389] <... futex resumed>) = ? [pid 388] <... exit_group resumed>) = ? [pid 389] +++ exited with 0 +++ [pid 388] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=388, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 390 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 390 attached [pid 390] set_robust_list(0x5555721e1760, 24) = 0 [pid 390] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 390] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 390] setpgid(0, 0) = 0 [pid 390] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 390] write(3, "1000", 4) = 4 [pid 390] close(3) = 0 [pid 390] write(1, "executing program\n", 18) = 18 [pid 390] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 390] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 390] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 390] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 390] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 executing program [pid 390] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 390] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[391]}, 88) = 391 [pid 390] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 390] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 390] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 391 attached [pid 391] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 391] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 391] memfd_create("syzkaller", 0) = 3 [pid 391] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 391] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 391] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 391] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 391] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 391] ioctl(4, LOOP_CLR_FD) = 0 [pid 391] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 391] close(4) = 0 [pid 391] close(3) = 0 [pid 391] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 390] <... futex resumed>) = 0 [pid 390] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 390] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 391] <... futex resumed>) = 1 [pid 391] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 391] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 390] <... futex resumed>) = 0 [pid 390] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 390] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 391] <... futex resumed>) = 1 [pid 391] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 391] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 390] <... futex resumed>) = 0 [pid 390] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 390] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 391] <... futex resumed>) = 1 [pid 391] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 391] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 390] <... futex resumed>) = 0 [pid 390] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 390] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 391] <... futex resumed>) = 1 [pid 391] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 391] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 390] <... futex resumed>) = 0 [pid 390] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 390] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 391] <... futex resumed>) = 1 [pid 391] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 391] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 391] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 390] <... futex resumed>) = 0 [pid 390] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 390] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 391] <... futex resumed>) = 1 [pid 391] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 391] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 390] <... futex resumed>) = 0 [pid 390] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 390] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 391] <... futex resumed>) = 1 [pid 391] memfd_create("syzkaller", 0) = 5 [pid 391] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 391] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 391] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 391] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 391] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 391] ioctl(6, LOOP_CLR_FD) = 0 [pid 391] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 391] close(6) = 0 [pid 391] close(5) = 0 [pid 391] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 390] <... futex resumed>) = 0 [pid 390] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 390] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 391] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 391] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 390] <... futex resumed>) = 0 [pid 390] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 390] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 391] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 391] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 390] <... futex resumed>) = 0 [pid 391] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 390] exit_group(0) = ? [pid 391] <... futex resumed>) = ? [pid 391] +++ exited with 0 +++ [pid 390] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=390, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 392 attached , child_tidptr=0x5555721e1750) = 392 [pid 392] set_robust_list(0x5555721e1760, 24 [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 392] <... set_robust_list resumed>) = 0 [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 392] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 392] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 392] setpgid(0, 0) = 0 [pid 392] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 392] write(3, "1000", 4) = 4 [pid 392] close(3) = 0 [pid 392] write(1, "executing program\n", 18) = 18 executing program [pid 392] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 392] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 392] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 392] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 392] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 392] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 392] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 393 attached [pid 393] set_robust_list(0x7f1cd63e09a0, 24 [pid 392] <... clone3 resumed> => {parent_tid=[393]}, 88) = 393 [pid 393] <... set_robust_list resumed>) = 0 [pid 392] rt_sigprocmask(SIG_SETMASK, [] [pid 393] rt_sigprocmask(SIG_SETMASK, [] [pid 392] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 393] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 392] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 393] memfd_create("syzkaller", 0 [pid 392] <... futex resumed>) = 0 [pid 392] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 393] <... memfd_create resumed>) = 3 [pid 393] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 393] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 393] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 393] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 393] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 393] ioctl(4, LOOP_CLR_FD) = 0 [pid 393] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 393] close(4) = 0 [pid 393] close(3) = 0 [pid 393] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 392] <... futex resumed>) = 0 [pid 393] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL [pid 392] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 393] <... quotactl resumed>) = -1 EFAULT (Bad address) [pid 392] <... futex resumed>) = 0 [pid 393] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 392] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 393] <... futex resumed>) = 0 [pid 392] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 393] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 392] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 393] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 392] <... futex resumed>) = 0 [pid 393] openat(AT_FDCWD, ".", O_RDONLY [pid 392] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 393] <... openat resumed>) = 3 [pid 393] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 392] <... futex resumed>) = 0 [pid 393] symlinkat("\x2e\x02", 3, "./file0" [pid 392] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 393] <... symlinkat resumed>) = -1 EEXIST (File exists) [pid 392] <... futex resumed>) = 0 [pid 393] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 392] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 393] <... futex resumed>) = 0 [pid 392] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 393] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 392] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 393] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 392] <... futex resumed>) = 0 [pid 393] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM [pid 392] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 393] <... mprotect resumed>) = 0 [pid 393] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 392] <... futex resumed>) = 0 [pid 393] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 392] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 393] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 392] <... futex resumed>) = 0 [pid 393] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 392] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 393] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 393] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 392] <... futex resumed>) = 0 [pid 393] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0 [pid 392] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 392] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 393] <... mmap resumed>) = 0x200000000000 [pid 393] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 392] <... futex resumed>) = 0 [pid 393] memfd_create("syzkaller", 0 [pid 392] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 393] <... memfd_create resumed>) = 5 [pid 392] <... futex resumed>) = 0 [pid 393] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 392] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 393] <... mmap resumed>) = 0x7f1ccdfc0000 [pid 393] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 393] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 393] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 393] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 393] ioctl(6, LOOP_CLR_FD) = 0 [pid 393] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 393] close(6) = 0 [pid 393] close(5) = 0 [pid 393] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 392] <... futex resumed>) = 0 [pid 393] chdir(0x200000000040 [pid 392] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 393] <... chdir resumed>) = -1 ENOENT (No such file or directory) [pid 392] <... futex resumed>) = 0 [pid 393] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 392] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 393] <... futex resumed>) = 0 [pid 392] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 393] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 392] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 393] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 392] <... futex resumed>) = 0 [pid 393] fchmodat(AT_FDCWD, 0x200000000300, 0177520 [pid 392] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 393] <... fchmodat resumed>) = 0 [pid 393] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 392] <... futex resumed>) = 0 [pid 393] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 392] exit_group(0 [pid 393] <... futex resumed>) = ? [pid 392] <... exit_group resumed>) = ? [pid 393] +++ exited with 0 +++ [pid 392] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=392, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 394 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 394 attached [pid 394] set_robust_list(0x5555721e1760, 24) = 0 [pid 394] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 394] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 394] setpgid(0, 0) = 0 [pid 394] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 394] write(3, "1000", 4) = 4 [pid 394] close(3) = 0 [pid 394] write(1, "executing program\n", 18) = 18 executing program [pid 394] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 394] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 394] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 394] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 394] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 394] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 394] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[395]}, 88) = 395 [pid 394] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 394] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 394] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 395 attached [pid 395] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 395] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 395] memfd_create("syzkaller", 0) = 3 [pid 395] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 395] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 395] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 395] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 395] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 395] ioctl(4, LOOP_CLR_FD) = 0 [pid 395] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 395] close(4) = 0 [pid 395] close(3) = 0 [pid 395] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 394] <... futex resumed>) = 0 [pid 394] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 394] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 395] <... futex resumed>) = 1 [pid 395] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 395] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 394] <... futex resumed>) = 0 [pid 394] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 394] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 395] <... futex resumed>) = 1 [pid 395] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 395] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 394] <... futex resumed>) = 0 [pid 394] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 394] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 395] <... futex resumed>) = 1 [pid 395] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 395] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 394] <... futex resumed>) = 0 [pid 394] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 394] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 395] <... futex resumed>) = 1 [pid 395] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 395] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 394] <... futex resumed>) = 0 [pid 394] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 394] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 395] <... futex resumed>) = 1 [pid 395] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 395] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 395] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 394] <... futex resumed>) = 0 [pid 394] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 394] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 395] <... futex resumed>) = 1 [pid 395] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 395] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 394] <... futex resumed>) = 0 [pid 394] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 394] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 395] memfd_create("syzkaller", 0) = 5 [pid 395] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 395] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 395] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 395] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 395] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 395] ioctl(6, LOOP_CLR_FD) = 0 [pid 395] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 395] close(6) = 0 [pid 395] close(5) = 0 [pid 395] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 394] <... futex resumed>) = 0 [pid 394] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 394] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 395] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 395] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 394] <... futex resumed>) = 0 [pid 394] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 394] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 395] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 395] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 394] <... futex resumed>) = 0 [pid 394] exit_group(0) = ? [pid 395] +++ exited with 0 +++ [pid 394] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=394, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 396 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 396 attached [pid 396] set_robust_list(0x5555721e1760, 24) = 0 [pid 396] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 396] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 396] setpgid(0, 0) = 0 [pid 396] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 396] write(3, "1000", 4) = 4 [pid 396] close(3) = 0 executing program [pid 396] write(1, "executing program\n", 18) = 18 [pid 396] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 396] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 396] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 396] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 396] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 396] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 396] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[397]}, 88) = 397 [pid 396] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 396] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 396] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 397 attached [pid 397] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 397] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 397] memfd_create("syzkaller", 0) = 3 [pid 397] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 397] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 397] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 397] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 397] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 397] ioctl(4, LOOP_CLR_FD) = 0 [pid 397] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 397] close(4) = 0 [pid 397] close(3) = 0 [pid 397] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 396] <... futex resumed>) = 0 [pid 396] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 396] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 397] <... futex resumed>) = 1 [pid 397] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 397] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 396] <... futex resumed>) = 0 [pid 396] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 396] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 397] <... futex resumed>) = 1 [pid 397] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 397] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 396] <... futex resumed>) = 0 [pid 396] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 396] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 397] <... futex resumed>) = 1 [pid 397] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 397] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 396] <... futex resumed>) = 0 [pid 396] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 396] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 397] <... futex resumed>) = 1 [pid 397] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 397] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 396] <... futex resumed>) = 0 [pid 396] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 396] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 397] <... futex resumed>) = 1 [pid 397] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 397] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 397] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 396] <... futex resumed>) = 0 [pid 396] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 396] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 397] <... futex resumed>) = 1 [pid 397] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 397] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 396] <... futex resumed>) = 0 [pid 396] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 396] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 397] <... futex resumed>) = 1 [pid 397] memfd_create("syzkaller", 0) = 5 [pid 397] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 397] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 397] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 397] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 397] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 397] ioctl(6, LOOP_CLR_FD) = 0 [pid 397] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 397] close(6) = 0 [pid 397] close(5) = 0 [pid 397] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 396] <... futex resumed>) = 0 [pid 396] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 396] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 397] <... futex resumed>) = 1 [pid 397] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 397] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 396] <... futex resumed>) = 0 [pid 396] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 396] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 397] <... futex resumed>) = 1 [pid 397] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 397] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 396] <... futex resumed>) = 0 [pid 396] exit_group(0) = ? [pid 397] <... futex resumed>) = ? [pid 397] +++ exited with 0 +++ [pid 396] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=396, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 398 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 398 attached [pid 398] set_robust_list(0x5555721e1760, 24) = 0 [pid 398] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 398] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 398] setpgid(0, 0) = 0 [pid 398] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 398] write(3, "1000", 4) = 4 [pid 398] close(3) = 0 executing program [pid 398] write(1, "executing program\n", 18) = 18 [pid 398] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 398] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 398] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 398] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 398] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 398] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 398] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[399]}, 88) = 399 [pid 398] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 398] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 398] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 399 attached [pid 399] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 399] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 399] memfd_create("syzkaller", 0) = 3 [pid 399] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 399] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 399] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 399] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 399] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 399] ioctl(4, LOOP_CLR_FD) = 0 [pid 399] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 399] close(4) = 0 [pid 399] close(3) = 0 [pid 399] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 398] <... futex resumed>) = 0 [pid 398] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 398] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 399] <... futex resumed>) = 1 [pid 399] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 399] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 398] <... futex resumed>) = 0 [pid 398] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 398] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 399] <... futex resumed>) = 1 [pid 399] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 399] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 398] <... futex resumed>) = 0 [pid 398] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 398] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 399] <... futex resumed>) = 1 [pid 399] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 399] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 398] <... futex resumed>) = 0 [pid 398] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 398] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 399] <... futex resumed>) = 1 [pid 399] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 399] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 398] <... futex resumed>) = 0 [pid 398] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 398] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 399] <... futex resumed>) = 1 [pid 399] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 399] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 399] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 398] <... futex resumed>) = 0 [pid 398] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 398] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 399] <... futex resumed>) = 1 [pid 399] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 399] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 398] <... futex resumed>) = 0 [pid 398] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 398] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 399] <... futex resumed>) = 1 [pid 399] memfd_create("syzkaller", 0) = 5 [pid 399] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 399] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 399] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 399] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 399] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 399] ioctl(6, LOOP_CLR_FD) = 0 [pid 399] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 399] close(6) = 0 [pid 399] close(5) = 0 [pid 399] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 398] <... futex resumed>) = 0 [pid 398] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 398] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 399] <... futex resumed>) = 1 [pid 399] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 399] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 398] <... futex resumed>) = 0 [pid 398] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 398] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 399] <... futex resumed>) = 1 [pid 399] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 399] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 398] <... futex resumed>) = 0 [pid 398] exit_group(0) = ? [pid 399] <... futex resumed>) = ? [pid 399] +++ exited with 0 +++ [pid 398] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=398, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 400 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 400 attached [pid 400] set_robust_list(0x5555721e1760, 24) = 0 [pid 400] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 400] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 400] setpgid(0, 0) = 0 [pid 400] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 400] write(3, "1000", 4) = 4 [pid 400] close(3) = 0 [pid 400] write(1, "executing program\n", 18) = 18 executing program [pid 400] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 400] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 400] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 400] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 400] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 400] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 400] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 401 attached => {parent_tid=[401]}, 88) = 401 [pid 400] rt_sigprocmask(SIG_SETMASK, [] [pid 401] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 400] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 401] rt_sigprocmask(SIG_SETMASK, [] [pid 400] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 401] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 400] <... futex resumed>) = 0 [pid 400] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 401] memfd_create("syzkaller", 0) = 3 [pid 401] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 401] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 401] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 401] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 401] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 401] ioctl(4, LOOP_CLR_FD) = 0 [pid 401] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 401] close(4) = 0 [pid 401] close(3) = 0 [pid 401] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 400] <... futex resumed>) = 0 [pid 400] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 400] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 401] <... futex resumed>) = 1 [pid 401] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 401] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 400] <... futex resumed>) = 0 [pid 400] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 400] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 401] <... futex resumed>) = 1 [pid 401] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 401] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 400] <... futex resumed>) = 0 [pid 400] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 400] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 401] <... futex resumed>) = 1 [pid 401] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 401] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 400] <... futex resumed>) = 0 [pid 400] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 400] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 401] <... futex resumed>) = 1 [pid 401] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 401] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 400] <... futex resumed>) = 0 [pid 400] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 400] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 401] <... futex resumed>) = 1 [pid 401] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 401] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 401] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 400] <... futex resumed>) = 0 [pid 400] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 400] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 401] <... futex resumed>) = 1 [pid 401] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 401] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 400] <... futex resumed>) = 0 [pid 400] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 400] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 401] <... futex resumed>) = 1 [pid 401] memfd_create("syzkaller", 0) = 5 [pid 401] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 401] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 401] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 401] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 401] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 401] ioctl(6, LOOP_CLR_FD) = 0 [pid 401] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 401] close(6) = 0 [pid 401] close(5) = 0 [pid 401] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 400] <... futex resumed>) = 0 [pid 400] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 400] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 401] <... futex resumed>) = 1 [pid 401] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 401] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 400] <... futex resumed>) = 0 [pid 400] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 400] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 401] <... futex resumed>) = 1 [pid 401] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 401] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 400] <... futex resumed>) = 0 [pid 400] exit_group(0) = ? [pid 401] <... futex resumed>) = ? [pid 401] +++ exited with 0 +++ [pid 400] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=400, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 402 ci2-android-6-1/strace-static-x86_64: Process 402 attached [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 402] set_robust_list(0x5555721e1760, 24 [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 402] <... set_robust_list resumed>) = 0 [pid 402] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 402] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 402] setpgid(0, 0) = 0 [pid 402] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 402] write(3, "1000", 4) = 4 [pid 402] close(3) = 0 executing program [pid 402] write(1, "executing program\n", 18) = 18 [pid 402] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 402] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 402] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 402] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 402] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 402] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 402] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 403 attached => {parent_tid=[403]}, 88) = 403 [pid 403] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 402] rt_sigprocmask(SIG_SETMASK, [] [pid 403] rt_sigprocmask(SIG_SETMASK, [] [pid 402] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 402] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 403] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 402] <... futex resumed>) = 0 [pid 402] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 403] memfd_create("syzkaller", 0) = 3 [pid 403] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 403] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 403] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 403] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 403] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 403] ioctl(4, LOOP_CLR_FD) = 0 [pid 403] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 403] close(4) = 0 [pid 403] close(3) = 0 [pid 403] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] <... futex resumed>) = 0 [pid 402] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 402] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 403] <... futex resumed>) = 1 [pid 403] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 403] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 402] <... futex resumed>) = 0 [pid 402] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 402] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 403] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 403] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 402] <... futex resumed>) = 0 [pid 403] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 402] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 402] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 403] <... futex resumed>) = 0 [pid 403] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 403] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] <... futex resumed>) = 0 [pid 402] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 402] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 403] <... futex resumed>) = 1 [pid 403] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 403] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 402] <... futex resumed>) = 0 [pid 402] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 402] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 403] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 403] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 403] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 402] <... futex resumed>) = 0 [pid 402] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 402] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 403] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 403] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 402] <... futex resumed>) = 0 [pid 402] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 402] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 403] memfd_create("syzkaller", 0) = 5 [pid 403] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 403] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 403] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 403] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 403] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 403] ioctl(6, LOOP_CLR_FD) = 0 [pid 403] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 403] close(6) = 0 [pid 403] close(5) = 0 [pid 403] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 402] <... futex resumed>) = 0 [pid 402] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 402] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 403] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 403] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 402] <... futex resumed>) = 0 [pid 402] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 402] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 403] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 403] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 402] <... futex resumed>) = 0 [pid 402] exit_group(0 [pid 403] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 402] <... exit_group resumed>) = ? [pid 403] <... futex resumed>) = ? [pid 403] +++ exited with 0 +++ [pid 402] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=402, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 404 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 404 attached [pid 404] set_robust_list(0x5555721e1760, 24) = 0 [pid 404] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 404] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 404] setpgid(0, 0) = 0 [pid 404] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 404] write(3, "1000", 4) = 4 [pid 404] close(3) = 0 [pid 404] write(1, "executing program\n", 18) = 18 executing program [pid 404] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 404] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 404] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 404] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 404] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 404] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 404] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[405]}, 88) = 405 [pid 404] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 404] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 404] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 405 attached [pid 405] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 405] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 405] memfd_create("syzkaller", 0) = 3 [pid 405] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 405] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 405] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 405] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 405] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 405] ioctl(4, LOOP_CLR_FD) = 0 [pid 405] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 405] close(4) = 0 [pid 405] close(3) = 0 [pid 405] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 404] <... futex resumed>) = 0 [pid 404] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 404] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 405] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 405] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 404] <... futex resumed>) = 0 [pid 404] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 404] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 405] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 405] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 404] <... futex resumed>) = 0 [pid 404] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 404] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 405] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 405] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 404] <... futex resumed>) = 0 [pid 404] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 404] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 405] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 405] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 404] <... futex resumed>) = 0 [pid 404] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 404] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 405] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 405] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 405] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 404] <... futex resumed>) = 0 [pid 404] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 404] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 405] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 405] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 404] <... futex resumed>) = 0 [pid 404] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 404] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 405] memfd_create("syzkaller", 0) = 5 [pid 405] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 405] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 405] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 405] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 405] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 405] ioctl(6, LOOP_CLR_FD) = 0 [pid 405] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 405] close(6) = 0 [pid 405] close(5) = 0 [pid 405] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 405] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 404] <... futex resumed>) = 0 [pid 404] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 404] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 405] <... futex resumed>) = 0 [pid 405] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 405] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 404] <... futex resumed>) = 0 [pid 404] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 404] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 405] <... futex resumed>) = 1 [pid 405] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 405] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 404] <... futex resumed>) = 0 [pid 404] exit_group(0 [pid 405] <... futex resumed>) = ? [pid 404] <... exit_group resumed>) = ? [pid 405] +++ exited with 0 +++ [pid 404] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=404, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 406 ci2-android-6-1/strace-static-x86_64: Process 406 attached [pid 305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 406] set_robust_list(0x5555721e1760, 24) = 0 [pid 406] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 406] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 406] setpgid(0, 0) = 0 [pid 406] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 406] write(3, "1000", 4) = 4 [pid 406] close(3) = 0 [pid 406] write(1, "executing program\n", 18) = 18 executing program [pid 406] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 406] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 406] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 406] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 406] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 406] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 406] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[407]}, 88) = 407 [pid 406] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 406] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 406] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 407 attached [pid 407] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 407] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 407] memfd_create("syzkaller", 0) = 3 [pid 407] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 407] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 407] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 407] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 407] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 407] ioctl(4, LOOP_CLR_FD) = 0 [pid 407] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 407] close(4) = 0 [pid 407] close(3) = 0 [pid 407] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 406] <... futex resumed>) = 0 [pid 406] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 406] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 407] <... futex resumed>) = 1 [pid 407] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 407] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 406] <... futex resumed>) = 0 [pid 406] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 406] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 407] <... futex resumed>) = 1 [pid 407] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 407] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 406] <... futex resumed>) = 0 [pid 406] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 406] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 407] <... futex resumed>) = 1 [pid 407] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 407] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 406] <... futex resumed>) = 0 [pid 406] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 406] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 407] <... futex resumed>) = 1 [pid 407] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 407] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 406] <... futex resumed>) = 0 [pid 406] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 406] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 407] <... futex resumed>) = 1 [pid 407] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 407] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 407] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 406] <... futex resumed>) = 0 [pid 406] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 406] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 407] <... futex resumed>) = 1 [pid 407] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 407] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 406] <... futex resumed>) = 0 [pid 406] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 406] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 407] <... futex resumed>) = 1 [pid 407] memfd_create("syzkaller", 0) = 5 [pid 407] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 407] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 407] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 407] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 407] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 407] ioctl(6, LOOP_CLR_FD) = 0 [pid 407] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 407] close(6) = 0 [pid 407] close(5) = 0 [pid 407] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 406] <... futex resumed>) = 0 [pid 406] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 406] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 407] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 407] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 406] <... futex resumed>) = 0 [pid 406] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 406] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 407] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 407] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 406] <... futex resumed>) = 0 [pid 406] exit_group(0) = ? [pid 407] +++ exited with 0 +++ [pid 406] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=406, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 408 attached [pid 408] set_robust_list(0x5555721e1760, 24) = 0 [pid 305] <... clone resumed>, child_tidptr=0x5555721e1750) = 408 [pid 408] rt_sigprocmask(SIG_SETMASK, [] [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 408] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 408] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 408] setpgid(0, 0) = 0 [pid 408] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 408] write(3, "1000", 4) = 4 [pid 408] close(3) = 0 [pid 408] write(1, "executing program\n", 18) = 18 executing program [pid 408] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 408] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 408] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 408] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 408] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 408] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 408] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 409 attached [pid 409] set_robust_list(0x7f1cd63e09a0, 24 [pid 408] <... clone3 resumed> => {parent_tid=[409]}, 88) = 409 [pid 409] <... set_robust_list resumed>) = 0 [pid 408] rt_sigprocmask(SIG_SETMASK, [] [pid 409] rt_sigprocmask(SIG_SETMASK, [] [pid 408] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 409] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 408] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 409] memfd_create("syzkaller", 0 [pid 408] <... futex resumed>) = 0 [pid 408] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 409] <... memfd_create resumed>) = 3 [pid 409] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 409] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 409] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 409] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 409] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 409] ioctl(4, LOOP_CLR_FD) = 0 [pid 409] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 409] close(4) = 0 [pid 409] close(3) = 0 [pid 409] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 409] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 408] <... futex resumed>) = 0 [pid 408] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 408] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 409] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 409] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 409] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 408] <... futex resumed>) = 0 [pid 408] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 408] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 409] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 409] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 408] <... futex resumed>) = 0 [pid 408] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 408] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 409] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 409] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 408] <... futex resumed>) = 0 [pid 408] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 408] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 409] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 409] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 408] <... futex resumed>) = 0 [pid 408] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 408] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 409] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 409] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 409] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 408] <... futex resumed>) = 0 [pid 408] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 408] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 409] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 409] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 408] <... futex resumed>) = 0 [pid 408] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 408] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 409] memfd_create("syzkaller", 0) = 5 [pid 409] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 409] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 409] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 409] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 409] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 409] ioctl(6, LOOP_CLR_FD) = 0 [pid 409] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 409] close(6) = 0 [pid 409] close(5) = 0 [pid 409] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 408] <... futex resumed>) = 0 [pid 408] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 408] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 409] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 409] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 408] <... futex resumed>) = 0 [pid 408] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 408] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 409] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 409] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 408] <... futex resumed>) = 0 [pid 408] exit_group(0) = ? [pid 409] +++ exited with 0 +++ [pid 408] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=408, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 410 ci2-android-6-1/strace-static-x86_64: Process 410 attached [pid 410] set_robust_list(0x5555721e1760, 24) = 0 [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 410] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 410] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 410] setpgid(0, 0) = 0 [pid 410] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 410] write(3, "1000", 4) = 4 [pid 410] close(3) = 0 [pid 410] write(1, "executing program\n", 18) = 18 executing program [pid 410] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 410] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 410] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 410] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 410] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 410] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 410] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[411]}, 88) = 411 [pid 410] rt_sigprocmask(SIG_SETMASK, [] [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 410] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 410] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 410] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 411 attached [pid 411] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 411] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 411] memfd_create("syzkaller", 0) = 3 [pid 411] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 411] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 411] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 411] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 411] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 411] ioctl(4, LOOP_CLR_FD) = 0 [pid 411] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 411] close(4) = 0 [pid 411] close(3) = 0 [pid 411] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 410] <... futex resumed>) = 0 [pid 410] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 410] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 411] <... futex resumed>) = 1 [pid 411] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 411] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 410] <... futex resumed>) = 0 [pid 410] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 410] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 411] <... futex resumed>) = 1 [pid 411] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 411] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 410] <... futex resumed>) = 0 [pid 410] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 410] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 411] <... futex resumed>) = 1 [pid 411] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 411] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 410] <... futex resumed>) = 0 [pid 410] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 410] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 411] <... futex resumed>) = 1 [pid 411] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 411] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 410] <... futex resumed>) = 0 [pid 410] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 410] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 411] <... futex resumed>) = 1 [pid 411] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 411] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 411] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 410] <... futex resumed>) = 0 [pid 410] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 410] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 411] <... futex resumed>) = 1 [pid 411] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 411] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 410] <... futex resumed>) = 0 [pid 410] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 410] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 411] <... futex resumed>) = 1 [pid 411] memfd_create("syzkaller", 0) = 5 [pid 411] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 411] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 411] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 411] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 411] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 411] ioctl(6, LOOP_CLR_FD) = 0 [pid 411] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 411] close(6) = 0 [pid 411] close(5) = 0 [pid 411] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 410] <... futex resumed>) = 0 [pid 410] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 410] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 411] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 411] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 410] <... futex resumed>) = 0 [pid 410] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 410] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 411] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 411] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 410] <... futex resumed>) = 0 [pid 411] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 410] exit_group(0) = ? [pid 411] <... futex resumed>) = ? [pid 411] +++ exited with 0 +++ [pid 410] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=410, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 412 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 412 attached [pid 412] set_robust_list(0x5555721e1760, 24) = 0 [pid 412] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 412] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 412] setpgid(0, 0) = 0 [pid 412] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 412] write(3, "1000", 4) = 4 [pid 412] close(3) = 0 [pid 412] write(1, "executing program\n", 18) = 18 executing program [pid 412] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 412] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 412] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 412] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 412] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 412] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 412] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[413]}, 88) = 413 [pid 412] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 412] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 412] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 413 attached [pid 413] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 413] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 413] memfd_create("syzkaller", 0) = 3 [pid 413] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 413] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 413] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 413] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 413] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 413] ioctl(4, LOOP_CLR_FD) = 0 [pid 413] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 413] close(4) = 0 [pid 413] close(3) = 0 [pid 413] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 412] <... futex resumed>) = 0 [pid 412] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 412] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 413] <... futex resumed>) = 1 [pid 413] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 413] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 412] <... futex resumed>) = 0 [pid 412] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 412] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 413] <... futex resumed>) = 1 [pid 413] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 413] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 412] <... futex resumed>) = 0 [pid 412] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 412] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 413] <... futex resumed>) = 1 [pid 413] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 413] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 412] <... futex resumed>) = 0 [pid 412] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 412] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 413] <... futex resumed>) = 1 [pid 413] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 413] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 412] <... futex resumed>) = 0 [pid 412] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 412] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 413] <... futex resumed>) = 1 [pid 413] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 413] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 413] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 412] <... futex resumed>) = 0 [pid 412] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 412] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 413] <... futex resumed>) = 1 [pid 413] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 413] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 412] <... futex resumed>) = 0 [pid 412] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 412] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 413] <... futex resumed>) = 1 [pid 413] memfd_create("syzkaller", 0) = 5 [pid 413] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 413] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 413] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 413] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 413] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 413] ioctl(6, LOOP_CLR_FD) = 0 [pid 413] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 413] close(6) = 0 [pid 413] close(5) = 0 [pid 413] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 412] <... futex resumed>) = 0 [pid 412] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 412] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 413] <... futex resumed>) = 1 [pid 413] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 413] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 412] <... futex resumed>) = 0 [pid 412] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 412] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 413] <... futex resumed>) = 1 [pid 413] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 413] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 412] <... futex resumed>) = 0 [pid 412] exit_group(0 [pid 413] <... futex resumed>) = 1 [pid 412] <... exit_group resumed>) = ? [pid 413] +++ exited with 0 +++ [pid 412] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=412, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 414 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 414 attached [pid 414] set_robust_list(0x5555721e1760, 24) = 0 [pid 414] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 414] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 414] setpgid(0, 0) = 0 [pid 414] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 414] write(3, "1000", 4) = 4 [pid 414] close(3) = 0 [pid 414] write(1, "executing program\n", 18) = 18 executing program [pid 414] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 414] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 414] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 414] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 414] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 414] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 414] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 415 attached => {parent_tid=[415]}, 88) = 415 [pid 415] set_robust_list(0x7f1cd63e09a0, 24 [pid 414] rt_sigprocmask(SIG_SETMASK, [] [pid 415] <... set_robust_list resumed>) = 0 [pid 415] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 415] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 414] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 414] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 415] <... futex resumed>) = 0 [pid 415] memfd_create("syzkaller", 0 [pid 414] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 415] <... memfd_create resumed>) = 3 [pid 415] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 415] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 415] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 415] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 415] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 415] ioctl(4, LOOP_CLR_FD) = 0 [pid 415] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 415] close(4) = 0 [pid 415] close(3) = 0 [pid 415] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 414] <... futex resumed>) = 0 [pid 414] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 414] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 415] <... futex resumed>) = 1 [pid 415] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 415] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 414] <... futex resumed>) = 0 [pid 414] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 414] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 415] <... futex resumed>) = 1 [pid 415] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 415] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 414] <... futex resumed>) = 0 [pid 414] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 414] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 415] <... futex resumed>) = 1 [pid 415] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 415] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 414] <... futex resumed>) = 0 [pid 414] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 414] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 415] <... futex resumed>) = 1 [pid 415] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 415] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 414] <... futex resumed>) = 0 [pid 414] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 414] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 415] <... futex resumed>) = 1 [pid 415] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 415] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 415] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 414] <... futex resumed>) = 0 [pid 414] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 414] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 415] <... futex resumed>) = 1 [pid 415] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 415] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 414] <... futex resumed>) = 0 [pid 414] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 414] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 415] <... futex resumed>) = 1 [pid 415] memfd_create("syzkaller", 0) = 5 [pid 415] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 415] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 415] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 415] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 415] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 415] ioctl(6, LOOP_CLR_FD) = 0 [pid 415] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 415] close(6) = 0 [pid 415] close(5) = 0 [pid 415] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 414] <... futex resumed>) = 0 [pid 414] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 414] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 415] <... futex resumed>) = 1 [pid 415] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 415] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 414] <... futex resumed>) = 0 [pid 414] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 414] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 415] <... futex resumed>) = 1 [pid 415] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 415] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 414] <... futex resumed>) = 0 [pid 414] exit_group(0) = ? [pid 415] <... futex resumed>) = ? [pid 415] +++ exited with 0 +++ [pid 414] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=414, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 416 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 416 attached [pid 416] set_robust_list(0x5555721e1760, 24) = 0 [pid 416] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 416] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 416] setpgid(0, 0) = 0 [pid 416] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 416] write(3, "1000", 4) = 4 [pid 416] close(3) = 0 [pid 416] write(1, "executing program\n", 18) = 18 executing program [pid 416] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 416] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 416] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 416] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 416] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 416] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 416] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 417 attached => {parent_tid=[417]}, 88) = 417 [pid 417] set_robust_list(0x7f1cd63e09a0, 24 [pid 416] rt_sigprocmask(SIG_SETMASK, [] [pid 417] <... set_robust_list resumed>) = 0 [pid 416] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 417] rt_sigprocmask(SIG_SETMASK, [] [pid 416] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 417] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 416] <... futex resumed>) = 0 [pid 416] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 417] memfd_create("syzkaller", 0) = 3 [pid 417] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 417] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 417] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 417] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 417] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 417] ioctl(4, LOOP_CLR_FD) = 0 [pid 417] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 417] close(4) = 0 [pid 417] close(3) = 0 [pid 417] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 417] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 416] <... futex resumed>) = 0 [pid 416] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 416] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 417] <... futex resumed>) = 0 [pid 417] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 417] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 416] <... futex resumed>) = 0 [pid 416] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 416] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 417] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 417] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 416] <... futex resumed>) = 0 [pid 416] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 416] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 417] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 417] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 416] <... futex resumed>) = 0 [pid 416] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 416] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 417] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 417] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 416] <... futex resumed>) = 0 [pid 416] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 416] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 417] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 417] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 417] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 416] <... futex resumed>) = 0 [pid 416] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 416] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 417] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 417] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 416] <... futex resumed>) = 0 [pid 416] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 416] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 417] memfd_create("syzkaller", 0) = 5 [pid 417] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 417] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 417] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 417] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 417] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 417] ioctl(6, LOOP_CLR_FD) = 0 [pid 417] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 417] close(6) = 0 [pid 417] close(5) = 0 [pid 417] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 416] <... futex resumed>) = 0 [pid 416] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 416] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 417] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 417] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 416] <... futex resumed>) = 0 [pid 416] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 416] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 417] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 417] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 416] <... futex resumed>) = 0 [pid 416] exit_group(0) = ? [pid 417] +++ exited with 0 +++ [pid 416] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=416, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 418 ci2-android-6-1/strace-static-x86_64: Process 418 attached [pid 305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 418] set_robust_list(0x5555721e1760, 24) = 0 [pid 418] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 418] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 418] setpgid(0, 0) = 0 [pid 418] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 418] write(3, "1000", 4) = 4 [pid 418] close(3) = 0 executing program [pid 418] write(1, "executing program\n", 18) = 18 [pid 418] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 418] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 418] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 418] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 418] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 418] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 418] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[419]}, 88) = 419 [pid 418] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 418] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 418] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 419 attached [pid 419] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 419] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 419] memfd_create("syzkaller", 0) = 3 [pid 419] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 419] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 419] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 419] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 419] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 419] ioctl(4, LOOP_CLR_FD) = 0 [pid 419] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 419] close(4) = 0 [pid 419] close(3) = 0 [pid 419] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 418] <... futex resumed>) = 0 [pid 418] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 418] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 419] <... futex resumed>) = 1 [pid 419] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 419] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 418] <... futex resumed>) = 0 [pid 418] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 418] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 419] <... futex resumed>) = 1 [pid 419] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 419] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 418] <... futex resumed>) = 0 [pid 418] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 418] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 419] <... futex resumed>) = 1 [pid 419] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 419] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 418] <... futex resumed>) = 0 [pid 418] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 418] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 419] <... futex resumed>) = 1 [pid 419] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 419] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 418] <... futex resumed>) = 0 [pid 418] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 418] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 419] <... futex resumed>) = 1 [pid 419] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 419] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 419] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 418] <... futex resumed>) = 0 [pid 418] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 418] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 419] <... futex resumed>) = 1 [pid 419] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 419] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 418] <... futex resumed>) = 0 [pid 418] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 418] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 419] memfd_create("syzkaller", 0) = 5 [pid 419] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 419] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 419] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 419] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 419] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 419] ioctl(6, LOOP_CLR_FD) = 0 [pid 419] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 419] close(6) = 0 [pid 419] close(5) = 0 [pid 419] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 418] <... futex resumed>) = 0 [pid 418] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 418] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 419] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 419] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 418] <... futex resumed>) = 0 [pid 418] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 418] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 419] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 419] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 418] <... futex resumed>) = 0 [pid 418] exit_group(0) = ? [pid 419] +++ exited with 0 +++ [pid 418] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=418, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 420 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 420 attached [pid 420] set_robust_list(0x5555721e1760, 24) = 0 [pid 420] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 420] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 420] setpgid(0, 0) = 0 [pid 420] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 420] write(3, "1000", 4) = 4 [pid 420] close(3) = 0 [pid 420] write(1, "executing program\n", 18) = 18 [pid 420] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 executing program [pid 420] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 420] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 420] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 420] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 420] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 420] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 421 attached => {parent_tid=[421]}, 88) = 421 [pid 420] rt_sigprocmask(SIG_SETMASK, [] [pid 421] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 420] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 421] rt_sigprocmask(SIG_SETMASK, [] [pid 420] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 421] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 420] <... futex resumed>) = 0 [pid 420] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 421] memfd_create("syzkaller", 0) = 3 [pid 421] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 421] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 421] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 421] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 421] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 421] ioctl(4, LOOP_CLR_FD) = 0 [pid 421] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 421] close(4) = 0 [pid 421] close(3) = 0 [pid 421] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 420] <... futex resumed>) = 0 [pid 420] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 420] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 421] <... futex resumed>) = 1 [pid 421] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 421] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 420] <... futex resumed>) = 0 [pid 420] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 420] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 421] <... futex resumed>) = 1 [pid 421] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 421] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 420] <... futex resumed>) = 0 [pid 420] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 420] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 421] <... futex resumed>) = 1 [pid 421] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 421] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 420] <... futex resumed>) = 0 [pid 420] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 420] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 421] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 421] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 420] <... futex resumed>) = 0 [pid 420] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 420] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 421] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 421] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 421] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 420] <... futex resumed>) = 0 [pid 420] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 420] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 421] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 421] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 420] <... futex resumed>) = 0 [pid 420] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 420] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 421] memfd_create("syzkaller", 0) = 5 [pid 421] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 421] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 421] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 421] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 421] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 421] ioctl(6, LOOP_CLR_FD) = 0 [pid 421] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 421] close(6) = 0 [pid 421] close(5) = 0 [pid 421] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 421] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 420] <... futex resumed>) = 0 [pid 420] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 421] <... futex resumed>) = 0 [pid 421] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 421] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 421] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 420] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 420] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 421] <... futex resumed>) = 0 [pid 420] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 421] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 421] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 421] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 420] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 420] exit_group(0) = ? [pid 421] <... futex resumed>) = ? [pid 421] +++ exited with 0 +++ [pid 420] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=420, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 422 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 422 attached [pid 422] set_robust_list(0x5555721e1760, 24) = 0 [pid 422] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 422] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 422] setpgid(0, 0) = 0 [pid 422] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 422] write(3, "1000", 4) = 4 [pid 422] close(3) = 0 [pid 422] write(1, "executing program\n", 18) = 18 executing program [pid 422] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 422] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 422] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 422] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 422] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 422] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 422] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 423 attached => {parent_tid=[423]}, 88) = 423 [pid 422] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 422] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 422] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 423] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 423] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 423] memfd_create("syzkaller", 0) = 3 [pid 423] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 423] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 423] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 423] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 423] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 423] ioctl(4, LOOP_CLR_FD) = 0 [pid 423] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 423] close(4) = 0 [pid 423] close(3) = 0 [pid 423] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 422] <... futex resumed>) = 0 [pid 422] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 422] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 423] <... futex resumed>) = 1 [pid 423] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 423] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 422] <... futex resumed>) = 0 [pid 422] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 422] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 423] <... futex resumed>) = 1 [pid 423] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 423] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 422] <... futex resumed>) = 0 [pid 422] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 422] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 423] <... futex resumed>) = 1 [pid 423] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 423] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 422] <... futex resumed>) = 0 [pid 422] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 422] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 423] <... futex resumed>) = 1 [pid 423] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 423] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 422] <... futex resumed>) = 0 [pid 422] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 422] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 423] <... futex resumed>) = 1 [pid 423] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 423] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 423] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 422] <... futex resumed>) = 0 [pid 422] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 422] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 423] <... futex resumed>) = 1 [pid 423] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 423] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 422] <... futex resumed>) = 0 [pid 422] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 422] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 423] <... futex resumed>) = 1 [pid 423] memfd_create("syzkaller", 0) = 5 [pid 423] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 423] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 423] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 423] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 423] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 423] ioctl(6, LOOP_CLR_FD) = 0 [pid 423] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 423] close(6) = 0 [pid 423] close(5) = 0 [pid 423] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 422] <... futex resumed>) = 0 [pid 423] chdir(0x200000000040 [pid 422] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 423] <... chdir resumed>) = -1 ENOENT (No such file or directory) [pid 422] <... futex resumed>) = 0 [pid 423] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 422] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 423] <... futex resumed>) = 0 [pid 422] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 423] fchmodat(AT_FDCWD, 0x200000000300, 0177520 [pid 422] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 423] <... fchmodat resumed>) = 0 [pid 423] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 422] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 423] <... futex resumed>) = 0 [pid 422] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 423] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 422] exit_group(0 [pid 423] <... futex resumed>) = ? [pid 422] <... exit_group resumed>) = ? [pid 423] +++ exited with 0 +++ [pid 422] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=422, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 424 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 424 attached [pid 424] set_robust_list(0x5555721e1760, 24) = 0 [pid 424] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 424] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 424] setpgid(0, 0) = 0 [pid 424] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 424] write(3, "1000", 4) = 4 [pid 424] close(3) = 0 [pid 424] write(1, "executing program\n", 18) = 18 [pid 424] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 424] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 424] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 executing program [pid 424] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 424] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 424] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 424] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 425 attached => {parent_tid=[425]}, 88) = 425 [pid 424] rt_sigprocmask(SIG_SETMASK, [] [pid 425] set_robust_list(0x7f1cd63e09a0, 24 [pid 424] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 425] <... set_robust_list resumed>) = 0 [pid 424] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 425] rt_sigprocmask(SIG_SETMASK, [] [pid 424] <... futex resumed>) = 0 [pid 425] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 424] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 425] memfd_create("syzkaller", 0) = 3 [pid 425] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 425] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 425] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 425] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 425] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 425] ioctl(4, LOOP_CLR_FD) = 0 [pid 425] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 425] close(4) = 0 [pid 425] close(3) = 0 [pid 425] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 424] <... futex resumed>) = 0 [pid 424] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 424] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 425] <... futex resumed>) = 1 [pid 425] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 425] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 424] <... futex resumed>) = 0 [pid 424] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 424] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 425] <... futex resumed>) = 1 [pid 425] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 425] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 424] <... futex resumed>) = 0 [pid 424] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 424] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 425] <... futex resumed>) = 1 [pid 425] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 425] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 424] <... futex resumed>) = 0 [pid 424] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 424] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 425] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 425] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 424] <... futex resumed>) = 0 [pid 424] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 424] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 425] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 425] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 425] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 424] <... futex resumed>) = 0 [pid 424] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 424] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 425] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 425] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 424] <... futex resumed>) = 0 [pid 424] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 424] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 425] memfd_create("syzkaller", 0) = 5 [pid 425] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 425] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 425] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 425] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 425] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 425] ioctl(6, LOOP_CLR_FD) = 0 [pid 425] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 425] close(6) = 0 [pid 425] close(5) = 0 [pid 425] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 424] <... futex resumed>) = 0 [pid 424] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 424] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 425] <... futex resumed>) = 1 [pid 425] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 425] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 424] <... futex resumed>) = 0 [pid 424] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 424] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 425] <... futex resumed>) = 1 [pid 425] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 425] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 424] <... futex resumed>) = 0 [pid 424] exit_group(0) = ? [pid 425] <... futex resumed>) = ? [pid 425] +++ exited with 0 +++ [pid 424] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=424, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 426 ci2-android-6-1/strace-static-x86_64: Process 426 attached [pid 426] set_robust_list(0x5555721e1760, 24) = 0 [pid 426] rt_sigprocmask(SIG_SETMASK, [] [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 426] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 426] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 426] <... prctl resumed>) = 0 [pid 426] setpgid(0, 0) = 0 [pid 426] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 426] write(3, "1000", 4) = 4 [pid 426] close(3) = 0 [pid 426] write(1, "executing program\n", 18) = 18 [pid 426] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 executing program [pid 426] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 426] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 426] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 426] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 426] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 426] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[427]}, 88) = 427 [pid 426] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 426] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 426] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 427 attached [pid 427] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 427] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 427] memfd_create("syzkaller", 0) = 3 [pid 427] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 427] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 427] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 427] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 427] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 427] ioctl(4, LOOP_CLR_FD) = 0 [pid 427] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 427] close(4) = 0 [pid 427] close(3) = 0 [pid 427] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 426] <... futex resumed>) = 0 [pid 426] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 426] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 427] <... futex resumed>) = 1 [pid 427] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 427] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 426] <... futex resumed>) = 0 [pid 426] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 426] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 427] <... futex resumed>) = 1 [pid 427] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 427] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 426] <... futex resumed>) = 0 [pid 426] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 426] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 427] <... futex resumed>) = 1 [pid 427] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 427] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 426] <... futex resumed>) = 0 [pid 426] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 426] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 427] <... futex resumed>) = 1 [pid 427] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 427] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 426] <... futex resumed>) = 0 [pid 426] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 426] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 427] <... futex resumed>) = 1 [pid 427] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 427] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 427] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 426] <... futex resumed>) = 0 [pid 426] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 426] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 427] <... futex resumed>) = 1 [pid 427] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 427] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 426] <... futex resumed>) = 0 [pid 426] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 426] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 427] <... futex resumed>) = 1 [pid 427] memfd_create("syzkaller", 0) = 5 [pid 427] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 427] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 427] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 427] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 427] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 427] ioctl(6, LOOP_CLR_FD) = 0 [pid 427] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 427] close(6) = 0 [pid 427] close(5) = 0 [pid 427] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 426] <... futex resumed>) = 0 [pid 426] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 426] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 427] <... futex resumed>) = 1 [pid 427] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 427] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 426] <... futex resumed>) = 0 [pid 426] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 426] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 427] <... futex resumed>) = 1 [pid 427] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 427] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 426] <... futex resumed>) = 0 [pid 427] <... futex resumed>) = 1 [pid 426] exit_group(0 [pid 427] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL) = ? [pid 426] <... exit_group resumed>) = ? [pid 427] +++ exited with 0 +++ [pid 426] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=426, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 428 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 428 attached [pid 428] set_robust_list(0x5555721e1760, 24) = 0 [pid 428] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 428] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 428] setpgid(0, 0) = 0 [pid 428] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 428] write(3, "1000", 4) = 4 [pid 428] close(3) = 0 executing program [pid 428] write(1, "executing program\n", 18) = 18 [pid 428] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 428] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 428] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 428] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 428] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 428] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 428] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[429]}, 88) = 429 ci2-android-6-1/strace-static-x86_64: Process 429 attached [pid 429] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 429] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 429] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 428] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 428] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 429] <... futex resumed>) = 0 [pid 429] memfd_create("syzkaller", 0) = 3 [pid 429] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 428] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 429] <... mmap resumed>) = 0x7f1ccdfc0000 [pid 429] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 429] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 429] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 429] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 429] ioctl(4, LOOP_CLR_FD) = 0 [pid 429] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 429] close(4) = 0 [pid 429] close(3) = 0 [pid 429] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 429] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 428] <... futex resumed>) = 0 [pid 428] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 428] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 429] <... futex resumed>) = 0 [pid 429] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 429] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 428] <... futex resumed>) = 0 [pid 428] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 428] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 429] <... futex resumed>) = 1 [pid 429] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 429] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 428] <... futex resumed>) = 0 [pid 428] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 428] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 429] <... futex resumed>) = 1 [pid 429] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 429] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 428] <... futex resumed>) = 0 [pid 428] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 428] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 429] <... futex resumed>) = 1 [pid 429] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 429] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 428] <... futex resumed>) = 0 [pid 428] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 428] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 429] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 429] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 429] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 428] <... futex resumed>) = 0 [pid 428] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 428] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 429] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 429] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 428] <... futex resumed>) = 0 [pid 428] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 429] memfd_create("syzkaller", 0 [pid 428] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 429] <... memfd_create resumed>) = 5 [pid 429] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 429] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 429] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 429] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 429] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 429] ioctl(6, LOOP_CLR_FD) = 0 [pid 429] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 429] close(6) = 0 [pid 429] close(5) = 0 [pid 429] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 428] <... futex resumed>) = 0 [pid 428] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 428] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 429] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 429] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 428] <... futex resumed>) = 0 [pid 428] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 428] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 429] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 429] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 428] <... futex resumed>) = 0 [pid 428] exit_group(0) = ? [pid 429] +++ exited with 0 +++ [pid 428] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=428, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 430 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 430 attached [pid 430] set_robust_list(0x5555721e1760, 24) = 0 [pid 430] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 430] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 430] setpgid(0, 0) = 0 [pid 430] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 430] write(3, "1000", 4) = 4 [pid 430] close(3) = 0 [pid 430] write(1, "executing program\n", 18) = 18 executing program [pid 430] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 430] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 430] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 430] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 430] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 430] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 430] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[431]}, 88) = 431 [pid 430] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 430] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 430] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 431 attached [pid 431] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 431] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 431] memfd_create("syzkaller", 0) = 3 [pid 431] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 431] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 431] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 431] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 431] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 431] ioctl(4, LOOP_CLR_FD) = 0 [pid 431] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 431] close(4) = 0 [pid 431] close(3) = 0 [pid 431] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 430] <... futex resumed>) = 0 [pid 431] <... futex resumed>) = 1 [pid 430] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL [pid 430] <... futex resumed>) = 0 [pid 430] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] <... quotactl resumed>) = -1 EFAULT (Bad address) [pid 431] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 430] <... futex resumed>) = 0 [pid 430] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 430] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 431] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 430] <... futex resumed>) = 0 [pid 431] <... futex resumed>) = 1 [pid 431] symlinkat("\x2e\x02", 3, "./file0" [pid 430] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 431] <... symlinkat resumed>) = -1 EEXIST (File exists) [pid 430] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 430] <... futex resumed>) = 0 [pid 430] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 430] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 431] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 430] <... futex resumed>) = 0 [pid 430] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 431] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 430] <... futex resumed>) = 0 [pid 430] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] <... openat resumed>) = 4 [pid 431] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 430] <... futex resumed>) = 0 [pid 430] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 430] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 431] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 430] <... futex resumed>) = 0 [pid 430] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 430] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 431] memfd_create("syzkaller", 0) = 5 [pid 431] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 431] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 431] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 431] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 431] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 431] ioctl(6, LOOP_CLR_FD) = 0 [pid 431] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 431] close(6) = 0 [pid 431] close(5) = 0 [pid 431] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 430] <... futex resumed>) = 0 [pid 430] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 430] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] <... futex resumed>) = 1 [pid 431] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 431] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 430] <... futex resumed>) = 0 [pid 430] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 430] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] <... futex resumed>) = 1 [pid 431] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 431] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 430] <... futex resumed>) = 0 [pid 430] exit_group(0) = ? [pid 431] <... futex resumed>) = ? [pid 431] +++ exited with 0 +++ [pid 430] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=430, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 432 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 432 attached [pid 432] set_robust_list(0x5555721e1760, 24) = 0 [pid 432] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 432] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 432] setpgid(0, 0) = 0 [pid 432] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 432] write(3, "1000", 4) = 4 [pid 432] close(3) = 0 [pid 432] write(1, "executing program\n", 18) = 18 [pid 432] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 executing program [pid 432] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 432] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 432] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 432] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 432] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[433]}, 88) = 433 [pid 432] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 432] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 433 attached [pid 433] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 433] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 433] memfd_create("syzkaller", 0) = 3 [pid 433] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 433] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 433] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 433] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 433] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 433] ioctl(4, LOOP_CLR_FD) = 0 [pid 433] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 433] close(4) = 0 [pid 433] close(3) = 0 [pid 433] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 432] <... futex resumed>) = 0 [pid 432] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 433] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 433] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 432] <... futex resumed>) = 0 [pid 432] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 433] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 433] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 432] <... futex resumed>) = 0 [pid 432] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 433] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 433] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 432] <... futex resumed>) = 0 [pid 432] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 433] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 433] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 432] <... futex resumed>) = 0 [pid 432] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 433] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 433] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 433] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 432] <... futex resumed>) = 0 [pid 432] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 433] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 433] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 432] <... futex resumed>) = 0 [pid 432] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 433] memfd_create("syzkaller", 0) = 5 [pid 433] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 433] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 433] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 433] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 433] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 433] ioctl(6, LOOP_CLR_FD) = 0 [pid 433] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 433] close(6) = 0 [pid 433] close(5) = 0 [pid 433] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... futex resumed>) = 0 [pid 432] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 433] <... futex resumed>) = 1 [pid 433] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 433] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... futex resumed>) = 0 [pid 432] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 433] <... futex resumed>) = 1 [pid 433] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 433] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... futex resumed>) = 0 [pid 432] exit_group(0) = ? [pid 433] <... futex resumed>) = ? [pid 433] +++ exited with 0 +++ [pid 432] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=432, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 434 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 434 attached [pid 434] set_robust_list(0x5555721e1760, 24) = 0 [pid 434] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 434] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 434] setpgid(0, 0) = 0 [pid 434] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 434] write(3, "1000", 4) = 4 [pid 434] close(3) = 0 executing program [pid 434] write(1, "executing program\n", 18) = 18 [pid 434] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 434] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 434] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 434] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 434] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 434] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 434] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[435]}, 88) = 435 [pid 434] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 434] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 434] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 435 attached [pid 435] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 435] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 435] memfd_create("syzkaller", 0) = 3 [pid 435] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 435] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 435] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 435] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 435] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 435] ioctl(4, LOOP_CLR_FD) = 0 [pid 435] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 435] close(4) = 0 [pid 435] close(3) = 0 [pid 435] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 434] <... futex resumed>) = 0 [pid 435] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL [pid 434] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 435] <... quotactl resumed>) = -1 EFAULT (Bad address) [pid 434] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 435] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 434] <... futex resumed>) = 0 [pid 435] openat(AT_FDCWD, ".", O_RDONLY [pid 434] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 435] <... openat resumed>) = 3 [pid 435] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 434] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 435] <... futex resumed>) = 0 [pid 434] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 435] symlinkat("\x2e\x02", 3, "./file0" [pid 434] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 434] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 435] <... symlinkat resumed>) = -1 EEXIST (File exists) [pid 435] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 434] <... futex resumed>) = 0 [pid 435] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM [pid 434] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 434] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 435] <... mprotect resumed>) = 0 [pid 435] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 434] <... futex resumed>) = 0 [pid 434] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 434] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 435] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 435] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 435] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 434] <... futex resumed>) = 0 [pid 434] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 434] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 435] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 435] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 434] <... futex resumed>) = 0 [pid 434] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 434] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 435] memfd_create("syzkaller", 0) = 5 [pid 435] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 435] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 435] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 435] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 435] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 435] ioctl(6, LOOP_CLR_FD) = 0 [pid 435] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 435] close(6) = 0 [pid 435] close(5) = 0 [pid 435] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 434] <... futex resumed>) = 0 [pid 435] chdir(0x200000000040 [pid 434] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 435] <... chdir resumed>) = -1 ENOENT (No such file or directory) [pid 435] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 435] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 434] <... futex resumed>) = 1 [pid 434] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 435] <... futex resumed>) = 0 [pid 434] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 435] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 434] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 434] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 435] <... futex resumed>) = 0 [pid 435] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 435] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 434] <... futex resumed>) = 0 [pid 435] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 434] exit_group(0) = ? [pid 435] <... futex resumed>) = ? [pid 435] +++ exited with 0 +++ [pid 434] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=434, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 436 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 436 attached [pid 436] set_robust_list(0x5555721e1760, 24) = 0 [pid 436] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 436] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 436] setpgid(0, 0) = 0 [pid 436] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 436] write(3, "1000", 4) = 4 [pid 436] close(3) = 0 [pid 436] write(1, "executing program\n", 18) = 18 executing program [pid 436] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 436] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 436] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 436] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 436] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 436] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 436] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[437]}, 88) = 437 [pid 436] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 436] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 436] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 437 attached [pid 437] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 437] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 437] memfd_create("syzkaller", 0) = 3 [pid 437] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 437] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 437] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 437] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 437] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 437] ioctl(4, LOOP_CLR_FD) = 0 [pid 437] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 437] close(4) = 0 [pid 437] close(3) = 0 [pid 437] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 436] <... futex resumed>) = 0 [pid 436] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 436] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 437] <... futex resumed>) = 1 [pid 437] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 437] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 436] <... futex resumed>) = 0 [pid 436] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 436] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 437] <... futex resumed>) = 1 [pid 437] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 437] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 436] <... futex resumed>) = 0 [pid 436] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 436] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 437] <... futex resumed>) = 1 [pid 437] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 437] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 436] <... futex resumed>) = 0 [pid 436] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 436] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 437] <... futex resumed>) = 1 [pid 437] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 437] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 436] <... futex resumed>) = 0 [pid 436] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 436] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 437] <... futex resumed>) = 1 [pid 437] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 437] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 437] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 436] <... futex resumed>) = 0 [pid 436] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 436] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 437] <... futex resumed>) = 1 [pid 437] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 437] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 436] <... futex resumed>) = 0 [pid 436] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 436] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 437] memfd_create("syzkaller", 0) = 5 [pid 437] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 437] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 437] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 437] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 437] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 437] ioctl(6, LOOP_CLR_FD) = 0 [pid 437] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 437] close(6) = 0 [pid 437] close(5) = 0 [pid 437] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 436] <... futex resumed>) = 0 [pid 436] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 436] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 437] <... futex resumed>) = 1 [pid 437] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 437] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 436] <... futex resumed>) = 0 [pid 436] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 436] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 437] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 437] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 436] <... futex resumed>) = 0 [pid 436] exit_group(0) = ? [pid 437] +++ exited with 0 +++ [pid 436] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=436, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 438 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 438 attached [pid 438] set_robust_list(0x5555721e1760, 24) = 0 [pid 438] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 438] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 438] setpgid(0, 0) = 0 [pid 438] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 438] write(3, "1000", 4) = 4 [pid 438] close(3) = 0 executing program [pid 438] write(1, "executing program\n", 18) = 18 [pid 438] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 438] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 438] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 438] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 438] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 438] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 438] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[439]}, 88) = 439 [pid 438] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 438] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 438] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 439 attached [pid 439] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 439] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 439] memfd_create("syzkaller", 0) = 3 [pid 439] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 439] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 439] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 439] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 439] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 439] ioctl(4, LOOP_CLR_FD) = 0 [pid 439] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 439] close(4) = 0 [pid 439] close(3) = 0 [pid 439] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] <... futex resumed>) = 0 [pid 438] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 438] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 439] <... futex resumed>) = 1 [pid 439] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 439] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] <... futex resumed>) = 0 [pid 438] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 438] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 439] <... futex resumed>) = 1 [pid 439] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 439] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] <... futex resumed>) = 0 [pid 438] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 438] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 439] <... futex resumed>) = 1 [pid 439] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 439] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] <... futex resumed>) = 0 [pid 438] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 438] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 439] <... futex resumed>) = 1 [pid 439] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 439] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] <... futex resumed>) = 0 [pid 438] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 438] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 439] <... futex resumed>) = 1 [pid 439] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 439] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 439] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] <... futex resumed>) = 0 [pid 438] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 438] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 439] <... futex resumed>) = 1 [pid 439] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 439] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] <... futex resumed>) = 0 [pid 438] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 438] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 439] <... futex resumed>) = 1 [pid 439] memfd_create("syzkaller", 0) = 5 [pid 439] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 439] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 439] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 439] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 439] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 439] ioctl(6, LOOP_CLR_FD) = 0 [pid 439] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 439] close(6) = 0 [pid 439] close(5) = 0 [pid 439] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] <... futex resumed>) = 0 [pid 438] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 438] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 439] <... futex resumed>) = 1 [pid 439] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 439] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] <... futex resumed>) = 0 [pid 438] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 438] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 439] <... futex resumed>) = 1 [pid 439] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 439] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] <... futex resumed>) = 0 [pid 438] exit_group(0) = ? [pid 439] <... futex resumed>) = ? [pid 439] +++ exited with 0 +++ [pid 438] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=438, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 440 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 440 attached [pid 440] set_robust_list(0x5555721e1760, 24) = 0 [pid 440] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 440] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 440] setpgid(0, 0) = 0 [pid 440] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 440] write(3, "1000", 4) = 4 [pid 440] close(3) = 0 [pid 440] write(1, "executing program\n", 18) = 18 executing program [pid 440] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 440] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 440] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 440] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 440] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 440] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 440] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[441]}, 88) = 441 [pid 440] rt_sigprocmask(SIG_SETMASK, []ci2-android-6-1/strace-static-x86_64: Process 441 attached , NULL, 8) = 0 [pid 441] set_robust_list(0x7f1cd63e09a0, 24 [pid 440] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 441] <... set_robust_list resumed>) = 0 [pid 440] <... futex resumed>) = 0 [pid 441] rt_sigprocmask(SIG_SETMASK, [] [pid 440] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 441] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 441] memfd_create("syzkaller", 0) = 3 [pid 441] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 441] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 441] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 441] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 441] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 441] ioctl(4, LOOP_CLR_FD) = 0 [pid 441] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 441] close(4) = 0 [pid 441] close(3) = 0 [pid 441] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 440] <... futex resumed>) = 0 [pid 440] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 440] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 441] <... futex resumed>) = 1 [pid 441] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 441] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 440] <... futex resumed>) = 0 [pid 440] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 440] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 441] <... futex resumed>) = 1 [pid 441] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 441] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 440] <... futex resumed>) = 0 [pid 440] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 440] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 441] <... futex resumed>) = 1 [pid 441] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 441] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 440] <... futex resumed>) = 0 [pid 440] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 440] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 441] <... futex resumed>) = 1 [pid 441] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 441] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 440] <... futex resumed>) = 0 [pid 440] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 440] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 441] <... futex resumed>) = 1 [pid 441] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 441] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 441] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 440] <... futex resumed>) = 0 [pid 440] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 440] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 441] <... futex resumed>) = 1 [pid 441] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 441] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 440] <... futex resumed>) = 0 [pid 440] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 440] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 441] <... futex resumed>) = 1 [pid 441] memfd_create("syzkaller", 0) = 5 [pid 441] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 441] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 441] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 441] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 441] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 441] ioctl(6, LOOP_CLR_FD) = 0 [pid 441] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 441] close(6) = 0 [pid 441] close(5) = 0 [pid 441] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 440] <... futex resumed>) = 0 [pid 440] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 440] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 441] <... futex resumed>) = 1 [pid 441] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 441] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 440] <... futex resumed>) = 0 [pid 440] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 440] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 441] <... futex resumed>) = 1 [pid 441] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 441] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 440] <... futex resumed>) = 0 [pid 440] exit_group(0) = ? [pid 441] <... futex resumed>) = ? [pid 441] +++ exited with 0 +++ [pid 440] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=440, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 442 attached [pid 442] set_robust_list(0x5555721e1760, 24) = 0 [pid 305] <... clone resumed>, child_tidptr=0x5555721e1750) = 442 [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 442] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 442] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 442] setpgid(0, 0) = 0 [pid 442] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 442] write(3, "1000", 4) = 4 [pid 442] close(3) = 0 executing program [pid 442] write(1, "executing program\n", 18) = 18 [pid 442] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 442] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 442] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 442] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 442] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 442] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 442] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 443 attached [pid 443] set_robust_list(0x7f1cd63e09a0, 24 [pid 442] <... clone3 resumed> => {parent_tid=[443]}, 88) = 443 [pid 443] <... set_robust_list resumed>) = 0 [pid 443] rt_sigprocmask(SIG_SETMASK, [] [pid 442] rt_sigprocmask(SIG_SETMASK, [] [pid 443] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 442] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 443] memfd_create("syzkaller", 0 [pid 442] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 443] <... memfd_create resumed>) = 3 [pid 442] <... futex resumed>) = 0 [pid 443] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 442] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 443] <... mmap resumed>) = 0x7f1ccdfc0000 [pid 443] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 443] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 443] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 443] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 443] ioctl(4, LOOP_CLR_FD) = 0 [pid 443] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 443] close(4) = 0 [pid 443] close(3) = 0 [pid 443] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 442] <... futex resumed>) = 0 [pid 442] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 442] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 443] <... futex resumed>) = 1 [pid 443] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 443] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 442] <... futex resumed>) = 0 [pid 443] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 442] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 443] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 442] <... futex resumed>) = 0 [pid 443] openat(AT_FDCWD, ".", O_RDONLY [pid 442] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 443] <... openat resumed>) = 3 [pid 443] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 442] <... futex resumed>) = 0 [pid 443] symlinkat("\x2e\x02", 3, "./file0" [pid 442] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 443] <... symlinkat resumed>) = -1 EEXIST (File exists) [pid 442] <... futex resumed>) = 0 [pid 443] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 442] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 443] <... futex resumed>) = 0 [pid 442] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 443] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 442] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 443] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM [pid 442] <... futex resumed>) = 0 [pid 442] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 443] <... mprotect resumed>) = 0 [pid 443] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 442] <... futex resumed>) = 0 [pid 443] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 442] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 443] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 442] <... futex resumed>) = 0 [pid 443] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 442] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 443] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 443] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 442] <... futex resumed>) = 0 [pid 443] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0 [pid 442] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 442] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 443] <... mmap resumed>) = 0x200000000000 [pid 443] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 442] <... futex resumed>) = 0 [pid 443] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 442] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 443] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 442] <... futex resumed>) = 0 [pid 443] memfd_create("syzkaller", 0) = 5 [pid 442] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 443] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 443] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 443] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 443] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 443] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 443] ioctl(6, LOOP_CLR_FD) = 0 [pid 443] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 443] close(6) = 0 [pid 443] close(5) = 0 [pid 443] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 443] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 442] <... futex resumed>) = 0 [pid 442] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 443] <... futex resumed>) = 0 [pid 442] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 443] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 443] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 442] <... futex resumed>) = 0 [pid 442] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 442] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 443] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 443] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 442] <... futex resumed>) = 0 [pid 442] exit_group(0) = ? [pid 443] +++ exited with 0 +++ [pid 442] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=442, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 444 attached [pid 444] set_robust_list(0x5555721e1760, 24) = 0 [pid 305] <... clone resumed>, child_tidptr=0x5555721e1750) = 444 [pid 444] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 444] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 444] setpgid(0, 0) = 0 [pid 444] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 444] write(3, "1000", 4) = 4 [pid 444] close(3) = 0 [pid 444] write(1, "executing program\n", 18) = 18 executing program [pid 444] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 444] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 444] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 444] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 444] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 444] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 444] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[445]}, 88) = 445 [pid 444] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 444] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 444] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 445 attached [pid 445] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 445] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 445] memfd_create("syzkaller", 0 [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 445] <... memfd_create resumed>) = 3 [pid 445] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 445] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 445] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 445] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 445] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 445] ioctl(4, LOOP_CLR_FD) = 0 [pid 445] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 445] close(4) = 0 [pid 445] close(3) = 0 [pid 445] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 444] <... futex resumed>) = 0 [pid 444] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 444] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 445] <... futex resumed>) = 1 [pid 445] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 445] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 444] <... futex resumed>) = 0 [pid 444] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 444] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 445] <... futex resumed>) = 1 [pid 445] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 445] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 444] <... futex resumed>) = 0 [pid 444] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 444] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 445] <... futex resumed>) = 1 [pid 445] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 445] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 444] <... futex resumed>) = 0 [pid 444] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 444] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 445] <... futex resumed>) = 1 [pid 445] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 445] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 444] <... futex resumed>) = 0 [pid 444] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 444] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 445] <... futex resumed>) = 1 [pid 445] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 445] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 445] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 444] <... futex resumed>) = 0 [pid 444] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 444] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 445] <... futex resumed>) = 1 [pid 445] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 445] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 444] <... futex resumed>) = 0 [pid 444] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 444] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 445] <... futex resumed>) = 1 [pid 445] memfd_create("syzkaller", 0) = 5 [pid 445] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 445] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 445] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 445] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 445] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 445] ioctl(6, LOOP_CLR_FD) = 0 [pid 445] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 445] close(6) = 0 [pid 445] close(5) = 0 [pid 445] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 444] <... futex resumed>) = 0 [pid 444] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 444] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 445] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 445] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 444] <... futex resumed>) = 0 [pid 444] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 444] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 445] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 445] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 444] <... futex resumed>) = 0 [pid 444] exit_group(0) = ? [pid 445] +++ exited with 0 +++ [pid 444] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=444, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=0} --- openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 446 ci2-android-6-1/strace-static-x86_64: Process 446 attached [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 446] set_robust_list(0x5555721e1760, 24 [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 446] <... set_robust_list resumed>) = 0 [pid 446] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 446] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 446] setpgid(0, 0) = 0 [pid 446] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 446] write(3, "1000", 4) = 4 [pid 446] close(3) = 0 [pid 446] write(1, "executing program\n", 18) = 18 executing program [pid 446] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 446] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 446] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 446] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 446] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 446] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 446] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 447 attached => {parent_tid=[447]}, 88) = 447 [pid 447] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 446] rt_sigprocmask(SIG_SETMASK, [] [pid 447] rt_sigprocmask(SIG_SETMASK, [] [pid 446] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 447] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 446] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 447] memfd_create("syzkaller", 0 [pid 446] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 447] <... memfd_create resumed>) = 3 [pid 447] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 447] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 447] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 447] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 447] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 447] ioctl(4, LOOP_CLR_FD) = 0 [pid 447] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 447] close(4) = 0 [pid 447] close(3) = 0 [pid 447] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 446] <... futex resumed>) = 0 [pid 446] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 446] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 447] <... futex resumed>) = 1 [pid 447] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 447] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 446] <... futex resumed>) = 0 [pid 446] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 446] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 447] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 447] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 446] <... futex resumed>) = 0 [pid 446] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 446] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 447] <... futex resumed>) = 1 [pid 447] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 447] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 446] <... futex resumed>) = 0 [pid 446] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 446] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 447] <... futex resumed>) = 1 [pid 447] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 447] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 446] <... futex resumed>) = 0 [pid 446] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 446] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 447] <... futex resumed>) = 1 [pid 447] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 447] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 447] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 446] <... futex resumed>) = 0 [pid 446] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 446] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 447] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 447] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 446] <... futex resumed>) = 0 [pid 446] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 446] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 447] memfd_create("syzkaller", 0) = 5 [pid 447] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 447] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 447] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 447] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 447] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 447] ioctl(6, LOOP_CLR_FD) = 0 [pid 447] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 447] close(6) = 0 [pid 447] close(5) = 0 [pid 447] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 446] <... futex resumed>) = 0 [pid 446] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 446] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 447] <... futex resumed>) = 1 [pid 447] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 447] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 446] <... futex resumed>) = 0 [pid 446] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 446] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 447] <... futex resumed>) = 1 [pid 447] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 447] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 446] <... futex resumed>) = 0 [pid 447] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 446] exit_group(0) = ? [pid 447] <... futex resumed>) = ? [pid 447] +++ exited with 0 +++ [pid 446] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=446, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 448 ci2-android-6-1/strace-static-x86_64: Process 448 attached [pid 448] set_robust_list(0x5555721e1760, 24) = 0 [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 448] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 448] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 448] <... prctl resumed>) = 0 [pid 448] setpgid(0, 0) = 0 [pid 448] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 448] write(3, "1000", 4) = 4 [pid 448] close(3) = 0 executing program [pid 448] write(1, "executing program\n", 18) = 18 [pid 448] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 448] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 448] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 448] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 448] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 448] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 448] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[449]}, 88) = 449 [pid 448] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 448] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 448] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 449 attached [pid 449] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 449] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 449] memfd_create("syzkaller", 0) = 3 [pid 449] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 449] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 449] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 449] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 449] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 449] ioctl(4, LOOP_CLR_FD) = 0 [pid 449] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 449] close(4) = 0 [pid 449] close(3) = 0 [pid 449] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 448] <... futex resumed>) = 0 [pid 448] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 448] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 449] <... futex resumed>) = 1 [pid 449] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 449] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 448] <... futex resumed>) = 0 [pid 448] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 448] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 449] <... futex resumed>) = 1 [pid 449] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 449] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 448] <... futex resumed>) = 0 [pid 448] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 448] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 449] <... futex resumed>) = 1 [pid 449] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 449] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 448] <... futex resumed>) = 0 [pid 448] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 448] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 449] <... futex resumed>) = 1 [pid 449] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 449] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 448] <... futex resumed>) = 0 [pid 448] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 448] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 449] <... futex resumed>) = 1 [pid 449] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 449] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 449] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 448] <... futex resumed>) = 0 [pid 448] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 448] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 449] <... futex resumed>) = 1 [pid 449] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 449] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 448] <... futex resumed>) = 0 [pid 449] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 448] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 449] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 448] <... futex resumed>) = 0 [pid 448] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 449] memfd_create("syzkaller", 0) = 5 [pid 449] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 449] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 449] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 449] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 449] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 449] ioctl(6, LOOP_CLR_FD) = 0 [pid 449] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 449] close(6) = 0 [pid 449] close(5) = 0 [pid 449] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 448] <... futex resumed>) = 0 [pid 448] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 448] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 449] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 449] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 448] <... futex resumed>) = 0 [pid 448] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 448] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 449] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 449] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 448] <... futex resumed>) = 0 [pid 448] exit_group(0) = ? [pid 449] +++ exited with 0 +++ [pid 448] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=448, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 450 ci2-android-6-1/strace-static-x86_64: Process 450 attached [pid 305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 450] set_robust_list(0x5555721e1760, 24) = 0 [pid 450] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 450] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 450] setpgid(0, 0) = 0 [pid 450] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 450] write(3, "1000", 4) = 4 [pid 450] close(3) = 0 executing program [pid 450] write(1, "executing program\n", 18) = 18 [pid 450] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 450] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 450] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 450] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 450] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 450] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 450] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 451 attached => {parent_tid=[451]}, 88) = 451 [pid 451] set_robust_list(0x7f1cd63e09a0, 24 [pid 450] rt_sigprocmask(SIG_SETMASK, [] [pid 451] <... set_robust_list resumed>) = 0 [pid 451] rt_sigprocmask(SIG_SETMASK, [] [pid 450] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 450] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 451] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 451] memfd_create("syzkaller", 0 [pid 450] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 451] <... memfd_create resumed>) = 3 [pid 451] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 451] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 451] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 451] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 451] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 451] ioctl(4, LOOP_CLR_FD) = 0 [pid 451] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 451] close(4) = 0 [pid 451] close(3) = 0 [pid 451] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 450] <... futex resumed>) = 0 [pid 450] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 450] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 451] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 451] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 450] <... futex resumed>) = 0 [pid 450] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 450] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 451] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 451] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 450] <... futex resumed>) = 0 [pid 450] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 450] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 451] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 451] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 450] <... futex resumed>) = 0 [pid 450] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 450] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 451] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 451] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 450] <... futex resumed>) = 0 [pid 450] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 450] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 451] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 451] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 451] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 450] <... futex resumed>) = 0 [pid 450] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 450] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 451] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 451] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 450] <... futex resumed>) = 0 [pid 450] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 450] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 451] memfd_create("syzkaller", 0) = 5 [pid 451] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 451] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 451] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 451] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 451] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 451] ioctl(6, LOOP_CLR_FD) = 0 [pid 451] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 451] close(6) = 0 [pid 451] close(5) = 0 [pid 451] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 450] <... futex resumed>) = 0 [pid 450] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 450] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 451] <... futex resumed>) = 1 [pid 451] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 451] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 450] <... futex resumed>) = 0 [pid 450] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 450] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 451] <... futex resumed>) = 1 [pid 451] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 451] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 450] <... futex resumed>) = 0 [pid 450] exit_group(0) = ? [pid 451] <... futex resumed>) = ? [pid 451] +++ exited with 0 +++ [pid 450] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=450, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 452 ci2-android-6-1/strace-static-x86_64: Process 452 attached [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 452] set_robust_list(0x5555721e1760, 24 [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 452] <... set_robust_list resumed>) = 0 [pid 452] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 452] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 452] setpgid(0, 0) = 0 [pid 452] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 452] write(3, "1000", 4) = 4 [pid 452] close(3) = 0 [pid 452] write(1, "executing program\n", 18) = 18 executing program [pid 452] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 452] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 452] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 452] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 452] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 452] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 452] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[453]}, 88) = 453 [pid 452] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 452] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 452] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 453 attached [pid 453] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 453] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 453] memfd_create("syzkaller", 0) = 3 [pid 453] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 453] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 453] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 453] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 453] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 453] ioctl(4, LOOP_CLR_FD) = 0 [pid 453] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 453] close(4) = 0 [pid 453] close(3) = 0 [pid 453] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 452] <... futex resumed>) = 0 [pid 452] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 452] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 453] <... futex resumed>) = 1 [pid 453] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 453] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 452] <... futex resumed>) = 0 [pid 452] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 452] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 453] <... futex resumed>) = 1 [pid 453] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 453] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 452] <... futex resumed>) = 0 [pid 452] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 452] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 453] <... futex resumed>) = 1 [pid 453] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 453] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 452] <... futex resumed>) = 0 [pid 452] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 452] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 453] <... futex resumed>) = 1 [pid 453] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 453] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 452] <... futex resumed>) = 0 [pid 452] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 452] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 453] <... futex resumed>) = 1 [pid 453] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 453] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 453] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 452] <... futex resumed>) = 0 [pid 452] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 452] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 453] <... futex resumed>) = 1 [pid 453] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 453] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 452] <... futex resumed>) = 0 [pid 452] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 452] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 453] <... futex resumed>) = 1 [pid 453] memfd_create("syzkaller", 0) = 5 [pid 453] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 453] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 453] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 453] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 453] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 453] ioctl(6, LOOP_CLR_FD) = 0 [pid 453] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 453] close(6) = 0 [pid 453] close(5) = 0 [pid 453] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 452] <... futex resumed>) = 0 [pid 452] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 452] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 453] <... futex resumed>) = 1 [pid 453] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 453] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 452] <... futex resumed>) = 0 [pid 452] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 452] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 453] <... futex resumed>) = 1 [pid 453] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 453] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 452] <... futex resumed>) = 0 [pid 452] exit_group(0) = ? [pid 453] <... futex resumed>) = ? [pid 453] +++ exited with 0 +++ [pid 452] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=452, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 454 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 454 attached [pid 454] set_robust_list(0x5555721e1760, 24) = 0 [pid 454] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 454] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 454] setpgid(0, 0) = 0 [pid 454] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 454] write(3, "1000", 4) = 4 [pid 454] close(3) = 0 [pid 454] write(1, "executing program\n", 18) = 18 executing program [pid 454] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 454] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 454] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 454] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 454] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 454] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 454] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[455]}, 88) = 455 [pid 454] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 454] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 454] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 455 attached [pid 455] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 455] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 455] memfd_create("syzkaller", 0) = 3 [pid 455] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 455] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 455] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 455] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 455] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 455] ioctl(4, LOOP_CLR_FD) = 0 [pid 455] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 455] close(4) = 0 [pid 455] close(3) = 0 [pid 455] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 455] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 454] <... futex resumed>) = 0 [pid 454] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 455] <... futex resumed>) = 0 [pid 455] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 455] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 455] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 454] <... futex resumed>) = 1 [pid 454] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 454] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 455] <... futex resumed>) = 0 [pid 455] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 455] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 455] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 454] <... futex resumed>) = 1 [pid 454] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 454] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 455] <... futex resumed>) = 0 [pid 455] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 455] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 455] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 454] <... futex resumed>) = 1 [pid 454] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 454] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 455] <... futex resumed>) = 0 [pid 455] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 455] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 455] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 454] <... futex resumed>) = 1 [pid 454] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 454] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 455] <... futex resumed>) = 0 [pid 455] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 455] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 455] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 455] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 454] <... futex resumed>) = 1 [pid 454] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 454] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 455] <... futex resumed>) = 0 [pid 455] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 455] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 455] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 454] <... futex resumed>) = 1 [pid 454] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 454] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 455] <... futex resumed>) = 0 [pid 455] memfd_create("syzkaller", 0) = 5 [pid 455] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 455] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152 [pid 454] <... futex resumed>) = 1 [pid 454] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 455] <... write resumed>) = 2097152 [pid 455] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 455] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 455] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 455] ioctl(6, LOOP_CLR_FD) = 0 [pid 455] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 455] close(6) = 0 [pid 455] close(5) = 0 [pid 455] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 455] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 454] <... futex resumed>) = 0 [pid 454] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 454] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 455] <... futex resumed>) = 0 [pid 455] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 455] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 454] <... futex resumed>) = 0 [pid 454] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 454] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 455] <... futex resumed>) = 1 [pid 455] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 455] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 454] <... futex resumed>) = 0 [pid 454] exit_group(0) = ? [pid 455] <... futex resumed>) = ? [pid 455] +++ exited with 0 +++ [pid 454] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=454, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 456 ci2-android-6-1/strace-static-x86_64: Process 456 attached [pid 305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 456] set_robust_list(0x5555721e1760, 24) = 0 [pid 456] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 456] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 456] setpgid(0, 0) = 0 [pid 456] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 456] write(3, "1000", 4) = 4 [pid 456] close(3) = 0 [pid 456] write(1, "executing program\n", 18) = 18 executing program [pid 456] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 456] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 456] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 456] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 456] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 456] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 456] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[457]}, 88) = 457 [pid 456] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 456] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 456] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 457 attached [pid 457] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 457] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 457] memfd_create("syzkaller", 0) = 3 [pid 457] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 457] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 457] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 457] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 457] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 457] ioctl(4, LOOP_CLR_FD) = 0 [pid 457] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 457] close(4) = 0 [pid 457] close(3) = 0 [pid 457] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 456] <... futex resumed>) = 0 [pid 456] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 456] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 457] <... futex resumed>) = 1 [pid 457] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 457] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 456] <... futex resumed>) = 0 [pid 456] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 456] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 457] <... futex resumed>) = 1 [pid 457] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 457] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 456] <... futex resumed>) = 0 [pid 456] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 456] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 457] <... futex resumed>) = 1 [pid 457] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 457] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 456] <... futex resumed>) = 0 [pid 456] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 456] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 457] <... futex resumed>) = 1 [pid 457] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 457] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 456] <... futex resumed>) = 0 [pid 456] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 456] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 457] <... futex resumed>) = 1 [pid 457] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 457] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 457] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 456] <... futex resumed>) = 0 [pid 456] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 456] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 457] <... futex resumed>) = 1 [pid 457] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 457] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 456] <... futex resumed>) = 0 [pid 456] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 456] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 457] <... futex resumed>) = 1 [pid 457] memfd_create("syzkaller", 0) = 5 [pid 457] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 457] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 457] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 457] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 457] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 457] ioctl(6, LOOP_CLR_FD) = 0 [pid 457] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 457] close(6) = 0 [pid 457] close(5) = 0 [pid 457] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 456] <... futex resumed>) = 0 [pid 456] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 456] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 457] <... futex resumed>) = 1 [pid 457] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 457] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 456] <... futex resumed>) = 0 [pid 456] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 456] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 457] <... futex resumed>) = 1 [pid 457] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 457] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 456] <... futex resumed>) = 0 [pid 456] exit_group(0) = ? [pid 457] <... futex resumed>) = ? [pid 457] +++ exited with 0 +++ [pid 456] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=456, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 458 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 458 attached [pid 458] set_robust_list(0x5555721e1760, 24) = 0 [pid 458] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 458] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 458] setpgid(0, 0) = 0 [pid 458] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 458] write(3, "1000", 4) = 4 [pid 458] close(3) = 0 executing program [pid 458] write(1, "executing program\n", 18) = 18 [pid 458] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 458] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 458] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 458] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 458] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 458] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 458] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[459]}, 88) = 459 [pid 458] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 458] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 458] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 459 attached [pid 459] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 459] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 459] memfd_create("syzkaller", 0) = 3 [pid 459] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 459] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 459] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 459] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 459] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 459] ioctl(4, LOOP_CLR_FD) = 0 [pid 459] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 459] close(4) = 0 [pid 459] close(3) = 0 [pid 459] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 458] <... futex resumed>) = 0 [pid 458] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 458] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 459] <... futex resumed>) = 1 [pid 459] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 459] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 458] <... futex resumed>) = 0 [pid 458] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 458] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 459] <... futex resumed>) = 1 [pid 459] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 459] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 458] <... futex resumed>) = 0 [pid 458] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 458] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 459] <... futex resumed>) = 1 [pid 459] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 459] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 458] <... futex resumed>) = 0 [pid 458] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 458] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 459] <... futex resumed>) = 1 [pid 459] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 459] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 458] <... futex resumed>) = 0 [pid 458] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 458] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 459] <... futex resumed>) = 1 [pid 459] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 459] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 459] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 458] <... futex resumed>) = 0 [pid 458] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 458] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 459] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 459] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 458] <... futex resumed>) = 0 [pid 458] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 459] memfd_create("syzkaller", 0 [pid 458] <... futex resumed>) = 0 [pid 458] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 459] <... memfd_create resumed>) = 5 [pid 459] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 459] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 459] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 459] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 459] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 459] ioctl(6, LOOP_CLR_FD) = 0 [pid 459] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 459] close(6) = 0 [pid 459] close(5) = 0 [pid 459] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 458] <... futex resumed>) = 0 [pid 458] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 458] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 459] <... futex resumed>) = 1 [pid 459] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 459] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 458] <... futex resumed>) = 0 [pid 458] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 458] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 459] <... futex resumed>) = 1 [pid 459] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 459] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 458] <... futex resumed>) = 0 [pid 458] exit_group(0) = ? [pid 459] <... futex resumed>) = ? [pid 459] +++ exited with 0 +++ [pid 458] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=458, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 460 ci2-android-6-1/strace-static-x86_64: Process 460 attached [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 460] set_robust_list(0x5555721e1760, 24 [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 460] <... set_robust_list resumed>) = 0 [pid 460] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 460] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 460] setpgid(0, 0) = 0 [pid 460] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 460] write(3, "1000", 4) = 4 [pid 460] close(3) = 0 executing program [pid 460] write(1, "executing program\n", 18) = 18 [pid 460] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 460] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 460] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 460] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 460] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 460] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 460] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 461 attached => {parent_tid=[461]}, 88) = 461 [pid 460] rt_sigprocmask(SIG_SETMASK, [] [pid 461] set_robust_list(0x7f1cd63e09a0, 24 [pid 460] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 460] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 460] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 461] <... set_robust_list resumed>) = 0 [pid 461] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 461] memfd_create("syzkaller", 0) = 3 [pid 461] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 461] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 461] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 461] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 461] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 461] ioctl(4, LOOP_CLR_FD) = 0 [pid 461] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 461] close(4) = 0 [pid 461] close(3) = 0 [pid 461] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 460] <... futex resumed>) = 0 [pid 460] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 460] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 461] <... futex resumed>) = 1 [pid 461] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 461] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 460] <... futex resumed>) = 0 [pid 460] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 460] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 461] <... futex resumed>) = 1 [pid 461] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 461] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 460] <... futex resumed>) = 0 [pid 460] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 460] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 461] <... futex resumed>) = 1 [pid 461] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 461] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 460] <... futex resumed>) = 0 [pid 460] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 460] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 461] <... futex resumed>) = 1 [pid 461] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 461] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 460] <... futex resumed>) = 0 [pid 460] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 460] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 461] <... futex resumed>) = 1 [pid 461] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 461] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 461] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 460] <... futex resumed>) = 0 [pid 460] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 460] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 461] <... futex resumed>) = 1 [pid 461] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 461] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 460] <... futex resumed>) = 0 [pid 460] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 460] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 461] <... futex resumed>) = 1 [pid 461] memfd_create("syzkaller", 0) = 5 [pid 461] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 461] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 461] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 461] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 461] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 461] ioctl(6, LOOP_CLR_FD) = 0 [pid 461] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 461] close(6) = 0 [pid 461] close(5) = 0 [pid 461] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 460] <... futex resumed>) = 0 [pid 460] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 460] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 461] <... futex resumed>) = 1 [pid 461] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 461] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 460] <... futex resumed>) = 0 [pid 460] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 460] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 461] <... futex resumed>) = 1 [pid 461] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 461] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 460] <... futex resumed>) = 0 [pid 460] exit_group(0) = ? [pid 461] <... futex resumed>) = ? [pid 461] +++ exited with 0 +++ [pid 460] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=460, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 462 ci2-android-6-1/strace-static-x86_64: Process 462 attached [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 462] set_robust_list(0x5555721e1760, 24 [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 462] <... set_robust_list resumed>) = 0 [pid 462] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 462] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 462] setpgid(0, 0) = 0 [pid 462] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 462] write(3, "1000", 4) = 4 [pid 462] close(3) = 0 [pid 462] write(1, "executing program\n", 18) = 18 [pid 462] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 462] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 462] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 462] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 executing program [pid 462] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 462] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 462] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 463 attached => {parent_tid=[463]}, 88) = 463 [pid 463] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 462] rt_sigprocmask(SIG_SETMASK, [] [pid 463] rt_sigprocmask(SIG_SETMASK, [] [pid 462] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 463] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 462] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 462] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 463] memfd_create("syzkaller", 0) = 3 [pid 463] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 463] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 463] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 463] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 463] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 463] ioctl(4, LOOP_CLR_FD) = 0 [pid 463] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 463] close(4) = 0 [pid 463] close(3) = 0 [pid 463] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 462] <... futex resumed>) = 0 [pid 463] <... futex resumed>) = 1 [pid 462] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 463] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL [pid 462] <... futex resumed>) = 0 [pid 462] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 463] <... quotactl resumed>) = -1 EFAULT (Bad address) [pid 463] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 462] <... futex resumed>) = 0 [pid 463] <... futex resumed>) = 1 [pid 462] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 463] openat(AT_FDCWD, ".", O_RDONLY [pid 462] <... futex resumed>) = 0 [pid 462] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 463] <... openat resumed>) = 3 [pid 463] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 462] <... futex resumed>) = 0 [pid 463] <... futex resumed>) = 1 [pid 462] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 463] symlinkat("\x2e\x02", 3, "./file0" [pid 462] <... futex resumed>) = 0 [pid 462] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 463] <... symlinkat resumed>) = -1 EEXIST (File exists) [pid 463] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 462] <... futex resumed>) = 0 [pid 463] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 462] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 463] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 462] <... futex resumed>) = 0 [pid 463] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM [pid 462] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 463] <... mprotect resumed>) = 0 [pid 463] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 462] <... futex resumed>) = 0 [pid 463] <... futex resumed>) = 1 [pid 462] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 463] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 462] <... futex resumed>) = 0 [pid 463] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 462] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 463] <... openat resumed>) = 4 [pid 463] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 462] <... futex resumed>) = 0 [pid 463] <... futex resumed>) = 1 [pid 462] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 463] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0 [pid 462] <... futex resumed>) = 0 [pid 462] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 463] <... mmap resumed>) = 0x200000000000 [pid 463] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 462] <... futex resumed>) = 0 [pid 463] <... futex resumed>) = 1 [pid 462] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 462] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 463] memfd_create("syzkaller", 0) = 5 [pid 463] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 463] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 463] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 463] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 463] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 463] ioctl(6, LOOP_CLR_FD) = 0 [pid 463] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 463] close(6) = 0 [pid 463] close(5) = 0 [pid 463] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 462] <... futex resumed>) = 0 [pid 462] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 462] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 463] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 463] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 462] <... futex resumed>) = 0 [pid 462] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 462] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 463] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 463] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 463] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 462] <... futex resumed>) = 0 [pid 462] exit_group(0) = ? [pid 463] <... futex resumed>) = ? [pid 463] +++ exited with 0 +++ [pid 462] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=462, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 464 ci2-android-6-1/strace-static-x86_64: Process 464 attached [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 464] set_robust_list(0x5555721e1760, 24 [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 464] <... set_robust_list resumed>) = 0 [pid 464] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 464] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 464] setpgid(0, 0) = 0 [pid 464] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 464] write(3, "1000", 4) = 4 [pid 464] close(3) = 0 [pid 464] write(1, "executing program\n", 18) = 18 executing program [pid 464] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 464] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 464] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 464] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 464] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 464] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 464] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 465 attached [pid 465] set_robust_list(0x7f1cd63e09a0, 24 [pid 464] <... clone3 resumed> => {parent_tid=[465]}, 88) = 465 [pid 465] <... set_robust_list resumed>) = 0 [pid 465] rt_sigprocmask(SIG_SETMASK, [] [pid 464] rt_sigprocmask(SIG_SETMASK, [] [pid 465] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 464] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 465] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 464] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 465] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 464] <... futex resumed>) = 0 [pid 465] memfd_create("syzkaller", 0 [pid 464] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 465] <... memfd_create resumed>) = 3 [pid 465] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 465] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 465] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 465] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 465] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 465] ioctl(4, LOOP_CLR_FD) = 0 [pid 465] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 465] close(4) = 0 [pid 465] close(3) = 0 [pid 465] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 464] <... futex resumed>) = 0 [pid 465] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL [pid 464] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 465] <... quotactl resumed>) = -1 EFAULT (Bad address) [pid 464] <... futex resumed>) = 0 [pid 465] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 464] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 465] <... futex resumed>) = 0 [pid 464] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 465] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 464] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 465] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 465] openat(AT_FDCWD, ".", O_RDONLY [pid 464] <... futex resumed>) = 0 [pid 465] <... openat resumed>) = 3 [pid 464] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 465] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 464] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 465] <... futex resumed>) = 0 [pid 464] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 465] symlinkat("\x2e\x02", 3, "./file0" [pid 464] <... futex resumed>) = 0 [pid 465] <... symlinkat resumed>) = -1 EEXIST (File exists) [pid 464] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 465] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 464] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 464] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 465] <... futex resumed>) = 0 [pid 464] <... futex resumed>) = 0 [pid 465] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM [pid 464] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 465] <... mprotect resumed>) = 0 [pid 465] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 464] <... futex resumed>) = 0 [pid 464] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 464] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 465] <... futex resumed>) = 1 [pid 465] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 465] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 465] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 464] <... futex resumed>) = 0 [pid 464] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 464] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 465] <... futex resumed>) = 1 [pid 465] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 465] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 464] <... futex resumed>) = 0 [pid 464] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 464] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 465] <... futex resumed>) = 1 [pid 465] memfd_create("syzkaller", 0) = 5 [pid 465] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 465] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 465] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 465] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 465] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 465] ioctl(6, LOOP_CLR_FD) = 0 [pid 465] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 465] close(6) = 0 [pid 465] close(5) = 0 [pid 465] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 464] <... futex resumed>) = 0 [pid 465] chdir(0x200000000040 [pid 464] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 465] <... chdir resumed>) = -1 ENOENT (No such file or directory) [pid 464] <... futex resumed>) = 0 [pid 465] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 464] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 465] <... futex resumed>) = 0 [pid 464] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 465] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 464] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 465] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 464] <... futex resumed>) = 0 [pid 465] fchmodat(AT_FDCWD, 0x200000000300, 0177520 [pid 464] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 465] <... fchmodat resumed>) = 0 [pid 465] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 464] <... futex resumed>) = 0 [pid 465] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 464] exit_group(0 [pid 465] <... futex resumed>) = ? [pid 464] <... exit_group resumed>) = ? [pid 465] +++ exited with 0 +++ [pid 464] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=464, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 466 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 466 attached [pid 466] set_robust_list(0x5555721e1760, 24) = 0 [pid 466] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 466] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 466] setpgid(0, 0) = 0 [pid 466] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 466] write(3, "1000", 4) = 4 [pid 466] close(3) = 0 executing program [pid 466] write(1, "executing program\n", 18) = 18 [pid 466] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 466] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 466] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 466] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 466] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 466] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 466] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[467]}, 88) = 467 ci2-android-6-1/strace-static-x86_64: Process 467 attached [pid 466] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 466] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 466] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 467] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 467] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 467] memfd_create("syzkaller", 0) = 3 [pid 467] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 467] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 467] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 467] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 467] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 467] ioctl(4, LOOP_CLR_FD) = 0 [pid 467] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 467] close(4) = 0 [pid 467] close(3) = 0 [pid 467] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 466] <... futex resumed>) = 0 [pid 466] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 466] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 467] <... futex resumed>) = 1 [pid 467] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 467] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 466] <... futex resumed>) = 0 [pid 466] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 466] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 467] <... futex resumed>) = 1 [pid 467] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 467] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 466] <... futex resumed>) = 0 [pid 466] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 466] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 467] <... futex resumed>) = 1 [pid 467] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 467] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 466] <... futex resumed>) = 0 [pid 466] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 466] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 467] <... futex resumed>) = 1 [pid 467] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 467] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 466] <... futex resumed>) = 0 [pid 466] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 466] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 467] <... futex resumed>) = 1 [pid 467] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 467] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 467] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 466] <... futex resumed>) = 0 [pid 466] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 466] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 467] <... futex resumed>) = 1 [pid 467] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 467] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 466] <... futex resumed>) = 0 [pid 466] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 466] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 467] <... futex resumed>) = 1 [pid 467] memfd_create("syzkaller", 0) = 5 [pid 467] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 467] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 467] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 467] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 467] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 467] ioctl(6, LOOP_CLR_FD) = 0 [pid 467] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 467] close(6) = 0 [pid 467] close(5) = 0 [pid 467] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 466] <... futex resumed>) = 0 [pid 466] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 466] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 467] <... futex resumed>) = 1 [pid 467] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 467] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 466] <... futex resumed>) = 0 [pid 466] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 466] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 467] <... futex resumed>) = 1 [pid 467] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 467] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 466] <... futex resumed>) = 0 [pid 466] exit_group(0) = ? [pid 467] <... futex resumed>) = ? [pid 467] +++ exited with 0 +++ [pid 466] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=466, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 468 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 468 attached [pid 468] set_robust_list(0x5555721e1760, 24) = 0 [pid 468] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 468] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 468] setpgid(0, 0) = 0 [pid 468] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 468] write(3, "1000", 4) = 4 [pid 468] close(3) = 0 executing program [pid 468] write(1, "executing program\n", 18) = 18 [pid 468] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 468] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 468] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 468] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 468] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 468] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 468] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[469]}, 88) = 469 [pid 468] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 468] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 468] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 469 attached [pid 469] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 469] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 469] memfd_create("syzkaller", 0) = 3 [pid 469] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 469] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 469] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 469] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 469] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 469] ioctl(4, LOOP_CLR_FD) = 0 [pid 469] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 469] close(4) = 0 [pid 469] close(3) = 0 [pid 469] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 468] <... futex resumed>) = 0 [pid 468] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 468] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 469] <... futex resumed>) = 1 [pid 469] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 469] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 468] <... futex resumed>) = 0 [pid 468] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 468] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 469] <... futex resumed>) = 1 [pid 469] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 469] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 468] <... futex resumed>) = 0 [pid 468] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 468] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 469] <... futex resumed>) = 1 [pid 469] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 469] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 468] <... futex resumed>) = 0 [pid 468] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 468] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 469] <... futex resumed>) = 1 [pid 469] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 469] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 468] <... futex resumed>) = 0 [pid 468] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 468] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 469] <... futex resumed>) = 1 [pid 469] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 469] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 469] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 468] <... futex resumed>) = 0 [pid 468] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 468] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 469] <... futex resumed>) = 1 [pid 469] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 469] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 468] <... futex resumed>) = 0 [pid 468] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 468] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 469] <... futex resumed>) = 1 [pid 469] memfd_create("syzkaller", 0) = 5 [pid 469] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 469] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 469] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 469] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 469] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 469] ioctl(6, LOOP_CLR_FD) = 0 [pid 469] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 469] close(6) = 0 [pid 469] close(5) = 0 [pid 469] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 468] <... futex resumed>) = 0 [pid 469] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 468] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 469] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 469] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 468] <... futex resumed>) = 0 [pid 469] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 468] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 469] <... futex resumed>) = 0 [pid 469] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 468] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 468] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 469] <... futex resumed>) = 0 [pid 469] fchmodat(AT_FDCWD, 0x200000000300, 0177520 [pid 468] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 469] <... fchmodat resumed>) = 0 [pid 469] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 468] <... futex resumed>) = 0 [pid 469] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 468] exit_group(0) = ? [pid 469] <... futex resumed>) = ? [pid 469] +++ exited with 0 +++ [pid 468] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=468, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 470 attached , child_tidptr=0x5555721e1750) = 470 [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 470] set_robust_list(0x5555721e1760, 24 [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 470] <... set_robust_list resumed>) = 0 [pid 470] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 470] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 470] setpgid(0, 0) = 0 [pid 470] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 470] write(3, "1000", 4) = 4 [pid 470] close(3) = 0 [pid 470] write(1, "executing program\n", 18) = 18 executing program [pid 470] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 470] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 470] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 470] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 470] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 470] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 470] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 471 attached [pid 471] set_robust_list(0x7f1cd63e09a0, 24 [pid 470] <... clone3 resumed> => {parent_tid=[471]}, 88) = 471 [pid 470] rt_sigprocmask(SIG_SETMASK, [] [pid 471] <... set_robust_list resumed>) = 0 [pid 470] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 471] rt_sigprocmask(SIG_SETMASK, [] [pid 470] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 471] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 470] <... futex resumed>) = 0 [pid 470] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 471] memfd_create("syzkaller", 0) = 3 [pid 471] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 471] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 471] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 471] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 471] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 471] ioctl(4, LOOP_CLR_FD) = 0 [pid 471] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 471] close(4) = 0 [pid 471] close(3) = 0 [pid 471] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 470] <... futex resumed>) = 0 [pid 470] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 470] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 471] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 471] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 471] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 470] <... futex resumed>) = 0 [pid 470] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 470] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 471] <... futex resumed>) = 0 [pid 471] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 471] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 470] <... futex resumed>) = 0 [pid 470] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 470] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 471] <... futex resumed>) = 1 [pid 471] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 471] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 470] <... futex resumed>) = 0 [pid 470] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 470] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 471] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 471] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 470] <... futex resumed>) = 0 [pid 470] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 470] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 471] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 471] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 471] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 470] <... futex resumed>) = 0 [pid 470] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 470] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 471] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 471] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 470] <... futex resumed>) = 0 [pid 470] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 470] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 471] <... futex resumed>) = 1 [pid 471] memfd_create("syzkaller", 0) = 5 [pid 471] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 471] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 471] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 471] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 471] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 471] ioctl(6, LOOP_CLR_FD) = 0 [pid 471] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 471] close(6) = 0 [pid 471] close(5) = 0 [pid 471] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 470] <... futex resumed>) = 0 [pid 470] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 470] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 471] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 471] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 470] <... futex resumed>) = 0 [pid 470] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 470] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 471] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 471] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 470] <... futex resumed>) = 0 [pid 470] exit_group(0) = ? [pid 471] +++ exited with 0 +++ [pid 470] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=470, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 472 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 472 attached [pid 472] set_robust_list(0x5555721e1760, 24) = 0 [pid 472] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 472] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 472] setpgid(0, 0) = 0 [pid 472] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 472] write(3, "1000", 4) = 4 [pid 472] close(3) = 0 [pid 472] write(1, "executing program\n", 18) = 18 [pid 472] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 executing program [pid 472] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 472] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 472] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 472] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 472] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 472] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[473]}, 88) = 473 [pid 472] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 472] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 472] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 473 attached [pid 473] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 473] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 473] memfd_create("syzkaller", 0) = 3 [pid 473] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 473] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 473] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 473] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 473] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 473] ioctl(4, LOOP_CLR_FD) = 0 [pid 473] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 473] close(4) = 0 [pid 473] close(3) = 0 [pid 473] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 472] <... futex resumed>) = 0 [pid 473] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL [pid 472] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 472] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 473] <... quotactl resumed>) = -1 EFAULT (Bad address) [pid 473] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 472] <... futex resumed>) = 0 [pid 472] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 472] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 473] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 473] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 472] <... futex resumed>) = 0 [pid 473] symlinkat("\x2e\x02", 3, "./file0" [pid 472] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 473] <... symlinkat resumed>) = -1 EEXIST (File exists) [pid 472] <... futex resumed>) = 0 [pid 473] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 473] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 472] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 472] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 472] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 473] <... futex resumed>) = 0 [pid 473] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 473] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 472] <... futex resumed>) = 0 [pid 472] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 473] <... futex resumed>) = 1 [pid 472] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 473] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 473] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 473] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 472] <... futex resumed>) = 0 [pid 473] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0 [pid 472] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 472] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 473] <... mmap resumed>) = 0x200000000000 [pid 473] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 472] <... futex resumed>) = 0 [pid 472] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 472] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 473] memfd_create("syzkaller", 0) = 5 [pid 473] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 473] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 473] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 473] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 473] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 473] ioctl(6, LOOP_CLR_FD) = 0 [pid 473] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 473] close(6) = 0 [pid 473] close(5) = 0 [pid 473] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 473] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 472] <... futex resumed>) = 0 [pid 472] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 472] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 473] <... futex resumed>) = 0 [pid 473] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 473] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 472] <... futex resumed>) = 0 [pid 472] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 472] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 473] <... futex resumed>) = 1 [pid 473] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 473] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 472] <... futex resumed>) = 0 [pid 472] exit_group(0) = ? [pid 473] <... futex resumed>) = ? [pid 473] +++ exited with 0 +++ [pid 472] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=472, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 474 ci2-android-6-1/strace-static-x86_64: Process 474 attached [pid 305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 474] set_robust_list(0x5555721e1760, 24) = 0 [pid 474] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 474] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 474] setpgid(0, 0) = 0 [pid 474] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 474] write(3, "1000", 4) = 4 [pid 474] close(3) = 0 [pid 474] write(1, "executing program\n", 18) = 18 executing program [pid 474] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 474] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 474] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 474] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 474] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 474] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 474] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[475]}, 88) = 475 [pid 474] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 474] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 474] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 475 attached [pid 475] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 475] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 475] memfd_create("syzkaller", 0) = 3 [pid 475] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 475] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 475] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 475] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 475] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 475] ioctl(4, LOOP_CLR_FD) = 0 [pid 475] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 475] close(4) = 0 [pid 475] close(3) = 0 [pid 475] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 474] <... futex resumed>) = 0 [pid 474] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 474] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 475] <... futex resumed>) = 1 [pid 475] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 475] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 474] <... futex resumed>) = 0 [pid 474] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 474] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 475] <... futex resumed>) = 1 [pid 475] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 475] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 474] <... futex resumed>) = 0 [pid 474] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 474] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 475] <... futex resumed>) = 1 [pid 475] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 475] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 474] <... futex resumed>) = 0 [pid 474] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 474] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 475] <... futex resumed>) = 1 [pid 475] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 475] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 474] <... futex resumed>) = 0 [pid 474] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 474] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 475] <... futex resumed>) = 1 [pid 475] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 475] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 475] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 474] <... futex resumed>) = 0 [pid 474] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 474] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 475] <... futex resumed>) = 1 [pid 475] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 475] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 474] <... futex resumed>) = 0 [pid 474] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 474] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 475] memfd_create("syzkaller", 0) = 5 [pid 475] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 475] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 475] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 475] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 475] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 475] ioctl(6, LOOP_CLR_FD) = 0 [pid 475] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 475] close(6) = 0 [pid 475] close(5) = 0 [pid 475] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 475] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 474] <... futex resumed>) = 0 [pid 474] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 474] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 475] <... futex resumed>) = 0 [pid 475] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 475] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 474] <... futex resumed>) = 0 [pid 474] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 474] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 475] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 475] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 474] <... futex resumed>) = 0 [pid 474] exit_group(0) = ? [pid 475] +++ exited with 0 +++ [pid 474] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=474, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 476 ci2-android-6-1/strace-static-x86_64: Process 476 attached [pid 305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 476] set_robust_list(0x5555721e1760, 24) = 0 [pid 476] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 476] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 476] setpgid(0, 0) = 0 [pid 476] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 476] write(3, "1000", 4) = 4 [pid 476] close(3) = 0 [pid 476] write(1, "executing program\n", 18) = 18 executing program [pid 476] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 476] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 476] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 476] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 476] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 476] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 476] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 477 attached [pid 477] set_robust_list(0x7f1cd63e09a0, 24 [pid 476] <... clone3 resumed> => {parent_tid=[477]}, 88) = 477 [pid 477] <... set_robust_list resumed>) = 0 [pid 476] rt_sigprocmask(SIG_SETMASK, [] [pid 477] rt_sigprocmask(SIG_SETMASK, [] [pid 476] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 477] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 476] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 477] memfd_create("syzkaller", 0 [pid 476] <... futex resumed>) = 0 [pid 477] <... memfd_create resumed>) = 3 [pid 476] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 477] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 477] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 477] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 477] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 477] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 477] ioctl(4, LOOP_CLR_FD) = 0 [pid 477] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 477] close(4) = 0 [pid 477] close(3) = 0 [pid 477] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 477] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 476] <... futex resumed>) = 0 [pid 476] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 476] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 477] <... futex resumed>) = 0 [pid 477] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 477] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 476] <... futex resumed>) = 0 [pid 476] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 476] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 477] <... futex resumed>) = 1 [pid 477] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 477] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 476] <... futex resumed>) = 0 [pid 476] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 476] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 477] <... futex resumed>) = 1 [pid 477] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 477] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 476] <... futex resumed>) = 0 [pid 476] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 476] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 477] <... futex resumed>) = 1 [pid 477] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 477] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 476] <... futex resumed>) = 0 [pid 476] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 476] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 477] <... futex resumed>) = 1 [pid 477] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 477] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 477] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 476] <... futex resumed>) = 0 [pid 476] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 476] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 477] <... futex resumed>) = 1 [pid 477] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 477] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 476] <... futex resumed>) = 0 [pid 476] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 476] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 477] <... futex resumed>) = 1 [pid 477] memfd_create("syzkaller", 0) = 5 [pid 477] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 477] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 477] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 477] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 477] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 477] ioctl(6, LOOP_CLR_FD) = 0 [pid 477] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 477] close(6) = 0 [pid 477] close(5) = 0 [pid 477] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 476] <... futex resumed>) = 0 [pid 476] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 476] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 477] <... futex resumed>) = 1 [pid 477] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 477] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 476] <... futex resumed>) = 0 [pid 476] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 476] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 477] <... futex resumed>) = 1 [pid 477] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 477] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 476] <... futex resumed>) = 0 [pid 476] exit_group(0) = ? [pid 477] <... futex resumed>) = ? [pid 477] +++ exited with 0 +++ [pid 476] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=476, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 478 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 478 attached [pid 478] set_robust_list(0x5555721e1760, 24) = 0 [pid 478] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 478] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 478] setpgid(0, 0) = 0 [pid 478] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 478] write(3, "1000", 4) = 4 [pid 478] close(3) = 0 executing program [pid 478] write(1, "executing program\n", 18) = 18 [pid 478] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 478] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 478] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 478] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 478] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 478] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 478] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[479]}, 88) = 479 [pid 478] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 478] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 478] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 479 attached [pid 479] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 479] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 479] memfd_create("syzkaller", 0) = 3 [pid 479] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 479] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 479] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 479] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 479] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 479] ioctl(4, LOOP_CLR_FD) = 0 [pid 479] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 479] close(4) = 0 [pid 479] close(3) = 0 [pid 479] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 478] <... futex resumed>) = 0 [pid 478] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 478] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 479] <... futex resumed>) = 1 [pid 479] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 479] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 478] <... futex resumed>) = 0 [pid 478] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 478] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 479] <... futex resumed>) = 1 [pid 479] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 479] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 478] <... futex resumed>) = 0 [pid 478] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 478] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 479] <... futex resumed>) = 1 [pid 479] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 479] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 478] <... futex resumed>) = 0 [pid 478] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 478] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 479] <... futex resumed>) = 1 [pid 479] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 479] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 478] <... futex resumed>) = 0 [pid 478] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 478] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 479] <... futex resumed>) = 1 [pid 479] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 479] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 479] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 478] <... futex resumed>) = 0 [pid 478] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 478] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 479] <... futex resumed>) = 1 [pid 479] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 479] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 478] <... futex resumed>) = 0 [pid 478] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 478] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 479] <... futex resumed>) = 1 [pid 479] memfd_create("syzkaller", 0) = 5 [pid 479] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 479] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 479] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 479] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 479] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 479] ioctl(6, LOOP_CLR_FD) = 0 [pid 479] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 479] close(6) = 0 [pid 479] close(5) = 0 [pid 479] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 478] <... futex resumed>) = 0 [pid 478] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 478] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 479] <... futex resumed>) = 1 [pid 479] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 479] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 478] <... futex resumed>) = 0 [pid 478] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 478] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 479] <... futex resumed>) = 1 [pid 479] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 479] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 478] <... futex resumed>) = 0 [pid 478] exit_group(0) = ? [pid 479] <... futex resumed>) = ? [pid 479] +++ exited with 0 +++ [pid 478] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=478, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 480 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 480 attached [pid 480] set_robust_list(0x5555721e1760, 24) = 0 [pid 480] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 480] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 480] setpgid(0, 0) = 0 [pid 480] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 480] write(3, "1000", 4) = 4 [pid 480] close(3) = 0 executing program [pid 480] write(1, "executing program\n", 18) = 18 [pid 480] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 480] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 480] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 480] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 480] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 480] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 480] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[481]}, 88) = 481 [pid 480] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 480] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 480] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 481 attached [pid 481] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 481] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 481] memfd_create("syzkaller", 0) = 3 [pid 481] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 481] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 481] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 481] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 481] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 481] ioctl(4, LOOP_CLR_FD) = 0 [pid 481] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 481] close(4) = 0 [pid 481] close(3) = 0 [pid 481] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 480] <... futex resumed>) = 0 [pid 480] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 480] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 481] <... futex resumed>) = 1 [pid 481] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 481] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 480] <... futex resumed>) = 0 [pid 480] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 480] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 481] <... futex resumed>) = 1 [pid 481] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 481] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 480] <... futex resumed>) = 0 [pid 480] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 480] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 481] <... futex resumed>) = 1 [pid 481] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 481] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 480] <... futex resumed>) = 0 [pid 480] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 480] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 481] <... futex resumed>) = 1 [pid 481] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 481] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 480] <... futex resumed>) = 0 [pid 480] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 480] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 481] <... futex resumed>) = 1 [pid 481] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 481] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 481] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 480] <... futex resumed>) = 0 [pid 480] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 480] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 481] <... futex resumed>) = 1 [pid 481] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 481] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 480] <... futex resumed>) = 0 [pid 481] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 480] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 481] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 480] <... futex resumed>) = 0 [pid 481] memfd_create("syzkaller", 0 [pid 480] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 481] <... memfd_create resumed>) = 5 [pid 481] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 481] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 481] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 481] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 481] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 481] ioctl(6, LOOP_CLR_FD) = 0 [pid 481] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 481] close(6) = 0 [pid 481] close(5) = 0 [pid 481] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 480] <... futex resumed>) = 0 [pid 480] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 480] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 481] <... futex resumed>) = 1 [pid 481] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 481] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 480] <... futex resumed>) = 0 [pid 480] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 480] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 481] <... futex resumed>) = 1 [pid 481] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 481] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 480] <... futex resumed>) = 0 [pid 480] exit_group(0) = ? [pid 481] <... futex resumed>) = ? [pid 481] +++ exited with 0 +++ [pid 480] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=480, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 482 ci2-android-6-1/strace-static-x86_64: Process 482 attached [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 482] set_robust_list(0x5555721e1760, 24 [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 482] <... set_robust_list resumed>) = 0 [pid 482] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 482] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 482] setpgid(0, 0) = 0 [pid 482] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 482] write(3, "1000", 4) = 4 [pid 482] close(3) = 0 [pid 482] write(1, "executing program\n", 18) = 18 executing program [pid 482] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 482] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 482] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 482] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 482] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 482] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 482] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 483 attached [pid 483] set_robust_list(0x7f1cd63e09a0, 24 [pid 482] <... clone3 resumed> => {parent_tid=[483]}, 88) = 483 [pid 483] <... set_robust_list resumed>) = 0 [pid 482] rt_sigprocmask(SIG_SETMASK, [] [pid 483] rt_sigprocmask(SIG_SETMASK, [] [pid 482] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 483] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 482] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 483] memfd_create("syzkaller", 0 [pid 482] <... futex resumed>) = 0 [pid 482] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 483] <... memfd_create resumed>) = 3 [pid 483] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 483] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 483] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 483] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 483] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 483] ioctl(4, LOOP_CLR_FD) = 0 [pid 483] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 483] close(4) = 0 [pid 483] close(3) = 0 [pid 483] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 483] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 482] <... futex resumed>) = 0 [pid 482] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 482] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 483] <... futex resumed>) = 0 [pid 483] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 483] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 482] <... futex resumed>) = 0 [pid 482] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 482] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 483] <... futex resumed>) = 1 [pid 483] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 483] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 482] <... futex resumed>) = 0 [pid 482] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 482] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 483] <... futex resumed>) = 1 [pid 483] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 483] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 482] <... futex resumed>) = 0 [pid 483] <... futex resumed>) = 1 [pid 482] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 482] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 483] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 483] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 482] <... futex resumed>) = 0 [pid 482] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 482] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 483] <... futex resumed>) = 1 [pid 483] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 483] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 483] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 482] <... futex resumed>) = 0 [pid 482] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 482] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 483] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 483] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 482] <... futex resumed>) = 0 [pid 483] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 482] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 483] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 482] <... futex resumed>) = 0 [pid 482] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 483] memfd_create("syzkaller", 0) = 5 [pid 483] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 483] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 483] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 483] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 483] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 483] ioctl(6, LOOP_CLR_FD) = 0 [pid 483] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 483] close(6) = 0 [pid 483] close(5) = 0 [pid 483] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 482] <... futex resumed>) = 0 [pid 482] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 482] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 483] <... futex resumed>) = 1 [pid 483] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 483] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 482] <... futex resumed>) = 0 [pid 482] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 482] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 483] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 483] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 482] <... futex resumed>) = 0 [pid 483] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 482] exit_group(0) = ? [pid 483] <... futex resumed>) = ? [pid 483] +++ exited with 0 +++ [pid 482] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=482, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 484 ci2-android-6-1/strace-static-x86_64: Process 484 attached [pid 484] set_robust_list(0x5555721e1760, 24) = 0 [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 484] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 484] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 484] setpgid(0, 0) = 0 [pid 484] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 484] write(3, "1000", 4) = 4 [pid 484] close(3) = 0 [pid 484] write(1, "executing program\n", 18) = 18 [pid 484] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 484] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 484] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 484] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 484] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 484] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 484] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[485]}, 88) = 485 [pid 484] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 484] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 484] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 485 attached [pid 485] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 485] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 485] memfd_create("syzkaller", 0) = 3 [pid 485] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 executing program [pid 485] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 485] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 485] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 485] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 485] ioctl(4, LOOP_CLR_FD) = 0 [pid 485] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 485] close(4) = 0 [pid 485] close(3) = 0 [pid 485] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 484] <... futex resumed>) = 0 [pid 484] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 484] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 485] <... futex resumed>) = 1 [pid 485] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 485] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 484] <... futex resumed>) = 0 [pid 484] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 484] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 485] <... futex resumed>) = 1 [pid 485] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 485] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 484] <... futex resumed>) = 0 [pid 484] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 484] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 485] <... futex resumed>) = 1 [pid 485] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 485] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 484] <... futex resumed>) = 0 [pid 484] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 484] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 485] <... futex resumed>) = 1 [pid 485] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 485] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 484] <... futex resumed>) = 0 [pid 484] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 484] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 485] <... futex resumed>) = 1 [pid 485] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 485] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 485] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 484] <... futex resumed>) = 0 [pid 484] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 484] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 485] <... futex resumed>) = 1 [pid 485] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 485] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 484] <... futex resumed>) = 0 [pid 484] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 484] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 485] <... futex resumed>) = 1 [pid 485] memfd_create("syzkaller", 0) = 5 [pid 485] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 485] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 485] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 485] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 485] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 485] ioctl(6, LOOP_CLR_FD) = 0 [pid 485] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 485] close(6) = 0 [pid 485] close(5) = 0 [pid 485] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 484] <... futex resumed>) = 0 [pid 484] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 484] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 485] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 485] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 484] <... futex resumed>) = 0 [pid 484] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 484] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 485] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 485] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 484] <... futex resumed>) = 0 [pid 484] exit_group(0) = ? [pid 485] +++ exited with 0 +++ [pid 484] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=484, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 486 ci2-android-6-1/strace-static-x86_64: Process 486 attached [pid 486] set_robust_list(0x5555721e1760, 24) = 0 [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 486] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 486] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 486] setpgid(0, 0) = 0 [pid 486] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 486] write(3, "1000", 4) = 4 [pid 486] close(3) = 0 [pid 486] write(1, "executing program\n", 18) = 18 [pid 486] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 486] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 486] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 486] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 486] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 486] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 executing program [pid 486] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[487]}, 88) = 487 [pid 486] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 486] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 486] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 487 attached [pid 487] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 487] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 487] memfd_create("syzkaller", 0) = 3 [pid 487] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 487] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 487] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 487] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 487] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 487] ioctl(4, LOOP_CLR_FD) = 0 [pid 487] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 487] close(4) = 0 [pid 487] close(3) = 0 [pid 487] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 486] <... futex resumed>) = 0 [pid 486] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 486] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 487] <... futex resumed>) = 1 [pid 487] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 487] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 486] <... futex resumed>) = 0 [pid 486] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 486] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 487] <... futex resumed>) = 1 [pid 487] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 487] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 486] <... futex resumed>) = 0 [pid 486] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 486] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 487] <... futex resumed>) = 1 [pid 487] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 487] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 486] <... futex resumed>) = 0 [pid 486] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 486] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 487] <... futex resumed>) = 1 [pid 487] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 487] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 486] <... futex resumed>) = 0 [pid 486] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 486] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 487] <... futex resumed>) = 1 [pid 487] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 487] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 487] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 486] <... futex resumed>) = 0 [pid 486] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 486] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 487] <... futex resumed>) = 1 [pid 487] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 487] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 486] <... futex resumed>) = 0 [pid 486] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 486] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 487] <... futex resumed>) = 1 [pid 487] memfd_create("syzkaller", 0) = 5 [pid 487] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 487] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 487] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 487] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 487] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 487] ioctl(6, LOOP_CLR_FD) = 0 [pid 487] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 487] close(6) = 0 [pid 487] close(5) = 0 [pid 487] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 486] <... futex resumed>) = 0 [pid 486] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 486] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 487] <... futex resumed>) = 1 [pid 487] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 487] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 486] <... futex resumed>) = 0 [pid 486] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 486] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 487] <... futex resumed>) = 1 [pid 487] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 487] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 486] <... futex resumed>) = 0 [pid 486] exit_group(0) = ? [pid 487] <... futex resumed>) = ? [pid 487] +++ exited with 0 +++ [pid 486] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=486, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 488 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 488 attached [pid 488] set_robust_list(0x5555721e1760, 24) = 0 [pid 488] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 488] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 488] setpgid(0, 0) = 0 [pid 488] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 488] write(3, "1000", 4) = 4 [pid 488] close(3) = 0 [pid 488] write(1, "executing program\n", 18) = 18 executing program [pid 488] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 488] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 488] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 488] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 488] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 488] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 488] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 489 attached => {parent_tid=[489]}, 88) = 489 [pid 489] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 488] rt_sigprocmask(SIG_SETMASK, [] [pid 489] rt_sigprocmask(SIG_SETMASK, [] [pid 488] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 489] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 488] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 489] memfd_create("syzkaller", 0 [pid 488] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 489] <... memfd_create resumed>) = 3 [pid 489] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 489] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 489] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 489] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 489] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 489] ioctl(4, LOOP_CLR_FD) = 0 [pid 489] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 489] close(4) = 0 [pid 489] close(3) = 0 [pid 489] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 488] <... futex resumed>) = 0 [pid 488] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 488] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 489] <... futex resumed>) = 1 [pid 489] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 489] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 488] <... futex resumed>) = 0 [pid 488] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 488] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 489] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 489] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 489] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 488] <... futex resumed>) = 0 [pid 488] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 488] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 489] <... futex resumed>) = 0 [pid 489] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 489] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 488] <... futex resumed>) = 0 [pid 488] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 488] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 489] <... futex resumed>) = 1 [pid 489] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 489] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 488] <... futex resumed>) = 0 [pid 489] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 488] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 488] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 489] <... futex resumed>) = 0 [pid 489] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 489] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 489] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 488] <... futex resumed>) = 0 [pid 488] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 488] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 489] <... futex resumed>) = 1 [pid 489] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 489] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 488] <... futex resumed>) = 0 [pid 488] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 489] memfd_create("syzkaller", 0 [pid 488] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 489] <... memfd_create resumed>) = 5 [pid 489] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 489] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 489] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 489] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 489] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 489] ioctl(6, LOOP_CLR_FD) = 0 [pid 489] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 489] close(6) = 0 [pid 489] close(5) = 0 [pid 489] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 488] <... futex resumed>) = 0 [pid 488] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 488] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 489] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 489] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 488] <... futex resumed>) = 0 [pid 489] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 488] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 489] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 488] <... futex resumed>) = 0 [pid 489] fchmodat(AT_FDCWD, 0x200000000300, 0177520 [pid 488] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 489] <... fchmodat resumed>) = 0 [pid 489] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 488] <... futex resumed>) = 0 [pid 489] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 488] exit_group(0) = ? [pid 489] <... futex resumed>) = ? [pid 489] +++ exited with 0 +++ [pid 488] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=488, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 490 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 490 attached [pid 490] set_robust_list(0x5555721e1760, 24) = 0 [pid 490] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 490] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 490] setpgid(0, 0) = 0 [pid 490] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 490] write(3, "1000", 4) = 4 [pid 490] close(3) = 0 [pid 490] write(1, "executing program\n", 18) = 18 executing program [pid 490] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 490] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 490] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 490] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 490] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 490] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 490] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[491]}, 88) = 491 [pid 490] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 490] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 490] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 491 attached [pid 491] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 491] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 491] memfd_create("syzkaller", 0) = 3 [pid 491] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 491] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 491] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 491] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 491] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 491] ioctl(4, LOOP_CLR_FD) = 0 [pid 491] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 491] close(4) = 0 [pid 491] close(3) = 0 [pid 491] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 490] <... futex resumed>) = 0 [pid 490] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 490] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 491] <... futex resumed>) = 1 [pid 491] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 491] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 490] <... futex resumed>) = 0 [pid 490] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 490] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 491] <... futex resumed>) = 1 [pid 491] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 491] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 490] <... futex resumed>) = 0 [pid 490] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 490] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 491] <... futex resumed>) = 1 [pid 491] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 491] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 490] <... futex resumed>) = 0 [pid 490] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 490] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 491] <... futex resumed>) = 1 [pid 491] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 491] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 490] <... futex resumed>) = 0 [pid 490] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 490] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 491] <... futex resumed>) = 1 [pid 491] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 491] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 491] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 490] <... futex resumed>) = 0 [pid 490] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 490] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 491] <... futex resumed>) = 1 [pid 491] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 491] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 490] <... futex resumed>) = 0 [pid 490] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 490] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 491] <... futex resumed>) = 1 [pid 491] memfd_create("syzkaller", 0) = 5 [pid 491] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 491] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 491] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 491] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 491] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 491] ioctl(6, LOOP_CLR_FD) = 0 [pid 491] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 491] close(6) = 0 [pid 491] close(5) = 0 [pid 491] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 490] <... futex resumed>) = 0 [pid 490] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 490] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 491] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 491] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 490] <... futex resumed>) = 0 [pid 490] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 490] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 491] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 491] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 490] <... futex resumed>) = 0 [pid 491] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 490] exit_group(0) = ? [pid 491] <... futex resumed>) = ? [pid 491] +++ exited with 0 +++ [pid 490] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=490, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 492 attached , child_tidptr=0x5555721e1750) = 492 [pid 492] set_robust_list(0x5555721e1760, 24 [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 492] <... set_robust_list resumed>) = 0 [pid 492] rt_sigprocmask(SIG_SETMASK, [] [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 492] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 492] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 492] setpgid(0, 0) = 0 [pid 492] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 492] write(3, "1000", 4) = 4 [pid 492] close(3) = 0 executing program [pid 492] write(1, "executing program\n", 18) = 18 [pid 492] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 492] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 492] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 492] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 492] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 492] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 493 attached [pid 493] set_robust_list(0x7f1cd63e09a0, 24 [pid 492] <... clone3 resumed> => {parent_tid=[493]}, 88) = 493 [pid 493] <... set_robust_list resumed>) = 0 [pid 492] rt_sigprocmask(SIG_SETMASK, [] [pid 493] rt_sigprocmask(SIG_SETMASK, [] [pid 492] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 493] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 492] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 493] memfd_create("syzkaller", 0 [pid 492] <... futex resumed>) = 0 [pid 492] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 493] <... memfd_create resumed>) = 3 [pid 493] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 493] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 493] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 493] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 493] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 493] ioctl(4, LOOP_CLR_FD) = 0 [pid 493] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 493] close(4) = 0 [pid 493] close(3) = 0 [pid 493] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 492] <... futex resumed>) = 0 [pid 492] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 493] <... futex resumed>) = 1 [pid 493] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 493] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 492] <... futex resumed>) = 0 [pid 492] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 493] <... futex resumed>) = 1 [pid 493] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 493] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 492] <... futex resumed>) = 0 [pid 492] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 493] <... futex resumed>) = 1 [pid 493] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 493] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 492] <... futex resumed>) = 0 [pid 492] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 493] <... futex resumed>) = 1 [pid 493] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 493] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 492] <... futex resumed>) = 0 [pid 492] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 493] <... futex resumed>) = 1 [pid 493] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 493] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 493] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 492] <... futex resumed>) = 0 [pid 492] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 493] <... futex resumed>) = 1 [pid 493] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 493] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 492] <... futex resumed>) = 0 [pid 492] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 493] <... futex resumed>) = 1 [pid 493] memfd_create("syzkaller", 0) = 5 [pid 493] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 493] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 493] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 493] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 493] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 493] ioctl(6, LOOP_CLR_FD) = 0 [pid 493] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 493] close(6) = 0 [pid 493] close(5) = 0 [pid 493] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 492] <... futex resumed>) = 0 [pid 492] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 493] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 493] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 492] <... futex resumed>) = 0 [pid 492] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 492] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 493] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 493] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 492] <... futex resumed>) = 0 [pid 493] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 492] exit_group(0) = ? [pid 493] <... futex resumed>) = ? [pid 493] +++ exited with 0 +++ [pid 492] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=492, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 494 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 494 attached [pid 494] set_robust_list(0x5555721e1760, 24) = 0 [pid 494] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 494] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 494] setpgid(0, 0) = 0 [pid 494] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 494] write(3, "1000", 4) = 4 [pid 494] close(3) = 0 [pid 494] write(1, "executing program\n", 18) = 18 executing program [pid 494] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 494] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 494] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 494] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 494] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 494] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 494] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 495 attached => {parent_tid=[495]}, 88) = 495 [pid 495] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 494] rt_sigprocmask(SIG_SETMASK, [] [pid 495] rt_sigprocmask(SIG_SETMASK, [] [pid 494] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 494] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 495] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 494] <... futex resumed>) = 0 [pid 494] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 495] memfd_create("syzkaller", 0) = 3 [pid 495] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 495] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 495] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 495] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 495] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 495] ioctl(4, LOOP_CLR_FD) = 0 [pid 495] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 495] close(4) = 0 [pid 495] close(3) = 0 [pid 495] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 494] <... futex resumed>) = 0 [pid 494] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 495] <... futex resumed>) = 1 [pid 494] <... futex resumed>) = 0 [pid 495] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL [pid 494] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 495] <... quotactl resumed>) = -1 EFAULT (Bad address) [pid 495] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 494] <... futex resumed>) = 0 [pid 494] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 494] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 495] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 495] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 494] <... futex resumed>) = 0 [pid 494] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 494] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 495] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 495] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 494] <... futex resumed>) = 0 [pid 494] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 494] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 495] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 495] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 494] <... futex resumed>) = 0 [pid 494] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 494] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 495] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 495] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 495] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 494] <... futex resumed>) = 0 [pid 494] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 494] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 495] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 495] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 494] <... futex resumed>) = 0 [pid 494] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 494] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 495] memfd_create("syzkaller", 0) = 5 [pid 495] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 495] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 495] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 495] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 495] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 495] ioctl(6, LOOP_CLR_FD) = 0 [pid 495] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 495] close(6) = 0 [pid 495] close(5) = 0 [pid 495] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 494] <... futex resumed>) = 0 [pid 494] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 494] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 495] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 495] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 494] <... futex resumed>) = 0 [pid 494] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 494] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 495] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 495] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 494] <... futex resumed>) = 0 [pid 494] exit_group(0) = ? [pid 495] +++ exited with 0 +++ [pid 494] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=494, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 496 ci2-android-6-1/strace-static-x86_64: Process 496 attached [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 496] set_robust_list(0x5555721e1760, 24 [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 496] <... set_robust_list resumed>) = 0 [pid 496] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 496] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 496] setpgid(0, 0) = 0 [pid 496] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 496] write(3, "1000", 4) = 4 [pid 496] close(3) = 0 executing program [pid 496] write(1, "executing program\n", 18) = 18 [pid 496] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 496] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 496] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 496] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 496] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 496] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 496] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 497 attached [pid 497] set_robust_list(0x7f1cd63e09a0, 24 [pid 496] <... clone3 resumed> => {parent_tid=[497]}, 88) = 497 [pid 496] rt_sigprocmask(SIG_SETMASK, [] [pid 497] <... set_robust_list resumed>) = 0 [pid 496] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 496] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 497] rt_sigprocmask(SIG_SETMASK, [] [pid 496] <... futex resumed>) = 0 [pid 497] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 497] memfd_create("syzkaller", 0 [pid 496] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 497] <... memfd_create resumed>) = 3 [pid 497] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 497] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 497] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 497] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 497] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 497] ioctl(4, LOOP_CLR_FD) = 0 [pid 497] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 497] close(4) = 0 [pid 497] close(3) = 0 [pid 497] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 497] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 496] <... futex resumed>) = 0 [pid 496] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 496] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 497] <... futex resumed>) = 0 [pid 497] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 497] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 496] <... futex resumed>) = 0 [pid 496] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 496] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 497] <... futex resumed>) = 1 [pid 497] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 497] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 496] <... futex resumed>) = 0 [pid 497] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 496] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 496] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 497] <... futex resumed>) = 0 [pid 497] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 497] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 496] <... futex resumed>) = 0 [pid 496] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 496] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 497] <... futex resumed>) = 1 [pid 497] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 497] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 496] <... futex resumed>) = 0 [pid 496] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 496] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 497] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 497] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 497] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 496] <... futex resumed>) = 0 [pid 497] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0 [pid 496] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 496] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 497] <... mmap resumed>) = 0x200000000000 [pid 497] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 496] <... futex resumed>) = 0 [pid 496] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 496] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 497] memfd_create("syzkaller", 0) = 5 [pid 497] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 497] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 497] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 497] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 497] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 497] ioctl(6, LOOP_CLR_FD) = 0 [pid 497] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 497] close(6) = 0 [pid 497] close(5) = 0 [pid 497] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 496] <... futex resumed>) = 0 [pid 497] chdir(0x200000000040 [pid 496] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 497] <... chdir resumed>) = -1 ENOENT (No such file or directory) [pid 496] <... futex resumed>) = 0 [pid 497] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 496] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 497] <... futex resumed>) = 0 [pid 496] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 497] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 496] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 497] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 496] <... futex resumed>) = 0 [pid 497] fchmodat(AT_FDCWD, 0x200000000300, 0177520 [pid 496] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 497] <... fchmodat resumed>) = 0 [pid 497] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 496] <... futex resumed>) = 0 [pid 497] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 496] exit_group(0 [pid 497] <... futex resumed>) = ? [pid 496] <... exit_group resumed>) = ? [pid 497] +++ exited with 0 +++ [pid 496] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=496, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 498 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 498 attached [pid 498] set_robust_list(0x5555721e1760, 24) = 0 [pid 498] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 498] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 498] setpgid(0, 0) = 0 [pid 498] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 498] write(3, "1000", 4) = 4 [pid 498] close(3) = 0 [pid 498] write(1, "executing program\n", 18) = 18 [pid 498] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 executing program [pid 498] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 498] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 498] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 498] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 498] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 498] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[499]}, 88) = 499 [pid 498] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 498] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 498] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 499 attached [pid 499] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 499] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 499] memfd_create("syzkaller", 0) = 3 [pid 499] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 499] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 499] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 499] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 499] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 499] ioctl(4, LOOP_CLR_FD) = 0 [pid 499] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 499] close(4) = 0 [pid 499] close(3) = 0 [pid 499] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 498] <... futex resumed>) = 0 [pid 498] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 498] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 499] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 499] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 498] <... futex resumed>) = 0 [pid 498] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 498] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 499] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 499] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 498] <... futex resumed>) = 0 [pid 498] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 498] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 499] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 499] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 498] <... futex resumed>) = 0 [pid 498] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 498] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 499] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 499] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 498] <... futex resumed>) = 0 [pid 498] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 498] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 499] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 499] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 499] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 498] <... futex resumed>) = 0 [pid 498] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 498] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 499] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 499] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 498] <... futex resumed>) = 0 [pid 498] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 498] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 499] memfd_create("syzkaller", 0) = 5 [pid 499] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 499] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 499] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 499] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 499] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 499] ioctl(6, LOOP_CLR_FD) = 0 [pid 499] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 499] close(6) = 0 [pid 499] close(5) = 0 [pid 499] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 498] <... futex resumed>) = 0 [pid 498] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 498] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 499] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 499] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 498] <... futex resumed>) = 0 [pid 498] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 498] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 499] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 499] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 498] <... futex resumed>) = 0 [pid 499] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 498] exit_group(0) = ? [pid 499] <... futex resumed>) = ? [pid 499] +++ exited with 0 +++ [pid 498] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=498, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 500 ci2-android-6-1/strace-static-x86_64: Process 500 attached [pid 500] set_robust_list(0x5555721e1760, 24) = 0 [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 500] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 500] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 500] setpgid(0, 0) = 0 [pid 500] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 500] <... openat resumed>) = 3 [pid 500] write(3, "1000", 4) = 4 [pid 500] close(3) = 0 [pid 500] write(1, "executing program\n", 18) = 18 executing program [pid 500] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 500] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 500] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 500] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 500] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 500] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 500] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[501]}, 88) = 501 [pid 500] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 500] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 500] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 501 attached [pid 501] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 501] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 501] memfd_create("syzkaller", 0) = 3 [pid 501] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 501] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 501] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 501] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 501] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 501] ioctl(4, LOOP_CLR_FD) = 0 [pid 501] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 501] close(4) = 0 [pid 501] close(3) = 0 [pid 501] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 500] <... futex resumed>) = 0 [pid 500] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 500] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 501] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 501] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 500] <... futex resumed>) = 0 [pid 500] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 500] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 501] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 501] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 500] <... futex resumed>) = 0 [pid 500] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 500] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 501] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 501] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 500] <... futex resumed>) = 0 [pid 500] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 500] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 501] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 501] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 500] <... futex resumed>) = 0 [pid 500] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 500] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 501] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 501] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 501] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 500] <... futex resumed>) = 0 [pid 500] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 500] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 501] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 501] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 500] <... futex resumed>) = 0 [pid 500] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 500] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 501] memfd_create("syzkaller", 0) = 5 [pid 501] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 501] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 501] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 501] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 501] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 501] ioctl(6, LOOP_CLR_FD) = 0 [pid 501] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 501] close(6) = 0 [pid 501] close(5) = 0 [pid 501] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 500] <... futex resumed>) = 0 [pid 500] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 500] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 501] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 501] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 500] <... futex resumed>) = 0 [pid 500] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 500] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 501] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 501] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 500] <... futex resumed>) = 0 [pid 500] exit_group(0) = ? [pid 501] +++ exited with 0 +++ [pid 500] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=500, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 502 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 502 attached [pid 502] set_robust_list(0x5555721e1760, 24) = 0 [pid 502] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 502] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 502] setpgid(0, 0) = 0 [pid 502] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 502] write(3, "1000", 4) = 4 [pid 502] close(3) = 0 [pid 502] write(1, "executing program\n", 18) = 18 executing program [pid 502] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 502] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 502] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 502] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 502] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 502] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 502] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[503]}, 88) = 503 ci2-android-6-1/strace-static-x86_64: Process 503 attached [pid 503] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 503] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 503] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 502] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 502] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 503] <... futex resumed>) = 0 [pid 503] memfd_create("syzkaller", 0) = 3 [pid 503] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 502] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 503] <... mmap resumed>) = 0x7f1ccdfc0000 [pid 503] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 503] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 503] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 503] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 503] ioctl(4, LOOP_CLR_FD) = 0 [pid 503] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 503] close(4) = 0 [pid 503] close(3) = 0 [pid 503] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 502] <... futex resumed>) = 0 [pid 502] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 502] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 503] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 503] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 502] <... futex resumed>) = 0 [pid 502] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 502] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 503] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 503] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 502] <... futex resumed>) = 0 [pid 502] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 502] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 503] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 503] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 502] <... futex resumed>) = 0 [pid 502] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 502] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 503] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 503] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 502] <... futex resumed>) = 0 [pid 502] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 502] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 503] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 503] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 503] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 502] <... futex resumed>) = 0 [pid 502] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 502] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 503] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 503] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 503] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 502] <... futex resumed>) = 0 [pid 502] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 503] <... futex resumed>) = 0 [pid 502] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 503] memfd_create("syzkaller", 0) = 5 [pid 503] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 503] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 503] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 503] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 503] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 503] ioctl(6, LOOP_CLR_FD) = 0 [pid 503] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 503] close(6) = 0 [pid 503] close(5) = 0 [pid 503] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 502] <... futex resumed>) = 0 [pid 502] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 502] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 503] <... futex resumed>) = 1 [pid 503] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 503] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 502] <... futex resumed>) = 0 [pid 502] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 502] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 503] <... futex resumed>) = 1 [pid 503] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 503] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 502] <... futex resumed>) = 0 [pid 502] exit_group(0) = ? [pid 503] <... futex resumed>) = ? [pid 503] +++ exited with 0 +++ [pid 502] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=502, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 504 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 504 attached [pid 504] set_robust_list(0x5555721e1760, 24) = 0 [pid 504] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 504] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 504] setpgid(0, 0) = 0 [pid 504] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 504] write(3, "1000", 4) = 4 [pid 504] close(3) = 0 [pid 504] write(1, "executing program\n", 18) = 18 executing program [pid 504] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 504] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 504] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 504] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 504] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 504] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 504] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 505 attached => {parent_tid=[505]}, 88) = 505 [pid 505] set_robust_list(0x7f1cd63e09a0, 24 [pid 504] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 504] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 504] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 505] <... set_robust_list resumed>) = 0 [pid 505] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 505] memfd_create("syzkaller", 0) = 3 [pid 505] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 505] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 505] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 505] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 505] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 505] ioctl(4, LOOP_CLR_FD) = 0 [pid 505] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 505] close(4) = 0 [pid 505] close(3) = 0 [pid 505] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 504] <... futex resumed>) = 0 [pid 504] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 504] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 505] <... futex resumed>) = 1 [pid 505] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 505] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 504] <... futex resumed>) = 0 [pid 504] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 504] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 505] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 505] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 504] <... futex resumed>) = 0 [pid 504] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 504] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 505] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 505] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 504] <... futex resumed>) = 0 [pid 504] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 504] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 505] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 505] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 504] <... futex resumed>) = 0 [pid 504] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 504] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 505] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 505] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 505] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 504] <... futex resumed>) = 0 [pid 504] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 504] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 505] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 505] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 504] <... futex resumed>) = 0 [pid 504] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 504] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 505] memfd_create("syzkaller", 0) = 5 [pid 505] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 505] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 505] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 505] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 505] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 505] ioctl(6, LOOP_CLR_FD) = 0 [pid 505] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 505] close(6) = 0 [pid 505] close(5) = 0 [pid 505] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 504] <... futex resumed>) = 0 [pid 504] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 504] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 505] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 505] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 504] <... futex resumed>) = 0 [pid 504] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 504] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 505] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 505] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 504] <... futex resumed>) = 0 [pid 504] exit_group(0) = ? [pid 505] <... futex resumed>) = ? [pid 505] +++ exited with 0 +++ [pid 504] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=504, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 506 ci2-android-6-1/strace-static-x86_64: Process 506 attached [pid 506] set_robust_list(0x5555721e1760, 24) = 0 [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 506] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 506] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 506] setpgid(0, 0) = 0 [pid 506] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 506] write(3, "1000", 4) = 4 [pid 506] close(3) = 0 [pid 506] write(1, "executing program\n", 18) = 18 executing program [pid 506] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 506] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 506] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 506] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 506] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 506] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 506] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[507]}, 88) = 507 [pid 506] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 506] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 506] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 507 attached [pid 507] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 507] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 507] memfd_create("syzkaller", 0) = 3 [pid 507] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 507] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 507] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 507] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 507] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 507] ioctl(4, LOOP_CLR_FD) = 0 [pid 507] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 507] close(4) = 0 [pid 507] close(3) = 0 [pid 507] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 506] <... futex resumed>) = 0 [pid 506] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 506] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 507] <... futex resumed>) = 1 [pid 507] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 507] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 506] <... futex resumed>) = 0 [pid 506] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 506] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 507] <... futex resumed>) = 1 [pid 507] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 507] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 506] <... futex resumed>) = 0 [pid 506] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 506] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 507] <... futex resumed>) = 1 [pid 507] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 507] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 506] <... futex resumed>) = 0 [pid 506] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 506] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 507] <... futex resumed>) = 1 [pid 507] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 507] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 506] <... futex resumed>) = 0 [pid 506] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 506] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 507] <... futex resumed>) = 1 [pid 507] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 507] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 507] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 506] <... futex resumed>) = 0 [pid 506] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 506] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 507] <... futex resumed>) = 1 [pid 507] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 507] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 506] <... futex resumed>) = 0 [pid 506] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 506] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 507] <... futex resumed>) = 1 [pid 507] memfd_create("syzkaller", 0) = 5 [pid 507] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 507] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 507] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 507] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 507] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 507] ioctl(6, LOOP_CLR_FD) = 0 [pid 507] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 507] close(6) = 0 [pid 507] close(5) = 0 [pid 507] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 506] <... futex resumed>) = 0 [pid 506] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 506] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 507] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 507] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 506] <... futex resumed>) = 0 [pid 507] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 506] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 506] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 507] <... futex resumed>) = 0 [pid 507] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 507] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 506] <... futex resumed>) = 0 [pid 506] exit_group(0) = ? [pid 507] <... futex resumed>) = ? [pid 507] +++ exited with 0 +++ [pid 506] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=506, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 508 ci2-android-6-1/strace-static-x86_64: Process 508 attached [pid 305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 508] set_robust_list(0x5555721e1760, 24) = 0 [pid 508] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 508] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 508] setpgid(0, 0) = 0 [pid 508] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 508] write(3, "1000", 4) = 4 [pid 508] close(3) = 0 [pid 508] write(1, "executing program\n", 18) = 18 executing program [pid 508] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 508] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 508] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 508] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 508] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 508] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 508] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 509 attached [pid 509] set_robust_list(0x7f1cd63e09a0, 24 [pid 508] <... clone3 resumed> => {parent_tid=[509]}, 88) = 509 [pid 508] rt_sigprocmask(SIG_SETMASK, [] [pid 509] <... set_robust_list resumed>) = 0 [pid 508] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 508] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 509] rt_sigprocmask(SIG_SETMASK, [] [pid 508] <... futex resumed>) = 0 [pid 509] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 509] memfd_create("syzkaller", 0 [pid 508] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 509] <... memfd_create resumed>) = 3 [pid 509] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 509] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 509] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 509] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 509] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 509] ioctl(4, LOOP_CLR_FD) = 0 [pid 509] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 509] close(4) = 0 [pid 509] close(3) = 0 [pid 509] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 509] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 508] <... futex resumed>) = 0 [pid 508] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 508] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 509] <... futex resumed>) = 0 [pid 509] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 509] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 508] <... futex resumed>) = 0 [pid 508] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 508] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 509] <... futex resumed>) = 1 [pid 509] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 509] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 508] <... futex resumed>) = 0 [pid 508] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 508] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 509] <... futex resumed>) = 1 [pid 509] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 509] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 508] <... futex resumed>) = 0 [pid 508] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 508] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 509] <... futex resumed>) = 1 [pid 509] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 509] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 508] <... futex resumed>) = 0 [pid 508] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 508] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 509] <... futex resumed>) = 1 [pid 509] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 509] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 509] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 508] <... futex resumed>) = 0 [pid 508] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 508] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 509] <... futex resumed>) = 1 [pid 509] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 509] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 508] <... futex resumed>) = 0 [pid 508] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 508] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 509] <... futex resumed>) = 1 [pid 509] memfd_create("syzkaller", 0) = 5 [pid 509] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 509] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 509] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 509] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 509] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 509] ioctl(6, LOOP_CLR_FD) = 0 [pid 509] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 509] close(6) = 0 [pid 509] close(5) = 0 [pid 509] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 508] <... futex resumed>) = 0 [pid 508] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 508] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 509] <... futex resumed>) = 1 [pid 509] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 509] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 508] <... futex resumed>) = 0 [pid 508] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 508] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 509] <... futex resumed>) = 1 [pid 509] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 509] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 508] <... futex resumed>) = 0 [pid 508] exit_group(0) = ? [pid 509] <... futex resumed>) = ? [pid 509] +++ exited with 0 +++ [pid 508] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=508, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 510 ci2-android-6-1/strace-static-x86_64: Process 510 attached [pid 305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 510] set_robust_list(0x5555721e1760, 24) = 0 [pid 510] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 510] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 510] setpgid(0, 0) = 0 [pid 510] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 510] write(3, "1000", 4) = 4 [pid 510] close(3) = 0 [pid 510] write(1, "executing program\n", 18) = 18 executing program [pid 510] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 510] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 510] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 510] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 510] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 510] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 510] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 511 attached => {parent_tid=[511]}, 88) = 511 [pid 511] set_robust_list(0x7f1cd63e09a0, 24 [pid 510] rt_sigprocmask(SIG_SETMASK, [] [pid 511] <... set_robust_list resumed>) = 0 [pid 510] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 511] rt_sigprocmask(SIG_SETMASK, [] [pid 510] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 510] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 511] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 511] memfd_create("syzkaller", 0) = 3 [pid 511] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 511] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 511] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 511] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 511] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 511] ioctl(4, LOOP_CLR_FD) = 0 [pid 511] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 511] close(4) = 0 [pid 511] close(3) = 0 [pid 511] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 511] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 510] <... futex resumed>) = 0 [pid 510] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 510] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 511] <... futex resumed>) = 0 [pid 511] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 511] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 510] <... futex resumed>) = 0 [pid 510] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 510] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 511] <... futex resumed>) = 1 [pid 511] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 511] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 510] <... futex resumed>) = 0 [pid 510] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 510] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 511] <... futex resumed>) = 1 [pid 511] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 511] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 510] <... futex resumed>) = 0 [pid 510] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 510] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 511] <... futex resumed>) = 1 [pid 511] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 511] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 510] <... futex resumed>) = 0 [pid 510] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 510] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 511] <... futex resumed>) = 1 [pid 511] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 511] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 511] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 510] <... futex resumed>) = 0 [pid 510] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 510] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 511] <... futex resumed>) = 1 [pid 511] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 511] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 510] <... futex resumed>) = 0 [pid 510] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 510] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 511] <... futex resumed>) = 1 [pid 511] memfd_create("syzkaller", 0) = 5 [pid 511] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 511] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 511] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 511] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 511] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 511] ioctl(6, LOOP_CLR_FD) = 0 [pid 511] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 511] close(6) = 0 [pid 511] close(5) = 0 [pid 511] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 510] <... futex resumed>) = 0 [pid 510] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 510] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 511] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 511] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 510] <... futex resumed>) = 0 [pid 510] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 510] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 511] <... futex resumed>) = 1 [pid 511] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 511] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 510] <... futex resumed>) = 0 [pid 510] exit_group(0) = ? [pid 511] <... futex resumed>) = ? [pid 511] +++ exited with 0 +++ [pid 510] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=510, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 512 attached , child_tidptr=0x5555721e1750) = 512 [pid 305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 512] set_robust_list(0x5555721e1760, 24) = 0 [pid 512] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 512] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 512] setpgid(0, 0) = 0 [pid 512] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 512] write(3, "1000", 4) = 4 [pid 512] close(3) = 0 [pid 512] write(1, "executing program\n", 18) = 18 [pid 512] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 512] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 512] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 512] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 512] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 512] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 512] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[513]}, 88) = 513 [pid 512] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 512] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 512] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 513 attached executing program [pid 513] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 513] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 513] memfd_create("syzkaller", 0) = 3 [pid 513] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 513] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 513] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 513] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 513] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 513] ioctl(4, LOOP_CLR_FD) = 0 [pid 513] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 513] close(4) = 0 [pid 513] close(3) = 0 [pid 513] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 512] <... futex resumed>) = 0 [pid 512] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 512] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 513] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 513] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 512] <... futex resumed>) = 0 [pid 512] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 512] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 513] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 513] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 512] <... futex resumed>) = 0 [pid 512] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 512] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 513] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 513] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 512] <... futex resumed>) = 0 [pid 512] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 512] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 513] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 513] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 512] <... futex resumed>) = 0 [pid 512] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 512] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 513] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 513] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 513] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 512] <... futex resumed>) = 0 [pid 512] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 512] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 513] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 513] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 512] <... futex resumed>) = 0 [pid 512] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 512] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 513] memfd_create("syzkaller", 0) = 5 [pid 513] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 513] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 513] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 513] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 513] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 513] ioctl(6, LOOP_CLR_FD) = 0 [pid 513] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 513] close(6) = 0 [pid 513] close(5) = 0 [pid 513] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 512] <... futex resumed>) = 0 [pid 512] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 512] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 513] <... futex resumed>) = 1 [pid 513] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 513] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 512] <... futex resumed>) = 0 [pid 512] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 512] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 513] <... futex resumed>) = 1 [pid 513] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 513] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 512] <... futex resumed>) = 0 [pid 512] exit_group(0) = ? [pid 513] <... futex resumed>) = ? [pid 513] +++ exited with 0 +++ [pid 512] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=512, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 514 attached [pid 514] set_robust_list(0x5555721e1760, 24) = 0 [pid 514] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 305] <... clone resumed>, child_tidptr=0x5555721e1750) = 514 [pid 514] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 514] setpgid(0, 0) = 0 [pid 514] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 514] <... openat resumed>) = 3 [pid 514] write(3, "1000", 4) = 4 [pid 514] close(3) = 0 [pid 514] write(1, "executing program\n", 18) = 18 executing program [pid 514] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 514] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 514] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 514] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 514] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 514] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 514] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[515]}, 88) = 515 [pid 514] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 514] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 514] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 515 attached [pid 515] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 515] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 515] memfd_create("syzkaller", 0) = 3 [pid 515] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 515] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 515] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 515] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 515] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 515] ioctl(4, LOOP_CLR_FD) = 0 [pid 515] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 515] close(4) = 0 [pid 515] close(3) = 0 [pid 515] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 515] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 514] <... futex resumed>) = 0 [pid 514] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 514] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 515] <... futex resumed>) = 0 [pid 515] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 515] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 514] <... futex resumed>) = 0 [pid 514] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 514] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 515] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 515] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 514] <... futex resumed>) = 0 [pid 514] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 514] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 515] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 515] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 514] <... futex resumed>) = 0 [pid 514] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 514] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 515] <... futex resumed>) = 1 [pid 515] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 515] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 514] <... futex resumed>) = 0 [pid 514] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 514] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 515] <... futex resumed>) = 1 [pid 515] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 515] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 515] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 514] <... futex resumed>) = 0 [pid 514] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 514] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 515] <... futex resumed>) = 1 [pid 515] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 515] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 514] <... futex resumed>) = 0 [pid 514] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 514] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 515] memfd_create("syzkaller", 0) = 5 [pid 515] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 515] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 515] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 515] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 515] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 515] ioctl(6, LOOP_CLR_FD) = 0 [pid 515] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 515] close(6) = 0 [pid 515] close(5) = 0 [pid 515] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 515] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 514] <... futex resumed>) = 0 [pid 514] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 514] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 515] <... futex resumed>) = 0 [pid 515] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 515] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 514] <... futex resumed>) = 0 [pid 514] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 514] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 515] <... futex resumed>) = 1 [pid 515] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 515] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 514] <... futex resumed>) = 0 [pid 514] exit_group(0) = ? [pid 515] <... futex resumed>) = ? [pid 515] +++ exited with 0 +++ [pid 514] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=514, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 516 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 516 attached [pid 516] set_robust_list(0x5555721e1760, 24) = 0 [pid 516] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 516] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 516] setpgid(0, 0) = 0 [pid 516] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 516] write(3, "1000", 4) = 4 [pid 516] close(3) = 0 [pid 516] write(1, "executing program\n", 18) = 18 executing program [pid 516] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 516] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 516] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 516] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 516] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 516] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 516] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[517]}, 88) = 517 [pid 516] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 516] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 516] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 517 attached [pid 517] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 517] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 517] memfd_create("syzkaller", 0) = 3 [pid 517] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 517] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 517] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 517] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 517] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 517] ioctl(4, LOOP_CLR_FD) = 0 [pid 517] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 517] close(4) = 0 [pid 517] close(3) = 0 [pid 517] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 516] <... futex resumed>) = 0 [pid 517] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 516] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 516] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 517] <... futex resumed>) = 0 [pid 517] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 517] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 516] <... futex resumed>) = 0 [pid 517] openat(AT_FDCWD, ".", O_RDONLY [pid 516] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 517] <... openat resumed>) = 3 [pid 517] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 516] <... futex resumed>) = 0 [pid 516] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 517] <... futex resumed>) = 0 [pid 516] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 517] symlinkat("\x2e\x02", 3, "./file0" [pid 516] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 516] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 517] <... symlinkat resumed>) = -1 EEXIST (File exists) [pid 517] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 516] <... futex resumed>) = 0 [pid 517] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM [pid 516] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 516] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 517] <... mprotect resumed>) = 0 [pid 517] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 516] <... futex resumed>) = 0 [pid 516] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 517] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 516] <... futex resumed>) = 0 [pid 516] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 517] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 517] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 516] <... futex resumed>) = 0 [pid 517] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 516] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 517] <... futex resumed>) = 0 [pid 516] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 517] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 517] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 516] <... futex resumed>) = 0 [pid 516] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 516] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 517] <... futex resumed>) = 1 [pid 517] memfd_create("syzkaller", 0) = 5 [pid 517] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 517] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 517] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 517] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 517] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 517] ioctl(6, LOOP_CLR_FD) = 0 [pid 517] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 517] close(6) = 0 [pid 517] close(5) = 0 [pid 517] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 516] <... futex resumed>) = 0 [pid 516] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 516] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 517] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 517] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 516] <... futex resumed>) = 0 [pid 516] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 516] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 517] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 517] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 516] <... futex resumed>) = 0 [pid 517] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 516] exit_group(0) = ? [pid 517] <... futex resumed>) = ? [pid 517] +++ exited with 0 +++ [pid 516] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=516, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 518 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 518 attached [pid 518] set_robust_list(0x5555721e1760, 24) = 0 [pid 518] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 518] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 518] setpgid(0, 0) = 0 [pid 518] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 518] write(3, "1000", 4) = 4 [pid 518] close(3) = 0 [pid 518] write(1, "executing program\n", 18) = 18 executing program [pid 518] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 518] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 518] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 518] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 518] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 518] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 518] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 519 attached => {parent_tid=[519]}, 88) = 519 [pid 519] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 518] rt_sigprocmask(SIG_SETMASK, [] [pid 519] rt_sigprocmask(SIG_SETMASK, [] [pid 518] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 518] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 519] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 518] <... futex resumed>) = 0 [pid 518] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 519] memfd_create("syzkaller", 0) = 3 [pid 519] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 519] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 519] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 519] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 519] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 519] ioctl(4, LOOP_CLR_FD) = 0 [pid 519] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 519] close(4) = 0 [pid 519] close(3) = 0 [pid 519] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 518] <... futex resumed>) = 0 [pid 518] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 518] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 519] <... futex resumed>) = 1 [pid 519] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 519] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 518] <... futex resumed>) = 0 [pid 518] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 518] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 519] <... futex resumed>) = 1 [pid 519] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 519] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 518] <... futex resumed>) = 0 [pid 518] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 518] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 519] <... futex resumed>) = 1 [pid 519] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 519] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 518] <... futex resumed>) = 0 [pid 518] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 518] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 519] <... futex resumed>) = 1 [pid 519] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 519] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 518] <... futex resumed>) = 0 [pid 519] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 518] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 518] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 519] <... futex resumed>) = 0 [pid 519] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 519] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 519] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 518] <... futex resumed>) = 0 [pid 519] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0 [pid 518] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 518] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 519] <... mmap resumed>) = 0x200000000000 [pid 519] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 518] <... futex resumed>) = 0 [pid 518] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 518] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 519] memfd_create("syzkaller", 0) = 5 [pid 519] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 519] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 519] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 519] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 519] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 519] ioctl(6, LOOP_CLR_FD) = 0 [pid 519] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 519] close(6) = 0 [pid 519] close(5) = 0 [pid 519] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 518] <... futex resumed>) = 0 [pid 518] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 518] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 519] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 519] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 518] <... futex resumed>) = 0 [pid 518] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 518] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 519] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 519] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 518] <... futex resumed>) = 0 [pid 519] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 518] exit_group(0) = ? [pid 519] <... futex resumed>) = ? [pid 519] +++ exited with 0 +++ [pid 518] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=518, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 520 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 520 attached [pid 520] set_robust_list(0x5555721e1760, 24) = 0 [pid 520] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 520] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 520] setpgid(0, 0) = 0 [pid 520] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 520] write(3, "1000", 4) = 4 [pid 520] close(3) = 0 [pid 520] write(1, "executing program\n", 18) = 18 executing program [pid 520] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 520] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 520] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 520] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 520] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 520] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 520] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[521]}, 88) = 521 [pid 520] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 520] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 520] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 521 attached [pid 521] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 521] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 521] memfd_create("syzkaller", 0) = 3 [pid 521] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 521] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 521] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 521] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 521] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 521] ioctl(4, LOOP_CLR_FD) = 0 [pid 521] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 521] close(4) = 0 [pid 521] close(3) = 0 [pid 521] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 520] <... futex resumed>) = 0 [pid 520] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 520] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 521] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 521] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 520] <... futex resumed>) = 0 [pid 520] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 520] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 521] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 521] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 520] <... futex resumed>) = 0 [pid 520] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 520] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 521] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 521] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 520] <... futex resumed>) = 0 [pid 521] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM [pid 520] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 520] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 521] <... mprotect resumed>) = 0 [pid 521] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 520] <... futex resumed>) = 0 [pid 520] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 520] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 521] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 521] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 521] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 520] <... futex resumed>) = 0 [pid 520] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 520] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 521] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 521] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 520] <... futex resumed>) = 0 [pid 520] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 520] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 521] memfd_create("syzkaller", 0) = 5 [pid 521] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 521] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 521] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 521] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 521] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 521] ioctl(6, LOOP_CLR_FD) = 0 [pid 521] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 521] close(6) = 0 [pid 521] close(5) = 0 [pid 521] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 521] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 520] <... futex resumed>) = 0 [pid 520] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 520] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 521] <... futex resumed>) = 0 [pid 521] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 521] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 520] <... futex resumed>) = 0 [pid 520] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 520] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 521] <... futex resumed>) = 1 [pid 521] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 521] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 520] <... futex resumed>) = 0 [pid 521] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 520] exit_group(0) = ? [pid 521] <... futex resumed>) = ? [pid 521] +++ exited with 0 +++ [pid 520] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=520, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 522 ci2-android-6-1/strace-static-x86_64: Process 522 attached [pid 522] set_robust_list(0x5555721e1760, 24) = 0 [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 522] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 522] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 522] setpgid(0, 0) = 0 [pid 522] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 522] write(3, "1000", 4) = 4 [pid 522] close(3) = 0 [pid 522] write(1, "executing program\n", 18) = 18 executing program [pid 522] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 522] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 522] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 522] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 522] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 522] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 522] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[523]}, 88) = 523 [pid 522] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 522] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 522] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 523 attached [pid 523] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 523] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 523] memfd_create("syzkaller", 0) = 3 [pid 523] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 523] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 523] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 523] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 523] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 523] ioctl(4, LOOP_CLR_FD) = 0 [pid 523] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 523] close(4) = 0 [pid 523] close(3) = 0 [pid 523] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 522] <... futex resumed>) = 0 [pid 522] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 522] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 523] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 523] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 522] <... futex resumed>) = 0 [pid 522] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 522] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 523] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 523] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 522] <... futex resumed>) = 0 [pid 522] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 522] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 523] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 523] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 522] <... futex resumed>) = 0 [pid 522] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 522] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 523] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 523] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 522] <... futex resumed>) = 0 [pid 522] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 522] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 523] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 523] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 523] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 522] <... futex resumed>) = 0 [pid 522] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 522] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 523] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 523] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 522] <... futex resumed>) = 0 [pid 522] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 522] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 523] memfd_create("syzkaller", 0) = 5 [pid 523] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 523] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 523] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 523] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 523] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 523] ioctl(6, LOOP_CLR_FD) = 0 [pid 523] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 523] close(6) = 0 [pid 523] close(5) = 0 [pid 523] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 523] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 522] <... futex resumed>) = 0 [pid 522] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 523] <... futex resumed>) = 0 [pid 523] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 522] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 523] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 523] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 522] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 522] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 523] <... futex resumed>) = 0 [pid 523] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 522] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 523] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 523] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 522] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 522] exit_group(0) = ? [pid 523] <... futex resumed>) = ? [pid 523] +++ exited with 0 +++ [pid 522] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=522, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 524 ci2-android-6-1/strace-static-x86_64: Process 524 attached [pid 524] set_robust_list(0x5555721e1760, 24) = 0 [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 524] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 524] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 524] <... prctl resumed>) = 0 [pid 524] setpgid(0, 0) = 0 [pid 524] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 524] write(3, "1000", 4) = 4 [pid 524] close(3) = 0 [pid 524] write(1, "executing program\n", 18) = 18 executing program [pid 524] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 524] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 524] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 524] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 524] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 524] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 524] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[525]}, 88) = 525 [pid 524] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 524] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 524] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 525 attached [pid 525] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 525] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 525] memfd_create("syzkaller", 0) = 3 [pid 525] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 525] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 525] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 525] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 525] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 525] ioctl(4, LOOP_CLR_FD) = 0 [pid 525] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 525] close(4) = 0 [pid 525] close(3) = 0 [pid 525] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 524] <... futex resumed>) = 0 [pid 524] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 524] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 525] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 525] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 524] <... futex resumed>) = 0 [pid 524] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 524] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 525] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 525] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 524] <... futex resumed>) = 0 [pid 524] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 524] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 525] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 525] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 524] <... futex resumed>) = 0 [pid 524] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 524] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 525] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 525] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 524] <... futex resumed>) = 0 [pid 524] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 524] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 525] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 525] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 525] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 524] <... futex resumed>) = 0 [pid 524] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 524] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 525] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 525] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 524] <... futex resumed>) = 0 [pid 524] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 524] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 525] memfd_create("syzkaller", 0) = 5 [pid 525] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 525] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 525] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 525] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 525] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 525] ioctl(6, LOOP_CLR_FD) = 0 [pid 525] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 525] close(6) = 0 [pid 525] close(5) = 0 [pid 525] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 524] <... futex resumed>) = 0 [pid 524] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 524] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 525] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 525] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 524] <... futex resumed>) = 0 [pid 524] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 525] fchmodat(AT_FDCWD, 0x200000000300, 0177520 [pid 524] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 525] <... fchmodat resumed>) = 0 [pid 525] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 525] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 524] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 524] exit_group(0) = ? [pid 525] <... futex resumed>) = ? [pid 525] +++ exited with 0 +++ [pid 524] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=524, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 526 attached [pid 526] set_robust_list(0x5555721e1760, 24) = 0 [pid 526] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 526] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 526] setpgid(0, 0) = 0 [pid 526] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 526] write(3, "1000", 4) = 4 [pid 526] close(3) = 0 [pid 526] write(1, "executing program\n", 18) = 18 executing program [pid 526] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 526] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0} [pid 305] <... clone resumed>, child_tidptr=0x5555721e1750) = 526 [pid 526] <... rt_sigaction resumed>, NULL, 8) = 0 [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 526] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1] [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 526] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 526] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 526] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 526] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 526] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[527]}, 88) = 527 [pid 526] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 526] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 526] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 527 attached [pid 527] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 527] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 527] memfd_create("syzkaller", 0) = 3 [pid 527] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 527] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 527] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 527] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 527] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 527] ioctl(4, LOOP_CLR_FD) = 0 [pid 527] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 527] close(4) = 0 [pid 527] close(3) = 0 [pid 527] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 526] <... futex resumed>) = 0 [pid 526] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 526] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 527] <... futex resumed>) = 1 [pid 527] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 527] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 526] <... futex resumed>) = 0 [pid 526] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 526] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 527] <... futex resumed>) = 1 [pid 527] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 527] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 526] <... futex resumed>) = 0 [pid 526] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 526] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 527] <... futex resumed>) = 1 [pid 527] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 527] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 526] <... futex resumed>) = 0 [pid 526] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 526] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 527] <... futex resumed>) = 1 [pid 527] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 527] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 526] <... futex resumed>) = 0 [pid 526] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 526] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 527] <... futex resumed>) = 1 [pid 527] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 527] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 527] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 526] <... futex resumed>) = 0 [pid 526] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 526] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 527] <... futex resumed>) = 1 [pid 527] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 527] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 526] <... futex resumed>) = 0 [pid 526] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 526] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 527] <... futex resumed>) = 1 [pid 527] memfd_create("syzkaller", 0) = 5 [pid 527] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 527] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 527] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 527] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 527] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 527] ioctl(6, LOOP_CLR_FD) = 0 [pid 527] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 527] close(6) = 0 [pid 527] close(5) = 0 [pid 527] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 526] <... futex resumed>) = 0 [pid 526] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 526] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 527] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 527] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 526] <... futex resumed>) = 0 [pid 526] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 526] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 527] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 527] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 526] <... futex resumed>) = 0 [pid 527] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 526] exit_group(0) = ? [pid 527] <... futex resumed>) = ? [pid 527] +++ exited with 0 +++ [pid 526] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=526, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 528 ci2-android-6-1/strace-static-x86_64: Process 528 attached [pid 528] set_robust_list(0x5555721e1760, 24) = 0 [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 528] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 528] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 528] <... prctl resumed>) = 0 [pid 528] setpgid(0, 0) = 0 [pid 528] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 528] write(3, "1000", 4) = 4 [pid 528] close(3) = 0 executing program [pid 528] write(1, "executing program\n", 18) = 18 [pid 528] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 528] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 528] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 528] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 528] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 528] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 528] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[529]}, 88) = 529 [pid 528] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 528] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 528] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 529 attached [pid 529] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 529] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 529] memfd_create("syzkaller", 0) = 3 [pid 529] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 529] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 529] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 529] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 529] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 529] ioctl(4, LOOP_CLR_FD) = 0 [pid 529] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 529] close(4) = 0 [pid 529] close(3) = 0 [pid 529] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 528] <... futex resumed>) = 0 [pid 528] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 528] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 529] <... futex resumed>) = 1 [pid 529] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 529] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 528] <... futex resumed>) = 0 [pid 528] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 528] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 529] <... futex resumed>) = 1 [pid 529] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 529] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 528] <... futex resumed>) = 0 [pid 528] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 528] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 529] <... futex resumed>) = 1 [pid 529] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 529] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 528] <... futex resumed>) = 0 [pid 528] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 528] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 529] <... futex resumed>) = 1 [pid 529] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 529] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 528] <... futex resumed>) = 0 [pid 528] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 528] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 529] <... futex resumed>) = 1 [pid 529] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 529] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 529] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 528] <... futex resumed>) = 0 [pid 528] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 528] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 529] <... futex resumed>) = 1 [pid 529] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 529] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 528] <... futex resumed>) = 0 [pid 528] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 528] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 529] <... futex resumed>) = 1 [pid 529] memfd_create("syzkaller", 0) = 5 [pid 529] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 529] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 529] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 529] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 529] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 529] ioctl(6, LOOP_CLR_FD) = 0 [pid 529] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 529] close(6) = 0 [pid 529] close(5) = 0 [pid 529] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 529] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 528] <... futex resumed>) = 0 [pid 528] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 528] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 529] <... futex resumed>) = 0 [pid 529] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 529] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 528] <... futex resumed>) = 0 [pid 528] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 528] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 529] <... futex resumed>) = 1 [pid 529] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 529] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 528] <... futex resumed>) = 0 [pid 528] exit_group(0) = ? [pid 529] <... futex resumed>) = ? [pid 529] +++ exited with 0 +++ [pid 528] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=528, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 530 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 530 attached [pid 530] set_robust_list(0x5555721e1760, 24) = 0 [pid 530] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 530] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 530] setpgid(0, 0) = 0 [pid 530] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 530] write(3, "1000", 4) = 4 [pid 530] close(3) = 0 [pid 530] write(1, "executing program\n", 18) = 18 executing program [pid 530] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 530] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 530] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 530] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 530] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 530] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 530] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 531 attached => {parent_tid=[531]}, 88) = 531 [pid 530] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 530] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 530] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 531] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 531] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 531] memfd_create("syzkaller", 0) = 3 [pid 531] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 531] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 531] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 531] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 531] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 531] ioctl(4, LOOP_CLR_FD) = 0 [pid 531] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 531] close(4) = 0 [pid 531] close(3) = 0 [pid 531] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 530] <... futex resumed>) = 0 [pid 531] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL [pid 530] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 530] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 531] <... quotactl resumed>) = -1 EFAULT (Bad address) [pid 531] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 530] <... futex resumed>) = 0 [pid 531] openat(AT_FDCWD, ".", O_RDONLY [pid 530] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 531] <... openat resumed>) = 3 [pid 531] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 530] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 531] <... futex resumed>) = 0 [pid 530] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 531] symlinkat("\x2e\x02", 3, "./file0" [pid 530] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 531] <... symlinkat resumed>) = -1 EEXIST (File exists) [pid 531] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 530] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 531] <... futex resumed>) = 0 [pid 530] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 531] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM [pid 530] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 530] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 531] <... mprotect resumed>) = 0 [pid 531] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 530] <... futex resumed>) = 0 [pid 530] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 530] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 531] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 531] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 531] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 530] <... futex resumed>) = 0 [pid 530] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 530] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 531] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 531] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 530] <... futex resumed>) = 0 [pid 531] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 530] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 530] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 531] <... futex resumed>) = 0 [pid 531] memfd_create("syzkaller", 0) = 5 [pid 531] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 531] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 531] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 531] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 531] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 531] ioctl(6, LOOP_CLR_FD) = 0 [pid 531] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 531] close(6) = 0 [pid 531] close(5) = 0 [pid 531] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 530] <... futex resumed>) = 0 [pid 530] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 530] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 531] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 531] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 530] <... futex resumed>) = 0 [pid 530] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 530] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 531] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 531] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 530] <... futex resumed>) = 0 [pid 530] exit_group(0) = ? [pid 531] +++ exited with 0 +++ [pid 530] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=530, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 532 ci2-android-6-1/strace-static-x86_64: Process 532 attached [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 532] set_robust_list(0x5555721e1760, 24) = 0 [pid 532] rt_sigprocmask(SIG_SETMASK, [] [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 532] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 532] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 532] setpgid(0, 0) = 0 [pid 532] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 532] write(3, "1000", 4) = 4 [pid 532] close(3) = 0 [pid 532] write(1, "executing program\n", 18) = 18 executing program [pid 532] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 532] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 532] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 532] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 532] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 532] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 532] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[533]}, 88) = 533 [pid 532] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 532] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 532] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 533 attached [pid 533] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 533] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 533] memfd_create("syzkaller", 0) = 3 [pid 533] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 533] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 533] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 533] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 533] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 533] ioctl(4, LOOP_CLR_FD) = 0 [pid 533] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 533] close(4) = 0 [pid 533] close(3) = 0 [pid 533] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... futex resumed>) = 0 [pid 532] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 532] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 533] <... futex resumed>) = 1 [pid 533] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 533] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... futex resumed>) = 0 [pid 532] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 532] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 533] <... futex resumed>) = 1 [pid 533] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 533] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... futex resumed>) = 0 [pid 532] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 532] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 533] <... futex resumed>) = 1 [pid 533] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 533] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... futex resumed>) = 0 [pid 532] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 532] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 533] <... futex resumed>) = 1 [pid 533] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 533] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... futex resumed>) = 0 [pid 532] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 532] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 533] <... futex resumed>) = 1 [pid 533] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 533] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 533] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... futex resumed>) = 0 [pid 532] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 532] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 533] <... futex resumed>) = 1 [pid 533] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 533] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... futex resumed>) = 0 [pid 532] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 532] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 533] <... futex resumed>) = 1 [pid 533] memfd_create("syzkaller", 0) = 5 [pid 533] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 533] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 533] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 533] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 533] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 533] ioctl(6, LOOP_CLR_FD) = 0 [pid 533] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 533] close(6) = 0 [pid 533] close(5) = 0 [pid 533] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 532] <... futex resumed>) = 0 [pid 533] chdir(0x200000000040 [pid 532] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 532] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 533] <... chdir resumed>) = -1 ENOENT (No such file or directory) [pid 533] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 532] <... futex resumed>) = 0 [pid 533] fchmodat(AT_FDCWD, 0x200000000300, 0177520 [pid 532] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 532] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 533] <... fchmodat resumed>) = 0 [pid 533] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 532] <... futex resumed>) = 0 [pid 533] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 532] exit_group(0) = ? [pid 533] <... futex resumed>) = ? [pid 533] +++ exited with 0 +++ [pid 532] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=532, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 534 ci2-android-6-1/strace-static-x86_64: Process 534 attached [pid 534] set_robust_list(0x5555721e1760, 24) = 0 [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 534] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 534] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 534] <... prctl resumed>) = 0 [pid 534] setpgid(0, 0) = 0 [pid 534] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 534] write(3, "1000", 4) = 4 [pid 534] close(3) = 0 [pid 534] write(1, "executing program\n", 18) = 18 [pid 534] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 executing program [pid 534] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 534] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 534] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 534] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 534] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 534] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[535]}, 88) = 535 [pid 534] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 534] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 534] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 535 attached [pid 535] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 535] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 535] memfd_create("syzkaller", 0) = 3 [pid 535] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 535] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 535] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 535] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 535] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 535] ioctl(4, LOOP_CLR_FD) = 0 [pid 535] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 535] close(4) = 0 [pid 535] close(3) = 0 [pid 535] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 534] <... futex resumed>) = 0 [pid 534] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 534] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 535] <... futex resumed>) = 1 [pid 535] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 535] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 534] <... futex resumed>) = 0 [pid 534] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 534] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 535] <... futex resumed>) = 1 [pid 535] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 535] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 534] <... futex resumed>) = 0 [pid 534] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 534] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 535] <... futex resumed>) = 1 [pid 535] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 535] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 534] <... futex resumed>) = 0 [pid 534] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 534] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 535] <... futex resumed>) = 1 [pid 535] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 535] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 534] <... futex resumed>) = 0 [pid 534] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 534] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 535] <... futex resumed>) = 1 [pid 535] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 535] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 535] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 534] <... futex resumed>) = 0 [pid 534] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 534] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 535] <... futex resumed>) = 1 [pid 535] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 535] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 534] <... futex resumed>) = 0 [pid 534] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 534] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 535] <... futex resumed>) = 1 [pid 535] memfd_create("syzkaller", 0) = 5 [pid 535] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 535] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 535] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 535] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 535] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 535] ioctl(6, LOOP_CLR_FD) = 0 [pid 535] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 535] close(6) = 0 [pid 535] close(5) = 0 [pid 535] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 534] <... futex resumed>) = 0 [pid 534] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 534] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 535] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 535] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 534] <... futex resumed>) = 0 [pid 534] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 534] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 535] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 535] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 534] <... futex resumed>) = 0 [pid 535] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 534] exit_group(0) = ? [pid 535] <... futex resumed>) = ? [pid 535] +++ exited with 0 +++ [pid 534] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=534, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 536 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 536 attached [pid 536] set_robust_list(0x5555721e1760, 24) = 0 [pid 536] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 536] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 536] setpgid(0, 0) = 0 [pid 536] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 536] write(3, "1000", 4) = 4 [pid 536] close(3) = 0 [pid 536] write(1, "executing program\n", 18) = 18 [pid 536] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 536] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 536] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 536] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 executing program [pid 536] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 536] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 536] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 537 attached => {parent_tid=[537]}, 88) = 537 [pid 537] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 536] rt_sigprocmask(SIG_SETMASK, [] [pid 537] rt_sigprocmask(SIG_SETMASK, [] [pid 536] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 537] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 536] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 536] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 537] memfd_create("syzkaller", 0) = 3 [pid 537] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 537] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 537] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 537] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 537] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 537] ioctl(4, LOOP_CLR_FD) = 0 [pid 537] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 537] close(4) = 0 [pid 537] close(3) = 0 [pid 537] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 536] <... futex resumed>) = 0 [pid 537] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 536] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 536] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 537] <... futex resumed>) = 0 [pid 537] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 537] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 536] <... futex resumed>) = 0 [pid 536] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 536] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 537] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 537] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 536] <... futex resumed>) = 0 [pid 536] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 536] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 537] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 537] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 536] <... futex resumed>) = 0 [pid 537] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 536] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 536] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 537] <... futex resumed>) = 0 [pid 537] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 537] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 536] <... futex resumed>) = 0 [pid 537] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 536] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 536] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 537] <... futex resumed>) = 0 [pid 537] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 537] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 537] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 536] <... futex resumed>) = 0 [pid 536] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 536] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 537] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 537] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 536] <... futex resumed>) = 0 [pid 536] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 537] memfd_create("syzkaller", 0 [pid 536] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 537] <... memfd_create resumed>) = 5 [pid 537] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 537] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 537] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 537] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 537] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 537] ioctl(6, LOOP_CLR_FD) = 0 [pid 537] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 537] close(6) = 0 [pid 537] close(5) = 0 [pid 537] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 536] <... futex resumed>) = 0 [pid 536] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 536] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 537] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 537] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 536] <... futex resumed>) = 0 [pid 536] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 536] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 537] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 537] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 536] <... futex resumed>) = 0 [pid 537] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 536] exit_group(0) = ? [pid 537] <... futex resumed>) = ? [pid 537] +++ exited with 0 +++ [pid 536] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=536, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 538 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 538 attached [pid 538] set_robust_list(0x5555721e1760, 24) = 0 [pid 538] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 538] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 538] setpgid(0, 0) = 0 [pid 538] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 538] write(3, "1000", 4) = 4 [pid 538] close(3) = 0 [pid 538] write(1, "executing program\n", 18) = 18 executing program [pid 538] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 538] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 538] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 538] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 538] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 538] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 538] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[539]}, 88) = 539 [pid 538] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 538] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 538] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 539 attached [pid 539] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 539] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 539] memfd_create("syzkaller", 0) = 3 [pid 539] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 539] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 539] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 539] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 539] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 539] ioctl(4, LOOP_CLR_FD) = 0 [pid 539] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 539] close(4) = 0 [pid 539] close(3) = 0 [pid 539] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] <... futex resumed>) = 0 [pid 538] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 538] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 539] <... futex resumed>) = 1 [pid 539] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 539] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] <... futex resumed>) = 0 [pid 538] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 538] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 539] <... futex resumed>) = 1 [pid 539] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 539] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] <... futex resumed>) = 0 [pid 538] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 538] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 539] <... futex resumed>) = 1 [pid 539] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 539] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] <... futex resumed>) = 0 [pid 538] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 538] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 539] <... futex resumed>) = 1 [pid 539] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 539] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] <... futex resumed>) = 0 [pid 538] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 538] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 539] <... futex resumed>) = 1 [pid 539] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 539] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 539] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] <... futex resumed>) = 0 [pid 538] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 538] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 539] <... futex resumed>) = 1 [pid 539] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 539] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] <... futex resumed>) = 0 [pid 538] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 538] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 539] <... futex resumed>) = 1 [pid 539] memfd_create("syzkaller", 0) = 5 [pid 539] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 539] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 539] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 539] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 539] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 539] ioctl(6, LOOP_CLR_FD) = 0 [pid 539] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 539] close(6) = 0 [pid 539] close(5) = 0 [pid 539] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] <... futex resumed>) = 0 [pid 538] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 538] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 539] <... futex resumed>) = 1 [pid 539] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 539] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] <... futex resumed>) = 0 [pid 538] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 538] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 539] <... futex resumed>) = 1 [pid 539] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 539] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] <... futex resumed>) = 0 [pid 538] exit_group(0) = ? [pid 539] <... futex resumed>) = ? [pid 539] +++ exited with 0 +++ [pid 538] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=538, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 540 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 540 attached [pid 540] set_robust_list(0x5555721e1760, 24) = 0 [pid 540] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 540] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 540] setpgid(0, 0) = 0 [pid 540] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 540] write(3, "1000", 4) = 4 [pid 540] close(3) = 0 [pid 540] write(1, "executing program\n", 18) = 18 executing program [pid 540] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 540] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 540] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 540] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 540] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 540] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 540] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 541 attached => {parent_tid=[541]}, 88) = 541 [pid 541] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 540] rt_sigprocmask(SIG_SETMASK, [] [pid 541] rt_sigprocmask(SIG_SETMASK, [] [pid 540] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 541] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 540] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 541] memfd_create("syzkaller", 0 [pid 540] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 541] <... memfd_create resumed>) = 3 [pid 541] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 541] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 541] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 541] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 541] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 541] ioctl(4, LOOP_CLR_FD) = 0 [pid 541] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 541] close(4) = 0 [pid 541] close(3) = 0 [pid 541] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] <... futex resumed>) = 0 [pid 540] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 540] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 541] <... futex resumed>) = 1 [pid 541] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 541] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] <... futex resumed>) = 0 [pid 540] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 540] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 541] <... futex resumed>) = 1 [pid 541] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 541] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] <... futex resumed>) = 0 [pid 540] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 540] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 541] <... futex resumed>) = 1 [pid 541] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 541] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] <... futex resumed>) = 0 [pid 540] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 540] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 541] <... futex resumed>) = 1 [pid 541] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 541] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] <... futex resumed>) = 0 [pid 540] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 540] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 541] <... futex resumed>) = 1 [pid 541] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 541] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 541] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] <... futex resumed>) = 0 [pid 540] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 540] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 541] <... futex resumed>) = 1 [pid 541] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 541] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] <... futex resumed>) = 0 [pid 540] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 540] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 541] <... futex resumed>) = 1 [pid 541] memfd_create("syzkaller", 0) = 5 [pid 541] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 541] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 541] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 541] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 541] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 541] ioctl(6, LOOP_CLR_FD) = 0 [pid 541] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 541] close(6) = 0 [pid 541] close(5) = 0 [pid 541] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 541] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 540] <... futex resumed>) = 0 [pid 540] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 541] <... futex resumed>) = 0 [pid 541] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 541] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 541] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 540] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 540] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 541] <... futex resumed>) = 0 [pid 541] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 541] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 541] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 540] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 540] exit_group(0) = ? [pid 541] <... futex resumed>) = ? [pid 541] +++ exited with 0 +++ [pid 540] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=540, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 542 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 542 attached [pid 542] set_robust_list(0x5555721e1760, 24) = 0 [pid 542] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 542] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 542] setpgid(0, 0) = 0 [pid 542] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 542] write(3, "1000", 4) = 4 [pid 542] close(3) = 0 [pid 542] write(1, "executing program\n", 18) = 18 executing program [pid 542] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 542] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 542] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 542] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 542] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 542] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 542] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[543]}, 88) = 543 [pid 542] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 542] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 542] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 543 attached [pid 543] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 543] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 543] memfd_create("syzkaller", 0) = 3 [pid 543] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 543] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 543] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 543] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 543] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 543] ioctl(4, LOOP_CLR_FD) = 0 [pid 543] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 543] close(4) = 0 [pid 543] close(3) = 0 [pid 543] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 542] <... futex resumed>) = 0 [pid 542] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 542] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 543] <... futex resumed>) = 1 [pid 543] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 543] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 542] <... futex resumed>) = 0 [pid 542] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 542] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 543] <... futex resumed>) = 1 [pid 543] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 543] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 542] <... futex resumed>) = 0 [pid 542] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 542] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 543] <... futex resumed>) = 1 [pid 543] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 543] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 542] <... futex resumed>) = 0 [pid 542] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 542] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 543] <... futex resumed>) = 1 [pid 543] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 543] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 542] <... futex resumed>) = 0 [pid 542] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 542] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 543] <... futex resumed>) = 1 [pid 543] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 543] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 543] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 542] <... futex resumed>) = 0 [pid 542] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 542] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 543] <... futex resumed>) = 1 [pid 543] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 543] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 542] <... futex resumed>) = 0 [pid 542] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 542] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 543] memfd_create("syzkaller", 0) = 5 [pid 543] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 543] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 543] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 543] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 543] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 543] ioctl(6, LOOP_CLR_FD) = 0 [pid 543] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 543] close(6) = 0 [pid 543] close(5) = 0 [pid 543] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 542] <... futex resumed>) = 0 [pid 542] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 542] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 543] <... futex resumed>) = 1 [pid 543] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 543] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 542] <... futex resumed>) = 0 [pid 542] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 542] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 543] <... futex resumed>) = 1 [pid 543] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 543] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 542] <... futex resumed>) = 0 [pid 542] exit_group(0) = ? [pid 543] +++ exited with 0 +++ [pid 542] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=542, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 544 ci2-android-6-1/strace-static-x86_64: Process 544 attached [pid 544] set_robust_list(0x5555721e1760, 24) = 0 [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 544] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 544] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 544] setpgid(0, 0) = 0 [pid 544] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 544] <... openat resumed>) = 3 [pid 544] write(3, "1000", 4) = 4 executing program [pid 544] close(3) = 0 [pid 544] write(1, "executing program\n", 18) = 18 [pid 544] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 544] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 544] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 544] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 544] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 544] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 544] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[545]}, 88) = 545 [pid 544] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 544] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 544] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 545 attached [pid 545] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 545] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 545] memfd_create("syzkaller", 0) = 3 [pid 545] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 545] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 545] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 545] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 545] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 545] ioctl(4, LOOP_CLR_FD) = 0 [pid 545] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 545] close(4) = 0 [pid 545] close(3) = 0 [pid 545] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 544] <... futex resumed>) = 0 [pid 544] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 544] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 545] <... futex resumed>) = 1 [pid 545] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 545] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 544] <... futex resumed>) = 0 [pid 544] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 544] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 545] <... futex resumed>) = 1 [pid 545] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 545] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 544] <... futex resumed>) = 0 [pid 544] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 544] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 545] <... futex resumed>) = 1 [pid 545] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 545] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 544] <... futex resumed>) = 0 [pid 544] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 544] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 545] <... futex resumed>) = 1 [pid 545] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 545] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 544] <... futex resumed>) = 0 [pid 544] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 544] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 545] <... futex resumed>) = 1 [pid 545] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 545] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 545] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 544] <... futex resumed>) = 0 [pid 544] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 544] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 545] <... futex resumed>) = 1 [pid 545] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 545] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 545] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 544] <... futex resumed>) = 0 [pid 544] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 544] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 545] <... futex resumed>) = 0 [pid 545] memfd_create("syzkaller", 0) = 5 [pid 545] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 545] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 545] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 545] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 545] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 545] ioctl(6, LOOP_CLR_FD) = 0 [pid 545] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 545] close(6) = 0 [pid 545] close(5) = 0 [pid 545] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 544] <... futex resumed>) = 0 [pid 544] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 544] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 545] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 545] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 544] <... futex resumed>) = 0 [pid 544] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 544] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 545] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 545] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 544] <... futex resumed>) = 0 [pid 545] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 544] exit_group(0) = ? [pid 545] <... futex resumed>) = ? [pid 545] +++ exited with 0 +++ [pid 544] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=544, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 546 ci2-android-6-1/strace-static-x86_64: Process 546 attached [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 546] set_robust_list(0x5555721e1760, 24 [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 546] <... set_robust_list resumed>) = 0 [pid 546] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 546] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 546] setpgid(0, 0) = 0 [pid 546] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 546] write(3, "1000", 4) = 4 [pid 546] close(3) = 0 executing program [pid 546] write(1, "executing program\n", 18) = 18 [pid 546] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 546] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 546] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 546] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 546] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 546] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 546] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 547 attached => {parent_tid=[547]}, 88) = 547 [pid 547] set_robust_list(0x7f1cd63e09a0, 24 [pid 546] rt_sigprocmask(SIG_SETMASK, [] [pid 547] <... set_robust_list resumed>) = 0 [pid 546] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 547] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 546] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 546] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 547] memfd_create("syzkaller", 0) = 3 [pid 547] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 547] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 547] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 547] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 547] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 547] ioctl(4, LOOP_CLR_FD) = 0 [pid 547] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 547] close(4) = 0 [pid 547] close(3) = 0 [pid 547] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 546] <... futex resumed>) = 0 [pid 547] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL [pid 546] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 546] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 547] <... quotactl resumed>) = -1 EFAULT (Bad address) [pid 547] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 546] <... futex resumed>) = 0 [pid 547] openat(AT_FDCWD, ".", O_RDONLY [pid 546] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 546] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 547] <... openat resumed>) = 3 [pid 547] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 546] <... futex resumed>) = 0 [pid 546] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 547] symlinkat("\x2e\x02", 3, "./file0" [pid 546] <... futex resumed>) = 0 [pid 546] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 547] <... symlinkat resumed>) = -1 EEXIST (File exists) [pid 547] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 546] <... futex resumed>) = 0 [pid 546] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 547] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM [pid 546] <... futex resumed>) = 0 [pid 546] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 547] <... mprotect resumed>) = 0 [pid 547] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 546] <... futex resumed>) = 0 [pid 546] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 547] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 546] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 547] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 547] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 547] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 546] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 546] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 546] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 547] <... futex resumed>) = 0 [pid 547] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 547] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 546] <... futex resumed>) = 0 [pid 546] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 546] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 547] <... futex resumed>) = 1 [pid 547] memfd_create("syzkaller", 0) = 5 [pid 547] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 547] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 547] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 547] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 547] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 547] ioctl(6, LOOP_CLR_FD) = 0 [pid 547] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 547] close(6) = 0 [pid 547] close(5) = 0 [pid 547] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 546] <... futex resumed>) = 0 [pid 546] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 546] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 547] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 547] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 546] <... futex resumed>) = 0 [pid 547] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 546] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 546] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 547] <... futex resumed>) = 0 [pid 547] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 547] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 546] <... futex resumed>) = 0 [pid 546] exit_group(0) = ? [pid 547] +++ exited with 0 +++ [pid 546] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=546, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 548 ci2-android-6-1/strace-static-x86_64: Process 548 attached [pid 548] set_robust_list(0x5555721e1760, 24) = 0 [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 548] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 548] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 548] setpgid(0, 0) = 0 [pid 548] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 548] <... openat resumed>) = 3 [pid 548] write(3, "1000", 4) = 4 [pid 548] close(3) = 0 [pid 548] write(1, "executing program\n", 18) = 18 executing program [pid 548] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 548] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 548] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 548] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 548] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 548] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 548] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[549]}, 88) = 549 [pid 548] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 548] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 548] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 549 attached [pid 549] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 549] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 549] memfd_create("syzkaller", 0) = 3 [pid 549] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 549] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 549] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 549] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 549] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 549] ioctl(4, LOOP_CLR_FD) = 0 [pid 549] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 549] close(4) = 0 [pid 549] close(3) = 0 [pid 549] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 548] <... futex resumed>) = 0 [pid 548] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 548] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 549] <... futex resumed>) = 1 [pid 549] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 549] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 548] <... futex resumed>) = 0 [pid 548] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 548] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 549] <... futex resumed>) = 1 [pid 549] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 549] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 548] <... futex resumed>) = 0 [pid 548] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 548] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 549] <... futex resumed>) = 1 [pid 549] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 549] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 548] <... futex resumed>) = 0 [pid 548] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 548] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 549] <... futex resumed>) = 1 [pid 549] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 549] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 548] <... futex resumed>) = 0 [pid 548] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 548] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 549] <... futex resumed>) = 1 [pid 549] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 549] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 549] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 548] <... futex resumed>) = 0 [pid 548] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 548] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 549] <... futex resumed>) = 1 [pid 549] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 549] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 548] <... futex resumed>) = 0 [pid 548] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 548] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 549] <... futex resumed>) = 1 [pid 549] memfd_create("syzkaller", 0) = 5 [pid 549] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 549] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 549] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 549] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 549] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 549] ioctl(6, LOOP_CLR_FD) = 0 [pid 549] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 549] close(6) = 0 [pid 549] close(5) = 0 [pid 549] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 548] <... futex resumed>) = 0 [pid 548] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 548] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 549] <... futex resumed>) = 1 [pid 549] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 549] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 548] <... futex resumed>) = 0 [pid 548] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 548] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 549] <... futex resumed>) = 1 [pid 549] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 549] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 548] <... futex resumed>) = 0 [pid 548] exit_group(0) = ? [pid 549] <... futex resumed>) = ? [pid 549] +++ exited with 0 +++ [pid 548] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=548, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 550 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 550 attached [pid 550] set_robust_list(0x5555721e1760, 24) = 0 [pid 550] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 550] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 550] setpgid(0, 0) = 0 [pid 550] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 550] write(3, "1000", 4) = 4 [pid 550] close(3) = 0 [pid 550] write(1, "executing program\n", 18) = 18 executing program [pid 550] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 550] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 550] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 550] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 550] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 550] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 550] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 551 attached => {parent_tid=[551]}, 88) = 551 [pid 551] set_robust_list(0x7f1cd63e09a0, 24 [pid 550] rt_sigprocmask(SIG_SETMASK, [] [pid 551] <... set_robust_list resumed>) = 0 [pid 551] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 551] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 550] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 550] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 551] <... futex resumed>) = 0 [pid 551] memfd_create("syzkaller", 0 [pid 550] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 551] <... memfd_create resumed>) = 3 [pid 551] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 551] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 551] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 551] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 551] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 551] ioctl(4, LOOP_CLR_FD) = 0 [pid 551] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 551] close(4) = 0 [pid 551] close(3) = 0 [pid 551] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 550] <... futex resumed>) = 0 [pid 550] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 550] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 551] <... futex resumed>) = 1 [pid 551] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 551] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 550] <... futex resumed>) = 0 [pid 550] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 550] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 551] <... futex resumed>) = 1 [pid 551] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 551] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 550] <... futex resumed>) = 0 [pid 550] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 550] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 551] <... futex resumed>) = 1 [pid 551] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 551] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 550] <... futex resumed>) = 0 [pid 550] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 550] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 551] <... futex resumed>) = 1 [pid 551] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 551] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 550] <... futex resumed>) = 0 [pid 550] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 550] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 551] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 551] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 551] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 550] <... futex resumed>) = 0 [pid 550] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 550] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 551] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 551] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 550] <... futex resumed>) = 0 [pid 550] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 551] memfd_create("syzkaller", 0 [pid 550] <... futex resumed>) = 0 [pid 550] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 551] <... memfd_create resumed>) = 5 [pid 551] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 551] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 551] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 551] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 551] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 551] ioctl(6, LOOP_CLR_FD) = 0 [pid 551] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 551] close(6) = 0 [pid 551] close(5) = 0 [pid 551] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 550] <... futex resumed>) = 0 [pid 550] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 550] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 551] <... futex resumed>) = 1 [pid 551] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 551] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 550] <... futex resumed>) = 0 [pid 550] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 550] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 551] <... futex resumed>) = 1 [pid 551] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 551] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 550] <... futex resumed>) = 0 [pid 550] exit_group(0) = ? [pid 551] <... futex resumed>) = ? [pid 551] +++ exited with 0 +++ [pid 550] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=550, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 552 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 552 attached [pid 552] set_robust_list(0x5555721e1760, 24) = 0 [pid 552] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 552] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 552] setpgid(0, 0) = 0 [pid 552] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 552] write(3, "1000", 4) = 4 [pid 552] close(3) = 0 [pid 552] write(1, "executing program\n", 18) = 18 executing program [pid 552] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 552] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 552] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 552] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 552] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 552] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 552] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 553 attached => {parent_tid=[553]}, 88) = 553 [pid 553] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 552] rt_sigprocmask(SIG_SETMASK, [] [pid 553] rt_sigprocmask(SIG_SETMASK, [] [pid 552] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 553] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 552] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 552] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 553] memfd_create("syzkaller", 0) = 3 [pid 553] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 553] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 553] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 553] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 553] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 553] ioctl(4, LOOP_CLR_FD) = 0 [pid 553] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 553] close(4) = 0 [pid 553] close(3) = 0 [pid 553] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 552] <... futex resumed>) = 0 [pid 553] <... futex resumed>) = 1 [pid 553] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL [pid 552] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 553] <... quotactl resumed>) = -1 EFAULT (Bad address) [pid 553] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 553] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 552] <... futex resumed>) = 1 [pid 553] <... futex resumed>) = 0 [pid 553] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 552] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 552] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 553] <... futex resumed>) = 0 [pid 553] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 553] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 553] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 552] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 552] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 553] <... futex resumed>) = 0 [pid 553] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 553] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 553] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 552] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 552] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 553] <... futex resumed>) = 0 [pid 553] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 553] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 553] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 552] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 552] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 553] <... futex resumed>) = 0 [pid 552] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 553] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 553] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 553] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 552] <... futex resumed>) = 0 [pid 553] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0 [pid 552] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 552] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 553] <... mmap resumed>) = 0x200000000000 [pid 553] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 552] <... futex resumed>) = 0 [pid 552] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 552] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 553] memfd_create("syzkaller", 0) = 5 [pid 553] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 553] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 553] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 553] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 553] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 553] ioctl(6, LOOP_CLR_FD) = 0 [pid 553] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 553] close(6) = 0 [pid 553] close(5) = 0 [pid 553] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 552] <... futex resumed>) = 0 [pid 552] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 552] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 553] <... futex resumed>) = 1 [pid 553] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 553] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 552] <... futex resumed>) = 0 [pid 552] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 552] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 553] <... futex resumed>) = 1 [pid 553] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 553] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 552] <... futex resumed>) = 0 [pid 552] exit_group(0) = ? [pid 553] <... futex resumed>) = ? [pid 553] +++ exited with 0 +++ [pid 552] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=552, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 554 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 554 attached [pid 554] set_robust_list(0x5555721e1760, 24) = 0 [pid 554] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 554] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 554] setpgid(0, 0) = 0 [pid 554] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 554] write(3, "1000", 4) = 4 [pid 554] close(3) = 0 [pid 554] write(1, "executing program\n", 18) = 18 executing program [pid 554] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 554] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 554] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 554] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 554] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 554] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 554] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 555 attached => {parent_tid=[555]}, 88) = 555 [pid 555] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 554] rt_sigprocmask(SIG_SETMASK, [] [pid 555] rt_sigprocmask(SIG_SETMASK, [] [pid 554] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 555] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 554] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 554] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 555] memfd_create("syzkaller", 0) = 3 [pid 555] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 555] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 555] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 555] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 555] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 555] ioctl(4, LOOP_CLR_FD) = 0 [pid 555] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 555] close(4) = 0 [pid 555] close(3) = 0 [pid 555] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 554] <... futex resumed>) = 0 [pid 554] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 555] <... futex resumed>) = 1 [pid 554] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 555] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 555] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 554] <... futex resumed>) = 0 [pid 554] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 554] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 555] <... futex resumed>) = 1 [pid 555] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 555] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 554] <... futex resumed>) = 0 [pid 554] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 554] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 555] <... futex resumed>) = 1 [pid 555] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 555] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 554] <... futex resumed>) = 0 [pid 554] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 554] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 555] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 555] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 554] <... futex resumed>) = 0 [pid 555] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 554] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 554] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 555] <... futex resumed>) = 0 [pid 555] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 555] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 555] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 554] <... futex resumed>) = 0 [pid 555] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0 [pid 554] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 554] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 555] <... mmap resumed>) = 0x200000000000 [pid 555] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 554] <... futex resumed>) = 0 [pid 554] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 554] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 555] memfd_create("syzkaller", 0) = 5 [pid 555] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 555] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 555] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 555] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 555] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 555] ioctl(6, LOOP_CLR_FD) = 0 [pid 555] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 555] close(6) = 0 [pid 555] close(5) = 0 [pid 555] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 554] <... futex resumed>) = 0 [pid 554] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 554] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 555] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 555] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 554] <... futex resumed>) = 0 [pid 554] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 554] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 555] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 555] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 554] <... futex resumed>) = 0 [pid 555] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 554] exit_group(0) = ? [pid 555] <... futex resumed>) = ? [pid 555] +++ exited with 0 +++ [pid 554] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=554, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 556 ci2-android-6-1/strace-static-x86_64: Process 556 attached [pid 305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 556] set_robust_list(0x5555721e1760, 24) = 0 [pid 556] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 556] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 556] setpgid(0, 0) = 0 [pid 556] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 556] write(3, "1000", 4) = 4 [pid 556] close(3) = 0 [pid 556] write(1, "executing program\n", 18) = 18 executing program [pid 556] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 556] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 556] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 556] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 556] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 556] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 556] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[557]}, 88) = 557 [pid 556] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 556] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 556] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 557 attached [pid 557] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 557] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 557] memfd_create("syzkaller", 0) = 3 [pid 557] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 557] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 557] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 557] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 557] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 557] ioctl(4, LOOP_CLR_FD) = 0 [pid 557] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 557] close(4) = 0 [pid 557] close(3) = 0 [pid 557] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 556] <... futex resumed>) = 0 [pid 556] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 556] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 557] <... futex resumed>) = 1 [pid 557] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 557] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 556] <... futex resumed>) = 0 [pid 556] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 556] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 557] <... futex resumed>) = 1 [pid 557] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 557] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 556] <... futex resumed>) = 0 [pid 556] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 556] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 557] <... futex resumed>) = 1 [pid 557] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 557] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 556] <... futex resumed>) = 0 [pid 556] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 556] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 557] <... futex resumed>) = 1 [pid 557] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 557] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 556] <... futex resumed>) = 0 [pid 556] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 556] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 557] <... futex resumed>) = 1 [pid 557] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 557] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 557] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 556] <... futex resumed>) = 0 [pid 556] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 556] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 557] <... futex resumed>) = 1 [pid 557] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 557] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 556] <... futex resumed>) = 0 [pid 556] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 556] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 557] <... futex resumed>) = 1 [pid 557] memfd_create("syzkaller", 0) = 5 [pid 557] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 557] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 557] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 557] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 557] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 557] ioctl(6, LOOP_CLR_FD) = 0 [pid 557] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 557] close(6) = 0 [pid 557] close(5) = 0 [pid 557] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 556] <... futex resumed>) = 0 [pid 556] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 556] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 557] <... futex resumed>) = 1 [pid 557] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 557] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 556] <... futex resumed>) = 0 [pid 556] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 556] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 557] <... futex resumed>) = 1 [pid 557] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 557] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 556] <... futex resumed>) = 0 [pid 556] exit_group(0) = ? [pid 557] <... futex resumed>) = ? [pid 557] +++ exited with 0 +++ [pid 556] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=556, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 558 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 558 attached [pid 558] set_robust_list(0x5555721e1760, 24) = 0 [pid 558] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 558] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 558] setpgid(0, 0) = 0 [pid 558] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 558] write(3, "1000", 4) = 4 [pid 558] close(3) = 0 [pid 558] write(1, "executing program\n", 18) = 18 executing program [pid 558] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 558] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 558] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 558] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 558] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 558] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 558] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 559 attached => {parent_tid=[559]}, 88) = 559 [pid 559] set_robust_list(0x7f1cd63e09a0, 24 [pid 558] rt_sigprocmask(SIG_SETMASK, [] [pid 559] <... set_robust_list resumed>) = 0 [pid 558] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 559] rt_sigprocmask(SIG_SETMASK, [] [pid 558] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 559] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 558] <... futex resumed>) = 0 [pid 559] memfd_create("syzkaller", 0 [pid 558] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 559] <... memfd_create resumed>) = 3 [pid 559] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 559] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 559] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 559] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 559] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 559] ioctl(4, LOOP_CLR_FD) = 0 [pid 559] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 559] close(4) = 0 [pid 559] close(3) = 0 [pid 559] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 559] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 558] <... futex resumed>) = 0 [pid 558] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 558] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 559] <... futex resumed>) = 0 [pid 559] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 559] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 558] <... futex resumed>) = 0 [pid 559] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 558] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 558] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 559] <... futex resumed>) = 0 [pid 559] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 559] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 558] <... futex resumed>) = 0 [pid 558] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 558] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 559] <... futex resumed>) = 1 [pid 559] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 559] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 558] <... futex resumed>) = 0 [pid 559] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 558] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 558] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 559] <... futex resumed>) = 0 [pid 559] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 559] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 558] <... futex resumed>) = 0 [pid 559] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 558] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 558] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 559] <... futex resumed>) = 0 [pid 559] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 559] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 559] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 558] <... futex resumed>) = 0 [pid 558] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 558] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 559] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 559] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 558] <... futex resumed>) = 0 [pid 558] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 558] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 559] memfd_create("syzkaller", 0) = 5 [pid 559] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 559] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 559] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 559] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 559] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 559] ioctl(6, LOOP_CLR_FD) = 0 [pid 559] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 559] close(6) = 0 [pid 559] close(5) = 0 [pid 559] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 559] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 558] <... futex resumed>) = 0 [pid 558] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 558] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 559] <... futex resumed>) = 0 [pid 559] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 559] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 558] <... futex resumed>) = 0 [pid 558] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 558] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 559] <... futex resumed>) = 1 [pid 559] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 559] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 558] <... futex resumed>) = 0 [pid 559] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 558] exit_group(0 [pid 559] <... futex resumed>) = ? [pid 558] <... exit_group resumed>) = ? [pid 559] +++ exited with 0 +++ [pid 558] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=558, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 560 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 560 attached [pid 560] set_robust_list(0x5555721e1760, 24) = 0 [pid 560] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 560] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 560] setpgid(0, 0) = 0 [pid 560] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 560] write(3, "1000", 4) = 4 [pid 560] close(3) = 0 executing program [pid 560] write(1, "executing program\n", 18) = 18 [pid 560] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 560] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 560] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 560] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 560] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 560] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 560] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 561 attached => {parent_tid=[561]}, 88) = 561 [pid 561] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 560] rt_sigprocmask(SIG_SETMASK, [] [pid 561] rt_sigprocmask(SIG_SETMASK, [] [pid 560] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 561] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 560] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 560] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 561] memfd_create("syzkaller", 0) = 3 [pid 561] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 561] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 561] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 561] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 561] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 561] ioctl(4, LOOP_CLR_FD) = 0 [pid 561] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 561] close(4) = 0 [pid 561] close(3) = 0 [pid 561] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 560] <... futex resumed>) = 0 [pid 560] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 560] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 561] <... futex resumed>) = 1 [pid 561] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 561] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 560] <... futex resumed>) = 0 [pid 560] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 560] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 561] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 561] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 560] <... futex resumed>) = 0 [pid 560] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 560] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 561] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 561] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 560] <... futex resumed>) = 0 [pid 560] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 560] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 561] <... futex resumed>) = 1 [pid 561] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 561] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 560] <... futex resumed>) = 0 [pid 560] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 560] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 561] <... futex resumed>) = 1 [pid 561] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 561] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 561] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 560] <... futex resumed>) = 0 [pid 560] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 560] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 561] <... futex resumed>) = 1 [pid 561] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 561] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 561] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 560] <... futex resumed>) = 0 [pid 560] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 560] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 561] <... futex resumed>) = 0 [pid 561] memfd_create("syzkaller", 0) = 5 [pid 561] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 561] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 561] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 561] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 561] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 561] ioctl(6, LOOP_CLR_FD) = 0 [pid 561] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 561] close(6) = 0 [pid 561] close(5) = 0 [pid 561] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 560] <... futex resumed>) = 0 [pid 560] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 560] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 561] <... futex resumed>) = 1 [pid 561] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 561] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 560] <... futex resumed>) = 0 [pid 560] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 560] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 561] <... futex resumed>) = 1 [pid 561] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 561] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 560] <... futex resumed>) = 0 [pid 560] exit_group(0) = ? [pid 561] <... futex resumed>) = ? [pid 561] +++ exited with 0 +++ [pid 560] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=560, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 562 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 562 attached [pid 562] set_robust_list(0x5555721e1760, 24) = 0 [pid 562] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 562] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 562] setpgid(0, 0) = 0 [pid 562] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 562] write(3, "1000", 4) = 4 [pid 562] close(3) = 0 [pid 562] write(1, "executing program\n", 18) = 18 [pid 562] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 562] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 562] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 562] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 562] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 562] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 562] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[563]}, 88) = 563 [pid 562] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 562] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 562] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 563 attached [pid 563] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 563] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 563] memfd_create("syzkaller", 0) = 3 [pid 563] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 executing program [pid 563] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 563] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 563] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 563] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 563] ioctl(4, LOOP_CLR_FD) = 0 [pid 563] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 563] close(4) = 0 [pid 563] close(3) = 0 [pid 563] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 562] <... futex resumed>) = 0 [pid 563] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL [pid 562] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 562] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 563] <... quotactl resumed>) = -1 EFAULT (Bad address) [pid 563] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 562] <... futex resumed>) = 0 [pid 563] openat(AT_FDCWD, ".", O_RDONLY [pid 562] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 563] <... openat resumed>) = 3 [pid 563] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 562] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 563] <... futex resumed>) = 0 [pid 562] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 563] symlinkat("\x2e\x02", 3, "./file0" [pid 562] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 563] <... symlinkat resumed>) = -1 EEXIST (File exists) [pid 562] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 563] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 562] <... futex resumed>) = 0 [pid 563] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 562] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 563] <... futex resumed>) = 0 [pid 563] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM [pid 562] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 563] <... mprotect resumed>) = 0 [pid 563] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 562] <... futex resumed>) = 0 [pid 562] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 562] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 563] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 563] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 563] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 562] <... futex resumed>) = 0 [pid 562] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 562] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 563] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 563] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 562] <... futex resumed>) = 0 [pid 562] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 562] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 563] memfd_create("syzkaller", 0) = 5 [pid 563] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 563] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 563] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 563] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 563] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 563] ioctl(6, LOOP_CLR_FD) = 0 [pid 563] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 563] close(6) = 0 [pid 563] close(5) = 0 [pid 563] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 562] <... futex resumed>) = 0 [pid 562] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 562] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 563] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 563] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 562] <... futex resumed>) = 0 [pid 562] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 562] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 563] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 563] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 562] <... futex resumed>) = 0 [pid 563] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 562] exit_group(0) = ? [pid 563] <... futex resumed>) = ? [pid 563] +++ exited with 0 +++ [pid 562] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=562, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 564 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 564 attached [pid 564] set_robust_list(0x5555721e1760, 24) = 0 [pid 564] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 564] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 564] setpgid(0, 0) = 0 [pid 564] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 564] write(3, "1000", 4) = 4 [pid 564] close(3) = 0 [pid 564] write(1, "executing program\n", 18) = 18 [pid 564] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 564] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 564] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 564] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 564] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 564] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 564] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[565]}, 88) = 565 [pid 564] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 564] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 564] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 565 attached [pid 565] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 565] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 565] memfd_create("syzkaller", 0) = 3 [pid 565] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 executing program [pid 565] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 565] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 565] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 565] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 565] ioctl(4, LOOP_CLR_FD) = 0 [pid 565] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 565] close(4) = 0 [pid 565] close(3) = 0 [pid 565] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 565] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 564] <... futex resumed>) = 0 [pid 564] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 564] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 565] <... futex resumed>) = 0 [pid 565] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 565] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 564] <... futex resumed>) = 0 [pid 565] openat(AT_FDCWD, ".", O_RDONLY [pid 564] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 564] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 565] <... openat resumed>) = 3 [pid 565] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 564] <... futex resumed>) = 0 [pid 565] symlinkat("\x2e\x02", 3, "./file0" [pid 564] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 564] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 565] <... symlinkat resumed>) = -1 EEXIST (File exists) [pid 565] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 564] <... futex resumed>) = 0 [pid 564] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 565] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM [pid 564] <... futex resumed>) = 0 [pid 564] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 565] <... mprotect resumed>) = 0 [pid 565] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 564] <... futex resumed>) = 0 [pid 564] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 565] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 564] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 565] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 565] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 564] <... futex resumed>) = 0 [pid 564] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 564] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 565] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 565] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 564] <... futex resumed>) = 0 [pid 564] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 564] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 565] memfd_create("syzkaller", 0) = 5 [pid 565] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 565] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 565] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 565] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 565] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 565] ioctl(6, LOOP_CLR_FD) = 0 [pid 565] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 565] close(6) = 0 [pid 565] close(5) = 0 [pid 565] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 564] <... futex resumed>) = 0 [pid 564] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 564] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 565] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 565] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 564] <... futex resumed>) = 0 [pid 564] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 564] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 565] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 565] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 564] <... futex resumed>) = 0 [pid 564] exit_group(0) = ? [pid 565] +++ exited with 0 +++ [pid 564] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=564, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 566 ci2-android-6-1/strace-static-x86_64: Process 566 attached [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 566] set_robust_list(0x5555721e1760, 24) = 0 [pid 566] rt_sigprocmask(SIG_SETMASK, [] [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 566] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 566] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 566] setpgid(0, 0) = 0 [pid 566] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 566] write(3, "1000", 4) = 4 [pid 566] close(3) = 0 [pid 566] write(1, "executing program\n", 18) = 18 [pid 566] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 566] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 566] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 566] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 566] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 566] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 566] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[567]}, 88) = 567 [pid 566] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 566] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 566] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 567 attached [pid 567] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 567] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 567] memfd_create("syzkaller", 0) = 3 [pid 567] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 executing program [pid 567] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 567] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 567] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 567] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 567] ioctl(4, LOOP_CLR_FD) = 0 [pid 567] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 567] close(4) = 0 [pid 567] close(3) = 0 [pid 567] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] <... futex resumed>) = 0 [pid 566] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 566] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 567] <... futex resumed>) = 1 [pid 567] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 567] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] <... futex resumed>) = 0 [pid 566] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 566] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 567] <... futex resumed>) = 1 [pid 567] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 567] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] <... futex resumed>) = 0 [pid 566] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 566] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 567] <... futex resumed>) = 1 [pid 567] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 567] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] <... futex resumed>) = 0 [pid 566] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 566] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 567] <... futex resumed>) = 1 [pid 567] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 567] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] <... futex resumed>) = 0 [pid 566] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 566] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 567] <... futex resumed>) = 1 [pid 567] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 567] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 567] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] <... futex resumed>) = 0 [pid 566] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 566] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 567] <... futex resumed>) = 1 [pid 567] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 567] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] <... futex resumed>) = 0 [pid 566] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 566] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 567] <... futex resumed>) = 1 [pid 567] memfd_create("syzkaller", 0) = 5 [pid 567] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 567] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 567] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 567] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 567] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 567] ioctl(6, LOOP_CLR_FD) = 0 [pid 567] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 567] close(6) = 0 [pid 567] close(5) = 0 [pid 567] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 566] <... futex resumed>) = 0 [pid 566] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 566] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 567] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 567] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 566] <... futex resumed>) = 0 [pid 566] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 566] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 567] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 567] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 566] <... futex resumed>) = 0 [pid 567] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 566] exit_group(0) = ? [pid 567] <... futex resumed>) = ? [pid 567] +++ exited with 0 +++ [pid 566] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=566, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 568 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 568 attached [pid 568] set_robust_list(0x5555721e1760, 24) = 0 [pid 568] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 568] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 568] setpgid(0, 0) = 0 [pid 568] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 568] write(3, "1000", 4) = 4 [pid 568] close(3) = 0 executing program [pid 568] write(1, "executing program\n", 18) = 18 [pid 568] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 568] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 568] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 568] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 568] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 568] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 568] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 569 attached => {parent_tid=[569]}, 88) = 569 [pid 569] set_robust_list(0x7f1cd63e09a0, 24 [pid 568] rt_sigprocmask(SIG_SETMASK, [] [pid 569] <... set_robust_list resumed>) = 0 [pid 569] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 569] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 568] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 568] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 569] <... futex resumed>) = 0 [pid 569] memfd_create("syzkaller", 0 [pid 568] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 569] <... memfd_create resumed>) = 3 [pid 569] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 569] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 569] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 569] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 569] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 569] ioctl(4, LOOP_CLR_FD) = 0 [pid 569] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 569] close(4) = 0 [pid 569] close(3) = 0 [pid 569] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 569] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 568] <... futex resumed>) = 0 [pid 568] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 569] <... futex resumed>) = 0 [pid 569] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 569] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 568] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 568] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 568] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 569] <... futex resumed>) = 1 [pid 568] <... futex resumed>) = 0 [pid 569] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 568] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 569] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 568] <... futex resumed>) = 0 [pid 568] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 568] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 569] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 569] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 568] <... futex resumed>) = 0 [pid 569] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 568] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 568] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 569] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 569] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 569] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 568] <... futex resumed>) = 0 [pid 568] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 569] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 568] <... futex resumed>) = 0 [pid 569] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 568] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 569] <... openat resumed>) = 4 [pid 569] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 568] <... futex resumed>) = 0 [pid 569] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0 [pid 568] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 568] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 569] <... mmap resumed>) = 0x200000000000 [pid 569] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 568] <... futex resumed>) = 0 [pid 568] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 568] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 569] memfd_create("syzkaller", 0) = 5 [pid 569] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 569] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 569] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 569] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 569] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 569] ioctl(6, LOOP_CLR_FD) = 0 [pid 569] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 569] close(6) = 0 [pid 569] close(5) = 0 [pid 569] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 568] <... futex resumed>) = 0 [pid 568] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 569] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 569] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 569] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 568] <... futex resumed>) = 1 [pid 568] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 568] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 568] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 569] <... futex resumed>) = 0 [pid 569] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 569] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 568] <... futex resumed>) = 0 [pid 569] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 568] exit_group(0 [pid 569] <... futex resumed>) = ? [pid 568] <... exit_group resumed>) = ? [pid 569] +++ exited with 0 +++ [pid 568] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=568, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 570 ci2-android-6-1/strace-static-x86_64: Process 570 attached [pid 305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 570] set_robust_list(0x5555721e1760, 24) = 0 [pid 570] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 570] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 570] setpgid(0, 0) = 0 [pid 570] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 570] write(3, "1000", 4) = 4 [pid 570] close(3) = 0 executing program [pid 570] write(1, "executing program\n", 18) = 18 [pid 570] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 570] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 570] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 570] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 570] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 570] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 570] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[571]}, 88) = 571 [pid 570] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 570] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 570] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 571 attached [pid 571] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 571] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 571] memfd_create("syzkaller", 0) = 3 [pid 571] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 571] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 571] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 571] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 571] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 571] ioctl(4, LOOP_CLR_FD) = 0 [pid 571] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 571] close(4) = 0 [pid 571] close(3) = 0 [pid 571] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 570] <... futex resumed>) = 0 [pid 571] <... futex resumed>) = 1 [pid 571] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL [pid 570] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 570] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 571] <... quotactl resumed>) = -1 EFAULT (Bad address) [pid 571] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 570] <... futex resumed>) = 0 [pid 570] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 570] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 571] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 571] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 570] <... futex resumed>) = 0 [pid 570] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 570] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 571] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 571] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 570] <... futex resumed>) = 0 [pid 571] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 570] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 570] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 571] <... futex resumed>) = 0 [pid 571] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 571] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 570] <... futex resumed>) = 0 [pid 571] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 570] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 570] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 571] <... futex resumed>) = 0 [pid 571] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 571] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 571] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 570] <... futex resumed>) = 0 [pid 571] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 570] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 570] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 571] <... futex resumed>) = 0 [pid 571] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 571] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 570] <... futex resumed>) = 0 [pid 570] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 570] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 571] memfd_create("syzkaller", 0) = 5 [pid 571] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 571] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 571] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 571] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 571] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 571] ioctl(6, LOOP_CLR_FD) = 0 [pid 571] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 571] close(6) = 0 [pid 571] close(5) = 0 [pid 571] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 570] <... futex resumed>) = 0 [pid 570] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 570] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 571] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 571] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 570] <... futex resumed>) = 0 [pid 570] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 570] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 571] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 571] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 570] <... futex resumed>) = 0 [pid 571] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 570] exit_group(0) = ? [pid 571] <... futex resumed>) = ? [pid 571] +++ exited with 0 +++ [pid 570] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=570, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 572 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 572 attached [pid 572] set_robust_list(0x5555721e1760, 24) = 0 [pid 572] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 572] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 572] setpgid(0, 0) = 0 [pid 572] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 572] write(3, "1000", 4) = 4 [pid 572] close(3) = 0 [pid 572] write(1, "executing program\n", 18) = 18 executing program [pid 572] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 572] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 572] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 572] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 572] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 572] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 572] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 573 attached => {parent_tid=[573]}, 88) = 573 [pid 573] set_robust_list(0x7f1cd63e09a0, 24 [pid 572] rt_sigprocmask(SIG_SETMASK, [] [pid 573] <... set_robust_list resumed>) = 0 [pid 573] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 573] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 572] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 572] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 573] <... futex resumed>) = 0 [pid 573] memfd_create("syzkaller", 0 [pid 572] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 573] <... memfd_create resumed>) = 3 [pid 573] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 573] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 573] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 573] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 573] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 573] ioctl(4, LOOP_CLR_FD) = 0 [pid 573] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 573] close(4) = 0 [pid 573] close(3) = 0 [pid 573] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 573] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 572] <... futex resumed>) = 0 [pid 572] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 573] <... futex resumed>) = 0 [pid 573] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 573] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 573] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 572] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 572] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 573] <... futex resumed>) = 0 [pid 573] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 573] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 573] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 572] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 572] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 573] <... futex resumed>) = 0 [pid 573] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 573] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 573] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 572] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 572] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 573] <... futex resumed>) = 0 [pid 573] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 572] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 573] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 573] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 572] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 572] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 573] <... futex resumed>) = 0 [pid 573] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 573] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 573] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 573] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 572] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 572] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 573] <... futex resumed>) = 0 [pid 573] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0 [pid 572] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 573] <... mmap resumed>) = 0x200000000000 [pid 573] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 573] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 572] <... futex resumed>) = 0 [pid 572] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 573] <... futex resumed>) = 0 [pid 573] memfd_create("syzkaller", 0) = 5 [pid 573] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 572] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 573] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 573] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 573] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 573] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 573] ioctl(6, LOOP_CLR_FD) = 0 [pid 573] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 573] close(6) = 0 [pid 573] close(5) = 0 [pid 573] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 572] <... futex resumed>) = 0 [pid 572] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 572] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 573] <... futex resumed>) = 1 [pid 573] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 573] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 572] <... futex resumed>) = 0 [pid 572] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 572] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 573] <... futex resumed>) = 1 [pid 573] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 573] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 572] <... futex resumed>) = 0 [pid 573] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 572] exit_group(0) = ? [pid 573] <... futex resumed>) = ? [pid 573] +++ exited with 0 +++ [pid 572] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=572, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 574 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 574 attached [pid 574] set_robust_list(0x5555721e1760, 24) = 0 [pid 574] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 574] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 574] setpgid(0, 0) = 0 [pid 574] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 574] write(3, "1000", 4) = 4 [pid 574] close(3) = 0 [pid 574] write(1, "executing program\n", 18) = 18 executing program [pid 574] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 574] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 574] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 574] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 574] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 574] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 574] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[575]}, 88) = 575 [pid 574] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 574] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 574] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 575 attached [pid 575] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 575] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 575] memfd_create("syzkaller", 0) = 3 [pid 575] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 575] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 575] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 575] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 575] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 575] ioctl(4, LOOP_CLR_FD) = 0 [pid 575] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 575] close(4) = 0 [pid 575] close(3) = 0 [pid 575] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 574] <... futex resumed>) = 0 [pid 575] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 574] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 575] <... futex resumed>) = 0 [pid 575] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL [pid 574] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 575] <... quotactl resumed>) = -1 EFAULT (Bad address) [pid 575] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 574] <... futex resumed>) = 0 [pid 574] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 574] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 575] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 575] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 574] <... futex resumed>) = 0 [pid 574] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 575] symlinkat("\x2e\x02", 3, "./file0" [pid 574] <... futex resumed>) = 0 [pid 574] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 575] <... symlinkat resumed>) = -1 EEXIST (File exists) [pid 575] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 574] <... futex resumed>) = 0 [pid 574] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 574] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 575] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 575] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 574] <... futex resumed>) = 0 [pid 574] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 574] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 575] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 575] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 575] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 574] <... futex resumed>) = 0 [pid 574] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 574] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 575] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 575] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 574] <... futex resumed>) = 0 [pid 574] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 575] memfd_create("syzkaller", 0 [pid 574] <... futex resumed>) = 0 [pid 575] <... memfd_create resumed>) = 5 [pid 574] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 575] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 575] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 575] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 575] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 575] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 575] ioctl(6, LOOP_CLR_FD) = 0 [pid 575] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 575] close(6) = 0 [pid 575] close(5) = 0 [pid 575] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 574] <... futex resumed>) = 0 [pid 575] chdir(0x200000000040 [pid 574] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 575] <... chdir resumed>) = -1 ENOENT (No such file or directory) [pid 574] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 575] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 574] <... futex resumed>) = 0 [pid 575] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 574] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 574] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 575] <... futex resumed>) = 0 [pid 575] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 575] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 574] <... futex resumed>) = 0 [pid 574] exit_group(0) = ? [pid 575] +++ exited with 0 +++ [pid 574] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=574, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 576 ci2-android-6-1/strace-static-x86_64: Process 576 attached [pid 576] set_robust_list(0x5555721e1760, 24) = 0 [pid 576] rt_sigprocmask(SIG_SETMASK, [] [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 576] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 576] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 576] setpgid(0, 0) = 0 [pid 576] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 576] write(3, "1000", 4) = 4 [pid 576] close(3) = 0 [pid 576] write(1, "executing program\n", 18) = 18 [pid 576] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 executing program [pid 576] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 576] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 576] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 576] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 576] rt_sigprocmask(SIG_BLOCK, ~[] [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 576] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 576] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[577]}, 88) = 577 [pid 576] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 576] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 576] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 577 attached [pid 577] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 577] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 577] memfd_create("syzkaller", 0) = 3 [pid 577] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 577] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 577] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 577] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 577] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 577] ioctl(4, LOOP_CLR_FD) = 0 [pid 577] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 577] close(4) = 0 [pid 577] close(3) = 0 [pid 577] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 576] <... futex resumed>) = 0 [pid 576] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 576] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 577] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 577] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 576] <... futex resumed>) = 0 [pid 576] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 576] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 577] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 577] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 576] <... futex resumed>) = 0 [pid 576] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 576] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 577] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 577] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 576] <... futex resumed>) = 0 [pid 576] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 576] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 577] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 577] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 576] <... futex resumed>) = 0 [pid 576] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 576] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 577] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 577] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 577] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 576] <... futex resumed>) = 0 [pid 576] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 576] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 577] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 577] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 576] <... futex resumed>) = 0 [pid 576] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 576] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 577] memfd_create("syzkaller", 0) = 5 [pid 577] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 577] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 577] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 577] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 577] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 577] ioctl(6, LOOP_CLR_FD) = 0 [pid 577] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 577] close(6) = 0 [pid 577] close(5) = 0 [pid 577] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 576] <... futex resumed>) = 0 [pid 576] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 576] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 577] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 577] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 576] <... futex resumed>) = 0 [pid 576] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 576] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 577] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 577] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 576] <... futex resumed>) = 0 [pid 576] exit_group(0) = ? [pid 577] +++ exited with 0 +++ [pid 576] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=576, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 578 ci2-android-6-1/strace-static-x86_64: Process 578 attached [pid 305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 578] set_robust_list(0x5555721e1760, 24) = 0 [pid 578] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 578] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 578] setpgid(0, 0) = 0 [pid 578] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 578] write(3, "1000", 4) = 4 [pid 578] close(3) = 0 [pid 578] write(1, "executing program\n", 18) = 18 executing program [pid 578] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 578] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 578] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 578] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 578] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 578] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 578] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 579 attached => {parent_tid=[579]}, 88) = 579 [pid 578] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 578] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 578] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 579] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 579] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 579] memfd_create("syzkaller", 0) = 3 [pid 579] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 579] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 579] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 579] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 579] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 579] ioctl(4, LOOP_CLR_FD) = 0 [pid 579] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 579] close(4) = 0 [pid 579] close(3) = 0 [pid 579] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 579] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 578] <... futex resumed>) = 0 [pid 578] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 579] <... futex resumed>) = 0 [pid 579] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 578] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 579] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 578] <... futex resumed>) = 0 [pid 578] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 578] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 579] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 579] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 578] <... futex resumed>) = 0 [pid 578] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 578] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 579] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 579] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 578] <... futex resumed>) = 0 [pid 578] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 579] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM [pid 578] <... futex resumed>) = 0 [pid 579] <... mprotect resumed>) = 0 [pid 578] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 579] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 578] <... futex resumed>) = 0 [pid 578] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 578] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 579] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 579] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 579] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 578] <... futex resumed>) = 0 [pid 579] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0 [pid 578] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 578] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 579] <... mmap resumed>) = 0x200000000000 [pid 579] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 578] <... futex resumed>) = 0 [pid 578] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 578] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 579] memfd_create("syzkaller", 0) = 5 [pid 579] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 579] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 579] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 579] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 579] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 579] ioctl(6, LOOP_CLR_FD) = 0 [pid 579] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 579] close(6) = 0 [pid 579] close(5) = 0 [pid 579] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 578] <... futex resumed>) = 0 [pid 578] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 578] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 579] <... futex resumed>) = 1 [pid 579] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 579] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 578] <... futex resumed>) = 0 [pid 578] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 578] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 579] <... futex resumed>) = 1 [pid 579] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 579] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 578] <... futex resumed>) = 0 [pid 578] exit_group(0) = ? [pid 579] <... futex resumed>) = ? [pid 579] +++ exited with 0 +++ [pid 578] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=578, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 580 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 580 attached [pid 580] set_robust_list(0x5555721e1760, 24) = 0 [pid 580] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 580] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 580] setpgid(0, 0) = 0 [pid 580] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 580] write(3, "1000", 4) = 4 [pid 580] close(3) = 0 executing program [pid 580] write(1, "executing program\n", 18) = 18 [pid 580] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 580] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 580] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 580] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 580] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 580] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 580] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[581]}, 88) = 581 [pid 580] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 580] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 580] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 581 attached [pid 581] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 581] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 581] memfd_create("syzkaller", 0) = 3 [pid 581] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 581] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 581] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 581] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 581] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 581] ioctl(4, LOOP_CLR_FD) = 0 [pid 581] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 581] close(4) = 0 [pid 581] close(3) = 0 [pid 581] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 580] <... futex resumed>) = 0 [pid 580] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 580] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 581] <... futex resumed>) = 1 [pid 581] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 581] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 580] <... futex resumed>) = 0 [pid 580] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 580] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 581] <... futex resumed>) = 1 [pid 581] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 581] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 580] <... futex resumed>) = 0 [pid 580] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 580] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 581] <... futex resumed>) = 1 [pid 581] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 581] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 580] <... futex resumed>) = 0 [pid 580] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 580] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 581] <... futex resumed>) = 1 [pid 581] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 581] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 580] <... futex resumed>) = 0 [pid 580] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 580] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 581] <... futex resumed>) = 1 [pid 581] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 581] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 581] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 580] <... futex resumed>) = 0 [pid 580] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 580] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 581] <... futex resumed>) = 1 [pid 581] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 581] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 580] <... futex resumed>) = 0 [pid 580] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 580] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 581] <... futex resumed>) = 1 [pid 581] memfd_create("syzkaller", 0) = 5 [pid 581] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 581] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 581] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 581] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 581] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 581] ioctl(6, LOOP_CLR_FD) = 0 [pid 581] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 581] close(6) = 0 [pid 581] close(5) = 0 [pid 581] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 580] <... futex resumed>) = 0 [pid 580] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 580] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 581] <... futex resumed>) = 1 [pid 581] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 581] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 580] <... futex resumed>) = 0 [pid 580] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 580] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 581] <... futex resumed>) = 1 [pid 581] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 581] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 580] <... futex resumed>) = 0 [pid 580] exit_group(0) = ? [pid 581] <... futex resumed>) = ? [pid 581] +++ exited with 0 +++ [pid 580] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=580, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 582 ci2-android-6-1/strace-static-x86_64: Process 582 attached [pid 582] set_robust_list(0x5555721e1760, 24 [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 582] <... set_robust_list resumed>) = 0 [pid 582] rt_sigprocmask(SIG_SETMASK, [] [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 582] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 582] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 582] setpgid(0, 0) = 0 [pid 582] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 582] write(3, "1000", 4) = 4 [pid 582] close(3) = 0 [pid 582] write(1, "executing program\n", 18) = 18 [pid 582] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 582] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 582] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 582] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 582] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 582] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 582] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[583]}, 88) = 583 [pid 582] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 582] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 582] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 583 attached [pid 583] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 583] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 583] memfd_create("syzkaller", 0) = 3 [pid 583] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 executing program [pid 583] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 583] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 583] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 583] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 583] ioctl(4, LOOP_CLR_FD) = 0 [pid 583] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 583] close(4) = 0 [pid 583] close(3) = 0 [pid 583] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 582] <... futex resumed>) = 0 [pid 582] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 582] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 583] <... futex resumed>) = 1 [pid 583] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 583] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 582] <... futex resumed>) = 0 [pid 582] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 582] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 583] <... futex resumed>) = 1 [pid 583] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 583] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 582] <... futex resumed>) = 0 [pid 582] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 582] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 583] <... futex resumed>) = 1 [pid 583] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 583] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 582] <... futex resumed>) = 0 [pid 582] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 582] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 583] <... futex resumed>) = 1 [pid 583] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 583] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 582] <... futex resumed>) = 0 [pid 582] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 582] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 583] <... futex resumed>) = 1 [pid 583] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 583] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 583] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 582] <... futex resumed>) = 0 [pid 582] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 582] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 583] <... futex resumed>) = 1 [pid 583] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 583] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 582] <... futex resumed>) = 0 [pid 582] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 582] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 583] <... futex resumed>) = 1 [pid 583] memfd_create("syzkaller", 0) = 5 [pid 583] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 583] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 583] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 583] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 583] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 583] ioctl(6, LOOP_CLR_FD) = 0 [pid 583] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 583] close(6) = 0 [pid 583] close(5) = 0 [pid 583] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 582] <... futex resumed>) = 0 [pid 582] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 582] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 583] <... futex resumed>) = 1 [pid 583] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 583] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 582] <... futex resumed>) = 0 [pid 582] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 582] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 583] <... futex resumed>) = 1 [pid 583] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 583] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 582] <... futex resumed>) = 0 [pid 582] exit_group(0) = ? [pid 583] <... futex resumed>) = ? [pid 583] +++ exited with 0 +++ [pid 582] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=582, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 584 ci2-android-6-1/strace-static-x86_64: Process 584 attached [pid 584] set_robust_list(0x5555721e1760, 24) = 0 [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 584] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 584] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 584] setpgid(0, 0) = 0 [pid 584] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 584] write(3, "1000", 4) = 4 [pid 584] close(3) = 0 [pid 584] write(1, "executing program\n", 18) = 18 [pid 584] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 executing program [pid 584] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 584] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 584] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 584] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 584] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 584] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[585]}, 88) = 585 [pid 584] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 584] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 584] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 585 attached [pid 585] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 585] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 585] memfd_create("syzkaller", 0) = 3 [pid 585] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 585] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 585] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 585] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 585] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 585] ioctl(4, LOOP_CLR_FD) = 0 [pid 585] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 585] close(4) = 0 [pid 585] close(3) = 0 [pid 585] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 584] <... futex resumed>) = 0 [pid 584] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 584] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 585] <... futex resumed>) = 1 [pid 585] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 585] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 584] <... futex resumed>) = 0 [pid 584] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 584] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 585] <... futex resumed>) = 1 [pid 585] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 585] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 584] <... futex resumed>) = 0 [pid 584] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 584] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 585] <... futex resumed>) = 1 [pid 585] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 585] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 584] <... futex resumed>) = 0 [pid 584] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 584] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 585] <... futex resumed>) = 1 [pid 585] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 585] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 584] <... futex resumed>) = 0 [pid 584] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 584] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 585] <... futex resumed>) = 1 [pid 585] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 585] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 585] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 584] <... futex resumed>) = 0 [pid 584] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 584] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 585] <... futex resumed>) = 1 [pid 585] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 585] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 584] <... futex resumed>) = 0 [pid 584] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 584] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 585] <... futex resumed>) = 1 [pid 585] memfd_create("syzkaller", 0) = 5 [pid 585] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 585] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 585] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 585] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 585] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 585] ioctl(6, LOOP_CLR_FD) = 0 [pid 585] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 585] close(6) = 0 [pid 585] close(5) = 0 [pid 585] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 584] <... futex resumed>) = 0 [pid 584] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 584] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 585] <... futex resumed>) = 1 [pid 585] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 585] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 584] <... futex resumed>) = 0 [pid 584] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 584] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 585] <... futex resumed>) = 1 [pid 585] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 585] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 584] <... futex resumed>) = 0 [pid 584] exit_group(0) = ? [pid 585] <... futex resumed>) = ? [pid 585] +++ exited with 0 +++ [pid 584] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=584, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 586 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 586 attached [pid 586] set_robust_list(0x5555721e1760, 24) = 0 [pid 586] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 586] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 586] setpgid(0, 0) = 0 [pid 586] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 586] write(3, "1000", 4) = 4 [pid 586] close(3) = 0 [pid 586] write(1, "executing program\n", 18) = 18 executing program [pid 586] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 586] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 586] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 586] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 586] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 586] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 586] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 587 attached => {parent_tid=[587]}, 88) = 587 [pid 587] set_robust_list(0x7f1cd63e09a0, 24 [pid 586] rt_sigprocmask(SIG_SETMASK, [] [pid 587] <... set_robust_list resumed>) = 0 [pid 586] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 587] rt_sigprocmask(SIG_SETMASK, [] [pid 586] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 587] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 586] <... futex resumed>) = 0 [pid 586] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 587] memfd_create("syzkaller", 0) = 3 [pid 587] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 587] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 587] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 587] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 587] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 587] ioctl(4, LOOP_CLR_FD) = 0 [pid 587] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 587] close(4) = 0 [pid 587] close(3) = 0 [pid 587] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 586] <... futex resumed>) = 0 [pid 586] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 586] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 587] <... futex resumed>) = 1 [pid 587] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 587] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 586] <... futex resumed>) = 0 [pid 586] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 586] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 587] <... futex resumed>) = 1 [pid 587] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 587] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 586] <... futex resumed>) = 0 [pid 586] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 586] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 587] <... futex resumed>) = 1 [pid 587] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 587] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 586] <... futex resumed>) = 0 [pid 586] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 586] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 587] <... futex resumed>) = 1 [pid 587] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 587] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 586] <... futex resumed>) = 0 [pid 586] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 586] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 587] <... futex resumed>) = 1 [pid 587] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 587] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 587] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 586] <... futex resumed>) = 0 [pid 586] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 586] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 587] <... futex resumed>) = 1 [pid 587] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 587] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 586] <... futex resumed>) = 0 [pid 586] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 586] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 587] <... futex resumed>) = 1 [pid 587] memfd_create("syzkaller", 0) = 5 [pid 587] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 587] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 587] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 587] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 587] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 587] ioctl(6, LOOP_CLR_FD) = 0 [pid 587] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 587] close(6) = 0 [pid 587] close(5) = 0 [pid 587] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 586] <... futex resumed>) = 0 [pid 586] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 586] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 587] <... futex resumed>) = 1 [pid 587] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 587] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 586] <... futex resumed>) = 0 [pid 586] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 586] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 587] <... futex resumed>) = 1 [pid 587] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 587] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 586] <... futex resumed>) = 0 [pid 586] exit_group(0) = ? [pid 587] <... futex resumed>) = ? [pid 587] +++ exited with 0 +++ [pid 586] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=586, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 588 ci2-android-6-1/strace-static-x86_64: Process 588 attached [pid 305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 588] set_robust_list(0x5555721e1760, 24) = 0 [pid 588] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 588] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 588] setpgid(0, 0) = 0 [pid 588] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 588] write(3, "1000", 4) = 4 [pid 588] close(3) = 0 [pid 588] write(1, "executing program\n", 18) = 18 executing program [pid 588] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 588] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 588] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 588] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 588] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 588] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 588] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 589 attached => {parent_tid=[589]}, 88) = 589 [pid 588] rt_sigprocmask(SIG_SETMASK, [] [pid 589] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 588] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 589] rt_sigprocmask(SIG_SETMASK, [] [pid 588] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 589] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 588] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 589] memfd_create("syzkaller", 0) = 3 [pid 589] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 589] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 589] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 589] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 589] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 589] ioctl(4, LOOP_CLR_FD) = 0 [pid 589] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 589] close(4) = 0 [pid 589] close(3) = 0 [pid 589] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 588] <... futex resumed>) = 0 [pid 588] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 588] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 589] <... futex resumed>) = 1 [pid 589] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 589] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 588] <... futex resumed>) = 0 [pid 588] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 588] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 589] <... futex resumed>) = 1 [pid 589] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 589] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 588] <... futex resumed>) = 0 [pid 588] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 588] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 589] <... futex resumed>) = 1 [pid 589] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 589] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 588] <... futex resumed>) = 0 [pid 588] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 588] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 589] <... futex resumed>) = 1 [pid 589] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 589] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 588] <... futex resumed>) = 0 [pid 588] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 589] <... futex resumed>) = 1 [pid 588] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 589] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 589] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 589] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 588] <... futex resumed>) = 0 [pid 588] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 588] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 589] <... futex resumed>) = 1 [pid 589] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 589] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 588] <... futex resumed>) = 0 [pid 588] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 588] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 589] memfd_create("syzkaller", 0) = 5 [pid 589] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 589] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 589] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 589] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 589] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 589] ioctl(6, LOOP_CLR_FD) = 0 [pid 589] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 589] close(6) = 0 [pid 589] close(5) = 0 [pid 589] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 588] <... futex resumed>) = 0 [pid 588] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 589] chdir(0x200000000040 [pid 588] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 589] <... chdir resumed>) = -1 ENOENT (No such file or directory) [pid 589] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 588] <... futex resumed>) = 0 [pid 589] fchmodat(AT_FDCWD, 0x200000000300, 0177520 [pid 588] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 589] <... fchmodat resumed>) = 0 [pid 588] <... futex resumed>) = 0 [pid 589] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 588] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 589] <... futex resumed>) = 0 [pid 588] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 589] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 588] exit_group(0 [pid 589] <... futex resumed>) = ? [pid 588] <... exit_group resumed>) = ? [pid 589] +++ exited with 0 +++ [pid 588] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=588, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 590 ci2-android-6-1/strace-static-x86_64: Process 590 attached [pid 590] set_robust_list(0x5555721e1760, 24) = 0 [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 590] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 590] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 590] setpgid(0, 0) = 0 [pid 590] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 590] write(3, "1000", 4) = 4 [pid 590] close(3) = 0 [pid 590] write(1, "executing program\n", 18) = 18 executing program [pid 590] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 590] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 590] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 590] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 590] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 590] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 590] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[591]}, 88) = 591 [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 590] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 590] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 590] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 591 attached [pid 591] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 591] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 591] memfd_create("syzkaller", 0) = 3 [pid 591] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 591] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 591] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 591] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 591] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 591] ioctl(4, LOOP_CLR_FD) = 0 [pid 591] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 591] close(4) = 0 [pid 591] close(3) = 0 [pid 591] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 590] <... futex resumed>) = 0 [pid 590] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 590] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 591] <... futex resumed>) = 1 [pid 591] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 591] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 590] <... futex resumed>) = 0 [pid 590] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 590] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 591] <... futex resumed>) = 1 [pid 591] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 591] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 590] <... futex resumed>) = 0 [pid 590] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 590] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 591] <... futex resumed>) = 1 [pid 591] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 591] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 590] <... futex resumed>) = 0 [pid 590] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 590] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 591] <... futex resumed>) = 1 [pid 591] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 591] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 590] <... futex resumed>) = 0 [pid 590] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 590] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 591] <... futex resumed>) = 1 [pid 591] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 591] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 591] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 590] <... futex resumed>) = 0 [pid 590] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 590] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 591] <... futex resumed>) = 1 [pid 591] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 591] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 590] <... futex resumed>) = 0 [pid 590] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 590] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 591] <... futex resumed>) = 1 [pid 591] memfd_create("syzkaller", 0) = 5 [pid 591] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 591] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 591] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 591] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 591] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 591] ioctl(6, LOOP_CLR_FD) = 0 [pid 591] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 591] close(6) = 0 [pid 591] close(5) = 0 [pid 591] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 590] <... futex resumed>) = 0 [pid 591] chdir(0x200000000040 [pid 590] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 591] <... chdir resumed>) = -1 ENOENT (No such file or directory) [pid 590] <... futex resumed>) = 0 [pid 591] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 590] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 591] <... futex resumed>) = 0 [pid 590] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 591] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 590] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 591] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 590] <... futex resumed>) = 0 [pid 591] fchmodat(AT_FDCWD, 0x200000000300, 0177520 [pid 590] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 591] <... fchmodat resumed>) = 0 [pid 591] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 590] <... futex resumed>) = 0 [pid 591] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 590] exit_group(0) = ? [pid 591] <... futex resumed>) = ? [pid 591] +++ exited with 0 +++ [pid 590] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=590, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 592 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 592 attached [pid 592] set_robust_list(0x5555721e1760, 24) = 0 [pid 592] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 592] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 592] setpgid(0, 0) = 0 [pid 592] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 592] write(3, "1000", 4) = 4 [pid 592] close(3) = 0 [pid 592] write(1, "executing program\n", 18) = 18 [pid 592] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 executing program [pid 592] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 592] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 592] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 592] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 592] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 592] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 593 attached => {parent_tid=[593]}, 88) = 593 [pid 593] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 592] rt_sigprocmask(SIG_SETMASK, [] [pid 593] rt_sigprocmask(SIG_SETMASK, [] [pid 592] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 593] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 592] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 593] memfd_create("syzkaller", 0 [pid 592] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 593] <... memfd_create resumed>) = 3 [pid 593] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 593] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 593] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 593] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 593] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 593] ioctl(4, LOOP_CLR_FD) = 0 [pid 593] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 593] close(4) = 0 [pid 593] close(3) = 0 [pid 593] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 592] <... futex resumed>) = 0 [pid 592] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 592] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 593] <... futex resumed>) = 1 [pid 593] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 593] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 592] <... futex resumed>) = 0 [pid 592] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 593] <... futex resumed>) = 1 [pid 592] <... futex resumed>) = 0 [pid 592] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 593] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 593] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 592] <... futex resumed>) = 0 [pid 592] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 592] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 593] <... futex resumed>) = 1 [pid 593] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 593] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 592] <... futex resumed>) = 0 [pid 592] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 592] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 593] <... futex resumed>) = 1 [pid 593] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 593] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 592] <... futex resumed>) = 0 [pid 593] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 592] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 592] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 593] <... futex resumed>) = 0 [pid 593] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 593] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 593] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 592] <... futex resumed>) = 0 [pid 592] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 592] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 593] <... futex resumed>) = 1 [pid 593] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 593] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 592] <... futex resumed>) = 0 [pid 592] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 593] memfd_create("syzkaller", 0 [pid 592] <... futex resumed>) = 0 [pid 592] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 593] <... memfd_create resumed>) = 5 [pid 593] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 593] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 593] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 593] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 593] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 593] ioctl(6, LOOP_CLR_FD) = 0 [pid 593] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 593] close(6) = 0 [pid 593] close(5) = 0 [pid 593] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 592] <... futex resumed>) = 0 [pid 592] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 592] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 593] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 593] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 592] <... futex resumed>) = 0 [pid 592] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 592] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 593] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 593] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 592] <... futex resumed>) = 0 [pid 592] exit_group(0) = ? [pid 593] +++ exited with 0 +++ [pid 592] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=592, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 594 ci2-android-6-1/strace-static-x86_64: Process 594 attached [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 594] set_robust_list(0x5555721e1760, 24) = 0 [pid 594] rt_sigprocmask(SIG_SETMASK, [] [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 594] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 594] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 594] setpgid(0, 0) = 0 [pid 594] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 594] write(3, "1000", 4) = 4 [pid 594] close(3) = 0 [pid 594] write(1, "executing program\n", 18) = 18 [pid 594] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 executing program [pid 594] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 594] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 594] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 594] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 594] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 594] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[595]}, 88) = 595 [pid 594] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 594] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 594] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 595 attached [pid 595] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 595] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 595] memfd_create("syzkaller", 0) = 3 [pid 595] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 595] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 595] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 595] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 595] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 595] ioctl(4, LOOP_CLR_FD) = 0 [pid 595] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 595] close(4) = 0 [pid 595] close(3) = 0 [pid 595] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 594] <... futex resumed>) = 0 [pid 594] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 594] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 595] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 595] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 594] <... futex resumed>) = 0 [pid 594] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 594] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 595] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 595] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 594] <... futex resumed>) = 0 [pid 594] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 594] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 595] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 595] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 594] <... futex resumed>) = 0 [pid 594] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 594] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 595] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 595] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 594] <... futex resumed>) = 0 [pid 594] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 594] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 595] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 595] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 595] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 594] <... futex resumed>) = 0 [pid 594] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 594] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 595] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 595] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 594] <... futex resumed>) = 0 [pid 595] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 594] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 595] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 594] <... futex resumed>) = 0 [pid 595] memfd_create("syzkaller", 0 [pid 594] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 595] <... memfd_create resumed>) = 5 [pid 595] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 595] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 595] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 595] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 595] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 595] ioctl(6, LOOP_CLR_FD) = 0 [pid 595] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 595] close(6) = 0 [pid 595] close(5) = 0 [pid 595] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 594] <... futex resumed>) = 0 [pid 595] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 594] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 595] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 594] <... futex resumed>) = 0 [pid 594] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 595] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 595] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 594] <... futex resumed>) = 0 [pid 594] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 594] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 595] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 595] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 594] <... futex resumed>) = 0 [pid 594] exit_group(0) = ? [pid 595] +++ exited with 0 +++ [pid 594] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=594, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 596 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 596 attached [pid 596] set_robust_list(0x5555721e1760, 24) = 0 [pid 596] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 596] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 596] setpgid(0, 0) = 0 [pid 596] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 596] write(3, "1000", 4) = 4 [pid 596] close(3) = 0 [pid 596] write(1, "executing program\n", 18) = 18 executing program [pid 596] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 596] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 596] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 596] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 596] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 596] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 596] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[597]}, 88) = 597 [pid 596] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 596] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 596] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 597 attached [pid 597] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 597] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 597] memfd_create("syzkaller", 0) = 3 [pid 597] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 597] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 597] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 597] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 597] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 597] ioctl(4, LOOP_CLR_FD) = 0 [pid 597] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 597] close(4) = 0 [pid 597] close(3) = 0 [pid 597] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 596] <... futex resumed>) = 0 [pid 596] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 596] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 597] <... futex resumed>) = 1 [pid 597] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 597] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 596] <... futex resumed>) = 0 [pid 596] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 596] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 597] <... futex resumed>) = 1 [pid 597] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 597] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 596] <... futex resumed>) = 0 [pid 596] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 596] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 597] <... futex resumed>) = 1 [pid 597] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 597] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 596] <... futex resumed>) = 0 [pid 596] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 596] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 597] <... futex resumed>) = 1 [pid 597] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 597] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 596] <... futex resumed>) = 0 [pid 596] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 596] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 597] <... futex resumed>) = 1 [pid 597] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 597] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 597] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 596] <... futex resumed>) = 0 [pid 596] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 596] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 597] <... futex resumed>) = 1 [pid 597] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 597] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 596] <... futex resumed>) = 0 [pid 596] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 596] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 597] <... futex resumed>) = 1 [pid 597] memfd_create("syzkaller", 0) = 5 [pid 597] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 597] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 597] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 597] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 597] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 597] ioctl(6, LOOP_CLR_FD) = 0 [pid 597] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 597] close(6) = 0 [pid 597] close(5) = 0 [pid 597] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 596] <... futex resumed>) = 0 [pid 596] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 596] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 597] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 597] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 596] <... futex resumed>) = 0 [pid 596] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 596] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 597] <... futex resumed>) = 1 [pid 597] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 597] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 596] <... futex resumed>) = 0 [pid 596] exit_group(0) = ? [pid 597] <... futex resumed>) = ? [pid 597] +++ exited with 0 +++ [pid 596] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=596, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 598 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 598 attached [pid 598] set_robust_list(0x5555721e1760, 24) = 0 [pid 598] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 598] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 598] setpgid(0, 0) = 0 [pid 598] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 598] write(3, "1000", 4) = 4 [pid 598] close(3) = 0 [pid 598] write(1, "executing program\n", 18) = 18 executing program [pid 598] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 598] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 598] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 598] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 598] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 598] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 598] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[599]}, 88) = 599 [pid 598] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 598] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 598] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 599 attached [pid 599] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 599] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 599] memfd_create("syzkaller", 0) = 3 [pid 599] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 599] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 599] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 599] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 599] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 599] ioctl(4, LOOP_CLR_FD) = 0 [pid 599] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 599] close(4) = 0 [pid 599] close(3) = 0 [pid 599] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 598] <... futex resumed>) = 0 [pid 598] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 598] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 599] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 599] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 598] <... futex resumed>) = 0 [pid 598] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 598] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 599] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 599] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 598] <... futex resumed>) = 0 [pid 598] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 598] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 599] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 599] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 598] <... futex resumed>) = 0 [pid 598] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 598] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 599] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 599] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 598] <... futex resumed>) = 0 [pid 598] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 598] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 599] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 599] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 599] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 598] <... futex resumed>) = 0 [pid 598] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 598] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 599] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 599] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 598] <... futex resumed>) = 0 [pid 598] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 598] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 599] memfd_create("syzkaller", 0) = 5 [pid 599] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 599] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 599] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 599] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 599] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 599] ioctl(6, LOOP_CLR_FD) = 0 [pid 599] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 599] close(6) = 0 [pid 599] close(5) = 0 [pid 599] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 598] <... futex resumed>) = 0 [pid 598] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 598] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 599] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 599] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 598] <... futex resumed>) = 0 [pid 598] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 598] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 599] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 599] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 598] <... futex resumed>) = 0 [pid 599] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 598] exit_group(0) = ? [pid 599] <... futex resumed>) = ? [pid 599] +++ exited with 0 +++ [pid 598] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=598, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 600 ci2-android-6-1/strace-static-x86_64: Process 600 attached [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 600] set_robust_list(0x5555721e1760, 24 [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 600] <... set_robust_list resumed>) = 0 [pid 600] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 600] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 600] setpgid(0, 0) = 0 [pid 600] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 600] write(3, "1000", 4) = 4 [pid 600] close(3) = 0 executing program [pid 600] write(1, "executing program\n", 18) = 18 [pid 600] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 600] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 600] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 600] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 600] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 600] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 600] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 601 attached => {parent_tid=[601]}, 88) = 601 [pid 601] set_robust_list(0x7f1cd63e09a0, 24 [pid 600] rt_sigprocmask(SIG_SETMASK, [] [pid 601] <... set_robust_list resumed>) = 0 [pid 600] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 601] rt_sigprocmask(SIG_SETMASK, [] [pid 600] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 601] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 600] <... futex resumed>) = 0 [pid 601] memfd_create("syzkaller", 0 [pid 600] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 601] <... memfd_create resumed>) = 3 [pid 601] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 601] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 601] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 601] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 601] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 601] ioctl(4, LOOP_CLR_FD) = 0 [pid 601] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 601] close(4) = 0 [pid 601] close(3) = 0 [pid 601] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 600] <... futex resumed>) = 0 [pid 601] <... futex resumed>) = 1 [pid 600] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 601] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL [pid 600] <... futex resumed>) = 0 [pid 601] <... quotactl resumed>) = -1 EFAULT (Bad address) [pid 600] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 601] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 600] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 601] <... futex resumed>) = 0 [pid 600] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 601] openat(AT_FDCWD, ".", O_RDONLY [pid 600] <... futex resumed>) = 0 [pid 600] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 601] <... openat resumed>) = 3 [pid 601] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 600] <... futex resumed>) = 0 [pid 600] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 601] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 600] <... futex resumed>) = 0 [pid 600] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 601] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 600] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 601] <... futex resumed>) = 0 [pid 600] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 601] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM [pid 600] <... futex resumed>) = 0 [pid 600] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 601] <... mprotect resumed>) = 0 [pid 601] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 600] <... futex resumed>) = 0 [pid 601] <... futex resumed>) = 1 [pid 600] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 601] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 600] <... futex resumed>) = 0 [pid 600] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 601] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 601] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 600] <... futex resumed>) = 0 [pid 601] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0 [pid 600] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 600] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 601] <... mmap resumed>) = 0x200000000000 [pid 601] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 600] <... futex resumed>) = 0 [pid 600] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 600] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 601] memfd_create("syzkaller", 0) = 5 [pid 601] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 601] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 601] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 601] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 601] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 601] ioctl(6, LOOP_CLR_FD) = 0 [pid 601] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 601] close(6) = 0 [pid 601] close(5) = 0 [pid 601] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 600] <... futex resumed>) = 0 [pid 600] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 600] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 601] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 601] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 600] <... futex resumed>) = 0 [pid 600] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 600] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 601] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 601] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 600] <... futex resumed>) = 0 [pid 600] exit_group(0) = ? [pid 601] +++ exited with 0 +++ [pid 600] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=600, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 602 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 602 attached [pid 602] set_robust_list(0x5555721e1760, 24) = 0 [pid 602] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 602] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 602] setpgid(0, 0) = 0 [pid 602] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 602] write(3, "1000", 4) = 4 [pid 602] close(3) = 0 [pid 602] write(1, "executing program\n", 18) = 18 executing program [pid 602] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 602] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 602] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 602] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 602] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 602] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 602] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 603 attached => {parent_tid=[603]}, 88) = 603 [pid 603] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 602] rt_sigprocmask(SIG_SETMASK, [] [pid 603] rt_sigprocmask(SIG_SETMASK, [] [pid 602] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 603] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 602] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 603] memfd_create("syzkaller", 0 [pid 602] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 603] <... memfd_create resumed>) = 3 [pid 603] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 603] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 603] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 603] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 603] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 603] ioctl(4, LOOP_CLR_FD) = 0 [pid 603] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 603] close(4) = 0 [pid 603] close(3) = 0 [pid 603] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 602] <... futex resumed>) = 0 [pid 603] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL [pid 602] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 602] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 603] <... quotactl resumed>) = -1 EFAULT (Bad address) [pid 603] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 602] <... futex resumed>) = 0 [pid 603] openat(AT_FDCWD, ".", O_RDONLY [pid 602] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 603] <... openat resumed>) = 3 [pid 602] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 603] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 602] <... futex resumed>) = 0 [pid 603] symlinkat("\x2e\x02", 3, "./file0" [pid 602] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 603] <... symlinkat resumed>) = -1 EEXIST (File exists) [pid 602] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 603] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 602] <... futex resumed>) = 0 [pid 603] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM [pid 602] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 602] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 603] <... mprotect resumed>) = 0 [pid 603] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 602] <... futex resumed>) = 0 [pid 602] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 603] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 602] <... futex resumed>) = 0 [pid 602] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 603] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 603] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 602] <... futex resumed>) = 0 [pid 602] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 602] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 603] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 603] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 602] <... futex resumed>) = 0 [pid 602] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 602] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 603] memfd_create("syzkaller", 0) = 5 [pid 603] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 603] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 603] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 603] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 603] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 603] ioctl(6, LOOP_CLR_FD) = 0 [pid 603] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 603] close(6) = 0 [pid 603] close(5) = 0 [pid 603] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 602] <... futex resumed>) = 0 [pid 602] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 602] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 603] <... futex resumed>) = 1 [pid 603] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 603] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 602] <... futex resumed>) = 0 [pid 602] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 602] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 603] <... futex resumed>) = 1 [pid 603] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 603] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 602] <... futex resumed>) = 0 [pid 603] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 602] exit_group(0) = ? [pid 603] <... futex resumed>) = ? [pid 603] +++ exited with 0 +++ [pid 602] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=602, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 604 ci2-android-6-1/strace-static-x86_64: Process 604 attached [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 604] set_robust_list(0x5555721e1760, 24) = 0 [pid 604] rt_sigprocmask(SIG_SETMASK, [] [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 604] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 604] setpgid(0, 0) = 0 [pid 604] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 604] write(3, "1000", 4) = 4 [pid 604] close(3) = 0 [pid 604] write(1, "executing program\n", 18) = 18 [pid 604] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 604] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 604] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 604] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 604] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 604] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[605]}, 88) = 605 [pid 604] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 604] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 604] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 605 attached [pid 605] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 605] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 605] memfd_create("syzkaller", 0) = 3 [pid 605] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 executing program [pid 605] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 605] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 605] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 605] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 605] ioctl(4, LOOP_CLR_FD) = 0 [pid 605] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 605] close(4) = 0 [pid 605] close(3) = 0 [pid 605] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 604] <... futex resumed>) = 0 [pid 604] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 604] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 605] <... futex resumed>) = 1 [pid 605] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 605] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 604] <... futex resumed>) = 0 [pid 604] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 604] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 605] <... futex resumed>) = 1 [pid 605] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 605] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 604] <... futex resumed>) = 0 [pid 604] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 604] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 605] <... futex resumed>) = 1 [pid 605] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 605] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 604] <... futex resumed>) = 0 [pid 604] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 604] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 605] <... futex resumed>) = 1 [pid 605] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 605] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 604] <... futex resumed>) = 0 [pid 604] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 604] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 605] <... futex resumed>) = 1 [pid 605] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 605] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 605] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 604] <... futex resumed>) = 0 [pid 604] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 604] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 605] <... futex resumed>) = 1 [pid 605] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 605] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 604] <... futex resumed>) = 0 [pid 604] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 604] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 605] <... futex resumed>) = 1 [pid 605] memfd_create("syzkaller", 0) = 5 [pid 605] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 605] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 605] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 605] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 605] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 605] ioctl(6, LOOP_CLR_FD) = 0 [pid 605] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 605] close(6) = 0 [pid 605] close(5) = 0 [pid 605] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 604] <... futex resumed>) = 0 [pid 604] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 604] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 605] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 605] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 604] <... futex resumed>) = 0 [pid 604] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 604] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 605] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 605] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 604] <... futex resumed>) = 0 [pid 604] exit_group(0) = ? [pid 605] +++ exited with 0 +++ [pid 604] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=604, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 606 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 606 attached [pid 606] set_robust_list(0x5555721e1760, 24) = 0 [pid 606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 606] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 606] setpgid(0, 0) = 0 [pid 606] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 606] write(3, "1000", 4) = 4 [pid 606] close(3) = 0 [pid 606] write(1, "executing program\n", 18) = 18 executing program [pid 606] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 606] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 606] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 606] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 606] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 606] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 606] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 607 attached => {parent_tid=[607]}, 88) = 607 [pid 607] set_robust_list(0x7f1cd63e09a0, 24 [pid 606] rt_sigprocmask(SIG_SETMASK, [] [pid 607] <... set_robust_list resumed>) = 0 [pid 606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 607] rt_sigprocmask(SIG_SETMASK, [] [pid 606] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 607] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 606] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 607] memfd_create("syzkaller", 0) = 3 [pid 607] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 607] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 607] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 607] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 607] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 607] ioctl(4, LOOP_CLR_FD) = 0 [pid 607] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 607] close(4) = 0 [pid 607] close(3) = 0 [pid 607] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 606] <... futex resumed>) = 0 [pid 607] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL [pid 606] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 607] <... quotactl resumed>) = -1 EFAULT (Bad address) [pid 606] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 607] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 606] <... futex resumed>) = 0 [pid 607] openat(AT_FDCWD, ".", O_RDONLY [pid 606] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 606] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 607] <... openat resumed>) = 3 [pid 607] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 606] <... futex resumed>) = 0 [pid 607] symlinkat("\x2e\x02", 3, "./file0" [pid 606] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 607] <... symlinkat resumed>) = -1 EEXIST (File exists) [pid 607] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 606] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 607] <... futex resumed>) = 0 [pid 606] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 607] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM [pid 606] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 606] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 607] <... mprotect resumed>) = 0 [pid 607] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 606] <... futex resumed>) = 0 [pid 606] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 607] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 607] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 606] <... futex resumed>) = 0 [pid 606] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 607] <... openat resumed>) = 4 [pid 607] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 606] <... futex resumed>) = 0 [pid 606] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 606] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 607] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 607] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 606] <... futex resumed>) = 0 [pid 606] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 606] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 607] memfd_create("syzkaller", 0) = 5 [pid 607] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 607] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 607] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 607] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 607] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 607] ioctl(6, LOOP_CLR_FD) = 0 [pid 607] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 607] close(6) = 0 [pid 607] close(5) = 0 [pid 607] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 606] <... futex resumed>) = 0 [pid 606] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 606] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 607] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 607] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 606] <... futex resumed>) = 0 [pid 606] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 606] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 607] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 607] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 606] <... futex resumed>) = 0 [pid 606] exit_group(0) = ? [pid 607] +++ exited with 0 +++ [pid 606] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=606, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 608 ci2-android-6-1/strace-static-x86_64: Process 608 attached [pid 305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 608] set_robust_list(0x5555721e1760, 24) = 0 [pid 608] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 608] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 608] setpgid(0, 0) = 0 [pid 608] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 608] write(3, "1000", 4) = 4 [pid 608] close(3) = 0 executing program [pid 608] write(1, "executing program\n", 18) = 18 [pid 608] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 608] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 608] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 608] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 608] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 608] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 608] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 609 attached => {parent_tid=[609]}, 88) = 609 [pid 609] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 608] rt_sigprocmask(SIG_SETMASK, [] [pid 609] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 609] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 608] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 608] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 609] <... futex resumed>) = 0 [pid 609] memfd_create("syzkaller", 0) = 3 [pid 608] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 609] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 609] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 609] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 609] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 609] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 609] ioctl(4, LOOP_CLR_FD) = 0 [pid 609] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 609] close(4) = 0 [pid 609] close(3) = 0 [pid 609] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 608] <... futex resumed>) = 0 [pid 608] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 608] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 609] <... futex resumed>) = 1 [pid 609] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 609] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 608] <... futex resumed>) = 0 [pid 608] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 608] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 609] <... futex resumed>) = 1 [pid 609] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 609] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 608] <... futex resumed>) = 0 [pid 608] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 608] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 609] <... futex resumed>) = 1 [pid 609] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 609] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 608] <... futex resumed>) = 0 [pid 608] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 608] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 609] <... futex resumed>) = 1 [pid 609] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 609] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 608] <... futex resumed>) = 0 [pid 608] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 608] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 609] <... futex resumed>) = 1 [pid 609] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 609] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 609] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 608] <... futex resumed>) = 0 [pid 608] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 608] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 609] <... futex resumed>) = 1 [pid 609] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 609] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 608] <... futex resumed>) = 0 [pid 608] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 608] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 609] <... futex resumed>) = 1 [pid 609] memfd_create("syzkaller", 0) = 5 [pid 609] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 609] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 609] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 609] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 609] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 609] ioctl(6, LOOP_CLR_FD) = 0 [pid 609] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 609] close(6) = 0 [pid 609] close(5) = 0 [pid 609] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 608] <... futex resumed>) = 0 [pid 608] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 608] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 609] <... futex resumed>) = 1 [pid 609] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 609] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 608] <... futex resumed>) = 0 [pid 608] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 608] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 609] <... futex resumed>) = 1 [pid 609] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 609] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 608] <... futex resumed>) = 0 [pid 608] exit_group(0) = ? [pid 609] <... futex resumed>) = ? [pid 609] +++ exited with 0 +++ [pid 608] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=608, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 610 ci2-android-6-1/strace-static-x86_64: Process 610 attached [pid 305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 610] set_robust_list(0x5555721e1760, 24) = 0 [pid 610] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 610] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 610] setpgid(0, 0) = 0 [pid 610] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 610] write(3, "1000", 4) = 4 [pid 610] close(3) = 0 [pid 610] write(1, "executing program\n", 18) = 18 executing program [pid 610] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 610] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 610] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 610] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 610] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 610] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 610] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[611]}, 88) = 611 ci2-android-6-1/strace-static-x86_64: Process 611 attached [pid 610] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 611] set_robust_list(0x7f1cd63e09a0, 24 [pid 610] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 610] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 611] <... set_robust_list resumed>) = 0 [pid 611] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 611] memfd_create("syzkaller", 0) = 3 [pid 611] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 611] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 611] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 611] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 611] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 611] ioctl(4, LOOP_CLR_FD) = 0 [pid 611] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 611] close(4) = 0 [pid 611] close(3) = 0 [pid 611] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 610] <... futex resumed>) = 0 [pid 610] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 610] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 611] <... futex resumed>) = 1 [pid 611] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 611] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 610] <... futex resumed>) = 0 [pid 610] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 610] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 611] <... futex resumed>) = 1 [pid 611] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 611] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 610] <... futex resumed>) = 0 [pid 610] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 610] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 611] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 611] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 610] <... futex resumed>) = 0 [pid 610] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 610] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 611] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 611] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 610] <... futex resumed>) = 0 [pid 610] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 610] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 611] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 611] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 611] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 610] <... futex resumed>) = 0 [pid 610] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 610] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 611] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 611] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 610] <... futex resumed>) = 0 [pid 610] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 610] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 611] memfd_create("syzkaller", 0) = 5 [pid 611] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 611] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 611] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 611] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 611] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 611] ioctl(6, LOOP_CLR_FD) = 0 [pid 611] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 611] close(6) = 0 [pid 611] close(5) = 0 [pid 611] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 610] <... futex resumed>) = 0 [pid 610] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 610] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 611] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 611] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 610] <... futex resumed>) = 0 [pid 610] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 610] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 611] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 611] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 610] <... futex resumed>) = 0 [pid 611] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 610] exit_group(0) = ? [pid 611] <... futex resumed>) = ? [pid 611] +++ exited with 0 +++ [pid 610] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=610, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 612 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 612 attached [pid 612] set_robust_list(0x5555721e1760, 24) = 0 [pid 612] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 612] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 612] setpgid(0, 0) = 0 [pid 612] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 612] write(3, "1000", 4) = 4 [pid 612] close(3) = 0 [pid 612] write(1, "executing program\n", 18) = 18 executing program [pid 612] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 612] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 612] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 612] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 612] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 612] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 612] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[613]}, 88) = 613 [pid 612] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 612] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 612] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 613 attached [pid 613] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 613] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 613] memfd_create("syzkaller", 0) = 3 [pid 613] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 613] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 613] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 613] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 613] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 613] ioctl(4, LOOP_CLR_FD) = 0 [pid 613] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 613] close(4) = 0 [pid 613] close(3) = 0 [pid 613] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 613] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 612] <... futex resumed>) = 0 [pid 612] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 613] <... futex resumed>) = 0 [pid 613] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 612] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 613] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 613] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 612] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 612] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 613] <... futex resumed>) = 0 [pid 613] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 613] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 613] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 612] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 612] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 613] <... futex resumed>) = 0 [pid 613] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 613] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 613] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 612] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 612] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 613] <... futex resumed>) = 0 [pid 613] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 613] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 613] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 612] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 612] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 613] <... futex resumed>) = 0 [pid 612] <... futex resumed>) = 1 [pid 612] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 613] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 613] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 613] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 612] <... futex resumed>) = 0 [pid 613] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0 [pid 612] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 612] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 613] <... mmap resumed>) = 0x200000000000 [pid 613] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 613] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 612] <... futex resumed>) = 0 [pid 612] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 613] <... futex resumed>) = 0 [pid 612] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 613] memfd_create("syzkaller", 0) = 5 [pid 613] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 613] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 613] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 613] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 613] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 613] ioctl(6, LOOP_CLR_FD) = 0 [pid 613] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 613] close(6) = 0 [pid 613] close(5) = 0 [pid 613] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 612] <... futex resumed>) = 0 [pid 612] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 612] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 613] <... futex resumed>) = 1 [pid 613] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 613] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 612] <... futex resumed>) = 0 [pid 612] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 612] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 613] <... futex resumed>) = 1 [pid 613] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 613] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 612] <... futex resumed>) = 0 [pid 612] exit_group(0) = ? [pid 613] <... futex resumed>) = ? [pid 613] +++ exited with 0 +++ [pid 612] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=612, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 614 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 614 attached [pid 614] set_robust_list(0x5555721e1760, 24) = 0 [pid 614] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 614] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 614] setpgid(0, 0) = 0 [pid 614] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 614] write(3, "1000", 4) = 4 [pid 614] close(3) = 0 [pid 614] write(1, "executing program\n", 18) = 18 executing program [pid 614] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 614] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 614] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 614] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 614] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 614] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 614] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[615]}, 88) = 615 [pid 614] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 614] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 614] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 615 attached [pid 615] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 615] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 615] memfd_create("syzkaller", 0) = 3 [pid 615] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 615] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 615] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 615] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 615] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 615] ioctl(4, LOOP_CLR_FD) = 0 [pid 615] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 615] close(4) = 0 [pid 615] close(3) = 0 [pid 615] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 614] <... futex resumed>) = 0 [pid 614] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 614] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 615] <... futex resumed>) = 1 [pid 615] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 615] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 614] <... futex resumed>) = 0 [pid 614] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 614] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 615] <... futex resumed>) = 1 [pid 615] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 615] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 614] <... futex resumed>) = 0 [pid 614] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 614] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 615] <... futex resumed>) = 1 [pid 615] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 615] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 614] <... futex resumed>) = 0 [pid 614] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 614] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 615] <... futex resumed>) = 1 [pid 615] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 615] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 614] <... futex resumed>) = 0 [pid 614] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 614] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 615] <... futex resumed>) = 1 [pid 615] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 615] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 615] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 614] <... futex resumed>) = 0 [pid 614] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 614] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 615] <... futex resumed>) = 1 [pid 615] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 615] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 614] <... futex resumed>) = 0 [pid 614] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 614] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 615] <... futex resumed>) = 1 [pid 615] memfd_create("syzkaller", 0) = 5 [pid 615] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 615] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 615] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 615] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 615] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 615] ioctl(6, LOOP_CLR_FD) = 0 [pid 615] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 615] close(6) = 0 [pid 615] close(5) = 0 [pid 615] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 614] <... futex resumed>) = 0 [pid 614] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 614] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 615] <... futex resumed>) = 1 [pid 615] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 615] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 614] <... futex resumed>) = 0 [pid 614] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 614] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 615] <... futex resumed>) = 1 [pid 615] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 615] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 614] <... futex resumed>) = 0 [pid 614] exit_group(0) = ? [pid 615] <... futex resumed>) = ? [pid 615] +++ exited with 0 +++ [pid 614] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=614, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 616 ci2-android-6-1/strace-static-x86_64: Process 616 attached [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 616] set_robust_list(0x5555721e1760, 24 [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 616] <... set_robust_list resumed>) = 0 [pid 616] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 616] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 616] setpgid(0, 0) = 0 [pid 616] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 616] write(3, "1000", 4) = 4 [pid 616] close(3) = 0 [pid 616] write(1, "executing program\n", 18) = 18 executing program [pid 616] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 616] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 616] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 616] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 616] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 616] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 616] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 617 attached => {parent_tid=[617]}, 88) = 617 [pid 617] set_robust_list(0x7f1cd63e09a0, 24 [pid 616] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 617] <... set_robust_list resumed>) = 0 [pid 616] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 617] rt_sigprocmask(SIG_SETMASK, [] [pid 616] <... futex resumed>) = 0 [pid 617] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 617] memfd_create("syzkaller", 0 [pid 616] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 617] <... memfd_create resumed>) = 3 [pid 617] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 617] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 617] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 617] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 617] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 617] ioctl(4, LOOP_CLR_FD) = 0 [pid 617] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 617] close(4) = 0 [pid 617] close(3) = 0 [pid 617] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 616] <... futex resumed>) = 0 [pid 616] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 616] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 617] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 617] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 616] <... futex resumed>) = 0 [pid 616] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 616] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 617] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 617] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 616] <... futex resumed>) = 0 [pid 616] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 616] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 617] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 617] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 616] <... futex resumed>) = 0 [pid 616] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 616] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 617] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 617] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 616] <... futex resumed>) = 0 [pid 616] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 616] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 617] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 617] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 617] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 616] <... futex resumed>) = 0 [pid 616] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 617] <... futex resumed>) = 1 [pid 616] <... futex resumed>) = 0 [pid 616] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 617] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 617] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 616] <... futex resumed>) = 0 [pid 616] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 616] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 617] memfd_create("syzkaller", 0) = 5 [pid 617] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 617] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 617] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 617] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 617] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 617] ioctl(6, LOOP_CLR_FD) = 0 [pid 617] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 617] close(6) = 0 [pid 617] close(5) = 0 [pid 617] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 616] <... futex resumed>) = 0 [pid 616] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 616] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 617] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 617] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 616] <... futex resumed>) = 0 [pid 616] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 616] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 617] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 617] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 616] <... futex resumed>) = 0 [pid 617] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 616] exit_group(0) = ? [pid 617] <... futex resumed>) = ? [pid 617] +++ exited with 0 +++ [pid 616] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=616, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 618 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 618 attached [pid 618] set_robust_list(0x5555721e1760, 24) = 0 [pid 618] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 618] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 618] setpgid(0, 0) = 0 [pid 618] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 618] write(3, "1000", 4) = 4 [pid 618] close(3) = 0 [pid 618] write(1, "executing program\n", 18) = 18 executing program [pid 618] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 618] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 618] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 618] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 618] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 618] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 618] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 619 attached [pid 619] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 619] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 619] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 618] <... clone3 resumed> => {parent_tid=[619]}, 88) = 619 [pid 618] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 618] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 619] <... futex resumed>) = 0 [pid 619] memfd_create("syzkaller", 0) = 3 [pid 619] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 618] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 619] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 619] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 619] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 619] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 619] ioctl(4, LOOP_CLR_FD) = 0 [pid 619] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 619] close(4) = 0 [pid 619] close(3) = 0 [pid 619] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 618] <... futex resumed>) = 0 [pid 618] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 618] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 619] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 619] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 618] <... futex resumed>) = 0 [pid 618] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 618] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 619] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 619] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 618] <... futex resumed>) = 0 [pid 618] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 618] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 619] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 619] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 618] <... futex resumed>) = 0 [pid 618] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 618] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 619] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 619] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 618] <... futex resumed>) = 0 [pid 618] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 618] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 619] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 619] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 619] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 618] <... futex resumed>) = 0 [pid 619] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0 [pid 618] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 618] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 619] <... mmap resumed>) = 0x200000000000 [pid 619] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 618] <... futex resumed>) = 0 [pid 618] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 619] memfd_create("syzkaller", 0 [pid 618] <... futex resumed>) = 0 [pid 618] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 619] <... memfd_create resumed>) = 5 [pid 619] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 619] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 619] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 619] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 619] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 619] ioctl(6, LOOP_CLR_FD) = 0 [pid 619] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 619] close(6) = 0 [pid 619] close(5) = 0 [pid 619] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 618] <... futex resumed>) = 0 [pid 618] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 618] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 619] <... futex resumed>) = 1 [pid 619] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 619] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 618] <... futex resumed>) = 0 [pid 618] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 618] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 619] <... futex resumed>) = 1 [pid 619] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 619] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 618] <... futex resumed>) = 0 [pid 618] exit_group(0) = ? [pid 619] <... futex resumed>) = ? [pid 619] +++ exited with 0 +++ [pid 618] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=618, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 620 ci2-android-6-1/strace-static-x86_64: Process 620 attached [pid 620] set_robust_list(0x5555721e1760, 24) = 0 [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 620] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 620] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 620] setpgid(0, 0) = 0 [pid 620] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 620] <... openat resumed>) = 3 [pid 620] write(3, "1000", 4) = 4 [pid 620] close(3) = 0 [pid 620] write(1, "executing program\n", 18) = 18 executing program [pid 620] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 620] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 620] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 620] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 620] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 620] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 620] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[621]}, 88) = 621 [pid 620] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 620] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 620] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 621 attached [pid 621] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 621] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 621] memfd_create("syzkaller", 0) = 3 [pid 621] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 621] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 621] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 621] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 621] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 621] ioctl(4, LOOP_CLR_FD) = 0 [pid 621] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 621] close(4) = 0 [pid 621] close(3) = 0 [pid 621] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 620] <... futex resumed>) = 0 [pid 620] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 620] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 621] <... futex resumed>) = 1 [pid 621] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 621] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 620] <... futex resumed>) = 0 [pid 620] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 620] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 621] <... futex resumed>) = 1 [pid 621] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 621] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 620] <... futex resumed>) = 0 [pid 620] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 620] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 621] <... futex resumed>) = 1 [pid 621] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 621] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 620] <... futex resumed>) = 0 [pid 620] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 620] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 621] <... futex resumed>) = 1 [pid 621] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 621] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 620] <... futex resumed>) = 0 [pid 620] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 620] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 621] <... futex resumed>) = 1 [pid 621] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 621] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 621] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 620] <... futex resumed>) = 0 [pid 620] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 620] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 621] <... futex resumed>) = 1 [pid 621] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 621] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 620] <... futex resumed>) = 0 [pid 620] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 620] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 621] <... futex resumed>) = 1 [pid 621] memfd_create("syzkaller", 0) = 5 [pid 621] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 621] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 621] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 621] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 621] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 621] ioctl(6, LOOP_CLR_FD) = 0 [pid 621] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 621] close(6) = 0 [pid 621] close(5) = 0 [pid 621] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 621] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 620] <... futex resumed>) = 0 [pid 620] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 620] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 621] <... futex resumed>) = 0 [pid 621] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 621] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 620] <... futex resumed>) = 0 [pid 620] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 620] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 621] <... futex resumed>) = 1 [pid 621] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 621] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 620] <... futex resumed>) = 0 [pid 620] exit_group(0) = ? [pid 621] <... futex resumed>) = ? [pid 621] +++ exited with 0 +++ [pid 620] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=620, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 622 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 622 attached [pid 622] set_robust_list(0x5555721e1760, 24) = 0 [pid 622] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 622] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 622] setpgid(0, 0) = 0 [pid 622] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 622] write(3, "1000", 4) = 4 [pid 622] close(3) = 0 [pid 622] write(1, "executing program\n", 18) = 18 executing program [pid 622] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 622] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 622] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 622] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 622] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 622] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 622] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 623 attached [pid 623] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 623] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 623] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 622] <... clone3 resumed> => {parent_tid=[623]}, 88) = 623 [pid 622] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 622] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 623] <... futex resumed>) = 0 [pid 623] memfd_create("syzkaller", 0) = 3 [pid 623] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 622] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 623] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 623] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 623] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 623] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 623] ioctl(4, LOOP_CLR_FD) = 0 [pid 623] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 623] close(4) = 0 [pid 623] close(3) = 0 [pid 623] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 622] <... futex resumed>) = 0 [pid 622] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 622] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 623] <... futex resumed>) = 1 [pid 623] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 623] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 622] <... futex resumed>) = 0 [pid 622] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 622] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 623] <... futex resumed>) = 1 [pid 623] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 623] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 622] <... futex resumed>) = 0 [pid 622] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 622] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 623] <... futex resumed>) = 1 [pid 623] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 623] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 622] <... futex resumed>) = 0 [pid 622] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 622] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 623] <... futex resumed>) = 1 [pid 623] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 623] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 622] <... futex resumed>) = 0 [pid 622] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 622] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 623] <... futex resumed>) = 1 [pid 623] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 623] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 623] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 622] <... futex resumed>) = 0 [pid 623] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 622] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 622] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 623] <... futex resumed>) = 0 [pid 623] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 623] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 622] <... futex resumed>) = 0 [pid 622] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 622] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 623] memfd_create("syzkaller", 0) = 5 [pid 623] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 623] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 623] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 623] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 623] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 623] ioctl(6, LOOP_CLR_FD) = 0 [pid 623] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 623] close(6) = 0 [pid 623] close(5) = 0 [pid 623] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 623] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 622] <... futex resumed>) = 0 [pid 622] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 623] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 623] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 623] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 623] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 622] <... futex resumed>) = 1 [pid 622] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 622] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 622] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 623] <... futex resumed>) = 0 [pid 623] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 623] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 622] <... futex resumed>) = 0 [pid 623] <... futex resumed>) = 1 [pid 622] exit_group(0) = ? [pid 623] +++ exited with 0 +++ [pid 622] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=622, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 624 ci2-android-6-1/strace-static-x86_64: Process 624 attached [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 624] set_robust_list(0x5555721e1760, 24) = 0 [pid 624] rt_sigprocmask(SIG_SETMASK, [] [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 624] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 624] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 624] setpgid(0, 0) = 0 executing program [pid 624] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 624] write(3, "1000", 4) = 4 [pid 624] close(3) = 0 [pid 624] write(1, "executing program\n", 18) = 18 [pid 624] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 624] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 624] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 624] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 624] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 624] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 624] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[625]}, 88) = 625 [pid 624] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 624] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 624] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 625 attached [pid 625] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 625] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 625] memfd_create("syzkaller", 0) = 3 [pid 625] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 625] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 625] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 625] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 625] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 625] ioctl(4, LOOP_CLR_FD) = 0 [pid 625] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 625] close(4) = 0 [pid 625] close(3) = 0 [pid 625] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 624] <... futex resumed>) = 0 [pid 624] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 624] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 625] <... futex resumed>) = 1 [pid 625] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 625] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 624] <... futex resumed>) = 0 [pid 624] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 624] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 625] <... futex resumed>) = 1 [pid 625] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 625] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 624] <... futex resumed>) = 0 [pid 624] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 624] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 625] <... futex resumed>) = 1 [pid 625] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 625] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 624] <... futex resumed>) = 0 [pid 624] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 624] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 625] <... futex resumed>) = 1 [pid 625] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 625] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 624] <... futex resumed>) = 0 [pid 624] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 624] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 625] <... futex resumed>) = 1 [pid 625] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 625] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 625] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 624] <... futex resumed>) = 0 [pid 624] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 624] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 625] <... futex resumed>) = 1 [pid 625] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 625] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 624] <... futex resumed>) = 0 [pid 624] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 624] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 625] <... futex resumed>) = 1 [pid 625] memfd_create("syzkaller", 0) = 5 [pid 625] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 625] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 625] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 625] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 625] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 625] ioctl(6, LOOP_CLR_FD) = 0 [pid 625] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 625] close(6) = 0 [pid 625] close(5) = 0 [pid 625] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 625] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 624] <... futex resumed>) = 0 [pid 624] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 624] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 625] <... futex resumed>) = 0 [pid 625] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 625] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 624] <... futex resumed>) = 0 [pid 624] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 624] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 625] <... futex resumed>) = 1 [pid 625] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 625] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 624] <... futex resumed>) = 0 [pid 624] exit_group(0) = ? [pid 625] <... futex resumed>) = ? [pid 625] +++ exited with 0 +++ [pid 624] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=624, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 626 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 626 attached [pid 626] set_robust_list(0x5555721e1760, 24) = 0 [pid 626] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 626] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 626] setpgid(0, 0) = 0 [pid 626] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 626] write(3, "1000", 4) = 4 [pid 626] close(3) = 0 [pid 626] write(1, "executing program\n", 18) = 18 executing program [pid 626] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 626] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 626] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 626] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 626] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 626] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 626] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 627 attached => {parent_tid=[627]}, 88) = 627 [pid 627] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 626] rt_sigprocmask(SIG_SETMASK, [] [pid 627] rt_sigprocmask(SIG_SETMASK, [] [pid 626] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 626] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 627] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 626] <... futex resumed>) = 0 [pid 626] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 627] memfd_create("syzkaller", 0) = 3 [pid 627] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 627] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 627] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 627] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 627] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 627] ioctl(4, LOOP_CLR_FD) = 0 [pid 627] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 627] close(4) = 0 [pid 627] close(3) = 0 [pid 627] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 626] <... futex resumed>) = 0 [pid 626] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 626] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 627] <... futex resumed>) = 1 [pid 627] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 627] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 626] <... futex resumed>) = 0 [pid 626] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 626] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 627] <... futex resumed>) = 1 [pid 627] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 627] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 626] <... futex resumed>) = 0 [pid 626] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 627] symlinkat("\x2e\x02", 3, "./file0" [pid 626] <... futex resumed>) = 0 [pid 627] <... symlinkat resumed>) = -1 EEXIST (File exists) [pid 627] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 626] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 627] <... futex resumed>) = 0 [pid 626] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 627] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM [pid 626] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 626] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 627] <... mprotect resumed>) = 0 [pid 627] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 626] <... futex resumed>) = 0 [pid 626] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 626] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 627] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 627] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 627] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 626] <... futex resumed>) = 0 [pid 626] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 626] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 627] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 627] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 626] <... futex resumed>) = 0 [pid 626] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 626] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 627] memfd_create("syzkaller", 0) = 5 [pid 627] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 627] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 627] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 627] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 627] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 627] ioctl(6, LOOP_CLR_FD) = 0 [pid 627] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 627] close(6) = 0 [pid 627] close(5) = 0 [pid 627] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 626] <... futex resumed>) = 0 [pid 626] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 626] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 627] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 627] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 627] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 626] <... futex resumed>) = 0 [pid 626] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 626] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 627] <... futex resumed>) = 0 [pid 627] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 627] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 626] <... futex resumed>) = 0 [pid 627] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 626] exit_group(0) = ? [pid 627] <... futex resumed>) = ? [pid 627] +++ exited with 0 +++ [pid 626] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=626, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 628 ci2-android-6-1/strace-static-x86_64: Process 628 attached [pid 628] set_robust_list(0x5555721e1760, 24) = 0 [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 628] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 628] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 628] setpgid(0, 0) = 0 [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 628] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 628] write(3, "1000", 4) = 4 [pid 628] close(3) = 0 [pid 628] write(1, "executing program\n", 18) = 18 [pid 628] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 628] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 628] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 executing program [pid 628] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 628] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 628] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 628] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[629]}, 88) = 629 [pid 628] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 628] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 628] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 629 attached [pid 629] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 629] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 629] memfd_create("syzkaller", 0) = 3 [pid 629] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 629] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 629] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 629] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 629] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 629] ioctl(4, LOOP_CLR_FD) = 0 [pid 629] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 629] close(4) = 0 [pid 629] close(3) = 0 [pid 629] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 628] <... futex resumed>) = 0 [pid 629] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 628] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 628] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 629] <... futex resumed>) = 0 [pid 629] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 629] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 628] <... futex resumed>) = 0 [pid 628] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 628] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 629] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 629] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 628] <... futex resumed>) = 0 [pid 628] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 628] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 629] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 629] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 628] <... futex resumed>) = 0 [pid 628] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 628] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 629] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 629] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 628] <... futex resumed>) = 0 [pid 629] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 628] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 629] <... futex resumed>) = 0 [pid 628] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 629] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 629] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 629] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 629] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 628] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 628] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 628] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 629] <... futex resumed>) = 0 [pid 629] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 629] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 628] <... futex resumed>) = 0 [pid 628] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 628] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 629] memfd_create("syzkaller", 0) = 5 [pid 629] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 629] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 629] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 629] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 629] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 629] ioctl(6, LOOP_CLR_FD) = 0 [pid 629] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 629] close(6) = 0 [pid 629] close(5) = 0 [pid 629] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 628] <... futex resumed>) = 0 [pid 629] chdir(0x200000000040 [pid 628] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 629] <... chdir resumed>) = -1 ENOENT (No such file or directory) [pid 629] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 628] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 629] <... futex resumed>) = 0 [pid 628] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 629] fchmodat(AT_FDCWD, 0x200000000300, 0177520 [pid 628] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 628] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 629] <... fchmodat resumed>) = 0 [pid 629] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 628] <... futex resumed>) = 0 [pid 628] exit_group(0) = ? [pid 629] +++ exited with 0 +++ [pid 628] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=628, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 630 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 630 attached [pid 630] set_robust_list(0x5555721e1760, 24) = 0 [pid 630] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 630] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 630] setpgid(0, 0) = 0 [pid 630] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 630] write(3, "1000", 4) = 4 [pid 630] close(3) = 0 [pid 630] write(1, "executing program\n", 18) = 18 executing program [pid 630] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 630] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 630] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 630] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 630] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 630] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 630] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[631]}, 88) = 631 [pid 630] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 630] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 630] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 631 attached [pid 631] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 631] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 631] memfd_create("syzkaller", 0) = 3 [pid 631] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 631] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 631] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 631] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 631] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 631] ioctl(4, LOOP_CLR_FD) = 0 [pid 631] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 631] close(4) = 0 [pid 631] close(3) = 0 [pid 631] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 630] <... futex resumed>) = 0 [pid 630] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 630] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 631] <... futex resumed>) = 1 [pid 631] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 631] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 630] <... futex resumed>) = 0 [pid 630] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 630] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 631] <... futex resumed>) = 1 [pid 631] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 631] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 630] <... futex resumed>) = 0 [pid 630] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 630] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 631] <... futex resumed>) = 1 [pid 631] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 631] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 630] <... futex resumed>) = 0 [pid 630] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 630] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 631] <... futex resumed>) = 1 [pid 631] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 631] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 630] <... futex resumed>) = 0 [pid 630] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 630] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 631] <... futex resumed>) = 1 [pid 631] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 631] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 631] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 630] <... futex resumed>) = 0 [pid 630] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 630] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 631] <... futex resumed>) = 1 [pid 631] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 631] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 630] <... futex resumed>) = 0 [pid 630] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 630] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 631] <... futex resumed>) = 1 [pid 631] memfd_create("syzkaller", 0) = 5 [pid 631] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 631] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 631] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 631] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 631] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 631] ioctl(6, LOOP_CLR_FD) = 0 [pid 631] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 631] close(6) = 0 [pid 631] close(5) = 0 [pid 631] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 630] <... futex resumed>) = 0 [pid 630] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 630] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 631] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 631] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 630] <... futex resumed>) = 0 [pid 630] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 630] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 631] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 631] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 630] <... futex resumed>) = 0 [pid 631] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 630] exit_group(0) = ? [pid 631] <... futex resumed>) = ? [pid 631] +++ exited with 0 +++ [pid 630] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=630, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 632 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 632 attached [pid 632] set_robust_list(0x5555721e1760, 24) = 0 [pid 632] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 632] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 632] setpgid(0, 0) = 0 [pid 632] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 632] write(3, "1000", 4) = 4 [pid 632] close(3) = 0 [pid 632] write(1, "executing program\n", 18) = 18 [pid 632] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 executing program [pid 632] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 632] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 632] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 632] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 632] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 632] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[633]}, 88) = 633 [pid 632] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 632] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 632] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 633 attached [pid 633] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 633] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 633] memfd_create("syzkaller", 0) = 3 [pid 633] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 633] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 633] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 633] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 633] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 633] ioctl(4, LOOP_CLR_FD) = 0 [pid 633] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 633] close(4) = 0 [pid 633] close(3) = 0 [pid 633] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 632] <... futex resumed>) = 0 [pid 633] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 632] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 633] <... futex resumed>) = 0 [pid 633] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 633] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 633] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 632] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 632] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 633] <... futex resumed>) = 0 [pid 632] <... futex resumed>) = 1 [pid 633] openat(AT_FDCWD, ".", O_RDONLY [pid 632] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 633] <... openat resumed>) = 3 [pid 633] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 632] <... futex resumed>) = 0 [pid 633] symlinkat("\x2e\x02", 3, "./file0" [pid 632] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 632] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 633] <... symlinkat resumed>) = -1 EEXIST (File exists) [pid 633] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 632] <... futex resumed>) = 0 [pid 633] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM [pid 632] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 632] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 633] <... mprotect resumed>) = 0 [pid 633] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 632] <... futex resumed>) = 0 [pid 632] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 633] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 632] <... futex resumed>) = 0 [pid 632] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 633] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 633] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 632] <... futex resumed>) = 0 [pid 633] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0 [pid 632] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 632] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 633] <... mmap resumed>) = 0x200000000000 [pid 633] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 632] <... futex resumed>) = 0 [pid 632] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 632] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 633] memfd_create("syzkaller", 0) = 5 [pid 633] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 633] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 633] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 633] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 633] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 633] ioctl(6, LOOP_CLR_FD) = 0 [pid 633] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 633] close(6) = 0 [pid 633] close(5) = 0 [pid 633] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 632] <... futex resumed>) = 0 [pid 632] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 632] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 633] <... futex resumed>) = 1 [pid 633] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 633] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 632] <... futex resumed>) = 0 [pid 632] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 632] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 633] <... futex resumed>) = 1 [pid 633] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 633] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 632] <... futex resumed>) = 0 [pid 632] exit_group(0 [pid 633] <... futex resumed>) = 1 [pid 632] <... exit_group resumed>) = ? [pid 633] +++ exited with 0 +++ [pid 632] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=632, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 634 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 634 attached [pid 634] set_robust_list(0x5555721e1760, 24) = 0 [pid 634] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 634] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 634] setpgid(0, 0) = 0 [pid 634] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 634] write(3, "1000", 4) = 4 [pid 634] close(3) = 0 [pid 634] write(1, "executing program\n", 18) = 18 executing program [pid 634] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 634] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 634] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 634] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 634] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 634] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 634] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 635 attached => {parent_tid=[635]}, 88) = 635 [pid 634] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 634] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 634] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 635] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 635] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 635] memfd_create("syzkaller", 0) = 3 [pid 635] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 635] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 635] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 635] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 635] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 635] ioctl(4, LOOP_CLR_FD) = 0 [pid 635] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 635] close(4) = 0 [pid 635] close(3) = 0 [pid 635] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 635] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 634] <... futex resumed>) = 0 [pid 634] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 635] <... futex resumed>) = 0 [pid 635] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 635] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 635] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 634] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 634] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 635] <... futex resumed>) = 0 [pid 635] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 635] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 634] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 635] <... futex resumed>) = 0 [pid 634] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 635] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 634] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 635] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 634] <... futex resumed>) = 0 [pid 635] symlinkat("\x2e\x02", 3, "./file0" [pid 634] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 635] <... symlinkat resumed>) = -1 EEXIST (File exists) [pid 635] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 634] <... futex resumed>) = 0 [pid 635] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 634] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 635] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 634] <... futex resumed>) = 0 [pid 635] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM [pid 634] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 635] <... mprotect resumed>) = 0 [pid 635] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 634] <... futex resumed>) = 0 [pid 634] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 634] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 635] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 635] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 635] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 634] <... futex resumed>) = 0 [pid 634] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 634] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 635] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 635] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 634] <... futex resumed>) = 0 [pid 634] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 634] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 635] memfd_create("syzkaller", 0) = 5 [pid 635] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 635] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 635] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 635] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 635] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 635] ioctl(6, LOOP_CLR_FD) = 0 [pid 635] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 635] close(6) = 0 [pid 635] close(5) = 0 [pid 635] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 635] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 634] <... futex resumed>) = 0 [pid 634] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 634] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 635] <... futex resumed>) = 0 [pid 635] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 635] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 634] <... futex resumed>) = 0 [pid 634] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 634] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 635] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 635] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 634] <... futex resumed>) = 0 [pid 635] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 634] exit_group(0) = ? [pid 635] <... futex resumed>) = ? [pid 635] +++ exited with 0 +++ [pid 634] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=634, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 636 attached , child_tidptr=0x5555721e1750) = 636 [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 636] set_robust_list(0x5555721e1760, 24 [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 636] <... set_robust_list resumed>) = 0 [pid 636] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 636] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 636] setpgid(0, 0) = 0 [pid 636] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 636] write(3, "1000", 4) = 4 [pid 636] close(3) = 0 [pid 636] write(1, "executing program\n", 18) = 18 executing program [pid 636] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 636] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 636] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 636] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 636] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 636] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 636] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 637 attached [pid 637] set_robust_list(0x7f1cd63e09a0, 24 [pid 636] <... clone3 resumed> => {parent_tid=[637]}, 88) = 637 [pid 637] <... set_robust_list resumed>) = 0 [pid 636] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 637] rt_sigprocmask(SIG_SETMASK, [] [pid 636] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 636] <... futex resumed>) = 0 [pid 636] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 637] memfd_create("syzkaller", 0) = 3 [pid 637] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 637] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 637] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 637] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 637] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 637] ioctl(4, LOOP_CLR_FD) = 0 [pid 637] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 637] close(4) = 0 [pid 637] close(3) = 0 [pid 637] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 636] <... futex resumed>) = 0 [pid 636] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 637] <... futex resumed>) = 1 [pid 636] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 637] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 637] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 636] <... futex resumed>) = 0 [pid 636] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 636] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 637] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 637] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 636] <... futex resumed>) = 0 [pid 636] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 636] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 637] <... futex resumed>) = 1 [pid 637] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 637] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 636] <... futex resumed>) = 0 [pid 637] <... futex resumed>) = 1 [pid 636] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 637] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM [pid 636] <... futex resumed>) = 0 [pid 637] <... mprotect resumed>) = 0 [pid 637] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 637] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 636] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 636] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 637] <... futex resumed>) = 0 [pid 636] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 637] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 637] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 637] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 636] <... futex resumed>) = 0 [pid 637] <... futex resumed>) = 1 [pid 636] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 637] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0 [pid 636] <... futex resumed>) = 0 [pid 636] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 637] <... mmap resumed>) = 0x200000000000 [pid 637] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 636] <... futex resumed>) = 0 [pid 636] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 636] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 637] memfd_create("syzkaller", 0) = 5 [pid 637] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 637] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 637] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 637] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 637] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 637] ioctl(6, LOOP_CLR_FD) = 0 [pid 637] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 637] close(6) = 0 [pid 637] close(5) = 0 [pid 637] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 636] <... futex resumed>) = 0 [pid 637] chdir(0x200000000040 [pid 636] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 637] <... chdir resumed>) = -1 ENOENT (No such file or directory) [pid 636] <... futex resumed>) = 0 [pid 637] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 636] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 637] <... futex resumed>) = 0 [pid 637] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 636] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 636] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 637] <... futex resumed>) = 0 [pid 636] <... futex resumed>) = 1 [pid 637] fchmodat(AT_FDCWD, 0x200000000300, 0177520 [pid 636] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 637] <... fchmodat resumed>) = 0 [pid 637] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 636] <... futex resumed>) = 0 [pid 636] exit_group(0) = ? [pid 637] +++ exited with 0 +++ [pid 636] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=636, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 638 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 638 attached [pid 638] set_robust_list(0x5555721e1760, 24) = 0 [pid 638] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 638] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 638] setpgid(0, 0) = 0 [pid 638] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 638] write(3, "1000", 4) = 4 [pid 638] close(3) = 0 [pid 638] write(1, "executing program\n", 18) = 18 [pid 638] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 638] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 638] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 638] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 638] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 638] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 638] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[639]}, 88) = 639 [pid 638] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 638] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 executing program [pid 638] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 639 attached [pid 639] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 639] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 639] memfd_create("syzkaller", 0) = 3 [pid 639] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 639] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 639] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 639] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 639] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 639] ioctl(4, LOOP_CLR_FD) = 0 [pid 639] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 639] close(4) = 0 [pid 639] close(3) = 0 [pid 639] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 638] <... futex resumed>) = 0 [pid 638] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 639] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL [pid 638] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 639] <... quotactl resumed>) = -1 EFAULT (Bad address) [pid 639] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 639] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 638] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 638] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 639] <... futex resumed>) = 0 [pid 639] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 639] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 639] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 638] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 638] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 639] <... futex resumed>) = 0 [pid 638] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 639] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 639] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 638] <... futex resumed>) = 0 [pid 639] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM [pid 638] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 638] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 639] <... mprotect resumed>) = 0 [pid 639] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 638] <... futex resumed>) = 0 [pid 638] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 638] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 639] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 639] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 639] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 638] <... futex resumed>) = 0 [pid 638] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 638] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 639] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 639] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 638] <... futex resumed>) = 0 [pid 638] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 638] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 639] memfd_create("syzkaller", 0) = 5 [pid 639] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 639] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 639] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 639] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 639] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 639] ioctl(6, LOOP_CLR_FD) = 0 [pid 639] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 639] close(6) = 0 [pid 639] close(5) = 0 [pid 639] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 638] <... futex resumed>) = 0 [pid 638] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 638] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 639] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 639] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 638] <... futex resumed>) = 0 [pid 638] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 638] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 639] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 639] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 638] <... futex resumed>) = 0 [pid 638] exit_group(0) = ? [pid 639] +++ exited with 0 +++ [pid 638] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=638, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 640 ci2-android-6-1/strace-static-x86_64: Process 640 attached [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 640] set_robust_list(0x5555721e1760, 24 [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 640] <... set_robust_list resumed>) = 0 [pid 640] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 640] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 640] setpgid(0, 0) = 0 [pid 640] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 640] write(3, "1000", 4) = 4 [pid 640] close(3) = 0 [pid 640] write(1, "executing program\n", 18) = 18 executing program [pid 640] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 640] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 640] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 640] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 640] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 640] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 640] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[641]}, 88) = 641 [pid 640] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 640] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 640] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 641 attached [pid 641] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 641] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 641] memfd_create("syzkaller", 0) = 3 [pid 641] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 641] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 641] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 641] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 641] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 641] ioctl(4, LOOP_CLR_FD) = 0 [pid 641] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 641] close(4) = 0 [pid 641] close(3) = 0 [pid 641] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 640] <... futex resumed>) = 0 [pid 640] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 640] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 641] <... futex resumed>) = 1 [pid 641] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 641] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 640] <... futex resumed>) = 0 [pid 640] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 640] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 641] <... futex resumed>) = 1 [pid 641] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 641] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 640] <... futex resumed>) = 0 [pid 640] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 640] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 641] <... futex resumed>) = 1 [pid 641] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 641] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 640] <... futex resumed>) = 0 [pid 640] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 640] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 641] <... futex resumed>) = 1 [pid 641] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 641] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 640] <... futex resumed>) = 0 [pid 640] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 640] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 641] <... futex resumed>) = 1 [pid 641] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 641] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 641] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 640] <... futex resumed>) = 0 [pid 640] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 640] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 641] <... futex resumed>) = 1 [pid 641] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 641] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 640] <... futex resumed>) = 0 [pid 640] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 640] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 641] <... futex resumed>) = 1 [pid 641] memfd_create("syzkaller", 0) = 5 [pid 641] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 641] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 641] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 641] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 641] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 641] ioctl(6, LOOP_CLR_FD) = 0 [pid 641] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 641] close(6) = 0 [pid 641] close(5) = 0 [pid 641] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 640] <... futex resumed>) = 0 [pid 640] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 640] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 641] <... futex resumed>) = 1 [pid 641] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 641] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 640] <... futex resumed>) = 0 [pid 640] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 640] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 641] <... futex resumed>) = 1 [pid 641] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 641] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 640] <... futex resumed>) = 0 [pid 640] exit_group(0) = ? [pid 641] <... futex resumed>) = ? [pid 641] +++ exited with 0 +++ [pid 640] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=640, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 642 rt_sigprocmask(SIG_SETMASK, []ci2-android-6-1/strace-static-x86_64: Process 642 attached , NULL, 8) = 0 [pid 642] set_robust_list(0x5555721e1760, 24) = 0 [pid 642] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 642] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 642] setpgid(0, 0) = 0 [pid 642] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 642] write(3, "1000", 4) = 4 [pid 642] close(3) = 0 executing program [pid 642] write(1, "executing program\n", 18) = 18 [pid 642] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 642] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 642] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 642] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 642] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 642] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 642] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 643 attached => {parent_tid=[643]}, 88) = 643 [pid 643] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 642] rt_sigprocmask(SIG_SETMASK, [] [pid 643] rt_sigprocmask(SIG_SETMASK, [] [pid 642] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 643] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 642] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 643] memfd_create("syzkaller", 0 [pid 642] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 643] <... memfd_create resumed>) = 3 [pid 643] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 643] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 643] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 643] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 643] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 643] ioctl(4, LOOP_CLR_FD) = 0 [pid 643] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 643] close(4) = 0 [pid 643] close(3) = 0 [pid 643] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 642] <... futex resumed>) = 0 [pid 642] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 642] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 643] <... futex resumed>) = 1 [pid 643] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 643] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 642] <... futex resumed>) = 0 [pid 642] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 642] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 643] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 643] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 642] <... futex resumed>) = 0 [pid 642] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 642] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 643] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 643] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 642] <... futex resumed>) = 0 [pid 642] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 642] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 643] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 643] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 642] <... futex resumed>) = 0 [pid 642] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 642] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 643] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 643] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 643] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 642] <... futex resumed>) = 0 [pid 642] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 642] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 643] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 643] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 642] <... futex resumed>) = 0 [pid 642] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 642] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 643] memfd_create("syzkaller", 0) = 5 [pid 643] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 643] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 643] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 643] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 643] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 643] ioctl(6, LOOP_CLR_FD) = 0 [pid 643] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 643] close(6) = 0 [pid 643] close(5) = 0 [pid 643] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 642] <... futex resumed>) = 0 [pid 642] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 642] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 643] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 643] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 642] <... futex resumed>) = 0 [pid 642] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 642] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 643] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 643] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 642] <... futex resumed>) = 0 [pid 642] exit_group(0) = ? [pid 643] +++ exited with 0 +++ [pid 642] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=642, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 644 ci2-android-6-1/strace-static-x86_64: Process 644 attached [pid 644] set_robust_list(0x5555721e1760, 24) = 0 [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 644] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 644] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 644] setpgid(0, 0) = 0 [pid 644] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 644] write(3, "1000", 4) = 4 [pid 644] close(3) = 0 [pid 644] write(1, "executing program\n", 18) = 18 executing program [pid 644] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 644] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 644] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 644] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 644] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 644] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 644] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[645]}, 88) = 645 [pid 644] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 644] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 644] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 645 attached [pid 645] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 645] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 645] memfd_create("syzkaller", 0) = 3 [pid 645] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 645] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 645] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 645] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 645] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 645] ioctl(4, LOOP_CLR_FD) = 0 [pid 645] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 645] close(4) = 0 [pid 645] close(3) = 0 [pid 645] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 644] <... futex resumed>) = 0 [pid 644] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 644] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 645] <... futex resumed>) = 1 [pid 645] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 645] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 644] <... futex resumed>) = 0 [pid 644] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 644] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 645] <... futex resumed>) = 1 [pid 645] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 645] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 644] <... futex resumed>) = 0 [pid 644] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 644] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 645] <... futex resumed>) = 1 [pid 645] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 645] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 644] <... futex resumed>) = 0 [pid 644] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 644] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 645] <... futex resumed>) = 1 [pid 645] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 645] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 644] <... futex resumed>) = 0 [pid 644] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 644] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 645] <... futex resumed>) = 1 [pid 645] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 645] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 645] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 644] <... futex resumed>) = 0 [pid 644] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 644] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 645] <... futex resumed>) = 1 [pid 645] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 645] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 644] <... futex resumed>) = 0 [pid 644] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 644] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 645] <... futex resumed>) = 1 [pid 645] memfd_create("syzkaller", 0) = 5 [pid 645] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 645] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 645] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 645] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 645] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 645] ioctl(6, LOOP_CLR_FD) = 0 [pid 645] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 645] close(6) = 0 [pid 645] close(5) = 0 [pid 645] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 644] <... futex resumed>) = 0 [pid 644] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 644] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 645] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 645] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 644] <... futex resumed>) = 0 [pid 644] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 644] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 645] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 645] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 644] <... futex resumed>) = 0 [pid 645] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 644] exit_group(0) = ? [pid 645] <... futex resumed>) = ? [pid 645] +++ exited with 0 +++ [pid 644] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=644, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 646 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 646 attached [pid 646] set_robust_list(0x5555721e1760, 24) = 0 [pid 646] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 646] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 646] setpgid(0, 0) = 0 [pid 646] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 646] write(3, "1000", 4) = 4 [pid 646] close(3) = 0 [pid 646] write(1, "executing program\n", 18) = 18 executing program [pid 646] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 646] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 646] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 646] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 646] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 646] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 646] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[647]}, 88) = 647 [pid 646] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 646] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 646] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 647 attached [pid 647] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 647] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 647] memfd_create("syzkaller", 0) = 3 [pid 647] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 647] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 647] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 647] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 647] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 647] ioctl(4, LOOP_CLR_FD) = 0 [pid 647] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 647] close(4) = 0 [pid 647] close(3) = 0 [pid 647] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 646] <... futex resumed>) = 0 [pid 647] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 646] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 647] <... futex resumed>) = 0 [pid 646] <... futex resumed>) = 1 [pid 647] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL [pid 646] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 647] <... quotactl resumed>) = -1 EFAULT (Bad address) [pid 647] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 646] <... futex resumed>) = 0 [pid 647] openat(AT_FDCWD, ".", O_RDONLY [pid 646] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 647] <... openat resumed>) = 3 [pid 647] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 646] <... futex resumed>) = 0 [pid 647] <... futex resumed>) = 0 [pid 646] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 647] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 646] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 647] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 646] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 647] symlinkat("\x2e\x02", 3, "./file0" [pid 646] <... futex resumed>) = 0 [pid 646] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 647] <... symlinkat resumed>) = -1 EEXIST (File exists) [pid 647] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 646] <... futex resumed>) = 0 [pid 647] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM [pid 646] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 646] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 647] <... mprotect resumed>) = 0 [pid 647] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 646] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 647] <... futex resumed>) = 0 [pid 646] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 646] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 647] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 647] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 647] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 646] <... futex resumed>) = 0 [pid 647] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0 [pid 646] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 646] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 647] <... mmap resumed>) = 0x200000000000 [pid 647] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 646] <... futex resumed>) = 0 [pid 646] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 646] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 647] memfd_create("syzkaller", 0) = 5 [pid 647] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 647] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 647] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 647] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 647] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 647] ioctl(6, LOOP_CLR_FD) = 0 [pid 647] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 647] close(6) = 0 [pid 647] close(5) = 0 [pid 647] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 646] <... futex resumed>) = 0 [pid 646] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 646] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 647] <... futex resumed>) = 1 [pid 647] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 647] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 646] <... futex resumed>) = 0 [pid 646] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 646] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 647] <... futex resumed>) = 1 [pid 647] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 647] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 646] <... futex resumed>) = 0 [pid 646] exit_group(0) = ? [pid 647] <... futex resumed>) = ? [pid 647] +++ exited with 0 +++ [pid 646] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=646, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 648 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 648 attached [pid 648] set_robust_list(0x5555721e1760, 24) = 0 [pid 648] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 648] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 648] setpgid(0, 0) = 0 [pid 648] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 648] write(3, "1000", 4) = 4 [pid 648] close(3) = 0 [pid 648] write(1, "executing program\n", 18) = 18 executing program [pid 648] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 648] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 648] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 648] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 648] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 648] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 648] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[649]}, 88) = 649 [pid 648] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 648] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 648] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 649 attached [pid 649] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 649] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 649] memfd_create("syzkaller", 0) = 3 [pid 649] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 649] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 649] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 649] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 649] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 649] ioctl(4, LOOP_CLR_FD) = 0 [pid 649] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 649] close(4) = 0 [pid 649] close(3) = 0 [pid 649] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 648] <... futex resumed>) = 0 [pid 648] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 648] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 649] <... futex resumed>) = 1 [pid 649] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 649] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 648] <... futex resumed>) = 0 [pid 648] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 648] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 649] <... futex resumed>) = 1 [pid 649] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 649] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 648] <... futex resumed>) = 0 [pid 648] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 648] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 649] <... futex resumed>) = 1 [pid 649] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 649] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 648] <... futex resumed>) = 0 [pid 648] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 648] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 649] <... futex resumed>) = 1 [pid 649] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 649] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 648] <... futex resumed>) = 0 [pid 648] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 648] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 649] <... futex resumed>) = 1 [pid 649] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 649] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 649] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 648] <... futex resumed>) = 0 [pid 648] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 648] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 649] <... futex resumed>) = 1 [pid 649] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 649] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 648] <... futex resumed>) = 0 [pid 648] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 648] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 649] <... futex resumed>) = 1 [pid 649] memfd_create("syzkaller", 0) = 5 [pid 649] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 649] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 649] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 649] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 649] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 649] ioctl(6, LOOP_CLR_FD) = 0 [pid 649] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 649] close(6) = 0 [pid 649] close(5) = 0 [pid 649] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 648] <... futex resumed>) = 0 [pid 649] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 648] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 648] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 649] <... futex resumed>) = 0 [pid 649] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 649] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 648] <... futex resumed>) = 0 [pid 648] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 648] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 649] <... futex resumed>) = 1 [pid 649] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 649] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 648] <... futex resumed>) = 0 [pid 648] exit_group(0) = ? [pid 649] <... futex resumed>) = ? [pid 649] +++ exited with 0 +++ [pid 648] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=648, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 650 ci2-android-6-1/strace-static-x86_64: Process 650 attached [pid 305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 650] set_robust_list(0x5555721e1760, 24) = 0 [pid 650] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 650] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 650] setpgid(0, 0) = 0 [pid 650] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 650] write(3, "1000", 4) = 4 [pid 650] close(3) = 0 executing program [pid 650] write(1, "executing program\n", 18) = 18 [pid 650] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 650] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 650] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 650] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 650] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 650] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 650] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 651 attached => {parent_tid=[651]}, 88) = 651 [pid 651] set_robust_list(0x7f1cd63e09a0, 24 [pid 650] rt_sigprocmask(SIG_SETMASK, [] [pid 651] <... set_robust_list resumed>) = 0 [pid 650] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 651] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 650] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 650] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 651] memfd_create("syzkaller", 0) = 3 [pid 651] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 651] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 651] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 651] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 651] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 651] ioctl(4, LOOP_CLR_FD) = 0 [pid 651] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 651] close(4) = 0 [pid 651] close(3) = 0 [pid 651] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 650] <... futex resumed>) = 0 [pid 650] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 650] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 651] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 651] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 650] <... futex resumed>) = 0 [pid 650] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 650] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 651] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 651] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 650] <... futex resumed>) = 0 [pid 650] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 650] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 651] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 651] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 650] <... futex resumed>) = 0 [pid 650] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 650] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 651] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 651] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 650] <... futex resumed>) = 0 [pid 650] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 650] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 651] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 651] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 651] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 650] <... futex resumed>) = 0 [pid 650] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 650] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 651] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 651] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 650] <... futex resumed>) = 0 [pid 650] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 650] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 651] memfd_create("syzkaller", 0) = 5 [pid 651] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 651] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 651] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 651] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 651] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 651] ioctl(6, LOOP_CLR_FD) = 0 [pid 651] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 651] close(6) = 0 [pid 651] close(5) = 0 [pid 651] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 650] <... futex resumed>) = 0 [pid 650] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 650] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 651] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 651] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 650] <... futex resumed>) = 0 [pid 650] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 650] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 651] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 651] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 650] <... futex resumed>) = 0 [pid 650] exit_group(0) = ? [pid 651] +++ exited with 0 +++ [pid 650] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=650, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 652 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 652 attached [pid 652] set_robust_list(0x5555721e1760, 24) = 0 [pid 652] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 652] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 652] setpgid(0, 0) = 0 [pid 652] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 652] write(3, "1000", 4) = 4 [pid 652] close(3) = 0 [pid 652] write(1, "executing program\n", 18) = 18 executing program [pid 652] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 652] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 652] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 652] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 652] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 652] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 652] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 653 attached => {parent_tid=[653]}, 88) = 653 [pid 653] set_robust_list(0x7f1cd63e09a0, 24 [pid 652] rt_sigprocmask(SIG_SETMASK, [] [pid 653] <... set_robust_list resumed>) = 0 [pid 653] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 653] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 652] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 652] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 653] <... futex resumed>) = 0 [pid 653] memfd_create("syzkaller", 0 [pid 652] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 653] <... memfd_create resumed>) = 3 [pid 653] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 653] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 653] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 653] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 653] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 653] ioctl(4, LOOP_CLR_FD) = 0 [pid 653] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 653] close(4) = 0 [pid 653] close(3) = 0 [pid 653] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 652] <... futex resumed>) = 0 [pid 652] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 652] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 653] <... futex resumed>) = 1 [pid 653] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 653] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 652] <... futex resumed>) = 0 [pid 652] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 652] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 653] <... futex resumed>) = 1 [pid 653] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 653] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 652] <... futex resumed>) = 0 [pid 652] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 652] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 653] <... futex resumed>) = 1 [pid 653] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 653] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 653] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 652] <... futex resumed>) = 0 [pid 652] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 653] <... futex resumed>) = 0 [pid 652] <... futex resumed>) = 1 [pid 653] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM [pid 652] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 653] <... mprotect resumed>) = 0 [pid 653] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 652] <... futex resumed>) = 0 [pid 653] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 652] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 653] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 653] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 652] <... futex resumed>) = 0 [pid 652] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 653] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 653] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 653] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 652] <... futex resumed>) = 0 [pid 652] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 652] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 653] <... futex resumed>) = 0 [pid 653] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 653] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 652] <... futex resumed>) = 0 [pid 652] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 652] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 653] memfd_create("syzkaller", 0) = 5 [pid 653] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 653] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 653] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 653] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 653] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 653] ioctl(6, LOOP_CLR_FD) = 0 [pid 653] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 653] close(6) = 0 [pid 653] close(5) = 0 [pid 653] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 652] <... futex resumed>) = 0 [pid 653] chdir(0x200000000040 [pid 652] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 653] <... chdir resumed>) = -1 ENOENT (No such file or directory) [pid 652] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 653] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 652] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 653] <... futex resumed>) = 0 [pid 652] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 653] fchmodat(AT_FDCWD, 0x200000000300, 0177520 [pid 652] <... futex resumed>) = 0 [pid 652] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 653] <... fchmodat resumed>) = 0 [pid 653] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 652] <... futex resumed>) = 0 [pid 653] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 652] exit_group(0) = ? [pid 653] <... futex resumed>) = ? [pid 653] +++ exited with 0 +++ [pid 652] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=652, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 654 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 654 attached [pid 654] set_robust_list(0x5555721e1760, 24) = 0 [pid 654] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 654] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 654] setpgid(0, 0) = 0 [pid 654] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 654] write(3, "1000", 4) = 4 [pid 654] close(3) = 0 [pid 654] write(1, "executing program\n", 18) = 18 executing program [pid 654] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 654] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 654] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 654] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 654] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 654] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 654] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 655 attached => {parent_tid=[655]}, 88) = 655 [pid 655] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 654] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 655] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 654] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 655] memfd_create("syzkaller", 0 [pid 654] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 655] <... memfd_create resumed>) = 3 [pid 655] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 655] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 655] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 655] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 655] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 655] ioctl(4, LOOP_CLR_FD) = 0 [pid 655] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 655] close(4) = 0 [pid 655] close(3) = 0 [pid 655] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 654] <... futex resumed>) = 0 [pid 654] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 654] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 655] <... futex resumed>) = 1 [pid 655] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 655] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 654] <... futex resumed>) = 0 [pid 654] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 654] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 655] <... futex resumed>) = 1 [pid 655] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 655] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 654] <... futex resumed>) = 0 [pid 654] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 654] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 655] <... futex resumed>) = 1 [pid 655] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 655] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 654] <... futex resumed>) = 0 [pid 654] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 654] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 655] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 655] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 654] <... futex resumed>) = 0 [pid 654] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 654] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 655] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 655] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 655] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 654] <... futex resumed>) = 0 [pid 654] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 654] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 655] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 655] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 654] <... futex resumed>) = 0 [pid 654] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 654] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 655] memfd_create("syzkaller", 0) = 5 [pid 655] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 655] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 655] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 655] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 655] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 655] ioctl(6, LOOP_CLR_FD) = 0 [pid 655] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 655] close(6) = 0 [pid 655] close(5) = 0 [pid 655] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 654] <... futex resumed>) = 0 [pid 654] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 654] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 655] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 655] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 654] <... futex resumed>) = 0 [pid 654] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 654] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 655] <... futex resumed>) = 1 [pid 655] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 655] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 654] <... futex resumed>) = 0 [pid 654] exit_group(0) = ? [pid 655] +++ exited with 0 +++ [pid 654] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=654, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 656 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 656 attached [pid 656] set_robust_list(0x5555721e1760, 24) = 0 [pid 656] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 656] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 656] setpgid(0, 0) = 0 [pid 656] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 656] write(3, "1000", 4) = 4 [pid 656] close(3) = 0 [pid 656] write(1, "executing program\n", 18) = 18 executing program [pid 656] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 656] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 656] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 656] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 656] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 656] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 656] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 657 attached => {parent_tid=[657]}, 88) = 657 [pid 657] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 656] rt_sigprocmask(SIG_SETMASK, [] [pid 657] rt_sigprocmask(SIG_SETMASK, [] [pid 656] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 657] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 656] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 656] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 657] memfd_create("syzkaller", 0) = 3 [pid 657] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 657] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 657] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 657] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 657] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 657] ioctl(4, LOOP_CLR_FD) = 0 [pid 657] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 657] close(4) = 0 [pid 657] close(3) = 0 [pid 657] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 656] <... futex resumed>) = 0 [pid 656] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 656] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 657] <... futex resumed>) = 1 [pid 657] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 657] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 656] <... futex resumed>) = 0 [pid 656] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 656] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 657] <... futex resumed>) = 1 [pid 657] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 657] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 656] <... futex resumed>) = 0 [pid 656] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 656] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 657] <... futex resumed>) = 1 [pid 657] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 657] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 656] <... futex resumed>) = 0 [pid 657] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 656] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 656] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 657] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 657] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 657] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 656] <... futex resumed>) = 0 [pid 656] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 656] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 657] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 657] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 657] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 656] <... futex resumed>) = 0 [pid 656] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 656] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 657] <... futex resumed>) = 1 [pid 657] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 657] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 656] <... futex resumed>) = 0 [pid 656] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 656] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 657] memfd_create("syzkaller", 0) = 5 [pid 657] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 657] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 657] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 657] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 657] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 657] ioctl(6, LOOP_CLR_FD) = 0 [pid 657] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 657] close(6) = 0 [pid 657] close(5) = 0 [pid 657] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 656] <... futex resumed>) = 0 [pid 656] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 656] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 657] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 657] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 656] <... futex resumed>) = 0 [pid 656] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 656] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 657] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 657] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 656] <... futex resumed>) = 0 [pid 656] exit_group(0) = ? [pid 657] +++ exited with 0 +++ [pid 656] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=656, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 658 rt_sigprocmask(SIG_SETMASK, []ci2-android-6-1/strace-static-x86_64: Process 658 attached , NULL, 8) = 0 [pid 658] set_robust_list(0x5555721e1760, 24) = 0 [pid 658] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 658] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 658] setpgid(0, 0) = 0 [pid 658] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 658] write(3, "1000", 4) = 4 [pid 658] close(3) = 0 [pid 658] write(1, "executing program\n", 18) = 18 executing program [pid 658] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 658] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 658] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 658] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 658] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 658] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 658] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 659 attached => {parent_tid=[659]}, 88) = 659 [pid 659] set_robust_list(0x7f1cd63e09a0, 24 [pid 658] rt_sigprocmask(SIG_SETMASK, [] [pid 659] <... set_robust_list resumed>) = 0 [pid 659] rt_sigprocmask(SIG_SETMASK, [] [pid 658] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 658] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 659] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 658] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 659] memfd_create("syzkaller", 0) = 3 [pid 659] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 659] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 659] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 659] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 659] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 659] ioctl(4, LOOP_CLR_FD) = 0 [pid 659] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 659] close(4) = 0 [pid 659] close(3) = 0 [pid 659] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 659] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 658] <... futex resumed>) = 0 [pid 658] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 658] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 659] <... futex resumed>) = 0 [pid 659] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 659] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 658] <... futex resumed>) = 0 [pid 658] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 658] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 659] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 659] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 658] <... futex resumed>) = 0 [pid 659] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 658] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 658] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 659] <... futex resumed>) = 0 [pid 659] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 659] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] <... futex resumed>) = 0 [pid 658] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 658] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 659] <... futex resumed>) = 1 [pid 659] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 659] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] <... futex resumed>) = 0 [pid 658] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 658] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 659] <... futex resumed>) = 1 [pid 659] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 659] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 659] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] <... futex resumed>) = 0 [pid 658] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 658] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 659] <... futex resumed>) = 1 [pid 659] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 659] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 658] <... futex resumed>) = 0 [pid 658] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 658] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 659] memfd_create("syzkaller", 0) = 5 [pid 659] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 659] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 659] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 659] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 659] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 659] ioctl(6, LOOP_CLR_FD) = 0 [pid 659] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 659] close(6) = 0 [pid 659] close(5) = 0 [pid 659] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 658] <... futex resumed>) = 0 [pid 658] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 658] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 659] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 659] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 658] <... futex resumed>) = 0 [pid 659] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 658] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 658] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 659] <... futex resumed>) = 0 [pid 659] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 659] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] <... futex resumed>) = 0 [pid 658] exit_group(0) = ? [pid 659] <... futex resumed>) = ? [pid 659] +++ exited with 0 +++ [pid 658] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=658, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 660 ci2-android-6-1/strace-static-x86_64: Process 660 attached [pid 305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 660] set_robust_list(0x5555721e1760, 24) = 0 [pid 660] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 660] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 660] setpgid(0, 0) = 0 [pid 660] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 660] write(3, "1000", 4) = 4 [pid 660] close(3) = 0 [pid 660] write(1, "executing program\n", 18) = 18 executing program [pid 660] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 660] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 660] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 660] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 660] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 660] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 660] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 661 attached [pid 661] set_robust_list(0x7f1cd63e09a0, 24 [pid 660] <... clone3 resumed> => {parent_tid=[661]}, 88) = 661 [pid 660] rt_sigprocmask(SIG_SETMASK, [] [pid 661] <... set_robust_list resumed>) = 0 [pid 660] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 660] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 661] rt_sigprocmask(SIG_SETMASK, [] [pid 660] <... futex resumed>) = 0 [pid 660] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 661] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 661] memfd_create("syzkaller", 0) = 3 [pid 661] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 661] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 661] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 661] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 661] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 661] ioctl(4, LOOP_CLR_FD) = 0 [pid 661] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 661] close(4) = 0 [pid 661] close(3) = 0 [pid 661] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 661] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 660] <... futex resumed>) = 0 [pid 660] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 661] <... futex resumed>) = 0 [pid 660] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 661] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 661] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 661] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 660] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 660] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 661] <... futex resumed>) = 0 [pid 660] <... futex resumed>) = 1 [pid 661] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 661] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 661] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 660] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 660] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 661] <... futex resumed>) = 0 [pid 660] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 661] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 661] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 660] <... futex resumed>) = 0 [pid 661] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM [pid 660] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 660] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 661] <... mprotect resumed>) = 0 [pid 661] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 660] <... futex resumed>) = 0 [pid 660] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 661] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 660] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 661] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 661] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 660] <... futex resumed>) = 0 [pid 661] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0 [pid 660] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 660] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 661] <... mmap resumed>) = 0x200000000000 [pid 661] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 660] <... futex resumed>) = 0 [pid 660] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 660] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 661] memfd_create("syzkaller", 0) = 5 [pid 661] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 661] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 661] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 661] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 661] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 661] ioctl(6, LOOP_CLR_FD) = 0 [pid 661] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 661] close(6) = 0 [pid 661] close(5) = 0 [pid 661] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 660] <... futex resumed>) = 0 [pid 660] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 661] chdir(0x200000000040 [pid 660] <... futex resumed>) = 0 [pid 660] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 661] <... chdir resumed>) = -1 ENOENT (No such file or directory) [pid 661] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 660] <... futex resumed>) = 0 [pid 660] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 661] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 660] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 661] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 660] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 661] <... futex resumed>) = 0 [pid 661] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 660] exit_group(0) = ? [pid 661] <... futex resumed>) = ? [pid 661] +++ exited with 0 +++ [pid 660] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=660, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 662 attached , child_tidptr=0x5555721e1750) = 662 [pid 305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 662] set_robust_list(0x5555721e1760, 24) = 0 [pid 662] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 662] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 662] setpgid(0, 0) = 0 [pid 662] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 662] write(3, "1000", 4) = 4 [pid 662] close(3) = 0 [pid 662] write(1, "executing program\n", 18) = 18 executing program [pid 662] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 662] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 662] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 662] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 662] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 662] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 662] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 663 attached => {parent_tid=[663]}, 88) = 663 [pid 663] set_robust_list(0x7f1cd63e09a0, 24 [pid 662] rt_sigprocmask(SIG_SETMASK, [] [pid 663] <... set_robust_list resumed>) = 0 [pid 663] rt_sigprocmask(SIG_SETMASK, [] [pid 662] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 663] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 662] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 663] memfd_create("syzkaller", 0 [pid 662] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 663] <... memfd_create resumed>) = 3 [pid 663] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 663] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 663] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 663] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 663] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 663] ioctl(4, LOOP_CLR_FD) = 0 [pid 663] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 663] close(4) = 0 [pid 663] close(3) = 0 [pid 663] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 662] <... futex resumed>) = 0 [pid 663] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 662] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 662] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 663] <... futex resumed>) = 0 [pid 663] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 663] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 662] <... futex resumed>) = 0 [pid 662] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 662] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 663] <... futex resumed>) = 1 [pid 663] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 663] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 662] <... futex resumed>) = 0 [pid 662] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 662] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 663] <... futex resumed>) = 1 [pid 663] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 663] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 662] <... futex resumed>) = 0 [pid 662] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 662] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 663] <... futex resumed>) = 1 [pid 663] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 663] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 662] <... futex resumed>) = 0 [pid 662] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 662] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 663] <... futex resumed>) = 1 [pid 663] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 663] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 663] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 662] <... futex resumed>) = 0 [pid 662] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 662] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 663] <... futex resumed>) = 1 [pid 663] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 663] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 662] <... futex resumed>) = 0 [pid 662] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 662] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 663] <... futex resumed>) = 1 [pid 663] memfd_create("syzkaller", 0) = 5 [pid 663] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 663] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 663] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 663] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 663] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 663] ioctl(6, LOOP_CLR_FD) = 0 [pid 663] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 663] close(6) = 0 [pid 663] close(5) = 0 [pid 663] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 662] <... futex resumed>) = 0 [pid 663] chdir(0x200000000040 [pid 662] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 662] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 663] <... chdir resumed>) = -1 ENOENT (No such file or directory) [pid 663] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 662] <... futex resumed>) = 0 [pid 663] fchmodat(AT_FDCWD, 0x200000000300, 0177520 [pid 662] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 662] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 663] <... fchmodat resumed>) = 0 [pid 663] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 662] <... futex resumed>) = 0 [pid 663] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 662] exit_group(0) = ? [pid 663] <... futex resumed>) = ? [pid 663] +++ exited with 0 +++ [pid 662] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=662, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 664 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 664 attached [pid 664] set_robust_list(0x5555721e1760, 24) = 0 [pid 664] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 664] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 664] setpgid(0, 0) = 0 [pid 664] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 664] write(3, "1000", 4) = 4 [pid 664] close(3) = 0 [pid 664] write(1, "executing program\n", 18) = 18 executing program [pid 664] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 664] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 664] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 664] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 664] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 664] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 664] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 665 attached => {parent_tid=[665]}, 88) = 665 [pid 665] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 664] rt_sigprocmask(SIG_SETMASK, [] [pid 665] rt_sigprocmask(SIG_SETMASK, [] [pid 664] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 665] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 664] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 665] memfd_create("syzkaller", 0 [pid 664] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 665] <... memfd_create resumed>) = 3 [pid 665] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 665] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 665] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 665] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 665] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 665] ioctl(4, LOOP_CLR_FD) = 0 [pid 665] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 665] close(4) = 0 [pid 665] close(3) = 0 [pid 665] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 664] <... futex resumed>) = 0 [pid 664] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 664] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 665] <... futex resumed>) = 1 [pid 665] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 665] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 664] <... futex resumed>) = 0 [pid 664] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 664] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 665] <... futex resumed>) = 1 [pid 665] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 665] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 664] <... futex resumed>) = 0 [pid 664] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 664] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 665] <... futex resumed>) = 1 [pid 665] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 665] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 664] <... futex resumed>) = 0 [pid 664] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 665] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM [pid 664] <... futex resumed>) = 0 [pid 664] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 665] <... mprotect resumed>) = 0 [pid 665] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 664] <... futex resumed>) = 0 [pid 664] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 664] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 665] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 665] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 665] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 664] <... futex resumed>) = 0 [pid 664] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 664] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 665] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 665] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 664] <... futex resumed>) = 0 [pid 664] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 664] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 665] memfd_create("syzkaller", 0) = 5 [pid 665] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 665] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 665] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 665] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 665] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 665] ioctl(6, LOOP_CLR_FD) = 0 [pid 665] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 665] close(6) = 0 [pid 665] close(5) = 0 [pid 665] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 664] <... futex resumed>) = 0 [pid 664] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 664] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 665] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 665] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 664] <... futex resumed>) = 0 [pid 664] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 664] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 665] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 665] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 664] <... futex resumed>) = 0 [pid 665] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 664] exit_group(0) = ? [pid 665] <... futex resumed>) = ? [pid 665] +++ exited with 0 +++ [pid 664] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=664, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 666 ci2-android-6-1/strace-static-x86_64: Process 666 attached [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 666] set_robust_list(0x5555721e1760, 24 [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 666] <... set_robust_list resumed>) = 0 [pid 666] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 666] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 666] setpgid(0, 0) = 0 [pid 666] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 666] write(3, "1000", 4) = 4 [pid 666] close(3) = 0 executing program [pid 666] write(1, "executing program\n", 18) = 18 [pid 666] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 666] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 666] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 666] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 666] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 666] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 666] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 667 attached [pid 667] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 667] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 667] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 666] <... clone3 resumed> => {parent_tid=[667]}, 88) = 667 [pid 666] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 666] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 667] <... futex resumed>) = 0 [pid 667] memfd_create("syzkaller", 0) = 3 [pid 667] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 666] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 667] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 667] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 667] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 667] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 667] ioctl(4, LOOP_CLR_FD) = 0 [pid 667] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 667] close(4) = 0 [pid 667] close(3) = 0 [pid 667] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 666] <... futex resumed>) = 0 [pid 666] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 667] <... futex resumed>) = 1 [pid 666] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 667] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 667] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 666] <... futex resumed>) = 0 [pid 666] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 666] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 667] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 667] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 666] <... futex resumed>) = 0 [pid 666] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 666] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 667] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 667] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 666] <... futex resumed>) = 0 [pid 666] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 666] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 667] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 667] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 666] <... futex resumed>) = 0 [pid 666] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 666] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 667] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 667] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 667] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 666] <... futex resumed>) = 0 [pid 666] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 666] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 667] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 667] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 666] <... futex resumed>) = 0 [pid 666] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 666] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 667] memfd_create("syzkaller", 0) = 5 [pid 667] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 667] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 667] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 667] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 667] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 667] ioctl(6, LOOP_CLR_FD) = 0 [pid 667] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 667] close(6) = 0 [pid 667] close(5) = 0 [pid 667] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 666] <... futex resumed>) = 0 [pid 666] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 666] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 667] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 667] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 666] <... futex resumed>) = 0 [pid 666] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 667] fchmodat(AT_FDCWD, 0x200000000300, 0177520 [pid 666] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 667] <... fchmodat resumed>) = 0 [pid 667] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 666] <... futex resumed>) = 0 [pid 666] exit_group(0 [pid 667] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 666] <... exit_group resumed>) = ? [pid 667] <... futex resumed>) = ? [pid 667] +++ exited with 0 +++ [pid 666] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=666, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 668 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 668 attached [pid 668] set_robust_list(0x5555721e1760, 24) = 0 [pid 668] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 668] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 668] setpgid(0, 0) = 0 [pid 668] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 668] write(3, "1000", 4) = 4 [pid 668] close(3) = 0 [pid 668] write(1, "executing program\n", 18) = 18 executing program [pid 668] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 668] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 668] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 668] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 668] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 668] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 668] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 669 attached => {parent_tid=[669]}, 88) = 669 [pid 669] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 669] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 669] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 668] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 668] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 669] <... futex resumed>) = 0 [pid 669] memfd_create("syzkaller", 0) = 3 [pid 669] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 668] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 669] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 669] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 669] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 669] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 669] ioctl(4, LOOP_CLR_FD) = 0 [pid 669] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 669] close(4) = 0 [pid 669] close(3) = 0 [pid 669] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 668] <... futex resumed>) = 0 [pid 668] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 668] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 669] <... futex resumed>) = 1 [pid 669] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 669] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 668] <... futex resumed>) = 0 [pid 668] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 668] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 669] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 669] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 668] <... futex resumed>) = 0 [pid 668] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 668] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 669] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 669] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 668] <... futex resumed>) = 0 [pid 668] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 668] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 669] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 669] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 668] <... futex resumed>) = 0 [pid 668] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 668] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 669] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 669] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 669] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 668] <... futex resumed>) = 0 [pid 668] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 668] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 669] <... futex resumed>) = 1 [pid 669] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 669] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 668] <... futex resumed>) = 0 [pid 668] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 668] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 669] memfd_create("syzkaller", 0) = 5 [pid 669] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 669] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 669] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 669] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 669] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 669] ioctl(6, LOOP_CLR_FD) = 0 [pid 669] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 669] close(6) = 0 [pid 669] close(5) = 0 [pid 669] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 668] <... futex resumed>) = 0 [pid 669] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 668] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 669] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 669] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 669] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 669] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL) = 0 [pid 668] <... futex resumed>) = 1 [pid 669] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 668] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 668] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 668] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 669] <... futex resumed>) = 0 [pid 669] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 669] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 668] <... futex resumed>) = 0 [pid 668] exit_group(0 [pid 669] <... futex resumed>) = 1 [pid 668] <... exit_group resumed>) = ? [pid 669] +++ exited with 0 +++ [pid 668] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=668, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 670 ci2-android-6-1/strace-static-x86_64: Process 670 attached [pid 670] set_robust_list(0x5555721e1760, 24) = 0 [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 670] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 670] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 670] setpgid(0, 0) = 0 [pid 670] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 670] write(3, "1000", 4) = 4 [pid 670] close(3) = 0 [pid 670] write(1, "executing program\n", 18) = 18 [pid 670] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 670] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 executing program [pid 670] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 670] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 670] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 670] rt_sigprocmask(SIG_BLOCK, ~[] [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 670] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 670] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[671]}, 88) = 671 [pid 670] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 670] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 670] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 671 attached [pid 671] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 671] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 671] memfd_create("syzkaller", 0) = 3 [pid 671] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 671] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 671] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 671] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 671] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 671] ioctl(4, LOOP_CLR_FD) = 0 [pid 671] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 671] close(4) = 0 [pid 671] close(3) = 0 [pid 671] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] <... futex resumed>) = 0 [pid 670] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 670] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 671] <... futex resumed>) = 1 [pid 671] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 671] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] <... futex resumed>) = 0 [pid 670] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 670] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 671] <... futex resumed>) = 1 [pid 671] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 671] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] <... futex resumed>) = 0 [pid 670] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 670] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 671] <... futex resumed>) = 1 [pid 671] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 671] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] <... futex resumed>) = 0 [pid 670] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 670] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 671] <... futex resumed>) = 1 [pid 671] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 671] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] <... futex resumed>) = 0 [pid 670] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 670] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 671] <... futex resumed>) = 1 [pid 671] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 671] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 671] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] <... futex resumed>) = 0 [pid 670] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 670] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 671] <... futex resumed>) = 1 [pid 671] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 671] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 670] <... futex resumed>) = 0 [pid 670] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 670] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 671] <... futex resumed>) = 1 [pid 671] memfd_create("syzkaller", 0) = 5 [pid 671] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 671] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 671] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 671] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 671] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 671] ioctl(6, LOOP_CLR_FD) = 0 [pid 671] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 671] close(6) = 0 [pid 671] close(5) = 0 [pid 671] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 670] <... futex resumed>) = 0 [pid 670] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 670] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 671] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 671] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 670] <... futex resumed>) = 0 [pid 670] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 670] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 671] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 671] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 670] <... futex resumed>) = 0 [pid 670] exit_group(0) = ? [pid 671] +++ exited with 0 +++ [pid 670] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=670, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 672 ci2-android-6-1/strace-static-x86_64: Process 672 attached [pid 672] set_robust_list(0x5555721e1760, 24) = 0 [pid 672] rt_sigprocmask(SIG_SETMASK, [] [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 672] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 672] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 672] setpgid(0, 0) = 0 [pid 672] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 672] write(3, "1000", 4) = 4 [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 executing program [pid 672] close(3) = 0 [pid 672] write(1, "executing program\n", 18) = 18 [pid 672] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 672] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 672] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 672] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 672] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 672] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 672] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[673]}, 88) = 673 [pid 672] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 672] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 672] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 673 attached [pid 673] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 673] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 673] memfd_create("syzkaller", 0) = 3 [pid 673] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 673] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 673] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 673] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 673] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 673] ioctl(4, LOOP_CLR_FD) = 0 [pid 673] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 673] close(4) = 0 [pid 673] close(3) = 0 [pid 673] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 672] <... futex resumed>) = 0 [pid 672] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 672] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 673] <... futex resumed>) = 1 [pid 673] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 673] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 672] <... futex resumed>) = 0 [pid 672] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 672] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 673] <... futex resumed>) = 1 [pid 673] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 673] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 672] <... futex resumed>) = 0 [pid 672] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 672] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 673] <... futex resumed>) = 1 [pid 673] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 673] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 672] <... futex resumed>) = 0 [pid 672] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 672] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 673] <... futex resumed>) = 1 [pid 673] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 673] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 672] <... futex resumed>) = 0 [pid 672] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 672] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 673] <... futex resumed>) = 1 [pid 673] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 673] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 673] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 672] <... futex resumed>) = 0 [pid 672] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 672] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 673] <... futex resumed>) = 1 [pid 673] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 673] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 672] <... futex resumed>) = 0 [pid 672] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 672] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 673] <... futex resumed>) = 1 [pid 673] memfd_create("syzkaller", 0) = 5 [pid 673] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 673] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 673] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 673] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 673] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 673] ioctl(6, LOOP_CLR_FD) = 0 [pid 673] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 673] close(6) = 0 [pid 673] close(5) = 0 [pid 673] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 672] <... futex resumed>) = 0 [pid 672] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 672] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 673] <... futex resumed>) = 1 [pid 673] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 673] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 672] <... futex resumed>) = 0 [pid 672] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 672] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 673] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 673] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 672] <... futex resumed>) = 0 [pid 673] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 672] exit_group(0) = ? [pid 673] <... futex resumed>) = ? [pid 673] +++ exited with 0 +++ [pid 672] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=672, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 674 ci2-android-6-1/strace-static-x86_64: Process 674 attached [pid 674] set_robust_list(0x5555721e1760, 24) = 0 [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 674] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 674] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 674] setpgid(0, 0) = 0 [pid 674] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 674] <... openat resumed>) = 3 [pid 674] write(3, "1000", 4) = 4 [pid 674] close(3) = 0 [pid 674] write(1, "executing program\n", 18) = 18 executing program [pid 674] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 674] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 674] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 674] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 674] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 674] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 674] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[675]}, 88) = 675 [pid 674] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 674] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 674] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 675 attached [pid 675] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 675] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 675] memfd_create("syzkaller", 0) = 3 [pid 675] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 675] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 675] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 675] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 675] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 675] ioctl(4, LOOP_CLR_FD) = 0 [pid 675] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 675] close(4) = 0 [pid 675] close(3) = 0 [pid 675] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 674] <... futex resumed>) = 0 [pid 674] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 674] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 675] <... futex resumed>) = 1 [pid 675] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 675] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 674] <... futex resumed>) = 0 [pid 674] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 674] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 675] <... futex resumed>) = 1 [pid 675] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 675] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 674] <... futex resumed>) = 0 [pid 674] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 674] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 675] <... futex resumed>) = 1 [pid 675] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 675] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 674] <... futex resumed>) = 0 [pid 674] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 674] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 675] <... futex resumed>) = 1 [pid 675] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 675] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 674] <... futex resumed>) = 0 [pid 674] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 674] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 675] <... futex resumed>) = 1 [pid 675] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 675] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 675] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 674] <... futex resumed>) = 0 [pid 674] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 674] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 675] <... futex resumed>) = 1 [pid 675] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 675] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 674] <... futex resumed>) = 0 [pid 674] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 674] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 675] <... futex resumed>) = 1 [pid 675] memfd_create("syzkaller", 0) = 5 [pid 675] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 675] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 675] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 675] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 675] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 675] ioctl(6, LOOP_CLR_FD) = 0 [pid 675] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 675] close(6) = 0 [pid 675] close(5) = 0 [pid 675] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 674] <... futex resumed>) = 0 [pid 674] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 674] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 675] <... futex resumed>) = 1 [pid 675] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 675] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 674] <... futex resumed>) = 0 [pid 674] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 674] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 675] <... futex resumed>) = 1 [pid 675] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 675] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 674] <... futex resumed>) = 0 [pid 674] exit_group(0) = ? [pid 675] <... futex resumed>) = ? [pid 675] +++ exited with 0 +++ [pid 674] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=674, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 676 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 676 attached [pid 676] set_robust_list(0x5555721e1760, 24) = 0 [pid 676] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 676] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 676] setpgid(0, 0) = 0 [pid 676] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 676] write(3, "1000", 4) = 4 [pid 676] close(3) = 0 [pid 676] write(1, "executing program\n", 18) = 18 executing program [pid 676] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 676] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 676] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 676] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 676] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 676] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 676] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 677 attached => {parent_tid=[677]}, 88) = 677 [pid 676] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 676] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 676] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 677] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 677] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 677] memfd_create("syzkaller", 0) = 3 [pid 677] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 677] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 677] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 677] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 677] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 677] ioctl(4, LOOP_CLR_FD) = 0 [pid 677] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 677] close(4) = 0 [pid 677] close(3) = 0 [pid 677] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 676] <... futex resumed>) = 0 [pid 676] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 676] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 677] <... futex resumed>) = 1 [pid 677] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 677] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 676] <... futex resumed>) = 0 [pid 676] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 676] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 677] <... futex resumed>) = 1 [pid 677] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 677] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 676] <... futex resumed>) = 0 [pid 676] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 676] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 677] <... futex resumed>) = 1 [pid 677] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 677] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 676] <... futex resumed>) = 0 [pid 676] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 676] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 677] <... futex resumed>) = 1 [pid 677] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 677] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 676] <... futex resumed>) = 0 [pid 676] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 676] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 677] <... futex resumed>) = 1 [pid 677] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 677] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 677] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 676] <... futex resumed>) = 0 [pid 676] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 676] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 677] <... futex resumed>) = 1 [pid 677] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 677] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 676] <... futex resumed>) = 0 [pid 676] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 676] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 677] memfd_create("syzkaller", 0) = 5 [pid 677] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 677] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 677] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 677] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 677] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 677] ioctl(6, LOOP_CLR_FD) = 0 [pid 677] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 677] close(6) = 0 [pid 677] close(5) = 0 [pid 677] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 676] <... futex resumed>) = 0 [pid 676] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 676] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 677] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 677] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 676] <... futex resumed>) = 0 [pid 676] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 676] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 677] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 677] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 676] <... futex resumed>) = 0 [pid 677] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 676] exit_group(0) = ? [pid 677] <... futex resumed>) = ? [pid 677] +++ exited with 0 +++ [pid 676] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=676, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 678 ci2-android-6-1/strace-static-x86_64: Process 678 attached [pid 678] set_robust_list(0x5555721e1760, 24) = 0 [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 678] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 678] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 678] setpgid(0, 0) = 0 [pid 678] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 678] write(3, "1000", 4) = 4 [pid 678] close(3) = 0 executing program [pid 678] write(1, "executing program\n", 18) = 18 [pid 678] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 678] <... futex resumed>) = 0 [pid 678] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 678] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 678] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 678] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 678] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 678] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[679]}, 88) = 679 [pid 678] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 678] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 678] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 679 attached [pid 679] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 679] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 679] memfd_create("syzkaller", 0) = 3 [pid 679] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 679] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 679] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 679] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 679] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 679] ioctl(4, LOOP_CLR_FD) = 0 [pid 679] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 679] close(4) = 0 [pid 679] close(3) = 0 [pid 679] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 678] <... futex resumed>) = 0 [pid 678] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 678] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 679] <... futex resumed>) = 1 [pid 679] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 679] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 678] <... futex resumed>) = 0 [pid 678] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 678] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 679] <... futex resumed>) = 1 [pid 679] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 679] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 678] <... futex resumed>) = 0 [pid 678] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 678] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 679] <... futex resumed>) = 1 [pid 679] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 679] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 678] <... futex resumed>) = 0 [pid 678] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 678] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 679] <... futex resumed>) = 1 [pid 679] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 679] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 678] <... futex resumed>) = 0 [pid 678] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 678] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 679] <... futex resumed>) = 1 [pid 679] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 679] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 679] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 678] <... futex resumed>) = 0 [pid 678] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 678] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 679] <... futex resumed>) = 1 [pid 679] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 679] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 678] <... futex resumed>) = 0 [pid 678] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 678] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 679] <... futex resumed>) = 1 [pid 679] memfd_create("syzkaller", 0) = 5 [pid 679] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 679] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 679] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 679] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 679] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 679] ioctl(6, LOOP_CLR_FD) = 0 [pid 679] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 679] close(6) = 0 [pid 679] close(5) = 0 [pid 679] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 678] <... futex resumed>) = 0 [pid 678] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 678] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 679] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 679] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 678] <... futex resumed>) = 0 [pid 678] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 678] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 679] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 679] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 678] <... futex resumed>) = 0 [pid 678] exit_group(0) = ? [pid 679] +++ exited with 0 +++ [pid 678] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=678, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1/strace-static-x86_64: Process 680 attached , child_tidptr=0x5555721e1750) = 680 [pid 680] set_robust_list(0x5555721e1760, 24 [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 680] <... set_robust_list resumed>) = 0 [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 680] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 680] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 680] setpgid(0, 0) = 0 [pid 680] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 680] write(3, "1000", 4) = 4 [pid 680] close(3) = 0 [pid 680] write(1, "executing program\n", 18) = 18 executing program [pid 680] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 680] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 680] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 680] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 680] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 680] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 680] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 681 attached => {parent_tid=[681]}, 88) = 681 [pid 681] set_robust_list(0x7f1cd63e09a0, 24 [pid 680] rt_sigprocmask(SIG_SETMASK, [] [pid 681] <... set_robust_list resumed>) = 0 [pid 680] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 681] rt_sigprocmask(SIG_SETMASK, [] [pid 680] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 681] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 680] <... futex resumed>) = 0 [pid 681] memfd_create("syzkaller", 0 [pid 680] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 681] <... memfd_create resumed>) = 3 [pid 681] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 681] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 681] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 681] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 681] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 681] ioctl(4, LOOP_CLR_FD) = 0 [pid 681] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 681] close(4) = 0 [pid 681] close(3) = 0 [pid 681] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 680] <... futex resumed>) = 0 [pid 681] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL [pid 680] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 681] <... quotactl resumed>) = -1 EFAULT (Bad address) [pid 680] <... futex resumed>) = 0 [pid 681] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 680] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 681] <... futex resumed>) = 0 [pid 680] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 681] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 680] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 681] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 680] <... futex resumed>) = 0 [pid 681] openat(AT_FDCWD, ".", O_RDONLY [pid 680] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 681] <... openat resumed>) = 3 [pid 681] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 680] <... futex resumed>) = 0 [pid 681] symlinkat("\x2e\x02", 3, "./file0" [pid 680] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 681] <... symlinkat resumed>) = -1 EEXIST (File exists) [pid 680] <... futex resumed>) = 0 [pid 681] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 680] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 681] <... futex resumed>) = 0 [pid 680] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 681] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 680] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 681] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 680] <... futex resumed>) = 0 [pid 681] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 680] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 681] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 680] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 681] <... futex resumed>) = 0 [pid 680] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 681] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 680] <... futex resumed>) = 0 [pid 681] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 680] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 681] <... openat resumed>) = 4 [pid 681] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 680] <... futex resumed>) = 0 [pid 681] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0 [pid 680] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 680] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 681] <... mmap resumed>) = 0x200000000000 [pid 681] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 681] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 680] <... futex resumed>) = 0 [pid 680] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 680] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 681] <... futex resumed>) = 0 [pid 681] memfd_create("syzkaller", 0) = 5 [pid 681] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 681] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 681] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 681] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 681] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 681] ioctl(6, LOOP_CLR_FD) = 0 [pid 681] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 681] close(6) = 0 [pid 681] close(5) = 0 [pid 681] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 680] <... futex resumed>) = 0 [pid 680] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 680] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 681] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 681] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 680] <... futex resumed>) = 0 [pid 680] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 680] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 681] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 681] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 680] <... futex resumed>) = 0 [pid 680] exit_group(0) = ? [pid 681] +++ exited with 0 +++ [pid 680] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=680, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 682 ci2-android-6-1/strace-static-x86_64: Process 682 attached [pid 682] set_robust_list(0x5555721e1760, 24) = 0 [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 682] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 682] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 682] setpgid(0, 0) = 0 [pid 682] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 682] write(3, "1000", 4) = 4 [pid 682] close(3) = 0 executing program [pid 682] write(1, "executing program\n", 18) = 18 [pid 682] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 682] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 682] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 682] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 682] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 682] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 682] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[683]}, 88) = 683 [pid 682] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 682] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 682] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 683 attached [pid 683] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 683] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 683] memfd_create("syzkaller", 0) = 3 [pid 683] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 683] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 683] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 683] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 683] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 683] ioctl(4, LOOP_CLR_FD) = 0 [pid 683] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 683] close(4) = 0 [pid 683] close(3) = 0 [pid 683] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 682] <... futex resumed>) = 0 [pid 682] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 682] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 683] <... futex resumed>) = 1 [pid 683] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 683] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 682] <... futex resumed>) = 0 [pid 682] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 682] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 683] <... futex resumed>) = 1 [pid 683] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 683] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 682] <... futex resumed>) = 0 [pid 682] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 682] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 683] <... futex resumed>) = 1 [pid 683] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 683] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 682] <... futex resumed>) = 0 [pid 682] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 682] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 683] <... futex resumed>) = 1 [pid 683] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 683] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 682] <... futex resumed>) = 0 [pid 682] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 682] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 683] <... futex resumed>) = 1 [pid 683] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 683] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 683] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 682] <... futex resumed>) = 0 [pid 682] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 682] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 683] <... futex resumed>) = 1 [pid 683] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 683] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 682] <... futex resumed>) = 0 [pid 682] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 682] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 683] <... futex resumed>) = 1 [pid 683] memfd_create("syzkaller", 0) = 5 [pid 683] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 683] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 683] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 683] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 683] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 683] ioctl(6, LOOP_CLR_FD) = 0 [pid 683] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 683] close(6) = 0 [pid 683] close(5) = 0 [pid 683] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 682] <... futex resumed>) = 0 [pid 682] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 682] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 683] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 683] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 682] <... futex resumed>) = 0 [pid 682] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 682] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 683] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 683] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 682] <... futex resumed>) = 0 [pid 682] exit_group(0) = ? [pid 683] +++ exited with 0 +++ [pid 682] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=682, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 684 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 684 attached [pid 684] set_robust_list(0x5555721e1760, 24) = 0 [pid 684] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 684] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 684] setpgid(0, 0) = 0 [pid 684] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 684] write(3, "1000", 4) = 4 [pid 684] close(3) = 0 [pid 684] write(1, "executing program\n", 18) = 18 executing program [pid 684] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 684] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 684] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 684] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 684] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 684] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 684] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 685 attached => {parent_tid=[685]}, 88) = 685 [pid 685] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 684] rt_sigprocmask(SIG_SETMASK, [] [pid 685] rt_sigprocmask(SIG_SETMASK, [] [pid 684] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 685] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 684] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 685] memfd_create("syzkaller", 0 [pid 684] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 685] <... memfd_create resumed>) = 3 [pid 685] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 685] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 685] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 685] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 685] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 685] ioctl(4, LOOP_CLR_FD) = 0 [pid 685] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 685] close(4) = 0 [pid 685] close(3) = 0 [pid 685] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 684] <... futex resumed>) = 0 [pid 684] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 684] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 685] <... futex resumed>) = 1 [pid 685] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 685] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 684] <... futex resumed>) = 0 [pid 684] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 685] <... futex resumed>) = 1 [pid 684] <... futex resumed>) = 0 [pid 685] openat(AT_FDCWD, ".", O_RDONLY [pid 684] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 685] <... openat resumed>) = 3 [pid 685] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 684] <... futex resumed>) = 0 [pid 684] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 684] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 685] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 685] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 684] <... futex resumed>) = 0 [pid 684] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 684] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 685] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 685] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 684] <... futex resumed>) = 0 [pid 684] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 684] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 685] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 685] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 685] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 684] <... futex resumed>) = 0 [pid 684] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 684] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 685] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 685] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 684] <... futex resumed>) = 0 [pid 684] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 684] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 685] memfd_create("syzkaller", 0) = 5 [pid 685] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 685] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 685] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 685] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 685] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 685] ioctl(6, LOOP_CLR_FD) = 0 [pid 685] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 685] close(6) = 0 [pid 685] close(5) = 0 [pid 685] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 685] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 684] <... futex resumed>) = 0 [pid 684] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 684] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 685] <... futex resumed>) = 0 [pid 685] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 685] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 684] <... futex resumed>) = 0 [pid 684] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 684] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 685] <... futex resumed>) = 1 [pid 685] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 685] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 684] <... futex resumed>) = 0 [pid 684] exit_group(0) = ? [pid 685] +++ exited with 0 +++ [pid 684] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=684, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 686 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 686 attached [pid 686] set_robust_list(0x5555721e1760, 24) = 0 [pid 686] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 686] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 686] setpgid(0, 0) = 0 [pid 686] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 686] write(3, "1000", 4) = 4 [pid 686] close(3) = 0 [pid 686] write(1, "executing program\n", 18) = 18 [pid 686] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 executing program [pid 686] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 686] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 686] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 686] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 686] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 686] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0} => {parent_tid=[687]}, 88) = 687 [pid 686] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 686] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 686] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}ci2-android-6-1/strace-static-x86_64: Process 687 attached [pid 687] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 687] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 687] memfd_create("syzkaller", 0) = 3 [pid 687] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 687] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 687] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 687] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 687] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 687] ioctl(4, LOOP_CLR_FD) = 0 [pid 687] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 687] close(4) = 0 [pid 687] close(3) = 0 [pid 687] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 686] <... futex resumed>) = 0 [pid 686] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 686] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 687] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 687] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 686] <... futex resumed>) = 0 [pid 686] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 686] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 687] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 687] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 686] <... futex resumed>) = 0 [pid 686] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 686] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 687] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 687] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 686] <... futex resumed>) = 0 [pid 686] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 686] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 687] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 687] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 686] <... futex resumed>) = 0 [pid 686] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 686] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 687] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 687] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 687] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 686] <... futex resumed>) = 0 [pid 686] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 686] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 687] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 687] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 686] <... futex resumed>) = 0 [pid 686] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 686] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 687] memfd_create("syzkaller", 0) = 5 [pid 687] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 687] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 687] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 687] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 687] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 687] ioctl(6, LOOP_CLR_FD) = 0 [pid 687] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 687] close(6) = 0 [pid 687] close(5) = 0 [pid 687] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 687] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 686] <... futex resumed>) = 0 [pid 686] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 686] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 687] <... futex resumed>) = 0 [pid 687] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 687] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 686] <... futex resumed>) = 0 [pid 686] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 686] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 687] <... futex resumed>) = 1 [pid 687] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 687] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 686] <... futex resumed>) = 0 [pid 686] exit_group(0) = ? [pid 687] <... futex resumed>) = ? [pid 687] +++ exited with 0 +++ [pid 686] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=686, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 688 ci2-android-6-1/strace-static-x86_64: Process 688 attached [pid 305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 688] set_robust_list(0x5555721e1760, 24) = 0 [pid 688] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 688] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 688] setpgid(0, 0) = 0 [pid 688] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 688] write(3, "1000", 4) = 4 [pid 688] close(3) = 0 [pid 688] write(1, "executing program\n", 18) = 18 executing program [pid 688] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 688] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 688] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 688] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 688] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 688] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 688] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 689 attached => {parent_tid=[689]}, 88) = 689 [pid 689] set_robust_list(0x7f1cd63e09a0, 24) = 0 [pid 688] rt_sigprocmask(SIG_SETMASK, [] [pid 689] rt_sigprocmask(SIG_SETMASK, [] [pid 688] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 689] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 688] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 688] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 689] memfd_create("syzkaller", 0) = 3 [pid 689] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 689] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 689] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 689] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 689] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 689] ioctl(4, LOOP_CLR_FD) = 0 [pid 689] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 689] close(4) = 0 [pid 689] close(3) = 0 [pid 689] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 688] <... futex resumed>) = 0 [pid 689] <... futex resumed>) = 1 [pid 689] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL [pid 688] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 689] <... quotactl resumed>) = -1 EFAULT (Bad address) [pid 688] <... futex resumed>) = 0 [pid 689] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 688] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 689] <... futex resumed>) = 0 [pid 688] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 689] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 688] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 689] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 688] <... futex resumed>) = 0 [pid 689] openat(AT_FDCWD, ".", O_RDONLY [pid 688] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 689] <... openat resumed>) = 3 [pid 689] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 688] <... futex resumed>) = 0 [pid 689] symlinkat("\x2e\x02", 3, "./file0" [pid 688] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 689] <... symlinkat resumed>) = -1 EEXIST (File exists) [pid 688] <... futex resumed>) = 0 [pid 689] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 688] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 689] <... futex resumed>) = 0 [pid 688] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 689] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM [pid 688] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 689] <... mprotect resumed>) = 0 [pid 688] <... futex resumed>) = 0 [pid 689] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 688] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 689] <... futex resumed>) = 0 [pid 688] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 689] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 688] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 689] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 688] <... futex resumed>) = 0 [pid 689] <... openat resumed>) = 4 [pid 688] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 689] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 688] <... futex resumed>) = 0 [pid 689] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0 [pid 688] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 689] <... mmap resumed>) = 0x200000000000 [pid 688] <... futex resumed>) = 0 [pid 689] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 688] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 689] <... futex resumed>) = 0 [pid 688] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 689] memfd_create("syzkaller", 0 [pid 688] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 689] <... memfd_create resumed>) = 5 [pid 688] <... futex resumed>) = 0 [pid 689] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 688] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 689] <... mmap resumed>) = 0x7f1ccdfc0000 [pid 689] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 689] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 689] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 689] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 689] ioctl(6, LOOP_CLR_FD) = 0 [pid 689] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 689] close(6) = 0 [pid 689] close(5) = 0 [pid 689] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 688] <... futex resumed>) = 0 [pid 688] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 688] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 689] <... futex resumed>) = 1 [pid 689] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 689] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 688] <... futex resumed>) = 0 [pid 688] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 688] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 689] <... futex resumed>) = 1 [pid 689] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 689] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 688] <... futex resumed>) = 0 [pid 688] exit_group(0 [pid 689] ???( [pid 688] <... exit_group resumed>) = ? [pid 689] <... ??? resumed>) = ? [pid 689] +++ exited with 0 +++ [pid 688] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=688, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555721e1750) = 690 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-6-1/strace-static-x86_64: Process 690 attached [pid 690] set_robust_list(0x5555721e1760, 24) = 0 [pid 690] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 690] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 690] setpgid(0, 0) = 0 [pid 690] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 690] write(3, "1000", 4) = 4 [pid 690] close(3) = 0 executing program [pid 690] write(1, "executing program\n", 18) = 18 [pid 690] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 690] rt_sigaction(SIGRT_1, {sa_handler=0x7f1cd64207d0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1cd63f06e0}, NULL, 8) = 0 [pid 690] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 690] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1cd63c0000 [pid 690] mprotect(0x7f1cd63c1000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 690] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 690] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f1cd63e0990, parent_tid=0x7f1cd63e0990, exit_signal=0, stack=0x7f1cd63c0000, stack_size=0x20240, tls=0x7f1cd63e06c0}ci2-android-6-1/strace-static-x86_64: Process 691 attached => {parent_tid=[691]}, 88) = 691 [pid 691] set_robust_list(0x7f1cd63e09a0, 24 [pid 690] rt_sigprocmask(SIG_SETMASK, [] [pid 691] <... set_robust_list resumed>) = 0 [pid 690] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 690] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000 [pid 691] rt_sigprocmask(SIG_SETMASK, [] [pid 690] <... futex resumed>) = 0 [pid 691] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 690] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 691] memfd_create("syzkaller", 0) = 3 [pid 691] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 691] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 691] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 691] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 691] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 691] ioctl(4, LOOP_CLR_FD) = 0 [pid 691] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 691] close(4) = 0 [pid 691] close(3) = 0 [pid 691] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 691] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 690] <... futex resumed>) = 0 [pid 690] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 690] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 691] <... futex resumed>) = 0 [pid 691] quotactl(QCMD(Q_QUOTAON, PRJQUOTA), "/dev/loop0", 0xffffffff /* QFMT_??? */, NULL) = -1 EFAULT (Bad address) [pid 691] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 690] <... futex resumed>) = 0 [pid 690] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 690] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 691] openat(AT_FDCWD, ".", O_RDONLY) = 3 [pid 691] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 690] <... futex resumed>) = 0 [pid 690] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 690] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 691] <... futex resumed>) = 1 [pid 691] symlinkat("\x2e\x02", 3, "./file0") = -1 EEXIST (File exists) [pid 691] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 690] <... futex resumed>) = 0 [pid 690] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 690] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 691] <... futex resumed>) = 1 [pid 691] mprotect(0x200000000000, 12288, PROT_READ|PROT_SEM) = 0 [pid 691] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 690] <... futex resumed>) = 0 [pid 690] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 690] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 691] <... futex resumed>) = 1 [pid 691] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x200000000180} --- [pid 691] openat(-1, "/dev/loop0", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [pid 691] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 690] <... futex resumed>) = 0 [pid 690] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 690] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 691] <... futex resumed>) = 1 [pid 691] mmap(0x200000000000, 11755520, PROT_WRITE|PROT_SEM, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000 [pid 691] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 690] <... futex resumed>) = 0 [pid 690] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 690] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 691] memfd_create("syzkaller", 0) = 5 [pid 691] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1ccdfc0000 [pid 691] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 2097152) = 2097152 [pid 691] munmap(0x7f1ccdfc0000, 138412032) = 0 [pid 691] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 691] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 691] ioctl(6, LOOP_CLR_FD) = 0 [pid 691] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 691] close(6) = 0 [pid 691] close(5) = 0 [pid 691] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 690] <... futex resumed>) = 0 [pid 690] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 690] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 691] chdir(0x200000000040) = -1 ENOENT (No such file or directory) [pid 691] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 690] <... futex resumed>) = 0 [pid 690] futex(0x7f1cd64b5e28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 690] futex(0x7f1cd64b5e2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 691] fchmodat(AT_FDCWD, 0x200000000300, 0177520) = 0 [pid 691] futex(0x7f1cd64b5e2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 690] <... futex resumed>) = 0 [pid 691] futex(0x7f1cd64b5e28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 690] exit_group(0) = ? [pid 691] <... futex resumed>) = ? [pid 691] +++ exited with 0 +++ [pid 690] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=690, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0