ci-upstream-net-kasan-gce/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci-upstream-net-kasan-gce/syz-executor1694693749 <...> Warning: Permanently added '10.128.0.214' (ED25519) to the list of known hosts. execve("ci-upstream-net-kasan-gce/syz-executor1694693749", ["ci-upstream-net-kasan-gce/syz-executor1694693749"], 0x7ffda6899500 /* 10 vars */) = 0 brk(NULL) = 0x55557f25d000 brk(0x55557f25de40) = 0x55557f25de40 arch_prctl(ARCH_SET_FS, 0x55557f25d4c0) = 0 set_tid_address(0x55557f25d790) = 5636 set_robust_list(0x55557f25d7a0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci-upstream-net-kasan-gce/syz-executor1694693749", 4096) = 54 getrandom("\xfe\x47\xd2\xd7\x49\xd6\xa7\x01", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55557f25de40 brk(0x55557f27ee40) = 0x55557f27ee40 brk(0x55557f27f000) = 0x55557f27f000 mprotect(0x7f808b29d000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 mkdir("/syzcgroup", 0777) = 0 mkdir("/syzcgroup/unified", 0777) = 0 mount("none", "/syzcgroup/unified", "cgroup2", 0, NULL) = 0 chmod("/syzcgroup/unified", 0777) = 0 openat(AT_FDCWD, "/syzcgroup/unified/cgroup.subtree_control", O_WRONLY) = 3 write(3, "+cpu", 4) = 4 write(3, "+io", 3) = 3 write(3, "+pids", 5) = 5 close(3) = 0 mkdir("/syzcgroup/net", 0777) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "net") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "devices") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "blkio") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "freezer") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) [ 92.350826][ T5636] cgroup: Unknown subsys name 'net' mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,devices,blkio,freezer") = 0 chmod("/syzcgroup/net", 0777) = 0 mkdir("/syzcgroup/cpu", 0777) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "hugetlb") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "rlimit") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/cpu", "cgroup", 0, "memory") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct,hugetlb,memory") = ? ERESTARTNOINTR (To be restarted) [ 92.453696][ T5636] cgroup: Unknown subsys name 'cpuset' [ 92.469779][ T5636] cgroup: Unknown subsys name 'rlimit' mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct,hugetlb,memory") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct,hugetlb,memory") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct,hugetlb,memory") = 0 chmod("/syzcgroup/cpu", 0777) = 0 openat(AT_FDCWD, "/syzcgroup/cpu/cgroup.clone_children", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/syzcgroup/cpu/cpuset.memory_pressure_enabled", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) mount(NULL, "/proc/sys/fs/binfmt_misc", "binfmt_misc", 0, NULL) = -1 EBUSY (Device or resource busy) openat(AT_FDCWD, "/proc/sys/fs/binfmt_misc/register", O_WRONLY|O_CLOEXEC) = 3 write(3, "\x3a\x73\x79\x7a\x30\x3a\x4d\x3a\x30\x3a\x01\x3a\x3a\x2e\x2f\x66\x69\x6c\x65\x30\x3a", 21) = 21 close(3) = 0 openat(AT_FDCWD, "/proc/sys/fs/binfmt_misc/register", O_WRONLY|O_CLOEXEC) = 3 write(3, "\x3a\x73\x79\x7a\x31\x3a\x4d\x3a\x31\x3a\x02\x3a\x3a\x2f\x70\x72\x6f\x63\x2f\x74\x68\x72\x65\x61\x64\x2d\x73\x65\x6c\x66\x2f\x63\x77\x64\x2f\x66\x69\x6c\x65\x30\x3a\x50\x4f\x43", 44) = 44 close(3) = 0 rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGSEGV, {sa_handler=0x7f808b1f1880, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f808b1f5a30}, NULL, 8) = 0 rt_sigaction(SIGBUS, {sa_handler=0x7f808b1f1880, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f808b1f5a30}, NULL, 8) = 0 getrandom("\xce\xc4\x8f\x3c\xab\xc4\x75\x9f", 8, GRND_NONBLOCK) = 8 mkdir("./syzkaller.iVRzSu", 0700) = 0 chmod("./syzkaller.iVRzSu", 0777) = 0 chdir("./syzkaller.iVRzSu") = 0 unshare(CLONE_NEWPID) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5637 attached , child_tidptr=0x55557f25d790) = 5637 [pid 5636] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5637] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5637] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5637] getppid() = 0 [pid 5637] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3 [pid 5637] dup2(3, 201) = 201 [pid 5637] close(3) = 0 [pid 5637] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5637] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5637] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5637] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5637] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5637] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5637] unshare(CLONE_NEWNS) = 0 [pid 5637] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5637] unshare(CLONE_NEWIPC) = 0 [pid 5637] unshare(CLONE_NEWCGROUP) = 0 [pid 5637] unshare(CLONE_NEWUTS) = 0 [pid 5637] unshare(CLONE_SYSVSEM) = 0 [pid 5637] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5637] write(3, "16777216", 8) = 8 [pid 5637] close(3) = 0 [pid 5637] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5637] write(3, "536870912", 9) = 9 [pid 5637] close(3) = 0 [pid 5637] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5637] write(3, "1024", 4) = 4 [pid 5637] close(3) = 0 [pid 5637] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5637] write(3, "8192", 4) = 4 [pid 5637] close(3) = 0 [pid 5637] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5637] write(3, "1024", 4) = 4 [pid 5637] close(3) = 0 [pid 5637] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5637] write(3, "1024", 4) = 4 [pid 5637] close(3) = 0 [pid 5637] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5637] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5637] close(3) = 0 [pid 5637] getpid() = 1 [pid 5637] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5639] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5639] chdir("./0") = 0 [pid 5639] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5639] setpgid(0, 0) = 0 [pid 5639] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5639] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5639] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5639] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5639] write(3, "1000", 4) = 4 [pid 5639] close(3) = 0 [pid 5639] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5639] write(1, "executing program\n", 18) = 18 [pid 5639] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5639] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) executing program [pid 5639] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5639] close(3) = 0 [pid 5639] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5639] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5639] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5639] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5639] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5639] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5639] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5639] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5639] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5639] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5639] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5639] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5639] setns(201, 0) = 0 [pid 5639] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5639] setns(7, 0) = 0 [pid 5639] close(7) = 0 [pid 5639] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5639] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5639] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=2}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5639] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=2}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5639] close(7) = 0 [pid 5639] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5639] close(3) = 0 [pid 5639] close(4) = 0 [pid 5639] close(5) = 0 [pid 5639] close(6) = 0 [pid 5639] close(7) = -1 EBADF (Bad file descriptor) [pid 5639] close(8) = 0 [pid 5639] close(9) = -1 EBADF (Bad file descriptor) [pid 5639] close(10) = -1 EBADF (Bad file descriptor) [pid 5639] close(11) = -1 EBADF (Bad file descriptor) [pid 5639] close(12) = -1 EBADF (Bad file descriptor) [pid 5639] close(13) = -1 EBADF (Bad file descriptor) [pid 5639] close(14) = -1 EBADF (Bad file descriptor) [pid 5639] close(15) = -1 EBADF (Bad file descriptor) [pid 5639] close(16) = -1 EBADF (Bad file descriptor) [pid 5639] close(17) = -1 EBADF (Bad file descriptor) [pid 5639] close(18) = -1 EBADF (Bad file descriptor) [pid 5639] close(19) = -1 EBADF (Bad file descriptor) [pid 5639] close(20) = -1 EBADF (Bad file descriptor) [pid 5639] close(21) = -1 EBADF (Bad file descriptor) [pid 5639] close(22) = -1 EBADF (Bad file descriptor) [pid 5639] close(23) = -1 EBADF (Bad file descriptor) [pid 5639] close(24) = -1 EBADF (Bad file descriptor) [ 93.208921][ T5639] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 5639] close(25) = -1 EBADF (Bad file descriptor) [pid 5639] close(26) = -1 EBADF (Bad file descriptor) [pid 5639] close(27) = -1 EBADF (Bad file descriptor) [pid 5639] close(28) = -1 EBADF (Bad file descriptor) [pid 5639] close(29) = -1 EBADF (Bad file descriptor) [pid 5639] exit_group(0) = ? [pid 5639] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./0/binderfs") = 0 [pid 5637] umount2("./0/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./0/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./0/cgroup.net") = 0 [pid 5637] umount2("./0/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./0/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./0/cgroup.cpu") = 0 [pid 5637] umount2("./0/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./0/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./0/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [ 93.311725][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 93.315014][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 5637] close(3) = 0 [pid 5637] rmdir("./0") = 0 [pid 5637] mkdir("./1", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5644 attached , child_tidptr=0x55557f25d790) = 3 [pid 5644] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5644] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5644] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5644] chdir("./1") = 0 [pid 5644] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5644] setpgid(0, 0) = 0 [pid 5644] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5644] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5644] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5644] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5644] write(3, "1000", 4) = 4 [pid 5644] close(3) = 0 [pid 5644] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5644] write(1, "executing program\n", 18) = 18 executing program [pid 5644] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5644] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5644] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5644] close(3) = 0 [pid 5644] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5644] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5644] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5644] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5644] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5644] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5644] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5644] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5644] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5644] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5644] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5644] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5644] setns(201, 0) = 0 [pid 5644] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5644] setns(7, 0) = 0 [pid 5644] close(7) = 0 [pid 5644] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5644] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5644] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=3}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5644] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=3}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5644] close(7) = 0 [pid 5644] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5644] close(3) = 0 [pid 5644] close(4) = 0 [pid 5644] close(5) = 0 [pid 5644] close(6) = 0 [pid 5644] close(7) = -1 EBADF (Bad file descriptor) [pid 5644] close(8) = 0 [pid 5644] close(9) = -1 EBADF (Bad file descriptor) [ 93.488217][ T5644] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 5644] close(10) = -1 EBADF (Bad file descriptor) [pid 5644] close(11) = -1 EBADF (Bad file descriptor) [pid 5644] close(12) = -1 EBADF (Bad file descriptor) [pid 5644] close(13) = -1 EBADF (Bad file descriptor) [pid 5644] close(14) = -1 EBADF (Bad file descriptor) [pid 5644] close(15) = -1 EBADF (Bad file descriptor) [pid 5644] close(16) = -1 EBADF (Bad file descriptor) [pid 5644] close(17) = -1 EBADF (Bad file descriptor) [pid 5644] close(18) = -1 EBADF (Bad file descriptor) [pid 5644] close(19) = -1 EBADF (Bad file descriptor) [pid 5644] close(20) = -1 EBADF (Bad file descriptor) [pid 5644] close(21) = -1 EBADF (Bad file descriptor) [pid 5644] close(22) = -1 EBADF (Bad file descriptor) [pid 5644] close(23) = -1 EBADF (Bad file descriptor) [pid 5644] close(24) = -1 EBADF (Bad file descriptor) [pid 5644] close(25) = -1 EBADF (Bad file descriptor) [pid 5644] close(26) = -1 EBADF (Bad file descriptor) [pid 5644] close(27) = -1 EBADF (Bad file descriptor) [pid 5644] close(28) = -1 EBADF (Bad file descriptor) [pid 5644] close(29) = -1 EBADF (Bad file descriptor) [pid 5644] exit_group(0) = ? [pid 5644] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./1/binderfs") = 0 [pid 5637] umount2("./1/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./1/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./1/cgroup.net") = 0 [pid 5637] umount2("./1/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./1/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./1/cgroup.cpu") = 0 [pid 5637] umount2("./1/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./1/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./1/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./1") = 0 [pid 5637] mkdir("./2", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5648 attached , child_tidptr=0x55557f25d790) = 4 [pid 5648] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5648] rt_sigprocmask(SIG_SETMASK, [] [ 93.578401][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5648] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5648] chdir("./2") = 0 [pid 5648] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5648] setpgid(0, 0) = 0 [pid 5648] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5648] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5648] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5648] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5648] write(3, "1000", 4) = 4 [pid 5648] close(3) = 0 [pid 5648] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5648] write(1, "executing program\n", 18) = 18 executing program [pid 5648] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5648] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5648] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5648] close(3) = 0 [pid 5648] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5648] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5648] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5648] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5648] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5648] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5648] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5648] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5648] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5648] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5648] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5648] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5648] setns(201, 0) = 0 [pid 5648] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5648] setns(7, 0) = 0 [pid 5648] close(7) = 0 [pid 5648] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5648] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5648] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=4}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5648] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=4}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5648] close(7) = 0 [pid 5648] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5648] close(3) = 0 [pid 5648] close(4) = 0 [pid 5648] close(5) = 0 [pid 5648] close(6) = 0 [pid 5648] close(7) = -1 EBADF (Bad file descriptor) [pid 5648] close(8) = 0 [pid 5648] close(9) = -1 EBADF (Bad file descriptor) [pid 5648] close(10) = -1 EBADF (Bad file descriptor) [pid 5648] close(11) = -1 EBADF (Bad file descriptor) [pid 5648] close(12) = -1 EBADF (Bad file descriptor) [pid 5648] close(13) = -1 EBADF (Bad file descriptor) [pid 5648] close(14) = -1 EBADF (Bad file descriptor) [pid 5648] close(15) = -1 EBADF (Bad file descriptor) [pid 5648] close(16) = -1 EBADF (Bad file descriptor) [pid 5648] close(17) = -1 EBADF (Bad file descriptor) [pid 5648] close(18) = -1 EBADF (Bad file descriptor) [pid 5648] close(19) = -1 EBADF (Bad file descriptor) [pid 5648] close(20) = -1 EBADF (Bad file descriptor) [pid 5648] close(21) = -1 EBADF (Bad file descriptor) [pid 5648] close(22) = -1 EBADF (Bad file descriptor) [pid 5648] close(23) = -1 EBADF (Bad file descriptor) [pid 5648] close(24) = -1 EBADF (Bad file descriptor) [pid 5648] close(25) = -1 EBADF (Bad file descriptor) [pid 5648] close(26) = -1 EBADF (Bad file descriptor) [pid 5648] close(27) = -1 EBADF (Bad file descriptor) [pid 5648] close(28) = -1 EBADF (Bad file descriptor) [pid 5648] close(29) = -1 EBADF (Bad file descriptor) [pid 5648] exit_group(0) = ? [pid 5648] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [ 93.768141][ T5648] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 5637] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./2/binderfs") = 0 [pid 5637] umount2("./2/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./2/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./2/cgroup.net") = 0 [pid 5637] umount2("./2/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./2/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./2/cgroup.cpu") = 0 [pid 5637] umount2("./2/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./2/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./2/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./2") = 0 [pid 5637] mkdir("./3", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5654 attached , child_tidptr=0x55557f25d790) = 5 [pid 5654] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5654] rt_sigprocmask(SIG_SETMASK, [] [ 93.900129][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 93.902716][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5654] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5654] chdir("./3") = 0 [pid 5654] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5654] setpgid(0, 0) = 0 [pid 5654] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5654] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5654] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5654] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5654] write(3, "1000", 4) = 4 [pid 5654] close(3) = 0 [pid 5654] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5654] write(1, "executing program\n", 18) = 18 executing program [pid 5654] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5654] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5654] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5654] close(3) = 0 [pid 5654] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5654] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5654] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5654] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5654] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5654] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5654] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5654] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5654] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5654] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5654] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5654] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5654] setns(201, 0) = 0 [pid 5654] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5654] setns(7, 0) = 0 [pid 5654] close(7) = 0 [pid 5654] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5654] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5654] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=5}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5654] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5654] close(7) = 0 [pid 5654] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5654] close(3) = 0 [pid 5654] close(4) = 0 [pid 5654] close(5) = 0 [pid 5654] close(6) = 0 [pid 5654] close(7) = -1 EBADF (Bad file descriptor) [pid 5654] close(8) = 0 [pid 5654] close(9) = -1 EBADF (Bad file descriptor) [pid 5654] close(10) = -1 EBADF (Bad file descriptor) [pid 5654] close(11) = -1 EBADF (Bad file descriptor) [pid 5654] close(12) = -1 EBADF (Bad file descriptor) [pid 5654] close(13) = -1 EBADF (Bad file descriptor) [pid 5654] close(14) = -1 EBADF (Bad file descriptor) [pid 5654] close(15) = -1 EBADF (Bad file descriptor) [pid 5654] close(16) = -1 EBADF (Bad file descriptor) [pid 5654] close(17) = -1 EBADF (Bad file descriptor) [pid 5654] close(18) = -1 EBADF (Bad file descriptor) [pid 5654] close(19) = -1 EBADF (Bad file descriptor) [pid 5654] close(20) = -1 EBADF (Bad file descriptor) [pid 5654] close(21) = -1 EBADF (Bad file descriptor) [pid 5654] close(22) = -1 EBADF (Bad file descriptor) [pid 5654] close(23) = -1 EBADF (Bad file descriptor) [pid 5654] close(24) = -1 EBADF (Bad file descriptor) [pid 5654] close(25) = -1 EBADF (Bad file descriptor) [ 94.055979][ T5654] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 5654] close(26) = -1 EBADF (Bad file descriptor) [pid 5654] close(27) = -1 EBADF (Bad file descriptor) [pid 5654] close(28) = -1 EBADF (Bad file descriptor) [pid 5654] close(29) = -1 EBADF (Bad file descriptor) [pid 5654] exit_group(0) = ? [pid 5654] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./3/binderfs") = 0 [pid 5637] umount2("./3/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./3/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./3/cgroup.net") = 0 [pid 5637] umount2("./3/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./3/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./3/cgroup.cpu") = 0 [pid 5637] umount2("./3/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./3/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./3/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./3") = 0 [pid 5637] mkdir("./4", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5658 attached , child_tidptr=0x55557f25d790) = 6 [ 94.142725][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 5658] set_robust_list(0x55557f25d7a0, 24 [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5658] <... set_robust_list resumed>) = 0 [pid 5658] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5658] chdir("./4") = 0 [pid 5658] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5658] setpgid(0, 0) = 0 [pid 5658] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5658] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5658] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5658] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5658] write(3, "1000", 4) = 4 [pid 5658] close(3) = 0 [pid 5658] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5658] write(1, "executing program\n", 18) = 18 executing program [pid 5658] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5658] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5658] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5658] close(3) = 0 [pid 5658] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5658] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5658] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5658] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5658] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5658] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5658] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5658] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5658] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5658] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5658] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5658] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5658] setns(201, 0) = 0 [pid 5658] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5658] setns(7, 0) = 0 [pid 5658] close(7) = 0 [pid 5658] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5658] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5658] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=6}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5658] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=6}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5658] close(7) = 0 [pid 5658] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5658] close(3) = 0 [pid 5658] close(4) = 0 [pid 5658] close(5) = 0 [pid 5658] close(6) = 0 [pid 5658] close(7) = -1 EBADF (Bad file descriptor) [pid 5658] close(8) = 0 [pid 5658] close(9) = -1 EBADF (Bad file descriptor) [pid 5658] close(10) = -1 EBADF (Bad file descriptor) [ 94.339344][ T5658] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 5658] close(11) = -1 EBADF (Bad file descriptor) [pid 5658] close(12) = -1 EBADF (Bad file descriptor) [pid 5658] close(13) = -1 EBADF (Bad file descriptor) [pid 5658] close(14) = -1 EBADF (Bad file descriptor) [pid 5658] close(15) = -1 EBADF (Bad file descriptor) [pid 5658] close(16) = -1 EBADF (Bad file descriptor) [pid 5658] close(17) = -1 EBADF (Bad file descriptor) [pid 5658] close(18) = -1 EBADF (Bad file descriptor) [pid 5658] close(19) = -1 EBADF (Bad file descriptor) [pid 5658] close(20) = -1 EBADF (Bad file descriptor) [pid 5658] close(21) = -1 EBADF (Bad file descriptor) [pid 5658] close(22) = -1 EBADF (Bad file descriptor) [pid 5658] close(23) = -1 EBADF (Bad file descriptor) [pid 5658] close(24) = -1 EBADF (Bad file descriptor) [pid 5658] close(25) = -1 EBADF (Bad file descriptor) [pid 5658] close(26) = -1 EBADF (Bad file descriptor) [pid 5658] close(27) = -1 EBADF (Bad file descriptor) [pid 5658] close(28) = -1 EBADF (Bad file descriptor) [pid 5658] close(29) = -1 EBADF (Bad file descriptor) [pid 5658] exit_group(0) = ? [pid 5658] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 94.412688][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 94.415753][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./4/binderfs") = 0 [pid 5637] umount2("./4/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./4/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./4/cgroup.net") = 0 [pid 5637] umount2("./4/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./4/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./4/cgroup.cpu") = 0 [pid 5637] umount2("./4/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./4/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./4/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./4") = 0 [pid 5637] mkdir("./5", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5662 attached , child_tidptr=0x55557f25d790) = 7 [pid 5662] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5662] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 5662] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5662] chdir("./5") = 0 [pid 5662] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5662] setpgid(0, 0) = 0 [pid 5662] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5662] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5662] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5662] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5662] write(3, "1000", 4) = 4 [pid 5662] close(3) = 0 [pid 5662] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5662] write(1, "executing program\n", 18) = 18 executing program [pid 5662] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5662] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5662] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5662] close(3) = 0 [pid 5662] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5662] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5662] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5662] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5662] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5662] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5662] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5662] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5662] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5662] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5662] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5662] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5662] setns(201, 0) = 0 [pid 5662] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5662] setns(7, 0) = 0 [pid 5662] close(7) = 0 [pid 5662] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5662] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5662] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=7}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5662] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=7}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5662] close(7) = 0 [pid 5662] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5662] close(3) = 0 [pid 5662] close(4) = 0 [pid 5662] close(5) = 0 [pid 5662] close(6) = 0 [pid 5662] close(7) = -1 EBADF (Bad file descriptor) [pid 5662] close(8) = 0 [pid 5662] close(9) = -1 EBADF (Bad file descriptor) [pid 5662] close(10) = -1 EBADF (Bad file descriptor) [pid 5662] close(11) = -1 EBADF (Bad file descriptor) [pid 5662] close(12) = -1 EBADF (Bad file descriptor) [pid 5662] close(13) = -1 EBADF (Bad file descriptor) [pid 5662] close(14) = -1 EBADF (Bad file descriptor) [pid 5662] close(15) = -1 EBADF (Bad file descriptor) [pid 5662] close(16) = -1 EBADF (Bad file descriptor) [pid 5662] close(17) = -1 EBADF (Bad file descriptor) [pid 5662] close(18) = -1 EBADF (Bad file descriptor) [pid 5662] close(19) = -1 EBADF (Bad file descriptor) [pid 5662] close(20) = -1 EBADF (Bad file descriptor) [pid 5662] close(21) = -1 EBADF (Bad file descriptor) [pid 5662] close(22) = -1 EBADF (Bad file descriptor) [pid 5662] close(23) = -1 EBADF (Bad file descriptor) [pid 5662] close(24) = -1 EBADF (Bad file descriptor) [pid 5662] close(25) = -1 EBADF (Bad file descriptor) [pid 5662] close(26) = -1 EBADF (Bad file descriptor) [pid 5662] close(27) = -1 EBADF (Bad file descriptor) [pid 5662] close(28) = -1 EBADF (Bad file descriptor) [pid 5662] close(29) = -1 EBADF (Bad file descriptor) [pid 5662] exit_group(0) = ? [pid 5662] +++ exited with 0 +++ [ 94.603639][ T5662] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./5/binderfs") = 0 [pid 5637] umount2("./5/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./5/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./5/cgroup.net") = 0 [pid 5637] umount2("./5/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./5/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./5/cgroup.cpu") = 0 [pid 5637] umount2("./5/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./5/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./5/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./5") = 0 [pid 5637] mkdir("./6", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5666 attached [pid 5666] set_robust_list(0x55557f25d7a0, 24 [pid 5637] <... clone resumed>, child_tidptr=0x55557f25d790) = 8 [pid 5666] <... set_robust_list resumed>) = 0 [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5666] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5666] chdir("./6") = 0 [pid 5666] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 94.689289][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 5666] setpgid(0, 0) = 0 [pid 5666] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5666] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5666] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5666] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5666] write(3, "1000", 4) = 4 [pid 5666] close(3) = 0 [pid 5666] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5666] write(1, "executing program\n", 18) = 18 [pid 5666] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5666] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) executing program [pid 5666] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5666] close(3) = 0 [pid 5666] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5666] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5666] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5666] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5666] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5666] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5666] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5666] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5666] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5666] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5666] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5666] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5666] setns(201, 0) = 0 [pid 5666] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5666] setns(7, 0) = 0 [pid 5666] close(7) = 0 [pid 5666] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5666] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5666] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=8}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5666] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=8}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5666] close(7) = 0 [pid 5666] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5666] close(3) = 0 [pid 5666] close(4) = 0 [pid 5666] close(5) = 0 [pid 5666] close(6) = 0 [pid 5666] close(7) = -1 EBADF (Bad file descriptor) [pid 5666] close(8) = 0 [pid 5666] close(9) = -1 EBADF (Bad file descriptor) [pid 5666] close(10) = -1 EBADF (Bad file descriptor) [pid 5666] close(11) = -1 EBADF (Bad file descriptor) [pid 5666] close(12) = -1 EBADF (Bad file descriptor) [pid 5666] close(13) = -1 EBADF (Bad file descriptor) [pid 5666] close(14) = -1 EBADF (Bad file descriptor) [pid 5666] close(15) = -1 EBADF (Bad file descriptor) [pid 5666] close(16) = -1 EBADF (Bad file descriptor) [pid 5666] close(17) = -1 EBADF (Bad file descriptor) [pid 5666] close(18) = -1 EBADF (Bad file descriptor) [pid 5666] close(19) = -1 EBADF (Bad file descriptor) [pid 5666] close(20) = -1 EBADF (Bad file descriptor) [pid 5666] close(21) = -1 EBADF (Bad file descriptor) [pid 5666] close(22) = -1 EBADF (Bad file descriptor) [pid 5666] close(23) = -1 EBADF (Bad file descriptor) [pid 5666] close(24) = -1 EBADF (Bad file descriptor) [pid 5666] close(25) = -1 EBADF (Bad file descriptor) [pid 5666] close(26) = -1 EBADF (Bad file descriptor) [pid 5666] close(27) = -1 EBADF (Bad file descriptor) [pid 5666] close(28) = -1 EBADF (Bad file descriptor) [pid 5666] close(29) = -1 EBADF (Bad file descriptor) [pid 5666] exit_group(0) = ? [pid 5666] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [ 94.855028][ T5666] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./6/binderfs") = 0 [pid 5637] umount2("./6/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./6/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./6/cgroup.net") = 0 [pid 5637] umount2("./6/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./6/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./6/cgroup.cpu") = 0 [pid 5637] umount2("./6/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./6/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./6/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./6") = 0 [pid 5637] mkdir("./7", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5670 attached , child_tidptr=0x55557f25d790) = 9 [pid 5670] set_robust_list(0x55557f25d7a0, 24 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 5670] <... set_robust_list resumed>) = 0 [pid 5670] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5670] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5670] chdir("./7") = 0 [pid 5670] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5670] setpgid(0, 0) = 0 [ 94.934731][ T5630] udevd[5630]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 5670] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5670] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5670] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5670] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5670] write(3, "1000", 4) = 4 [pid 5670] close(3) = 0 [pid 5670] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5670] write(1, "executing program\n", 18) = 18 [pid 5670] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5670] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5670] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5670] close(3) = 0 [pid 5670] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5670] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5670] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5670] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5670] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5670] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5670] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5670] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5670] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5670] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5670] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5670] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5670] setns(201, 0) = 0 [pid 5670] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5670] setns(7, 0) = 0 [pid 5670] close(7) = 0 [pid 5670] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5670] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5670] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=9}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5670] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=9}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5670] close(7) = 0 [pid 5670] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5670] close(3) = 0 [pid 5670] close(4) = 0 [pid 5670] close(5) = 0 [pid 5670] close(6) = 0 [pid 5670] close(7) = -1 EBADF (Bad file descriptor) [pid 5670] close(8) = 0 [pid 5670] close(9) = -1 EBADF (Bad file descriptor) [pid 5670] close(10) = -1 EBADF (Bad file descriptor) [ 95.109551][ T5670] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 5670] close(11) = -1 EBADF (Bad file descriptor) [pid 5670] close(12) = -1 EBADF (Bad file descriptor) [pid 5670] close(13) = -1 EBADF (Bad file descriptor) [pid 5670] close(14) = -1 EBADF (Bad file descriptor) [pid 5670] close(15) = -1 EBADF (Bad file descriptor) [pid 5670] close(16) = -1 EBADF (Bad file descriptor) [pid 5670] close(17) = -1 EBADF (Bad file descriptor) [pid 5670] close(18) = -1 EBADF (Bad file descriptor) [pid 5670] close(19) = -1 EBADF (Bad file descriptor) [pid 5670] close(20) = -1 EBADF (Bad file descriptor) [pid 5670] close(21) = -1 EBADF (Bad file descriptor) [pid 5670] close(22) = -1 EBADF (Bad file descriptor) [pid 5670] close(23) = -1 EBADF (Bad file descriptor) [pid 5670] close(24) = -1 EBADF (Bad file descriptor) [pid 5670] close(25) = -1 EBADF (Bad file descriptor) [pid 5670] close(26) = -1 EBADF (Bad file descriptor) [pid 5670] close(27) = -1 EBADF (Bad file descriptor) [pid 5670] close(28) = -1 EBADF (Bad file descriptor) [pid 5670] close(29) = -1 EBADF (Bad file descriptor) [pid 5670] exit_group(0) = ? [pid 5670] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5637] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./7/binderfs") = 0 [pid 5637] umount2("./7/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./7/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./7/cgroup.net") = 0 [pid 5637] umount2("./7/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./7/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./7/cgroup.cpu") = 0 [pid 5637] umount2("./7/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./7/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./7/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./7") = 0 [pid 5637] mkdir("./8", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5674 attached , child_tidptr=0x55557f25d790) = 10 [pid 5674] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5674] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5674] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5674] chdir("./8") = 0 [pid 5674] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5674] setpgid(0, 0) = 0 [pid 5674] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5674] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5674] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5674] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5674] write(3, "1000", 4) = 4 [pid 5674] close(3) = 0 [pid 5674] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5674] write(1, "executing program\n", 18) = 18 executing program [pid 5674] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5674] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5674] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5674] close(3) = 0 [pid 5674] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5674] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5674] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5674] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5674] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5674] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5674] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5674] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5674] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5674] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5674] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5674] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5674] setns(201, 0) = 0 [pid 5674] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5674] setns(7, 0) = 0 [pid 5674] close(7) = 0 [pid 5674] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5674] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5674] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=10}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5674] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=10}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5674] close(7) = 0 [pid 5674] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5674] close(3) = 0 [pid 5674] close(4) = 0 [pid 5674] close(5) = 0 [pid 5674] close(6) = 0 [pid 5674] close(7) = -1 EBADF (Bad file descriptor) [pid 5674] close(8) = 0 [pid 5674] close(9) = -1 EBADF (Bad file descriptor) [pid 5674] close(10) = -1 EBADF (Bad file descriptor) [pid 5674] close(11) = -1 EBADF (Bad file descriptor) [pid 5674] close(12) = -1 EBADF (Bad file descriptor) [pid 5674] close(13) = -1 EBADF (Bad file descriptor) [pid 5674] close(14) = -1 EBADF (Bad file descriptor) [pid 5674] close(15) = -1 EBADF (Bad file descriptor) [pid 5674] close(16) = -1 EBADF (Bad file descriptor) [pid 5674] close(17) = -1 EBADF (Bad file descriptor) [pid 5674] close(18) = -1 EBADF (Bad file descriptor) [pid 5674] close(19) = -1 EBADF (Bad file descriptor) [pid 5674] close(20) = -1 EBADF (Bad file descriptor) [pid 5674] close(21) = -1 EBADF (Bad file descriptor) [pid 5674] close(22) = -1 EBADF (Bad file descriptor) [pid 5674] close(23) = -1 EBADF (Bad file descriptor) [pid 5674] close(24) = -1 EBADF (Bad file descriptor) [pid 5674] close(25) = -1 EBADF (Bad file descriptor) [pid 5674] close(26) = -1 EBADF (Bad file descriptor) [pid 5674] close(27) = -1 EBADF (Bad file descriptor) [ 95.548591][ T5674] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 5674] close(28) = -1 EBADF (Bad file descriptor) [pid 5674] close(29) = -1 EBADF (Bad file descriptor) [pid 5674] exit_group(0) = ? [pid 5674] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./8/binderfs") = 0 [pid 5637] umount2("./8/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./8/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./8/cgroup.net") = 0 [pid 5637] umount2("./8/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./8/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./8/cgroup.cpu") = 0 [pid 5637] umount2("./8/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./8/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./8/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./8") = 0 [pid 5637] mkdir("./9", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5678 attached [pid 5678] set_robust_list(0x55557f25d7a0, 24 [pid 5637] <... clone resumed>, child_tidptr=0x55557f25d790) = 11 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 5678] <... set_robust_list resumed>) = 0 [pid 5678] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5678] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5678] chdir("./9") = 0 [pid 5678] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5678] setpgid(0, 0) = 0 [pid 5678] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5678] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5678] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5678] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5678] write(3, "1000", 4) = 4 [pid 5678] close(3) = 0 [pid 5678] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5678] write(1, "executing program\n", 18) = 18 executing program [pid 5678] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5678] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5678] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5678] close(3) = 0 [pid 5678] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5678] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5678] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5678] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5678] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5678] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5678] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5678] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5678] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5678] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5678] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5678] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5678] setns(201, 0) = 0 [pid 5678] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5678] setns(7, 0) = 0 [pid 5678] close(7) = 0 [pid 5678] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5678] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5678] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=11}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5678] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=11}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5678] close(7) = 0 [pid 5678] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5678] close(3) = 0 [pid 5678] close(4) = 0 [pid 5678] close(5) = 0 [pid 5678] close(6) = 0 [pid 5678] close(7) = -1 EBADF (Bad file descriptor) [pid 5678] close(8) = 0 [pid 5678] close(9) = -1 EBADF (Bad file descriptor) [pid 5678] close(10) = -1 EBADF (Bad file descriptor) [pid 5678] close(11) = -1 EBADF (Bad file descriptor) [pid 5678] close(12) = -1 EBADF (Bad file descriptor) [pid 5678] close(13) = -1 EBADF (Bad file descriptor) [pid 5678] close(14) = -1 EBADF (Bad file descriptor) [pid 5678] close(15) = -1 EBADF (Bad file descriptor) [pid 5678] close(16) = -1 EBADF (Bad file descriptor) [pid 5678] close(17) = -1 EBADF (Bad file descriptor) [pid 5678] close(18) = -1 EBADF (Bad file descriptor) [pid 5678] close(19) = -1 EBADF (Bad file descriptor) [pid 5678] close(20) = -1 EBADF (Bad file descriptor) [pid 5678] close(21) = -1 EBADF (Bad file descriptor) [pid 5678] close(22) = -1 EBADF (Bad file descriptor) [pid 5678] close(23) = -1 EBADF (Bad file descriptor) [ 95.764533][ T5678] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 5678] close(24) = -1 EBADF (Bad file descriptor) [pid 5678] close(25) = -1 EBADF (Bad file descriptor) [pid 5678] close(26) = -1 EBADF (Bad file descriptor) [pid 5678] close(27) = -1 EBADF (Bad file descriptor) [pid 5678] close(28) = -1 EBADF (Bad file descriptor) [pid 5678] close(29) = -1 EBADF (Bad file descriptor) [pid 5678] exit_group(0) = ? [pid 5678] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=11, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./9/binderfs") = 0 [pid 5637] umount2("./9/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./9/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./9/cgroup.net") = 0 [pid 5637] umount2("./9/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./9/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./9/cgroup.cpu") = 0 [pid 5637] umount2("./9/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./9/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./9/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./9") = 0 [pid 5637] mkdir("./10", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5682 attached [pid 5682] set_robust_list(0x55557f25d7a0, 24 [pid 5637] <... clone resumed>, child_tidptr=0x55557f25d790) = 12 [pid 5682] <... set_robust_list resumed>) = 0 [pid 5682] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 5682] chdir("./10" [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5682] <... chdir resumed>) = 0 [pid 5682] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5682] setpgid(0, 0) = 0 [pid 5682] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5682] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5682] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5682] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5682] write(3, "1000", 4) = 4 [pid 5682] close(3) = 0 [pid 5682] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5682] write(1, "executing program\n", 18) = 18 executing program [pid 5682] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5682] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5682] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5682] close(3) = 0 [pid 5682] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5682] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5682] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5682] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5682] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5682] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5682] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5682] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5682] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5682] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5682] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5682] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5682] setns(201, 0) = 0 [pid 5682] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5682] setns(7, 0) = 0 [pid 5682] close(7) = 0 [pid 5682] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5682] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5682] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=12}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5682] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=12}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5682] close(7) = 0 [pid 5682] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5682] close(3) = 0 [pid 5682] close(4) = 0 [pid 5682] close(5) = 0 [pid 5682] close(6) = 0 [pid 5682] close(7) = -1 EBADF (Bad file descriptor) [pid 5682] close(8) = 0 [pid 5682] close(9) = -1 EBADF (Bad file descriptor) [pid 5682] close(10) = -1 EBADF (Bad file descriptor) [pid 5682] close(11) = -1 EBADF (Bad file descriptor) [pid 5682] close(12) = -1 EBADF (Bad file descriptor) [pid 5682] close(13) = -1 EBADF (Bad file descriptor) [pid 5682] close(14) = -1 EBADF (Bad file descriptor) [pid 5682] close(15) = -1 EBADF (Bad file descriptor) [pid 5682] close(16) = -1 EBADF (Bad file descriptor) [pid 5682] close(17) = -1 EBADF (Bad file descriptor) [pid 5682] close(18) = -1 EBADF (Bad file descriptor) [pid 5682] close(19) = -1 EBADF (Bad file descriptor) [pid 5682] close(20) = -1 EBADF (Bad file descriptor) [pid 5682] close(21) = -1 EBADF (Bad file descriptor) [pid 5682] close(22) = -1 EBADF (Bad file descriptor) [pid 5682] close(23) = -1 EBADF (Bad file descriptor) [pid 5682] close(24) = -1 EBADF (Bad file descriptor) [pid 5682] close(25) = -1 EBADF (Bad file descriptor) [pid 5682] close(26) = -1 EBADF (Bad file descriptor) [pid 5682] close(27) = -1 EBADF (Bad file descriptor) [pid 5682] close(28) = -1 EBADF (Bad file descriptor) [pid 5682] close(29) = -1 EBADF (Bad file descriptor) [pid 5682] exit_group(0) = ? [pid 5682] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./10/binderfs") = 0 [pid 5637] umount2("./10/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./10/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./10/cgroup.net") = 0 [pid 5637] umount2("./10/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./10/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./10/cgroup.cpu") = 0 [pid 5637] umount2("./10/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./10/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./10/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./10") = 0 [pid 5637] mkdir("./11", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5686 attached , child_tidptr=0x55557f25d790) = 13 [pid 5686] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 5686] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5686] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5686] chdir("./11") = 0 [pid 5686] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5686] setpgid(0, 0) = 0 [pid 5686] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5686] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5686] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5686] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5686] write(3, "1000", 4) = 4 [pid 5686] close(3) = 0 [pid 5686] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5686] write(1, "executing program\n", 18) = 18 executing program [pid 5686] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5686] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5686] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5686] close(3) = 0 [pid 5686] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5686] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5686] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5686] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5686] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5686] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5686] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5686] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5686] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5686] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5686] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5686] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5686] setns(201, 0) = 0 [pid 5686] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5686] setns(7, 0) = 0 [pid 5686] close(7) = 0 [pid 5686] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5686] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5686] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=13}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5686] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=13}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5686] close(7) = 0 [pid 5686] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5686] close(3) = 0 [pid 5686] close(4) = 0 [pid 5686] close(5) = 0 [pid 5686] close(6) = 0 [pid 5686] close(7) = -1 EBADF (Bad file descriptor) [pid 5686] close(8) = 0 [pid 5686] close(9) = -1 EBADF (Bad file descriptor) [pid 5686] close(10) = -1 EBADF (Bad file descriptor) [pid 5686] close(11) = -1 EBADF (Bad file descriptor) [pid 5686] close(12) = -1 EBADF (Bad file descriptor) [pid 5686] close(13) = -1 EBADF (Bad file descriptor) [pid 5686] close(14) = -1 EBADF (Bad file descriptor) [pid 5686] close(15) = -1 EBADF (Bad file descriptor) [pid 5686] close(16) = -1 EBADF (Bad file descriptor) [pid 5686] close(17) = -1 EBADF (Bad file descriptor) [pid 5686] close(18) = -1 EBADF (Bad file descriptor) [pid 5686] close(19) = -1 EBADF (Bad file descriptor) [pid 5686] close(20) = -1 EBADF (Bad file descriptor) [pid 5686] close(21) = -1 EBADF (Bad file descriptor) [pid 5686] close(22) = -1 EBADF (Bad file descriptor) [pid 5686] close(23) = -1 EBADF (Bad file descriptor) [pid 5686] close(24) = -1 EBADF (Bad file descriptor) [pid 5686] close(25) = -1 EBADF (Bad file descriptor) [pid 5686] close(26) = -1 EBADF (Bad file descriptor) [pid 5686] close(27) = -1 EBADF (Bad file descriptor) [pid 5686] close(28) = -1 EBADF (Bad file descriptor) [pid 5686] close(29) = -1 EBADF (Bad file descriptor) [pid 5686] exit_group(0) = ? [pid 5686] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=13, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./11/binderfs") = 0 [pid 5637] umount2("./11/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./11/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./11/cgroup.net") = 0 [pid 5637] umount2("./11/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./11/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./11/cgroup.cpu") = 0 [pid 5637] umount2("./11/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./11/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./11/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./11") = 0 [pid 5637] mkdir("./12", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5690 attached , child_tidptr=0x55557f25d790) = 14 [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5690] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5690] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5690] chdir("./12") = 0 [pid 5690] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5690] setpgid(0, 0) = 0 [pid 5690] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5690] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5690] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5690] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5690] write(3, "1000", 4) = 4 [pid 5690] close(3) = 0 [pid 5690] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5690] write(1, "executing program\n", 18) = 18 executing program [pid 5690] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5690] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5690] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5690] close(3) = 0 [pid 5690] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5690] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5690] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5690] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5690] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5690] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5690] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5690] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5690] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5690] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5690] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5690] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5690] setns(201, 0) = 0 [pid 5690] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5690] setns(7, 0) = 0 [pid 5690] close(7) = 0 [pid 5690] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5690] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5690] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=14}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5690] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=14}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5690] close(7) = 0 [pid 5690] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5690] close(3) = 0 [pid 5690] close(4) = 0 [pid 5690] close(5) = 0 [pid 5690] close(6) = 0 [pid 5690] close(7) = -1 EBADF (Bad file descriptor) [pid 5690] close(8) = 0 [pid 5690] close(9) = -1 EBADF (Bad file descriptor) [pid 5690] close(10) = -1 EBADF (Bad file descriptor) [pid 5690] close(11) = -1 EBADF (Bad file descriptor) [pid 5690] close(12) = -1 EBADF (Bad file descriptor) [pid 5690] close(13) = -1 EBADF (Bad file descriptor) [pid 5690] close(14) = -1 EBADF (Bad file descriptor) [pid 5690] close(15) = -1 EBADF (Bad file descriptor) [pid 5690] close(16) = -1 EBADF (Bad file descriptor) [pid 5690] close(17) = -1 EBADF (Bad file descriptor) [pid 5690] close(18) = -1 EBADF (Bad file descriptor) [pid 5690] close(19) = -1 EBADF (Bad file descriptor) [pid 5690] close(20) = -1 EBADF (Bad file descriptor) [pid 5690] close(21) = -1 EBADF (Bad file descriptor) [pid 5690] close(22) = -1 EBADF (Bad file descriptor) [pid 5690] close(23) = -1 EBADF (Bad file descriptor) [pid 5690] close(24) = -1 EBADF (Bad file descriptor) [pid 5690] close(25) = -1 EBADF (Bad file descriptor) [pid 5690] close(26) = -1 EBADF (Bad file descriptor) [pid 5690] close(27) = -1 EBADF (Bad file descriptor) [pid 5690] close(28) = -1 EBADF (Bad file descriptor) [pid 5690] close(29) = -1 EBADF (Bad file descriptor) [pid 5690] exit_group(0) = ? [pid 5690] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=14, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5637] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./12/binderfs") = 0 [pid 5637] umount2("./12/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./12/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./12/cgroup.net") = 0 [pid 5637] umount2("./12/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./12/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./12/cgroup.cpu") = 0 [pid 5637] umount2("./12/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./12/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./12/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./12") = 0 [pid 5637] mkdir("./13", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5696 attached , child_tidptr=0x55557f25d790) = 15 [pid 5696] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5696] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5696] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5696] chdir("./13") = 0 [pid 5696] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5696] setpgid(0, 0) = 0 [pid 5696] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5696] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5696] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5696] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5696] write(3, "1000", 4) = 4 [pid 5696] close(3) = 0 [pid 5696] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5696] write(1, "executing program\n", 18) = 18 [pid 5696] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5696] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5696] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5696] close(3) = 0 [pid 5696] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5696] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5696] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5696] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5696] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5696] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5696] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5696] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5696] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5696] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5696] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5696] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5696] setns(201, 0) = 0 [pid 5696] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5696] setns(7, 0) = 0 [pid 5696] close(7) = 0 [pid 5696] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5696] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5696] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=15}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5696] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=15}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5696] close(7) = 0 [pid 5696] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5696] close(3) = 0 [pid 5696] close(4) = 0 [pid 5696] close(5) = 0 [pid 5696] close(6) = 0 [pid 5696] close(7) = -1 EBADF (Bad file descriptor) [pid 5696] close(8) = 0 [pid 5696] close(9) = -1 EBADF (Bad file descriptor) [pid 5696] close(10) = -1 EBADF (Bad file descriptor) [pid 5696] close(11) = -1 EBADF (Bad file descriptor) [pid 5696] close(12) = -1 EBADF (Bad file descriptor) [pid 5696] close(13) = -1 EBADF (Bad file descriptor) [pid 5696] close(14) = -1 EBADF (Bad file descriptor) [pid 5696] close(15) = -1 EBADF (Bad file descriptor) [pid 5696] close(16) = -1 EBADF (Bad file descriptor) [pid 5696] close(17) = -1 EBADF (Bad file descriptor) [pid 5696] close(18) = -1 EBADF (Bad file descriptor) [pid 5696] close(19) = -1 EBADF (Bad file descriptor) [pid 5696] close(20) = -1 EBADF (Bad file descriptor) [pid 5696] close(21) = -1 EBADF (Bad file descriptor) [pid 5696] close(22) = -1 EBADF (Bad file descriptor) [pid 5696] close(23) = -1 EBADF (Bad file descriptor) [pid 5696] close(24) = -1 EBADF (Bad file descriptor) [pid 5696] close(25) = -1 EBADF (Bad file descriptor) [pid 5696] close(26) = -1 EBADF (Bad file descriptor) [pid 5696] close(27) = -1 EBADF (Bad file descriptor) [pid 5696] close(28) = -1 EBADF (Bad file descriptor) [pid 5696] close(29) = -1 EBADF (Bad file descriptor) [pid 5696] exit_group(0) = ? [pid 5696] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=15, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./13/binderfs") = 0 [pid 5637] umount2("./13/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./13/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./13/cgroup.net") = 0 [pid 5637] umount2("./13/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./13/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./13/cgroup.cpu") = 0 [pid 5637] umount2("./13/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./13/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./13/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./13") = 0 [pid 5637] mkdir("./14", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5700 attached , child_tidptr=0x55557f25d790) = 16 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 5700] set_robust_list(0x55557f25d7a0, 24 [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5700] <... set_robust_list resumed>) = 0 [pid 5700] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5700] chdir("./14") = 0 [pid 5700] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5700] setpgid(0, 0) = 0 [pid 5700] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5700] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5700] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5700] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5700] write(3, "1000", 4) = 4 [pid 5700] close(3) = 0 [pid 5700] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5700] write(1, "executing program\n", 18) = 18 [pid 5700] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5700] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5700] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5700] close(3) = 0 [pid 5700] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5700] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5700] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5700] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5700] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5700] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5700] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5700] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5700] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5700] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5700] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5700] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5700] setns(201, 0) = 0 [pid 5700] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5700] setns(7, 0) = 0 [pid 5700] close(7) = 0 [pid 5700] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5700] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5700] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=16}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5700] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=16}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5700] close(7) = 0 [pid 5700] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5700] close(3) = 0 [pid 5700] close(4) = 0 [pid 5700] close(5) = 0 [pid 5700] close(6) = 0 [pid 5700] close(7) = -1 EBADF (Bad file descriptor) [pid 5700] close(8) = 0 [pid 5700] close(9) = -1 EBADF (Bad file descriptor) [pid 5700] close(10) = -1 EBADF (Bad file descriptor) [pid 5700] close(11) = -1 EBADF (Bad file descriptor) [pid 5700] close(12) = -1 EBADF (Bad file descriptor) [pid 5700] close(13) = -1 EBADF (Bad file descriptor) [pid 5700] close(14) = -1 EBADF (Bad file descriptor) [pid 5700] close(15) = -1 EBADF (Bad file descriptor) [pid 5700] close(16) = -1 EBADF (Bad file descriptor) [pid 5700] close(17) = -1 EBADF (Bad file descriptor) [pid 5700] close(18) = -1 EBADF (Bad file descriptor) [pid 5700] close(19) = -1 EBADF (Bad file descriptor) [pid 5700] close(20) = -1 EBADF (Bad file descriptor) [pid 5700] close(21) = -1 EBADF (Bad file descriptor) [pid 5700] close(22) = -1 EBADF (Bad file descriptor) [pid 5700] close(23) = -1 EBADF (Bad file descriptor) [pid 5700] close(24) = -1 EBADF (Bad file descriptor) [pid 5700] close(25) = -1 EBADF (Bad file descriptor) [pid 5700] close(26) = -1 EBADF (Bad file descriptor) [pid 5700] close(27) = -1 EBADF (Bad file descriptor) [pid 5700] close(28) = -1 EBADF (Bad file descriptor) [pid 5700] close(29) = -1 EBADF (Bad file descriptor) [pid 5700] exit_group(0) = ? [pid 5700] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=16, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./14/binderfs") = 0 [pid 5637] umount2("./14/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./14/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./14/cgroup.net") = 0 [pid 5637] umount2("./14/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./14/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./14/cgroup.cpu") = 0 [pid 5637] umount2("./14/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./14/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./14/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./14") = 0 [pid 5637] mkdir("./15", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5704 attached , child_tidptr=0x55557f25d790) = 17 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 5704] set_robust_list(0x55557f25d7a0, 24 [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5704] <... set_robust_list resumed>) = 0 [pid 5704] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5704] chdir("./15") = 0 [pid 5704] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5704] setpgid(0, 0) = 0 [pid 5704] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5704] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5704] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5704] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5704] write(3, "1000", 4) = 4 [pid 5704] close(3) = 0 [pid 5704] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5704] write(1, "executing program\n", 18) = 18 [pid 5704] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5704] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) executing program [pid 5704] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5704] close(3) = 0 [pid 5704] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5704] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5704] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5704] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5704] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5704] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5704] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5704] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5704] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5704] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5704] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5704] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5704] setns(201, 0) = 0 [pid 5704] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5704] setns(7, 0) = 0 [pid 5704] close(7) = 0 [pid 5704] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5704] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5704] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=17}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5704] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=17}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5704] close(7) = 0 [pid 5704] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5704] close(3) = 0 [pid 5704] close(4) = 0 [pid 5704] close(5) = 0 [pid 5704] close(6) = 0 [pid 5704] close(7) = -1 EBADF (Bad file descriptor) [pid 5704] close(8) = 0 [pid 5704] close(9) = -1 EBADF (Bad file descriptor) [pid 5704] close(10) = -1 EBADF (Bad file descriptor) [pid 5704] close(11) = -1 EBADF (Bad file descriptor) [pid 5704] close(12) = -1 EBADF (Bad file descriptor) [pid 5704] close(13) = -1 EBADF (Bad file descriptor) [pid 5704] close(14) = -1 EBADF (Bad file descriptor) [pid 5704] close(15) = -1 EBADF (Bad file descriptor) [pid 5704] close(16) = -1 EBADF (Bad file descriptor) [pid 5704] close(17) = -1 EBADF (Bad file descriptor) [pid 5704] close(18) = -1 EBADF (Bad file descriptor) [pid 5704] close(19) = -1 EBADF (Bad file descriptor) [pid 5704] close(20) = -1 EBADF (Bad file descriptor) [pid 5704] close(21) = -1 EBADF (Bad file descriptor) [pid 5704] close(22) = -1 EBADF (Bad file descriptor) [pid 5704] close(23) = -1 EBADF (Bad file descriptor) [pid 5704] close(24) = -1 EBADF (Bad file descriptor) [pid 5704] close(25) = -1 EBADF (Bad file descriptor) [pid 5704] close(26) = -1 EBADF (Bad file descriptor) [pid 5704] close(27) = -1 EBADF (Bad file descriptor) [pid 5704] close(28) = -1 EBADF (Bad file descriptor) [pid 5704] close(29) = -1 EBADF (Bad file descriptor) [pid 5704] exit_group(0) = ? [pid 5704] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=17, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5637] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./15/binderfs") = 0 [pid 5637] umount2("./15/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./15/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./15/cgroup.net") = 0 [pid 5637] umount2("./15/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./15/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./15/cgroup.cpu") = 0 [pid 5637] umount2("./15/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./15/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./15/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./15") = 0 [pid 5637] mkdir("./16", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5710 attached [pid 5710] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5710] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5637] <... clone resumed>, child_tidptr=0x55557f25d790) = 18 [pid 5710] chdir("./16" [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5710] <... chdir resumed>) = 0 [pid 5710] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5710] setpgid(0, 0) = 0 [pid 5710] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5710] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5710] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5710] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5710] write(3, "1000", 4) = 4 [pid 5710] close(3) = 0 [pid 5710] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5710] write(1, "executing program\n", 18) = 18 [pid 5710] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5710] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5710] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5710] close(3) = 0 [pid 5710] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5710] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5710] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5710] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5710] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5710] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5710] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5710] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5710] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5710] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5710] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5710] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5710] setns(201, 0) = 0 [pid 5710] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5710] setns(7, 0) = 0 [pid 5710] close(7) = 0 [pid 5710] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5710] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5710] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=18}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5710] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=18}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5710] close(7) = 0 [pid 5710] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5710] close(3) = 0 [pid 5710] close(4) = 0 [pid 5710] close(5) = 0 [pid 5710] close(6) = 0 [pid 5710] close(7) = -1 EBADF (Bad file descriptor) [pid 5710] close(8) = 0 [pid 5710] close(9) = -1 EBADF (Bad file descriptor) [pid 5710] close(10) = -1 EBADF (Bad file descriptor) [pid 5710] close(11) = -1 EBADF (Bad file descriptor) [pid 5710] close(12) = -1 EBADF (Bad file descriptor) [pid 5710] close(13) = -1 EBADF (Bad file descriptor) [pid 5710] close(14) = -1 EBADF (Bad file descriptor) [pid 5710] close(15) = -1 EBADF (Bad file descriptor) [pid 5710] close(16) = -1 EBADF (Bad file descriptor) [pid 5710] close(17) = -1 EBADF (Bad file descriptor) [pid 5710] close(18) = -1 EBADF (Bad file descriptor) [pid 5710] close(19) = -1 EBADF (Bad file descriptor) [pid 5710] close(20) = -1 EBADF (Bad file descriptor) [pid 5710] close(21) = -1 EBADF (Bad file descriptor) [pid 5710] close(22) = -1 EBADF (Bad file descriptor) [pid 5710] close(23) = -1 EBADF (Bad file descriptor) [pid 5710] close(24) = -1 EBADF (Bad file descriptor) [pid 5710] close(25) = -1 EBADF (Bad file descriptor) [pid 5710] close(26) = -1 EBADF (Bad file descriptor) [pid 5710] close(27) = -1 EBADF (Bad file descriptor) [pid 5710] close(28) = -1 EBADF (Bad file descriptor) [pid 5710] close(29) = -1 EBADF (Bad file descriptor) [pid 5710] exit_group(0) = ? [pid 5710] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=18, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./16/binderfs") = 0 [pid 5637] umount2("./16/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./16/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./16/cgroup.net") = 0 [pid 5637] umount2("./16/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./16/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./16/cgroup.cpu") = 0 [pid 5637] umount2("./16/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./16/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./16/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./16") = 0 [pid 5637] mkdir("./17", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5714 attached , child_tidptr=0x55557f25d790) = 19 [pid 5714] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5714] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5714] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5714] chdir("./17") = 0 [pid 5714] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5714] setpgid(0, 0) = 0 [pid 5714] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5714] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5714] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5714] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5714] write(3, "1000", 4) = 4 [pid 5714] close(3) = 0 [pid 5714] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5714] write(1, "executing program\n", 18) = 18 [pid 5714] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5714] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5714] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5714] close(3) = 0 [pid 5714] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5714] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5714] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5714] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5714] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5714] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5714] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5714] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5714] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5714] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5714] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5714] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5714] setns(201, 0) = 0 [pid 5714] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5714] setns(7, 0) = 0 [pid 5714] close(7) = 0 [pid 5714] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5714] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5714] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=19}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5714] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=19}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5714] close(7) = 0 [pid 5714] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5714] close(3) = 0 [pid 5714] close(4) = 0 [pid 5714] close(5) = 0 [pid 5714] close(6) = 0 [pid 5714] close(7) = -1 EBADF (Bad file descriptor) [pid 5714] close(8) = 0 [pid 5714] close(9) = -1 EBADF (Bad file descriptor) [pid 5714] close(10) = -1 EBADF (Bad file descriptor) [pid 5714] close(11) = -1 EBADF (Bad file descriptor) [pid 5714] close(12) = -1 EBADF (Bad file descriptor) [pid 5714] close(13) = -1 EBADF (Bad file descriptor) [pid 5714] close(14) = -1 EBADF (Bad file descriptor) [pid 5714] close(15) = -1 EBADF (Bad file descriptor) [pid 5714] close(16) = -1 EBADF (Bad file descriptor) [pid 5714] close(17) = -1 EBADF (Bad file descriptor) [pid 5714] close(18) = -1 EBADF (Bad file descriptor) [pid 5714] close(19) = -1 EBADF (Bad file descriptor) [pid 5714] close(20) = -1 EBADF (Bad file descriptor) [pid 5714] close(21) = -1 EBADF (Bad file descriptor) [pid 5714] close(22) = -1 EBADF (Bad file descriptor) [pid 5714] close(23) = -1 EBADF (Bad file descriptor) [pid 5714] close(24) = -1 EBADF (Bad file descriptor) [pid 5714] close(25) = -1 EBADF (Bad file descriptor) [pid 5714] close(26) = -1 EBADF (Bad file descriptor) [pid 5714] close(27) = -1 EBADF (Bad file descriptor) [pid 5714] close(28) = -1 EBADF (Bad file descriptor) [pid 5714] close(29) = -1 EBADF (Bad file descriptor) [pid 5714] exit_group(0) = ? [pid 5714] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=19, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./17/binderfs") = 0 [pid 5637] umount2("./17/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./17/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./17/cgroup.net") = 0 [pid 5637] umount2("./17/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./17/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./17/cgroup.cpu") = 0 [pid 5637] umount2("./17/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./17/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./17/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./17") = 0 [pid 5637] mkdir("./18", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5718 attached , child_tidptr=0x55557f25d790) = 20 [pid 5718] set_robust_list(0x55557f25d7a0, 24 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 5718] <... set_robust_list resumed>) = 0 [pid 5718] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5718] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5718] chdir("./18") = 0 [pid 5718] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5718] setpgid(0, 0) = 0 [pid 5718] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5718] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5718] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5718] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5718] write(3, "1000", 4) = 4 [pid 5718] close(3) = 0 [pid 5718] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5718] write(1, "executing program\n", 18) = 18 [pid 5718] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) executing program [pid 5718] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5718] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5718] close(3) = 0 [pid 5718] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5718] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5718] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5718] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5718] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5718] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5718] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5718] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5718] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5718] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5718] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5718] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5718] setns(201, 0) = 0 [pid 5718] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5718] setns(7, 0) = 0 [pid 5718] close(7) = 0 [pid 5718] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5718] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5718] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=20}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5718] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=20}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5718] close(7) = 0 [pid 5718] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5718] close(3) = 0 [pid 5718] close(4) = 0 [pid 5718] close(5) = 0 [pid 5718] close(6) = 0 [ 98.300576][ T5718] __nla_validate_parse: 8 callbacks suppressed [ 98.300595][ T5718] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 5718] close(7) = -1 EBADF (Bad file descriptor) [pid 5718] close(8) = 0 [pid 5718] close(9) = -1 EBADF (Bad file descriptor) [pid 5718] close(10) = -1 EBADF (Bad file descriptor) [pid 5718] close(11) = -1 EBADF (Bad file descriptor) [pid 5718] close(12) = -1 EBADF (Bad file descriptor) [pid 5718] close(13) = -1 EBADF (Bad file descriptor) [pid 5718] close(14) = -1 EBADF (Bad file descriptor) [pid 5718] close(15) = -1 EBADF (Bad file descriptor) [pid 5718] close(16) = -1 EBADF (Bad file descriptor) [pid 5718] close(17) = -1 EBADF (Bad file descriptor) [pid 5718] close(18) = -1 EBADF (Bad file descriptor) [pid 5718] close(19) = -1 EBADF (Bad file descriptor) [pid 5718] close(20) = -1 EBADF (Bad file descriptor) [pid 5718] close(21) = -1 EBADF (Bad file descriptor) [pid 5718] close(22) = -1 EBADF (Bad file descriptor) [pid 5718] close(23) = -1 EBADF (Bad file descriptor) [pid 5718] close(24) = -1 EBADF (Bad file descriptor) [pid 5718] close(25) = -1 EBADF (Bad file descriptor) [pid 5718] close(26) = -1 EBADF (Bad file descriptor) [pid 5718] close(27) = -1 EBADF (Bad file descriptor) [pid 5718] close(28) = -1 EBADF (Bad file descriptor) [pid 5718] close(29) = -1 EBADF (Bad file descriptor) [pid 5718] exit_group(0) = ? [pid 5718] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=20, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5637] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./18/binderfs") = 0 [pid 5637] umount2("./18/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./18/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./18/cgroup.net") = 0 [pid 5637] umount2("./18/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./18/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./18/cgroup.cpu") = 0 [pid 5637] umount2("./18/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./18/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./18/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./18") = 0 [pid 5637] mkdir("./19", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5724 attached , child_tidptr=0x55557f25d790) = 21 [pid 5724] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5724] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5724] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5724] chdir("./19") = 0 [pid 5724] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 98.439290][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 5724] setpgid(0, 0) = 0 [pid 5724] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5724] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5724] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5724] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5724] write(3, "1000", 4) = 4 [pid 5724] close(3) = 0 [pid 5724] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5724] write(1, "executing program\n", 18) = 18 executing program [pid 5724] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5724] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5724] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5724] close(3) = 0 [pid 5724] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5724] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5724] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5724] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5724] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5724] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5724] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5724] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5724] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5724] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5724] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5724] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5724] setns(201, 0) = 0 [pid 5724] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5724] setns(7, 0) = 0 [pid 5724] close(7) = 0 [pid 5724] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5724] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5724] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=21}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5724] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=21}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5724] close(7) = 0 [pid 5724] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5724] close(3) = 0 [pid 5724] close(4) = 0 [pid 5724] close(5) = 0 [pid 5724] close(6) = 0 [pid 5724] close(7) = -1 EBADF (Bad file descriptor) [pid 5724] close(8) = 0 [ 98.548348][ T5724] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 5724] close(9) = -1 EBADF (Bad file descriptor) [pid 5724] close(10) = -1 EBADF (Bad file descriptor) [pid 5724] close(11) = -1 EBADF (Bad file descriptor) [pid 5724] close(12) = -1 EBADF (Bad file descriptor) [pid 5724] close(13) = -1 EBADF (Bad file descriptor) [pid 5724] close(14) = -1 EBADF (Bad file descriptor) [pid 5724] close(15) = -1 EBADF (Bad file descriptor) [pid 5724] close(16) = -1 EBADF (Bad file descriptor) [pid 5724] close(17) = -1 EBADF (Bad file descriptor) [pid 5724] close(18) = -1 EBADF (Bad file descriptor) [pid 5724] close(19) = -1 EBADF (Bad file descriptor) [pid 5724] close(20) = -1 EBADF (Bad file descriptor) [pid 5724] close(21) = -1 EBADF (Bad file descriptor) [pid 5724] close(22) = -1 EBADF (Bad file descriptor) [pid 5724] close(23) = -1 EBADF (Bad file descriptor) [pid 5724] close(24) = -1 EBADF (Bad file descriptor) [pid 5724] close(25) = -1 EBADF (Bad file descriptor) [pid 5724] close(26) = -1 EBADF (Bad file descriptor) [pid 5724] close(27) = -1 EBADF (Bad file descriptor) [pid 5724] close(28) = -1 EBADF (Bad file descriptor) [pid 5724] close(29) = -1 EBADF (Bad file descriptor) [pid 5724] exit_group(0) = ? [pid 5724] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=21, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./19/binderfs") = 0 [pid 5637] umount2("./19/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./19/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 98.634636][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 5637] unlink("./19/cgroup.net") = 0 [pid 5637] umount2("./19/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./19/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./19/cgroup.cpu") = 0 [pid 5637] umount2("./19/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./19/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./19/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./19") = 0 [pid 5637] mkdir("./20", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5728 attached [pid 5728] set_robust_list(0x55557f25d7a0, 24 [pid 5637] <... clone resumed>, child_tidptr=0x55557f25d790) = 22 [pid 5728] <... set_robust_list resumed>) = 0 [pid 5728] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 5728] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5728] chdir("./20" [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5728] <... chdir resumed>) = 0 [pid 5728] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5728] setpgid(0, 0) = 0 [pid 5728] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5728] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5728] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5728] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5728] write(3, "1000", 4) = 4 [pid 5728] close(3) = 0 [pid 5728] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5728] write(1, "executing program\n", 18) = 18 executing program [pid 5728] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5728] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5728] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5728] close(3) = 0 [pid 5728] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5728] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5728] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5728] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5728] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5728] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5728] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5728] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5728] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5728] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5728] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5728] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5728] setns(201, 0) = 0 [pid 5728] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5728] setns(7, 0) = 0 [pid 5728] close(7) = 0 [pid 5728] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5728] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5728] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=22}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5728] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=22}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5728] close(7) = 0 [pid 5728] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5728] close(3) = 0 [pid 5728] close(4) = 0 [pid 5728] close(5) = 0 [pid 5728] close(6) = 0 [pid 5728] close(7) = -1 EBADF (Bad file descriptor) [pid 5728] close(8) = 0 [pid 5728] close(9) = -1 EBADF (Bad file descriptor) [pid 5728] close(10) = -1 EBADF (Bad file descriptor) [pid 5728] close(11) = -1 EBADF (Bad file descriptor) [pid 5728] close(12) = -1 EBADF (Bad file descriptor) [pid 5728] close(13) = -1 EBADF (Bad file descriptor) [pid 5728] close(14) = -1 EBADF (Bad file descriptor) [pid 5728] close(15) = -1 EBADF (Bad file descriptor) [pid 5728] close(16) = -1 EBADF (Bad file descriptor) [pid 5728] close(17) = -1 EBADF (Bad file descriptor) [pid 5728] close(18) = -1 EBADF (Bad file descriptor) [pid 5728] close(19) = -1 EBADF (Bad file descriptor) [pid 5728] close(20) = -1 EBADF (Bad file descriptor) [pid 5728] close(21) = -1 EBADF (Bad file descriptor) [ 98.880983][ T5728] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 5728] close(22) = -1 EBADF (Bad file descriptor) [pid 5728] close(23) = -1 EBADF (Bad file descriptor) [pid 5728] close(24) = -1 EBADF (Bad file descriptor) [pid 5728] close(25) = -1 EBADF (Bad file descriptor) [pid 5728] close(26) = -1 EBADF (Bad file descriptor) [pid 5728] close(27) = -1 EBADF (Bad file descriptor) [pid 5728] close(28) = -1 EBADF (Bad file descriptor) [pid 5728] close(29) = -1 EBADF (Bad file descriptor) [pid 5728] exit_group(0) = ? [pid 5728] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=22, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./20/binderfs") = 0 [pid 5637] umount2("./20/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./20/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./20/cgroup.net") = 0 [ 98.960825][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 5637] umount2("./20/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./20/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./20/cgroup.cpu") = 0 [pid 5637] umount2("./20/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./20/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./20/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./20") = 0 [pid 5637] mkdir("./21", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5732 attached [pid 5732] set_robust_list(0x55557f25d7a0, 24 [pid 5637] <... clone resumed>, child_tidptr=0x55557f25d790) = 23 [pid 5732] <... set_robust_list resumed>) = 0 [pid 5732] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 5732] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5732] chdir("./21") = 0 [pid 5732] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5732] setpgid(0, 0) = 0 [pid 5732] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5732] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5732] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5732] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5732] write(3, "1000", 4) = 4 [pid 5732] close(3) = 0 [pid 5732] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5732] write(1, "executing program\n", 18) = 18 [pid 5732] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) executing program [pid 5732] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5732] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5732] close(3) = 0 [pid 5732] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5732] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5732] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5732] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5732] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5732] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5732] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5732] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5732] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5732] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5732] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5732] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5732] setns(201, 0) = 0 [pid 5732] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5732] setns(7, 0) = 0 [pid 5732] close(7) = 0 [pid 5732] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5732] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5732] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=23}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5732] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=23}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5732] close(7) = 0 [pid 5732] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5732] close(3) = 0 [pid 5732] close(4) = 0 [pid 5732] close(5) = 0 [pid 5732] close(6) = 0 [pid 5732] close(7) = -1 EBADF (Bad file descriptor) [pid 5732] close(8) = 0 [pid 5732] close(9) = -1 EBADF (Bad file descriptor) [pid 5732] close(10) = -1 EBADF (Bad file descriptor) [pid 5732] close(11) = -1 EBADF (Bad file descriptor) [pid 5732] close(12) = -1 EBADF (Bad file descriptor) [pid 5732] close(13) = -1 EBADF (Bad file descriptor) [pid 5732] close(14) = -1 EBADF (Bad file descriptor) [pid 5732] close(15) = -1 EBADF (Bad file descriptor) [pid 5732] close(16) = -1 EBADF (Bad file descriptor) [pid 5732] close(17) = -1 EBADF (Bad file descriptor) [pid 5732] close(18) = -1 EBADF (Bad file descriptor) [pid 5732] close(19) = -1 EBADF (Bad file descriptor) [pid 5732] close(20) = -1 EBADF (Bad file descriptor) [pid 5732] close(21) = -1 EBADF (Bad file descriptor) [ 99.164325][ T5732] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 5732] close(22) = -1 EBADF (Bad file descriptor) [pid 5732] close(23) = -1 EBADF (Bad file descriptor) [pid 5732] close(24) = -1 EBADF (Bad file descriptor) [pid 5732] close(25) = -1 EBADF (Bad file descriptor) [pid 5732] close(26) = -1 EBADF (Bad file descriptor) [pid 5732] close(27) = -1 EBADF (Bad file descriptor) [pid 5732] close(28) = -1 EBADF (Bad file descriptor) [pid 5732] close(29) = -1 EBADF (Bad file descriptor) [pid 5732] exit_group(0) = ? [pid 5732] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=23, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./21", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 99.237820][ T5630] udevd[5630]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 99.242563][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./21/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./21/binderfs") = 0 [pid 5637] umount2("./21/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./21/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./21/cgroup.net") = 0 [pid 5637] umount2("./21/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./21/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./21/cgroup.cpu") = 0 [pid 5637] umount2("./21/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./21/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./21/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./21") = 0 [pid 5637] mkdir("./22", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5736 attached , child_tidptr=0x55557f25d790) = 24 [pid 5736] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5736] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 5736] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5736] chdir("./22") = 0 [pid 5736] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5736] setpgid(0, 0) = 0 [pid 5736] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5736] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5736] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5736] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5736] write(3, "1000", 4) = 4 [pid 5736] close(3) = 0 [pid 5736] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5736] write(1, "executing program\n", 18) = 18 [pid 5736] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) executing program [pid 5736] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5736] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5736] close(3) = 0 [pid 5736] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5736] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5736] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5736] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5736] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5736] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5736] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5736] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5736] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5736] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5736] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5736] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5736] setns(201, 0) = 0 [pid 5736] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5736] setns(7, 0) = 0 [pid 5736] close(7) = 0 [pid 5736] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5736] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5736] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=24}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5736] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=24}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5736] close(7) = 0 [pid 5736] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5736] close(3) = 0 [pid 5736] close(4) = 0 [pid 5736] close(5) = 0 [pid 5736] close(6) = 0 [pid 5736] close(7) = -1 EBADF (Bad file descriptor) [pid 5736] close(8) = 0 [pid 5736] close(9) = -1 EBADF (Bad file descriptor) [pid 5736] close(10) = -1 EBADF (Bad file descriptor) [pid 5736] close(11) = -1 EBADF (Bad file descriptor) [pid 5736] close(12) = -1 EBADF (Bad file descriptor) [pid 5736] close(13) = -1 EBADF (Bad file descriptor) [pid 5736] close(14) = -1 EBADF (Bad file descriptor) [pid 5736] close(15) = -1 EBADF (Bad file descriptor) [pid 5736] close(16) = -1 EBADF (Bad file descriptor) [pid 5736] close(17) = -1 EBADF (Bad file descriptor) [pid 5736] close(18) = -1 EBADF (Bad file descriptor) [pid 5736] close(19) = -1 EBADF (Bad file descriptor) [pid 5736] close(20) = -1 EBADF (Bad file descriptor) [pid 5736] close(21) = -1 EBADF (Bad file descriptor) [pid 5736] close(22) = -1 EBADF (Bad file descriptor) [pid 5736] close(23) = -1 EBADF (Bad file descriptor) [pid 5736] close(24) = -1 EBADF (Bad file descriptor) [pid 5736] close(25) = -1 EBADF (Bad file descriptor) [pid 5736] close(26) = -1 EBADF (Bad file descriptor) [pid 5736] close(27) = -1 EBADF (Bad file descriptor) [pid 5736] close(28) = -1 EBADF (Bad file descriptor) [pid 5736] close(29) = -1 EBADF (Bad file descriptor) [pid 5736] exit_group(0) = ? [pid 5736] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=24, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [ 99.410179][ T5736] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 5637] umount2("./22", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./22/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./22/binderfs") = 0 [pid 5637] umount2("./22/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./22/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./22/cgroup.net") = 0 [ 99.485826][ T5630] udevd[5630]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 99.491365][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 5637] umount2("./22/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./22/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./22/cgroup.cpu") = 0 [pid 5637] umount2("./22/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./22/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./22/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./22") = 0 [pid 5637] mkdir("./23", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5740 attached , child_tidptr=0x55557f25d790) = 25 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 5740] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5740] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5740] chdir("./23") = 0 [pid 5740] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5740] setpgid(0, 0) = 0 [pid 5740] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5740] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5740] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5740] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5740] write(3, "1000", 4) = 4 [pid 5740] close(3) = 0 [pid 5740] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5740] write(1, "executing program\n", 18) = 18 executing program [pid 5740] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5740] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5740] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5740] close(3) = 0 [pid 5740] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5740] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5740] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5740] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5740] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5740] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5740] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5740] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5740] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5740] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5740] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5740] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5740] setns(201, 0) = 0 [pid 5740] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5740] setns(7, 0) = 0 [pid 5740] close(7) = 0 [pid 5740] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5740] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5740] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=25}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5740] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=25}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5740] close(7) = 0 [pid 5740] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5740] close(3) = 0 [pid 5740] close(4) = 0 [pid 5740] close(5) = 0 [pid 5740] close(6) = 0 [pid 5740] close(7) = -1 EBADF (Bad file descriptor) [pid 5740] close(8) = 0 [pid 5740] close(9) = -1 EBADF (Bad file descriptor) [pid 5740] close(10) = -1 EBADF (Bad file descriptor) [pid 5740] close(11) = -1 EBADF (Bad file descriptor) [pid 5740] close(12) = -1 EBADF (Bad file descriptor) [pid 5740] close(13) = -1 EBADF (Bad file descriptor) [pid 5740] close(14) = -1 EBADF (Bad file descriptor) [pid 5740] close(15) = -1 EBADF (Bad file descriptor) [pid 5740] close(16) = -1 EBADF (Bad file descriptor) [pid 5740] close(17) = -1 EBADF (Bad file descriptor) [pid 5740] close(18) = -1 EBADF (Bad file descriptor) [pid 5740] close(19) = -1 EBADF (Bad file descriptor) [pid 5740] close(20) = -1 EBADF (Bad file descriptor) [pid 5740] close(21) = -1 EBADF (Bad file descriptor) [pid 5740] close(22) = -1 EBADF (Bad file descriptor) [pid 5740] close(23) = -1 EBADF (Bad file descriptor) [pid 5740] close(24) = -1 EBADF (Bad file descriptor) [pid 5740] close(25) = -1 EBADF (Bad file descriptor) [pid 5740] close(26) = -1 EBADF (Bad file descriptor) [pid 5740] close(27) = -1 EBADF (Bad file descriptor) [pid 5740] close(28) = -1 EBADF (Bad file descriptor) [ 99.738477][ T5740] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 5740] close(29) = -1 EBADF (Bad file descriptor) [pid 5740] exit_group(0) = ? [pid 5740] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=25, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./23", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./23/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./23/binderfs") = 0 [pid 5637] umount2("./23/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./23/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./23/cgroup.net") = 0 [pid 5637] umount2("./23/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./23/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./23/cgroup.cpu") = 0 [pid 5637] umount2("./23/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./23/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./23/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./23") = 0 [pid 5637] mkdir("./24", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5744 attached , child_tidptr=0x55557f25d790) = 26 [pid 5744] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5744] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5744] <... rt_sigprocmask resumed>, NULL, 8) = 0 [ 99.827820][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 5744] chdir("./24") = 0 [pid 5744] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5744] setpgid(0, 0) = 0 [pid 5744] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5744] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5744] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5744] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5744] write(3, "1000", 4) = 4 [pid 5744] close(3) = 0 [pid 5744] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5744] write(1, "executing program\n", 18) = 18 [pid 5744] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5744] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5744] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5744] close(3) = 0 [pid 5744] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5744] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5744] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5744] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5744] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5744] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5744] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5744] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5744] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5744] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5744] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5744] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5744] setns(201, 0) = 0 [pid 5744] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5744] setns(7, 0) = 0 [pid 5744] close(7) = 0 [pid 5744] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5744] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5744] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=26}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5744] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=26}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5744] close(7) = 0 [pid 5744] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5744] close(3) = 0 [pid 5744] close(4) = 0 [pid 5744] close(5) = 0 [pid 5744] close(6) = 0 [pid 5744] close(7) = -1 EBADF (Bad file descriptor) [pid 5744] close(8) = 0 [pid 5744] close(9) = -1 EBADF (Bad file descriptor) [pid 5744] close(10) = -1 EBADF (Bad file descriptor) [pid 5744] close(11) = -1 EBADF (Bad file descriptor) [pid 5744] close(12) = -1 EBADF (Bad file descriptor) [pid 5744] close(13) = -1 EBADF (Bad file descriptor) [pid 5744] close(14) = -1 EBADF (Bad file descriptor) [pid 5744] close(15) = -1 EBADF (Bad file descriptor) [pid 5744] close(16) = -1 EBADF (Bad file descriptor) [pid 5744] close(17) = -1 EBADF (Bad file descriptor) [pid 5744] close(18) = -1 EBADF (Bad file descriptor) [pid 5744] close(19) = -1 EBADF (Bad file descriptor) [pid 5744] close(20) = -1 EBADF (Bad file descriptor) [pid 5744] close(21) = -1 EBADF (Bad file descriptor) [pid 5744] close(22) = -1 EBADF (Bad file descriptor) [pid 5744] close(23) = -1 EBADF (Bad file descriptor) [pid 5744] close(24) = -1 EBADF (Bad file descriptor) [pid 5744] close(25) = -1 EBADF (Bad file descriptor) [ 99.972005][ T5744] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 5744] close(26) = -1 EBADF (Bad file descriptor) [pid 5744] close(27) = -1 EBADF (Bad file descriptor) [pid 5744] close(28) = -1 EBADF (Bad file descriptor) [pid 5744] close(29) = -1 EBADF (Bad file descriptor) [pid 5744] exit_group(0) = ? [pid 5744] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=26, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./24", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./24/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 100.055966][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 5637] newfstatat(AT_FDCWD, "./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./24/binderfs") = 0 [pid 5637] umount2("./24/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./24/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./24/cgroup.net") = 0 [pid 5637] umount2("./24/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./24/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./24/cgroup.cpu") = 0 [pid 5637] umount2("./24/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./24/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./24/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./24") = 0 [pid 5637] mkdir("./25", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5748 attached , child_tidptr=0x55557f25d790) = 27 [pid 5748] set_robust_list(0x55557f25d7a0, 24 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 5748] <... set_robust_list resumed>) = 0 [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5748] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5748] chdir("./25") = 0 [pid 5748] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5748] setpgid(0, 0) = 0 [pid 5748] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5748] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5748] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5748] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5748] write(3, "1000", 4) = 4 [pid 5748] close(3) = 0 [pid 5748] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5748] write(1, "executing program\n", 18) = 18 executing program [pid 5748] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5748] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5748] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5748] close(3) = 0 [pid 5748] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5748] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5748] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5748] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5748] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5748] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5748] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5748] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5748] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5748] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5748] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5748] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5748] setns(201, 0) = 0 [pid 5748] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5748] setns(7, 0) = 0 [pid 5748] close(7) = 0 [pid 5748] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5748] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5748] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=27}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5748] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=27}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5748] close(7) = 0 [pid 5748] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5748] close(3) = 0 [pid 5748] close(4) = 0 [pid 5748] close(5) = 0 [pid 5748] close(6) = 0 [pid 5748] close(7) = -1 EBADF (Bad file descriptor) [pid 5748] close(8) = 0 [pid 5748] close(9) = -1 EBADF (Bad file descriptor) [pid 5748] close(10) = -1 EBADF (Bad file descriptor) [pid 5748] close(11) = -1 EBADF (Bad file descriptor) [pid 5748] close(12) = -1 EBADF (Bad file descriptor) [pid 5748] close(13) = -1 EBADF (Bad file descriptor) [pid 5748] close(14) = -1 EBADF (Bad file descriptor) [pid 5748] close(15) = -1 EBADF (Bad file descriptor) [ 100.205061][ T5748] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 5748] close(16) = -1 EBADF (Bad file descriptor) [pid 5748] close(17) = -1 EBADF (Bad file descriptor) [pid 5748] close(18) = -1 EBADF (Bad file descriptor) [pid 5748] close(19) = -1 EBADF (Bad file descriptor) [pid 5748] close(20) = -1 EBADF (Bad file descriptor) [pid 5748] close(21) = -1 EBADF (Bad file descriptor) [pid 5748] close(22) = -1 EBADF (Bad file descriptor) [pid 5748] close(23) = -1 EBADF (Bad file descriptor) [pid 5748] close(24) = -1 EBADF (Bad file descriptor) [pid 5748] close(25) = -1 EBADF (Bad file descriptor) [pid 5748] close(26) = -1 EBADF (Bad file descriptor) [pid 5748] close(27) = -1 EBADF (Bad file descriptor) [pid 5748] close(28) = -1 EBADF (Bad file descriptor) [pid 5748] close(29) = -1 EBADF (Bad file descriptor) [pid 5748] exit_group(0) = ? [pid 5748] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=27, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./25", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./25/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./25/binderfs") = 0 [pid 5637] umount2("./25/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./25/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./25/cgroup.net") = 0 [pid 5637] umount2("./25/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./25/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./25/cgroup.cpu") = 0 [pid 5637] umount2("./25/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./25/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./25/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./25") = 0 [pid 5637] mkdir("./26", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5754 attached [pid 5754] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5754] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] <... clone resumed>, child_tidptr=0x55557f25d790) = 28 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 5754] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5754] chdir("./26") = 0 [pid 5754] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5754] setpgid(0, 0) = 0 [pid 5754] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5754] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5754] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5754] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5754] write(3, "1000", 4) = 4 [pid 5754] close(3) = 0 [ 100.345859][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 5754] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5754] write(1, "executing program\n", 18) = 18 executing program [pid 5754] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5754] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5754] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5754] close(3) = 0 [pid 5754] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5754] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5754] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5754] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5754] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5754] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5754] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5754] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5754] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5754] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5754] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5754] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5754] setns(201, 0) = 0 [pid 5754] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5754] setns(7, 0) = 0 [pid 5754] close(7) = 0 [pid 5754] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5754] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5754] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=28}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5754] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=28}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5754] close(7) = 0 [pid 5754] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5754] close(3) = 0 [pid 5754] close(4) = 0 [pid 5754] close(5) = 0 [pid 5754] close(6) = 0 [pid 5754] close(7) = -1 EBADF (Bad file descriptor) [pid 5754] close(8) = 0 [pid 5754] close(9) = -1 EBADF (Bad file descriptor) [pid 5754] close(10) = -1 EBADF (Bad file descriptor) [pid 5754] close(11) = -1 EBADF (Bad file descriptor) [pid 5754] close(12) = -1 EBADF (Bad file descriptor) [pid 5754] close(13) = -1 EBADF (Bad file descriptor) [pid 5754] close(14) = -1 EBADF (Bad file descriptor) [pid 5754] close(15) = -1 EBADF (Bad file descriptor) [pid 5754] close(16) = -1 EBADF (Bad file descriptor) [pid 5754] close(17) = -1 EBADF (Bad file descriptor) [pid 5754] close(18) = -1 EBADF (Bad file descriptor) [pid 5754] close(19) = -1 EBADF (Bad file descriptor) [pid 5754] close(20) = -1 EBADF (Bad file descriptor) [pid 5754] close(21) = -1 EBADF (Bad file descriptor) [pid 5754] close(22) = -1 EBADF (Bad file descriptor) [pid 5754] close(23) = -1 EBADF (Bad file descriptor) [pid 5754] close(24) = -1 EBADF (Bad file descriptor) [pid 5754] close(25) = -1 EBADF (Bad file descriptor) [pid 5754] close(26) = -1 EBADF (Bad file descriptor) [pid 5754] close(27) = -1 EBADF (Bad file descriptor) [pid 5754] close(28) = -1 EBADF (Bad file descriptor) [pid 5754] close(29) = -1 EBADF (Bad file descriptor) [pid 5754] exit_group(0) = ? [pid 5754] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=28, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [ 100.434197][ T5754] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 5637] umount2("./26", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./26/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./26/binderfs") = 0 [pid 5637] umount2("./26/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./26/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./26/cgroup.net") = 0 [pid 5637] umount2("./26/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./26/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./26/cgroup.cpu") = 0 [pid 5637] umount2("./26/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./26/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./26/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./26") = 0 [pid 5637] mkdir("./27", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5758 attached , child_tidptr=0x55557f25d790) = 29 [pid 5758] set_robust_list(0x55557f25d7a0, 24 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 5758] <... set_robust_list resumed>) = 0 [pid 5758] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5758] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5758] chdir("./27") = 0 [pid 5758] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5758] setpgid(0, 0) = 0 [pid 5758] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5758] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5758] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5758] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5758] write(3, "1000", 4) = 4 [pid 5758] close(3) = 0 [pid 5758] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5758] write(1, "executing program\n", 18) = 18 [pid 5758] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5758] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5758] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5758] close(3) = 0 [pid 5758] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5758] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5758] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5758] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5758] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5758] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5758] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5758] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5758] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5758] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5758] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5758] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5758] setns(201, 0) = 0 [pid 5758] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5758] setns(7, 0) = 0 [pid 5758] close(7) = 0 [pid 5758] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5758] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5758] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=29}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5758] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=29}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5758] close(7) = 0 [pid 5758] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5758] close(3) = 0 [pid 5758] close(4) = 0 [pid 5758] close(5) = 0 [pid 5758] close(6) = 0 [pid 5758] close(7) = -1 EBADF (Bad file descriptor) [pid 5758] close(8) = 0 [pid 5758] close(9) = -1 EBADF (Bad file descriptor) [ 100.679371][ T5758] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 5758] close(10) = -1 EBADF (Bad file descriptor) [pid 5758] close(11) = -1 EBADF (Bad file descriptor) [pid 5758] close(12) = -1 EBADF (Bad file descriptor) [pid 5758] close(13) = -1 EBADF (Bad file descriptor) [pid 5758] close(14) = -1 EBADF (Bad file descriptor) [pid 5758] close(15) = -1 EBADF (Bad file descriptor) [pid 5758] close(16) = -1 EBADF (Bad file descriptor) [pid 5758] close(17) = -1 EBADF (Bad file descriptor) [pid 5758] close(18) = -1 EBADF (Bad file descriptor) [pid 5758] close(19) = -1 EBADF (Bad file descriptor) [pid 5758] close(20) = -1 EBADF (Bad file descriptor) [pid 5758] close(21) = -1 EBADF (Bad file descriptor) [pid 5758] close(22) = -1 EBADF (Bad file descriptor) [pid 5758] close(23) = -1 EBADF (Bad file descriptor) [pid 5758] close(24) = -1 EBADF (Bad file descriptor) [pid 5758] close(25) = -1 EBADF (Bad file descriptor) [pid 5758] close(26) = -1 EBADF (Bad file descriptor) [pid 5758] close(27) = -1 EBADF (Bad file descriptor) [pid 5758] close(28) = -1 EBADF (Bad file descriptor) [pid 5758] close(29) = -1 EBADF (Bad file descriptor) [pid 5758] exit_group(0) = ? [pid 5758] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=29, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./27", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./27/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./27/binderfs") = 0 [pid 5637] umount2("./27/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./27/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./27/cgroup.net") = 0 [pid 5637] umount2("./27/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./27/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./27/cgroup.cpu") = 0 [pid 5637] umount2("./27/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./27/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./27/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./27") = 0 [pid 5637] mkdir("./28", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5764 attached [pid 5764] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5637] <... clone resumed>, child_tidptr=0x55557f25d790) = 30 [pid 5764] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5764] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5764] chdir("./28") = 0 [pid 5764] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5764] setpgid(0, 0) = 0 [pid 5764] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5764] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5764] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5764] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5764] write(3, "1000", 4) = 4 [pid 5764] close(3) = 0 [pid 5764] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5764] write(1, "executing program\n", 18) = 18 [pid 5764] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5764] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5764] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5764] close(3) = 0 [pid 5764] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5764] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5764] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5764] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5764] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5764] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5764] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5764] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5764] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5764] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5764] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5764] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5764] setns(201, 0) = 0 [pid 5764] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5764] setns(7, 0) = 0 [pid 5764] close(7) = 0 [pid 5764] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5764] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5764] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=30}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5764] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=30}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5764] close(7) = 0 [pid 5764] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5764] close(3) = 0 [pid 5764] close(4) = 0 [pid 5764] close(5) = 0 [pid 5764] close(6) = 0 [pid 5764] close(7) = -1 EBADF (Bad file descriptor) [pid 5764] close(8) = 0 [pid 5764] close(9) = -1 EBADF (Bad file descriptor) [pid 5764] close(10) = -1 EBADF (Bad file descriptor) [pid 5764] close(11) = -1 EBADF (Bad file descriptor) [pid 5764] close(12) = -1 EBADF (Bad file descriptor) [pid 5764] close(13) = -1 EBADF (Bad file descriptor) [pid 5764] close(14) = -1 EBADF (Bad file descriptor) [pid 5764] close(15) = -1 EBADF (Bad file descriptor) [pid 5764] close(16) = -1 EBADF (Bad file descriptor) [pid 5764] close(17) = -1 EBADF (Bad file descriptor) [pid 5764] close(18) = -1 EBADF (Bad file descriptor) [pid 5764] close(19) = -1 EBADF (Bad file descriptor) [pid 5764] close(20) = -1 EBADF (Bad file descriptor) [pid 5764] close(21) = -1 EBADF (Bad file descriptor) [pid 5764] close(22) = -1 EBADF (Bad file descriptor) [pid 5764] close(23) = -1 EBADF (Bad file descriptor) [pid 5764] close(24) = -1 EBADF (Bad file descriptor) [pid 5764] close(25) = -1 EBADF (Bad file descriptor) [pid 5764] close(26) = -1 EBADF (Bad file descriptor) [pid 5764] close(27) = -1 EBADF (Bad file descriptor) [pid 5764] close(28) = -1 EBADF (Bad file descriptor) [pid 5764] close(29) = -1 EBADF (Bad file descriptor) [pid 5764] exit_group(0) = ? [pid 5764] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=30, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./28", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./28/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./28/binderfs") = 0 [pid 5637] umount2("./28/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./28/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./28/cgroup.net") = 0 [pid 5637] umount2("./28/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./28/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./28/cgroup.cpu") = 0 [pid 5637] umount2("./28/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./28/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./28/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./28") = 0 [pid 5637] mkdir("./29", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5770 attached , child_tidptr=0x55557f25d790) = 31 [pid 5770] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 5770] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5770] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5770] chdir("./29") = 0 [pid 5770] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5770] setpgid(0, 0) = 0 [pid 5770] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5770] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5770] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5770] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5770] write(3, "1000", 4) = 4 [pid 5770] close(3) = 0 [pid 5770] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5770] write(1, "executing program\n", 18) = 18 [pid 5770] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5770] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5770] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5770] close(3) = 0 [pid 5770] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5770] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5770] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5770] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5770] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5770] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5770] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5770] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5770] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5770] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5770] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5770] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5770] setns(201, 0) = 0 [pid 5770] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5770] setns(7, 0) = 0 [pid 5770] close(7) = 0 [pid 5770] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5770] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5770] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=31}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5770] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=31}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5770] close(7) = 0 [pid 5770] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5770] close(3) = 0 [pid 5770] close(4) = 0 [pid 5770] close(5) = 0 [pid 5770] close(6) = 0 [pid 5770] close(7) = -1 EBADF (Bad file descriptor) [pid 5770] close(8) = 0 [pid 5770] close(9) = -1 EBADF (Bad file descriptor) [pid 5770] close(10) = -1 EBADF (Bad file descriptor) [pid 5770] close(11) = -1 EBADF (Bad file descriptor) [pid 5770] close(12) = -1 EBADF (Bad file descriptor) [pid 5770] close(13) = -1 EBADF (Bad file descriptor) [pid 5770] close(14) = -1 EBADF (Bad file descriptor) [pid 5770] close(15) = -1 EBADF (Bad file descriptor) [pid 5770] close(16) = -1 EBADF (Bad file descriptor) [pid 5770] close(17) = -1 EBADF (Bad file descriptor) [pid 5770] close(18) = -1 EBADF (Bad file descriptor) [pid 5770] close(19) = -1 EBADF (Bad file descriptor) [pid 5770] close(20) = -1 EBADF (Bad file descriptor) [pid 5770] close(21) = -1 EBADF (Bad file descriptor) [pid 5770] close(22) = -1 EBADF (Bad file descriptor) [pid 5770] close(23) = -1 EBADF (Bad file descriptor) [pid 5770] close(24) = -1 EBADF (Bad file descriptor) [pid 5770] close(25) = -1 EBADF (Bad file descriptor) [pid 5770] close(26) = -1 EBADF (Bad file descriptor) [pid 5770] close(27) = -1 EBADF (Bad file descriptor) [pid 5770] close(28) = -1 EBADF (Bad file descriptor) [pid 5770] close(29) = -1 EBADF (Bad file descriptor) [pid 5770] exit_group(0) = ? [pid 5770] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=31, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./29", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./29/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./29/binderfs") = 0 [pid 5637] umount2("./29/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./29/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./29/cgroup.net") = 0 [pid 5637] umount2("./29/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./29/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./29/cgroup.cpu") = 0 [pid 5637] umount2("./29/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./29/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./29/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./29") = 0 [pid 5637] mkdir("./30", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5774 attached , child_tidptr=0x55557f25d790) = 32 [pid 5774] set_robust_list(0x55557f25d7a0, 24 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 5774] <... set_robust_list resumed>) = 0 [pid 5774] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5774] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5774] chdir("./30") = 0 [pid 5774] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5774] setpgid(0, 0) = 0 [pid 5774] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5774] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5774] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5774] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5774] write(3, "1000", 4) = 4 [pid 5774] close(3) = 0 [pid 5774] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5774] write(1, "executing program\n", 18) = 18 executing program [pid 5774] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5774] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5774] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5774] close(3) = 0 [pid 5774] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5774] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5774] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5774] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5774] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5774] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5774] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5774] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5774] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5774] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5774] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5774] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5774] setns(201, 0) = 0 [pid 5774] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5774] setns(7, 0) = 0 [pid 5774] close(7) = 0 [pid 5774] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5774] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5774] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=32}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5774] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=32}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5774] close(7) = 0 [pid 5774] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5774] close(3) = 0 [pid 5774] close(4) = 0 [pid 5774] close(5) = 0 [pid 5774] close(6) = 0 [pid 5774] close(7) = -1 EBADF (Bad file descriptor) [pid 5774] close(8) = 0 [pid 5774] close(9) = -1 EBADF (Bad file descriptor) [pid 5774] close(10) = -1 EBADF (Bad file descriptor) [pid 5774] close(11) = -1 EBADF (Bad file descriptor) [pid 5774] close(12) = -1 EBADF (Bad file descriptor) [pid 5774] close(13) = -1 EBADF (Bad file descriptor) [pid 5774] close(14) = -1 EBADF (Bad file descriptor) [pid 5774] close(15) = -1 EBADF (Bad file descriptor) [pid 5774] close(16) = -1 EBADF (Bad file descriptor) [pid 5774] close(17) = -1 EBADF (Bad file descriptor) [pid 5774] close(18) = -1 EBADF (Bad file descriptor) [pid 5774] close(19) = -1 EBADF (Bad file descriptor) [pid 5774] close(20) = -1 EBADF (Bad file descriptor) [pid 5774] close(21) = -1 EBADF (Bad file descriptor) [pid 5774] close(22) = -1 EBADF (Bad file descriptor) [pid 5774] close(23) = -1 EBADF (Bad file descriptor) [pid 5774] close(24) = -1 EBADF (Bad file descriptor) [pid 5774] close(25) = -1 EBADF (Bad file descriptor) [pid 5774] close(26) = -1 EBADF (Bad file descriptor) [pid 5774] close(27) = -1 EBADF (Bad file descriptor) [pid 5774] close(28) = -1 EBADF (Bad file descriptor) [pid 5774] close(29) = -1 EBADF (Bad file descriptor) [pid 5774] exit_group(0) = ? [pid 5774] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=32, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5637] umount2("./30", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./30/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./30/binderfs") = 0 [pid 5637] umount2("./30/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./30/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./30/cgroup.net") = 0 [pid 5637] umount2("./30/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./30/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./30/cgroup.cpu") = 0 [pid 5637] umount2("./30/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./30/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./30/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./30") = 0 [pid 5637] mkdir("./31", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5780 attached , child_tidptr=0x55557f25d790) = 33 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 5780] set_robust_list(0x55557f25d7a0, 24 [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5780] <... set_robust_list resumed>) = 0 [pid 5780] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5780] chdir("./31") = 0 [pid 5780] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5780] setpgid(0, 0) = 0 [pid 5780] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5780] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5780] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5780] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5780] write(3, "1000", 4) = 4 [pid 5780] close(3) = 0 [pid 5780] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5780] write(1, "executing program\n", 18) = 18 [pid 5780] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) executing program [pid 5780] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5780] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5780] close(3) = 0 [pid 5780] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5780] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5780] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5780] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5780] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5780] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5780] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5780] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5780] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5780] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5780] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5780] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5780] setns(201, 0) = 0 [pid 5780] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5780] setns(7, 0) = 0 [pid 5780] close(7) = 0 [pid 5780] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5780] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5780] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=33}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5780] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=33}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5780] close(7) = 0 [pid 5780] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5780] close(3) = 0 [pid 5780] close(4) = 0 [pid 5780] close(5) = 0 [pid 5780] close(6) = 0 [pid 5780] close(7) = -1 EBADF (Bad file descriptor) [pid 5780] close(8) = 0 [pid 5780] close(9) = -1 EBADF (Bad file descriptor) [pid 5780] close(10) = -1 EBADF (Bad file descriptor) [pid 5780] close(11) = -1 EBADF (Bad file descriptor) [pid 5780] close(12) = -1 EBADF (Bad file descriptor) [pid 5780] close(13) = -1 EBADF (Bad file descriptor) [pid 5780] close(14) = -1 EBADF (Bad file descriptor) [pid 5780] close(15) = -1 EBADF (Bad file descriptor) [pid 5780] close(16) = -1 EBADF (Bad file descriptor) [pid 5780] close(17) = -1 EBADF (Bad file descriptor) [pid 5780] close(18) = -1 EBADF (Bad file descriptor) [pid 5780] close(19) = -1 EBADF (Bad file descriptor) [pid 5780] close(20) = -1 EBADF (Bad file descriptor) [pid 5780] close(21) = -1 EBADF (Bad file descriptor) [pid 5780] close(22) = -1 EBADF (Bad file descriptor) [pid 5780] close(23) = -1 EBADF (Bad file descriptor) [pid 5780] close(24) = -1 EBADF (Bad file descriptor) [pid 5780] close(25) = -1 EBADF (Bad file descriptor) [pid 5780] close(26) = -1 EBADF (Bad file descriptor) [pid 5780] close(27) = -1 EBADF (Bad file descriptor) [pid 5780] close(28) = -1 EBADF (Bad file descriptor) [pid 5780] close(29) = -1 EBADF (Bad file descriptor) [pid 5780] exit_group(0) = ? [pid 5780] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=33, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./31", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./31/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./31/binderfs") = 0 [pid 5637] umount2("./31/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./31/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./31/cgroup.net") = 0 [pid 5637] umount2("./31/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./31/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./31/cgroup.cpu") = 0 [pid 5637] umount2("./31/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./31/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./31/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./31") = 0 [pid 5637] mkdir("./32", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5786 attached [pid 5786] set_robust_list(0x55557f25d7a0, 24 [pid 5637] <... clone resumed>, child_tidptr=0x55557f25d790) = 34 [pid 5786] <... set_robust_list resumed>) = 0 [pid 5786] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 5786] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5786] chdir("./32") = 0 [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5786] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5786] setpgid(0, 0) = 0 [pid 5786] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5786] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5786] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5786] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5786] write(3, "1000", 4) = 4 [pid 5786] close(3) = 0 [pid 5786] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5786] write(1, "executing program\n", 18) = 18 [pid 5786] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5786] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5786] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5786] close(3) = 0 [pid 5786] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5786] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5786] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5786] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5786] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5786] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5786] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5786] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5786] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5786] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5786] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5786] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5786] setns(201, 0) = 0 [pid 5786] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5786] setns(7, 0) = 0 [pid 5786] close(7) = 0 [pid 5786] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5786] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5786] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=34}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5786] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=34}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5786] close(7) = 0 [pid 5786] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5786] close(3) = 0 [pid 5786] close(4) = 0 [pid 5786] close(5) = 0 [pid 5786] close(6) = 0 [pid 5786] close(7) = -1 EBADF (Bad file descriptor) [pid 5786] close(8) = 0 [pid 5786] close(9) = -1 EBADF (Bad file descriptor) [pid 5786] close(10) = -1 EBADF (Bad file descriptor) [pid 5786] close(11) = -1 EBADF (Bad file descriptor) [pid 5786] close(12) = -1 EBADF (Bad file descriptor) [pid 5786] close(13) = -1 EBADF (Bad file descriptor) [pid 5786] close(14) = -1 EBADF (Bad file descriptor) [pid 5786] close(15) = -1 EBADF (Bad file descriptor) [pid 5786] close(16) = -1 EBADF (Bad file descriptor) [pid 5786] close(17) = -1 EBADF (Bad file descriptor) [pid 5786] close(18) = -1 EBADF (Bad file descriptor) [pid 5786] close(19) = -1 EBADF (Bad file descriptor) [pid 5786] close(20) = -1 EBADF (Bad file descriptor) [pid 5786] close(21) = -1 EBADF (Bad file descriptor) [pid 5786] close(22) = -1 EBADF (Bad file descriptor) [pid 5786] close(23) = -1 EBADF (Bad file descriptor) [pid 5786] close(24) = -1 EBADF (Bad file descriptor) [pid 5786] close(25) = -1 EBADF (Bad file descriptor) [pid 5786] close(26) = -1 EBADF (Bad file descriptor) [pid 5786] close(27) = -1 EBADF (Bad file descriptor) [pid 5786] close(28) = -1 EBADF (Bad file descriptor) [pid 5786] close(29) = -1 EBADF (Bad file descriptor) [pid 5786] exit_group(0) = ? [pid 5786] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=34, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./32", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./32/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./32/binderfs") = 0 [pid 5637] umount2("./32/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./32/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./32/cgroup.net") = 0 [pid 5637] umount2("./32/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./32/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./32/cgroup.cpu") = 0 [pid 5637] umount2("./32/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./32/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./32/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./32") = 0 [pid 5637] mkdir("./33", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5792 attached , child_tidptr=0x55557f25d790) = 35 [pid 5792] set_robust_list(0x55557f25d7a0, 24 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 5792] <... set_robust_list resumed>) = 0 [pid 5792] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5792] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5792] chdir("./33") = 0 [pid 5792] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5792] setpgid(0, 0) = 0 [pid 5792] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5792] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5792] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5792] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5792] write(3, "1000", 4) = 4 [pid 5792] close(3) = 0 [pid 5792] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5792] write(1, "executing program\n", 18) = 18 executing program [pid 5792] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5792] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5792] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5792] close(3) = 0 [pid 5792] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5792] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5792] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5792] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5792] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5792] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5792] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5792] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5792] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5792] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5792] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5792] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5792] setns(201, 0) = 0 [pid 5792] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5792] setns(7, 0) = 0 [pid 5792] close(7) = 0 [pid 5792] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5792] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5792] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=35}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5792] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=35}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5792] close(7) = 0 [pid 5792] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5792] close(3) = 0 [pid 5792] close(4) = 0 [pid 5792] close(5) = 0 [pid 5792] close(6) = 0 [pid 5792] close(7) = -1 EBADF (Bad file descriptor) [pid 5792] close(8) = 0 [pid 5792] close(9) = -1 EBADF (Bad file descriptor) [pid 5792] close(10) = -1 EBADF (Bad file descriptor) [pid 5792] close(11) = -1 EBADF (Bad file descriptor) [pid 5792] close(12) = -1 EBADF (Bad file descriptor) [pid 5792] close(13) = -1 EBADF (Bad file descriptor) [pid 5792] close(14) = -1 EBADF (Bad file descriptor) [pid 5792] close(15) = -1 EBADF (Bad file descriptor) [pid 5792] close(16) = -1 EBADF (Bad file descriptor) [pid 5792] close(17) = -1 EBADF (Bad file descriptor) [pid 5792] close(18) = -1 EBADF (Bad file descriptor) [pid 5792] close(19) = -1 EBADF (Bad file descriptor) [pid 5792] close(20) = -1 EBADF (Bad file descriptor) [pid 5792] close(21) = -1 EBADF (Bad file descriptor) [pid 5792] close(22) = -1 EBADF (Bad file descriptor) [pid 5792] close(23) = -1 EBADF (Bad file descriptor) [pid 5792] close(24) = -1 EBADF (Bad file descriptor) [pid 5792] close(25) = -1 EBADF (Bad file descriptor) [pid 5792] close(26) = -1 EBADF (Bad file descriptor) [pid 5792] close(27) = -1 EBADF (Bad file descriptor) [pid 5792] close(28) = -1 EBADF (Bad file descriptor) [pid 5792] close(29) = -1 EBADF (Bad file descriptor) [pid 5792] exit_group(0) = ? [pid 5792] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=35, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./33", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./33/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./33/binderfs") = 0 [pid 5637] umount2("./33/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./33/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./33/cgroup.net") = 0 [pid 5637] umount2("./33/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./33/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./33/cgroup.cpu") = 0 [pid 5637] umount2("./33/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./33/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./33/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./33") = 0 [pid 5637] mkdir("./34", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5798 attached , child_tidptr=0x55557f25d790) = 36 [pid 5798] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5798] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5798] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5798] chdir("./34") = 0 [pid 5798] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5798] setpgid(0, 0) = 0 [pid 5798] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5798] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5798] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5798] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5798] write(3, "1000", 4) = 4 [pid 5798] close(3) = 0 [pid 5798] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5798] write(1, "executing program\n", 18) = 18 [pid 5798] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5798] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5798] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5798] close(3) = 0 executing program [pid 5798] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5798] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5798] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5798] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5798] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5798] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5798] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5798] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5798] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5798] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5798] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5798] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5798] setns(201, 0) = 0 [pid 5798] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5798] setns(7, 0) = 0 [pid 5798] close(7) = 0 [pid 5798] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5798] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5798] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=36}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5798] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=36}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5798] close(7) = 0 [pid 5798] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5798] close(3) = 0 [pid 5798] close(4) = 0 [pid 5798] close(5) = 0 [pid 5798] close(6) = 0 [pid 5798] close(7) = -1 EBADF (Bad file descriptor) [pid 5798] close(8) = 0 [pid 5798] close(9) = -1 EBADF (Bad file descriptor) [pid 5798] close(10) = -1 EBADF (Bad file descriptor) [pid 5798] close(11) = -1 EBADF (Bad file descriptor) [pid 5798] close(12) = -1 EBADF (Bad file descriptor) [pid 5798] close(13) = -1 EBADF (Bad file descriptor) [pid 5798] close(14) = -1 EBADF (Bad file descriptor) [pid 5798] close(15) = -1 EBADF (Bad file descriptor) [pid 5798] close(16) = -1 EBADF (Bad file descriptor) [pid 5798] close(17) = -1 EBADF (Bad file descriptor) [pid 5798] close(18) = -1 EBADF (Bad file descriptor) [pid 5798] close(19) = -1 EBADF (Bad file descriptor) [pid 5798] close(20) = -1 EBADF (Bad file descriptor) [pid 5798] close(21) = -1 EBADF (Bad file descriptor) [pid 5798] close(22) = -1 EBADF (Bad file descriptor) [pid 5798] close(23) = -1 EBADF (Bad file descriptor) [pid 5798] close(24) = -1 EBADF (Bad file descriptor) [pid 5798] close(25) = -1 EBADF (Bad file descriptor) [pid 5798] close(26) = -1 EBADF (Bad file descriptor) [pid 5798] close(27) = -1 EBADF (Bad file descriptor) [pid 5798] close(28) = -1 EBADF (Bad file descriptor) [pid 5798] close(29) = -1 EBADF (Bad file descriptor) [pid 5798] exit_group(0) = ? [pid 5798] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=36, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./34", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./34/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./34/binderfs") = 0 [pid 5637] umount2("./34/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./34/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./34/cgroup.net") = 0 [pid 5637] umount2("./34/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./34/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./34/cgroup.cpu") = 0 [pid 5637] umount2("./34/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./34/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./34/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./34") = 0 [pid 5637] mkdir("./35", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557f25d790) = 37 ci-upstream-net-kasan-gce/strace-static-x86_64: Process 5802 attached [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5802] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5802] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5802] chdir("./35") = 0 [pid 5802] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5802] setpgid(0, 0) = 0 [pid 5802] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5802] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5802] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5802] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5802] write(3, "1000", 4) = 4 [pid 5802] close(3) = 0 [pid 5802] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5802] write(1, "executing program\n", 18) = 18 executing program [pid 5802] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5802] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5802] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5802] close(3) = 0 [pid 5802] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5802] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5802] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5802] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5802] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5802] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5802] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5802] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5802] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5802] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5802] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5802] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5802] setns(201, 0) = 0 [pid 5802] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5802] setns(7, 0) = 0 [pid 5802] close(7) = 0 [pid 5802] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5802] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5802] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=37}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5802] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=37}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5802] close(7) = 0 [pid 5802] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5802] close(3) = 0 [pid 5802] close(4) = 0 [pid 5802] close(5) = 0 [pid 5802] close(6) = 0 [pid 5802] close(7) = -1 EBADF (Bad file descriptor) [pid 5802] close(8) = 0 [pid 5802] close(9) = -1 EBADF (Bad file descriptor) [pid 5802] close(10) = -1 EBADF (Bad file descriptor) [pid 5802] close(11) = -1 EBADF (Bad file descriptor) [pid 5802] close(12) = -1 EBADF (Bad file descriptor) [pid 5802] close(13) = -1 EBADF (Bad file descriptor) [pid 5802] close(14) = -1 EBADF (Bad file descriptor) [pid 5802] close(15) = -1 EBADF (Bad file descriptor) [pid 5802] close(16) = -1 EBADF (Bad file descriptor) [pid 5802] close(17) = -1 EBADF (Bad file descriptor) [pid 5802] close(18) = -1 EBADF (Bad file descriptor) [pid 5802] close(19) = -1 EBADF (Bad file descriptor) [pid 5802] close(20) = -1 EBADF (Bad file descriptor) [pid 5802] close(21) = -1 EBADF (Bad file descriptor) [pid 5802] close(22) = -1 EBADF (Bad file descriptor) [pid 5802] close(23) = -1 EBADF (Bad file descriptor) [pid 5802] close(24) = -1 EBADF (Bad file descriptor) [pid 5802] close(25) = -1 EBADF (Bad file descriptor) [pid 5802] close(26) = -1 EBADF (Bad file descriptor) [pid 5802] close(27) = -1 EBADF (Bad file descriptor) [pid 5802] close(28) = -1 EBADF (Bad file descriptor) [pid 5802] close(29) = -1 EBADF (Bad file descriptor) [pid 5802] exit_group(0) = ? [pid 5802] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=37, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./35", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./35/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./35/binderfs") = 0 [pid 5637] umount2("./35/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./35/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./35/cgroup.net") = 0 [pid 5637] umount2("./35/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./35/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./35/cgroup.cpu") = 0 [pid 5637] umount2("./35/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./35/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./35/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./35") = 0 [pid 5637] mkdir("./36", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5808 attached , child_tidptr=0x55557f25d790) = 38 [pid 5808] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5808] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5808] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5808] chdir("./36") = 0 [pid 5808] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5808] setpgid(0, 0) = 0 [pid 5808] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5808] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5808] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5808] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5808] write(3, "1000", 4) = 4 [pid 5808] close(3) = 0 [pid 5808] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5808] write(1, "executing program\n", 18) = 18 executing program [pid 5808] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5808] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5808] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5808] close(3) = 0 [pid 5808] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5808] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5808] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5808] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5808] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5808] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5808] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5808] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5808] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5808] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5808] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5808] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5808] setns(201, 0) = 0 [pid 5808] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5808] setns(7, 0) = 0 [pid 5808] close(7) = 0 [pid 5808] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5808] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5808] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=38}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5808] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=38}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5808] close(7) = 0 [pid 5808] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5808] close(3) = 0 [pid 5808] close(4) = 0 [pid 5808] close(5) = 0 [pid 5808] close(6) = 0 [pid 5808] close(7) = -1 EBADF (Bad file descriptor) [pid 5808] close(8) = 0 [pid 5808] close(9) = -1 EBADF (Bad file descriptor) [pid 5808] close(10) = -1 EBADF (Bad file descriptor) [pid 5808] close(11) = -1 EBADF (Bad file descriptor) [pid 5808] close(12) = -1 EBADF (Bad file descriptor) [pid 5808] close(13) = -1 EBADF (Bad file descriptor) [pid 5808] close(14) = -1 EBADF (Bad file descriptor) [pid 5808] close(15) = -1 EBADF (Bad file descriptor) [pid 5808] close(16) = -1 EBADF (Bad file descriptor) [pid 5808] close(17) = -1 EBADF (Bad file descriptor) [pid 5808] close(18) = -1 EBADF (Bad file descriptor) [pid 5808] close(19) = -1 EBADF (Bad file descriptor) [pid 5808] close(20) = -1 EBADF (Bad file descriptor) [pid 5808] close(21) = -1 EBADF (Bad file descriptor) [pid 5808] close(22) = -1 EBADF (Bad file descriptor) [pid 5808] close(23) = -1 EBADF (Bad file descriptor) [pid 5808] close(24) = -1 EBADF (Bad file descriptor) [pid 5808] close(25) = -1 EBADF (Bad file descriptor) [pid 5808] close(26) = -1 EBADF (Bad file descriptor) [pid 5808] close(27) = -1 EBADF (Bad file descriptor) [pid 5808] close(28) = -1 EBADF (Bad file descriptor) [pid 5808] close(29) = -1 EBADF (Bad file descriptor) [pid 5808] exit_group(0) = ? [pid 5808] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=38, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./36", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./36/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./36/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./36/binderfs") = 0 [pid 5637] umount2("./36/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./36/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./36/cgroup.net") = 0 [pid 5637] umount2("./36/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./36/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./36/cgroup.cpu") = 0 [pid 5637] umount2("./36/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./36/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./36/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./36") = 0 [pid 5637] mkdir("./37", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5812 attached , child_tidptr=0x55557f25d790) = 39 [pid 5812] set_robust_list(0x55557f25d7a0, 24 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 5812] <... set_robust_list resumed>) = 0 [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5812] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5812] chdir("./37") = 0 [pid 5812] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5812] setpgid(0, 0) = 0 [pid 5812] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5812] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5812] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5812] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5812] write(3, "1000", 4) = 4 [pid 5812] close(3) = 0 [pid 5812] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5812] write(1, "executing program\n", 18) = 18 executing program [pid 5812] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5812] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5812] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5812] close(3) = 0 [pid 5812] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5812] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5812] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5812] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5812] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5812] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5812] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5812] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5812] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5812] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5812] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5812] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5812] setns(201, 0) = 0 [pid 5812] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5812] setns(7, 0) = 0 [pid 5812] close(7) = 0 [pid 5812] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5812] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5812] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=39}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5812] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=39}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5812] close(7) = 0 [pid 5812] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5812] close(3) = 0 [pid 5812] close(4) = 0 [pid 5812] close(5) = 0 [pid 5812] close(6) = 0 [pid 5812] close(7) = -1 EBADF (Bad file descriptor) [pid 5812] close(8) = 0 [pid 5812] close(9) = -1 EBADF (Bad file descriptor) [pid 5812] close(10) = -1 EBADF (Bad file descriptor) [pid 5812] close(11) = -1 EBADF (Bad file descriptor) [pid 5812] close(12) = -1 EBADF (Bad file descriptor) [pid 5812] close(13) = -1 EBADF (Bad file descriptor) [pid 5812] close(14) = -1 EBADF (Bad file descriptor) [pid 5812] close(15) = -1 EBADF (Bad file descriptor) [ 103.419454][ T5812] __nla_validate_parse: 9 callbacks suppressed [ 103.419473][ T5812] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 5812] close(16) = -1 EBADF (Bad file descriptor) [pid 5812] close(17) = -1 EBADF (Bad file descriptor) [pid 5812] close(18) = -1 EBADF (Bad file descriptor) [pid 5812] close(19) = -1 EBADF (Bad file descriptor) [pid 5812] close(20) = -1 EBADF (Bad file descriptor) [pid 5812] close(21) = -1 EBADF (Bad file descriptor) [pid 5812] close(22) = -1 EBADF (Bad file descriptor) [pid 5812] close(23) = -1 EBADF (Bad file descriptor) [pid 5812] close(24) = -1 EBADF (Bad file descriptor) [pid 5812] close(25) = -1 EBADF (Bad file descriptor) [pid 5812] close(26) = -1 EBADF (Bad file descriptor) [pid 5812] close(27) = -1 EBADF (Bad file descriptor) [pid 5812] close(28) = -1 EBADF (Bad file descriptor) [pid 5812] close(29) = -1 EBADF (Bad file descriptor) [pid 5812] exit_group(0) = ? [pid 5812] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=39, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./37", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./37/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./37/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./37/binderfs") = 0 [pid 5637] umount2("./37/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./37/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./37/cgroup.net") = 0 [pid 5637] umount2("./37/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./37/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./37/cgroup.cpu") = 0 [pid 5637] umount2("./37/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./37/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./37/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./37") = 0 [pid 5637] mkdir("./38", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5818 attached , child_tidptr=0x55557f25d790) = 40 [ 103.553350][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 5818] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 5818] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5818] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5818] chdir("./38") = 0 [pid 5818] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5818] setpgid(0, 0) = 0 [pid 5818] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5818] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5818] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5818] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5818] write(3, "1000", 4) = 4 [pid 5818] close(3) = 0 [pid 5818] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5818] write(1, "executing program\n", 18) = 18 [pid 5818] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5818] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5818] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5818] close(3) = 0 [pid 5818] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5818] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5818] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5818] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5818] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5818] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5818] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5818] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5818] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5818] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5818] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5818] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5818] setns(201, 0) = 0 [pid 5818] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5818] setns(7, 0) = 0 [pid 5818] close(7) = 0 [pid 5818] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5818] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5818] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=40}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5818] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=40}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5818] close(7) = 0 [pid 5818] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5818] close(3) = 0 [pid 5818] close(4) = 0 [pid 5818] close(5) = 0 [pid 5818] close(6) = 0 [pid 5818] close(7) = -1 EBADF (Bad file descriptor) [pid 5818] close(8) = 0 [pid 5818] close(9) = -1 EBADF (Bad file descriptor) [pid 5818] close(10) = -1 EBADF (Bad file descriptor) [pid 5818] close(11) = -1 EBADF (Bad file descriptor) [pid 5818] close(12) = -1 EBADF (Bad file descriptor) [pid 5818] close(13) = -1 EBADF (Bad file descriptor) [pid 5818] close(14) = -1 EBADF (Bad file descriptor) [pid 5818] close(15) = -1 EBADF (Bad file descriptor) [pid 5818] close(16) = -1 EBADF (Bad file descriptor) [pid 5818] close(17) = -1 EBADF (Bad file descriptor) [pid 5818] close(18) = -1 EBADF (Bad file descriptor) [pid 5818] close(19) = -1 EBADF (Bad file descriptor) [pid 5818] close(20) = -1 EBADF (Bad file descriptor) [pid 5818] close(21) = -1 EBADF (Bad file descriptor) [pid 5818] close(22) = -1 EBADF (Bad file descriptor) [pid 5818] close(23) = -1 EBADF (Bad file descriptor) [pid 5818] close(24) = -1 EBADF (Bad file descriptor) [pid 5818] close(25) = -1 EBADF (Bad file descriptor) [pid 5818] close(26) = -1 EBADF (Bad file descriptor) [pid 5818] close(27) = -1 EBADF (Bad file descriptor) [pid 5818] close(28) = -1 EBADF (Bad file descriptor) [pid 5818] close(29) = -1 EBADF (Bad file descriptor) [pid 5818] exit_group(0) = ? [ 103.799883][ T5818] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 5818] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=40, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./38/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./38/binderfs") = 0 [pid 5637] umount2("./38/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./38/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./38/cgroup.net") = 0 [pid 5637] umount2("./38/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./38/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./38/cgroup.cpu") = 0 [pid 5637] umount2("./38/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./38/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./38/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./38") = 0 [pid 5637] mkdir("./39", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5822 attached , child_tidptr=0x55557f25d790) = 41 [pid 5822] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 5822] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5822] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5822] chdir("./39") = 0 [pid 5822] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5822] setpgid(0, 0) = 0 [pid 5822] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5822] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5822] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5822] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5822] write(3, "1000", 4) = 4 [pid 5822] close(3) = 0 [pid 5822] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5822] write(1, "executing program\n", 18) = 18 [pid 5822] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5822] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5822] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5822] close(3) = 0 [pid 5822] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5822] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5822] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5822] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5822] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5822] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5822] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [ 103.883915][ T5630] udevd[5630]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 103.890618][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 5822] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5822] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5822] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5822] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5822] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5822] setns(201, 0) = 0 [pid 5822] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5822] setns(7, 0) = 0 [pid 5822] close(7) = 0 [pid 5822] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5822] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5822] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=41}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5822] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=41}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5822] close(7) = 0 [pid 5822] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5822] close(3) = 0 [pid 5822] close(4) = 0 [pid 5822] close(5) = 0 [pid 5822] close(6) = 0 [pid 5822] close(7) = -1 EBADF (Bad file descriptor) [pid 5822] close(8) = 0 [pid 5822] close(9) = -1 EBADF (Bad file descriptor) [pid 5822] close(10) = -1 EBADF (Bad file descriptor) [pid 5822] close(11) = -1 EBADF (Bad file descriptor) [pid 5822] close(12) = -1 EBADF (Bad file descriptor) [pid 5822] close(13) = -1 EBADF (Bad file descriptor) [pid 5822] close(14) = -1 EBADF (Bad file descriptor) [pid 5822] close(15) = -1 EBADF (Bad file descriptor) [pid 5822] close(16) = -1 EBADF (Bad file descriptor) [pid 5822] close(17) = -1 EBADF (Bad file descriptor) [pid 5822] close(18) = -1 EBADF (Bad file descriptor) [ 103.991922][ T5822] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 5822] close(19) = -1 EBADF (Bad file descriptor) [pid 5822] close(20) = -1 EBADF (Bad file descriptor) [pid 5822] close(21) = -1 EBADF (Bad file descriptor) [pid 5822] close(22) = -1 EBADF (Bad file descriptor) [pid 5822] close(23) = -1 EBADF (Bad file descriptor) [pid 5822] close(24) = -1 EBADF (Bad file descriptor) [pid 5822] close(25) = -1 EBADF (Bad file descriptor) [pid 5822] close(26) = -1 EBADF (Bad file descriptor) [pid 5822] close(27) = -1 EBADF (Bad file descriptor) [pid 5822] close(28) = -1 EBADF (Bad file descriptor) [pid 5822] close(29) = -1 EBADF (Bad file descriptor) [pid 5822] exit_group(0) = ? [pid 5822] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=41, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5637] umount2("./39", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./39/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./39/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./39/binderfs") = 0 [pid 5637] umount2("./39/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./39/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./39/cgroup.net") = 0 [pid 5637] umount2("./39/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./39/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./39/cgroup.cpu") = 0 [pid 5637] umount2("./39/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./39/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./39/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./39") = 0 [pid 5637] mkdir("./40", 0777) = 0 [ 104.079802][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5826 attached , child_tidptr=0x55557f25d790) = 42 [pid 5826] set_robust_list(0x55557f25d7a0, 24 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 5826] <... set_robust_list resumed>) = 0 [pid 5826] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5826] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5826] chdir("./40") = 0 [pid 5826] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5826] setpgid(0, 0) = 0 [pid 5826] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5826] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5826] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5826] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5826] write(3, "1000", 4) = 4 [pid 5826] close(3) = 0 [pid 5826] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5826] write(1, "executing program\n", 18) = 18 [pid 5826] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) executing program [pid 5826] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5826] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5826] close(3) = 0 [pid 5826] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5826] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5826] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5826] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5826] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5826] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5826] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5826] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5826] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5826] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5826] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5826] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5826] setns(201, 0) = 0 [pid 5826] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5826] setns(7, 0) = 0 [pid 5826] close(7) = 0 [pid 5826] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5826] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5826] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=42}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5826] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=42}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5826] close(7) = 0 [pid 5826] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5826] close(3) = 0 [pid 5826] close(4) = 0 [pid 5826] close(5) = 0 [pid 5826] close(6) = 0 [pid 5826] close(7) = -1 EBADF (Bad file descriptor) [pid 5826] close(8) = 0 [pid 5826] close(9) = -1 EBADF (Bad file descriptor) [pid 5826] close(10) = -1 EBADF (Bad file descriptor) [pid 5826] close(11) = -1 EBADF (Bad file descriptor) [pid 5826] close(12) = -1 EBADF (Bad file descriptor) [pid 5826] close(13) = -1 EBADF (Bad file descriptor) [pid 5826] close(14) = -1 EBADF (Bad file descriptor) [pid 5826] close(15) = -1 EBADF (Bad file descriptor) [pid 5826] close(16) = -1 EBADF (Bad file descriptor) [pid 5826] close(17) = -1 EBADF (Bad file descriptor) [pid 5826] close(18) = -1 EBADF (Bad file descriptor) [pid 5826] close(19) = -1 EBADF (Bad file descriptor) [pid 5826] close(20) = -1 EBADF (Bad file descriptor) [pid 5826] close(21) = -1 EBADF (Bad file descriptor) [pid 5826] close(22) = -1 EBADF (Bad file descriptor) [pid 5826] close(23) = -1 EBADF (Bad file descriptor) [pid 5826] close(24) = -1 EBADF (Bad file descriptor) [ 104.285026][ T5826] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 5826] close(25) = -1 EBADF (Bad file descriptor) [pid 5826] close(26) = -1 EBADF (Bad file descriptor) [pid 5826] close(27) = -1 EBADF (Bad file descriptor) [pid 5826] close(28) = -1 EBADF (Bad file descriptor) [pid 5826] close(29) = -1 EBADF (Bad file descriptor) [pid 5826] exit_group(0) = ? [pid 5826] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=42, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./40", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./40/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./40/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./40/binderfs") = 0 [pid 5637] umount2("./40/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./40/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./40/cgroup.net") = 0 [pid 5637] umount2("./40/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./40/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./40/cgroup.cpu") = 0 [pid 5637] umount2("./40/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./40/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./40/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./40") = 0 [pid 5637] mkdir("./41", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5830 attached , child_tidptr=0x55557f25d790) = 43 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 5830] set_robust_list(0x55557f25d7a0, 24 [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5830] <... set_robust_list resumed>) = 0 [pid 5830] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5830] chdir("./41") = 0 [pid 5830] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5830] setpgid(0, 0) = 0 [pid 5830] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5830] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5830] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5830] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5830] write(3, "1000", 4) = 4 [pid 5830] close(3) = 0 [pid 5830] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5830] write(1, "executing program\n", 18) = 18 executing program [pid 5830] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5830] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5830] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5830] close(3) = 0 [pid 5830] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5830] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5830] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5830] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5830] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5830] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5830] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [ 104.373027][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 5830] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5830] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5830] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5830] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5830] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5830] setns(201, 0) = 0 [pid 5830] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5830] setns(7, 0) = 0 [pid 5830] close(7) = 0 [pid 5830] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5830] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5830] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=43}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5830] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=43}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5830] close(7) = 0 [pid 5830] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5830] close(3) = 0 [pid 5830] close(4) = 0 [pid 5830] close(5) = 0 [pid 5830] close(6) = 0 [pid 5830] close(7) = -1 EBADF (Bad file descriptor) [pid 5830] close(8) = 0 [pid 5830] close(9) = -1 EBADF (Bad file descriptor) [pid 5830] close(10) = -1 EBADF (Bad file descriptor) [pid 5830] close(11) = -1 EBADF (Bad file descriptor) [pid 5830] close(12) = -1 EBADF (Bad file descriptor) [pid 5830] close(13) = -1 EBADF (Bad file descriptor) [pid 5830] close(14) = -1 EBADF (Bad file descriptor) [pid 5830] close(15) = -1 EBADF (Bad file descriptor) [pid 5830] close(16) = -1 EBADF (Bad file descriptor) [pid 5830] close(17) = -1 EBADF (Bad file descriptor) [pid 5830] close(18) = -1 EBADF (Bad file descriptor) [pid 5830] close(19) = -1 EBADF (Bad file descriptor) [pid 5830] close(20) = -1 EBADF (Bad file descriptor) [pid 5830] close(21) = -1 EBADF (Bad file descriptor) [pid 5830] close(22) = -1 EBADF (Bad file descriptor) [pid 5830] close(23) = -1 EBADF (Bad file descriptor) [pid 5830] close(24) = -1 EBADF (Bad file descriptor) [pid 5830] close(25) = -1 EBADF (Bad file descriptor) [pid 5830] close(26) = -1 EBADF (Bad file descriptor) [pid 5830] close(27) = -1 EBADF (Bad file descriptor) [ 104.476056][ T5830] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 5830] close(28) = -1 EBADF (Bad file descriptor) [pid 5830] close(29) = -1 EBADF (Bad file descriptor) [pid 5830] exit_group(0) = ? [pid 5830] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=43, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./41", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./41/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./41/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./41/binderfs") = 0 [pid 5637] umount2("./41/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./41/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./41/cgroup.net") = 0 [pid 5637] umount2("./41/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./41/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./41/cgroup.cpu") = 0 [pid 5637] umount2("./41/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./41/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./41/cgroup") = 0 [ 104.554298][ T5630] udevd[5630]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 104.558846][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./41") = 0 [pid 5637] mkdir("./42", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5834 attached , child_tidptr=0x55557f25d790) = 44 [pid 5834] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 5834] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5834] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5834] chdir("./42") = 0 [pid 5834] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5834] setpgid(0, 0) = 0 [pid 5834] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5834] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5834] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5834] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5834] write(3, "1000", 4) = 4 [pid 5834] close(3) = 0 [pid 5834] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5834] write(1, "executing program\n", 18) = 18 [pid 5834] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5834] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5834] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5834] close(3) = 0 [pid 5834] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5834] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5834] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5834] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5834] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5834] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5834] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5834] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5834] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5834] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5834] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5834] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5834] setns(201, 0) = 0 [pid 5834] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5834] setns(7, 0) = 0 [pid 5834] close(7) = 0 [pid 5834] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5834] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5834] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=44}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5834] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=44}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5834] close(7) = 0 [pid 5834] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5834] close(3) = 0 [pid 5834] close(4) = 0 [pid 5834] close(5) = 0 [pid 5834] close(6) = 0 [pid 5834] close(7) = -1 EBADF (Bad file descriptor) [pid 5834] close(8) = 0 [pid 5834] close(9) = -1 EBADF (Bad file descriptor) [pid 5834] close(10) = -1 EBADF (Bad file descriptor) [pid 5834] close(11) = -1 EBADF (Bad file descriptor) [pid 5834] close(12) = -1 EBADF (Bad file descriptor) [pid 5834] close(13) = -1 EBADF (Bad file descriptor) [pid 5834] close(14) = -1 EBADF (Bad file descriptor) [pid 5834] close(15) = -1 EBADF (Bad file descriptor) [pid 5834] close(16) = -1 EBADF (Bad file descriptor) [pid 5834] close(17) = -1 EBADF (Bad file descriptor) [pid 5834] close(18) = -1 EBADF (Bad file descriptor) [pid 5834] close(19) = -1 EBADF (Bad file descriptor) [pid 5834] close(20) = -1 EBADF (Bad file descriptor) [pid 5834] close(21) = -1 EBADF (Bad file descriptor) [pid 5834] close(22) = -1 EBADF (Bad file descriptor) [pid 5834] close(23) = -1 EBADF (Bad file descriptor) [pid 5834] close(24) = -1 EBADF (Bad file descriptor) [pid 5834] close(25) = -1 EBADF (Bad file descriptor) [ 104.716707][ T5834] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 5834] close(26) = -1 EBADF (Bad file descriptor) [pid 5834] close(27) = -1 EBADF (Bad file descriptor) [pid 5834] close(28) = -1 EBADF (Bad file descriptor) [pid 5834] close(29) = -1 EBADF (Bad file descriptor) [pid 5834] exit_group(0) = ? [pid 5834] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=44, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5637] umount2("./42", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 104.796302][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./42/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./42/binderfs") = 0 [pid 5637] umount2("./42/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./42/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./42/cgroup.net") = 0 [pid 5637] umount2("./42/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./42/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./42/cgroup.cpu") = 0 [pid 5637] umount2("./42/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./42/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./42/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./42") = 0 [pid 5637] mkdir("./43", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5838 attached , child_tidptr=0x55557f25d790) = 45 [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5838] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5838] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5838] chdir("./43") = 0 [pid 5838] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5838] setpgid(0, 0) = 0 [pid 5838] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5838] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5838] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5838] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5838] write(3, "1000", 4) = 4 [pid 5838] close(3) = 0 [pid 5838] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5838] write(1, "executing program\n", 18) = 18 [pid 5838] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5838] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5838] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5838] close(3) = 0 [pid 5838] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5838] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5838] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5838] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5838] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5838] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5838] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5838] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5838] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5838] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5838] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5838] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5838] setns(201, 0) = 0 [pid 5838] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5838] setns(7, 0) = 0 [pid 5838] close(7) = 0 [pid 5838] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5838] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5838] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=45}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5838] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=45}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5838] close(7) = 0 [pid 5838] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5838] close(3) = 0 [pid 5838] close(4) = 0 [pid 5838] close(5) = 0 [pid 5838] close(6) = 0 [pid 5838] close(7) = -1 EBADF (Bad file descriptor) [pid 5838] close(8) = 0 [pid 5838] close(9) = -1 EBADF (Bad file descriptor) [pid 5838] close(10) = -1 EBADF (Bad file descriptor) [pid 5838] close(11) = -1 EBADF (Bad file descriptor) [pid 5838] close(12) = -1 EBADF (Bad file descriptor) [pid 5838] close(13) = -1 EBADF (Bad file descriptor) [pid 5838] close(14) = -1 EBADF (Bad file descriptor) [pid 5838] close(15) = -1 EBADF (Bad file descriptor) [pid 5838] close(16) = -1 EBADF (Bad file descriptor) [pid 5838] close(17) = -1 EBADF (Bad file descriptor) [pid 5838] close(18) = -1 EBADF (Bad file descriptor) [pid 5838] close(19) = -1 EBADF (Bad file descriptor) [pid 5838] close(20) = -1 EBADF (Bad file descriptor) [pid 5838] close(21) = -1 EBADF (Bad file descriptor) [pid 5838] close(22) = -1 EBADF (Bad file descriptor) [pid 5838] close(23) = -1 EBADF (Bad file descriptor) [ 105.051948][ T5838] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 5838] close(24) = -1 EBADF (Bad file descriptor) [pid 5838] close(25) = -1 EBADF (Bad file descriptor) [pid 5838] close(26) = -1 EBADF (Bad file descriptor) [pid 5838] close(27) = -1 EBADF (Bad file descriptor) [pid 5838] close(28) = -1 EBADF (Bad file descriptor) [pid 5838] close(29) = -1 EBADF (Bad file descriptor) [pid 5838] exit_group(0) = ? [pid 5838] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=45, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./43", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 105.122276][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 105.125172][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 5637] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./43/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./43/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./43/binderfs") = 0 [pid 5637] umount2("./43/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./43/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./43/cgroup.net") = 0 [pid 5637] umount2("./43/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./43/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./43/cgroup.cpu") = 0 [pid 5637] umount2("./43/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./43/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./43/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./43") = 0 [pid 5637] mkdir("./44", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5842 attached , child_tidptr=0x55557f25d790) = 46 [pid 5842] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5842] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5842] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5842] chdir("./44") = 0 [pid 5842] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5842] setpgid(0, 0) = 0 [pid 5842] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5842] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5842] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5842] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5842] write(3, "1000", 4) = 4 [pid 5842] close(3) = 0 [pid 5842] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5842] write(1, "executing program\n", 18) = 18 [pid 5842] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5842] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5842] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5842] close(3) = 0 [pid 5842] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5842] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5842] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5842] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5842] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5842] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5842] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5842] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5842] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5842] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5842] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5842] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5842] setns(201, 0) = 0 [pid 5842] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5842] setns(7, 0) = 0 [pid 5842] close(7) = 0 [pid 5842] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5842] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5842] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=46}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5842] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=46}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5842] close(7) = 0 [pid 5842] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5842] close(3) = 0 [pid 5842] close(4) = 0 [pid 5842] close(5) = 0 [pid 5842] close(6) = 0 [ 105.348726][ T5842] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 5842] close(7) = -1 EBADF (Bad file descriptor) [pid 5842] close(8) = 0 [pid 5842] close(9) = -1 EBADF (Bad file descriptor) [pid 5842] close(10) = -1 EBADF (Bad file descriptor) [pid 5842] close(11) = -1 EBADF (Bad file descriptor) [pid 5842] close(12) = -1 EBADF (Bad file descriptor) [pid 5842] close(13) = -1 EBADF (Bad file descriptor) [pid 5842] close(14) = -1 EBADF (Bad file descriptor) [pid 5842] close(15) = -1 EBADF (Bad file descriptor) [pid 5842] close(16) = -1 EBADF (Bad file descriptor) [pid 5842] close(17) = -1 EBADF (Bad file descriptor) [pid 5842] close(18) = -1 EBADF (Bad file descriptor) [pid 5842] close(19) = -1 EBADF (Bad file descriptor) [pid 5842] close(20) = -1 EBADF (Bad file descriptor) [pid 5842] close(21) = -1 EBADF (Bad file descriptor) [pid 5842] close(22) = -1 EBADF (Bad file descriptor) [pid 5842] close(23) = -1 EBADF (Bad file descriptor) [pid 5842] close(24) = -1 EBADF (Bad file descriptor) [pid 5842] close(25) = -1 EBADF (Bad file descriptor) [pid 5842] close(26) = -1 EBADF (Bad file descriptor) [pid 5842] close(27) = -1 EBADF (Bad file descriptor) [pid 5842] close(28) = -1 EBADF (Bad file descriptor) [pid 5842] close(29) = -1 EBADF (Bad file descriptor) [pid 5842] exit_group(0) = ? [pid 5842] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=46, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./44", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./44/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./44/binderfs") = 0 [pid 5637] umount2("./44/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./44/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./44/cgroup.net") = 0 [pid 5637] umount2("./44/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./44/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./44/cgroup.cpu") = 0 [pid 5637] umount2("./44/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./44/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./44/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./44") = 0 [pid 5637] mkdir("./45", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5846 attached , child_tidptr=0x55557f25d790) = 47 [pid 5846] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5846] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5846] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5846] chdir("./45") = 0 [pid 5846] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5846] setpgid(0, 0) = 0 [pid 5846] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5846] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5846] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5846] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5846] write(3, "1000", 4) = 4 [pid 5846] close(3) = 0 [pid 5846] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5846] write(1, "executing program\n", 18) = 18 executing program [pid 5846] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5846] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5846] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5846] close(3) = 0 [pid 5846] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5846] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5846] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5846] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5846] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5846] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5846] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5846] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5846] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5846] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5846] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5846] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5846] setns(201, 0) = 0 [pid 5846] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5846] setns(7, 0) = 0 [pid 5846] close(7) = 0 [pid 5846] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5846] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5846] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=47}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5846] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=47}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5846] close(7) = 0 [pid 5846] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5846] close(3) = 0 [pid 5846] close(4) = 0 [pid 5846] close(5) = 0 [pid 5846] close(6) = 0 [pid 5846] close(7) = -1 EBADF (Bad file descriptor) [pid 5846] close(8) = 0 [ 105.734357][ T5846] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 5846] close(9) = -1 EBADF (Bad file descriptor) [pid 5846] close(10) = -1 EBADF (Bad file descriptor) [pid 5846] close(11) = -1 EBADF (Bad file descriptor) [pid 5846] close(12) = -1 EBADF (Bad file descriptor) [pid 5846] close(13) = -1 EBADF (Bad file descriptor) [pid 5846] close(14) = -1 EBADF (Bad file descriptor) [pid 5846] close(15) = -1 EBADF (Bad file descriptor) [pid 5846] close(16) = -1 EBADF (Bad file descriptor) [pid 5846] close(17) = -1 EBADF (Bad file descriptor) [pid 5846] close(18) = -1 EBADF (Bad file descriptor) [pid 5846] close(19) = -1 EBADF (Bad file descriptor) [pid 5846] close(20) = -1 EBADF (Bad file descriptor) [pid 5846] close(21) = -1 EBADF (Bad file descriptor) [pid 5846] close(22) = -1 EBADF (Bad file descriptor) [pid 5846] close(23) = -1 EBADF (Bad file descriptor) [pid 5846] close(24) = -1 EBADF (Bad file descriptor) [pid 5846] close(25) = -1 EBADF (Bad file descriptor) [pid 5846] close(26) = -1 EBADF (Bad file descriptor) [pid 5846] close(27) = -1 EBADF (Bad file descriptor) [pid 5846] close(28) = -1 EBADF (Bad file descriptor) [pid 5846] close(29) = -1 EBADF (Bad file descriptor) [pid 5846] exit_group(0) = ? [pid 5846] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=47, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./45", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./45/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./45/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./45/binderfs") = 0 [pid 5637] umount2("./45/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./45/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./45/cgroup.net") = 0 [pid 5637] umount2("./45/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./45/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./45/cgroup.cpu") = 0 [pid 5637] umount2("./45/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./45/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./45/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./45") = 0 [pid 5637] mkdir("./46", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5852 attached , child_tidptr=0x55557f25d790) = 48 [pid 5852] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5852] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 5852] chdir("./46" [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5852] <... chdir resumed>) = 0 [pid 5852] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5852] setpgid(0, 0) = 0 [pid 5852] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5852] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5852] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5852] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5852] write(3, "1000", 4) = 4 [pid 5852] close(3) = 0 [pid 5852] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5852] write(1, "executing program\n", 18) = 18 [pid 5852] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5852] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) executing program [pid 5852] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5852] close(3) = 0 [pid 5852] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5852] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5852] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5852] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5852] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5852] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5852] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5852] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5852] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5852] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5852] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5852] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5852] setns(201, 0) = 0 [pid 5852] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5852] setns(7, 0) = 0 [pid 5852] close(7) = 0 [pid 5852] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5852] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5852] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=48}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5852] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=48}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5852] close(7) = 0 [pid 5852] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5852] close(3) = 0 [pid 5852] close(4) = 0 [pid 5852] close(5) = 0 [pid 5852] close(6) = 0 [pid 5852] close(7) = -1 EBADF (Bad file descriptor) [pid 5852] close(8) = 0 [pid 5852] close(9) = -1 EBADF (Bad file descriptor) [pid 5852] close(10) = -1 EBADF (Bad file descriptor) [pid 5852] close(11) = -1 EBADF (Bad file descriptor) [pid 5852] close(12) = -1 EBADF (Bad file descriptor) [pid 5852] close(13) = -1 EBADF (Bad file descriptor) [pid 5852] close(14) = -1 EBADF (Bad file descriptor) [pid 5852] close(15) = -1 EBADF (Bad file descriptor) [pid 5852] close(16) = -1 EBADF (Bad file descriptor) [pid 5852] close(17) = -1 EBADF (Bad file descriptor) [pid 5852] close(18) = -1 EBADF (Bad file descriptor) [pid 5852] close(19) = -1 EBADF (Bad file descriptor) [pid 5852] close(20) = -1 EBADF (Bad file descriptor) [pid 5852] close(21) = -1 EBADF (Bad file descriptor) [pid 5852] close(22) = -1 EBADF (Bad file descriptor) [pid 5852] close(23) = -1 EBADF (Bad file descriptor) [pid 5852] close(24) = -1 EBADF (Bad file descriptor) [pid 5852] close(25) = -1 EBADF (Bad file descriptor) [pid 5852] close(26) = -1 EBADF (Bad file descriptor) [pid 5852] close(27) = -1 EBADF (Bad file descriptor) [pid 5852] close(28) = -1 EBADF (Bad file descriptor) [pid 5852] close(29) = -1 EBADF (Bad file descriptor) [pid 5852] exit_group(0) = ? [pid 5852] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=48, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [ 105.977367][ T5852] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./46", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./46/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./46/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./46/binderfs") = 0 [pid 5637] umount2("./46/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./46/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./46/cgroup.net") = 0 [pid 5637] umount2("./46/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./46/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./46/cgroup.cpu") = 0 [pid 5637] umount2("./46/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./46/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./46/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./46") = 0 [pid 5637] mkdir("./47", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5856 attached , child_tidptr=0x55557f25d790) = 49 [pid 5856] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5856] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5856] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5856] chdir("./47") = 0 [pid 5856] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5856] setpgid(0, 0) = 0 [pid 5856] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5856] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5856] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5856] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5856] write(3, "1000", 4) = 4 [pid 5856] close(3) = 0 [pid 5856] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5856] write(1, "executing program\n", 18) = 18 executing program [pid 5856] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5856] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5856] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5856] close(3) = 0 [pid 5856] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5856] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5856] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5856] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5856] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5856] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5856] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5856] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5856] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5856] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5856] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5856] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5856] setns(201, 0) = 0 [pid 5856] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5856] setns(7, 0) = 0 [pid 5856] close(7) = 0 [pid 5856] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5856] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5856] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=49}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5856] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=49}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5856] close(7) = 0 [pid 5856] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5856] close(3) = 0 [pid 5856] close(4) = 0 [pid 5856] close(5) = 0 [pid 5856] close(6) = 0 [pid 5856] close(7) = -1 EBADF (Bad file descriptor) [pid 5856] close(8) = 0 [pid 5856] close(9) = -1 EBADF (Bad file descriptor) [pid 5856] close(10) = -1 EBADF (Bad file descriptor) [pid 5856] close(11) = -1 EBADF (Bad file descriptor) [pid 5856] close(12) = -1 EBADF (Bad file descriptor) [pid 5856] close(13) = -1 EBADF (Bad file descriptor) [pid 5856] close(14) = -1 EBADF (Bad file descriptor) [pid 5856] close(15) = -1 EBADF (Bad file descriptor) [pid 5856] close(16) = -1 EBADF (Bad file descriptor) [pid 5856] close(17) = -1 EBADF (Bad file descriptor) [pid 5856] close(18) = -1 EBADF (Bad file descriptor) [pid 5856] close(19) = -1 EBADF (Bad file descriptor) [pid 5856] close(20) = -1 EBADF (Bad file descriptor) [pid 5856] close(21) = -1 EBADF (Bad file descriptor) [pid 5856] close(22) = -1 EBADF (Bad file descriptor) [pid 5856] close(23) = -1 EBADF (Bad file descriptor) [pid 5856] close(24) = -1 EBADF (Bad file descriptor) [pid 5856] close(25) = -1 EBADF (Bad file descriptor) [pid 5856] close(26) = -1 EBADF (Bad file descriptor) [pid 5856] close(27) = -1 EBADF (Bad file descriptor) [pid 5856] close(28) = -1 EBADF (Bad file descriptor) [pid 5856] close(29) = -1 EBADF (Bad file descriptor) [pid 5856] exit_group(0) = ? [pid 5856] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=49, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./47", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./47/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./47/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./47/binderfs") = 0 [pid 5637] umount2("./47/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./47/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./47/cgroup.net") = 0 [pid 5637] umount2("./47/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./47/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./47/cgroup.cpu") = 0 [pid 5637] umount2("./47/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./47/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./47/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./47") = 0 [pid 5637] mkdir("./48", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5862 attached , child_tidptr=0x55557f25d790) = 50 [pid 5862] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 5862] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5862] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5862] chdir("./48") = 0 [pid 5862] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5862] setpgid(0, 0) = 0 [pid 5862] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5862] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5862] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5862] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5862] write(3, "1000", 4) = 4 [pid 5862] close(3) = 0 [pid 5862] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5862] write(1, "executing program\n", 18) = 18 executing program [pid 5862] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5862] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5862] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5862] close(3) = 0 [pid 5862] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5862] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5862] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5862] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5862] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5862] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5862] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5862] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5862] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5862] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5862] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5862] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5862] setns(201, 0) = 0 [pid 5862] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5862] setns(7, 0) = 0 [pid 5862] close(7) = 0 [pid 5862] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5862] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5862] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=50}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5862] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=50}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5862] close(7) = 0 [pid 5862] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5862] close(3) = 0 [pid 5862] close(4) = 0 [pid 5862] close(5) = 0 [pid 5862] close(6) = 0 [pid 5862] close(7) = -1 EBADF (Bad file descriptor) [pid 5862] close(8) = 0 [pid 5862] close(9) = -1 EBADF (Bad file descriptor) [pid 5862] close(10) = -1 EBADF (Bad file descriptor) [pid 5862] close(11) = -1 EBADF (Bad file descriptor) [pid 5862] close(12) = -1 EBADF (Bad file descriptor) [pid 5862] close(13) = -1 EBADF (Bad file descriptor) [pid 5862] close(14) = -1 EBADF (Bad file descriptor) [pid 5862] close(15) = -1 EBADF (Bad file descriptor) [pid 5862] close(16) = -1 EBADF (Bad file descriptor) [pid 5862] close(17) = -1 EBADF (Bad file descriptor) [pid 5862] close(18) = -1 EBADF (Bad file descriptor) [pid 5862] close(19) = -1 EBADF (Bad file descriptor) [pid 5862] close(20) = -1 EBADF (Bad file descriptor) [pid 5862] close(21) = -1 EBADF (Bad file descriptor) [pid 5862] close(22) = -1 EBADF (Bad file descriptor) [pid 5862] close(23) = -1 EBADF (Bad file descriptor) [pid 5862] close(24) = -1 EBADF (Bad file descriptor) [pid 5862] close(25) = -1 EBADF (Bad file descriptor) [pid 5862] close(26) = -1 EBADF (Bad file descriptor) [pid 5862] close(27) = -1 EBADF (Bad file descriptor) [pid 5862] close(28) = -1 EBADF (Bad file descriptor) [pid 5862] close(29) = -1 EBADF (Bad file descriptor) [pid 5862] exit_group(0) = ? [pid 5862] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=50, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./48", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./48/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./48/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./48/binderfs") = 0 [pid 5637] umount2("./48/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./48/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./48/cgroup.net") = 0 [pid 5637] umount2("./48/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./48/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./48/cgroup.cpu") = 0 [pid 5637] umount2("./48/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./48/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./48/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./48") = 0 [pid 5637] mkdir("./49", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5866 attached , child_tidptr=0x55557f25d790) = 51 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 5866] set_robust_list(0x55557f25d7a0, 24 [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5866] <... set_robust_list resumed>) = 0 [pid 5866] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5866] chdir("./49") = 0 [pid 5866] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5866] setpgid(0, 0) = 0 [pid 5866] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5866] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5866] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5866] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5866] write(3, "1000", 4) = 4 [pid 5866] close(3) = 0 [pid 5866] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5866] write(1, "executing program\n", 18) = 18 [pid 5866] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5866] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5866] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5866] close(3) = 0 [pid 5866] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5866] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5866] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5866] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5866] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5866] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5866] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5866] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5866] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5866] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5866] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5866] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5866] setns(201, 0) = 0 [pid 5866] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5866] setns(7, 0) = 0 [pid 5866] close(7) = 0 [pid 5866] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5866] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5866] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=51}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5866] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=51}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5866] close(7) = 0 [pid 5866] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5866] close(3) = 0 [pid 5866] close(4) = 0 [pid 5866] close(5) = 0 [pid 5866] close(6) = 0 [pid 5866] close(7) = -1 EBADF (Bad file descriptor) [pid 5866] close(8) = 0 [pid 5866] close(9) = -1 EBADF (Bad file descriptor) [pid 5866] close(10) = -1 EBADF (Bad file descriptor) [pid 5866] close(11) = -1 EBADF (Bad file descriptor) [pid 5866] close(12) = -1 EBADF (Bad file descriptor) [pid 5866] close(13) = -1 EBADF (Bad file descriptor) [pid 5866] close(14) = -1 EBADF (Bad file descriptor) [pid 5866] close(15) = -1 EBADF (Bad file descriptor) [pid 5866] close(16) = -1 EBADF (Bad file descriptor) [pid 5866] close(17) = -1 EBADF (Bad file descriptor) [pid 5866] close(18) = -1 EBADF (Bad file descriptor) [pid 5866] close(19) = -1 EBADF (Bad file descriptor) [pid 5866] close(20) = -1 EBADF (Bad file descriptor) [pid 5866] close(21) = -1 EBADF (Bad file descriptor) [pid 5866] close(22) = -1 EBADF (Bad file descriptor) [pid 5866] close(23) = -1 EBADF (Bad file descriptor) [pid 5866] close(24) = -1 EBADF (Bad file descriptor) [pid 5866] close(25) = -1 EBADF (Bad file descriptor) [pid 5866] close(26) = -1 EBADF (Bad file descriptor) [pid 5866] close(27) = -1 EBADF (Bad file descriptor) [pid 5866] close(28) = -1 EBADF (Bad file descriptor) [pid 5866] close(29) = -1 EBADF (Bad file descriptor) [pid 5866] exit_group(0) = ? [pid 5866] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=51, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./49", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./49/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./49/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./49/binderfs") = 0 [pid 5637] umount2("./49/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./49/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./49/cgroup.net") = 0 [pid 5637] umount2("./49/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./49/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./49/cgroup.cpu") = 0 [pid 5637] umount2("./49/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./49/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./49/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./49") = 0 [pid 5637] mkdir("./50", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5870 attached , child_tidptr=0x55557f25d790) = 52 [pid 5870] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5870] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5870] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5870] chdir("./50") = 0 [pid 5870] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5870] setpgid(0, 0) = 0 [pid 5870] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5870] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5870] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5870] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5870] write(3, "1000", 4) = 4 [pid 5870] close(3) = 0 [pid 5870] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5870] write(1, "executing program\n", 18) = 18 executing program [pid 5870] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5870] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5870] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5870] close(3) = 0 [pid 5870] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5870] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5870] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5870] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5870] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5870] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5870] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5870] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5870] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5870] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5870] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5870] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5870] setns(201, 0) = 0 [pid 5870] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5870] setns(7, 0) = 0 [pid 5870] close(7) = 0 [pid 5870] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5870] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5870] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=52}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5870] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=52}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5870] close(7) = 0 [pid 5870] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5870] close(3) = 0 [pid 5870] close(4) = 0 [pid 5870] close(5) = 0 [pid 5870] close(6) = 0 [pid 5870] close(7) = -1 EBADF (Bad file descriptor) [pid 5870] close(8) = 0 [pid 5870] close(9) = -1 EBADF (Bad file descriptor) [pid 5870] close(10) = -1 EBADF (Bad file descriptor) [pid 5870] close(11) = -1 EBADF (Bad file descriptor) [pid 5870] close(12) = -1 EBADF (Bad file descriptor) [pid 5870] close(13) = -1 EBADF (Bad file descriptor) [pid 5870] close(14) = -1 EBADF (Bad file descriptor) [pid 5870] close(15) = -1 EBADF (Bad file descriptor) [pid 5870] close(16) = -1 EBADF (Bad file descriptor) [pid 5870] close(17) = -1 EBADF (Bad file descriptor) [pid 5870] close(18) = -1 EBADF (Bad file descriptor) [pid 5870] close(19) = -1 EBADF (Bad file descriptor) [pid 5870] close(20) = -1 EBADF (Bad file descriptor) [pid 5870] close(21) = -1 EBADF (Bad file descriptor) [pid 5870] close(22) = -1 EBADF (Bad file descriptor) [pid 5870] close(23) = -1 EBADF (Bad file descriptor) [pid 5870] close(24) = -1 EBADF (Bad file descriptor) [pid 5870] close(25) = -1 EBADF (Bad file descriptor) [pid 5870] close(26) = -1 EBADF (Bad file descriptor) [pid 5870] close(27) = -1 EBADF (Bad file descriptor) [pid 5870] close(28) = -1 EBADF (Bad file descriptor) [pid 5870] close(29) = -1 EBADF (Bad file descriptor) [pid 5870] exit_group(0) = ? [pid 5870] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=52, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./50", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./50/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./50/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./50/binderfs") = 0 [pid 5637] umount2("./50/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./50/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./50/cgroup.net") = 0 [pid 5637] umount2("./50/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./50/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./50/cgroup.cpu") = 0 [pid 5637] umount2("./50/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./50/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./50/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./50") = 0 [pid 5637] mkdir("./51", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5874 attached , child_tidptr=0x55557f25d790) = 53 [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5874] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5874] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5874] chdir("./51") = 0 [pid 5874] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5874] setpgid(0, 0) = 0 [pid 5874] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5874] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5874] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5874] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5874] write(3, "1000", 4) = 4 [pid 5874] close(3) = 0 [pid 5874] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5874] write(1, "executing program\n", 18) = 18 [pid 5874] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5874] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5874] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5874] close(3) = 0 [pid 5874] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5874] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5874] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5874] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5874] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5874] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5874] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5874] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5874] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5874] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5874] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5874] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5874] setns(201, 0) = 0 [pid 5874] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5874] setns(7, 0) = 0 [pid 5874] close(7) = 0 [pid 5874] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5874] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5874] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=53}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5874] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=53}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5874] close(7) = 0 [pid 5874] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5874] close(3) = 0 [pid 5874] close(4) = 0 [pid 5874] close(5) = 0 [pid 5874] close(6) = 0 [pid 5874] close(7) = -1 EBADF (Bad file descriptor) [pid 5874] close(8) = 0 [pid 5874] close(9) = -1 EBADF (Bad file descriptor) [pid 5874] close(10) = -1 EBADF (Bad file descriptor) [pid 5874] close(11) = -1 EBADF (Bad file descriptor) [pid 5874] close(12) = -1 EBADF (Bad file descriptor) [pid 5874] close(13) = -1 EBADF (Bad file descriptor) [pid 5874] close(14) = -1 EBADF (Bad file descriptor) [pid 5874] close(15) = -1 EBADF (Bad file descriptor) [pid 5874] close(16) = -1 EBADF (Bad file descriptor) [pid 5874] close(17) = -1 EBADF (Bad file descriptor) [pid 5874] close(18) = -1 EBADF (Bad file descriptor) [pid 5874] close(19) = -1 EBADF (Bad file descriptor) [pid 5874] close(20) = -1 EBADF (Bad file descriptor) [pid 5874] close(21) = -1 EBADF (Bad file descriptor) [pid 5874] close(22) = -1 EBADF (Bad file descriptor) [pid 5874] close(23) = -1 EBADF (Bad file descriptor) [pid 5874] close(24) = -1 EBADF (Bad file descriptor) [pid 5874] close(25) = -1 EBADF (Bad file descriptor) [pid 5874] close(26) = -1 EBADF (Bad file descriptor) [pid 5874] close(27) = -1 EBADF (Bad file descriptor) [pid 5874] close(28) = -1 EBADF (Bad file descriptor) [pid 5874] close(29) = -1 EBADF (Bad file descriptor) [pid 5874] exit_group(0) = ? [pid 5874] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=53, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./51", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./51/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./51/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./51/binderfs") = 0 [pid 5637] umount2("./51/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./51/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./51/cgroup.net") = 0 [pid 5637] umount2("./51/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./51/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./51/cgroup.cpu") = 0 [pid 5637] umount2("./51/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./51/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./51/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./51") = 0 [pid 5637] mkdir("./52", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5881 attached , child_tidptr=0x55557f25d790) = 54 [pid 5881] set_robust_list(0x55557f25d7a0, 24 [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5881] <... set_robust_list resumed>) = 0 [pid 5881] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5881] chdir("./52") = 0 [pid 5881] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5881] setpgid(0, 0) = 0 [pid 5881] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5881] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5881] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5881] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5881] write(3, "1000", 4) = 4 [pid 5881] close(3) = 0 executing program [pid 5881] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5881] write(1, "executing program\n", 18) = 18 [pid 5881] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5881] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5881] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5881] close(3) = 0 [pid 5881] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5881] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5881] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5881] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5881] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5881] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5881] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5881] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5881] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5881] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5881] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5881] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5881] setns(201, 0) = 0 [pid 5881] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5881] setns(7, 0) = 0 [pid 5881] close(7) = 0 [pid 5881] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5881] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5881] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=54}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5881] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=54}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5881] close(7) = 0 [pid 5881] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5881] close(3) = 0 [pid 5881] close(4) = 0 [pid 5881] close(5) = 0 [pid 5881] close(6) = 0 [pid 5881] close(7) = -1 EBADF (Bad file descriptor) [pid 5881] close(8) = 0 [pid 5881] close(9) = -1 EBADF (Bad file descriptor) [pid 5881] close(10) = -1 EBADF (Bad file descriptor) [pid 5881] close(11) = -1 EBADF (Bad file descriptor) [pid 5881] close(12) = -1 EBADF (Bad file descriptor) [pid 5881] close(13) = -1 EBADF (Bad file descriptor) [pid 5881] close(14) = -1 EBADF (Bad file descriptor) [pid 5881] close(15) = -1 EBADF (Bad file descriptor) [pid 5881] close(16) = -1 EBADF (Bad file descriptor) [pid 5881] close(17) = -1 EBADF (Bad file descriptor) [pid 5881] close(18) = -1 EBADF (Bad file descriptor) [pid 5881] close(19) = -1 EBADF (Bad file descriptor) [pid 5881] close(20) = -1 EBADF (Bad file descriptor) [pid 5881] close(21) = -1 EBADF (Bad file descriptor) [pid 5881] close(22) = -1 EBADF (Bad file descriptor) [pid 5881] close(23) = -1 EBADF (Bad file descriptor) [pid 5881] close(24) = -1 EBADF (Bad file descriptor) [pid 5881] close(25) = -1 EBADF (Bad file descriptor) [pid 5881] close(26) = -1 EBADF (Bad file descriptor) [pid 5881] close(27) = -1 EBADF (Bad file descriptor) [pid 5881] close(28) = -1 EBADF (Bad file descriptor) [pid 5881] close(29) = -1 EBADF (Bad file descriptor) [pid 5881] exit_group(0) = ? [pid 5881] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=54, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./52", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./52/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./52/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./52/binderfs") = 0 [pid 5637] umount2("./52/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./52/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./52/cgroup.net") = 0 [pid 5637] umount2("./52/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./52/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./52/cgroup.cpu") = 0 [pid 5637] umount2("./52/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./52/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./52/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./52") = 0 [pid 5637] mkdir("./53", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5885 attached , child_tidptr=0x55557f25d790) = 55 [pid 5885] set_robust_list(0x55557f25d7a0, 24 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 5885] <... set_robust_list resumed>) = 0 [pid 5885] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5885] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5885] chdir("./53") = 0 [pid 5885] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5885] setpgid(0, 0) = 0 [pid 5885] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5885] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5885] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5885] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5885] write(3, "1000", 4) = 4 [pid 5885] close(3) = 0 [pid 5885] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5885] write(1, "executing program\n", 18) = 18 [pid 5885] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5885] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5885] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5885] close(3) = 0 [pid 5885] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5885] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5885] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5885] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5885] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5885] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5885] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5885] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5885] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5885] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5885] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5885] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5885] setns(201, 0) = 0 [pid 5885] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5885] setns(7, 0) = 0 [pid 5885] close(7) = 0 [pid 5885] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5885] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5885] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=55}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5885] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=55}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5885] close(7) = 0 [pid 5885] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5885] close(3) = 0 [pid 5885] close(4) = 0 [pid 5885] close(5) = 0 [pid 5885] close(6) = 0 [pid 5885] close(7) = -1 EBADF (Bad file descriptor) [pid 5885] close(8) = 0 [pid 5885] close(9) = -1 EBADF (Bad file descriptor) [pid 5885] close(10) = -1 EBADF (Bad file descriptor) [pid 5885] close(11) = -1 EBADF (Bad file descriptor) [pid 5885] close(12) = -1 EBADF (Bad file descriptor) [pid 5885] close(13) = -1 EBADF (Bad file descriptor) [pid 5885] close(14) = -1 EBADF (Bad file descriptor) [pid 5885] close(15) = -1 EBADF (Bad file descriptor) [pid 5885] close(16) = -1 EBADF (Bad file descriptor) [pid 5885] close(17) = -1 EBADF (Bad file descriptor) [pid 5885] close(18) = -1 EBADF (Bad file descriptor) [pid 5885] close(19) = -1 EBADF (Bad file descriptor) [pid 5885] close(20) = -1 EBADF (Bad file descriptor) [pid 5885] close(21) = -1 EBADF (Bad file descriptor) [pid 5885] close(22) = -1 EBADF (Bad file descriptor) [pid 5885] close(23) = -1 EBADF (Bad file descriptor) [pid 5885] close(24) = -1 EBADF (Bad file descriptor) [pid 5885] close(25) = -1 EBADF (Bad file descriptor) [pid 5885] close(26) = -1 EBADF (Bad file descriptor) [pid 5885] close(27) = -1 EBADF (Bad file descriptor) [pid 5885] close(28) = -1 EBADF (Bad file descriptor) [pid 5885] close(29) = -1 EBADF (Bad file descriptor) [pid 5885] exit_group(0) = ? [pid 5885] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=55, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./53", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./53/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./53/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./53/binderfs") = 0 [pid 5637] umount2("./53/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./53/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./53/cgroup.net") = 0 [pid 5637] umount2("./53/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./53/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./53/cgroup.cpu") = 0 [pid 5637] umount2("./53/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./53/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./53/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./53") = 0 [pid 5637] mkdir("./54", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5890 attached , child_tidptr=0x55557f25d790) = 56 [pid 5890] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5890] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5890] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5890] chdir("./54") = 0 [pid 5890] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5890] setpgid(0, 0) = 0 [pid 5890] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5890] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5890] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5890] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5890] write(3, "1000", 4) = 4 [pid 5890] close(3) = 0 [pid 5890] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5890] write(1, "executing program\n", 18) = 18 [pid 5890] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5890] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5890] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5890] close(3) = 0 [pid 5890] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5890] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5890] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5890] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5890] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5890] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5890] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5890] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5890] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5890] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5890] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5890] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5890] setns(201, 0) = 0 [pid 5890] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5890] setns(7, 0) = 0 [pid 5890] close(7) = 0 [pid 5890] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5890] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5890] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=56}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5890] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=56}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5890] close(7) = 0 [pid 5890] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5890] close(3) = 0 [pid 5890] close(4) = 0 [pid 5890] close(5) = 0 [pid 5890] close(6) = 0 [pid 5890] close(7) = -1 EBADF (Bad file descriptor) [pid 5890] close(8) = 0 [pid 5890] close(9) = -1 EBADF (Bad file descriptor) [pid 5890] close(10) = -1 EBADF (Bad file descriptor) [pid 5890] close(11) = -1 EBADF (Bad file descriptor) [pid 5890] close(12) = -1 EBADF (Bad file descriptor) [pid 5890] close(13) = -1 EBADF (Bad file descriptor) [pid 5890] close(14) = -1 EBADF (Bad file descriptor) [pid 5890] close(15) = -1 EBADF (Bad file descriptor) [pid 5890] close(16) = -1 EBADF (Bad file descriptor) [pid 5890] close(17) = -1 EBADF (Bad file descriptor) [pid 5890] close(18) = -1 EBADF (Bad file descriptor) [pid 5890] close(19) = -1 EBADF (Bad file descriptor) [pid 5890] close(20) = -1 EBADF (Bad file descriptor) [pid 5890] close(21) = -1 EBADF (Bad file descriptor) [pid 5890] close(22) = -1 EBADF (Bad file descriptor) [pid 5890] close(23) = -1 EBADF (Bad file descriptor) [pid 5890] close(24) = -1 EBADF (Bad file descriptor) [pid 5890] close(25) = -1 EBADF (Bad file descriptor) [pid 5890] close(26) = -1 EBADF (Bad file descriptor) [pid 5890] close(27) = -1 EBADF (Bad file descriptor) [pid 5890] close(28) = -1 EBADF (Bad file descriptor) [pid 5890] close(29) = -1 EBADF (Bad file descriptor) [pid 5890] exit_group(0) = ? [pid 5890] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=56, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./54", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./54/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./54/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./54/binderfs") = 0 [pid 5637] umount2("./54/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./54/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./54/cgroup.net") = 0 [pid 5637] umount2("./54/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./54/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./54/cgroup.cpu") = 0 [pid 5637] umount2("./54/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./54/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./54/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./54") = 0 [pid 5637] mkdir("./55", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5894 attached [pid 5894] set_robust_list(0x55557f25d7a0, 24 [pid 5637] <... clone resumed>, child_tidptr=0x55557f25d790) = 57 [pid 5894] <... set_robust_list resumed>) = 0 [pid 5894] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5894] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5894] chdir("./55") = 0 [pid 5894] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5894] setpgid(0, 0) = 0 [pid 5894] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5894] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5894] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5894] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5894] write(3, "1000", 4) = 4 [pid 5894] close(3) = 0 [pid 5894] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5894] write(1, "executing program\n", 18) = 18 executing program [pid 5894] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5894] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5894] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5894] close(3) = 0 [pid 5894] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5894] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5894] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5894] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5894] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5894] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5894] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5894] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5894] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5894] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5894] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5894] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5894] setns(201, 0) = 0 [pid 5894] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5894] setns(7, 0) = 0 [pid 5894] close(7) = 0 [pid 5894] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5894] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5894] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=57}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5894] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=57}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5894] close(7) = 0 [pid 5894] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5894] close(3) = 0 [pid 5894] close(4) = 0 [pid 5894] close(5) = 0 [pid 5894] close(6) = 0 [pid 5894] close(7) = -1 EBADF (Bad file descriptor) [pid 5894] close(8) = 0 [pid 5894] close(9) = -1 EBADF (Bad file descriptor) [pid 5894] close(10) = -1 EBADF (Bad file descriptor) [pid 5894] close(11) = -1 EBADF (Bad file descriptor) [pid 5894] close(12) = -1 EBADF (Bad file descriptor) [pid 5894] close(13) = -1 EBADF (Bad file descriptor) [pid 5894] close(14) = -1 EBADF (Bad file descriptor) [pid 5894] close(15) = -1 EBADF (Bad file descriptor) [pid 5894] close(16) = -1 EBADF (Bad file descriptor) [pid 5894] close(17) = -1 EBADF (Bad file descriptor) [pid 5894] close(18) = -1 EBADF (Bad file descriptor) [pid 5894] close(19) = -1 EBADF (Bad file descriptor) [pid 5894] close(20) = -1 EBADF (Bad file descriptor) [pid 5894] close(21) = -1 EBADF (Bad file descriptor) [pid 5894] close(22) = -1 EBADF (Bad file descriptor) [pid 5894] close(23) = -1 EBADF (Bad file descriptor) [pid 5894] close(24) = -1 EBADF (Bad file descriptor) [pid 5894] close(25) = -1 EBADF (Bad file descriptor) [pid 5894] close(26) = -1 EBADF (Bad file descriptor) [pid 5894] close(27) = -1 EBADF (Bad file descriptor) [pid 5894] close(28) = -1 EBADF (Bad file descriptor) [pid 5894] close(29) = -1 EBADF (Bad file descriptor) [pid 5894] exit_group(0) = ? [pid 5894] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=57, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./55", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./55/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./55/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./55/binderfs") = 0 [pid 5637] umount2("./55/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./55/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./55/cgroup.net") = 0 [pid 5637] umount2("./55/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./55/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./55/cgroup.cpu") = 0 [pid 5637] umount2("./55/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./55/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./55/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./55") = 0 [pid 5637] mkdir("./56", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5898 attached , child_tidptr=0x55557f25d790) = 58 [pid 5898] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 5898] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5898] chdir("./56") = 0 [pid 5898] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5898] setpgid(0, 0) = 0 [pid 5898] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5898] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5898] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5898] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5898] write(3, "1000", 4) = 4 [pid 5898] close(3) = 0 [pid 5898] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5898] write(1, "executing program\n", 18) = 18 executing program [pid 5898] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5898] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5898] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5898] close(3) = 0 [pid 5898] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5898] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5898] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5898] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5898] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5898] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5898] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5898] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5898] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5898] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5898] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5898] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5898] setns(201, 0) = 0 [pid 5898] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5898] setns(7, 0) = 0 [pid 5898] close(7) = 0 [pid 5898] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5898] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5898] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=58}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5898] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=58}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5898] close(7) = 0 [pid 5898] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5898] close(3) = 0 [pid 5898] close(4) = 0 [pid 5898] close(5) = 0 [pid 5898] close(6) = 0 [pid 5898] close(7) = -1 EBADF (Bad file descriptor) [pid 5898] close(8) = 0 [pid 5898] close(9) = -1 EBADF (Bad file descriptor) [pid 5898] close(10) = -1 EBADF (Bad file descriptor) [pid 5898] close(11) = -1 EBADF (Bad file descriptor) [pid 5898] close(12) = -1 EBADF (Bad file descriptor) [pid 5898] close(13) = -1 EBADF (Bad file descriptor) [pid 5898] close(14) = -1 EBADF (Bad file descriptor) [pid 5898] close(15) = -1 EBADF (Bad file descriptor) [pid 5898] close(16) = -1 EBADF (Bad file descriptor) [pid 5898] close(17) = -1 EBADF (Bad file descriptor) [pid 5898] close(18) = -1 EBADF (Bad file descriptor) [ 108.566590][ T5898] __nla_validate_parse: 9 callbacks suppressed [ 108.566607][ T5898] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 5898] close(19) = -1 EBADF (Bad file descriptor) [pid 5898] close(20) = -1 EBADF (Bad file descriptor) [pid 5898] close(21) = -1 EBADF (Bad file descriptor) [pid 5898] close(22) = -1 EBADF (Bad file descriptor) [pid 5898] close(23) = -1 EBADF (Bad file descriptor) [pid 5898] close(24) = -1 EBADF (Bad file descriptor) [pid 5898] close(25) = -1 EBADF (Bad file descriptor) [pid 5898] close(26) = -1 EBADF (Bad file descriptor) [pid 5898] close(27) = -1 EBADF (Bad file descriptor) [pid 5898] close(28) = -1 EBADF (Bad file descriptor) [pid 5898] close(29) = -1 EBADF (Bad file descriptor) [pid 5898] exit_group(0) = ? [pid 5898] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=58, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./56", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./56/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./56/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./56/binderfs") = 0 [pid 5637] umount2("./56/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./56/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./56/cgroup.net") = 0 [pid 5637] umount2("./56/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./56/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./56/cgroup.cpu") = 0 [pid 5637] umount2("./56/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./56/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./56/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./56") = 0 [pid 5637] mkdir("./57", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557f25d790) = 59 ci-upstream-net-kasan-gce/strace-static-x86_64: Process 5904 attached [ 108.664945][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5904] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5904] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5904] chdir("./57") = 0 [pid 5904] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5904] setpgid(0, 0) = 0 [pid 5904] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5904] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5904] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5904] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5904] write(3, "1000", 4) = 4 [pid 5904] close(3) = 0 [pid 5904] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5904] write(1, "executing program\n", 18) = 18 [pid 5904] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5904] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5904] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5904] close(3) = 0 [pid 5904] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5904] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5904] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5904] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5904] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5904] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5904] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5904] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5904] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5904] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5904] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5904] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5904] setns(201, 0) = 0 [pid 5904] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5904] setns(7, 0) = 0 [pid 5904] close(7) = 0 [pid 5904] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5904] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5904] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=59}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5904] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=59}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5904] close(7) = 0 [pid 5904] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5904] close(3) = 0 [pid 5904] close(4) = 0 [pid 5904] close(5) = 0 [pid 5904] close(6) = 0 [pid 5904] close(7) = -1 EBADF (Bad file descriptor) [ 108.883611][ T5904] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 5904] close(8) = 0 [pid 5904] close(9) = -1 EBADF (Bad file descriptor) [pid 5904] close(10) = -1 EBADF (Bad file descriptor) [pid 5904] close(11) = -1 EBADF (Bad file descriptor) [pid 5904] close(12) = -1 EBADF (Bad file descriptor) [pid 5904] close(13) = -1 EBADF (Bad file descriptor) [pid 5904] close(14) = -1 EBADF (Bad file descriptor) [pid 5904] close(15) = -1 EBADF (Bad file descriptor) [pid 5904] close(16) = -1 EBADF (Bad file descriptor) [pid 5904] close(17) = -1 EBADF (Bad file descriptor) [pid 5904] close(18) = -1 EBADF (Bad file descriptor) [pid 5904] close(19) = -1 EBADF (Bad file descriptor) [pid 5904] close(20) = -1 EBADF (Bad file descriptor) [pid 5904] close(21) = -1 EBADF (Bad file descriptor) [pid 5904] close(22) = -1 EBADF (Bad file descriptor) [pid 5904] close(23) = -1 EBADF (Bad file descriptor) [pid 5904] close(24) = -1 EBADF (Bad file descriptor) [pid 5904] close(25) = -1 EBADF (Bad file descriptor) [pid 5904] close(26) = -1 EBADF (Bad file descriptor) [pid 5904] close(27) = -1 EBADF (Bad file descriptor) [pid 5904] close(28) = -1 EBADF (Bad file descriptor) [pid 5904] close(29) = -1 EBADF (Bad file descriptor) [pid 5904] exit_group(0) = ? [pid 5904] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=59, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./57", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./57/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./57/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./57/binderfs") = 0 [pid 5637] umount2("./57/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./57/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./57/cgroup.net") = 0 [pid 5637] umount2("./57/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./57/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./57/cgroup.cpu") = 0 [pid 5637] umount2("./57/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./57/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./57/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./57") = 0 [pid 5637] mkdir("./58", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5908 attached , child_tidptr=0x55557f25d790) = 60 [pid 5908] set_robust_list(0x55557f25d7a0, 24 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 5908] <... set_robust_list resumed>) = 0 [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5908] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5908] chdir("./58") = 0 [ 108.972588][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 5908] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5908] setpgid(0, 0) = 0 [pid 5908] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5908] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5908] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5908] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5908] write(3, "1000", 4) = 4 [pid 5908] close(3) = 0 [pid 5908] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5908] write(1, "executing program\n", 18) = 18 [pid 5908] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) executing program [pid 5908] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5908] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5908] close(3) = 0 [pid 5908] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5908] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5908] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5908] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5908] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5908] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5908] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5908] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5908] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5908] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5908] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5908] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5908] setns(201, 0) = 0 [pid 5908] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5908] setns(7, 0) = 0 [pid 5908] close(7) = 0 [pid 5908] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5908] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5908] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=60}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5908] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=60}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5908] close(7) = 0 [pid 5908] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5908] close(3) = 0 [pid 5908] close(4) = 0 [pid 5908] close(5) = 0 [pid 5908] close(6) = 0 [pid 5908] close(7) = -1 EBADF (Bad file descriptor) [ 109.129750][ T5908] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 5908] close(8) = 0 [pid 5908] close(9) = -1 EBADF (Bad file descriptor) [pid 5908] close(10) = -1 EBADF (Bad file descriptor) [pid 5908] close(11) = -1 EBADF (Bad file descriptor) [pid 5908] close(12) = -1 EBADF (Bad file descriptor) [pid 5908] close(13) = -1 EBADF (Bad file descriptor) [pid 5908] close(14) = -1 EBADF (Bad file descriptor) [pid 5908] close(15) = -1 EBADF (Bad file descriptor) [pid 5908] close(16) = -1 EBADF (Bad file descriptor) [pid 5908] close(17) = -1 EBADF (Bad file descriptor) [pid 5908] close(18) = -1 EBADF (Bad file descriptor) [pid 5908] close(19) = -1 EBADF (Bad file descriptor) [pid 5908] close(20) = -1 EBADF (Bad file descriptor) [pid 5908] close(21) = -1 EBADF (Bad file descriptor) [pid 5908] close(22) = -1 EBADF (Bad file descriptor) [pid 5908] close(23) = -1 EBADF (Bad file descriptor) [pid 5908] close(24) = -1 EBADF (Bad file descriptor) [pid 5908] close(25) = -1 EBADF (Bad file descriptor) [pid 5908] close(26) = -1 EBADF (Bad file descriptor) [ 109.209333][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 5908] close(27) = -1 EBADF (Bad file descriptor) [pid 5908] close(28) = -1 EBADF (Bad file descriptor) [pid 5908] close(29) = -1 EBADF (Bad file descriptor) [pid 5908] exit_group(0) = ? [pid 5908] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=60, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./58", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./58/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./58/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./58/binderfs") = 0 [pid 5637] umount2("./58/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./58/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./58/cgroup.net") = 0 [pid 5637] umount2("./58/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./58/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./58/cgroup.cpu") = 0 [pid 5637] umount2("./58/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./58/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./58/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./58") = 0 [pid 5637] mkdir("./59", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5912 attached , child_tidptr=0x55557f25d790) = 61 [pid 5912] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5912] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5912] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5912] chdir("./59") = 0 [pid 5912] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5912] setpgid(0, 0) = 0 [pid 5912] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5912] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5912] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5912] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5912] write(3, "1000", 4) = 4 [pid 5912] close(3) = 0 [pid 5912] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5912] write(1, "executing program\n", 18) = 18 executing program [pid 5912] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5912] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5912] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5912] close(3) = 0 [pid 5912] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5912] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5912] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5912] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5912] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5912] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5912] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5912] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5912] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5912] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5912] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5912] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5912] setns(201, 0) = 0 [pid 5912] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5912] setns(7, 0) = 0 [pid 5912] close(7) = 0 [pid 5912] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5912] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5912] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=61}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5912] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=61}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5912] close(7) = 0 [pid 5912] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5912] close(3) = 0 [pid 5912] close(4) = 0 [pid 5912] close(5) = 0 [pid 5912] close(6) = 0 [pid 5912] close(7) = -1 EBADF (Bad file descriptor) [pid 5912] close(8) = 0 [pid 5912] close(9) = -1 EBADF (Bad file descriptor) [pid 5912] close(10) = -1 EBADF (Bad file descriptor) [pid 5912] close(11) = -1 EBADF (Bad file descriptor) [pid 5912] close(12) = -1 EBADF (Bad file descriptor) [pid 5912] close(13) = -1 EBADF (Bad file descriptor) [pid 5912] close(14) = -1 EBADF (Bad file descriptor) [pid 5912] close(15) = -1 EBADF (Bad file descriptor) [pid 5912] close(16) = -1 EBADF (Bad file descriptor) [pid 5912] close(17) = -1 EBADF (Bad file descriptor) [pid 5912] close(18) = -1 EBADF (Bad file descriptor) [pid 5912] close(19) = -1 EBADF (Bad file descriptor) [pid 5912] close(20) = -1 EBADF (Bad file descriptor) [pid 5912] close(21) = -1 EBADF (Bad file descriptor) [pid 5912] close(22) = -1 EBADF (Bad file descriptor) [pid 5912] close(23) = -1 EBADF (Bad file descriptor) [pid 5912] close(24) = -1 EBADF (Bad file descriptor) [pid 5912] close(25) = -1 EBADF (Bad file descriptor) [pid 5912] close(26) = -1 EBADF (Bad file descriptor) [pid 5912] close(27) = -1 EBADF (Bad file descriptor) [pid 5912] close(28) = -1 EBADF (Bad file descriptor) [ 109.431882][ T5912] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 5912] close(29) = -1 EBADF (Bad file descriptor) [pid 5912] exit_group(0) = ? [pid 5912] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=61, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./59", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./59/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./59/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./59/binderfs") = 0 [pid 5637] umount2("./59/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./59/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./59/cgroup.net") = 0 [pid 5637] umount2("./59/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./59/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./59/cgroup.cpu") = 0 [pid 5637] umount2("./59/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./59/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./59/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./59") = 0 [pid 5637] mkdir("./60", 0777) = 0 [ 109.555697][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5916 attached , child_tidptr=0x55557f25d790) = 62 [pid 5916] set_robust_list(0x55557f25d7a0, 24 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 5916] <... set_robust_list resumed>) = 0 [pid 5916] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5916] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5916] chdir("./60") = 0 [pid 5916] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5916] setpgid(0, 0) = 0 [pid 5916] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5916] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5916] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5916] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5916] write(3, "1000", 4) = 4 [pid 5916] close(3) = 0 [pid 5916] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5916] write(1, "executing program\n", 18) = 18 executing program [pid 5916] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5916] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5916] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5916] close(3) = 0 [pid 5916] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5916] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5916] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5916] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5916] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5916] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5916] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5916] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5916] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5916] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5916] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5916] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5916] setns(201, 0) = 0 [pid 5916] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5916] setns(7, 0) = 0 [pid 5916] close(7) = 0 [pid 5916] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5916] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5916] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=62}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5916] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=62}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5916] close(7) = 0 [pid 5916] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5916] close(3) = 0 [pid 5916] close(4) = 0 [pid 5916] close(5) = 0 [pid 5916] close(6) = 0 [pid 5916] close(7) = -1 EBADF (Bad file descriptor) [pid 5916] close(8) = 0 [pid 5916] close(9) = -1 EBADF (Bad file descriptor) [pid 5916] close(10) = -1 EBADF (Bad file descriptor) [pid 5916] close(11) = -1 EBADF (Bad file descriptor) [pid 5916] close(12) = -1 EBADF (Bad file descriptor) [pid 5916] close(13) = -1 EBADF (Bad file descriptor) [pid 5916] close(14) = -1 EBADF (Bad file descriptor) [pid 5916] close(15) = -1 EBADF (Bad file descriptor) [pid 5916] close(16) = -1 EBADF (Bad file descriptor) [pid 5916] close(17) = -1 EBADF (Bad file descriptor) [pid 5916] close(18) = -1 EBADF (Bad file descriptor) [pid 5916] close(19) = -1 EBADF (Bad file descriptor) [pid 5916] close(20) = -1 EBADF (Bad file descriptor) [pid 5916] close(21) = -1 EBADF (Bad file descriptor) [pid 5916] close(22) = -1 EBADF (Bad file descriptor) [pid 5916] close(23) = -1 EBADF (Bad file descriptor) [pid 5916] close(24) = -1 EBADF (Bad file descriptor) [pid 5916] close(25) = -1 EBADF (Bad file descriptor) [pid 5916] close(26) = -1 EBADF (Bad file descriptor) [pid 5916] close(27) = -1 EBADF (Bad file descriptor) [pid 5916] close(28) = -1 EBADF (Bad file descriptor) [pid 5916] close(29) = -1 EBADF (Bad file descriptor) [pid 5916] exit_group(0) = ? [pid 5916] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=62, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [ 109.786421][ T5916] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./60", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./60/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./60/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./60/binderfs") = 0 [pid 5637] umount2("./60/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./60/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./60/cgroup.net") = 0 [pid 5637] umount2("./60/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./60/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./60/cgroup.cpu") = 0 [pid 5637] umount2("./60/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./60/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./60/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./60") = 0 [pid 5637] mkdir("./61", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5921 attached , child_tidptr=0x55557f25d790) = 63 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 5921] set_robust_list(0x55557f25d7a0, 24 [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5921] <... set_robust_list resumed>) = 0 [pid 5921] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5921] chdir("./61") = 0 [pid 5921] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5921] setpgid(0, 0) = 0 [ 109.895740][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 5921] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5921] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5921] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5921] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5921] write(3, "1000", 4) = 4 [pid 5921] close(3) = 0 [pid 5921] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5921] write(1, "executing program\n", 18) = 18 executing program [pid 5921] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5921] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5921] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5921] close(3) = 0 [pid 5921] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5921] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5921] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5921] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5921] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5921] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5921] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5921] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5921] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5921] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5921] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5921] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5921] setns(201, 0) = 0 [pid 5921] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5921] setns(7, 0) = 0 [pid 5921] close(7) = 0 [pid 5921] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5921] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5921] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=63}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5921] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=63}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5921] close(7) = 0 [pid 5921] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5921] close(3) = 0 [pid 5921] close(4) = 0 [pid 5921] close(5) = 0 [pid 5921] close(6) = 0 [pid 5921] close(7) = -1 EBADF (Bad file descriptor) [pid 5921] close(8) = 0 [pid 5921] close(9) = -1 EBADF (Bad file descriptor) [pid 5921] close(10) = -1 EBADF (Bad file descriptor) [pid 5921] close(11) = -1 EBADF (Bad file descriptor) [pid 5921] close(12) = -1 EBADF (Bad file descriptor) [pid 5921] close(13) = -1 EBADF (Bad file descriptor) [pid 5921] close(14) = -1 EBADF (Bad file descriptor) [pid 5921] close(15) = -1 EBADF (Bad file descriptor) [pid 5921] close(16) = -1 EBADF (Bad file descriptor) [pid 5921] close(17) = -1 EBADF (Bad file descriptor) [pid 5921] close(18) = -1 EBADF (Bad file descriptor) [pid 5921] close(19) = -1 EBADF (Bad file descriptor) [pid 5921] close(20) = -1 EBADF (Bad file descriptor) [pid 5921] close(21) = -1 EBADF (Bad file descriptor) [pid 5921] close(22) = -1 EBADF (Bad file descriptor) [pid 5921] close(23) = -1 EBADF (Bad file descriptor) [pid 5921] close(24) = -1 EBADF (Bad file descriptor) [pid 5921] close(25) = -1 EBADF (Bad file descriptor) [pid 5921] close(26) = -1 EBADF (Bad file descriptor) [pid 5921] close(27) = -1 EBADF (Bad file descriptor) [pid 5921] close(28) = -1 EBADF (Bad file descriptor) [ 109.994066][ T5921] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 5921] close(29) = -1 EBADF (Bad file descriptor) [pid 5921] exit_group(0) = ? [pid 5921] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=63, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./61", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./61/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./61/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./61/binderfs") = 0 [pid 5637] umount2("./61/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./61/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./61/cgroup.net") = 0 [pid 5637] umount2("./61/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./61/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./61/cgroup.cpu") = 0 [pid 5637] umount2("./61/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./61/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./61/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./61") = 0 [pid 5637] mkdir("./62", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5925 attached , child_tidptr=0x55557f25d790) = 64 [pid 5925] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 5925] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5925] <... rt_sigprocmask resumed>, NULL, 8) = 0 [ 110.077292][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 110.081182][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 5925] chdir("./62") = 0 [pid 5925] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5925] setpgid(0, 0) = 0 [pid 5925] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5925] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5925] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5925] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5925] write(3, "1000", 4) = 4 [pid 5925] close(3) = 0 [pid 5925] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5925] write(1, "executing program\n", 18) = 18 [pid 5925] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) executing program [pid 5925] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5925] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5925] close(3) = 0 [pid 5925] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5925] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5925] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5925] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5925] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5925] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5925] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5925] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5925] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5925] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5925] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5925] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5925] setns(201, 0) = 0 [pid 5925] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5925] setns(7, 0) = 0 [pid 5925] close(7) = 0 [pid 5925] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5925] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5925] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=64}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5925] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=64}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5925] close(7) = 0 [pid 5925] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5925] close(3) = 0 [pid 5925] close(4) = 0 [pid 5925] close(5) = 0 [pid 5925] close(6) = 0 [pid 5925] close(7) = -1 EBADF (Bad file descriptor) [pid 5925] close(8) = 0 [pid 5925] close(9) = -1 EBADF (Bad file descriptor) [pid 5925] close(10) = -1 EBADF (Bad file descriptor) [pid 5925] close(11) = -1 EBADF (Bad file descriptor) [pid 5925] close(12) = -1 EBADF (Bad file descriptor) [pid 5925] close(13) = -1 EBADF (Bad file descriptor) [pid 5925] close(14) = -1 EBADF (Bad file descriptor) [pid 5925] close(15) = -1 EBADF (Bad file descriptor) [pid 5925] close(16) = -1 EBADF (Bad file descriptor) [pid 5925] close(17) = -1 EBADF (Bad file descriptor) [pid 5925] close(18) = -1 EBADF (Bad file descriptor) [pid 5925] close(19) = -1 EBADF (Bad file descriptor) [pid 5925] close(20) = -1 EBADF (Bad file descriptor) [pid 5925] close(21) = -1 EBADF (Bad file descriptor) [pid 5925] close(22) = -1 EBADF (Bad file descriptor) [pid 5925] close(23) = -1 EBADF (Bad file descriptor) [pid 5925] close(24) = -1 EBADF (Bad file descriptor) [pid 5925] close(25) = -1 EBADF (Bad file descriptor) [ 110.324231][ T5925] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 5925] close(26) = -1 EBADF (Bad file descriptor) [pid 5925] close(27) = -1 EBADF (Bad file descriptor) [pid 5925] close(28) = -1 EBADF (Bad file descriptor) [pid 5925] close(29) = -1 EBADF (Bad file descriptor) [pid 5925] exit_group(0) = ? [pid 5925] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=64, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./62", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./62/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./62/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./62/binderfs") = 0 [pid 5637] umount2("./62/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./62/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./62/cgroup.net") = 0 [pid 5637] umount2("./62/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./62/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./62/cgroup.cpu") = 0 [pid 5637] umount2("./62/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./62/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./62/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./62") = 0 [pid 5637] mkdir("./63", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5930 attached , child_tidptr=0x55557f25d790) = 65 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 5930] set_robust_list(0x55557f25d7a0, 24 [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5930] <... set_robust_list resumed>) = 0 [pid 5930] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5930] chdir("./63") = 0 [pid 5930] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5930] setpgid(0, 0) = 0 [pid 5930] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5930] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5930] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5930] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5930] write(3, "1000", 4) = 4 [pid 5930] close(3) = 0 [pid 5930] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5930] write(1, "executing program\n", 18) = 18 [pid 5930] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) executing program [pid 5930] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5930] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5930] close(3) = 0 [pid 5930] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5930] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5930] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5930] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5930] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5930] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5930] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5930] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5930] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5930] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5930] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5930] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5930] setns(201, 0) = 0 [pid 5930] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5930] setns(7, 0) = 0 [pid 5930] close(7) = 0 [pid 5930] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5930] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [ 110.419406][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 5930] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=65}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5930] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=65}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5930] close(7) = 0 [pid 5930] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5930] close(3) = 0 [pid 5930] close(4) = 0 [pid 5930] close(5) = 0 [pid 5930] close(6) = 0 [pid 5930] close(7) = -1 EBADF (Bad file descriptor) [pid 5930] close(8) = 0 [pid 5930] close(9) = -1 EBADF (Bad file descriptor) [pid 5930] close(10) = -1 EBADF (Bad file descriptor) [pid 5930] close(11) = -1 EBADF (Bad file descriptor) [pid 5930] close(12) = -1 EBADF (Bad file descriptor) [pid 5930] close(13) = -1 EBADF (Bad file descriptor) [pid 5930] close(14) = -1 EBADF (Bad file descriptor) [pid 5930] close(15) = -1 EBADF (Bad file descriptor) [pid 5930] close(16) = -1 EBADF (Bad file descriptor) [pid 5930] close(17) = -1 EBADF (Bad file descriptor) [ 110.491650][ T5930] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 5930] close(18) = -1 EBADF (Bad file descriptor) [pid 5930] close(19) = -1 EBADF (Bad file descriptor) [pid 5930] close(20) = -1 EBADF (Bad file descriptor) [pid 5930] close(21) = -1 EBADF (Bad file descriptor) [pid 5930] close(22) = -1 EBADF (Bad file descriptor) [pid 5930] close(23) = -1 EBADF (Bad file descriptor) [pid 5930] close(24) = -1 EBADF (Bad file descriptor) [pid 5930] close(25) = -1 EBADF (Bad file descriptor) [pid 5930] close(26) = -1 EBADF (Bad file descriptor) [pid 5930] close(27) = -1 EBADF (Bad file descriptor) [pid 5930] close(28) = -1 EBADF (Bad file descriptor) [pid 5930] close(29) = -1 EBADF (Bad file descriptor) [pid 5930] exit_group(0) = ? [pid 5930] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=65, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5637] umount2("./63", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [ 110.581858][ T5630] udevd[5630]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 110.585472][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 5637] umount2("./63/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./63/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./63/binderfs") = 0 [pid 5637] umount2("./63/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./63/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./63/cgroup.net") = 0 [pid 5637] umount2("./63/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./63/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./63/cgroup.cpu") = 0 [pid 5637] umount2("./63/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./63/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./63/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./63") = 0 [pid 5637] mkdir("./64", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5934 attached , child_tidptr=0x55557f25d790) = 66 [pid 5934] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5934] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5934] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5934] chdir("./64") = 0 [pid 5934] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5934] setpgid(0, 0) = 0 [pid 5934] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5934] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5934] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5934] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5934] write(3, "1000", 4) = 4 [pid 5934] close(3) = 0 [pid 5934] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5934] write(1, "executing program\n", 18) = 18 executing program [pid 5934] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5934] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5934] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5934] close(3) = 0 [pid 5934] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5934] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5934] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5934] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5934] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5934] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5934] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5934] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5934] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5934] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5934] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5934] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5934] setns(201, 0) = 0 [pid 5934] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5934] setns(7, 0) = 0 [pid 5934] close(7) = 0 [pid 5934] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5934] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5934] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=66}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5934] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=66}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5934] close(7) = 0 [pid 5934] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5934] close(3) = 0 [pid 5934] close(4) = 0 [pid 5934] close(5) = 0 [pid 5934] close(6) = 0 [pid 5934] close(7) = -1 EBADF (Bad file descriptor) [pid 5934] close(8) = 0 [pid 5934] close(9) = -1 EBADF (Bad file descriptor) [pid 5934] close(10) = -1 EBADF (Bad file descriptor) [pid 5934] close(11) = -1 EBADF (Bad file descriptor) [pid 5934] close(12) = -1 EBADF (Bad file descriptor) [ 110.828799][ T5934] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 5934] close(13) = -1 EBADF (Bad file descriptor) [pid 5934] close(14) = -1 EBADF (Bad file descriptor) [pid 5934] close(15) = -1 EBADF (Bad file descriptor) [pid 5934] close(16) = -1 EBADF (Bad file descriptor) [pid 5934] close(17) = -1 EBADF (Bad file descriptor) [pid 5934] close(18) = -1 EBADF (Bad file descriptor) [pid 5934] close(19) = -1 EBADF (Bad file descriptor) [pid 5934] close(20) = -1 EBADF (Bad file descriptor) [pid 5934] close(21) = -1 EBADF (Bad file descriptor) [pid 5934] close(22) = -1 EBADF (Bad file descriptor) [pid 5934] close(23) = -1 EBADF (Bad file descriptor) [pid 5934] close(24) = -1 EBADF (Bad file descriptor) [pid 5934] close(25) = -1 EBADF (Bad file descriptor) [pid 5934] close(26) = -1 EBADF (Bad file descriptor) [pid 5934] close(27) = -1 EBADF (Bad file descriptor) [pid 5934] close(28) = -1 EBADF (Bad file descriptor) [pid 5934] close(29) = -1 EBADF (Bad file descriptor) [pid 5934] exit_group(0) = ? [pid 5934] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=66, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./64", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./64/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./64/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./64/binderfs") = 0 [pid 5637] umount2("./64/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./64/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./64/cgroup.net") = 0 [pid 5637] umount2("./64/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./64/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./64/cgroup.cpu") = 0 [pid 5637] umount2("./64/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./64/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./64/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./64") = 0 [pid 5637] mkdir("./65", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5938 attached , child_tidptr=0x55557f25d790) = 67 [pid 5938] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 5938] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5938] chdir("./65") = 0 [pid 5938] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5938] setpgid(0, 0) = 0 [pid 5938] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5938] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5938] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5938] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5938] write(3, "1000", 4) = 4 [pid 5938] close(3) = 0 [pid 5938] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5938] write(1, "executing program\n", 18) = 18 executing program [pid 5938] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5938] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5938] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5938] close(3) = 0 [pid 5938] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5938] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5938] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5938] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5938] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5938] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5938] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5938] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5938] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5938] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5938] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5938] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5938] setns(201, 0) = 0 [pid 5938] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5938] setns(7, 0) = 0 [pid 5938] close(7) = 0 [pid 5938] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5938] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5938] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=67}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5938] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=67}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5938] close(7) = 0 [pid 5938] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5938] close(3) = 0 [pid 5938] close(4) = 0 [pid 5938] close(5) = 0 [pid 5938] close(6) = 0 [pid 5938] close(7) = -1 EBADF (Bad file descriptor) [pid 5938] close(8) = 0 [pid 5938] close(9) = -1 EBADF (Bad file descriptor) [pid 5938] close(10) = -1 EBADF (Bad file descriptor) [pid 5938] close(11) = -1 EBADF (Bad file descriptor) [pid 5938] close(12) = -1 EBADF (Bad file descriptor) [pid 5938] close(13) = -1 EBADF (Bad file descriptor) [pid 5938] close(14) = -1 EBADF (Bad file descriptor) [pid 5938] close(15) = -1 EBADF (Bad file descriptor) [pid 5938] close(16) = -1 EBADF (Bad file descriptor) [pid 5938] close(17) = -1 EBADF (Bad file descriptor) [pid 5938] close(18) = -1 EBADF (Bad file descriptor) [pid 5938] close(19) = -1 EBADF (Bad file descriptor) [ 111.089595][ T5938] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 5938] close(20) = -1 EBADF (Bad file descriptor) [pid 5938] close(21) = -1 EBADF (Bad file descriptor) [pid 5938] close(22) = -1 EBADF (Bad file descriptor) [pid 5938] close(23) = -1 EBADF (Bad file descriptor) [pid 5938] close(24) = -1 EBADF (Bad file descriptor) [pid 5938] close(25) = -1 EBADF (Bad file descriptor) [pid 5938] close(26) = -1 EBADF (Bad file descriptor) [pid 5938] close(27) = -1 EBADF (Bad file descriptor) [pid 5938] close(28) = -1 EBADF (Bad file descriptor) [pid 5938] close(29) = -1 EBADF (Bad file descriptor) [pid 5938] exit_group(0) = ? [pid 5938] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=67, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./65", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./65/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./65/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./65/binderfs") = 0 [pid 5637] umount2("./65/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./65/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./65/cgroup.net") = 0 [pid 5637] umount2("./65/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./65/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./65/cgroup.cpu") = 0 [pid 5637] umount2("./65/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./65/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./65/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./65") = 0 [pid 5637] mkdir("./66", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5944 attached [pid 5944] set_robust_list(0x55557f25d7a0, 24 [pid 5637] <... clone resumed>, child_tidptr=0x55557f25d790) = 68 [pid 5944] <... set_robust_list resumed>) = 0 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 5944] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5944] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5944] chdir("./66") = 0 [pid 5944] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5944] setpgid(0, 0) = 0 [pid 5944] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5944] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5944] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5944] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5944] write(3, "1000", 4) = 4 [pid 5944] close(3) = 0 [pid 5944] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5944] write(1, "executing program\n", 18) = 18 executing program [pid 5944] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5944] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5944] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5944] close(3) = 0 [pid 5944] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5944] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5944] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5944] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5944] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5944] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5944] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5944] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5944] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5944] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5944] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5944] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5944] setns(201, 0) = 0 [pid 5944] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5944] setns(7, 0) = 0 [pid 5944] close(7) = 0 [pid 5944] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5944] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5944] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=68}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5944] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=68}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5944] close(7) = 0 [pid 5944] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5944] close(3) = 0 [pid 5944] close(4) = 0 [pid 5944] close(5) = 0 [pid 5944] close(6) = 0 [pid 5944] close(7) = -1 EBADF (Bad file descriptor) [pid 5944] close(8) = 0 [pid 5944] close(9) = -1 EBADF (Bad file descriptor) [pid 5944] close(10) = -1 EBADF (Bad file descriptor) [pid 5944] close(11) = -1 EBADF (Bad file descriptor) [pid 5944] close(12) = -1 EBADF (Bad file descriptor) [pid 5944] close(13) = -1 EBADF (Bad file descriptor) [pid 5944] close(14) = -1 EBADF (Bad file descriptor) [pid 5944] close(15) = -1 EBADF (Bad file descriptor) [pid 5944] close(16) = -1 EBADF (Bad file descriptor) [pid 5944] close(17) = -1 EBADF (Bad file descriptor) [pid 5944] close(18) = -1 EBADF (Bad file descriptor) [pid 5944] close(19) = -1 EBADF (Bad file descriptor) [pid 5944] close(20) = -1 EBADF (Bad file descriptor) [pid 5944] close(21) = -1 EBADF (Bad file descriptor) [pid 5944] close(22) = -1 EBADF (Bad file descriptor) [pid 5944] close(23) = -1 EBADF (Bad file descriptor) [pid 5944] close(24) = -1 EBADF (Bad file descriptor) [pid 5944] close(25) = -1 EBADF (Bad file descriptor) [pid 5944] close(26) = -1 EBADF (Bad file descriptor) [pid 5944] close(27) = -1 EBADF (Bad file descriptor) [pid 5944] close(28) = -1 EBADF (Bad file descriptor) [pid 5944] close(29) = -1 EBADF (Bad file descriptor) [pid 5944] exit_group(0) = ? [pid 5944] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=68, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./66", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./66/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./66/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./66/binderfs") = 0 [pid 5637] umount2("./66/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./66/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./66/cgroup.net") = 0 [pid 5637] umount2("./66/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./66/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./66/cgroup.cpu") = 0 [pid 5637] umount2("./66/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./66/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./66/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./66") = 0 [pid 5637] mkdir("./67", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5950 attached , child_tidptr=0x55557f25d790) = 69 [pid 5950] set_robust_list(0x55557f25d7a0, 24 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 5950] <... set_robust_list resumed>) = 0 [pid 5950] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5950] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5950] chdir("./67") = 0 [pid 5950] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5950] setpgid(0, 0) = 0 [pid 5950] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5950] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5950] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5950] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5950] write(3, "1000", 4) = 4 [pid 5950] close(3) = 0 [pid 5950] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5950] write(1, "executing program\n", 18) = 18 [pid 5950] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5950] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5950] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5950] close(3) = 0 [pid 5950] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5950] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5950] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5950] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5950] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5950] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5950] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5950] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5950] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5950] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5950] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5950] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5950] setns(201, 0) = 0 [pid 5950] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5950] setns(7, 0) = 0 [pid 5950] close(7) = 0 [pid 5950] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5950] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5950] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=69}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5950] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=69}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5950] close(7) = 0 [pid 5950] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5950] close(3) = 0 [pid 5950] close(4) = 0 [pid 5950] close(5) = 0 [pid 5950] close(6) = 0 [pid 5950] close(7) = -1 EBADF (Bad file descriptor) [pid 5950] close(8) = 0 [pid 5950] close(9) = -1 EBADF (Bad file descriptor) [pid 5950] close(10) = -1 EBADF (Bad file descriptor) [pid 5950] close(11) = -1 EBADF (Bad file descriptor) [pid 5950] close(12) = -1 EBADF (Bad file descriptor) [pid 5950] close(13) = -1 EBADF (Bad file descriptor) [pid 5950] close(14) = -1 EBADF (Bad file descriptor) [pid 5950] close(15) = -1 EBADF (Bad file descriptor) [pid 5950] close(16) = -1 EBADF (Bad file descriptor) [pid 5950] close(17) = -1 EBADF (Bad file descriptor) [pid 5950] close(18) = -1 EBADF (Bad file descriptor) [pid 5950] close(19) = -1 EBADF (Bad file descriptor) [pid 5950] close(20) = -1 EBADF (Bad file descriptor) [pid 5950] close(21) = -1 EBADF (Bad file descriptor) [pid 5950] close(22) = -1 EBADF (Bad file descriptor) [pid 5950] close(23) = -1 EBADF (Bad file descriptor) [pid 5950] close(24) = -1 EBADF (Bad file descriptor) [pid 5950] close(25) = -1 EBADF (Bad file descriptor) [pid 5950] close(26) = -1 EBADF (Bad file descriptor) [pid 5950] close(27) = -1 EBADF (Bad file descriptor) [pid 5950] close(28) = -1 EBADF (Bad file descriptor) [pid 5950] close(29) = -1 EBADF (Bad file descriptor) [pid 5950] exit_group(0) = ? [pid 5950] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=69, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5637] umount2("./67", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./67/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./67/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./67/binderfs") = 0 [pid 5637] umount2("./67/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./67/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./67/cgroup.net") = 0 [pid 5637] umount2("./67/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./67/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./67/cgroup.cpu") = 0 [pid 5637] umount2("./67/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./67/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./67/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./67") = 0 [pid 5637] mkdir("./68", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5956 attached [pid 5956] set_robust_list(0x55557f25d7a0, 24 [pid 5637] <... clone resumed>, child_tidptr=0x55557f25d790) = 70 [pid 5956] <... set_robust_list resumed>) = 0 [pid 5956] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5956] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5956] chdir("./68") = 0 [pid 5956] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5956] setpgid(0, 0) = 0 [pid 5956] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5956] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5956] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5956] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5956] write(3, "1000", 4) = 4 [pid 5956] close(3) = 0 [pid 5956] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5956] write(1, "executing program\n", 18) = 18 [pid 5956] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5956] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5956] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5956] close(3) = 0 [pid 5956] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5956] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5956] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5956] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5956] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5956] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5956] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5956] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5956] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5956] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5956] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5956] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5956] setns(201, 0) = 0 [pid 5956] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5956] setns(7, 0) = 0 [pid 5956] close(7) = 0 [pid 5956] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5956] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5956] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=70}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5956] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=70}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5956] close(7) = 0 [pid 5956] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5956] close(3) = 0 [pid 5956] close(4) = 0 [pid 5956] close(5) = 0 [pid 5956] close(6) = 0 [pid 5956] close(7) = -1 EBADF (Bad file descriptor) [pid 5956] close(8) = 0 [pid 5956] close(9) = -1 EBADF (Bad file descriptor) [pid 5956] close(10) = -1 EBADF (Bad file descriptor) [pid 5956] close(11) = -1 EBADF (Bad file descriptor) [pid 5956] close(12) = -1 EBADF (Bad file descriptor) [pid 5956] close(13) = -1 EBADF (Bad file descriptor) [pid 5956] close(14) = -1 EBADF (Bad file descriptor) [pid 5956] close(15) = -1 EBADF (Bad file descriptor) [pid 5956] close(16) = -1 EBADF (Bad file descriptor) [pid 5956] close(17) = -1 EBADF (Bad file descriptor) [pid 5956] close(18) = -1 EBADF (Bad file descriptor) [pid 5956] close(19) = -1 EBADF (Bad file descriptor) [pid 5956] close(20) = -1 EBADF (Bad file descriptor) [pid 5956] close(21) = -1 EBADF (Bad file descriptor) [pid 5956] close(22) = -1 EBADF (Bad file descriptor) [pid 5956] close(23) = -1 EBADF (Bad file descriptor) [pid 5956] close(24) = -1 EBADF (Bad file descriptor) [pid 5956] close(25) = -1 EBADF (Bad file descriptor) [pid 5956] close(26) = -1 EBADF (Bad file descriptor) [pid 5956] close(27) = -1 EBADF (Bad file descriptor) [pid 5956] close(28) = -1 EBADF (Bad file descriptor) [pid 5956] close(29) = -1 EBADF (Bad file descriptor) [pid 5956] exit_group(0) = ? [pid 5956] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=70, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./68", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./68/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./68/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./68/binderfs") = 0 [pid 5637] umount2("./68/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./68/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./68/cgroup.net") = 0 [pid 5637] umount2("./68/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./68/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./68/cgroup.cpu") = 0 [pid 5637] umount2("./68/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./68/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./68/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./68") = 0 [pid 5637] mkdir("./69", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5962 attached , child_tidptr=0x55557f25d790) = 71 [pid 5962] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 5962] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5962] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5962] chdir("./69") = 0 [pid 5962] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5962] setpgid(0, 0) = 0 [pid 5962] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5962] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5962] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5962] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5962] write(3, "1000", 4) = 4 [pid 5962] close(3) = 0 [pid 5962] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5962] write(1, "executing program\n", 18) = 18 [pid 5962] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) executing program [pid 5962] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5962] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5962] close(3) = 0 [pid 5962] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5962] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5962] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5962] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5962] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5962] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5962] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5962] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5962] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5962] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5962] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5962] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5962] setns(201, 0) = 0 [pid 5962] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5962] setns(7, 0) = 0 [pid 5962] close(7) = 0 [pid 5962] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5962] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5962] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=71}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5962] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=71}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5962] close(7) = 0 [pid 5962] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5962] close(3) = 0 [pid 5962] close(4) = 0 [pid 5962] close(5) = 0 [pid 5962] close(6) = 0 [pid 5962] close(7) = -1 EBADF (Bad file descriptor) [pid 5962] close(8) = 0 [pid 5962] close(9) = -1 EBADF (Bad file descriptor) [pid 5962] close(10) = -1 EBADF (Bad file descriptor) [pid 5962] close(11) = -1 EBADF (Bad file descriptor) [pid 5962] close(12) = -1 EBADF (Bad file descriptor) [pid 5962] close(13) = -1 EBADF (Bad file descriptor) [pid 5962] close(14) = -1 EBADF (Bad file descriptor) [pid 5962] close(15) = -1 EBADF (Bad file descriptor) [pid 5962] close(16) = -1 EBADF (Bad file descriptor) [pid 5962] close(17) = -1 EBADF (Bad file descriptor) [pid 5962] close(18) = -1 EBADF (Bad file descriptor) [pid 5962] close(19) = -1 EBADF (Bad file descriptor) [pid 5962] close(20) = -1 EBADF (Bad file descriptor) [pid 5962] close(21) = -1 EBADF (Bad file descriptor) [pid 5962] close(22) = -1 EBADF (Bad file descriptor) [pid 5962] close(23) = -1 EBADF (Bad file descriptor) [pid 5962] close(24) = -1 EBADF (Bad file descriptor) [pid 5962] close(25) = -1 EBADF (Bad file descriptor) [pid 5962] close(26) = -1 EBADF (Bad file descriptor) [pid 5962] close(27) = -1 EBADF (Bad file descriptor) [pid 5962] close(28) = -1 EBADF (Bad file descriptor) [pid 5962] close(29) = -1 EBADF (Bad file descriptor) [pid 5962] exit_group(0) = ? [pid 5962] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=71, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./69", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./69/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./69/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./69/binderfs") = 0 [pid 5637] umount2("./69/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./69/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./69/cgroup.net") = 0 [pid 5637] umount2("./69/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./69/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./69/cgroup.cpu") = 0 [pid 5637] umount2("./69/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./69/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./69/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./69") = 0 [pid 5637] mkdir("./70", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5966 attached , child_tidptr=0x55557f25d790) = 72 [pid 5966] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5966] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5966] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5966] chdir("./70") = 0 [pid 5966] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5966] setpgid(0, 0) = 0 [pid 5966] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5966] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5966] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5966] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5966] write(3, "1000", 4) = 4 [pid 5966] close(3) = 0 [pid 5966] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5966] write(1, "executing program\n", 18) = 18 executing program [pid 5966] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5966] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5966] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5966] close(3) = 0 [pid 5966] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5966] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5966] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5966] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5966] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5966] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5966] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5966] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5966] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5966] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5966] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5966] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5966] setns(201, 0) = 0 [pid 5966] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5966] setns(7, 0) = 0 [pid 5966] close(7) = 0 [pid 5966] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5966] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5966] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=72}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5966] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=72}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5966] close(7) = 0 [pid 5966] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5966] close(3) = 0 [pid 5966] close(4) = 0 [pid 5966] close(5) = 0 [pid 5966] close(6) = 0 [pid 5966] close(7) = -1 EBADF (Bad file descriptor) [pid 5966] close(8) = 0 [pid 5966] close(9) = -1 EBADF (Bad file descriptor) [pid 5966] close(10) = -1 EBADF (Bad file descriptor) [pid 5966] close(11) = -1 EBADF (Bad file descriptor) [pid 5966] close(12) = -1 EBADF (Bad file descriptor) [pid 5966] close(13) = -1 EBADF (Bad file descriptor) [pid 5966] close(14) = -1 EBADF (Bad file descriptor) [pid 5966] close(15) = -1 EBADF (Bad file descriptor) [pid 5966] close(16) = -1 EBADF (Bad file descriptor) [pid 5966] close(17) = -1 EBADF (Bad file descriptor) [pid 5966] close(18) = -1 EBADF (Bad file descriptor) [pid 5966] close(19) = -1 EBADF (Bad file descriptor) [pid 5966] close(20) = -1 EBADF (Bad file descriptor) [pid 5966] close(21) = -1 EBADF (Bad file descriptor) [pid 5966] close(22) = -1 EBADF (Bad file descriptor) [pid 5966] close(23) = -1 EBADF (Bad file descriptor) [pid 5966] close(24) = -1 EBADF (Bad file descriptor) [pid 5966] close(25) = -1 EBADF (Bad file descriptor) [pid 5966] close(26) = -1 EBADF (Bad file descriptor) [pid 5966] close(27) = -1 EBADF (Bad file descriptor) [pid 5966] close(28) = -1 EBADF (Bad file descriptor) [pid 5966] close(29) = -1 EBADF (Bad file descriptor) [pid 5966] exit_group(0) = ? [pid 5966] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=72, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./70", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./70/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./70/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./70/binderfs") = 0 [pid 5637] umount2("./70/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./70/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./70/cgroup.net") = 0 [pid 5637] umount2("./70/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./70/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./70/cgroup.cpu") = 0 [pid 5637] umount2("./70/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./70/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./70/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./70") = 0 [pid 5637] mkdir("./71", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5972 attached [pid 5972] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5972] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5972] chdir("./71" [pid 5637] <... clone resumed>, child_tidptr=0x55557f25d790) = 73 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 5972] <... chdir resumed>) = 0 [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5972] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5972] setpgid(0, 0) = 0 [pid 5972] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5972] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5972] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5972] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5972] write(3, "1000", 4) = 4 [pid 5972] close(3) = 0 [pid 5972] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5972] write(1, "executing program\n", 18) = 18 executing program [pid 5972] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5972] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5972] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5972] close(3) = 0 [pid 5972] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5972] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5972] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5972] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5972] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5972] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5972] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5972] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5972] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5972] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5972] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5972] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5972] setns(201, 0) = 0 [pid 5972] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5972] setns(7, 0) = 0 [pid 5972] close(7) = 0 [pid 5972] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5972] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5972] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=73}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5972] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=73}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5972] close(7) = 0 [pid 5972] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5972] close(3) = 0 [pid 5972] close(4) = 0 [pid 5972] close(5) = 0 [pid 5972] close(6) = 0 [pid 5972] close(7) = -1 EBADF (Bad file descriptor) [pid 5972] close(8) = 0 [pid 5972] close(9) = -1 EBADF (Bad file descriptor) [pid 5972] close(10) = -1 EBADF (Bad file descriptor) [pid 5972] close(11) = -1 EBADF (Bad file descriptor) [pid 5972] close(12) = -1 EBADF (Bad file descriptor) [pid 5972] close(13) = -1 EBADF (Bad file descriptor) [pid 5972] close(14) = -1 EBADF (Bad file descriptor) [pid 5972] close(15) = -1 EBADF (Bad file descriptor) [pid 5972] close(16) = -1 EBADF (Bad file descriptor) [pid 5972] close(17) = -1 EBADF (Bad file descriptor) [pid 5972] close(18) = -1 EBADF (Bad file descriptor) [pid 5972] close(19) = -1 EBADF (Bad file descriptor) [pid 5972] close(20) = -1 EBADF (Bad file descriptor) [pid 5972] close(21) = -1 EBADF (Bad file descriptor) [pid 5972] close(22) = -1 EBADF (Bad file descriptor) [pid 5972] close(23) = -1 EBADF (Bad file descriptor) [pid 5972] close(24) = -1 EBADF (Bad file descriptor) [pid 5972] close(25) = -1 EBADF (Bad file descriptor) [pid 5972] close(26) = -1 EBADF (Bad file descriptor) [pid 5972] close(27) = -1 EBADF (Bad file descriptor) [pid 5972] close(28) = -1 EBADF (Bad file descriptor) [pid 5972] close(29) = -1 EBADF (Bad file descriptor) [pid 5972] exit_group(0) = ? [pid 5972] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=73, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5637] umount2("./71", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./71/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./71/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./71/binderfs") = 0 [pid 5637] umount2("./71/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./71/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./71/cgroup.net") = 0 [pid 5637] umount2("./71/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./71/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./71/cgroup.cpu") = 0 [pid 5637] umount2("./71/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./71/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./71/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./71") = 0 [pid 5637] mkdir("./72", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5976 attached , child_tidptr=0x55557f25d790) = 74 [pid 5976] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5976] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5976] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5976] chdir("./72") = 0 [pid 5976] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5976] setpgid(0, 0) = 0 [pid 5976] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5976] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5976] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5976] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5976] write(3, "1000", 4) = 4 [pid 5976] close(3) = 0 [pid 5976] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5976] write(1, "executing program\n", 18) = 18 [pid 5976] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5976] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5976] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5976] close(3) = 0 [pid 5976] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5976] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5976] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5976] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5976] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5976] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5976] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5976] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5976] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5976] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5976] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5976] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5976] setns(201, 0) = 0 [pid 5976] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5976] setns(7, 0) = 0 [pid 5976] close(7) = 0 [pid 5976] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5976] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5976] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=74}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5976] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=74}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5976] close(7) = 0 [pid 5976] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5976] close(3) = 0 [pid 5976] close(4) = 0 [pid 5976] close(5) = 0 [pid 5976] close(6) = 0 [pid 5976] close(7) = -1 EBADF (Bad file descriptor) [pid 5976] close(8) = 0 [pid 5976] close(9) = -1 EBADF (Bad file descriptor) [pid 5976] close(10) = -1 EBADF (Bad file descriptor) [pid 5976] close(11) = -1 EBADF (Bad file descriptor) [pid 5976] close(12) = -1 EBADF (Bad file descriptor) [pid 5976] close(13) = -1 EBADF (Bad file descriptor) [pid 5976] close(14) = -1 EBADF (Bad file descriptor) [pid 5976] close(15) = -1 EBADF (Bad file descriptor) [pid 5976] close(16) = -1 EBADF (Bad file descriptor) [pid 5976] close(17) = -1 EBADF (Bad file descriptor) [pid 5976] close(18) = -1 EBADF (Bad file descriptor) [pid 5976] close(19) = -1 EBADF (Bad file descriptor) [pid 5976] close(20) = -1 EBADF (Bad file descriptor) [pid 5976] close(21) = -1 EBADF (Bad file descriptor) [pid 5976] close(22) = -1 EBADF (Bad file descriptor) [pid 5976] close(23) = -1 EBADF (Bad file descriptor) [pid 5976] close(24) = -1 EBADF (Bad file descriptor) [pid 5976] close(25) = -1 EBADF (Bad file descriptor) [pid 5976] close(26) = -1 EBADF (Bad file descriptor) [pid 5976] close(27) = -1 EBADF (Bad file descriptor) [pid 5976] close(28) = -1 EBADF (Bad file descriptor) [pid 5976] close(29) = -1 EBADF (Bad file descriptor) [pid 5976] exit_group(0) = ? [pid 5976] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=74, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./72", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./72/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./72/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./72/binderfs") = 0 [pid 5637] umount2("./72/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./72/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./72/cgroup.net") = 0 [pid 5637] umount2("./72/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./72/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./72/cgroup.cpu") = 0 [pid 5637] umount2("./72/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./72/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./72/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./72") = 0 [pid 5637] mkdir("./73", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5980 attached , child_tidptr=0x55557f25d790) = 75 [pid 5980] set_robust_list(0x55557f25d7a0, 24 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 5980] <... set_robust_list resumed>) = 0 [pid 5980] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5980] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5980] chdir("./73") = 0 [pid 5980] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5980] setpgid(0, 0) = 0 [pid 5980] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5980] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5980] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5980] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5980] write(3, "1000", 4) = 4 [pid 5980] close(3) = 0 [pid 5980] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5980] write(1, "executing program\n", 18) = 18 executing program [pid 5980] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5980] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5980] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5980] close(3) = 0 [pid 5980] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5980] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5980] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5980] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5980] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5980] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5980] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5980] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5980] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5980] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5980] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5980] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5980] setns(201, 0) = 0 [pid 5980] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5980] setns(7, 0) = 0 [pid 5980] close(7) = 0 [pid 5980] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5980] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5980] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=75}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5980] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=75}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5980] close(7) = 0 [pid 5980] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5980] close(3) = 0 [pid 5980] close(4) = 0 [pid 5980] close(5) = 0 [pid 5980] close(6) = 0 [pid 5980] close(7) = -1 EBADF (Bad file descriptor) [pid 5980] close(8) = 0 [pid 5980] close(9) = -1 EBADF (Bad file descriptor) [pid 5980] close(10) = -1 EBADF (Bad file descriptor) [pid 5980] close(11) = -1 EBADF (Bad file descriptor) [pid 5980] close(12) = -1 EBADF (Bad file descriptor) [pid 5980] close(13) = -1 EBADF (Bad file descriptor) [pid 5980] close(14) = -1 EBADF (Bad file descriptor) [pid 5980] close(15) = -1 EBADF (Bad file descriptor) [pid 5980] close(16) = -1 EBADF (Bad file descriptor) [pid 5980] close(17) = -1 EBADF (Bad file descriptor) [pid 5980] close(18) = -1 EBADF (Bad file descriptor) [pid 5980] close(19) = -1 EBADF (Bad file descriptor) [pid 5980] close(20) = -1 EBADF (Bad file descriptor) [pid 5980] close(21) = -1 EBADF (Bad file descriptor) [pid 5980] close(22) = -1 EBADF (Bad file descriptor) [pid 5980] close(23) = -1 EBADF (Bad file descriptor) [pid 5980] close(24) = -1 EBADF (Bad file descriptor) [pid 5980] close(25) = -1 EBADF (Bad file descriptor) [pid 5980] close(26) = -1 EBADF (Bad file descriptor) [pid 5980] close(27) = -1 EBADF (Bad file descriptor) [pid 5980] close(28) = -1 EBADF (Bad file descriptor) [pid 5980] close(29) = -1 EBADF (Bad file descriptor) [pid 5980] exit_group(0) = ? [pid 5980] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=75, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./73", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./73/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./73/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./73/binderfs") = 0 [pid 5637] umount2("./73/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./73/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./73/cgroup.net") = 0 [pid 5637] umount2("./73/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./73/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./73/cgroup.cpu") = 0 [pid 5637] umount2("./73/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./73/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./73/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./73") = 0 [pid 5637] mkdir("./74", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5984 attached , child_tidptr=0x55557f25d790) = 76 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 5984] set_robust_list(0x55557f25d7a0, 24 [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5984] <... set_robust_list resumed>) = 0 [pid 5984] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5984] chdir("./74") = 0 [pid 5984] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5984] setpgid(0, 0) = 0 [pid 5984] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5984] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5984] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5984] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5984] write(3, "1000", 4) = 4 [pid 5984] close(3) = 0 [pid 5984] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5984] write(1, "executing program\n", 18) = 18 executing program [pid 5984] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5984] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5984] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5984] close(3) = 0 [pid 5984] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5984] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5984] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5984] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5984] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5984] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5984] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5984] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5984] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5984] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5984] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5984] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5984] setns(201, 0) = 0 [pid 5984] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5984] setns(7, 0) = 0 [pid 5984] close(7) = 0 [pid 5984] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5984] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5984] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=76}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5984] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=76}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5984] close(7) = 0 [pid 5984] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5984] close(3) = 0 [pid 5984] close(4) = 0 [pid 5984] close(5) = 0 [pid 5984] close(6) = 0 [pid 5984] close(7) = -1 EBADF (Bad file descriptor) [pid 5984] close(8) = 0 [pid 5984] close(9) = -1 EBADF (Bad file descriptor) [pid 5984] close(10) = -1 EBADF (Bad file descriptor) [pid 5984] close(11) = -1 EBADF (Bad file descriptor) [pid 5984] close(12) = -1 EBADF (Bad file descriptor) [pid 5984] close(13) = -1 EBADF (Bad file descriptor) [pid 5984] close(14) = -1 EBADF (Bad file descriptor) [pid 5984] close(15) = -1 EBADF (Bad file descriptor) [pid 5984] close(16) = -1 EBADF (Bad file descriptor) [pid 5984] close(17) = -1 EBADF (Bad file descriptor) [pid 5984] close(18) = -1 EBADF (Bad file descriptor) [pid 5984] close(19) = -1 EBADF (Bad file descriptor) [pid 5984] close(20) = -1 EBADF (Bad file descriptor) [pid 5984] close(21) = -1 EBADF (Bad file descriptor) [pid 5984] close(22) = -1 EBADF (Bad file descriptor) [pid 5984] close(23) = -1 EBADF (Bad file descriptor) [pid 5984] close(24) = -1 EBADF (Bad file descriptor) [pid 5984] close(25) = -1 EBADF (Bad file descriptor) [pid 5984] close(26) = -1 EBADF (Bad file descriptor) [pid 5984] close(27) = -1 EBADF (Bad file descriptor) [pid 5984] close(28) = -1 EBADF (Bad file descriptor) [pid 5984] close(29) = -1 EBADF (Bad file descriptor) [pid 5984] exit_group(0) = ? [pid 5984] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=76, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./74", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./74/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./74/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./74/binderfs") = 0 [pid 5637] umount2("./74/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./74/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./74/cgroup.net") = 0 [pid 5637] umount2("./74/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./74/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./74/cgroup.cpu") = 0 [pid 5637] umount2("./74/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./74/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./74/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./74") = 0 [pid 5637] mkdir("./75", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5990 attached [pid 5990] set_robust_list(0x55557f25d7a0, 24 [pid 5637] <... clone resumed>, child_tidptr=0x55557f25d790) = 77 [pid 5990] <... set_robust_list resumed>) = 0 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 5990] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5990] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5990] chdir("./75") = 0 [pid 5990] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5990] setpgid(0, 0) = 0 [pid 5990] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5990] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5990] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5990] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5990] write(3, "1000", 4) = 4 [pid 5990] close(3) = 0 [pid 5990] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5990] write(1, "executing program\n", 18) = 18 [pid 5990] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [ 113.695439][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 5990] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5990] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5990] close(3) = 0 [pid 5990] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5990] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5990] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5990] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5990] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5990] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5990] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5990] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5990] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5990] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5990] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5990] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5990] setns(201, 0) = 0 [pid 5990] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5990] setns(7, 0) = 0 [pid 5990] close(7) = 0 [pid 5990] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5990] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5990] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=77}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5990] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=77}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5990] close(7) = 0 [pid 5990] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5990] close(3) = 0 [pid 5990] close(4) = 0 [pid 5990] close(5) = 0 [pid 5990] close(6) = 0 [pid 5990] close(7) = -1 EBADF (Bad file descriptor) [ 113.796955][ T5990] __nla_validate_parse: 9 callbacks suppressed [ 113.796974][ T5990] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 5990] close(8) = 0 [pid 5990] close(9) = -1 EBADF (Bad file descriptor) [pid 5990] close(10) = -1 EBADF (Bad file descriptor) [pid 5990] close(11) = -1 EBADF (Bad file descriptor) [pid 5990] close(12) = -1 EBADF (Bad file descriptor) [pid 5990] close(13) = -1 EBADF (Bad file descriptor) [pid 5990] close(14) = -1 EBADF (Bad file descriptor) [pid 5990] close(15) = -1 EBADF (Bad file descriptor) [pid 5990] close(16) = -1 EBADF (Bad file descriptor) [pid 5990] close(17) = -1 EBADF (Bad file descriptor) [pid 5990] close(18) = -1 EBADF (Bad file descriptor) [pid 5990] close(19) = -1 EBADF (Bad file descriptor) [pid 5990] close(20) = -1 EBADF (Bad file descriptor) [pid 5990] close(21) = -1 EBADF (Bad file descriptor) [pid 5990] close(22) = -1 EBADF (Bad file descriptor) [pid 5990] close(23) = -1 EBADF (Bad file descriptor) [pid 5990] close(24) = -1 EBADF (Bad file descriptor) [pid 5990] close(25) = -1 EBADF (Bad file descriptor) [pid 5990] close(26) = -1 EBADF (Bad file descriptor) [pid 5990] close(27) = -1 EBADF (Bad file descriptor) [pid 5990] close(28) = -1 EBADF (Bad file descriptor) [pid 5990] close(29) = -1 EBADF (Bad file descriptor) [pid 5990] exit_group(0) = ? [pid 5990] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=77, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5637] umount2("./75", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./75/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./75/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./75/binderfs") = 0 [pid 5637] umount2("./75/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./75/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./75/cgroup.net") = 0 [pid 5637] umount2("./75/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./75/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./75/cgroup.cpu") = 0 [pid 5637] umount2("./75/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 113.881221][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 5637] newfstatat(AT_FDCWD, "./75/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./75/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./75") = 0 [pid 5637] mkdir("./76", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5994 attached , child_tidptr=0x55557f25d790) = 78 [pid 5994] set_robust_list(0x55557f25d7a0, 24 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 5994] <... set_robust_list resumed>) = 0 [pid 5994] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5994] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5994] chdir("./76") = 0 [pid 5994] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5994] setpgid(0, 0) = 0 [pid 5994] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5994] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5994] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5994] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5994] write(3, "1000", 4) = 4 [pid 5994] close(3) = 0 [pid 5994] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5994] write(1, "executing program\n", 18) = 18 [pid 5994] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5994] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5994] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5994] close(3) = 0 [pid 5994] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5994] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5994] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5994] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5994] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5994] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5994] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5994] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5994] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5994] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5994] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5994] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5994] setns(201, 0) = 0 [pid 5994] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5994] setns(7, 0) = 0 [pid 5994] close(7) = 0 [pid 5994] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5994] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5994] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=78}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5994] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=78}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5994] close(7) = 0 [pid 5994] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5994] close(3) = 0 [pid 5994] close(4) = 0 [pid 5994] close(5) = 0 [pid 5994] close(6) = 0 [pid 5994] close(7) = -1 EBADF (Bad file descriptor) [pid 5994] close(8) = 0 [pid 5994] close(9) = -1 EBADF (Bad file descriptor) [pid 5994] close(10) = -1 EBADF (Bad file descriptor) [pid 5994] close(11) = -1 EBADF (Bad file descriptor) [pid 5994] close(12) = -1 EBADF (Bad file descriptor) [pid 5994] close(13) = -1 EBADF (Bad file descriptor) [pid 5994] close(14) = -1 EBADF (Bad file descriptor) [pid 5994] close(15) = -1 EBADF (Bad file descriptor) [pid 5994] close(16) = -1 EBADF (Bad file descriptor) [pid 5994] close(17) = -1 EBADF (Bad file descriptor) [pid 5994] close(18) = -1 EBADF (Bad file descriptor) [pid 5994] close(19) = -1 EBADF (Bad file descriptor) [pid 5994] close(20) = -1 EBADF (Bad file descriptor) [ 114.055960][ T5994] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 5994] close(21) = -1 EBADF (Bad file descriptor) [pid 5994] close(22) = -1 EBADF (Bad file descriptor) [pid 5994] close(23) = -1 EBADF (Bad file descriptor) [pid 5994] close(24) = -1 EBADF (Bad file descriptor) [pid 5994] close(25) = -1 EBADF (Bad file descriptor) [pid 5994] close(26) = -1 EBADF (Bad file descriptor) [pid 5994] close(27) = -1 EBADF (Bad file descriptor) [pid 5994] close(28) = -1 EBADF (Bad file descriptor) [pid 5994] close(29) = -1 EBADF (Bad file descriptor) [pid 5994] exit_group(0) = ? [pid 5994] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=78, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./76", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 114.135681][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./76/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./76/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./76/binderfs") = 0 [pid 5637] umount2("./76/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./76/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./76/cgroup.net") = 0 [pid 5637] umount2("./76/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./76/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./76/cgroup.cpu") = 0 [pid 5637] umount2("./76/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./76/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./76/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./76") = 0 [pid 5637] mkdir("./77", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 5998 attached , child_tidptr=0x55557f25d790) = 79 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 5998] set_robust_list(0x55557f25d7a0, 24 [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5998] <... set_robust_list resumed>) = 0 [pid 5998] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5998] chdir("./77") = 0 [pid 5998] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5998] setpgid(0, 0) = 0 [pid 5998] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5998] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 5998] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 5998] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5998] write(3, "1000", 4) = 4 [pid 5998] close(3) = 0 [pid 5998] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5998] write(1, "executing program\n", 18) = 18 [pid 5998] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5998] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 5998] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 5998] close(3) = 0 [pid 5998] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 5998] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 5998] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 5998] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 5998] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 5998] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 5998] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 5998] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 5998] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 5998] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 5998] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 5998] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 5998] setns(201, 0) = 0 [pid 5998] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 5998] setns(7, 0) = 0 [pid 5998] close(7) = 0 [pid 5998] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 5998] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 5998] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=79}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 5998] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=79}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 5998] close(7) = 0 [pid 5998] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 5998] close(3) = 0 [pid 5998] close(4) = 0 [pid 5998] close(5) = 0 [pid 5998] close(6) = 0 [pid 5998] close(7) = -1 EBADF (Bad file descriptor) [pid 5998] close(8) = 0 [pid 5998] close(9) = -1 EBADF (Bad file descriptor) [pid 5998] close(10) = -1 EBADF (Bad file descriptor) [pid 5998] close(11) = -1 EBADF (Bad file descriptor) [pid 5998] close(12) = -1 EBADF (Bad file descriptor) [pid 5998] close(13) = -1 EBADF (Bad file descriptor) [pid 5998] close(14) = -1 EBADF (Bad file descriptor) [pid 5998] close(15) = -1 EBADF (Bad file descriptor) [pid 5998] close(16) = -1 EBADF (Bad file descriptor) [ 114.288419][ T5998] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 5998] close(17) = -1 EBADF (Bad file descriptor) [pid 5998] close(18) = -1 EBADF (Bad file descriptor) [pid 5998] close(19) = -1 EBADF (Bad file descriptor) [pid 5998] close(20) = -1 EBADF (Bad file descriptor) [pid 5998] close(21) = -1 EBADF (Bad file descriptor) [pid 5998] close(22) = -1 EBADF (Bad file descriptor) [pid 5998] close(23) = -1 EBADF (Bad file descriptor) [pid 5998] close(24) = -1 EBADF (Bad file descriptor) [pid 5998] close(25) = -1 EBADF (Bad file descriptor) [pid 5998] close(26) = -1 EBADF (Bad file descriptor) [pid 5998] close(27) = -1 EBADF (Bad file descriptor) [pid 5998] close(28) = -1 EBADF (Bad file descriptor) [pid 5998] close(29) = -1 EBADF (Bad file descriptor) [pid 5998] exit_group(0) = ? [pid 5998] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=79, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./77", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./77/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./77/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./77/binderfs") = 0 [pid 5637] umount2("./77/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./77/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./77/cgroup.net") = 0 [pid 5637] umount2("./77/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./77/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./77/cgroup.cpu") = 0 [pid 5637] umount2("./77/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./77/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./77/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./77") = 0 [pid 5637] mkdir("./78", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6002 attached , child_tidptr=0x55557f25d790) = 80 [ 114.369450][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 6002] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 6002] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6002] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6002] chdir("./78") = 0 [pid 6002] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6002] setpgid(0, 0) = 0 [pid 6002] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6002] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6002] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6002] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6002] write(3, "1000", 4) = 4 [pid 6002] close(3) = 0 [pid 6002] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6002] write(1, "executing program\n", 18) = 18 [pid 6002] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) executing program [pid 6002] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6002] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6002] close(3) = 0 [pid 6002] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6002] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6002] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6002] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6002] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6002] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6002] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6002] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6002] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6002] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6002] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6002] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6002] setns(201, 0) = 0 [pid 6002] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6002] setns(7, 0) = 0 [pid 6002] close(7) = 0 [pid 6002] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6002] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6002] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=80}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6002] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=80}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6002] close(7) = 0 [pid 6002] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6002] close(3) = 0 [pid 6002] close(4) = 0 [pid 6002] close(5) = 0 [pid 6002] close(6) = 0 [pid 6002] close(7) = -1 EBADF (Bad file descriptor) [pid 6002] close(8) = 0 [ 114.517808][ T6002] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 6002] close(9) = -1 EBADF (Bad file descriptor) [pid 6002] close(10) = -1 EBADF (Bad file descriptor) [pid 6002] close(11) = -1 EBADF (Bad file descriptor) [pid 6002] close(12) = -1 EBADF (Bad file descriptor) [pid 6002] close(13) = -1 EBADF (Bad file descriptor) [pid 6002] close(14) = -1 EBADF (Bad file descriptor) [pid 6002] close(15) = -1 EBADF (Bad file descriptor) [pid 6002] close(16) = -1 EBADF (Bad file descriptor) [pid 6002] close(17) = -1 EBADF (Bad file descriptor) [pid 6002] close(18) = -1 EBADF (Bad file descriptor) [pid 6002] close(19) = -1 EBADF (Bad file descriptor) [pid 6002] close(20) = -1 EBADF (Bad file descriptor) [pid 6002] close(21) = -1 EBADF (Bad file descriptor) [pid 6002] close(22) = -1 EBADF (Bad file descriptor) [pid 6002] close(23) = -1 EBADF (Bad file descriptor) [pid 6002] close(24) = -1 EBADF (Bad file descriptor) [pid 6002] close(25) = -1 EBADF (Bad file descriptor) [pid 6002] close(26) = -1 EBADF (Bad file descriptor) [pid 6002] close(27) = -1 EBADF (Bad file descriptor) [pid 6002] close(28) = -1 EBADF (Bad file descriptor) [pid 6002] close(29) = -1 EBADF (Bad file descriptor) [pid 6002] exit_group(0) = ? [pid 6002] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=80, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./78", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./78/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./78/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./78/binderfs") = 0 [pid 5637] umount2("./78/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./78/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./78/cgroup.net") = 0 [pid 5637] umount2("./78/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./78/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./78/cgroup.cpu") = 0 [pid 5637] umount2("./78/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./78/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./78/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./78") = 0 [pid 5637] mkdir("./79", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6008 attached , child_tidptr=0x55557f25d790) = 81 [pid 6008] set_robust_list(0x55557f25d7a0, 24) = 0 [ 114.655019][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 6008] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6008] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6008] chdir("./79") = 0 [pid 6008] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6008] setpgid(0, 0) = 0 [pid 6008] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6008] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6008] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6008] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6008] write(3, "1000", 4) = 4 [pid 6008] close(3) = 0 [pid 6008] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6008] write(1, "executing program\n", 18) = 18 [pid 6008] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) executing program [pid 6008] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6008] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6008] close(3) = 0 [pid 6008] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6008] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6008] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6008] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6008] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6008] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6008] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6008] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6008] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6008] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6008] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6008] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6008] setns(201, 0) = 0 [pid 6008] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6008] setns(7, 0) = 0 [pid 6008] close(7) = 0 [pid 6008] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6008] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6008] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=81}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6008] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=81}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6008] close(7) = 0 [pid 6008] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6008] close(3) = 0 [pid 6008] close(4) = 0 [pid 6008] close(5) = 0 [pid 6008] close(6) = 0 [pid 6008] close(7) = -1 EBADF (Bad file descriptor) [pid 6008] close(8) = 0 [pid 6008] close(9) = -1 EBADF (Bad file descriptor) [pid 6008] close(10) = -1 EBADF (Bad file descriptor) [pid 6008] close(11) = -1 EBADF (Bad file descriptor) [pid 6008] close(12) = -1 EBADF (Bad file descriptor) [ 114.885784][ T6008] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 6008] close(13) = -1 EBADF (Bad file descriptor) [pid 6008] close(14) = -1 EBADF (Bad file descriptor) [pid 6008] close(15) = -1 EBADF (Bad file descriptor) [pid 6008] close(16) = -1 EBADF (Bad file descriptor) [pid 6008] close(17) = -1 EBADF (Bad file descriptor) [pid 6008] close(18) = -1 EBADF (Bad file descriptor) [pid 6008] close(19) = -1 EBADF (Bad file descriptor) [pid 6008] close(20) = -1 EBADF (Bad file descriptor) [pid 6008] close(21) = -1 EBADF (Bad file descriptor) [pid 6008] close(22) = -1 EBADF (Bad file descriptor) [pid 6008] close(23) = -1 EBADF (Bad file descriptor) [pid 6008] close(24) = -1 EBADF (Bad file descriptor) [pid 6008] close(25) = -1 EBADF (Bad file descriptor) [pid 6008] close(26) = -1 EBADF (Bad file descriptor) [pid 6008] close(27) = -1 EBADF (Bad file descriptor) [pid 6008] close(28) = -1 EBADF (Bad file descriptor) [pid 6008] close(29) = -1 EBADF (Bad file descriptor) [pid 6008] exit_group(0) = ? [pid 6008] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=81, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./79", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./79/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./79/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./79/binderfs") = 0 [pid 5637] umount2("./79/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./79/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./79/cgroup.net") = 0 [pid 5637] umount2("./79/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./79/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./79/cgroup.cpu") = 0 [pid 5637] umount2("./79/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./79/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./79/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./79") = 0 [pid 5637] mkdir("./80", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557f25d790) = 82 ci-upstream-net-kasan-gce/strace-static-x86_64: Process 6012 attached [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6012] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 6012] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 114.966643][ T5630] udevd[5630]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 114.975554][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 6012] chdir("./80") = 0 [pid 6012] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6012] setpgid(0, 0) = 0 [pid 6012] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6012] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6012] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6012] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6012] write(3, "1000", 4) = 4 [pid 6012] close(3) = 0 [pid 6012] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6012] write(1, "executing program\n", 18) = 18 executing program [pid 6012] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6012] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6012] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6012] close(3) = 0 [pid 6012] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6012] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6012] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6012] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6012] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6012] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6012] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6012] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6012] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6012] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6012] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6012] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6012] setns(201, 0) = 0 [pid 6012] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6012] setns(7, 0) = 0 [pid 6012] close(7) = 0 [pid 6012] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6012] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6012] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=82}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6012] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=82}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6012] close(7) = 0 [pid 6012] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6012] close(3) = 0 [pid 6012] close(4) = 0 [pid 6012] close(5) = 0 [pid 6012] close(6) = 0 [pid 6012] close(7) = -1 EBADF (Bad file descriptor) [pid 6012] close(8) = 0 [pid 6012] close(9) = -1 EBADF (Bad file descriptor) [pid 6012] close(10) = -1 EBADF (Bad file descriptor) [pid 6012] close(11) = -1 EBADF (Bad file descriptor) [pid 6012] close(12) = -1 EBADF (Bad file descriptor) [pid 6012] close(13) = -1 EBADF (Bad file descriptor) [pid 6012] close(14) = -1 EBADF (Bad file descriptor) [pid 6012] close(15) = -1 EBADF (Bad file descriptor) [pid 6012] close(16) = -1 EBADF (Bad file descriptor) [pid 6012] close(17) = -1 EBADF (Bad file descriptor) [pid 6012] close(18) = -1 EBADF (Bad file descriptor) [pid 6012] close(19) = -1 EBADF (Bad file descriptor) [pid 6012] close(20) = -1 EBADF (Bad file descriptor) [pid 6012] close(21) = -1 EBADF (Bad file descriptor) [pid 6012] close(22) = -1 EBADF (Bad file descriptor) [pid 6012] close(23) = -1 EBADF (Bad file descriptor) [pid 6012] close(24) = -1 EBADF (Bad file descriptor) [pid 6012] close(25) = -1 EBADF (Bad file descriptor) [pid 6012] close(26) = -1 EBADF (Bad file descriptor) [pid 6012] close(27) = -1 EBADF (Bad file descriptor) [pid 6012] close(28) = -1 EBADF (Bad file descriptor) [pid 6012] close(29) = -1 EBADF (Bad file descriptor) [pid 6012] exit_group(0) = ? [ 115.118374][ T6012] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 6012] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=82, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5637] umount2("./80", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./80/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./80/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./80/binderfs") = 0 [pid 5637] umount2("./80/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./80/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./80/cgroup.net") = 0 [pid 5637] umount2("./80/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./80/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./80/cgroup.cpu") = 0 [pid 5637] umount2("./80/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./80/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./80/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./80") = 0 [pid 5637] mkdir("./81", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6016 attached , child_tidptr=0x55557f25d790) = 83 [pid 6016] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 6016] rt_sigprocmask(SIG_SETMASK, [] [ 115.193170][ T5630] udevd[5630]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 115.196947][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6016] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6016] chdir("./81") = 0 [pid 6016] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6016] setpgid(0, 0) = 0 [pid 6016] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6016] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6016] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6016] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6016] write(3, "1000", 4) = 4 [pid 6016] close(3) = 0 [pid 6016] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6016] write(1, "executing program\n", 18) = 18 executing program [pid 6016] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6016] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6016] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6016] close(3) = 0 [pid 6016] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6016] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6016] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6016] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6016] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6016] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6016] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6016] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6016] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6016] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6016] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6016] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6016] setns(201, 0) = 0 [pid 6016] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6016] setns(7, 0) = 0 [pid 6016] close(7) = 0 [pid 6016] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6016] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6016] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=83}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6016] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=83}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6016] close(7) = 0 [pid 6016] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6016] close(3) = 0 [pid 6016] close(4) = 0 [pid 6016] close(5) = 0 [pid 6016] close(6) = 0 [pid 6016] close(7) = -1 EBADF (Bad file descriptor) [pid 6016] close(8) = 0 [pid 6016] close(9) = -1 EBADF (Bad file descriptor) [pid 6016] close(10) = -1 EBADF (Bad file descriptor) [pid 6016] close(11) = -1 EBADF (Bad file descriptor) [ 115.319621][ T6016] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 6016] close(12) = -1 EBADF (Bad file descriptor) [pid 6016] close(13) = -1 EBADF (Bad file descriptor) [pid 6016] close(14) = -1 EBADF (Bad file descriptor) [pid 6016] close(15) = -1 EBADF (Bad file descriptor) [pid 6016] close(16) = -1 EBADF (Bad file descriptor) [pid 6016] close(17) = -1 EBADF (Bad file descriptor) [pid 6016] close(18) = -1 EBADF (Bad file descriptor) [pid 6016] close(19) = -1 EBADF (Bad file descriptor) [pid 6016] close(20) = -1 EBADF (Bad file descriptor) [pid 6016] close(21) = -1 EBADF (Bad file descriptor) [pid 6016] close(22) = -1 EBADF (Bad file descriptor) [pid 6016] close(23) = -1 EBADF (Bad file descriptor) [pid 6016] close(24) = -1 EBADF (Bad file descriptor) [pid 6016] close(25) = -1 EBADF (Bad file descriptor) [pid 6016] close(26) = -1 EBADF (Bad file descriptor) [pid 6016] close(27) = -1 EBADF (Bad file descriptor) [pid 6016] close(28) = -1 EBADF (Bad file descriptor) [pid 6016] close(29) = -1 EBADF (Bad file descriptor) [pid 6016] exit_group(0) = ? [pid 6016] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=83, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./81", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./81/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./81/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./81/binderfs") = 0 [pid 5637] umount2("./81/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./81/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./81/cgroup.net") = 0 [pid 5637] umount2("./81/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./81/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./81/cgroup.cpu") = 0 [pid 5637] umount2("./81/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 115.405133][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 5637] newfstatat(AT_FDCWD, "./81/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./81/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./81") = 0 [pid 5637] mkdir("./82", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6020 attached , child_tidptr=0x55557f25d790) = 84 [pid 6020] set_robust_list(0x55557f25d7a0, 24 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 6020] <... set_robust_list resumed>) = 0 [pid 6020] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6020] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6020] chdir("./82") = 0 [pid 6020] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6020] setpgid(0, 0) = 0 [pid 6020] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6020] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6020] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6020] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6020] write(3, "1000", 4) = 4 [pid 6020] close(3) = 0 [pid 6020] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6020] write(1, "executing program\n", 18) = 18 executing program [pid 6020] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6020] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6020] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6020] close(3) = 0 [pid 6020] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6020] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6020] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6020] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6020] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6020] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6020] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6020] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6020] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6020] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6020] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6020] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6020] setns(201, 0) = 0 [pid 6020] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6020] setns(7, 0) = 0 [pid 6020] close(7) = 0 [pid 6020] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6020] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6020] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=84}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6020] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=84}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6020] close(7) = 0 [pid 6020] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6020] close(3) = 0 [pid 6020] close(4) = 0 [pid 6020] close(5) = 0 [pid 6020] close(6) = 0 [pid 6020] close(7) = -1 EBADF (Bad file descriptor) [pid 6020] close(8) = 0 [pid 6020] close(9) = -1 EBADF (Bad file descriptor) [pid 6020] close(10) = -1 EBADF (Bad file descriptor) [pid 6020] close(11) = -1 EBADF (Bad file descriptor) [pid 6020] close(12) = -1 EBADF (Bad file descriptor) [pid 6020] close(13) = -1 EBADF (Bad file descriptor) [pid 6020] close(14) = -1 EBADF (Bad file descriptor) [pid 6020] close(15) = -1 EBADF (Bad file descriptor) [pid 6020] close(16) = -1 EBADF (Bad file descriptor) [pid 6020] close(17) = -1 EBADF (Bad file descriptor) [pid 6020] close(18) = -1 EBADF (Bad file descriptor) [pid 6020] close(19) = -1 EBADF (Bad file descriptor) [pid 6020] close(20) = -1 EBADF (Bad file descriptor) [pid 6020] close(21) = -1 EBADF (Bad file descriptor) [pid 6020] close(22) = -1 EBADF (Bad file descriptor) [pid 6020] close(23) = -1 EBADF (Bad file descriptor) [pid 6020] close(24) = -1 EBADF (Bad file descriptor) [pid 6020] close(25) = -1 EBADF (Bad file descriptor) [ 115.690420][ T6020] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 6020] close(26) = -1 EBADF (Bad file descriptor) [pid 6020] close(27) = -1 EBADF (Bad file descriptor) [pid 6020] close(28) = -1 EBADF (Bad file descriptor) [pid 6020] close(29) = -1 EBADF (Bad file descriptor) [pid 6020] exit_group(0) = ? [pid 6020] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=84, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./82", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./82/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./82/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./82/binderfs") = 0 [pid 5637] umount2("./82/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./82/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./82/cgroup.net") = 0 [pid 5637] umount2("./82/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./82/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./82/cgroup.cpu") = 0 [pid 5637] umount2("./82/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./82/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./82/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./82") = 0 [pid 5637] mkdir("./83", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6024 attached , child_tidptr=0x55557f25d790) = 85 [pid 6024] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 6024] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6024] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6024] chdir("./83") = 0 [pid 6024] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6024] setpgid(0, 0) = 0 [pid 6024] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6024] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6024] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6024] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6024] write(3, "1000", 4) = 4 [pid 6024] close(3) = 0 [pid 6024] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6024] write(1, "executing program\n", 18) = 18 [pid 6024] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6024] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6024] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6024] close(3) = 0 [pid 6024] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6024] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6024] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6024] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6024] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6024] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6024] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6024] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6024] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6024] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6024] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6024] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6024] setns(201, 0) = 0 [pid 6024] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6024] setns(7, 0) = 0 [pid 6024] close(7) = 0 [pid 6024] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6024] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6024] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=85}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6024] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=85}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6024] close(7) = 0 [pid 6024] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6024] close(3) = 0 [pid 6024] close(4) = 0 [pid 6024] close(5) = 0 [pid 6024] close(6) = 0 [pid 6024] close(7) = -1 EBADF (Bad file descriptor) [pid 6024] close(8) = 0 [pid 6024] close(9) = -1 EBADF (Bad file descriptor) [pid 6024] close(10) = -1 EBADF (Bad file descriptor) [pid 6024] close(11) = -1 EBADF (Bad file descriptor) [pid 6024] close(12) = -1 EBADF (Bad file descriptor) [pid 6024] close(13) = -1 EBADF (Bad file descriptor) [pid 6024] close(14) = -1 EBADF (Bad file descriptor) [pid 6024] close(15) = -1 EBADF (Bad file descriptor) [ 115.956329][ T6024] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 6024] close(16) = -1 EBADF (Bad file descriptor) [pid 6024] close(17) = -1 EBADF (Bad file descriptor) [pid 6024] close(18) = -1 EBADF (Bad file descriptor) [pid 6024] close(19) = -1 EBADF (Bad file descriptor) [pid 6024] close(20) = -1 EBADF (Bad file descriptor) [pid 6024] close(21) = -1 EBADF (Bad file descriptor) [pid 6024] close(22) = -1 EBADF (Bad file descriptor) [pid 6024] close(23) = -1 EBADF (Bad file descriptor) [pid 6024] close(24) = -1 EBADF (Bad file descriptor) [pid 6024] close(25) = -1 EBADF (Bad file descriptor) [pid 6024] close(26) = -1 EBADF (Bad file descriptor) [pid 6024] close(27) = -1 EBADF (Bad file descriptor) [pid 6024] close(28) = -1 EBADF (Bad file descriptor) [pid 6024] close(29) = -1 EBADF (Bad file descriptor) [pid 6024] exit_group(0) = ? [pid 6024] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=85, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./83", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./83/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./83/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./83/binderfs") = 0 [pid 5637] umount2("./83/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./83/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./83/cgroup.net") = 0 [pid 5637] umount2("./83/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./83/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./83/cgroup.cpu") = 0 [pid 5637] umount2("./83/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./83/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./83/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./83") = 0 [pid 5637] mkdir("./84", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6028 attached , child_tidptr=0x55557f25d790) = 86 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 6028] set_robust_list(0x55557f25d7a0, 24 [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6028] <... set_robust_list resumed>) = 0 [pid 6028] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6028] chdir("./84") = 0 [pid 6028] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6028] setpgid(0, 0) = 0 [pid 6028] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6028] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6028] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6028] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6028] write(3, "1000", 4) = 4 [pid 6028] close(3) = 0 [pid 6028] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6028] write(1, "executing program\n", 18) = 18 [pid 6028] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) executing program [pid 6028] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6028] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6028] close(3) = 0 [pid 6028] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6028] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6028] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6028] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6028] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6028] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6028] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6028] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6028] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6028] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6028] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6028] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6028] setns(201, 0) = 0 [pid 6028] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6028] setns(7, 0) = 0 [pid 6028] close(7) = 0 [pid 6028] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6028] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6028] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=86}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6028] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=86}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6028] close(7) = 0 [pid 6028] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6028] close(3) = 0 [pid 6028] close(4) = 0 [pid 6028] close(5) = 0 [pid 6028] close(6) = 0 [ 116.289436][ T6028] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 6028] close(7) = -1 EBADF (Bad file descriptor) [pid 6028] close(8) = 0 [pid 6028] close(9) = -1 EBADF (Bad file descriptor) [pid 6028] close(10) = -1 EBADF (Bad file descriptor) [pid 6028] close(11) = -1 EBADF (Bad file descriptor) [pid 6028] close(12) = -1 EBADF (Bad file descriptor) [pid 6028] close(13) = -1 EBADF (Bad file descriptor) [pid 6028] close(14) = -1 EBADF (Bad file descriptor) [pid 6028] close(15) = -1 EBADF (Bad file descriptor) [pid 6028] close(16) = -1 EBADF (Bad file descriptor) [pid 6028] close(17) = -1 EBADF (Bad file descriptor) [pid 6028] close(18) = -1 EBADF (Bad file descriptor) [pid 6028] close(19) = -1 EBADF (Bad file descriptor) [pid 6028] close(20) = -1 EBADF (Bad file descriptor) [pid 6028] close(21) = -1 EBADF (Bad file descriptor) [pid 6028] close(22) = -1 EBADF (Bad file descriptor) [pid 6028] close(23) = -1 EBADF (Bad file descriptor) [pid 6028] close(24) = -1 EBADF (Bad file descriptor) [pid 6028] close(25) = -1 EBADF (Bad file descriptor) [pid 6028] close(26) = -1 EBADF (Bad file descriptor) [pid 6028] close(27) = -1 EBADF (Bad file descriptor) [pid 6028] close(28) = -1 EBADF (Bad file descriptor) [pid 6028] close(29) = -1 EBADF (Bad file descriptor) [pid 6028] exit_group(0) = ? [pid 6028] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=86, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./84", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./84/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./84/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./84/binderfs") = 0 [pid 5637] umount2("./84/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./84/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./84/cgroup.net") = 0 [pid 5637] umount2("./84/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./84/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./84/cgroup.cpu") = 0 [pid 5637] umount2("./84/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./84/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./84/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./84") = 0 [pid 5637] mkdir("./85", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6034 attached , child_tidptr=0x55557f25d790) = 87 [pid 6034] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 6034] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6034] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6034] chdir("./85") = 0 [pid 6034] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6034] setpgid(0, 0) = 0 [pid 6034] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6034] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6034] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6034] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6034] write(3, "1000", 4) = 4 [pid 6034] close(3) = 0 [pid 6034] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6034] write(1, "executing program\n", 18) = 18 [pid 6034] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) executing program [pid 6034] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6034] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6034] close(3) = 0 [pid 6034] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6034] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6034] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6034] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6034] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6034] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6034] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6034] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6034] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6034] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6034] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6034] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6034] setns(201, 0) = 0 [pid 6034] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6034] setns(7, 0) = 0 [pid 6034] close(7) = 0 [pid 6034] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6034] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6034] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=87}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6034] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=87}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6034] close(7) = 0 [pid 6034] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6034] close(3) = 0 [pid 6034] close(4) = 0 [pid 6034] close(5) = 0 [pid 6034] close(6) = 0 [pid 6034] close(7) = -1 EBADF (Bad file descriptor) [pid 6034] close(8) = 0 [pid 6034] close(9) = -1 EBADF (Bad file descriptor) [pid 6034] close(10) = -1 EBADF (Bad file descriptor) [pid 6034] close(11) = -1 EBADF (Bad file descriptor) [pid 6034] close(12) = -1 EBADF (Bad file descriptor) [pid 6034] close(13) = -1 EBADF (Bad file descriptor) [pid 6034] close(14) = -1 EBADF (Bad file descriptor) [pid 6034] close(15) = -1 EBADF (Bad file descriptor) [pid 6034] close(16) = -1 EBADF (Bad file descriptor) [pid 6034] close(17) = -1 EBADF (Bad file descriptor) [pid 6034] close(18) = -1 EBADF (Bad file descriptor) [pid 6034] close(19) = -1 EBADF (Bad file descriptor) [pid 6034] close(20) = -1 EBADF (Bad file descriptor) [pid 6034] close(21) = -1 EBADF (Bad file descriptor) [pid 6034] close(22) = -1 EBADF (Bad file descriptor) [pid 6034] close(23) = -1 EBADF (Bad file descriptor) [pid 6034] close(24) = -1 EBADF (Bad file descriptor) [pid 6034] close(25) = -1 EBADF (Bad file descriptor) [pid 6034] close(26) = -1 EBADF (Bad file descriptor) [pid 6034] close(27) = -1 EBADF (Bad file descriptor) [pid 6034] close(28) = -1 EBADF (Bad file descriptor) [pid 6034] close(29) = -1 EBADF (Bad file descriptor) [pid 6034] exit_group(0) = ? [pid 6034] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=87, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./85", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./85/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./85/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./85/binderfs") = 0 [pid 5637] umount2("./85/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./85/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./85/cgroup.net") = 0 [pid 5637] umount2("./85/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./85/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./85/cgroup.cpu") = 0 [pid 5637] umount2("./85/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./85/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./85/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./85") = 0 [pid 5637] mkdir("./86", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6038 attached , child_tidptr=0x55557f25d790) = 88 [pid 6038] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 6038] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6038] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6038] chdir("./86") = 0 [pid 6038] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6038] setpgid(0, 0) = 0 [pid 6038] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6038] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6038] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6038] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6038] write(3, "1000", 4) = 4 [pid 6038] close(3) = 0 [pid 6038] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6038] write(1, "executing program\n", 18) = 18 executing program [pid 6038] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6038] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6038] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6038] close(3) = 0 [pid 6038] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6038] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6038] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6038] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6038] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6038] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6038] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6038] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6038] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6038] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6038] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6038] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6038] setns(201, 0) = 0 [pid 6038] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6038] setns(7, 0) = 0 [pid 6038] close(7) = 0 [pid 6038] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6038] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6038] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=88}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6038] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=88}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6038] close(7) = 0 [pid 6038] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6038] close(3) = 0 [pid 6038] close(4) = 0 [pid 6038] close(5) = 0 [pid 6038] close(6) = 0 [pid 6038] close(7) = -1 EBADF (Bad file descriptor) [pid 6038] close(8) = 0 [pid 6038] close(9) = -1 EBADF (Bad file descriptor) [pid 6038] close(10) = -1 EBADF (Bad file descriptor) [pid 6038] close(11) = -1 EBADF (Bad file descriptor) [pid 6038] close(12) = -1 EBADF (Bad file descriptor) [pid 6038] close(13) = -1 EBADF (Bad file descriptor) [pid 6038] close(14) = -1 EBADF (Bad file descriptor) [pid 6038] close(15) = -1 EBADF (Bad file descriptor) [pid 6038] close(16) = -1 EBADF (Bad file descriptor) [pid 6038] close(17) = -1 EBADF (Bad file descriptor) [pid 6038] close(18) = -1 EBADF (Bad file descriptor) [pid 6038] close(19) = -1 EBADF (Bad file descriptor) [pid 6038] close(20) = -1 EBADF (Bad file descriptor) [pid 6038] close(21) = -1 EBADF (Bad file descriptor) [pid 6038] close(22) = -1 EBADF (Bad file descriptor) [pid 6038] close(23) = -1 EBADF (Bad file descriptor) [pid 6038] close(24) = -1 EBADF (Bad file descriptor) [pid 6038] close(25) = -1 EBADF (Bad file descriptor) [pid 6038] close(26) = -1 EBADF (Bad file descriptor) [pid 6038] close(27) = -1 EBADF (Bad file descriptor) [pid 6038] close(28) = -1 EBADF (Bad file descriptor) [pid 6038] close(29) = -1 EBADF (Bad file descriptor) [pid 6038] exit_group(0) = ? [pid 6038] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=88, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./86", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./86/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./86/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./86/binderfs") = 0 [pid 5637] umount2("./86/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./86/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./86/cgroup.net") = 0 [pid 5637] umount2("./86/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./86/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./86/cgroup.cpu") = 0 [pid 5637] umount2("./86/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./86/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./86/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./86") = 0 [pid 5637] mkdir("./87", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6042 attached , child_tidptr=0x55557f25d790) = 89 [pid 6042] set_robust_list(0x55557f25d7a0, 24 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 6042] <... set_robust_list resumed>) = 0 [pid 6042] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6042] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6042] chdir("./87") = 0 [pid 6042] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6042] setpgid(0, 0) = 0 [pid 6042] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6042] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6042] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6042] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6042] write(3, "1000", 4) = 4 [pid 6042] close(3) = 0 [pid 6042] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6042] write(1, "executing program\n", 18) = 18 executing program [pid 6042] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6042] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6042] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6042] close(3) = 0 [pid 6042] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6042] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6042] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6042] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6042] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6042] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6042] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6042] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6042] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6042] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6042] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6042] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6042] setns(201, 0) = 0 [pid 6042] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6042] setns(7, 0) = 0 [pid 6042] close(7) = 0 [pid 6042] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6042] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6042] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=89}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6042] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=89}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6042] close(7) = 0 [pid 6042] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6042] close(3) = 0 [pid 6042] close(4) = 0 [pid 6042] close(5) = 0 [pid 6042] close(6) = 0 [pid 6042] close(7) = -1 EBADF (Bad file descriptor) [pid 6042] close(8) = 0 [pid 6042] close(9) = -1 EBADF (Bad file descriptor) [pid 6042] close(10) = -1 EBADF (Bad file descriptor) [pid 6042] close(11) = -1 EBADF (Bad file descriptor) [pid 6042] close(12) = -1 EBADF (Bad file descriptor) [pid 6042] close(13) = -1 EBADF (Bad file descriptor) [pid 6042] close(14) = -1 EBADF (Bad file descriptor) [pid 6042] close(15) = -1 EBADF (Bad file descriptor) [pid 6042] close(16) = -1 EBADF (Bad file descriptor) [pid 6042] close(17) = -1 EBADF (Bad file descriptor) [pid 6042] close(18) = -1 EBADF (Bad file descriptor) [pid 6042] close(19) = -1 EBADF (Bad file descriptor) [pid 6042] close(20) = -1 EBADF (Bad file descriptor) [pid 6042] close(21) = -1 EBADF (Bad file descriptor) [pid 6042] close(22) = -1 EBADF (Bad file descriptor) [pid 6042] close(23) = -1 EBADF (Bad file descriptor) [pid 6042] close(24) = -1 EBADF (Bad file descriptor) [pid 6042] close(25) = -1 EBADF (Bad file descriptor) [pid 6042] close(26) = -1 EBADF (Bad file descriptor) [pid 6042] close(27) = -1 EBADF (Bad file descriptor) [pid 6042] close(28) = -1 EBADF (Bad file descriptor) [pid 6042] close(29) = -1 EBADF (Bad file descriptor) [pid 6042] exit_group(0) = ? [pid 6042] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=89, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./87", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./87/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./87/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./87/binderfs") = 0 [pid 5637] umount2("./87/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./87/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./87/cgroup.net") = 0 [pid 5637] umount2("./87/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./87/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./87/cgroup.cpu") = 0 [pid 5637] umount2("./87/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./87/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./87/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./87") = 0 [pid 5637] mkdir("./88", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6046 attached , child_tidptr=0x55557f25d790) = 90 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 6046] set_robust_list(0x55557f25d7a0, 24 [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6046] <... set_robust_list resumed>) = 0 [pid 6046] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6046] chdir("./88") = 0 [pid 6046] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6046] setpgid(0, 0) = 0 [pid 6046] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6046] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6046] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6046] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6046] write(3, "1000", 4) = 4 [pid 6046] close(3) = 0 [pid 6046] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6046] write(1, "executing program\n", 18) = 18 [pid 6046] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) executing program [pid 6046] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6046] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6046] close(3) = 0 [pid 6046] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6046] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6046] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6046] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6046] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6046] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6046] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6046] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6046] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6046] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6046] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6046] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6046] setns(201, 0) = 0 [pid 6046] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6046] setns(7, 0) = 0 [pid 6046] close(7) = 0 [pid 6046] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6046] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6046] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=90}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6046] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=90}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6046] close(7) = 0 [pid 6046] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6046] close(3) = 0 [pid 6046] close(4) = 0 [pid 6046] close(5) = 0 [pid 6046] close(6) = 0 [pid 6046] close(7) = -1 EBADF (Bad file descriptor) [pid 6046] close(8) = 0 [pid 6046] close(9) = -1 EBADF (Bad file descriptor) [pid 6046] close(10) = -1 EBADF (Bad file descriptor) [pid 6046] close(11) = -1 EBADF (Bad file descriptor) [pid 6046] close(12) = -1 EBADF (Bad file descriptor) [pid 6046] close(13) = -1 EBADF (Bad file descriptor) [pid 6046] close(14) = -1 EBADF (Bad file descriptor) [pid 6046] close(15) = -1 EBADF (Bad file descriptor) [pid 6046] close(16) = -1 EBADF (Bad file descriptor) [pid 6046] close(17) = -1 EBADF (Bad file descriptor) [pid 6046] close(18) = -1 EBADF (Bad file descriptor) [pid 6046] close(19) = -1 EBADF (Bad file descriptor) [pid 6046] close(20) = -1 EBADF (Bad file descriptor) [pid 6046] close(21) = -1 EBADF (Bad file descriptor) [pid 6046] close(22) = -1 EBADF (Bad file descriptor) [pid 6046] close(23) = -1 EBADF (Bad file descriptor) [pid 6046] close(24) = -1 EBADF (Bad file descriptor) [pid 6046] close(25) = -1 EBADF (Bad file descriptor) [pid 6046] close(26) = -1 EBADF (Bad file descriptor) [pid 6046] close(27) = -1 EBADF (Bad file descriptor) [pid 6046] close(28) = -1 EBADF (Bad file descriptor) [pid 6046] close(29) = -1 EBADF (Bad file descriptor) [pid 6046] exit_group(0) = ? [pid 6046] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=90, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./88", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./88/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./88/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./88/binderfs") = 0 [pid 5637] umount2("./88/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./88/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./88/cgroup.net") = 0 [pid 5637] umount2("./88/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./88/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./88/cgroup.cpu") = 0 [pid 5637] umount2("./88/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./88/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./88/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./88") = 0 [pid 5637] mkdir("./89", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6052 attached , child_tidptr=0x55557f25d790) = 91 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 6052] set_robust_list(0x55557f25d7a0, 24 [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6052] <... set_robust_list resumed>) = 0 [pid 6052] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6052] chdir("./89") = 0 [pid 6052] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6052] setpgid(0, 0) = 0 [pid 6052] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6052] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6052] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6052] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6052] write(3, "1000", 4) = 4 [pid 6052] close(3) = 0 [pid 6052] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6052] write(1, "executing program\n", 18) = 18 [pid 6052] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6052] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6052] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6052] close(3) = 0 [pid 6052] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6052] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6052] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6052] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6052] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6052] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6052] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6052] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6052] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6052] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6052] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6052] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6052] setns(201, 0) = 0 [pid 6052] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6052] setns(7, 0) = 0 [pid 6052] close(7) = 0 [pid 6052] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6052] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6052] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=91}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6052] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=91}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6052] close(7) = 0 [pid 6052] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6052] close(3) = 0 [pid 6052] close(4) = 0 [pid 6052] close(5) = 0 [pid 6052] close(6) = 0 [pid 6052] close(7) = -1 EBADF (Bad file descriptor) [pid 6052] close(8) = 0 [pid 6052] close(9) = -1 EBADF (Bad file descriptor) [pid 6052] close(10) = -1 EBADF (Bad file descriptor) [pid 6052] close(11) = -1 EBADF (Bad file descriptor) [pid 6052] close(12) = -1 EBADF (Bad file descriptor) [pid 6052] close(13) = -1 EBADF (Bad file descriptor) [pid 6052] close(14) = -1 EBADF (Bad file descriptor) [pid 6052] close(15) = -1 EBADF (Bad file descriptor) [pid 6052] close(16) = -1 EBADF (Bad file descriptor) [pid 6052] close(17) = -1 EBADF (Bad file descriptor) [pid 6052] close(18) = -1 EBADF (Bad file descriptor) [pid 6052] close(19) = -1 EBADF (Bad file descriptor) [pid 6052] close(20) = -1 EBADF (Bad file descriptor) [pid 6052] close(21) = -1 EBADF (Bad file descriptor) [pid 6052] close(22) = -1 EBADF (Bad file descriptor) [pid 6052] close(23) = -1 EBADF (Bad file descriptor) [pid 6052] close(24) = -1 EBADF (Bad file descriptor) [pid 6052] close(25) = -1 EBADF (Bad file descriptor) [pid 6052] close(26) = -1 EBADF (Bad file descriptor) [pid 6052] close(27) = -1 EBADF (Bad file descriptor) [pid 6052] close(28) = -1 EBADF (Bad file descriptor) [pid 6052] close(29) = -1 EBADF (Bad file descriptor) [pid 6052] exit_group(0) = ? [pid 6052] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=91, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./89", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./89/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./89/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./89/binderfs") = 0 [pid 5637] umount2("./89/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./89/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./89/cgroup.net") = 0 [pid 5637] umount2("./89/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./89/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./89/cgroup.cpu") = 0 [pid 5637] umount2("./89/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./89/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./89/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./89") = 0 [pid 5637] mkdir("./90", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6056 attached , child_tidptr=0x55557f25d790) = 92 [pid 6056] set_robust_list(0x55557f25d7a0, 24 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 6056] <... set_robust_list resumed>) = 0 [pid 6056] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6056] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6056] chdir("./90") = 0 [pid 6056] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6056] setpgid(0, 0) = 0 [pid 6056] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6056] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6056] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6056] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6056] write(3, "1000", 4) = 4 [pid 6056] close(3) = 0 [pid 6056] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6056] write(1, "executing program\n", 18) = 18 executing program [pid 6056] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6056] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6056] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6056] close(3) = 0 [pid 6056] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6056] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6056] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6056] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6056] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6056] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6056] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6056] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6056] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6056] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6056] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6056] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6056] setns(201, 0) = 0 [pid 6056] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6056] setns(7, 0) = 0 [pid 6056] close(7) = 0 [pid 6056] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6056] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6056] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=92}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6056] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=92}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6056] close(7) = 0 [pid 6056] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6056] close(3) = 0 [pid 6056] close(4) = 0 [pid 6056] close(5) = 0 [pid 6056] close(6) = 0 [pid 6056] close(7) = -1 EBADF (Bad file descriptor) [pid 6056] close(8) = 0 [pid 6056] close(9) = -1 EBADF (Bad file descriptor) [pid 6056] close(10) = -1 EBADF (Bad file descriptor) [pid 6056] close(11) = -1 EBADF (Bad file descriptor) [pid 6056] close(12) = -1 EBADF (Bad file descriptor) [pid 6056] close(13) = -1 EBADF (Bad file descriptor) [pid 6056] close(14) = -1 EBADF (Bad file descriptor) [pid 6056] close(15) = -1 EBADF (Bad file descriptor) [pid 6056] close(16) = -1 EBADF (Bad file descriptor) [pid 6056] close(17) = -1 EBADF (Bad file descriptor) [pid 6056] close(18) = -1 EBADF (Bad file descriptor) [pid 6056] close(19) = -1 EBADF (Bad file descriptor) [pid 6056] close(20) = -1 EBADF (Bad file descriptor) [pid 6056] close(21) = -1 EBADF (Bad file descriptor) [pid 6056] close(22) = -1 EBADF (Bad file descriptor) [pid 6056] close(23) = -1 EBADF (Bad file descriptor) [pid 6056] close(24) = -1 EBADF (Bad file descriptor) [pid 6056] close(25) = -1 EBADF (Bad file descriptor) [pid 6056] close(26) = -1 EBADF (Bad file descriptor) [pid 6056] close(27) = -1 EBADF (Bad file descriptor) [pid 6056] close(28) = -1 EBADF (Bad file descriptor) [pid 6056] close(29) = -1 EBADF (Bad file descriptor) [pid 6056] exit_group(0) = ? [pid 6056] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=92, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./90", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./90/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./90/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./90/binderfs") = 0 [pid 5637] umount2("./90/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./90/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./90/cgroup.net") = 0 [pid 5637] umount2("./90/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./90/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./90/cgroup.cpu") = 0 [pid 5637] umount2("./90/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./90/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./90/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./90") = 0 [pid 5637] mkdir("./91", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6060 attached , child_tidptr=0x55557f25d790) = 93 [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6060] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 6060] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6060] chdir("./91") = 0 [pid 6060] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6060] setpgid(0, 0) = 0 [pid 6060] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6060] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6060] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6060] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6060] write(3, "1000", 4) = 4 [pid 6060] close(3) = 0 [pid 6060] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6060] write(1, "executing program\n", 18) = 18 executing program [pid 6060] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6060] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6060] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6060] close(3) = 0 [pid 6060] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6060] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6060] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6060] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6060] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6060] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6060] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6060] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6060] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6060] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6060] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6060] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6060] setns(201, 0) = 0 [pid 6060] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6060] setns(7, 0) = 0 [pid 6060] close(7) = 0 [pid 6060] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6060] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6060] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=93}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6060] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=93}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6060] close(7) = 0 [pid 6060] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6060] close(3) = 0 [pid 6060] close(4) = 0 [pid 6060] close(5) = 0 [pid 6060] close(6) = 0 [pid 6060] close(7) = -1 EBADF (Bad file descriptor) [pid 6060] close(8) = 0 [pid 6060] close(9) = -1 EBADF (Bad file descriptor) [pid 6060] close(10) = -1 EBADF (Bad file descriptor) [pid 6060] close(11) = -1 EBADF (Bad file descriptor) [pid 6060] close(12) = -1 EBADF (Bad file descriptor) [pid 6060] close(13) = -1 EBADF (Bad file descriptor) [pid 6060] close(14) = -1 EBADF (Bad file descriptor) [pid 6060] close(15) = -1 EBADF (Bad file descriptor) [pid 6060] close(16) = -1 EBADF (Bad file descriptor) [pid 6060] close(17) = -1 EBADF (Bad file descriptor) [pid 6060] close(18) = -1 EBADF (Bad file descriptor) [pid 6060] close(19) = -1 EBADF (Bad file descriptor) [pid 6060] close(20) = -1 EBADF (Bad file descriptor) [pid 6060] close(21) = -1 EBADF (Bad file descriptor) [pid 6060] close(22) = -1 EBADF (Bad file descriptor) [pid 6060] close(23) = -1 EBADF (Bad file descriptor) [pid 6060] close(24) = -1 EBADF (Bad file descriptor) [pid 6060] close(25) = -1 EBADF (Bad file descriptor) [pid 6060] close(26) = -1 EBADF (Bad file descriptor) [pid 6060] close(27) = -1 EBADF (Bad file descriptor) [pid 6060] close(28) = -1 EBADF (Bad file descriptor) [pid 6060] close(29) = -1 EBADF (Bad file descriptor) [pid 6060] exit_group(0) = ? [pid 6060] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=93, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./91", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./91", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./91/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./91/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./91/binderfs") = 0 [pid 5637] umount2("./91/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./91/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./91/cgroup.net") = 0 [pid 5637] umount2("./91/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./91/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./91/cgroup.cpu") = 0 [pid 5637] umount2("./91/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./91/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./91/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./91") = 0 [pid 5637] mkdir("./92", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6064 attached , child_tidptr=0x55557f25d790) = 94 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 6064] set_robust_list(0x55557f25d7a0, 24 [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6064] <... set_robust_list resumed>) = 0 [pid 6064] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6064] chdir("./92") = 0 [pid 6064] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6064] setpgid(0, 0) = 0 [pid 6064] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6064] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6064] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6064] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6064] write(3, "1000", 4) = 4 [pid 6064] close(3) = 0 [pid 6064] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6064] write(1, "executing program\n", 18) = 18 [pid 6064] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) executing program [pid 6064] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6064] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6064] close(3) = 0 [pid 6064] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6064] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6064] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6064] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6064] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6064] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6064] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6064] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6064] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6064] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6064] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6064] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6064] setns(201, 0) = 0 [pid 6064] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6064] setns(7, 0) = 0 [pid 6064] close(7) = 0 [pid 6064] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6064] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6064] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=94}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6064] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=94}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6064] close(7) = 0 [pid 6064] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6064] close(3) = 0 [pid 6064] close(4) = 0 [pid 6064] close(5) = 0 [pid 6064] close(6) = 0 [pid 6064] close(7) = -1 EBADF (Bad file descriptor) [pid 6064] close(8) = 0 [pid 6064] close(9) = -1 EBADF (Bad file descriptor) [pid 6064] close(10) = -1 EBADF (Bad file descriptor) [pid 6064] close(11) = -1 EBADF (Bad file descriptor) [pid 6064] close(12) = -1 EBADF (Bad file descriptor) [pid 6064] close(13) = -1 EBADF (Bad file descriptor) [pid 6064] close(14) = -1 EBADF (Bad file descriptor) [pid 6064] close(15) = -1 EBADF (Bad file descriptor) [pid 6064] close(16) = -1 EBADF (Bad file descriptor) [pid 6064] close(17) = -1 EBADF (Bad file descriptor) [pid 6064] close(18) = -1 EBADF (Bad file descriptor) [pid 6064] close(19) = -1 EBADF (Bad file descriptor) [pid 6064] close(20) = -1 EBADF (Bad file descriptor) [pid 6064] close(21) = -1 EBADF (Bad file descriptor) [pid 6064] close(22) = -1 EBADF (Bad file descriptor) [pid 6064] close(23) = -1 EBADF (Bad file descriptor) [pid 6064] close(24) = -1 EBADF (Bad file descriptor) [pid 6064] close(25) = -1 EBADF (Bad file descriptor) [pid 6064] close(26) = -1 EBADF (Bad file descriptor) [pid 6064] close(27) = -1 EBADF (Bad file descriptor) [pid 6064] close(28) = -1 EBADF (Bad file descriptor) [pid 6064] close(29) = -1 EBADF (Bad file descriptor) [pid 6064] exit_group(0) = ? [pid 6064] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=94, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./92", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./92", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./92/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./92/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./92/binderfs") = 0 [pid 5637] umount2("./92/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./92/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./92/cgroup.net") = 0 [pid 5637] umount2("./92/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./92/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./92/cgroup.cpu") = 0 [pid 5637] umount2("./92/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./92/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./92/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./92") = 0 [pid 5637] mkdir("./93", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6068 attached , child_tidptr=0x55557f25d790) = 95 [pid 6068] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 6068] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6068] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6068] chdir("./93") = 0 [pid 6068] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6068] setpgid(0, 0) = 0 [pid 6068] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6068] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6068] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6068] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6068] write(3, "1000", 4) = 4 [pid 6068] close(3) = 0 [pid 6068] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6068] write(1, "executing program\n", 18) = 18 [pid 6068] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) executing program [pid 6068] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6068] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6068] close(3) = 0 [pid 6068] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6068] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6068] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6068] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6068] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6068] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6068] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6068] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6068] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6068] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6068] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6068] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6068] setns(201, 0) = 0 [pid 6068] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6068] setns(7, 0) = 0 [pid 6068] close(7) = 0 [pid 6068] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6068] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6068] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=95}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6068] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=95}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6068] close(7) = 0 [pid 6068] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6068] close(3) = 0 [pid 6068] close(4) = 0 [pid 6068] close(5) = 0 [pid 6068] close(6) = 0 [pid 6068] close(7) = -1 EBADF (Bad file descriptor) [pid 6068] close(8) = 0 [pid 6068] close(9) = -1 EBADF (Bad file descriptor) [pid 6068] close(10) = -1 EBADF (Bad file descriptor) [pid 6068] close(11) = -1 EBADF (Bad file descriptor) [pid 6068] close(12) = -1 EBADF (Bad file descriptor) [pid 6068] close(13) = -1 EBADF (Bad file descriptor) [pid 6068] close(14) = -1 EBADF (Bad file descriptor) [pid 6068] close(15) = -1 EBADF (Bad file descriptor) [pid 6068] close(16) = -1 EBADF (Bad file descriptor) [pid 6068] close(17) = -1 EBADF (Bad file descriptor) [pid 6068] close(18) = -1 EBADF (Bad file descriptor) [pid 6068] close(19) = -1 EBADF (Bad file descriptor) [pid 6068] close(20) = -1 EBADF (Bad file descriptor) [pid 6068] close(21) = -1 EBADF (Bad file descriptor) [pid 6068] close(22) = -1 EBADF (Bad file descriptor) [pid 6068] close(23) = -1 EBADF (Bad file descriptor) [pid 6068] close(24) = -1 EBADF (Bad file descriptor) [pid 6068] close(25) = -1 EBADF (Bad file descriptor) [pid 6068] close(26) = -1 EBADF (Bad file descriptor) [pid 6068] close(27) = -1 EBADF (Bad file descriptor) [pid 6068] close(28) = -1 EBADF (Bad file descriptor) [pid 6068] close(29) = -1 EBADF (Bad file descriptor) [pid 6068] exit_group(0) = ? [pid 6068] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=95, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./93", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./93", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./93/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./93/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./93/binderfs") = 0 [pid 5637] umount2("./93/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./93/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./93/cgroup.net") = 0 [pid 5637] umount2("./93/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./93/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./93/cgroup.cpu") = 0 [pid 5637] umount2("./93/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./93/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./93/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./93") = 0 [pid 5637] mkdir("./94", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6072 attached , child_tidptr=0x55557f25d790) = 96 [pid 6072] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 6072] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 6072] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6072] chdir("./94") = 0 [pid 6072] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6072] setpgid(0, 0) = 0 [pid 6072] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6072] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6072] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6072] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6072] write(3, "1000", 4) = 4 [pid 6072] close(3) = 0 [pid 6072] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6072] write(1, "executing program\n", 18) = 18 [pid 6072] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6072] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) executing program [pid 6072] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6072] close(3) = 0 [pid 6072] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6072] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6072] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6072] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6072] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6072] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6072] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6072] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6072] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6072] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6072] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6072] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6072] setns(201, 0) = 0 [pid 6072] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6072] setns(7, 0) = 0 [pid 6072] close(7) = 0 [pid 6072] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6072] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6072] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=96}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6072] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=96}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6072] close(7) = 0 [pid 6072] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6072] close(3) = 0 [pid 6072] close(4) = 0 [pid 6072] close(5) = 0 [pid 6072] close(6) = 0 [pid 6072] close(7) = -1 EBADF (Bad file descriptor) [pid 6072] close(8) = 0 [pid 6072] close(9) = -1 EBADF (Bad file descriptor) [pid 6072] close(10) = -1 EBADF (Bad file descriptor) [pid 6072] close(11) = -1 EBADF (Bad file descriptor) [pid 6072] close(12) = -1 EBADF (Bad file descriptor) [pid 6072] close(13) = -1 EBADF (Bad file descriptor) [pid 6072] close(14) = -1 EBADF (Bad file descriptor) [pid 6072] close(15) = -1 EBADF (Bad file descriptor) [pid 6072] close(16) = -1 EBADF (Bad file descriptor) [pid 6072] close(17) = -1 EBADF (Bad file descriptor) [pid 6072] close(18) = -1 EBADF (Bad file descriptor) [pid 6072] close(19) = -1 EBADF (Bad file descriptor) [pid 6072] close(20) = -1 EBADF (Bad file descriptor) [pid 6072] close(21) = -1 EBADF (Bad file descriptor) [pid 6072] close(22) = -1 EBADF (Bad file descriptor) [pid 6072] close(23) = -1 EBADF (Bad file descriptor) [pid 6072] close(24) = -1 EBADF (Bad file descriptor) [pid 6072] close(25) = -1 EBADF (Bad file descriptor) [pid 6072] close(26) = -1 EBADF (Bad file descriptor) [pid 6072] close(27) = -1 EBADF (Bad file descriptor) [pid 6072] close(28) = -1 EBADF (Bad file descriptor) [pid 6072] close(29) = -1 EBADF (Bad file descriptor) [pid 6072] exit_group(0) = ? [pid 6072] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=96, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./94", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./94", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./94/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./94/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./94/binderfs") = 0 [pid 5637] umount2("./94/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./94/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./94/cgroup.net") = 0 [pid 5637] umount2("./94/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./94/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./94/cgroup.cpu") = 0 [pid 5637] umount2("./94/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./94/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./94/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./94") = 0 [pid 5637] mkdir("./95", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6078 attached , child_tidptr=0x55557f25d790) = 97 [pid 6078] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 6078] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6078] <... rt_sigprocmask resumed>, NULL, 8) = 0 [ 118.924475][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 6078] chdir("./95") = 0 [pid 6078] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6078] setpgid(0, 0) = 0 [pid 6078] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6078] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6078] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6078] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6078] write(3, "1000", 4) = 4 [pid 6078] close(3) = 0 [pid 6078] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6078] write(1, "executing program\n", 18) = 18 [pid 6078] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6078] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) executing program [pid 6078] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6078] close(3) = 0 [pid 6078] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6078] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6078] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6078] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6078] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6078] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6078] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6078] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6078] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6078] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6078] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6078] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6078] setns(201, 0) = 0 [pid 6078] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6078] setns(7, 0) = 0 [pid 6078] close(7) = 0 [pid 6078] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6078] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6078] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=97}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6078] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=97}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6078] close(7) = 0 [pid 6078] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6078] close(3) = 0 [pid 6078] close(4) = 0 [pid 6078] close(5) = 0 [pid 6078] close(6) = 0 [pid 6078] close(7) = -1 EBADF (Bad file descriptor) [pid 6078] close(8) = 0 [pid 6078] close(9) = -1 EBADF (Bad file descriptor) [pid 6078] close(10) = -1 EBADF (Bad file descriptor) [pid 6078] close(11) = -1 EBADF (Bad file descriptor) [pid 6078] close(12) = -1 EBADF (Bad file descriptor) [pid 6078] close(13) = -1 EBADF (Bad file descriptor) [pid 6078] close(14) = -1 EBADF (Bad file descriptor) [pid 6078] close(15) = -1 EBADF (Bad file descriptor) [pid 6078] close(16) = -1 EBADF (Bad file descriptor) [pid 6078] close(17) = -1 EBADF (Bad file descriptor) [pid 6078] close(18) = -1 EBADF (Bad file descriptor) [pid 6078] close(19) = -1 EBADF (Bad file descriptor) [ 119.058941][ T6078] __nla_validate_parse: 10 callbacks suppressed [ 119.058955][ T6078] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 6078] close(20) = -1 EBADF (Bad file descriptor) [pid 6078] close(21) = -1 EBADF (Bad file descriptor) [pid 6078] close(22) = -1 EBADF (Bad file descriptor) [pid 6078] close(23) = -1 EBADF (Bad file descriptor) [pid 6078] close(24) = -1 EBADF (Bad file descriptor) [pid 6078] close(25) = -1 EBADF (Bad file descriptor) [pid 6078] close(26) = -1 EBADF (Bad file descriptor) [pid 6078] close(27) = -1 EBADF (Bad file descriptor) [pid 6078] close(28) = -1 EBADF (Bad file descriptor) [pid 6078] close(29) = -1 EBADF (Bad file descriptor) [pid 6078] exit_group(0) = ? [pid 6078] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=97, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5637] umount2("./95", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./95", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 119.143343][ T5630] udevd[5630]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 119.145768][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./95/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./95/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./95/binderfs") = 0 [pid 5637] umount2("./95/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./95/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./95/cgroup.net") = 0 [pid 5637] umount2("./95/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./95/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./95/cgroup.cpu") = 0 [pid 5637] umount2("./95/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./95/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./95/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./95") = 0 [pid 5637] mkdir("./96", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6082 attached , child_tidptr=0x55557f25d790) = 98 [pid 6082] set_robust_list(0x55557f25d7a0, 24 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 6082] <... set_robust_list resumed>) = 0 [pid 6082] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6082] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6082] chdir("./96") = 0 [pid 6082] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6082] setpgid(0, 0) = 0 [pid 6082] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6082] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6082] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6082] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6082] write(3, "1000", 4) = 4 [pid 6082] close(3) = 0 [pid 6082] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6082] write(1, "executing program\n", 18) = 18 executing program [pid 6082] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6082] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6082] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6082] close(3) = 0 [pid 6082] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6082] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6082] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6082] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6082] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6082] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6082] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6082] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6082] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6082] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6082] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6082] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6082] setns(201, 0) = 0 [pid 6082] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6082] setns(7, 0) = 0 [pid 6082] close(7) = 0 [pid 6082] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6082] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6082] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=98}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6082] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=98}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6082] close(7) = 0 [pid 6082] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6082] close(3) = 0 [pid 6082] close(4) = 0 [pid 6082] close(5) = 0 [pid 6082] close(6) = 0 [pid 6082] close(7) = -1 EBADF (Bad file descriptor) [pid 6082] close(8) = 0 [ 119.391668][ T6082] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 6082] close(9) = -1 EBADF (Bad file descriptor) [pid 6082] close(10) = -1 EBADF (Bad file descriptor) [pid 6082] close(11) = -1 EBADF (Bad file descriptor) [pid 6082] close(12) = -1 EBADF (Bad file descriptor) [pid 6082] close(13) = -1 EBADF (Bad file descriptor) [pid 6082] close(14) = -1 EBADF (Bad file descriptor) [pid 6082] close(15) = -1 EBADF (Bad file descriptor) [pid 6082] close(16) = -1 EBADF (Bad file descriptor) [pid 6082] close(17) = -1 EBADF (Bad file descriptor) [pid 6082] close(18) = -1 EBADF (Bad file descriptor) [pid 6082] close(19) = -1 EBADF (Bad file descriptor) [pid 6082] close(20) = -1 EBADF (Bad file descriptor) [pid 6082] close(21) = -1 EBADF (Bad file descriptor) [pid 6082] close(22) = -1 EBADF (Bad file descriptor) [pid 6082] close(23) = -1 EBADF (Bad file descriptor) [pid 6082] close(24) = -1 EBADF (Bad file descriptor) [pid 6082] close(25) = -1 EBADF (Bad file descriptor) [pid 6082] close(26) = -1 EBADF (Bad file descriptor) [pid 6082] close(27) = -1 EBADF (Bad file descriptor) [pid 6082] close(28) = -1 EBADF (Bad file descriptor) [pid 6082] close(29) = -1 EBADF (Bad file descriptor) [pid 6082] exit_group(0) = ? [pid 6082] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=98, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./96", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./96", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./96/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./96/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./96/binderfs") = 0 [pid 5637] umount2("./96/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./96/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./96/cgroup.net") = 0 [pid 5637] umount2("./96/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./96/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./96/cgroup.cpu") = 0 [pid 5637] umount2("./96/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./96/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./96/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./96") = 0 [pid 5637] mkdir("./97", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6088 attached , child_tidptr=0x55557f25d790) = 99 [ 119.526764][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 6088] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 6088] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6088] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6088] chdir("./97") = 0 [pid 6088] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6088] setpgid(0, 0) = 0 [pid 6088] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6088] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6088] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6088] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6088] write(3, "1000", 4) = 4 [pid 6088] close(3) = 0 [pid 6088] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6088] write(1, "executing program\n", 18) = 18 executing program [pid 6088] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6088] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6088] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6088] close(3) = 0 [pid 6088] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6088] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6088] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6088] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6088] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6088] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6088] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6088] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6088] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6088] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6088] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6088] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6088] setns(201, 0) = 0 [pid 6088] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6088] setns(7, 0) = 0 [pid 6088] close(7) = 0 [pid 6088] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6088] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6088] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=99}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6088] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=99}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6088] close(7) = 0 [pid 6088] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6088] close(3) = 0 [pid 6088] close(4) = 0 [pid 6088] close(5) = 0 [pid 6088] close(6) = 0 [pid 6088] close(7) = -1 EBADF (Bad file descriptor) [pid 6088] close(8) = 0 [pid 6088] close(9) = -1 EBADF (Bad file descriptor) [pid 6088] close(10) = -1 EBADF (Bad file descriptor) [pid 6088] close(11) = -1 EBADF (Bad file descriptor) [pid 6088] close(12) = -1 EBADF (Bad file descriptor) [pid 6088] close(13) = -1 EBADF (Bad file descriptor) [pid 6088] close(14) = -1 EBADF (Bad file descriptor) [pid 6088] close(15) = -1 EBADF (Bad file descriptor) [pid 6088] close(16) = -1 EBADF (Bad file descriptor) [pid 6088] close(17) = -1 EBADF (Bad file descriptor) [pid 6088] close(18) = -1 EBADF (Bad file descriptor) [ 119.648828][ T6088] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 6088] close(19) = -1 EBADF (Bad file descriptor) [pid 6088] close(20) = -1 EBADF (Bad file descriptor) [pid 6088] close(21) = -1 EBADF (Bad file descriptor) [pid 6088] close(22) = -1 EBADF (Bad file descriptor) [pid 6088] close(23) = -1 EBADF (Bad file descriptor) [pid 6088] close(24) = -1 EBADF (Bad file descriptor) [pid 6088] close(25) = -1 EBADF (Bad file descriptor) [pid 6088] close(26) = -1 EBADF (Bad file descriptor) [pid 6088] close(27) = -1 EBADF (Bad file descriptor) [pid 6088] close(28) = -1 EBADF (Bad file descriptor) [pid 6088] close(29) = -1 EBADF (Bad file descriptor) [pid 6088] exit_group(0) = ? [pid 6088] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=99, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./97", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./97", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./97/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./97/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./97/binderfs") = 0 [pid 5637] umount2("./97/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 119.727248][ T5630] udevd[5630]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 119.729754][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 5637] newfstatat(AT_FDCWD, "./97/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./97/cgroup.net") = 0 [pid 5637] umount2("./97/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./97/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./97/cgroup.cpu") = 0 [pid 5637] umount2("./97/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./97/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./97/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./97") = 0 [pid 5637] mkdir("./98", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6092 attached , child_tidptr=0x55557f25d790) = 100 [pid 6092] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 6092] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6092] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6092] chdir("./98") = 0 [pid 6092] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6092] setpgid(0, 0) = 0 [pid 6092] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6092] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6092] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6092] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6092] write(3, "1000", 4) = 4 [pid 6092] close(3) = 0 [pid 6092] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6092] write(1, "executing program\n", 18) = 18 [pid 6092] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6092] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6092] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6092] close(3) = 0 [pid 6092] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6092] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6092] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6092] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6092] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6092] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6092] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6092] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6092] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6092] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6092] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6092] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6092] setns(201, 0) = 0 [pid 6092] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6092] setns(7, 0) = 0 [pid 6092] close(7) = 0 [pid 6092] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6092] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6092] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=100}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6092] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=100}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6092] close(7) = 0 [pid 6092] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6092] close(3) = 0 [pid 6092] close(4) = 0 [pid 6092] close(5) = 0 [pid 6092] close(6) = 0 [pid 6092] close(7) = -1 EBADF (Bad file descriptor) [pid 6092] close(8) = 0 [pid 6092] close(9) = -1 EBADF (Bad file descriptor) [pid 6092] close(10) = -1 EBADF (Bad file descriptor) [pid 6092] close(11) = -1 EBADF (Bad file descriptor) [pid 6092] close(12) = -1 EBADF (Bad file descriptor) [pid 6092] close(13) = -1 EBADF (Bad file descriptor) [pid 6092] close(14) = -1 EBADF (Bad file descriptor) [pid 6092] close(15) = -1 EBADF (Bad file descriptor) [pid 6092] close(16) = -1 EBADF (Bad file descriptor) [pid 6092] close(17) = -1 EBADF (Bad file descriptor) [pid 6092] close(18) = -1 EBADF (Bad file descriptor) [pid 6092] close(19) = -1 EBADF (Bad file descriptor) [pid 6092] close(20) = -1 EBADF (Bad file descriptor) [pid 6092] close(21) = -1 EBADF (Bad file descriptor) [pid 6092] close(22) = -1 EBADF (Bad file descriptor) [pid 6092] close(23) = -1 EBADF (Bad file descriptor) [pid 6092] close(24) = -1 EBADF (Bad file descriptor) [pid 6092] close(25) = -1 EBADF (Bad file descriptor) [pid 6092] close(26) = -1 EBADF (Bad file descriptor) [pid 6092] close(27) = -1 EBADF (Bad file descriptor) [pid 6092] close(28) = -1 EBADF (Bad file descriptor) [pid 6092] close(29) = -1 EBADF (Bad file descriptor) [pid 6092] exit_group(0) = ? [pid 6092] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=100, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./98", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./98", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./98/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./98/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 119.926585][ T6092] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 5637] unlink("./98/binderfs") = 0 [pid 5637] umount2("./98/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./98/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./98/cgroup.net") = 0 [pid 5637] umount2("./98/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./98/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./98/cgroup.cpu") = 0 [pid 5637] umount2("./98/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./98/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./98/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./98") = 0 [pid 5637] mkdir("./99", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6096 attached [pid 6096] set_robust_list(0x55557f25d7a0, 24 [pid 5637] <... clone resumed>, child_tidptr=0x55557f25d790) = 101 [pid 6096] <... set_robust_list resumed>) = 0 [pid 6096] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 6096] chdir("./99" [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6096] <... chdir resumed>) = 0 [pid 6096] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6096] setpgid(0, 0) = 0 [pid 6096] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6096] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6096] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6096] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6096] write(3, "1000", 4) = 4 [pid 6096] close(3) = 0 [pid 6096] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6096] write(1, "executing program\n", 18) = 18 executing program [pid 6096] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6096] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6096] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6096] close(3) = 0 [pid 6096] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6096] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6096] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6096] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6096] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6096] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6096] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6096] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6096] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6096] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [ 120.018510][ T5630] udevd[5630]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 120.021659][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 6096] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6096] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6096] setns(201, 0) = 0 [pid 6096] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6096] setns(7, 0) = 0 [pid 6096] close(7) = 0 [pid 6096] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6096] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6096] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=101}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6096] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=101}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6096] close(7) = 0 [pid 6096] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6096] close(3) = 0 [pid 6096] close(4) = 0 [pid 6096] close(5) = 0 [pid 6096] close(6) = 0 [pid 6096] close(7) = -1 EBADF (Bad file descriptor) [pid 6096] close(8) = 0 [pid 6096] close(9) = -1 EBADF (Bad file descriptor) [pid 6096] close(10) = -1 EBADF (Bad file descriptor) [pid 6096] close(11) = -1 EBADF (Bad file descriptor) [pid 6096] close(12) = -1 EBADF (Bad file descriptor) [pid 6096] close(13) = -1 EBADF (Bad file descriptor) [pid 6096] close(14) = -1 EBADF (Bad file descriptor) [pid 6096] close(15) = -1 EBADF (Bad file descriptor) [ 120.124844][ T6096] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 6096] close(16) = -1 EBADF (Bad file descriptor) [pid 6096] close(17) = -1 EBADF (Bad file descriptor) [pid 6096] close(18) = -1 EBADF (Bad file descriptor) [pid 6096] close(19) = -1 EBADF (Bad file descriptor) [pid 6096] close(20) = -1 EBADF (Bad file descriptor) [pid 6096] close(21) = -1 EBADF (Bad file descriptor) [pid 6096] close(22) = -1 EBADF (Bad file descriptor) [pid 6096] close(23) = -1 EBADF (Bad file descriptor) [pid 6096] close(24) = -1 EBADF (Bad file descriptor) [pid 6096] close(25) = -1 EBADF (Bad file descriptor) [pid 6096] close(26) = -1 EBADF (Bad file descriptor) [pid 6096] close(27) = -1 EBADF (Bad file descriptor) [pid 6096] close(28) = -1 EBADF (Bad file descriptor) [pid 6096] close(29) = -1 EBADF (Bad file descriptor) [pid 6096] exit_group(0) = ? [pid 6096] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=101, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./99", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./99", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./99/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./99/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./99/binderfs") = 0 [pid 5637] umount2("./99/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./99/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./99/cgroup.net") = 0 [pid 5637] umount2("./99/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./99/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./99/cgroup.cpu") = 0 [pid 5637] umount2("./99/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./99/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./99/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [ 120.215882][ T5630] udevd[5630]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 120.224892][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 5637] rmdir("./99") = 0 [pid 5637] mkdir("./100", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6100 attached , child_tidptr=0x55557f25d790) = 102 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 6100] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6100] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6100] chdir("./100") = 0 [pid 6100] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6100] setpgid(0, 0) = 0 [pid 6100] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6100] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6100] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6100] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6100] write(3, "1000", 4) = 4 [pid 6100] close(3) = 0 [pid 6100] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6100] write(1, "executing program\n", 18) = 18 [pid 6100] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) executing program [pid 6100] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6100] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6100] close(3) = 0 [pid 6100] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6100] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6100] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6100] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6100] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6100] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6100] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6100] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6100] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6100] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6100] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6100] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6100] setns(201, 0) = 0 [pid 6100] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6100] setns(7, 0) = 0 [pid 6100] close(7) = 0 [pid 6100] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6100] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6100] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=102}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6100] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=102}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6100] close(7) = 0 [pid 6100] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6100] close(3) = 0 [pid 6100] close(4) = 0 [pid 6100] close(5) = 0 [pid 6100] close(6) = 0 [pid 6100] close(7) = -1 EBADF (Bad file descriptor) [pid 6100] close(8) = 0 [pid 6100] close(9) = -1 EBADF (Bad file descriptor) [pid 6100] close(10) = -1 EBADF (Bad file descriptor) [pid 6100] close(11) = -1 EBADF (Bad file descriptor) [pid 6100] close(12) = -1 EBADF (Bad file descriptor) [pid 6100] close(13) = -1 EBADF (Bad file descriptor) [pid 6100] close(14) = -1 EBADF (Bad file descriptor) [pid 6100] close(15) = -1 EBADF (Bad file descriptor) [pid 6100] close(16) = -1 EBADF (Bad file descriptor) [pid 6100] close(17) = -1 EBADF (Bad file descriptor) [ 120.347908][ T6100] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 6100] close(18) = -1 EBADF (Bad file descriptor) [pid 6100] close(19) = -1 EBADF (Bad file descriptor) [pid 6100] close(20) = -1 EBADF (Bad file descriptor) [pid 6100] close(21) = -1 EBADF (Bad file descriptor) [pid 6100] close(22) = -1 EBADF (Bad file descriptor) [pid 6100] close(23) = -1 EBADF (Bad file descriptor) [pid 6100] close(24) = -1 EBADF (Bad file descriptor) [pid 6100] close(25) = -1 EBADF (Bad file descriptor) [pid 6100] close(26) = -1 EBADF (Bad file descriptor) [pid 6100] close(27) = -1 EBADF (Bad file descriptor) [pid 6100] close(28) = -1 EBADF (Bad file descriptor) [pid 6100] close(29) = -1 EBADF (Bad file descriptor) [pid 6100] exit_group(0) = ? [pid 6100] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=102, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./100", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./100", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./100/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./100/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./100/binderfs") = 0 [pid 5637] umount2("./100/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./100/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./100/cgroup.net") = 0 [pid 5637] umount2("./100/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./100/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./100/cgroup.cpu") = 0 [pid 5637] umount2("./100/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./100/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./100/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./100") = 0 [pid 5637] mkdir("./101", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6106 attached [pid 6106] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5637] <... clone resumed>, child_tidptr=0x55557f25d790) = 103 [pid 6106] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 6106] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6106] chdir("./101" [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6106] <... chdir resumed>) = 0 [pid 6106] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6106] setpgid(0, 0) = 0 [pid 6106] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6106] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6106] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6106] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6106] write(3, "1000", 4) = 4 [pid 6106] close(3) = 0 [pid 6106] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6106] write(1, "executing program\n", 18) = 18 [pid 6106] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) executing program [pid 6106] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6106] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6106] close(3) = 0 [pid 6106] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6106] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6106] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6106] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6106] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6106] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6106] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6106] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6106] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6106] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6106] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6106] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6106] setns(201, 0) = 0 [pid 6106] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6106] setns(7, 0) = 0 [pid 6106] close(7) = 0 [pid 6106] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6106] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6106] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=103}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6106] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=103}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6106] close(7) = 0 [pid 6106] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6106] close(3) = 0 [pid 6106] close(4) = 0 [pid 6106] close(5) = 0 [pid 6106] close(6) = 0 [pid 6106] close(7) = -1 EBADF (Bad file descriptor) [pid 6106] close(8) = 0 [pid 6106] close(9) = -1 EBADF (Bad file descriptor) [pid 6106] close(10) = -1 EBADF (Bad file descriptor) [pid 6106] close(11) = -1 EBADF (Bad file descriptor) [pid 6106] close(12) = -1 EBADF (Bad file descriptor) [pid 6106] close(13) = -1 EBADF (Bad file descriptor) [pid 6106] close(14) = -1 EBADF (Bad file descriptor) [pid 6106] close(15) = -1 EBADF (Bad file descriptor) [pid 6106] close(16) = -1 EBADF (Bad file descriptor) [pid 6106] close(17) = -1 EBADF (Bad file descriptor) [ 120.620814][ T6106] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 6106] close(18) = -1 EBADF (Bad file descriptor) [pid 6106] close(19) = -1 EBADF (Bad file descriptor) [pid 6106] close(20) = -1 EBADF (Bad file descriptor) [pid 6106] close(21) = -1 EBADF (Bad file descriptor) [pid 6106] close(22) = -1 EBADF (Bad file descriptor) [pid 6106] close(23) = -1 EBADF (Bad file descriptor) [pid 6106] close(24) = -1 EBADF (Bad file descriptor) [pid 6106] close(25) = -1 EBADF (Bad file descriptor) [pid 6106] close(26) = -1 EBADF (Bad file descriptor) [pid 6106] close(27) = -1 EBADF (Bad file descriptor) [pid 6106] close(28) = -1 EBADF (Bad file descriptor) [pid 6106] close(29) = -1 EBADF (Bad file descriptor) [pid 6106] exit_group(0) = ? [pid 6106] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=103, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5637] umount2("./101", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./101", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./101/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./101/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./101/binderfs") = 0 [pid 5637] umount2("./101/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./101/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./101/cgroup.net") = 0 [pid 5637] umount2("./101/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./101/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./101/cgroup.cpu") = 0 [pid 5637] umount2("./101/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./101/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./101/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./101") = 0 [pid 5637] mkdir("./102", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557f25d790) = 104 ci-upstream-net-kasan-gce/strace-static-x86_64: Process 6112 attached [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 6112] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6112] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6112] chdir("./102") = 0 [pid 6112] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6112] setpgid(0, 0) = 0 [pid 6112] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6112] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6112] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6112] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6112] write(3, "1000", 4) = 4 [pid 6112] close(3) = 0 [pid 6112] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6112] write(1, "executing program\n", 18) = 18 [pid 6112] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6112] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6112] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6112] close(3) = 0 [pid 6112] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6112] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6112] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6112] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6112] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6112] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6112] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6112] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6112] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6112] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6112] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6112] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6112] setns(201, 0) = 0 [pid 6112] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6112] setns(7, 0) = 0 [pid 6112] close(7) = 0 [pid 6112] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6112] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6112] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=104}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6112] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=104}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6112] close(7) = 0 [pid 6112] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6112] close(3) = 0 [pid 6112] close(4) = 0 [pid 6112] close(5) = 0 [pid 6112] close(6) = 0 [pid 6112] close(7) = -1 EBADF (Bad file descriptor) [ 120.913684][ T6112] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 6112] close(8) = 0 [pid 6112] close(9) = -1 EBADF (Bad file descriptor) [pid 6112] close(10) = -1 EBADF (Bad file descriptor) [pid 6112] close(11) = -1 EBADF (Bad file descriptor) [pid 6112] close(12) = -1 EBADF (Bad file descriptor) [pid 6112] close(13) = -1 EBADF (Bad file descriptor) [pid 6112] close(14) = -1 EBADF (Bad file descriptor) [pid 6112] close(15) = -1 EBADF (Bad file descriptor) [pid 6112] close(16) = -1 EBADF (Bad file descriptor) [pid 6112] close(17) = -1 EBADF (Bad file descriptor) [pid 6112] close(18) = -1 EBADF (Bad file descriptor) [pid 6112] close(19) = -1 EBADF (Bad file descriptor) [pid 6112] close(20) = -1 EBADF (Bad file descriptor) [pid 6112] close(21) = -1 EBADF (Bad file descriptor) [pid 6112] close(22) = -1 EBADF (Bad file descriptor) [pid 6112] close(23) = -1 EBADF (Bad file descriptor) [pid 6112] close(24) = -1 EBADF (Bad file descriptor) [pid 6112] close(25) = -1 EBADF (Bad file descriptor) [pid 6112] close(26) = -1 EBADF (Bad file descriptor) [pid 6112] close(27) = -1 EBADF (Bad file descriptor) [pid 6112] close(28) = -1 EBADF (Bad file descriptor) [pid 6112] close(29) = -1 EBADF (Bad file descriptor) [pid 6112] exit_group(0) = ? [pid 6112] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=104, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./102", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./102", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./102/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./102/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./102/binderfs") = 0 [pid 5637] umount2("./102/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./102/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./102/cgroup.net") = 0 [pid 5637] umount2("./102/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./102/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./102/cgroup.cpu") = 0 [pid 5637] umount2("./102/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./102/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./102/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./102") = 0 [pid 5637] mkdir("./103", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6118 attached , child_tidptr=0x55557f25d790) = 105 [pid 6118] set_robust_list(0x55557f25d7a0, 24 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 6118] <... set_robust_list resumed>) = 0 [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6118] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6118] chdir("./103") = 0 [pid 6118] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6118] setpgid(0, 0) = 0 [pid 6118] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6118] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6118] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6118] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6118] write(3, "1000", 4) = 4 [pid 6118] close(3) = 0 [pid 6118] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6118] write(1, "executing program\n", 18) = 18 [pid 6118] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) executing program [pid 6118] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6118] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6118] close(3) = 0 [pid 6118] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6118] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6118] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6118] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6118] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6118] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6118] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6118] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6118] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6118] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6118] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6118] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6118] setns(201, 0) = 0 [pid 6118] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6118] setns(7, 0) = 0 [pid 6118] close(7) = 0 [pid 6118] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6118] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6118] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=105}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6118] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=105}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6118] close(7) = 0 [pid 6118] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6118] close(3) = 0 [pid 6118] close(4) = 0 [pid 6118] close(5) = 0 [pid 6118] close(6) = 0 [pid 6118] close(7) = -1 EBADF (Bad file descriptor) [pid 6118] close(8) = 0 [pid 6118] close(9) = -1 EBADF (Bad file descriptor) [ 121.164133][ T6118] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 6118] close(10) = -1 EBADF (Bad file descriptor) [pid 6118] close(11) = -1 EBADF (Bad file descriptor) [pid 6118] close(12) = -1 EBADF (Bad file descriptor) [pid 6118] close(13) = -1 EBADF (Bad file descriptor) [pid 6118] close(14) = -1 EBADF (Bad file descriptor) [pid 6118] close(15) = -1 EBADF (Bad file descriptor) [pid 6118] close(16) = -1 EBADF (Bad file descriptor) [pid 6118] close(17) = -1 EBADF (Bad file descriptor) [pid 6118] close(18) = -1 EBADF (Bad file descriptor) [pid 6118] close(19) = -1 EBADF (Bad file descriptor) [pid 6118] close(20) = -1 EBADF (Bad file descriptor) [pid 6118] close(21) = -1 EBADF (Bad file descriptor) [pid 6118] close(22) = -1 EBADF (Bad file descriptor) [pid 6118] close(23) = -1 EBADF (Bad file descriptor) [pid 6118] close(24) = -1 EBADF (Bad file descriptor) [pid 6118] close(25) = -1 EBADF (Bad file descriptor) [pid 6118] close(26) = -1 EBADF (Bad file descriptor) [pid 6118] close(27) = -1 EBADF (Bad file descriptor) [pid 6118] close(28) = -1 EBADF (Bad file descriptor) [pid 6118] close(29) = -1 EBADF (Bad file descriptor) [pid 6118] exit_group(0) = ? [pid 6118] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=105, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./103", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./103", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./103/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./103/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./103/binderfs") = 0 [pid 5637] umount2("./103/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./103/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./103/cgroup.net") = 0 [pid 5637] umount2("./103/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./103/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./103/cgroup.cpu") = 0 [pid 5637] umount2("./103/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./103/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./103/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./103") = 0 [pid 5637] mkdir("./104", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6124 attached , child_tidptr=0x55557f25d790) = 106 [pid 6124] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 6124] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6124] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6124] chdir("./104") = 0 [pid 6124] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6124] setpgid(0, 0) = 0 [pid 6124] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6124] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6124] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6124] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6124] write(3, "1000", 4) = 4 [pid 6124] close(3) = 0 [pid 6124] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6124] write(1, "executing program\n", 18) = 18 [pid 6124] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6124] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6124] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6124] close(3) = 0 [pid 6124] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6124] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6124] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6124] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6124] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6124] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6124] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6124] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6124] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6124] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6124] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6124] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6124] setns(201, 0) = 0 [pid 6124] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6124] setns(7, 0) = 0 [pid 6124] close(7) = 0 [pid 6124] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6124] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6124] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=106}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6124] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=106}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6124] close(7) = 0 [pid 6124] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6124] close(3) = 0 [pid 6124] close(4) = 0 [pid 6124] close(5) = 0 [pid 6124] close(6) = 0 [pid 6124] close(7) = -1 EBADF (Bad file descriptor) [pid 6124] close(8) = 0 [pid 6124] close(9) = -1 EBADF (Bad file descriptor) [pid 6124] close(10) = -1 EBADF (Bad file descriptor) [pid 6124] close(11) = -1 EBADF (Bad file descriptor) [pid 6124] close(12) = -1 EBADF (Bad file descriptor) [pid 6124] close(13) = -1 EBADF (Bad file descriptor) [pid 6124] close(14) = -1 EBADF (Bad file descriptor) [pid 6124] close(15) = -1 EBADF (Bad file descriptor) [pid 6124] close(16) = -1 EBADF (Bad file descriptor) [pid 6124] close(17) = -1 EBADF (Bad file descriptor) [pid 6124] close(18) = -1 EBADF (Bad file descriptor) [pid 6124] close(19) = -1 EBADF (Bad file descriptor) [pid 6124] close(20) = -1 EBADF (Bad file descriptor) [pid 6124] close(21) = -1 EBADF (Bad file descriptor) [pid 6124] close(22) = -1 EBADF (Bad file descriptor) [pid 6124] close(23) = -1 EBADF (Bad file descriptor) [pid 6124] close(24) = -1 EBADF (Bad file descriptor) [pid 6124] close(25) = -1 EBADF (Bad file descriptor) [pid 6124] close(26) = -1 EBADF (Bad file descriptor) [pid 6124] close(27) = -1 EBADF (Bad file descriptor) [pid 6124] close(28) = -1 EBADF (Bad file descriptor) [pid 6124] close(29) = -1 EBADF (Bad file descriptor) [ 121.510081][ T6124] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 6124] exit_group(0) = ? [pid 6124] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=106, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./104", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./104", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./104/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./104/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./104/binderfs") = 0 [pid 5637] umount2("./104/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./104/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./104/cgroup.net") = 0 [pid 5637] umount2("./104/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./104/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./104/cgroup.cpu") = 0 [pid 5637] umount2("./104/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./104/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./104/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./104") = 0 [pid 5637] mkdir("./105", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6128 attached , child_tidptr=0x55557f25d790) = 107 [pid 6128] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 6128] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6128] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6128] chdir("./105") = 0 [pid 6128] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6128] setpgid(0, 0) = 0 [pid 6128] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6128] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6128] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6128] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6128] write(3, "1000", 4) = 4 [pid 6128] close(3) = 0 [pid 6128] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6128] write(1, "executing program\n", 18) = 18 [pid 6128] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6128] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6128] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6128] close(3) = 0 [pid 6128] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6128] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6128] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6128] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6128] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6128] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6128] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6128] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6128] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6128] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6128] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6128] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6128] setns(201, 0) = 0 [pid 6128] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6128] setns(7, 0) = 0 [pid 6128] close(7) = 0 [pid 6128] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6128] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6128] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=107}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6128] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=107}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6128] close(7) = 0 [pid 6128] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6128] close(3) = 0 [pid 6128] close(4) = 0 [pid 6128] close(5) = 0 [pid 6128] close(6) = 0 [pid 6128] close(7) = -1 EBADF (Bad file descriptor) [pid 6128] close(8) = 0 [pid 6128] close(9) = -1 EBADF (Bad file descriptor) [pid 6128] close(10) = -1 EBADF (Bad file descriptor) [pid 6128] close(11) = -1 EBADF (Bad file descriptor) [pid 6128] close(12) = -1 EBADF (Bad file descriptor) [pid 6128] close(13) = -1 EBADF (Bad file descriptor) [pid 6128] close(14) = -1 EBADF (Bad file descriptor) [pid 6128] close(15) = -1 EBADF (Bad file descriptor) [pid 6128] close(16) = -1 EBADF (Bad file descriptor) [pid 6128] close(17) = -1 EBADF (Bad file descriptor) [pid 6128] close(18) = -1 EBADF (Bad file descriptor) [pid 6128] close(19) = -1 EBADF (Bad file descriptor) [pid 6128] close(20) = -1 EBADF (Bad file descriptor) [pid 6128] close(21) = -1 EBADF (Bad file descriptor) [pid 6128] close(22) = -1 EBADF (Bad file descriptor) [pid 6128] close(23) = -1 EBADF (Bad file descriptor) [pid 6128] close(24) = -1 EBADF (Bad file descriptor) [pid 6128] close(25) = -1 EBADF (Bad file descriptor) [pid 6128] close(26) = -1 EBADF (Bad file descriptor) [pid 6128] close(27) = -1 EBADF (Bad file descriptor) [pid 6128] close(28) = -1 EBADF (Bad file descriptor) [pid 6128] close(29) = -1 EBADF (Bad file descriptor) [pid 6128] exit_group(0) = ? [pid 6128] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=107, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./105", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./105", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./105/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./105/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./105/binderfs") = 0 [pid 5637] umount2("./105/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./105/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./105/cgroup.net") = 0 [pid 5637] umount2("./105/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./105/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./105/cgroup.cpu") = 0 [pid 5637] umount2("./105/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./105/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./105/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./105") = 0 [pid 5637] mkdir("./106", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6132 attached , child_tidptr=0x55557f25d790) = 108 [pid 6132] set_robust_list(0x55557f25d7a0, 24 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 6132] <... set_robust_list resumed>) = 0 [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6132] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6132] chdir("./106") = 0 [pid 6132] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6132] setpgid(0, 0) = 0 [pid 6132] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6132] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6132] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6132] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6132] write(3, "1000", 4) = 4 [pid 6132] close(3) = 0 [pid 6132] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6132] write(1, "executing program\n", 18) = 18 executing program [pid 6132] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6132] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6132] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6132] close(3) = 0 [pid 6132] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6132] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6132] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6132] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6132] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6132] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6132] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6132] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6132] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6132] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6132] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6132] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6132] setns(201, 0) = 0 [pid 6132] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6132] setns(7, 0) = 0 [pid 6132] close(7) = 0 [pid 6132] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6132] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6132] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=108}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6132] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=108}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6132] close(7) = 0 [pid 6132] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6132] close(3) = 0 [pid 6132] close(4) = 0 [pid 6132] close(5) = 0 [pid 6132] close(6) = 0 [pid 6132] close(7) = -1 EBADF (Bad file descriptor) [pid 6132] close(8) = 0 [pid 6132] close(9) = -1 EBADF (Bad file descriptor) [pid 6132] close(10) = -1 EBADF (Bad file descriptor) [pid 6132] close(11) = -1 EBADF (Bad file descriptor) [pid 6132] close(12) = -1 EBADF (Bad file descriptor) [pid 6132] close(13) = -1 EBADF (Bad file descriptor) [pid 6132] close(14) = -1 EBADF (Bad file descriptor) [pid 6132] close(15) = -1 EBADF (Bad file descriptor) [pid 6132] close(16) = -1 EBADF (Bad file descriptor) [pid 6132] close(17) = -1 EBADF (Bad file descriptor) [pid 6132] close(18) = -1 EBADF (Bad file descriptor) [pid 6132] close(19) = -1 EBADF (Bad file descriptor) [pid 6132] close(20) = -1 EBADF (Bad file descriptor) [pid 6132] close(21) = -1 EBADF (Bad file descriptor) [pid 6132] close(22) = -1 EBADF (Bad file descriptor) [pid 6132] close(23) = -1 EBADF (Bad file descriptor) [pid 6132] close(24) = -1 EBADF (Bad file descriptor) [pid 6132] close(25) = -1 EBADF (Bad file descriptor) [pid 6132] close(26) = -1 EBADF (Bad file descriptor) [pid 6132] close(27) = -1 EBADF (Bad file descriptor) [pid 6132] close(28) = -1 EBADF (Bad file descriptor) [pid 6132] close(29) = -1 EBADF (Bad file descriptor) [pid 6132] exit_group(0) = ? [pid 6132] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=108, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./106", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./106", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./106/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./106/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./106/binderfs") = 0 [pid 5637] umount2("./106/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./106/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./106/cgroup.net") = 0 [pid 5637] umount2("./106/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./106/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./106/cgroup.cpu") = 0 [pid 5637] umount2("./106/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./106/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./106/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./106") = 0 [pid 5637] mkdir("./107", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6138 attached , child_tidptr=0x55557f25d790) = 109 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 6138] set_robust_list(0x55557f25d7a0, 24 [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6138] <... set_robust_list resumed>) = 0 [pid 6138] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6138] chdir("./107") = 0 [pid 6138] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6138] setpgid(0, 0) = 0 [pid 6138] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6138] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6138] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6138] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6138] write(3, "1000", 4) = 4 [pid 6138] close(3) = 0 [pid 6138] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6138] write(1, "executing program\n", 18) = 18 executing program [pid 6138] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6138] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6138] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6138] close(3) = 0 [pid 6138] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6138] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6138] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6138] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6138] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6138] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6138] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6138] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6138] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6138] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6138] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6138] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6138] setns(201, 0) = 0 [pid 6138] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6138] setns(7, 0) = 0 [pid 6138] close(7) = 0 [pid 6138] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6138] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6138] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=109}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6138] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=109}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6138] close(7) = 0 [pid 6138] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6138] close(3) = 0 [pid 6138] close(4) = 0 [pid 6138] close(5) = 0 [pid 6138] close(6) = 0 [pid 6138] close(7) = -1 EBADF (Bad file descriptor) [pid 6138] close(8) = 0 [pid 6138] close(9) = -1 EBADF (Bad file descriptor) [pid 6138] close(10) = -1 EBADF (Bad file descriptor) [pid 6138] close(11) = -1 EBADF (Bad file descriptor) [pid 6138] close(12) = -1 EBADF (Bad file descriptor) [pid 6138] close(13) = -1 EBADF (Bad file descriptor) [pid 6138] close(14) = -1 EBADF (Bad file descriptor) [pid 6138] close(15) = -1 EBADF (Bad file descriptor) [pid 6138] close(16) = -1 EBADF (Bad file descriptor) [pid 6138] close(17) = -1 EBADF (Bad file descriptor) [pid 6138] close(18) = -1 EBADF (Bad file descriptor) [pid 6138] close(19) = -1 EBADF (Bad file descriptor) [pid 6138] close(20) = -1 EBADF (Bad file descriptor) [pid 6138] close(21) = -1 EBADF (Bad file descriptor) [pid 6138] close(22) = -1 EBADF (Bad file descriptor) [pid 6138] close(23) = -1 EBADF (Bad file descriptor) [pid 6138] close(24) = -1 EBADF (Bad file descriptor) [pid 6138] close(25) = -1 EBADF (Bad file descriptor) [pid 6138] close(26) = -1 EBADF (Bad file descriptor) [pid 6138] close(27) = -1 EBADF (Bad file descriptor) [pid 6138] close(28) = -1 EBADF (Bad file descriptor) [pid 6138] close(29) = -1 EBADF (Bad file descriptor) [pid 6138] exit_group(0) = ? [pid 6138] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=109, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./107", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./107", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./107/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./107/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./107/binderfs") = 0 [pid 5637] umount2("./107/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./107/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./107/cgroup.net") = 0 [pid 5637] umount2("./107/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./107/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./107/cgroup.cpu") = 0 [pid 5637] umount2("./107/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./107/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./107/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./107") = 0 [pid 5637] mkdir("./108", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6144 attached [pid 6144] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 6144] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] <... clone resumed>, child_tidptr=0x55557f25d790) = 110 [pid 6144] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 6144] chdir("./108" [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6144] <... chdir resumed>) = 0 [pid 6144] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6144] setpgid(0, 0) = 0 [pid 6144] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6144] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6144] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6144] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6144] write(3, "1000", 4) = 4 [pid 6144] close(3) = 0 [pid 6144] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6144] write(1, "executing program\n", 18) = 18 [pid 6144] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6144] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6144] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6144] close(3) = 0 [pid 6144] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6144] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6144] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6144] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6144] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6144] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6144] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6144] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6144] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6144] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6144] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6144] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6144] setns(201, 0) = 0 [pid 6144] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6144] setns(7, 0) = 0 [pid 6144] close(7) = 0 [pid 6144] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6144] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6144] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=110}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6144] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=110}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6144] close(7) = 0 [pid 6144] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6144] close(3) = 0 [pid 6144] close(4) = 0 [pid 6144] close(5) = 0 [pid 6144] close(6) = 0 [pid 6144] close(7) = -1 EBADF (Bad file descriptor) [pid 6144] close(8) = 0 [pid 6144] close(9) = -1 EBADF (Bad file descriptor) [pid 6144] close(10) = -1 EBADF (Bad file descriptor) [pid 6144] close(11) = -1 EBADF (Bad file descriptor) [pid 6144] close(12) = -1 EBADF (Bad file descriptor) [pid 6144] close(13) = -1 EBADF (Bad file descriptor) [pid 6144] close(14) = -1 EBADF (Bad file descriptor) [pid 6144] close(15) = -1 EBADF (Bad file descriptor) [pid 6144] close(16) = -1 EBADF (Bad file descriptor) [pid 6144] close(17) = -1 EBADF (Bad file descriptor) [pid 6144] close(18) = -1 EBADF (Bad file descriptor) [pid 6144] close(19) = -1 EBADF (Bad file descriptor) [pid 6144] close(20) = -1 EBADF (Bad file descriptor) [pid 6144] close(21) = -1 EBADF (Bad file descriptor) [pid 6144] close(22) = -1 EBADF (Bad file descriptor) [pid 6144] close(23) = -1 EBADF (Bad file descriptor) [pid 6144] close(24) = -1 EBADF (Bad file descriptor) [pid 6144] close(25) = -1 EBADF (Bad file descriptor) [pid 6144] close(26) = -1 EBADF (Bad file descriptor) [pid 6144] close(27) = -1 EBADF (Bad file descriptor) [pid 6144] close(28) = -1 EBADF (Bad file descriptor) [pid 6144] close(29) = -1 EBADF (Bad file descriptor) [pid 6144] exit_group(0) = ? [pid 6144] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=110, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./108", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./108", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./108/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./108/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./108/binderfs") = 0 [pid 5637] umount2("./108/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./108/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./108/cgroup.net") = 0 [pid 5637] umount2("./108/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./108/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./108/cgroup.cpu") = 0 [pid 5637] umount2("./108/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./108/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./108/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./108") = 0 [pid 5637] mkdir("./109", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6148 attached , child_tidptr=0x55557f25d790) = 111 [pid 6148] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 6148] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6148] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6148] chdir("./109") = 0 [pid 6148] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6148] setpgid(0, 0) = 0 [pid 6148] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6148] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6148] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6148] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6148] write(3, "1000", 4) = 4 [pid 6148] close(3) = 0 [pid 6148] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6148] write(1, "executing program\n", 18) = 18 executing program [pid 6148] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6148] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6148] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6148] close(3) = 0 [pid 6148] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6148] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6148] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6148] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6148] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6148] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6148] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6148] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6148] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6148] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6148] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6148] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6148] setns(201, 0) = 0 [pid 6148] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6148] setns(7, 0) = 0 [pid 6148] close(7) = 0 [pid 6148] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6148] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6148] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=111}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6148] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=111}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6148] close(7) = 0 [pid 6148] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6148] close(3) = 0 [pid 6148] close(4) = 0 [pid 6148] close(5) = 0 [pid 6148] close(6) = 0 [pid 6148] close(7) = -1 EBADF (Bad file descriptor) [pid 6148] close(8) = 0 [pid 6148] close(9) = -1 EBADF (Bad file descriptor) [pid 6148] close(10) = -1 EBADF (Bad file descriptor) [pid 6148] close(11) = -1 EBADF (Bad file descriptor) [pid 6148] close(12) = -1 EBADF (Bad file descriptor) [pid 6148] close(13) = -1 EBADF (Bad file descriptor) [pid 6148] close(14) = -1 EBADF (Bad file descriptor) [pid 6148] close(15) = -1 EBADF (Bad file descriptor) [pid 6148] close(16) = -1 EBADF (Bad file descriptor) [pid 6148] close(17) = -1 EBADF (Bad file descriptor) [pid 6148] close(18) = -1 EBADF (Bad file descriptor) [pid 6148] close(19) = -1 EBADF (Bad file descriptor) [pid 6148] close(20) = -1 EBADF (Bad file descriptor) [pid 6148] close(21) = -1 EBADF (Bad file descriptor) [pid 6148] close(22) = -1 EBADF (Bad file descriptor) [pid 6148] close(23) = -1 EBADF (Bad file descriptor) [pid 6148] close(24) = -1 EBADF (Bad file descriptor) [pid 6148] close(25) = -1 EBADF (Bad file descriptor) [pid 6148] close(26) = -1 EBADF (Bad file descriptor) [pid 6148] close(27) = -1 EBADF (Bad file descriptor) [pid 6148] close(28) = -1 EBADF (Bad file descriptor) [pid 6148] close(29) = -1 EBADF (Bad file descriptor) [pid 6148] exit_group(0) = ? [pid 6148] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=111, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./109", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./109", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./109/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./109/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./109/binderfs") = 0 [pid 5637] umount2("./109/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./109/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./109/cgroup.net") = 0 [pid 5637] umount2("./109/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./109/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./109/cgroup.cpu") = 0 [pid 5637] umount2("./109/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./109/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./109/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./109") = 0 [pid 5637] mkdir("./110", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6152 attached , child_tidptr=0x55557f25d790) = 112 [pid 6152] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 6152] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6152] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6152] chdir("./110") = 0 [pid 6152] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6152] setpgid(0, 0) = 0 [pid 6152] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6152] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6152] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6152] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6152] write(3, "1000", 4) = 4 [pid 6152] close(3) = 0 [pid 6152] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6152] write(1, "executing program\n", 18) = 18 [pid 6152] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6152] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6152] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6152] close(3) = 0 [pid 6152] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6152] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6152] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6152] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6152] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6152] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6152] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6152] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6152] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6152] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6152] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6152] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6152] setns(201, 0) = 0 [pid 6152] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6152] setns(7, 0) = 0 [pid 6152] close(7) = 0 [pid 6152] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6152] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6152] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=112}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6152] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=112}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6152] close(7) = 0 [pid 6152] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6152] close(3) = 0 [pid 6152] close(4) = 0 [pid 6152] close(5) = 0 [pid 6152] close(6) = 0 [pid 6152] close(7) = -1 EBADF (Bad file descriptor) [pid 6152] close(8) = 0 [pid 6152] close(9) = -1 EBADF (Bad file descriptor) [pid 6152] close(10) = -1 EBADF (Bad file descriptor) [pid 6152] close(11) = -1 EBADF (Bad file descriptor) [pid 6152] close(12) = -1 EBADF (Bad file descriptor) [pid 6152] close(13) = -1 EBADF (Bad file descriptor) [pid 6152] close(14) = -1 EBADF (Bad file descriptor) [pid 6152] close(15) = -1 EBADF (Bad file descriptor) [pid 6152] close(16) = -1 EBADF (Bad file descriptor) [pid 6152] close(17) = -1 EBADF (Bad file descriptor) [pid 6152] close(18) = -1 EBADF (Bad file descriptor) [pid 6152] close(19) = -1 EBADF (Bad file descriptor) [pid 6152] close(20) = -1 EBADF (Bad file descriptor) [pid 6152] close(21) = -1 EBADF (Bad file descriptor) [pid 6152] close(22) = -1 EBADF (Bad file descriptor) [pid 6152] close(23) = -1 EBADF (Bad file descriptor) [pid 6152] close(24) = -1 EBADF (Bad file descriptor) [pid 6152] close(25) = -1 EBADF (Bad file descriptor) [pid 6152] close(26) = -1 EBADF (Bad file descriptor) [pid 6152] close(27) = -1 EBADF (Bad file descriptor) [pid 6152] close(28) = -1 EBADF (Bad file descriptor) [pid 6152] close(29) = -1 EBADF (Bad file descriptor) [pid 6152] exit_group(0) = ? [pid 6152] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=112, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./110", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./110", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./110/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./110/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./110/binderfs") = 0 [pid 5637] umount2("./110/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./110/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./110/cgroup.net") = 0 [pid 5637] umount2("./110/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./110/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./110/cgroup.cpu") = 0 [pid 5637] umount2("./110/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./110/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./110/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./110") = 0 [pid 5637] mkdir("./111", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6158 attached , child_tidptr=0x55557f25d790) = 113 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 6158] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6158] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6158] chdir("./111") = 0 [pid 6158] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6158] setpgid(0, 0) = 0 [pid 6158] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6158] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6158] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6158] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6158] write(3, "1000", 4) = 4 [pid 6158] close(3) = 0 [pid 6158] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6158] write(1, "executing program\n", 18) = 18 [pid 6158] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6158] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6158] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6158] close(3) = 0 [pid 6158] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6158] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6158] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6158] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6158] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6158] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6158] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6158] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6158] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6158] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6158] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6158] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6158] setns(201, 0) = 0 [pid 6158] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6158] setns(7, 0) = 0 [pid 6158] close(7) = 0 [pid 6158] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6158] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6158] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=113}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6158] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=113}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6158] close(7) = 0 [pid 6158] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6158] close(3) = 0 [pid 6158] close(4) = 0 [pid 6158] close(5) = 0 [pid 6158] close(6) = 0 [pid 6158] close(7) = -1 EBADF (Bad file descriptor) [pid 6158] close(8) = 0 [pid 6158] close(9) = -1 EBADF (Bad file descriptor) [pid 6158] close(10) = -1 EBADF (Bad file descriptor) [pid 6158] close(11) = -1 EBADF (Bad file descriptor) [pid 6158] close(12) = -1 EBADF (Bad file descriptor) [pid 6158] close(13) = -1 EBADF (Bad file descriptor) [pid 6158] close(14) = -1 EBADF (Bad file descriptor) [pid 6158] close(15) = -1 EBADF (Bad file descriptor) [pid 6158] close(16) = -1 EBADF (Bad file descriptor) [pid 6158] close(17) = -1 EBADF (Bad file descriptor) [pid 6158] close(18) = -1 EBADF (Bad file descriptor) [pid 6158] close(19) = -1 EBADF (Bad file descriptor) [pid 6158] close(20) = -1 EBADF (Bad file descriptor) [pid 6158] close(21) = -1 EBADF (Bad file descriptor) [pid 6158] close(22) = -1 EBADF (Bad file descriptor) [pid 6158] close(23) = -1 EBADF (Bad file descriptor) [pid 6158] close(24) = -1 EBADF (Bad file descriptor) [pid 6158] close(25) = -1 EBADF (Bad file descriptor) [pid 6158] close(26) = -1 EBADF (Bad file descriptor) [pid 6158] close(27) = -1 EBADF (Bad file descriptor) [pid 6158] close(28) = -1 EBADF (Bad file descriptor) [pid 6158] close(29) = -1 EBADF (Bad file descriptor) [pid 6158] exit_group(0) = ? [pid 6158] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=113, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./111", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./111", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./111/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./111/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./111/binderfs") = 0 [pid 5637] umount2("./111/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./111/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./111/cgroup.net") = 0 [pid 5637] umount2("./111/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./111/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./111/cgroup.cpu") = 0 [pid 5637] umount2("./111/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./111/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./111/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./111") = 0 [pid 5637] mkdir("./112", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6162 attached , child_tidptr=0x55557f25d790) = 114 [pid 6162] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 6162] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6162] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6162] chdir("./112") = 0 [pid 6162] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6162] setpgid(0, 0) = 0 [pid 6162] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6162] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6162] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6162] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6162] write(3, "1000", 4) = 4 [pid 6162] close(3) = 0 [pid 6162] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6162] write(1, "executing program\n", 18) = 18 [pid 6162] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6162] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6162] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6162] close(3) = 0 [pid 6162] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6162] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6162] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6162] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6162] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6162] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6162] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6162] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6162] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6162] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6162] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6162] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6162] setns(201, 0) = 0 [pid 6162] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6162] setns(7, 0) = 0 [pid 6162] close(7) = 0 [pid 6162] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6162] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6162] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=114}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6162] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=114}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6162] close(7) = 0 [pid 6162] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6162] close(3) = 0 [pid 6162] close(4) = 0 [pid 6162] close(5) = 0 [pid 6162] close(6) = 0 [pid 6162] close(7) = -1 EBADF (Bad file descriptor) [pid 6162] close(8) = 0 [pid 6162] close(9) = -1 EBADF (Bad file descriptor) [pid 6162] close(10) = -1 EBADF (Bad file descriptor) [pid 6162] close(11) = -1 EBADF (Bad file descriptor) [pid 6162] close(12) = -1 EBADF (Bad file descriptor) [pid 6162] close(13) = -1 EBADF (Bad file descriptor) [pid 6162] close(14) = -1 EBADF (Bad file descriptor) [pid 6162] close(15) = -1 EBADF (Bad file descriptor) [pid 6162] close(16) = -1 EBADF (Bad file descriptor) [pid 6162] close(17) = -1 EBADF (Bad file descriptor) [pid 6162] close(18) = -1 EBADF (Bad file descriptor) [pid 6162] close(19) = -1 EBADF (Bad file descriptor) [pid 6162] close(20) = -1 EBADF (Bad file descriptor) [pid 6162] close(21) = -1 EBADF (Bad file descriptor) [pid 6162] close(22) = -1 EBADF (Bad file descriptor) [pid 6162] close(23) = -1 EBADF (Bad file descriptor) [pid 6162] close(24) = -1 EBADF (Bad file descriptor) [pid 6162] close(25) = -1 EBADF (Bad file descriptor) [pid 6162] close(26) = -1 EBADF (Bad file descriptor) [pid 6162] close(27) = -1 EBADF (Bad file descriptor) [pid 6162] close(28) = -1 EBADF (Bad file descriptor) [pid 6162] close(29) = -1 EBADF (Bad file descriptor) [pid 6162] exit_group(0) = ? [pid 6162] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=114, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./112", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./112", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./112/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./112/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./112/binderfs") = 0 [pid 5637] umount2("./112/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./112/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./112/cgroup.net") = 0 [pid 5637] umount2("./112/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./112/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./112/cgroup.cpu") = 0 [pid 5637] umount2("./112/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./112/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./112/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./112") = 0 [pid 5637] mkdir("./113", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6166 attached , child_tidptr=0x55557f25d790) = 115 [pid 6166] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 6166] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6166] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6166] chdir("./113") = 0 [pid 6166] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6166] setpgid(0, 0) = 0 [pid 6166] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6166] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6166] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6166] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6166] write(3, "1000", 4) = 4 [pid 6166] close(3) = 0 [pid 6166] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6166] write(1, "executing program\n", 18) = 18 [pid 6166] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6166] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6166] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6166] close(3) = 0 [pid 6166] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6166] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6166] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6166] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6166] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6166] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6166] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6166] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6166] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6166] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6166] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6166] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6166] setns(201, 0) = 0 [pid 6166] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6166] setns(7, 0) = 0 [pid 6166] close(7) = 0 [pid 6166] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6166] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6166] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=115}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6166] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=115}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6166] close(7) = 0 [pid 6166] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6166] close(3) = 0 [pid 6166] close(4) = 0 [pid 6166] close(5) = 0 [pid 6166] close(6) = 0 [pid 6166] close(7) = -1 EBADF (Bad file descriptor) [pid 6166] close(8) = 0 [pid 6166] close(9) = -1 EBADF (Bad file descriptor) [pid 6166] close(10) = -1 EBADF (Bad file descriptor) [pid 6166] close(11) = -1 EBADF (Bad file descriptor) [pid 6166] close(12) = -1 EBADF (Bad file descriptor) [pid 6166] close(13) = -1 EBADF (Bad file descriptor) [pid 6166] close(14) = -1 EBADF (Bad file descriptor) [pid 6166] close(15) = -1 EBADF (Bad file descriptor) [pid 6166] close(16) = -1 EBADF (Bad file descriptor) [pid 6166] close(17) = -1 EBADF (Bad file descriptor) [pid 6166] close(18) = -1 EBADF (Bad file descriptor) [pid 6166] close(19) = -1 EBADF (Bad file descriptor) [pid 6166] close(20) = -1 EBADF (Bad file descriptor) [pid 6166] close(21) = -1 EBADF (Bad file descriptor) [pid 6166] close(22) = -1 EBADF (Bad file descriptor) [pid 6166] close(23) = -1 EBADF (Bad file descriptor) [pid 6166] close(24) = -1 EBADF (Bad file descriptor) [pid 6166] close(25) = -1 EBADF (Bad file descriptor) [pid 6166] close(26) = -1 EBADF (Bad file descriptor) [pid 6166] close(27) = -1 EBADF (Bad file descriptor) [pid 6166] close(28) = -1 EBADF (Bad file descriptor) [pid 6166] close(29) = -1 EBADF (Bad file descriptor) [pid 6166] exit_group(0) = ? [pid 6166] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=115, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./113", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./113", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./113/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./113/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./113/binderfs") = 0 [pid 5637] umount2("./113/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./113/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./113/cgroup.net") = 0 [pid 5637] umount2("./113/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./113/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./113/cgroup.cpu") = 0 [pid 5637] umount2("./113/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./113/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./113/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./113") = 0 [pid 5637] mkdir("./114", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6170 attached , child_tidptr=0x55557f25d790) = 116 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 6170] set_robust_list(0x55557f25d7a0, 24 [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6170] <... set_robust_list resumed>) = 0 [pid 6170] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6170] chdir("./114") = 0 [pid 6170] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6170] setpgid(0, 0) = 0 [pid 6170] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6170] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6170] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6170] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6170] write(3, "1000", 4) = 4 [pid 6170] close(3) = 0 [pid 6170] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6170] write(1, "executing program\n", 18) = 18 executing program [pid 6170] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6170] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6170] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6170] close(3) = 0 [pid 6170] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6170] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6170] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6170] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6170] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6170] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6170] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6170] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6170] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6170] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6170] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6170] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6170] setns(201, 0) = 0 [pid 6170] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6170] setns(7, 0) = 0 [pid 6170] close(7) = 0 [pid 6170] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6170] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6170] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=116}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6170] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=116}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6170] close(7) = 0 [pid 6170] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6170] close(3) = 0 [pid 6170] close(4) = 0 [pid 6170] close(5) = 0 [pid 6170] close(6) = 0 [pid 6170] close(7) = -1 EBADF (Bad file descriptor) [pid 6170] close(8) = 0 [pid 6170] close(9) = -1 EBADF (Bad file descriptor) [pid 6170] close(10) = -1 EBADF (Bad file descriptor) [pid 6170] close(11) = -1 EBADF (Bad file descriptor) [pid 6170] close(12) = -1 EBADF (Bad file descriptor) [pid 6170] close(13) = -1 EBADF (Bad file descriptor) [pid 6170] close(14) = -1 EBADF (Bad file descriptor) [pid 6170] close(15) = -1 EBADF (Bad file descriptor) [pid 6170] close(16) = -1 EBADF (Bad file descriptor) [pid 6170] close(17) = -1 EBADF (Bad file descriptor) [pid 6170] close(18) = -1 EBADF (Bad file descriptor) [pid 6170] close(19) = -1 EBADF (Bad file descriptor) [pid 6170] close(20) = -1 EBADF (Bad file descriptor) [pid 6170] close(21) = -1 EBADF (Bad file descriptor) [pid 6170] close(22) = -1 EBADF (Bad file descriptor) [pid 6170] close(23) = -1 EBADF (Bad file descriptor) [pid 6170] close(24) = -1 EBADF (Bad file descriptor) [pid 6170] close(25) = -1 EBADF (Bad file descriptor) [pid 6170] close(26) = -1 EBADF (Bad file descriptor) [pid 6170] close(27) = -1 EBADF (Bad file descriptor) [pid 6170] close(28) = -1 EBADF (Bad file descriptor) [pid 6170] close(29) = -1 EBADF (Bad file descriptor) [pid 6170] exit_group(0) = ? [pid 6170] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=116, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./114", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./114", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [ 124.077505][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 5637] umount2("./114/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./114/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./114/binderfs") = 0 [pid 5637] umount2("./114/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./114/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./114/cgroup.net") = 0 [pid 5637] umount2("./114/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./114/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./114/cgroup.cpu") = 0 [pid 5637] umount2("./114/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./114/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./114/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./114") = 0 [pid 5637] mkdir("./115", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6174 attached , child_tidptr=0x55557f25d790) = 117 [pid 6174] set_robust_list(0x55557f25d7a0, 24 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 6174] <... set_robust_list resumed>) = 0 [pid 6174] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6174] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6174] chdir("./115") = 0 [pid 6174] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6174] setpgid(0, 0) = 0 [pid 6174] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6174] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6174] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6174] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6174] write(3, "1000", 4) = 4 [pid 6174] close(3) = 0 [pid 6174] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6174] write(1, "executing program\n", 18) = 18 executing program [pid 6174] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6174] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6174] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6174] close(3) = 0 [pid 6174] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6174] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6174] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6174] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6174] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6174] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6174] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6174] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6174] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6174] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6174] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6174] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6174] setns(201, 0) = 0 [pid 6174] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6174] setns(7, 0) = 0 [pid 6174] close(7) = 0 [pid 6174] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6174] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6174] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=117}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6174] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=117}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6174] close(7) = 0 [pid 6174] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6174] close(3) = 0 [pid 6174] close(4) = 0 [pid 6174] close(5) = 0 [ 124.261303][ T6174] __nla_validate_parse: 10 callbacks suppressed [ 124.261322][ T6174] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 6174] close(6) = 0 [pid 6174] close(7) = -1 EBADF (Bad file descriptor) [pid 6174] close(8) = 0 [pid 6174] close(9) = -1 EBADF (Bad file descriptor) [pid 6174] close(10) = -1 EBADF (Bad file descriptor) [pid 6174] close(11) = -1 EBADF (Bad file descriptor) [pid 6174] close(12) = -1 EBADF (Bad file descriptor) [pid 6174] close(13) = -1 EBADF (Bad file descriptor) [pid 6174] close(14) = -1 EBADF (Bad file descriptor) [pid 6174] close(15) = -1 EBADF (Bad file descriptor) [pid 6174] close(16) = -1 EBADF (Bad file descriptor) [pid 6174] close(17) = -1 EBADF (Bad file descriptor) [pid 6174] close(18) = -1 EBADF (Bad file descriptor) [pid 6174] close(19) = -1 EBADF (Bad file descriptor) [pid 6174] close(20) = -1 EBADF (Bad file descriptor) [pid 6174] close(21) = -1 EBADF (Bad file descriptor) [pid 6174] close(22) = -1 EBADF (Bad file descriptor) [pid 6174] close(23) = -1 EBADF (Bad file descriptor) [pid 6174] close(24) = -1 EBADF (Bad file descriptor) [pid 6174] close(25) = -1 EBADF (Bad file descriptor) [pid 6174] close(26) = -1 EBADF (Bad file descriptor) [pid 6174] close(27) = -1 EBADF (Bad file descriptor) [pid 6174] close(28) = -1 EBADF (Bad file descriptor) [pid 6174] close(29) = -1 EBADF (Bad file descriptor) [pid 6174] exit_group(0) = ? [pid 6174] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=117, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [ 124.340888][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 5637] umount2("./115", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./115", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./115/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./115/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./115/binderfs") = 0 [pid 5637] umount2("./115/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./115/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./115/cgroup.net") = 0 [pid 5637] umount2("./115/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./115/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./115/cgroup.cpu") = 0 [pid 5637] umount2("./115/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./115/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./115/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./115") = 0 [pid 5637] mkdir("./116", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6178 attached [pid 6178] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 6178] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6178] chdir("./116") = 0 [pid 6178] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6178] setpgid(0, 0) = 0 [pid 6178] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 5637] <... clone resumed>, child_tidptr=0x55557f25d790) = 118 [pid 6178] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 6178] <... symlink resumed>) = 0 [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6178] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6178] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6178] write(3, "1000", 4) = 4 [pid 6178] close(3) = 0 [pid 6178] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6178] write(1, "executing program\n", 18) = 18 [pid 6178] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6178] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) executing program [pid 6178] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6178] close(3) = 0 [pid 6178] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6178] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6178] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6178] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6178] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6178] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6178] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6178] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6178] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6178] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6178] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6178] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6178] setns(201, 0) = 0 [pid 6178] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6178] setns(7, 0) = 0 [pid 6178] close(7) = 0 [pid 6178] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6178] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6178] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=118}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6178] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=118}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6178] close(7) = 0 [pid 6178] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6178] close(3) = 0 [pid 6178] close(4) = 0 [pid 6178] close(5) = 0 [pid 6178] close(6) = 0 [pid 6178] close(7) = -1 EBADF (Bad file descriptor) [pid 6178] close(8) = 0 [pid 6178] close(9) = -1 EBADF (Bad file descriptor) [ 124.560948][ T6178] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 6178] close(10) = -1 EBADF (Bad file descriptor) [pid 6178] close(11) = -1 EBADF (Bad file descriptor) [pid 6178] close(12) = -1 EBADF (Bad file descriptor) [pid 6178] close(13) = -1 EBADF (Bad file descriptor) [pid 6178] close(14) = -1 EBADF (Bad file descriptor) [pid 6178] close(15) = -1 EBADF (Bad file descriptor) [pid 6178] close(16) = -1 EBADF (Bad file descriptor) [pid 6178] close(17) = -1 EBADF (Bad file descriptor) [pid 6178] close(18) = -1 EBADF (Bad file descriptor) [pid 6178] close(19) = -1 EBADF (Bad file descriptor) [pid 6178] close(20) = -1 EBADF (Bad file descriptor) [pid 6178] close(21) = -1 EBADF (Bad file descriptor) [pid 6178] close(22) = -1 EBADF (Bad file descriptor) [pid 6178] close(23) = -1 EBADF (Bad file descriptor) [pid 6178] close(24) = -1 EBADF (Bad file descriptor) [pid 6178] close(25) = -1 EBADF (Bad file descriptor) [pid 6178] close(26) = -1 EBADF (Bad file descriptor) [pid 6178] close(27) = -1 EBADF (Bad file descriptor) [pid 6178] close(28) = -1 EBADF (Bad file descriptor) [pid 6178] close(29) = -1 EBADF (Bad file descriptor) [pid 6178] exit_group(0) = ? [pid 6178] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=118, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./116", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./116", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./116/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./116/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./116/binderfs") = 0 [pid 5637] umount2("./116/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./116/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./116/cgroup.net") = 0 [pid 5637] umount2("./116/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./116/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./116/cgroup.cpu") = 0 [pid 5637] umount2("./116/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./116/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./116/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./116") = 0 [pid 5637] mkdir("./117", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6184 attached , child_tidptr=0x55557f25d790) = 119 [pid 6184] set_robust_list(0x55557f25d7a0, 24 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 6184] <... set_robust_list resumed>) = 0 [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6184] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6184] chdir("./117") = 0 [pid 6184] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6184] setpgid(0, 0) = 0 [pid 6184] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6184] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6184] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6184] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6184] write(3, "1000", 4) = 4 [pid 6184] close(3) = 0 [pid 6184] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6184] write(1, "executing program\n", 18) = 18 [pid 6184] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6184] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6184] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6184] close(3) = 0 [pid 6184] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [ 124.695599][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 6184] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6184] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6184] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6184] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6184] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6184] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6184] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6184] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6184] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6184] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6184] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6184] setns(201, 0) = 0 [pid 6184] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6184] setns(7, 0) = 0 [pid 6184] close(7) = 0 [pid 6184] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6184] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6184] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=119}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6184] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=119}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6184] close(7) = 0 [pid 6184] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6184] close(3) = 0 [pid 6184] close(4) = 0 [pid 6184] close(5) = 0 [pid 6184] close(6) = 0 [pid 6184] close(7) = -1 EBADF (Bad file descriptor) [pid 6184] close(8) = 0 [pid 6184] close(9) = -1 EBADF (Bad file descriptor) [pid 6184] close(10) = -1 EBADF (Bad file descriptor) [pid 6184] close(11) = -1 EBADF (Bad file descriptor) [pid 6184] close(12) = -1 EBADF (Bad file descriptor) [pid 6184] close(13) = -1 EBADF (Bad file descriptor) [pid 6184] close(14) = -1 EBADF (Bad file descriptor) [pid 6184] close(15) = -1 EBADF (Bad file descriptor) [pid 6184] close(16) = -1 EBADF (Bad file descriptor) [pid 6184] close(17) = -1 EBADF (Bad file descriptor) [pid 6184] close(18) = -1 EBADF (Bad file descriptor) [pid 6184] close(19) = -1 EBADF (Bad file descriptor) [pid 6184] close(20) = -1 EBADF (Bad file descriptor) [pid 6184] close(21) = -1 EBADF (Bad file descriptor) [pid 6184] close(22) = -1 EBADF (Bad file descriptor) [pid 6184] close(23) = -1 EBADF (Bad file descriptor) [pid 6184] close(24) = -1 EBADF (Bad file descriptor) [pid 6184] close(25) = -1 EBADF (Bad file descriptor) [pid 6184] close(26) = -1 EBADF (Bad file descriptor) [pid 6184] close(27) = -1 EBADF (Bad file descriptor) [pid 6184] close(28) = -1 EBADF (Bad file descriptor) [pid 6184] close(29) = -1 EBADF (Bad file descriptor) [ 124.824053][ T6184] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 6184] exit_group(0) = ? [pid 6184] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=119, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5637] umount2("./117", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./117", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./117/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./117/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./117/binderfs") = 0 [pid 5637] umount2("./117/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./117/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 124.896278][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 124.898847][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 5637] unlink("./117/cgroup.net") = 0 [pid 5637] umount2("./117/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./117/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./117/cgroup.cpu") = 0 [pid 5637] umount2("./117/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./117/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./117/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./117") = 0 [pid 5637] mkdir("./118", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6188 attached , child_tidptr=0x55557f25d790) = 120 [pid 6188] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 6188] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6188] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6188] chdir("./118") = 0 [pid 6188] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6188] setpgid(0, 0) = 0 [pid 6188] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6188] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6188] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6188] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6188] write(3, "1000", 4) = 4 [pid 6188] close(3) = 0 [pid 6188] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6188] write(1, "executing program\n", 18) = 18 executing program [pid 6188] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6188] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6188] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6188] close(3) = 0 [pid 6188] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6188] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6188] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6188] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6188] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6188] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6188] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6188] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6188] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6188] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6188] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6188] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6188] setns(201, 0) = 0 [pid 6188] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6188] setns(7, 0) = 0 [pid 6188] close(7) = 0 [pid 6188] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6188] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6188] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=120}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6188] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=120}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6188] close(7) = 0 [pid 6188] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6188] close(3) = 0 [pid 6188] close(4) = 0 [pid 6188] close(5) = 0 [pid 6188] close(6) = 0 [pid 6188] close(7) = -1 EBADF (Bad file descriptor) [pid 6188] close(8) = 0 [pid 6188] close(9) = -1 EBADF (Bad file descriptor) [pid 6188] close(10) = -1 EBADF (Bad file descriptor) [pid 6188] close(11) = -1 EBADF (Bad file descriptor) [pid 6188] close(12) = -1 EBADF (Bad file descriptor) [pid 6188] close(13) = -1 EBADF (Bad file descriptor) [pid 6188] close(14) = -1 EBADF (Bad file descriptor) [pid 6188] close(15) = -1 EBADF (Bad file descriptor) [pid 6188] close(16) = -1 EBADF (Bad file descriptor) [pid 6188] close(17) = -1 EBADF (Bad file descriptor) [pid 6188] close(18) = -1 EBADF (Bad file descriptor) [pid 6188] close(19) = -1 EBADF (Bad file descriptor) [pid 6188] close(20) = -1 EBADF (Bad file descriptor) [pid 6188] close(21) = -1 EBADF (Bad file descriptor) [ 125.060116][ T6188] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 6188] close(22) = -1 EBADF (Bad file descriptor) [pid 6188] close(23) = -1 EBADF (Bad file descriptor) [pid 6188] close(24) = -1 EBADF (Bad file descriptor) [pid 6188] close(25) = -1 EBADF (Bad file descriptor) [pid 6188] close(26) = -1 EBADF (Bad file descriptor) [pid 6188] close(27) = -1 EBADF (Bad file descriptor) [pid 6188] close(28) = -1 EBADF (Bad file descriptor) [pid 6188] close(29) = -1 EBADF (Bad file descriptor) [pid 6188] exit_group(0) = ? [pid 6188] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=120, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./118", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./118", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./118/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./118/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./118/binderfs") = 0 [pid 5637] umount2("./118/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./118/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./118/cgroup.net") = 0 [pid 5637] umount2("./118/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./118/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./118/cgroup.cpu") = 0 [pid 5637] umount2("./118/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 125.143391][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 5637] newfstatat(AT_FDCWD, "./118/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./118/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./118") = 0 [pid 5637] mkdir("./119", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6192 attached [pid 6192] set_robust_list(0x55557f25d7a0, 24 [pid 5637] <... clone resumed>, child_tidptr=0x55557f25d790) = 121 [pid 6192] <... set_robust_list resumed>) = 0 [pid 6192] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 6192] chdir("./119" [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6192] <... chdir resumed>) = 0 [pid 6192] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6192] setpgid(0, 0) = 0 [pid 6192] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6192] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6192] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6192] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6192] write(3, "1000", 4) = 4 [pid 6192] close(3) = 0 [pid 6192] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6192] write(1, "executing program\n", 18) = 18 executing program [pid 6192] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6192] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6192] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6192] close(3) = 0 [pid 6192] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6192] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6192] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6192] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6192] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6192] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6192] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6192] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6192] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6192] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6192] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6192] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6192] setns(201, 0) = 0 [pid 6192] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6192] setns(7, 0) = 0 [pid 6192] close(7) = 0 [pid 6192] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6192] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6192] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=121}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6192] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=121}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6192] close(7) = 0 [pid 6192] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6192] close(3) = 0 [pid 6192] close(4) = 0 [pid 6192] close(5) = 0 [pid 6192] close(6) = 0 [pid 6192] close(7) = -1 EBADF (Bad file descriptor) [pid 6192] close(8) = 0 [pid 6192] close(9) = -1 EBADF (Bad file descriptor) [pid 6192] close(10) = -1 EBADF (Bad file descriptor) [pid 6192] close(11) = -1 EBADF (Bad file descriptor) [pid 6192] close(12) = -1 EBADF (Bad file descriptor) [pid 6192] close(13) = -1 EBADF (Bad file descriptor) [pid 6192] close(14) = -1 EBADF (Bad file descriptor) [ 125.352084][ T6192] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 6192] close(15) = -1 EBADF (Bad file descriptor) [pid 6192] close(16) = -1 EBADF (Bad file descriptor) [pid 6192] close(17) = -1 EBADF (Bad file descriptor) [pid 6192] close(18) = -1 EBADF (Bad file descriptor) [pid 6192] close(19) = -1 EBADF (Bad file descriptor) [pid 6192] close(20) = -1 EBADF (Bad file descriptor) [pid 6192] close(21) = -1 EBADF (Bad file descriptor) [pid 6192] close(22) = -1 EBADF (Bad file descriptor) [pid 6192] close(23) = -1 EBADF (Bad file descriptor) [pid 6192] close(24) = -1 EBADF (Bad file descriptor) [pid 6192] close(25) = -1 EBADF (Bad file descriptor) [pid 6192] close(26) = -1 EBADF (Bad file descriptor) [pid 6192] close(27) = -1 EBADF (Bad file descriptor) [pid 6192] close(28) = -1 EBADF (Bad file descriptor) [pid 6192] close(29) = -1 EBADF (Bad file descriptor) [pid 6192] exit_group(0) = ? [pid 6192] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=121, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./119", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./119", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./119/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./119/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./119/binderfs") = 0 [pid 5637] umount2("./119/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./119/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./119/cgroup.net") = 0 [pid 5637] umount2("./119/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./119/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./119/cgroup.cpu") = 0 [pid 5637] umount2("./119/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./119/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./119/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./119") = 0 [pid 5637] mkdir("./120", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6198 attached , child_tidptr=0x55557f25d790) = 122 [pid 6198] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 6198] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 6198] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [ 125.479715][ T5630] udevd[5630]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 6198] chdir("./120") = 0 [pid 6198] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6198] setpgid(0, 0) = 0 [pid 6198] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6198] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6198] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6198] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6198] write(3, "1000", 4) = 4 [pid 6198] close(3) = 0 [pid 6198] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6198] write(1, "executing program\n", 18) = 18 executing program [pid 6198] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6198] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6198] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6198] close(3) = 0 [pid 6198] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6198] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6198] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6198] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6198] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6198] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6198] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6198] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6198] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6198] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6198] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6198] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6198] setns(201, 0) = 0 [pid 6198] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6198] setns(7, 0) = 0 [pid 6198] close(7) = 0 [pid 6198] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6198] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6198] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=122}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6198] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=122}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6198] close(7) = 0 [pid 6198] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6198] close(3) = 0 [pid 6198] close(4) = 0 [pid 6198] close(5) = 0 [pid 6198] close(6) = 0 [pid 6198] close(7) = -1 EBADF (Bad file descriptor) [pid 6198] close(8) = 0 [pid 6198] close(9) = -1 EBADF (Bad file descriptor) [pid 6198] close(10) = -1 EBADF (Bad file descriptor) [pid 6198] close(11) = -1 EBADF (Bad file descriptor) [pid 6198] close(12) = -1 EBADF (Bad file descriptor) [pid 6198] close(13) = -1 EBADF (Bad file descriptor) [pid 6198] close(14) = -1 EBADF (Bad file descriptor) [pid 6198] close(15) = -1 EBADF (Bad file descriptor) [pid 6198] close(16) = -1 EBADF (Bad file descriptor) [pid 6198] close(17) = -1 EBADF (Bad file descriptor) [pid 6198] close(18) = -1 EBADF (Bad file descriptor) [pid 6198] close(19) = -1 EBADF (Bad file descriptor) [pid 6198] close(20) = -1 EBADF (Bad file descriptor) [pid 6198] close(21) = -1 EBADF (Bad file descriptor) [pid 6198] close(22) = -1 EBADF (Bad file descriptor) [pid 6198] close(23) = -1 EBADF (Bad file descriptor) [pid 6198] close(24) = -1 EBADF (Bad file descriptor) [pid 6198] close(25) = -1 EBADF (Bad file descriptor) [pid 6198] close(26) = -1 EBADF (Bad file descriptor) [pid 6198] close(27) = -1 EBADF (Bad file descriptor) [pid 6198] close(28) = -1 EBADF (Bad file descriptor) [pid 6198] close(29) = -1 EBADF (Bad file descriptor) [pid 6198] exit_group(0) = ? [pid 6198] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=122, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [ 125.671390][ T6198] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./120", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./120", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./120/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./120/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./120/binderfs") = 0 [pid 5637] umount2("./120/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./120/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./120/cgroup.net") = 0 [pid 5637] umount2("./120/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./120/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 125.744231][ T5630] udevd[5630]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 125.748006][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 5637] unlink("./120/cgroup.cpu") = 0 [pid 5637] umount2("./120/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./120/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./120/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./120") = 0 [pid 5637] mkdir("./121", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6202 attached , child_tidptr=0x55557f25d790) = 123 [pid 6202] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 6202] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6202] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6202] chdir("./121") = 0 [pid 6202] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6202] setpgid(0, 0) = 0 [pid 6202] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6202] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6202] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6202] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6202] write(3, "1000", 4) = 4 [pid 6202] close(3) = 0 [pid 6202] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6202] write(1, "executing program\n", 18) = 18 [pid 6202] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6202] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) executing program [pid 6202] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6202] close(3) = 0 [pid 6202] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6202] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6202] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6202] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6202] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6202] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6202] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6202] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6202] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6202] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6202] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6202] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6202] setns(201, 0) = 0 [pid 6202] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6202] setns(7, 0) = 0 [pid 6202] close(7) = 0 [pid 6202] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6202] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6202] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=123}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6202] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=123}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6202] close(7) = 0 [pid 6202] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6202] close(3) = 0 [pid 6202] close(4) = 0 [pid 6202] close(5) = 0 [pid 6202] close(6) = 0 [pid 6202] close(7) = -1 EBADF (Bad file descriptor) [pid 6202] close(8) = 0 [pid 6202] close(9) = -1 EBADF (Bad file descriptor) [pid 6202] close(10) = -1 EBADF (Bad file descriptor) [pid 6202] close(11) = -1 EBADF (Bad file descriptor) [pid 6202] close(12) = -1 EBADF (Bad file descriptor) [pid 6202] close(13) = -1 EBADF (Bad file descriptor) [pid 6202] close(14) = -1 EBADF (Bad file descriptor) [pid 6202] close(15) = -1 EBADF (Bad file descriptor) [pid 6202] close(16) = -1 EBADF (Bad file descriptor) [pid 6202] close(17) = -1 EBADF (Bad file descriptor) [pid 6202] close(18) = -1 EBADF (Bad file descriptor) [pid 6202] close(19) = -1 EBADF (Bad file descriptor) [pid 6202] close(20) = -1 EBADF (Bad file descriptor) [pid 6202] close(21) = -1 EBADF (Bad file descriptor) [pid 6202] close(22) = -1 EBADF (Bad file descriptor) [pid 6202] close(23) = -1 EBADF (Bad file descriptor) [pid 6202] close(24) = -1 EBADF (Bad file descriptor) [pid 6202] close(25) = -1 EBADF (Bad file descriptor) [pid 6202] close(26) = -1 EBADF (Bad file descriptor) [pid 6202] close(27) = -1 EBADF (Bad file descriptor) [pid 6202] close(28) = -1 EBADF (Bad file descriptor) [pid 6202] close(29) = -1 EBADF (Bad file descriptor) [pid 6202] exit_group(0) = ? [pid 6202] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=123, si_uid=0, si_status=0, si_utime=0, si_stime=4 /* 0.04 s */} --- [ 125.882198][ T6202] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./121", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./121", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./121/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./121/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./121/binderfs") = 0 [pid 5637] umount2("./121/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./121/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./121/cgroup.net") = 0 [pid 5637] umount2("./121/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./121/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./121/cgroup.cpu") = 0 [pid 5637] umount2("./121/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./121/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./121/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./121") = 0 [pid 5637] mkdir("./122", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6206 attached , child_tidptr=0x55557f25d790) = 124 [pid 6206] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 6206] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6206] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6206] chdir("./122") = 0 [pid 6206] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6206] setpgid(0, 0) = 0 [pid 6206] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6206] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6206] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6206] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 125.965065][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 6206] write(3, "1000", 4) = 4 [pid 6206] close(3) = 0 [pid 6206] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6206] write(1, "executing program\n", 18) = 18 executing program [pid 6206] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6206] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6206] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6206] close(3) = 0 [pid 6206] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6206] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6206] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6206] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6206] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6206] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6206] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6206] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6206] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6206] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6206] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6206] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6206] setns(201, 0) = 0 [pid 6206] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6206] setns(7, 0) = 0 [pid 6206] close(7) = 0 [pid 6206] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6206] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6206] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=124}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6206] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=124}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6206] close(7) = 0 [pid 6206] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6206] close(3) = 0 [pid 6206] close(4) = 0 [pid 6206] close(5) = 0 [pid 6206] close(6) = 0 [pid 6206] close(7) = -1 EBADF (Bad file descriptor) [pid 6206] close(8) = 0 [pid 6206] close(9) = -1 EBADF (Bad file descriptor) [pid 6206] close(10) = -1 EBADF (Bad file descriptor) [ 126.065952][ T6206] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 6206] close(11) = -1 EBADF (Bad file descriptor) [pid 6206] close(12) = -1 EBADF (Bad file descriptor) [pid 6206] close(13) = -1 EBADF (Bad file descriptor) [pid 6206] close(14) = -1 EBADF (Bad file descriptor) [pid 6206] close(15) = -1 EBADF (Bad file descriptor) [pid 6206] close(16) = -1 EBADF (Bad file descriptor) [pid 6206] close(17) = -1 EBADF (Bad file descriptor) [pid 6206] close(18) = -1 EBADF (Bad file descriptor) [pid 6206] close(19) = -1 EBADF (Bad file descriptor) [pid 6206] close(20) = -1 EBADF (Bad file descriptor) [pid 6206] close(21) = -1 EBADF (Bad file descriptor) [pid 6206] close(22) = -1 EBADF (Bad file descriptor) [pid 6206] close(23) = -1 EBADF (Bad file descriptor) [pid 6206] close(24) = -1 EBADF (Bad file descriptor) [pid 6206] close(25) = -1 EBADF (Bad file descriptor) [pid 6206] close(26) = -1 EBADF (Bad file descriptor) [pid 6206] close(27) = -1 EBADF (Bad file descriptor) [pid 6206] close(28) = -1 EBADF (Bad file descriptor) [pid 6206] close(29) = -1 EBADF (Bad file descriptor) [pid 6206] exit_group(0) = ? [pid 6206] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=124, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./122", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./122", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./122/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./122/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./122/binderfs") = 0 [pid 5637] umount2("./122/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./122/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./122/cgroup.net") = 0 [pid 5637] umount2("./122/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./122/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./122/cgroup.cpu") = 0 [pid 5637] umount2("./122/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./122/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./122/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./122") = 0 [pid 5637] mkdir("./123", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6212 attached , child_tidptr=0x55557f25d790) = 125 [pid 6212] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 6212] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6212] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6212] chdir("./123") = 0 [pid 6212] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6212] setpgid(0, 0) = 0 [pid 6212] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6212] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6212] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6212] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6212] write(3, "1000", 4) = 4 [pid 6212] close(3) = 0 [pid 6212] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6212] write(1, "executing program\n", 18) = 18 [pid 6212] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6212] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6212] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6212] close(3) = 0 [pid 6212] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6212] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6212] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6212] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6212] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6212] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6212] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6212] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6212] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6212] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6212] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6212] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6212] setns(201, 0) = 0 [pid 6212] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6212] setns(7, 0) = 0 [pid 6212] close(7) = 0 [pid 6212] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6212] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6212] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=125}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6212] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=125}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6212] close(7) = 0 [pid 6212] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6212] close(3) = 0 [pid 6212] close(4) = 0 [pid 6212] close(5) = 0 [pid 6212] close(6) = 0 [pid 6212] close(7) = -1 EBADF (Bad file descriptor) [pid 6212] close(8) = 0 [pid 6212] close(9) = -1 EBADF (Bad file descriptor) [pid 6212] close(10) = -1 EBADF (Bad file descriptor) [pid 6212] close(11) = -1 EBADF (Bad file descriptor) [pid 6212] close(12) = -1 EBADF (Bad file descriptor) [pid 6212] close(13) = -1 EBADF (Bad file descriptor) [pid 6212] close(14) = -1 EBADF (Bad file descriptor) [pid 6212] close(15) = -1 EBADF (Bad file descriptor) [pid 6212] close(16) = -1 EBADF (Bad file descriptor) [pid 6212] close(17) = -1 EBADF (Bad file descriptor) [pid 6212] close(18) = -1 EBADF (Bad file descriptor) [pid 6212] close(19) = -1 EBADF (Bad file descriptor) [pid 6212] close(20) = -1 EBADF (Bad file descriptor) [pid 6212] close(21) = -1 EBADF (Bad file descriptor) [ 126.264109][ T6212] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 6212] close(22) = -1 EBADF (Bad file descriptor) [pid 6212] close(23) = -1 EBADF (Bad file descriptor) [pid 6212] close(24) = -1 EBADF (Bad file descriptor) [pid 6212] close(25) = -1 EBADF (Bad file descriptor) [pid 6212] close(26) = -1 EBADF (Bad file descriptor) [pid 6212] close(27) = -1 EBADF (Bad file descriptor) [pid 6212] close(28) = -1 EBADF (Bad file descriptor) [pid 6212] close(29) = -1 EBADF (Bad file descriptor) [pid 6212] exit_group(0) = ? [pid 6212] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=125, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./123", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./123", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./123/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./123/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./123/binderfs") = 0 [pid 5637] umount2("./123/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./123/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./123/cgroup.net") = 0 [pid 5637] umount2("./123/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./123/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./123/cgroup.cpu") = 0 [pid 5637] umount2("./123/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./123/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./123/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./123") = 0 [pid 5637] mkdir("./124", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6216 attached , child_tidptr=0x55557f25d790) = 126 [pid 6216] set_robust_list(0x55557f25d7a0, 24 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 6216] <... set_robust_list resumed>) = 0 [pid 6216] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6216] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6216] chdir("./124") = 0 [pid 6216] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6216] setpgid(0, 0) = 0 [pid 6216] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6216] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6216] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6216] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6216] write(3, "1000", 4) = 4 [pid 6216] close(3) = 0 [pid 6216] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6216] write(1, "executing program\n", 18) = 18 [pid 6216] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6216] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6216] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6216] close(3) = 0 [pid 6216] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6216] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6216] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6216] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6216] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6216] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6216] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6216] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6216] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6216] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6216] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6216] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6216] setns(201, 0) = 0 [pid 6216] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6216] setns(7, 0) = 0 [pid 6216] close(7) = 0 [pid 6216] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6216] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6216] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=126}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6216] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=126}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6216] close(7) = 0 [pid 6216] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6216] close(3) = 0 [pid 6216] close(4) = 0 [pid 6216] close(5) = 0 [pid 6216] close(6) = 0 [pid 6216] close(7) = -1 EBADF (Bad file descriptor) [pid 6216] close(8) = 0 [ 126.434271][ T6216] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 6216] close(9) = -1 EBADF (Bad file descriptor) [pid 6216] close(10) = -1 EBADF (Bad file descriptor) [pid 6216] close(11) = -1 EBADF (Bad file descriptor) [pid 6216] close(12) = -1 EBADF (Bad file descriptor) [pid 6216] close(13) = -1 EBADF (Bad file descriptor) [pid 6216] close(14) = -1 EBADF (Bad file descriptor) [pid 6216] close(15) = -1 EBADF (Bad file descriptor) [pid 6216] close(16) = -1 EBADF (Bad file descriptor) [pid 6216] close(17) = -1 EBADF (Bad file descriptor) [pid 6216] close(18) = -1 EBADF (Bad file descriptor) [pid 6216] close(19) = -1 EBADF (Bad file descriptor) [pid 6216] close(20) = -1 EBADF (Bad file descriptor) [pid 6216] close(21) = -1 EBADF (Bad file descriptor) [pid 6216] close(22) = -1 EBADF (Bad file descriptor) [pid 6216] close(23) = -1 EBADF (Bad file descriptor) [pid 6216] close(24) = -1 EBADF (Bad file descriptor) [pid 6216] close(25) = -1 EBADF (Bad file descriptor) [pid 6216] close(26) = -1 EBADF (Bad file descriptor) [pid 6216] close(27) = -1 EBADF (Bad file descriptor) [pid 6216] close(28) = -1 EBADF (Bad file descriptor) [pid 6216] close(29) = -1 EBADF (Bad file descriptor) [pid 6216] exit_group(0) = ? [pid 6216] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=126, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./124", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./124", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./124/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./124/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./124/binderfs") = 0 [pid 5637] umount2("./124/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./124/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./124/cgroup.net") = 0 [pid 5637] umount2("./124/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./124/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./124/cgroup.cpu") = 0 [pid 5637] umount2("./124/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./124/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./124/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./124") = 0 [pid 5637] mkdir("./125", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6220 attached , child_tidptr=0x55557f25d790) = 127 [pid 6220] set_robust_list(0x55557f25d7a0, 24 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 6220] <... set_robust_list resumed>) = 0 [pid 6220] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6220] chdir("./125") = 0 [pid 6220] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6220] setpgid(0, 0) = 0 [pid 6220] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6220] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6220] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6220] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6220] write(3, "1000", 4) = 4 [pid 6220] close(3) = 0 [pid 6220] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6220] write(1, "executing program\n", 18) = 18 [pid 6220] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6220] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6220] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6220] close(3) = 0 [pid 6220] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6220] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6220] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6220] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6220] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6220] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6220] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6220] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6220] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6220] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6220] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6220] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6220] setns(201, 0) = 0 [pid 6220] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6220] setns(7, 0) = 0 [pid 6220] close(7) = 0 [pid 6220] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6220] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6220] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=127}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6220] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=127}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6220] close(7) = 0 [pid 6220] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6220] close(3) = 0 [pid 6220] close(4) = 0 [pid 6220] close(5) = 0 [pid 6220] close(6) = 0 [pid 6220] close(7) = -1 EBADF (Bad file descriptor) [pid 6220] close(8) = 0 [pid 6220] close(9) = -1 EBADF (Bad file descriptor) [pid 6220] close(10) = -1 EBADF (Bad file descriptor) [pid 6220] close(11) = -1 EBADF (Bad file descriptor) [pid 6220] close(12) = -1 EBADF (Bad file descriptor) [pid 6220] close(13) = -1 EBADF (Bad file descriptor) [pid 6220] close(14) = -1 EBADF (Bad file descriptor) [pid 6220] close(15) = -1 EBADF (Bad file descriptor) [pid 6220] close(16) = -1 EBADF (Bad file descriptor) [pid 6220] close(17) = -1 EBADF (Bad file descriptor) [pid 6220] close(18) = -1 EBADF (Bad file descriptor) [pid 6220] close(19) = -1 EBADF (Bad file descriptor) [pid 6220] close(20) = -1 EBADF (Bad file descriptor) [pid 6220] close(21) = -1 EBADF (Bad file descriptor) [pid 6220] close(22) = -1 EBADF (Bad file descriptor) [pid 6220] close(23) = -1 EBADF (Bad file descriptor) [pid 6220] close(24) = -1 EBADF (Bad file descriptor) [pid 6220] close(25) = -1 EBADF (Bad file descriptor) [pid 6220] close(26) = -1 EBADF (Bad file descriptor) [pid 6220] close(27) = -1 EBADF (Bad file descriptor) [pid 6220] close(28) = -1 EBADF (Bad file descriptor) [pid 6220] close(29) = -1 EBADF (Bad file descriptor) [pid 6220] exit_group(0) = ? [pid 6220] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=127, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./125", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./125", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./125/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./125/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./125/binderfs") = 0 [pid 5637] umount2("./125/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./125/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./125/cgroup.net") = 0 [pid 5637] umount2("./125/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./125/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./125/cgroup.cpu") = 0 [pid 5637] umount2("./125/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./125/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./125/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./125") = 0 [pid 5637] mkdir("./126", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6224 attached , child_tidptr=0x55557f25d790) = 128 [pid 6224] set_robust_list(0x55557f25d7a0, 24 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 6224] <... set_robust_list resumed>) = 0 [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6224] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6224] chdir("./126") = 0 [pid 6224] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6224] setpgid(0, 0) = 0 [pid 6224] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6224] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6224] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6224] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6224] write(3, "1000", 4) = 4 [pid 6224] close(3) = 0 [pid 6224] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6224] write(1, "executing program\n", 18) = 18 [pid 6224] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) executing program [pid 6224] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6224] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6224] close(3) = 0 [pid 6224] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6224] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6224] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6224] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6224] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6224] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6224] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6224] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6224] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6224] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6224] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6224] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6224] setns(201, 0) = 0 [pid 6224] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6224] setns(7, 0) = 0 [pid 6224] close(7) = 0 [pid 6224] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6224] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6224] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=128}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6224] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=128}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6224] close(7) = 0 [pid 6224] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6224] close(3) = 0 [pid 6224] close(4) = 0 [pid 6224] close(5) = 0 [pid 6224] close(6) = 0 [pid 6224] close(7) = -1 EBADF (Bad file descriptor) [pid 6224] close(8) = 0 [pid 6224] close(9) = -1 EBADF (Bad file descriptor) [pid 6224] close(10) = -1 EBADF (Bad file descriptor) [pid 6224] close(11) = -1 EBADF (Bad file descriptor) [pid 6224] close(12) = -1 EBADF (Bad file descriptor) [pid 6224] close(13) = -1 EBADF (Bad file descriptor) [pid 6224] close(14) = -1 EBADF (Bad file descriptor) [pid 6224] close(15) = -1 EBADF (Bad file descriptor) [pid 6224] close(16) = -1 EBADF (Bad file descriptor) [pid 6224] close(17) = -1 EBADF (Bad file descriptor) [pid 6224] close(18) = -1 EBADF (Bad file descriptor) [pid 6224] close(19) = -1 EBADF (Bad file descriptor) [pid 6224] close(20) = -1 EBADF (Bad file descriptor) [pid 6224] close(21) = -1 EBADF (Bad file descriptor) [pid 6224] close(22) = -1 EBADF (Bad file descriptor) [pid 6224] close(23) = -1 EBADF (Bad file descriptor) [pid 6224] close(24) = -1 EBADF (Bad file descriptor) [pid 6224] close(25) = -1 EBADF (Bad file descriptor) [pid 6224] close(26) = -1 EBADF (Bad file descriptor) [pid 6224] close(27) = -1 EBADF (Bad file descriptor) [pid 6224] close(28) = -1 EBADF (Bad file descriptor) [pid 6224] close(29) = -1 EBADF (Bad file descriptor) [pid 6224] exit_group(0) = ? [pid 6224] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=128, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./126", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./126", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./126/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./126/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./126/binderfs") = 0 [pid 5637] umount2("./126/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./126/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./126/cgroup.net") = 0 [pid 5637] umount2("./126/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./126/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./126/cgroup.cpu") = 0 [pid 5637] umount2("./126/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./126/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./126/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./126") = 0 [pid 5637] mkdir("./127", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6228 attached , child_tidptr=0x55557f25d790) = 129 [pid 6228] set_robust_list(0x55557f25d7a0, 24 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 6228] <... set_robust_list resumed>) = 0 [pid 6228] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6228] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6228] chdir("./127") = 0 [pid 6228] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6228] setpgid(0, 0) = 0 [pid 6228] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6228] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6228] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6228] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6228] write(3, "1000", 4) = 4 [pid 6228] close(3) = 0 [pid 6228] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6228] write(1, "executing program\n", 18) = 18 [pid 6228] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6228] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6228] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6228] close(3) = 0 [pid 6228] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6228] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6228] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6228] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6228] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6228] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6228] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6228] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6228] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6228] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6228] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6228] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6228] setns(201, 0) = 0 [pid 6228] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6228] setns(7, 0) = 0 [pid 6228] close(7) = 0 [pid 6228] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6228] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6228] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=129}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6228] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=129}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6228] close(7) = 0 [pid 6228] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6228] close(3) = 0 [pid 6228] close(4) = 0 [pid 6228] close(5) = 0 [pid 6228] close(6) = 0 [pid 6228] close(7) = -1 EBADF (Bad file descriptor) [pid 6228] close(8) = 0 [pid 6228] close(9) = -1 EBADF (Bad file descriptor) [pid 6228] close(10) = -1 EBADF (Bad file descriptor) [pid 6228] close(11) = -1 EBADF (Bad file descriptor) [pid 6228] close(12) = -1 EBADF (Bad file descriptor) [pid 6228] close(13) = -1 EBADF (Bad file descriptor) [pid 6228] close(14) = -1 EBADF (Bad file descriptor) [pid 6228] close(15) = -1 EBADF (Bad file descriptor) [pid 6228] close(16) = -1 EBADF (Bad file descriptor) [pid 6228] close(17) = -1 EBADF (Bad file descriptor) [pid 6228] close(18) = -1 EBADF (Bad file descriptor) [pid 6228] close(19) = -1 EBADF (Bad file descriptor) [pid 6228] close(20) = -1 EBADF (Bad file descriptor) [pid 6228] close(21) = -1 EBADF (Bad file descriptor) [pid 6228] close(22) = -1 EBADF (Bad file descriptor) [pid 6228] close(23) = -1 EBADF (Bad file descriptor) [pid 6228] close(24) = -1 EBADF (Bad file descriptor) [pid 6228] close(25) = -1 EBADF (Bad file descriptor) [pid 6228] close(26) = -1 EBADF (Bad file descriptor) [pid 6228] close(27) = -1 EBADF (Bad file descriptor) [pid 6228] close(28) = -1 EBADF (Bad file descriptor) [pid 6228] close(29) = -1 EBADF (Bad file descriptor) [pid 6228] exit_group(0) = ? [pid 6228] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=129, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5637] umount2("./127", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./127", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./127/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./127/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./127/binderfs") = 0 [pid 5637] umount2("./127/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./127/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./127/cgroup.net") = 0 [pid 5637] umount2("./127/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./127/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./127/cgroup.cpu") = 0 [pid 5637] umount2("./127/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./127/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./127/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./127") = 0 [pid 5637] mkdir("./128", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6232 attached , child_tidptr=0x55557f25d790) = 130 [pid 6232] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 6232] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6232] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6232] chdir("./128") = 0 [pid 6232] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6232] setpgid(0, 0) = 0 [pid 6232] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6232] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6232] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6232] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6232] write(3, "1000", 4) = 4 [pid 6232] close(3) = 0 [pid 6232] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6232] write(1, "executing program\n", 18) = 18 executing program [pid 6232] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6232] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6232] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6232] close(3) = 0 [pid 6232] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6232] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6232] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6232] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6232] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6232] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6232] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6232] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6232] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6232] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6232] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6232] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6232] setns(201, 0) = 0 [pid 6232] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6232] setns(7, 0) = 0 [pid 6232] close(7) = 0 [pid 6232] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6232] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6232] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=130}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6232] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=130}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6232] close(7) = 0 [pid 6232] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6232] close(3) = 0 [pid 6232] close(4) = 0 [pid 6232] close(5) = 0 [pid 6232] close(6) = 0 [pid 6232] close(7) = -1 EBADF (Bad file descriptor) [pid 6232] close(8) = 0 [pid 6232] close(9) = -1 EBADF (Bad file descriptor) [pid 6232] close(10) = -1 EBADF (Bad file descriptor) [pid 6232] close(11) = -1 EBADF (Bad file descriptor) [pid 6232] close(12) = -1 EBADF (Bad file descriptor) [pid 6232] close(13) = -1 EBADF (Bad file descriptor) [pid 6232] close(14) = -1 EBADF (Bad file descriptor) [pid 6232] close(15) = -1 EBADF (Bad file descriptor) [pid 6232] close(16) = -1 EBADF (Bad file descriptor) [pid 6232] close(17) = -1 EBADF (Bad file descriptor) [pid 6232] close(18) = -1 EBADF (Bad file descriptor) [pid 6232] close(19) = -1 EBADF (Bad file descriptor) [pid 6232] close(20) = -1 EBADF (Bad file descriptor) [pid 6232] close(21) = -1 EBADF (Bad file descriptor) [pid 6232] close(22) = -1 EBADF (Bad file descriptor) [pid 6232] close(23) = -1 EBADF (Bad file descriptor) [pid 6232] close(24) = -1 EBADF (Bad file descriptor) [pid 6232] close(25) = -1 EBADF (Bad file descriptor) [pid 6232] close(26) = -1 EBADF (Bad file descriptor) [pid 6232] close(27) = -1 EBADF (Bad file descriptor) [pid 6232] close(28) = -1 EBADF (Bad file descriptor) [pid 6232] close(29) = -1 EBADF (Bad file descriptor) [pid 6232] exit_group(0) = ? [pid 6232] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=130, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./128", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./128", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./128/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./128/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./128/binderfs") = 0 [pid 5637] umount2("./128/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./128/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./128/cgroup.net") = 0 [pid 5637] umount2("./128/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./128/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./128/cgroup.cpu") = 0 [pid 5637] umount2("./128/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./128/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./128/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./128") = 0 [pid 5637] mkdir("./129", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6236 attached [pid 6236] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 6236] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] <... clone resumed>, child_tidptr=0x55557f25d790) = 131 [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6236] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6236] chdir("./129") = 0 [pid 6236] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6236] setpgid(0, 0) = 0 [pid 6236] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6236] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6236] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6236] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6236] write(3, "1000", 4) = 4 [pid 6236] close(3) = 0 [pid 6236] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6236] write(1, "executing program\n", 18) = 18 [pid 6236] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6236] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6236] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6236] close(3) = 0 [pid 6236] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6236] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6236] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6236] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6236] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6236] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6236] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6236] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6236] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6236] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6236] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6236] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6236] setns(201, 0) = 0 [pid 6236] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6236] setns(7, 0) = 0 [pid 6236] close(7) = 0 [pid 6236] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6236] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6236] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=131}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6236] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=131}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6236] close(7) = 0 [pid 6236] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6236] close(3) = 0 [pid 6236] close(4) = 0 [pid 6236] close(5) = 0 [pid 6236] close(6) = 0 [pid 6236] close(7) = -1 EBADF (Bad file descriptor) [pid 6236] close(8) = 0 [pid 6236] close(9) = -1 EBADF (Bad file descriptor) [pid 6236] close(10) = -1 EBADF (Bad file descriptor) [pid 6236] close(11) = -1 EBADF (Bad file descriptor) [pid 6236] close(12) = -1 EBADF (Bad file descriptor) [pid 6236] close(13) = -1 EBADF (Bad file descriptor) [pid 6236] close(14) = -1 EBADF (Bad file descriptor) [pid 6236] close(15) = -1 EBADF (Bad file descriptor) [pid 6236] close(16) = -1 EBADF (Bad file descriptor) [pid 6236] close(17) = -1 EBADF (Bad file descriptor) [pid 6236] close(18) = -1 EBADF (Bad file descriptor) [pid 6236] close(19) = -1 EBADF (Bad file descriptor) [pid 6236] close(20) = -1 EBADF (Bad file descriptor) [pid 6236] close(21) = -1 EBADF (Bad file descriptor) [pid 6236] close(22) = -1 EBADF (Bad file descriptor) [pid 6236] close(23) = -1 EBADF (Bad file descriptor) [pid 6236] close(24) = -1 EBADF (Bad file descriptor) [pid 6236] close(25) = -1 EBADF (Bad file descriptor) [pid 6236] close(26) = -1 EBADF (Bad file descriptor) [pid 6236] close(27) = -1 EBADF (Bad file descriptor) [pid 6236] close(28) = -1 EBADF (Bad file descriptor) [pid 6236] close(29) = -1 EBADF (Bad file descriptor) [pid 6236] exit_group(0) = ? [pid 6236] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=131, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5637] umount2("./129", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./129", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./129/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./129/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./129/binderfs") = 0 [pid 5637] umount2("./129/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./129/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./129/cgroup.net") = 0 [pid 5637] umount2("./129/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./129/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./129/cgroup.cpu") = 0 [pid 5637] umount2("./129/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./129/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./129/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./129") = 0 [pid 5637] mkdir("./130", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6242 attached , child_tidptr=0x55557f25d790) = 132 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 6242] set_robust_list(0x55557f25d7a0, 24 [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6242] <... set_robust_list resumed>) = 0 [pid 6242] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6242] chdir("./130") = 0 [pid 6242] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6242] setpgid(0, 0) = 0 [pid 6242] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6242] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6242] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6242] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6242] write(3, "1000", 4) = 4 [pid 6242] close(3) = 0 [pid 6242] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6242] write(1, "executing program\n", 18) = 18 executing program [pid 6242] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6242] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6242] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6242] close(3) = 0 [pid 6242] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6242] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6242] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6242] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6242] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6242] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6242] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6242] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6242] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6242] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6242] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6242] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6242] setns(201, 0) = 0 [pid 6242] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6242] setns(7, 0) = 0 [pid 6242] close(7) = 0 [pid 6242] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6242] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6242] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=132}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6242] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=132}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6242] close(7) = 0 [pid 6242] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6242] close(3) = 0 [pid 6242] close(4) = 0 [pid 6242] close(5) = 0 [pid 6242] close(6) = 0 [pid 6242] close(7) = -1 EBADF (Bad file descriptor) [pid 6242] close(8) = 0 [pid 6242] close(9) = -1 EBADF (Bad file descriptor) [pid 6242] close(10) = -1 EBADF (Bad file descriptor) [pid 6242] close(11) = -1 EBADF (Bad file descriptor) [pid 6242] close(12) = -1 EBADF (Bad file descriptor) [pid 6242] close(13) = -1 EBADF (Bad file descriptor) [pid 6242] close(14) = -1 EBADF (Bad file descriptor) [pid 6242] close(15) = -1 EBADF (Bad file descriptor) [pid 6242] close(16) = -1 EBADF (Bad file descriptor) [pid 6242] close(17) = -1 EBADF (Bad file descriptor) [pid 6242] close(18) = -1 EBADF (Bad file descriptor) [pid 6242] close(19) = -1 EBADF (Bad file descriptor) [pid 6242] close(20) = -1 EBADF (Bad file descriptor) [pid 6242] close(21) = -1 EBADF (Bad file descriptor) [pid 6242] close(22) = -1 EBADF (Bad file descriptor) [pid 6242] close(23) = -1 EBADF (Bad file descriptor) [pid 6242] close(24) = -1 EBADF (Bad file descriptor) [pid 6242] close(25) = -1 EBADF (Bad file descriptor) [pid 6242] close(26) = -1 EBADF (Bad file descriptor) [pid 6242] close(27) = -1 EBADF (Bad file descriptor) [pid 6242] close(28) = -1 EBADF (Bad file descriptor) [pid 6242] close(29) = -1 EBADF (Bad file descriptor) [pid 6242] exit_group(0) = ? [pid 6242] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=132, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./130", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./130", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./130/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./130/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./130/binderfs") = 0 [pid 5637] umount2("./130/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./130/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./130/cgroup.net") = 0 [pid 5637] umount2("./130/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./130/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./130/cgroup.cpu") = 0 [pid 5637] umount2("./130/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./130/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./130/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./130") = 0 [pid 5637] mkdir("./131", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6248 attached , child_tidptr=0x55557f25d790) = 133 [pid 6248] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 6248] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6248] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6248] chdir("./131") = 0 [pid 6248] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6248] setpgid(0, 0) = 0 [pid 6248] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6248] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6248] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6248] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6248] write(3, "1000", 4) = 4 [pid 6248] close(3) = 0 [pid 6248] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6248] write(1, "executing program\n", 18) = 18 [pid 6248] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) executing program [pid 6248] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6248] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6248] close(3) = 0 [pid 6248] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6248] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6248] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6248] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6248] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6248] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6248] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6248] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6248] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6248] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6248] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6248] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6248] setns(201, 0) = 0 [pid 6248] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6248] setns(7, 0) = 0 [pid 6248] close(7) = 0 [pid 6248] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6248] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6248] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=133}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6248] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=133}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6248] close(7) = 0 [pid 6248] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6248] close(3) = 0 [pid 6248] close(4) = 0 [pid 6248] close(5) = 0 [pid 6248] close(6) = 0 [pid 6248] close(7) = -1 EBADF (Bad file descriptor) [pid 6248] close(8) = 0 [pid 6248] close(9) = -1 EBADF (Bad file descriptor) [pid 6248] close(10) = -1 EBADF (Bad file descriptor) [pid 6248] close(11) = -1 EBADF (Bad file descriptor) [pid 6248] close(12) = -1 EBADF (Bad file descriptor) [pid 6248] close(13) = -1 EBADF (Bad file descriptor) [pid 6248] close(14) = -1 EBADF (Bad file descriptor) [pid 6248] close(15) = -1 EBADF (Bad file descriptor) [pid 6248] close(16) = -1 EBADF (Bad file descriptor) [pid 6248] close(17) = -1 EBADF (Bad file descriptor) [pid 6248] close(18) = -1 EBADF (Bad file descriptor) [pid 6248] close(19) = -1 EBADF (Bad file descriptor) [pid 6248] close(20) = -1 EBADF (Bad file descriptor) [pid 6248] close(21) = -1 EBADF (Bad file descriptor) [pid 6248] close(22) = -1 EBADF (Bad file descriptor) [pid 6248] close(23) = -1 EBADF (Bad file descriptor) [pid 6248] close(24) = -1 EBADF (Bad file descriptor) [pid 6248] close(25) = -1 EBADF (Bad file descriptor) [pid 6248] close(26) = -1 EBADF (Bad file descriptor) [pid 6248] close(27) = -1 EBADF (Bad file descriptor) [pid 6248] close(28) = -1 EBADF (Bad file descriptor) [pid 6248] close(29) = -1 EBADF (Bad file descriptor) [pid 6248] exit_group(0) = ? [pid 6248] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=133, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./131", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./131", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./131/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./131/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./131/binderfs") = 0 [pid 5637] umount2("./131/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./131/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./131/cgroup.net") = 0 [pid 5637] umount2("./131/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./131/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./131/cgroup.cpu") = 0 [pid 5637] umount2("./131/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./131/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./131/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./131") = 0 [pid 5637] mkdir("./132", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6252 attached , child_tidptr=0x55557f25d790) = 134 [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6252] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 6252] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6252] chdir("./132") = 0 [pid 6252] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6252] setpgid(0, 0) = 0 [pid 6252] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6252] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6252] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6252] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6252] write(3, "1000", 4) = 4 [pid 6252] close(3) = 0 [pid 6252] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6252] write(1, "executing program\n", 18) = 18 executing program [pid 6252] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6252] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6252] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6252] close(3) = 0 [pid 6252] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6252] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6252] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6252] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6252] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6252] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6252] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6252] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6252] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6252] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6252] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6252] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6252] setns(201, 0) = 0 [pid 6252] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6252] setns(7, 0) = 0 [pid 6252] close(7) = 0 [pid 6252] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6252] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6252] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=134}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6252] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=134}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6252] close(7) = 0 [pid 6252] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6252] close(3) = 0 [pid 6252] close(4) = 0 [pid 6252] close(5) = 0 [pid 6252] close(6) = 0 [pid 6252] close(7) = -1 EBADF (Bad file descriptor) [pid 6252] close(8) = 0 [pid 6252] close(9) = -1 EBADF (Bad file descriptor) [pid 6252] close(10) = -1 EBADF (Bad file descriptor) [pid 6252] close(11) = -1 EBADF (Bad file descriptor) [pid 6252] close(12) = -1 EBADF (Bad file descriptor) [pid 6252] close(13) = -1 EBADF (Bad file descriptor) [pid 6252] close(14) = -1 EBADF (Bad file descriptor) [pid 6252] close(15) = -1 EBADF (Bad file descriptor) [pid 6252] close(16) = -1 EBADF (Bad file descriptor) [pid 6252] close(17) = -1 EBADF (Bad file descriptor) [pid 6252] close(18) = -1 EBADF (Bad file descriptor) [pid 6252] close(19) = -1 EBADF (Bad file descriptor) [pid 6252] close(20) = -1 EBADF (Bad file descriptor) [pid 6252] close(21) = -1 EBADF (Bad file descriptor) [pid 6252] close(22) = -1 EBADF (Bad file descriptor) [pid 6252] close(23) = -1 EBADF (Bad file descriptor) [pid 6252] close(24) = -1 EBADF (Bad file descriptor) [pid 6252] close(25) = -1 EBADF (Bad file descriptor) [pid 6252] close(26) = -1 EBADF (Bad file descriptor) [pid 6252] close(27) = -1 EBADF (Bad file descriptor) [pid 6252] close(28) = -1 EBADF (Bad file descriptor) [pid 6252] close(29) = -1 EBADF (Bad file descriptor) [pid 6252] exit_group(0) = ? [pid 6252] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=134, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./132", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./132", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./132/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./132/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./132/binderfs") = 0 [pid 5637] umount2("./132/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./132/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./132/cgroup.net") = 0 [pid 5637] umount2("./132/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./132/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./132/cgroup.cpu") = 0 [pid 5637] umount2("./132/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./132/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./132/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./132") = 0 [pid 5637] mkdir("./133", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6258 attached , child_tidptr=0x55557f25d790) = 135 [pid 6258] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 6258] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6258] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6258] chdir("./133") = 0 [pid 6258] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6258] setpgid(0, 0) = 0 [pid 6258] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6258] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6258] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6258] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6258] write(3, "1000", 4) = 4 [pid 6258] close(3) = 0 [pid 6258] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6258] write(1, "executing program\n", 18) = 18 [pid 6258] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) executing program [pid 6258] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6258] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6258] close(3) = 0 [pid 6258] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6258] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6258] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6258] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6258] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6258] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6258] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6258] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6258] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6258] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6258] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6258] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6258] setns(201, 0) = 0 [pid 6258] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6258] setns(7, 0) = 0 [pid 6258] close(7) = 0 [pid 6258] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6258] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6258] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=135}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6258] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=135}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6258] close(7) = 0 [pid 6258] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6258] close(3) = 0 [pid 6258] close(4) = 0 [pid 6258] close(5) = 0 [pid 6258] close(6) = 0 [pid 6258] close(7) = -1 EBADF (Bad file descriptor) [pid 6258] close(8) = 0 [pid 6258] close(9) = -1 EBADF (Bad file descriptor) [pid 6258] close(10) = -1 EBADF (Bad file descriptor) [pid 6258] close(11) = -1 EBADF (Bad file descriptor) [pid 6258] close(12) = -1 EBADF (Bad file descriptor) [pid 6258] close(13) = -1 EBADF (Bad file descriptor) [pid 6258] close(14) = -1 EBADF (Bad file descriptor) [pid 6258] close(15) = -1 EBADF (Bad file descriptor) [pid 6258] close(16) = -1 EBADF (Bad file descriptor) [pid 6258] close(17) = -1 EBADF (Bad file descriptor) [pid 6258] close(18) = -1 EBADF (Bad file descriptor) [pid 6258] close(19) = -1 EBADF (Bad file descriptor) [pid 6258] close(20) = -1 EBADF (Bad file descriptor) [pid 6258] close(21) = -1 EBADF (Bad file descriptor) [pid 6258] close(22) = -1 EBADF (Bad file descriptor) [pid 6258] close(23) = -1 EBADF (Bad file descriptor) [pid 6258] close(24) = -1 EBADF (Bad file descriptor) [pid 6258] close(25) = -1 EBADF (Bad file descriptor) [pid 6258] close(26) = -1 EBADF (Bad file descriptor) [pid 6258] close(27) = -1 EBADF (Bad file descriptor) [pid 6258] close(28) = -1 EBADF (Bad file descriptor) [pid 6258] close(29) = -1 EBADF (Bad file descriptor) [pid 6258] exit_group(0) = ? [pid 6258] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=135, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./133", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./133", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./133/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./133/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./133/binderfs") = 0 [pid 5637] umount2("./133/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./133/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./133/cgroup.net") = 0 [pid 5637] umount2("./133/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./133/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./133/cgroup.cpu") = 0 [pid 5637] umount2("./133/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./133/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./133/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./133") = 0 [pid 5637] mkdir("./134", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557f25d790) = 136 [pid 5637] rt_sigprocmask(SIG_SETMASK, []ci-upstream-net-kasan-gce/strace-static-x86_64: Process 6262 attached , NULL, 8) = 0 [pid 6262] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 6262] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6262] chdir("./134") = 0 [pid 6262] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6262] setpgid(0, 0) = 0 [pid 6262] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6262] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6262] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6262] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6262] write(3, "1000", 4) = 4 [pid 6262] close(3) = 0 [pid 6262] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6262] write(1, "executing program\n", 18) = 18 [pid 6262] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6262] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6262] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6262] close(3) = 0 [pid 6262] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6262] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6262] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6262] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6262] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6262] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6262] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6262] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6262] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6262] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6262] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6262] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6262] setns(201, 0) = 0 [pid 6262] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6262] setns(7, 0) = 0 [pid 6262] close(7) = 0 [pid 6262] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6262] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6262] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=136}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6262] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=136}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6262] close(7) = 0 [pid 6262] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6262] close(3) = 0 [pid 6262] close(4) = 0 [pid 6262] close(5) = 0 [pid 6262] close(6) = 0 [pid 6262] close(7) = -1 EBADF (Bad file descriptor) [pid 6262] close(8) = 0 [pid 6262] close(9) = -1 EBADF (Bad file descriptor) [pid 6262] close(10) = -1 EBADF (Bad file descriptor) [pid 6262] close(11) = -1 EBADF (Bad file descriptor) [pid 6262] close(12) = -1 EBADF (Bad file descriptor) [pid 6262] close(13) = -1 EBADF (Bad file descriptor) [pid 6262] close(14) = -1 EBADF (Bad file descriptor) [pid 6262] close(15) = -1 EBADF (Bad file descriptor) [pid 6262] close(16) = -1 EBADF (Bad file descriptor) [pid 6262] close(17) = -1 EBADF (Bad file descriptor) [pid 6262] close(18) = -1 EBADF (Bad file descriptor) [pid 6262] close(19) = -1 EBADF (Bad file descriptor) [pid 6262] close(20) = -1 EBADF (Bad file descriptor) [pid 6262] close(21) = -1 EBADF (Bad file descriptor) [pid 6262] close(22) = -1 EBADF (Bad file descriptor) [pid 6262] close(23) = -1 EBADF (Bad file descriptor) [pid 6262] close(24) = -1 EBADF (Bad file descriptor) [pid 6262] close(25) = -1 EBADF (Bad file descriptor) [pid 6262] close(26) = -1 EBADF (Bad file descriptor) [pid 6262] close(27) = -1 EBADF (Bad file descriptor) [pid 6262] close(28) = -1 EBADF (Bad file descriptor) [pid 6262] close(29) = -1 EBADF (Bad file descriptor) [pid 6262] exit_group(0) = ? [pid 6262] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=136, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./134", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./134", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./134/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./134/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./134/binderfs") = 0 [pid 5637] umount2("./134/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./134/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./134/cgroup.net") = 0 [pid 5637] umount2("./134/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./134/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./134/cgroup.cpu") = 0 [pid 5637] umount2("./134/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./134/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./134/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./134") = 0 [pid 5637] mkdir("./135", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6268 attached , child_tidptr=0x55557f25d790) = 137 [pid 6268] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 6268] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6268] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6268] chdir("./135") = 0 [pid 6268] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6268] setpgid(0, 0) = 0 [pid 6268] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6268] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6268] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6268] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6268] write(3, "1000", 4) = 4 [pid 6268] close(3) = 0 [pid 6268] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6268] write(1, "executing program\n", 18) = 18 [pid 6268] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6268] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6268] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6268] close(3) = 0 [pid 6268] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6268] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6268] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6268] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6268] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6268] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6268] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6268] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6268] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6268] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6268] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6268] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6268] setns(201, 0) = 0 [pid 6268] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6268] setns(7, 0) = 0 [pid 6268] close(7) = 0 [pid 6268] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6268] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6268] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=137}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6268] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=137}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6268] close(7) = 0 [pid 6268] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6268] close(3) = 0 [pid 6268] close(4) = 0 [pid 6268] close(5) = 0 [pid 6268] close(6) = 0 [pid 6268] close(7) = -1 EBADF (Bad file descriptor) [pid 6268] close(8) = 0 [pid 6268] close(9) = -1 EBADF (Bad file descriptor) [pid 6268] close(10) = -1 EBADF (Bad file descriptor) [pid 6268] close(11) = -1 EBADF (Bad file descriptor) [pid 6268] close(12) = -1 EBADF (Bad file descriptor) [pid 6268] close(13) = -1 EBADF (Bad file descriptor) [pid 6268] close(14) = -1 EBADF (Bad file descriptor) [pid 6268] close(15) = -1 EBADF (Bad file descriptor) [pid 6268] close(16) = -1 EBADF (Bad file descriptor) [pid 6268] close(17) = -1 EBADF (Bad file descriptor) [pid 6268] close(18) = -1 EBADF (Bad file descriptor) [pid 6268] close(19) = -1 EBADF (Bad file descriptor) [pid 6268] close(20) = -1 EBADF (Bad file descriptor) [pid 6268] close(21) = -1 EBADF (Bad file descriptor) [pid 6268] close(22) = -1 EBADF (Bad file descriptor) [pid 6268] close(23) = -1 EBADF (Bad file descriptor) [pid 6268] close(24) = -1 EBADF (Bad file descriptor) [pid 6268] close(25) = -1 EBADF (Bad file descriptor) [pid 6268] close(26) = -1 EBADF (Bad file descriptor) [pid 6268] close(27) = -1 EBADF (Bad file descriptor) [pid 6268] close(28) = -1 EBADF (Bad file descriptor) [pid 6268] close(29) = -1 EBADF (Bad file descriptor) [pid 6268] exit_group(0) = ? [pid 6268] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=137, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./135", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./135", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./135/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./135/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./135/binderfs") = 0 [pid 5637] umount2("./135/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./135/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./135/cgroup.net") = 0 [pid 5637] umount2("./135/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./135/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./135/cgroup.cpu") = 0 [pid 5637] umount2("./135/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./135/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./135/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./135") = 0 [pid 5637] mkdir("./136", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6272 attached , child_tidptr=0x55557f25d790) = 138 [pid 6272] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6272] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6272] chdir("./136") = 0 [pid 6272] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6272] setpgid(0, 0) = 0 [pid 6272] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6272] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6272] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6272] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6272] write(3, "1000", 4) = 4 [pid 6272] close(3) = 0 [pid 6272] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6272] write(1, "executing program\n", 18) = 18 executing program [pid 6272] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6272] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6272] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6272] close(3) = 0 [pid 6272] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6272] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [ 129.150846][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 129.154723][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 6272] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6272] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6272] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6272] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6272] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6272] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6272] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6272] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6272] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6272] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6272] setns(201, 0) = 0 [pid 6272] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6272] setns(7, 0) = 0 [pid 6272] close(7) = 0 [pid 6272] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6272] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6272] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=138}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6272] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=138}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6272] close(7) = 0 [pid 6272] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6272] close(3) = 0 [pid 6272] close(4) = 0 [pid 6272] close(5) = 0 [pid 6272] close(6) = 0 [pid 6272] close(7) = -1 EBADF (Bad file descriptor) [pid 6272] close(8) = 0 [pid 6272] close(9) = -1 EBADF (Bad file descriptor) [pid 6272] close(10) = -1 EBADF (Bad file descriptor) [pid 6272] close(11) = -1 EBADF (Bad file descriptor) [pid 6272] close(12) = -1 EBADF (Bad file descriptor) [pid 6272] close(13) = -1 EBADF (Bad file descriptor) [ 129.333306][ T6272] __nla_validate_parse: 11 callbacks suppressed [ 129.333326][ T6272] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 6272] close(14) = -1 EBADF (Bad file descriptor) [pid 6272] close(15) = -1 EBADF (Bad file descriptor) [pid 6272] close(16) = -1 EBADF (Bad file descriptor) [pid 6272] close(17) = -1 EBADF (Bad file descriptor) [pid 6272] close(18) = -1 EBADF (Bad file descriptor) [pid 6272] close(19) = -1 EBADF (Bad file descriptor) [pid 6272] close(20) = -1 EBADF (Bad file descriptor) [pid 6272] close(21) = -1 EBADF (Bad file descriptor) [pid 6272] close(22) = -1 EBADF (Bad file descriptor) [pid 6272] close(23) = -1 EBADF (Bad file descriptor) [pid 6272] close(24) = -1 EBADF (Bad file descriptor) [pid 6272] close(25) = -1 EBADF (Bad file descriptor) [pid 6272] close(26) = -1 EBADF (Bad file descriptor) [pid 6272] close(27) = -1 EBADF (Bad file descriptor) [pid 6272] close(28) = -1 EBADF (Bad file descriptor) [pid 6272] close(29) = -1 EBADF (Bad file descriptor) [pid 6272] exit_group(0) = ? [pid 6272] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=138, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5637] umount2("./136", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./136", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./136/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./136/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./136/binderfs") = 0 [pid 5637] umount2("./136/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./136/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./136/cgroup.net") = 0 [pid 5637] umount2("./136/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./136/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./136/cgroup.cpu") = 0 [pid 5637] umount2("./136/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./136/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./136/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./136") = 0 [pid 5637] mkdir("./137", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6278 attached , child_tidptr=0x55557f25d790) = 139 [pid 6278] set_robust_list(0x55557f25d7a0, 24 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 6278] <... set_robust_list resumed>) = 0 [pid 6278] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [ 129.463365][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 6278] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6278] chdir("./137") = 0 [pid 6278] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6278] setpgid(0, 0) = 0 [pid 6278] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6278] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6278] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6278] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6278] write(3, "1000", 4) = 4 [pid 6278] close(3) = 0 [pid 6278] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6278] write(1, "executing program\n", 18) = 18 [pid 6278] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) executing program [pid 6278] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6278] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6278] close(3) = 0 [pid 6278] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6278] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6278] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6278] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6278] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6278] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6278] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6278] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6278] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6278] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6278] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6278] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6278] setns(201, 0) = 0 [pid 6278] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6278] setns(7, 0) = 0 [pid 6278] close(7) = 0 [pid 6278] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6278] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6278] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=139}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6278] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=139}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6278] close(7) = 0 [pid 6278] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6278] close(3) = 0 [pid 6278] close(4) = 0 [pid 6278] close(5) = 0 [pid 6278] close(6) = 0 [pid 6278] close(7) = -1 EBADF (Bad file descriptor) [pid 6278] close(8) = 0 [pid 6278] close(9) = -1 EBADF (Bad file descriptor) [pid 6278] close(10) = -1 EBADF (Bad file descriptor) [pid 6278] close(11) = -1 EBADF (Bad file descriptor) [pid 6278] close(12) = -1 EBADF (Bad file descriptor) [pid 6278] close(13) = -1 EBADF (Bad file descriptor) [pid 6278] close(14) = -1 EBADF (Bad file descriptor) [pid 6278] close(15) = -1 EBADF (Bad file descriptor) [pid 6278] close(16) = -1 EBADF (Bad file descriptor) [pid 6278] close(17) = -1 EBADF (Bad file descriptor) [pid 6278] close(18) = -1 EBADF (Bad file descriptor) [pid 6278] close(19) = -1 EBADF (Bad file descriptor) [pid 6278] close(20) = -1 EBADF (Bad file descriptor) [pid 6278] close(21) = -1 EBADF (Bad file descriptor) [pid 6278] close(22) = -1 EBADF (Bad file descriptor) [ 129.669512][ T6278] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 6278] close(23) = -1 EBADF (Bad file descriptor) [pid 6278] close(24) = -1 EBADF (Bad file descriptor) [pid 6278] close(25) = -1 EBADF (Bad file descriptor) [pid 6278] close(26) = -1 EBADF (Bad file descriptor) [pid 6278] close(27) = -1 EBADF (Bad file descriptor) [pid 6278] close(28) = -1 EBADF (Bad file descriptor) [pid 6278] close(29) = -1 EBADF (Bad file descriptor) [pid 6278] exit_group(0) = ? [pid 6278] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=139, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./137", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./137", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./137/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./137/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./137/binderfs") = 0 [pid 5637] umount2("./137/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./137/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./137/cgroup.net") = 0 [pid 5637] umount2("./137/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./137/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./137/cgroup.cpu") = 0 [pid 5637] umount2("./137/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./137/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 129.749650][ T5630] udevd[5630]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 5637] unlink("./137/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./137") = 0 [pid 5637] mkdir("./138", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6282 attached , child_tidptr=0x55557f25d790) = 140 [pid 6282] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 6282] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6282] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6282] chdir("./138") = 0 [pid 6282] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6282] setpgid(0, 0) = 0 [pid 6282] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6282] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6282] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6282] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6282] write(3, "1000", 4) = 4 [pid 6282] close(3) = 0 [pid 6282] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6282] write(1, "executing program\n", 18) = 18 executing program [pid 6282] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6282] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6282] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6282] close(3) = 0 [pid 6282] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6282] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6282] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6282] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6282] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6282] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6282] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6282] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6282] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6282] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6282] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6282] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6282] setns(201, 0) = 0 [pid 6282] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6282] setns(7, 0) = 0 [pid 6282] close(7) = 0 [pid 6282] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6282] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6282] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=140}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6282] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=140}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6282] close(7) = 0 [pid 6282] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6282] close(3) = 0 [pid 6282] close(4) = 0 [pid 6282] close(5) = 0 [pid 6282] close(6) = 0 [pid 6282] close(7) = -1 EBADF (Bad file descriptor) [pid 6282] close(8) = 0 [pid 6282] close(9) = -1 EBADF (Bad file descriptor) [pid 6282] close(10) = -1 EBADF (Bad file descriptor) [pid 6282] close(11) = -1 EBADF (Bad file descriptor) [pid 6282] close(12) = -1 EBADF (Bad file descriptor) [pid 6282] close(13) = -1 EBADF (Bad file descriptor) [pid 6282] close(14) = -1 EBADF (Bad file descriptor) [pid 6282] close(15) = -1 EBADF (Bad file descriptor) [ 129.998731][ T6282] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 6282] close(16) = -1 EBADF (Bad file descriptor) [pid 6282] close(17) = -1 EBADF (Bad file descriptor) [pid 6282] close(18) = -1 EBADF (Bad file descriptor) [pid 6282] close(19) = -1 EBADF (Bad file descriptor) [pid 6282] close(20) = -1 EBADF (Bad file descriptor) [pid 6282] close(21) = -1 EBADF (Bad file descriptor) [pid 6282] close(22) = -1 EBADF (Bad file descriptor) [pid 6282] close(23) = -1 EBADF (Bad file descriptor) [pid 6282] close(24) = -1 EBADF (Bad file descriptor) [pid 6282] close(25) = -1 EBADF (Bad file descriptor) [pid 6282] close(26) = -1 EBADF (Bad file descriptor) [pid 6282] close(27) = -1 EBADF (Bad file descriptor) [pid 6282] close(28) = -1 EBADF (Bad file descriptor) [pid 6282] close(29) = -1 EBADF (Bad file descriptor) [pid 6282] exit_group(0) = ? [pid 6282] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=140, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./138", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./138", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./138/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./138/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./138/binderfs") = 0 [pid 5637] umount2("./138/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./138/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./138/cgroup.net") = 0 [pid 5637] umount2("./138/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./138/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./138/cgroup.cpu") = 0 [pid 5637] umount2("./138/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./138/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./138/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./138") = 0 [pid 5637] mkdir("./139", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 130.082736][ T5630] udevd[5630]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 130.096920][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55557f25d790) = 141 ci-upstream-net-kasan-gce/strace-static-x86_64: Process 6286 attached [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6286] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 6286] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6286] chdir("./139") = 0 [pid 6286] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6286] setpgid(0, 0) = 0 [pid 6286] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6286] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6286] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6286] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6286] write(3, "1000", 4) = 4 [pid 6286] close(3) = 0 [pid 6286] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6286] write(1, "executing program\n", 18) = 18 executing program [pid 6286] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6286] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6286] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6286] close(3) = 0 [pid 6286] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6286] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6286] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6286] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6286] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6286] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6286] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6286] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6286] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6286] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6286] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6286] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6286] setns(201, 0) = 0 [pid 6286] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6286] setns(7, 0) = 0 [pid 6286] close(7) = 0 [pid 6286] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6286] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6286] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=141}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6286] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=141}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6286] close(7) = 0 [pid 6286] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6286] close(3) = 0 [pid 6286] close(4) = 0 [pid 6286] close(5) = 0 [pid 6286] close(6) = 0 [pid 6286] close(7) = -1 EBADF (Bad file descriptor) [pid 6286] close(8) = 0 [pid 6286] close(9) = -1 EBADF (Bad file descriptor) [pid 6286] close(10) = -1 EBADF (Bad file descriptor) [pid 6286] close(11) = -1 EBADF (Bad file descriptor) [pid 6286] close(12) = -1 EBADF (Bad file descriptor) [pid 6286] close(13) = -1 EBADF (Bad file descriptor) [pid 6286] close(14) = -1 EBADF (Bad file descriptor) [pid 6286] close(15) = -1 EBADF (Bad file descriptor) [pid 6286] close(16) = -1 EBADF (Bad file descriptor) [pid 6286] close(17) = -1 EBADF (Bad file descriptor) [pid 6286] close(18) = -1 EBADF (Bad file descriptor) [pid 6286] close(19) = -1 EBADF (Bad file descriptor) [ 130.291502][ T6286] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 6286] close(20) = -1 EBADF (Bad file descriptor) [pid 6286] close(21) = -1 EBADF (Bad file descriptor) [pid 6286] close(22) = -1 EBADF (Bad file descriptor) [pid 6286] close(23) = -1 EBADF (Bad file descriptor) [pid 6286] close(24) = -1 EBADF (Bad file descriptor) [pid 6286] close(25) = -1 EBADF (Bad file descriptor) [pid 6286] close(26) = -1 EBADF (Bad file descriptor) [pid 6286] close(27) = -1 EBADF (Bad file descriptor) [pid 6286] close(28) = -1 EBADF (Bad file descriptor) [pid 6286] close(29) = -1 EBADF (Bad file descriptor) [pid 6286] exit_group(0) = ? [pid 6286] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=141, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./139", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./139", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./139/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./139/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./139/binderfs") = 0 [pid 5637] umount2("./139/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./139/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./139/cgroup.net") = 0 [pid 5637] umount2("./139/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./139/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./139/cgroup.cpu") = 0 [pid 5637] umount2("./139/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./139/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./139/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./139") = 0 [pid 5637] mkdir("./140", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6290 attached , child_tidptr=0x55557f25d790) = 142 [pid 6290] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 6290] rt_sigprocmask(SIG_SETMASK, [] [ 130.375182][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6290] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6290] chdir("./140") = 0 [pid 6290] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6290] setpgid(0, 0) = 0 [pid 6290] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6290] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6290] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6290] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6290] write(3, "1000", 4) = 4 [pid 6290] close(3) = 0 [pid 6290] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6290] write(1, "executing program\n", 18) = 18 executing program [pid 6290] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6290] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6290] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6290] close(3) = 0 [pid 6290] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6290] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6290] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6290] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6290] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6290] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6290] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6290] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6290] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6290] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6290] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6290] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6290] setns(201, 0) = 0 [pid 6290] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6290] setns(7, 0) = 0 [pid 6290] close(7) = 0 [pid 6290] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6290] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6290] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=142}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6290] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=142}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6290] close(7) = 0 [pid 6290] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6290] close(3) = 0 [pid 6290] close(4) = 0 [pid 6290] close(5) = 0 [pid 6290] close(6) = 0 [pid 6290] close(7) = -1 EBADF (Bad file descriptor) [pid 6290] close(8) = 0 [pid 6290] close(9) = -1 EBADF (Bad file descriptor) [pid 6290] close(10) = -1 EBADF (Bad file descriptor) [pid 6290] close(11) = -1 EBADF (Bad file descriptor) [pid 6290] close(12) = -1 EBADF (Bad file descriptor) [pid 6290] close(13) = -1 EBADF (Bad file descriptor) [pid 6290] close(14) = -1 EBADF (Bad file descriptor) [pid 6290] close(15) = -1 EBADF (Bad file descriptor) [ 130.558723][ T6290] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 6290] close(16) = -1 EBADF (Bad file descriptor) [pid 6290] close(17) = -1 EBADF (Bad file descriptor) [pid 6290] close(18) = -1 EBADF (Bad file descriptor) [pid 6290] close(19) = -1 EBADF (Bad file descriptor) [pid 6290] close(20) = -1 EBADF (Bad file descriptor) [pid 6290] close(21) = -1 EBADF (Bad file descriptor) [pid 6290] close(22) = -1 EBADF (Bad file descriptor) [pid 6290] close(23) = -1 EBADF (Bad file descriptor) [pid 6290] close(24) = -1 EBADF (Bad file descriptor) [pid 6290] close(25) = -1 EBADF (Bad file descriptor) [pid 6290] close(26) = -1 EBADF (Bad file descriptor) [pid 6290] close(27) = -1 EBADF (Bad file descriptor) [pid 6290] close(28) = -1 EBADF (Bad file descriptor) [pid 6290] close(29) = -1 EBADF (Bad file descriptor) [pid 6290] exit_group(0) = ? [pid 6290] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=142, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./140", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./140", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./140/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./140/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./140/binderfs") = 0 [pid 5637] umount2("./140/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./140/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./140/cgroup.net") = 0 [pid 5637] umount2("./140/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./140/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./140/cgroup.cpu") = 0 [pid 5637] umount2("./140/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./140/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./140/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./140") = 0 [pid 5637] mkdir("./141", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6296 attached , child_tidptr=0x55557f25d790) = 143 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 6296] set_robust_list(0x55557f25d7a0, 24 [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6296] <... set_robust_list resumed>) = 0 [pid 6296] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6296] chdir("./141") = 0 [ 130.701178][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 6296] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6296] setpgid(0, 0) = 0 [pid 6296] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6296] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6296] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6296] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6296] write(3, "1000", 4) = 4 [pid 6296] close(3) = 0 [pid 6296] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6296] write(1, "executing program\n", 18) = 18 [pid 6296] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) executing program [pid 6296] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6296] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6296] close(3) = 0 [pid 6296] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6296] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6296] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6296] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6296] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6296] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6296] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6296] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6296] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6296] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6296] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6296] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6296] setns(201, 0) = 0 [pid 6296] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6296] setns(7, 0) = 0 [pid 6296] close(7) = 0 [pid 6296] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6296] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6296] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=143}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6296] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=143}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6296] close(7) = 0 [pid 6296] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6296] close(3) = 0 [pid 6296] close(4) = 0 [pid 6296] close(5) = 0 [ 130.862077][ T6296] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 6296] close(6) = 0 [pid 6296] close(7) = -1 EBADF (Bad file descriptor) [pid 6296] close(8) = 0 [pid 6296] close(9) = -1 EBADF (Bad file descriptor) [pid 6296] close(10) = -1 EBADF (Bad file descriptor) [pid 6296] close(11) = -1 EBADF (Bad file descriptor) [pid 6296] close(12) = -1 EBADF (Bad file descriptor) [pid 6296] close(13) = -1 EBADF (Bad file descriptor) [pid 6296] close(14) = -1 EBADF (Bad file descriptor) [pid 6296] close(15) = -1 EBADF (Bad file descriptor) [pid 6296] close(16) = -1 EBADF (Bad file descriptor) [pid 6296] close(17) = -1 EBADF (Bad file descriptor) [pid 6296] close(18) = -1 EBADF (Bad file descriptor) [pid 6296] close(19) = -1 EBADF (Bad file descriptor) [pid 6296] close(20) = -1 EBADF (Bad file descriptor) [ 130.934298][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 6296] close(21) = -1 EBADF (Bad file descriptor) [pid 6296] close(22) = -1 EBADF (Bad file descriptor) [pid 6296] close(23) = -1 EBADF (Bad file descriptor) [pid 6296] close(24) = -1 EBADF (Bad file descriptor) [pid 6296] close(25) = -1 EBADF (Bad file descriptor) [pid 6296] close(26) = -1 EBADF (Bad file descriptor) [pid 6296] close(27) = -1 EBADF (Bad file descriptor) [pid 6296] close(28) = -1 EBADF (Bad file descriptor) [pid 6296] close(29) = -1 EBADF (Bad file descriptor) [pid 6296] exit_group(0) = ? [pid 6296] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=143, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./141", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./141", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./141/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./141/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./141/binderfs") = 0 [pid 5637] umount2("./141/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./141/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./141/cgroup.net") = 0 [pid 5637] umount2("./141/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./141/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./141/cgroup.cpu") = 0 [pid 5637] umount2("./141/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./141/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./141/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./141") = 0 [pid 5637] mkdir("./142", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6300 attached , child_tidptr=0x55557f25d790) = 144 [pid 6300] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 6300] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6300] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6300] chdir("./142") = 0 [pid 6300] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6300] setpgid(0, 0) = 0 [pid 6300] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6300] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6300] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6300] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6300] write(3, "1000", 4) = 4 [pid 6300] close(3) = 0 [pid 6300] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6300] write(1, "executing program\n", 18) = 18 executing program [pid 6300] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6300] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6300] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6300] close(3) = 0 [pid 6300] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6300] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6300] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6300] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6300] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6300] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6300] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6300] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6300] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6300] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6300] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6300] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6300] setns(201, 0) = 0 [pid 6300] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6300] setns(7, 0) = 0 [pid 6300] close(7) = 0 [pid 6300] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6300] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6300] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=144}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6300] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=144}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6300] close(7) = 0 [pid 6300] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6300] close(3) = 0 [pid 6300] close(4) = 0 [pid 6300] close(5) = 0 [pid 6300] close(6) = 0 [pid 6300] close(7) = -1 EBADF (Bad file descriptor) [pid 6300] close(8) = 0 [pid 6300] close(9) = -1 EBADF (Bad file descriptor) [pid 6300] close(10) = -1 EBADF (Bad file descriptor) [pid 6300] close(11) = -1 EBADF (Bad file descriptor) [pid 6300] close(12) = -1 EBADF (Bad file descriptor) [pid 6300] close(13) = -1 EBADF (Bad file descriptor) [pid 6300] close(14) = -1 EBADF (Bad file descriptor) [pid 6300] close(15) = -1 EBADF (Bad file descriptor) [pid 6300] close(16) = -1 EBADF (Bad file descriptor) [pid 6300] close(17) = -1 EBADF (Bad file descriptor) [pid 6300] close(18) = -1 EBADF (Bad file descriptor) [ 131.184648][ T6300] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 6300] close(19) = -1 EBADF (Bad file descriptor) [pid 6300] close(20) = -1 EBADF (Bad file descriptor) [pid 6300] close(21) = -1 EBADF (Bad file descriptor) [pid 6300] close(22) = -1 EBADF (Bad file descriptor) [pid 6300] close(23) = -1 EBADF (Bad file descriptor) [pid 6300] close(24) = -1 EBADF (Bad file descriptor) [pid 6300] close(25) = -1 EBADF (Bad file descriptor) [pid 6300] close(26) = -1 EBADF (Bad file descriptor) [pid 6300] close(27) = -1 EBADF (Bad file descriptor) [pid 6300] close(28) = -1 EBADF (Bad file descriptor) [pid 6300] close(29) = -1 EBADF (Bad file descriptor) [pid 6300] exit_group(0) = ? [pid 6300] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=144, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./142", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./142", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./142/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./142/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./142/binderfs") = 0 [pid 5637] umount2("./142/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./142/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./142/cgroup.net") = 0 [pid 5637] umount2("./142/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./142/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./142/cgroup.cpu") = 0 [pid 5637] umount2("./142/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./142/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./142/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./142") = 0 [pid 5637] mkdir("./143", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6304 attached , child_tidptr=0x55557f25d790) = 145 [ 131.257484][ T5641] udevd[5641]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [pid 6304] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 6304] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 6304] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6304] chdir("./143") = 0 [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6304] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6304] setpgid(0, 0) = 0 [pid 6304] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6304] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6304] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6304] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6304] write(3, "1000", 4) = 4 [pid 6304] close(3) = 0 [pid 6304] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6304] write(1, "executing program\n", 18) = 18 executing program [pid 6304] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6304] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6304] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6304] close(3) = 0 [pid 6304] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6304] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6304] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6304] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6304] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6304] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6304] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6304] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6304] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6304] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6304] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6304] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6304] setns(201, 0) = 0 [pid 6304] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6304] setns(7, 0) = 0 [pid 6304] close(7) = 0 [pid 6304] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6304] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6304] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=145}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6304] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=145}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6304] close(7) = 0 [pid 6304] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6304] close(3) = 0 [pid 6304] close(4) = 0 [pid 6304] close(5) = 0 [pid 6304] close(6) = 0 [pid 6304] close(7) = -1 EBADF (Bad file descriptor) [pid 6304] close(8) = 0 [pid 6304] close(9) = -1 EBADF (Bad file descriptor) [pid 6304] close(10) = -1 EBADF (Bad file descriptor) [pid 6304] close(11) = -1 EBADF (Bad file descriptor) [pid 6304] close(12) = -1 EBADF (Bad file descriptor) [pid 6304] close(13) = -1 EBADF (Bad file descriptor) [pid 6304] close(14) = -1 EBADF (Bad file descriptor) [pid 6304] close(15) = -1 EBADF (Bad file descriptor) [pid 6304] close(16) = -1 EBADF (Bad file descriptor) [pid 6304] close(17) = -1 EBADF (Bad file descriptor) [pid 6304] close(18) = -1 EBADF (Bad file descriptor) [pid 6304] close(19) = -1 EBADF (Bad file descriptor) [pid 6304] close(20) = -1 EBADF (Bad file descriptor) [pid 6304] close(21) = -1 EBADF (Bad file descriptor) [pid 6304] close(22) = -1 EBADF (Bad file descriptor) [pid 6304] close(23) = -1 EBADF (Bad file descriptor) [pid 6304] close(24) = -1 EBADF (Bad file descriptor) [pid 6304] close(25) = -1 EBADF (Bad file descriptor) [pid 6304] close(26) = -1 EBADF (Bad file descriptor) [pid 6304] close(27) = -1 EBADF (Bad file descriptor) [ 131.403462][ T6304] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 6304] close(28) = -1 EBADF (Bad file descriptor) [pid 6304] close(29) = -1 EBADF (Bad file descriptor) [pid 6304] exit_group(0) = ? [pid 6304] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=145, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./143", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./143", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./143/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./143/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./143/binderfs") = 0 [pid 5637] umount2("./143/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./143/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./143/cgroup.net") = 0 [pid 5637] umount2("./143/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./143/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./143/cgroup.cpu") = 0 [pid 5637] umount2("./143/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./143/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./143/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./143") = 0 [pid 5637] mkdir("./144", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6308 attached [pid 6308] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 6308] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6308] chdir("./144" [pid 5637] <... clone resumed>, child_tidptr=0x55557f25d790) = 146 [pid 6308] <... chdir resumed>) = 0 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 6308] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6308] <... prctl resumed>) = 0 [pid 6308] setpgid(0, 0) = 0 [pid 6308] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6308] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6308] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6308] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6308] write(3, "1000", 4) = 4 [pid 6308] close(3) = 0 [pid 6308] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6308] write(1, "executing program\n", 18) = 18 [pid 6308] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6308] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6308] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6308] close(3) = 0 [pid 6308] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6308] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6308] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6308] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6308] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6308] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6308] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6308] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6308] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6308] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6308] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6308] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6308] setns(201, 0) = 0 [pid 6308] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6308] setns(7, 0) = 0 [pid 6308] close(7) = 0 [pid 6308] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6308] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6308] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=146}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6308] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=146}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6308] close(7) = 0 [pid 6308] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6308] close(3) = 0 [pid 6308] close(4) = 0 [pid 6308] close(5) = 0 [pid 6308] close(6) = 0 [pid 6308] close(7) = -1 EBADF (Bad file descriptor) [pid 6308] close(8) = 0 [pid 6308] close(9) = -1 EBADF (Bad file descriptor) [pid 6308] close(10) = -1 EBADF (Bad file descriptor) [pid 6308] close(11) = -1 EBADF (Bad file descriptor) [pid 6308] close(12) = -1 EBADF (Bad file descriptor) [pid 6308] close(13) = -1 EBADF (Bad file descriptor) [pid 6308] close(14) = -1 EBADF (Bad file descriptor) [pid 6308] close(15) = -1 EBADF (Bad file descriptor) [pid 6308] close(16) = -1 EBADF (Bad file descriptor) [pid 6308] close(17) = -1 EBADF (Bad file descriptor) [pid 6308] close(18) = -1 EBADF (Bad file descriptor) [pid 6308] close(19) = -1 EBADF (Bad file descriptor) [pid 6308] close(20) = -1 EBADF (Bad file descriptor) [pid 6308] close(21) = -1 EBADF (Bad file descriptor) [pid 6308] close(22) = -1 EBADF (Bad file descriptor) [pid 6308] close(23) = -1 EBADF (Bad file descriptor) [pid 6308] close(24) = -1 EBADF (Bad file descriptor) [pid 6308] close(25) = -1 EBADF (Bad file descriptor) [pid 6308] close(26) = -1 EBADF (Bad file descriptor) [pid 6308] close(27) = -1 EBADF (Bad file descriptor) [pid 6308] close(28) = -1 EBADF (Bad file descriptor) [pid 6308] close(29) = -1 EBADF (Bad file descriptor) [ 131.673293][ T6308] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 6308] exit_group(0) = ? [pid 6308] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=146, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./144", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./144", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./144/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./144/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./144/binderfs") = 0 [pid 5637] umount2("./144/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./144/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./144/cgroup.net") = 0 [pid 5637] umount2("./144/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./144/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./144/cgroup.cpu") = 0 [pid 5637] umount2("./144/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./144/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./144/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./144") = 0 [pid 5637] mkdir("./145", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6312 attached , child_tidptr=0x55557f25d790) = 147 [pid 6312] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 6312] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6312] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6312] chdir("./145") = 0 [pid 6312] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6312] setpgid(0, 0) = 0 [pid 6312] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6312] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6312] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6312] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6312] write(3, "1000", 4) = 4 [pid 6312] close(3) = 0 [pid 6312] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6312] write(1, "executing program\n", 18) = 18 [pid 6312] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6312] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6312] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6312] close(3) = 0 [pid 6312] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6312] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6312] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6312] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6312] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6312] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6312] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6312] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6312] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6312] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6312] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6312] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6312] setns(201, 0) = 0 [pid 6312] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6312] setns(7, 0) = 0 [pid 6312] close(7) = 0 [pid 6312] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6312] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6312] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=147}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6312] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=147}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6312] close(7) = 0 [pid 6312] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6312] close(3) = 0 [pid 6312] close(4) = 0 [pid 6312] close(5) = 0 [pid 6312] close(6) = 0 [pid 6312] close(7) = -1 EBADF (Bad file descriptor) [pid 6312] close(8) = 0 [pid 6312] close(9) = -1 EBADF (Bad file descriptor) [pid 6312] close(10) = -1 EBADF (Bad file descriptor) [pid 6312] close(11) = -1 EBADF (Bad file descriptor) [pid 6312] close(12) = -1 EBADF (Bad file descriptor) [pid 6312] close(13) = -1 EBADF (Bad file descriptor) [pid 6312] close(14) = -1 EBADF (Bad file descriptor) [pid 6312] close(15) = -1 EBADF (Bad file descriptor) [pid 6312] close(16) = -1 EBADF (Bad file descriptor) [pid 6312] close(17) = -1 EBADF (Bad file descriptor) [pid 6312] close(18) = -1 EBADF (Bad file descriptor) [pid 6312] close(19) = -1 EBADF (Bad file descriptor) [pid 6312] close(20) = -1 EBADF (Bad file descriptor) [pid 6312] close(21) = -1 EBADF (Bad file descriptor) [pid 6312] close(22) = -1 EBADF (Bad file descriptor) [pid 6312] close(23) = -1 EBADF (Bad file descriptor) [pid 6312] close(24) = -1 EBADF (Bad file descriptor) [pid 6312] close(25) = -1 EBADF (Bad file descriptor) [pid 6312] close(26) = -1 EBADF (Bad file descriptor) [pid 6312] close(27) = -1 EBADF (Bad file descriptor) [pid 6312] close(28) = -1 EBADF (Bad file descriptor) [pid 6312] close(29) = -1 EBADF (Bad file descriptor) [pid 6312] exit_group(0) = ? [ 131.904949][ T6312] netlink: 20 bytes leftover after parsing attributes in process `syz-executor169'. [pid 6312] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=147, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./145", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./145", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./145/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./145/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./145/binderfs") = 0 [pid 5637] umount2("./145/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./145/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./145/cgroup.net") = 0 [pid 5637] umount2("./145/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./145/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./145/cgroup.cpu") = 0 [pid 5637] umount2("./145/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./145/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./145/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./145") = 0 [pid 5637] mkdir("./146", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6317 attached [pid 6317] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 6317] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5637] <... clone resumed>, child_tidptr=0x55557f25d790) = 148 [pid 6317] chdir("./146" [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6317] <... chdir resumed>) = 0 [pid 6317] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6317] setpgid(0, 0) = 0 [pid 6317] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6317] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6317] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6317] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6317] write(3, "1000", 4) = 4 [pid 6317] close(3) = 0 [pid 6317] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6317] write(1, "executing program\n", 18) = 18 [pid 6317] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6317] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6317] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6317] close(3) = 0 [pid 6317] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6317] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6317] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6317] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6317] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6317] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6317] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6317] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6317] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6317] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6317] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6317] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6317] setns(201, 0) = 0 [pid 6317] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6317] setns(7, 0) = 0 [pid 6317] close(7) = 0 [pid 6317] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6317] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6317] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=148}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6317] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=148}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6317] close(7) = 0 [pid 6317] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6317] close(3) = 0 [pid 6317] close(4) = 0 [pid 6317] close(5) = 0 [pid 6317] close(6) = 0 [pid 6317] close(7) = -1 EBADF (Bad file descriptor) [pid 6317] close(8) = 0 [pid 6317] close(9) = -1 EBADF (Bad file descriptor) [pid 6317] close(10) = -1 EBADF (Bad file descriptor) [pid 6317] close(11) = -1 EBADF (Bad file descriptor) [pid 6317] close(12) = -1 EBADF (Bad file descriptor) [pid 6317] close(13) = -1 EBADF (Bad file descriptor) [pid 6317] close(14) = -1 EBADF (Bad file descriptor) [pid 6317] close(15) = -1 EBADF (Bad file descriptor) [pid 6317] close(16) = -1 EBADF (Bad file descriptor) [pid 6317] close(17) = -1 EBADF (Bad file descriptor) [pid 6317] close(18) = -1 EBADF (Bad file descriptor) [pid 6317] close(19) = -1 EBADF (Bad file descriptor) [pid 6317] close(20) = -1 EBADF (Bad file descriptor) [pid 6317] close(21) = -1 EBADF (Bad file descriptor) [pid 6317] close(22) = -1 EBADF (Bad file descriptor) [pid 6317] close(23) = -1 EBADF (Bad file descriptor) [pid 6317] close(24) = -1 EBADF (Bad file descriptor) [pid 6317] close(25) = -1 EBADF (Bad file descriptor) [pid 6317] close(26) = -1 EBADF (Bad file descriptor) [pid 6317] close(27) = -1 EBADF (Bad file descriptor) [pid 6317] close(28) = -1 EBADF (Bad file descriptor) [pid 6317] close(29) = -1 EBADF (Bad file descriptor) [pid 6317] exit_group(0) = ? [pid 6317] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=148, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./146", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./146", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./146/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./146/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./146/binderfs") = 0 [pid 5637] umount2("./146/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./146/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./146/cgroup.net") = 0 [pid 5637] umount2("./146/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./146/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./146/cgroup.cpu") = 0 [pid 5637] umount2("./146/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./146/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./146/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./146") = 0 [pid 5637] mkdir("./147", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6322 attached , child_tidptr=0x55557f25d790) = 149 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 6322] set_robust_list(0x55557f25d7a0, 24 [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6322] <... set_robust_list resumed>) = 0 [pid 6322] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6322] chdir("./147") = 0 [pid 6322] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6322] setpgid(0, 0) = 0 [pid 6322] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6322] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6322] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6322] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6322] write(3, "1000", 4) = 4 [pid 6322] close(3) = 0 [pid 6322] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6322] write(1, "executing program\n", 18) = 18 [pid 6322] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6322] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) executing program [pid 6322] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6322] close(3) = 0 [pid 6322] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6322] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6322] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6322] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6322] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6322] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6322] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6322] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6322] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6322] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6322] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6322] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6322] setns(201, 0) = 0 [pid 6322] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6322] setns(7, 0) = 0 [pid 6322] close(7) = 0 [pid 6322] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6322] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6322] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=149}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6322] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=149}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6322] close(7) = 0 [pid 6322] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6322] close(3) = 0 [pid 6322] close(4) = 0 [pid 6322] close(5) = 0 [pid 6322] close(6) = 0 [pid 6322] close(7) = -1 EBADF (Bad file descriptor) [pid 6322] close(8) = 0 [pid 6322] close(9) = -1 EBADF (Bad file descriptor) [pid 6322] close(10) = -1 EBADF (Bad file descriptor) [pid 6322] close(11) = -1 EBADF (Bad file descriptor) [pid 6322] close(12) = -1 EBADF (Bad file descriptor) [pid 6322] close(13) = -1 EBADF (Bad file descriptor) [pid 6322] close(14) = -1 EBADF (Bad file descriptor) [pid 6322] close(15) = -1 EBADF (Bad file descriptor) [pid 6322] close(16) = -1 EBADF (Bad file descriptor) [pid 6322] close(17) = -1 EBADF (Bad file descriptor) [pid 6322] close(18) = -1 EBADF (Bad file descriptor) [pid 6322] close(19) = -1 EBADF (Bad file descriptor) [pid 6322] close(20) = -1 EBADF (Bad file descriptor) [pid 6322] close(21) = -1 EBADF (Bad file descriptor) [pid 6322] close(22) = -1 EBADF (Bad file descriptor) [pid 6322] close(23) = -1 EBADF (Bad file descriptor) [pid 6322] close(24) = -1 EBADF (Bad file descriptor) [pid 6322] close(25) = -1 EBADF (Bad file descriptor) [pid 6322] close(26) = -1 EBADF (Bad file descriptor) [pid 6322] close(27) = -1 EBADF (Bad file descriptor) [pid 6322] close(28) = -1 EBADF (Bad file descriptor) [pid 6322] close(29) = -1 EBADF (Bad file descriptor) [pid 6322] exit_group(0) = ? [pid 6322] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=149, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./147", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./147", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./147/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./147/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./147/binderfs") = 0 [pid 5637] umount2("./147/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./147/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./147/cgroup.net") = 0 [pid 5637] umount2("./147/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./147/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./147/cgroup.cpu") = 0 [pid 5637] umount2("./147/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./147/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./147/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./147") = 0 [pid 5637] mkdir("./148", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6326 attached , child_tidptr=0x55557f25d790) = 150 [pid 6326] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 6326] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6326] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6326] chdir("./148") = 0 [pid 6326] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6326] setpgid(0, 0) = 0 [pid 6326] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6326] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6326] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6326] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6326] write(3, "1000", 4) = 4 [pid 6326] close(3) = 0 [pid 6326] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6326] write(1, "executing program\n", 18) = 18 executing program [pid 6326] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6326] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6326] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6326] close(3) = 0 [pid 6326] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6326] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6326] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6326] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6326] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6326] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6326] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6326] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6326] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6326] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6326] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6326] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6326] setns(201, 0) = 0 [pid 6326] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6326] setns(7, 0) = 0 [pid 6326] close(7) = 0 [pid 6326] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6326] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6326] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=150}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6326] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=150}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6326] close(7) = 0 [pid 6326] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6326] close(3) = 0 [pid 6326] close(4) = 0 [pid 6326] close(5) = 0 [pid 6326] close(6) = 0 [pid 6326] close(7) = -1 EBADF (Bad file descriptor) [pid 6326] close(8) = 0 [pid 6326] close(9) = -1 EBADF (Bad file descriptor) [pid 6326] close(10) = -1 EBADF (Bad file descriptor) [pid 6326] close(11) = -1 EBADF (Bad file descriptor) [pid 6326] close(12) = -1 EBADF (Bad file descriptor) [pid 6326] close(13) = -1 EBADF (Bad file descriptor) [pid 6326] close(14) = -1 EBADF (Bad file descriptor) [pid 6326] close(15) = -1 EBADF (Bad file descriptor) [pid 6326] close(16) = -1 EBADF (Bad file descriptor) [pid 6326] close(17) = -1 EBADF (Bad file descriptor) [pid 6326] close(18) = -1 EBADF (Bad file descriptor) [pid 6326] close(19) = -1 EBADF (Bad file descriptor) [pid 6326] close(20) = -1 EBADF (Bad file descriptor) [pid 6326] close(21) = -1 EBADF (Bad file descriptor) [pid 6326] close(22) = -1 EBADF (Bad file descriptor) [pid 6326] close(23) = -1 EBADF (Bad file descriptor) [pid 6326] close(24) = -1 EBADF (Bad file descriptor) [pid 6326] close(25) = -1 EBADF (Bad file descriptor) [pid 6326] close(26) = -1 EBADF (Bad file descriptor) [pid 6326] close(27) = -1 EBADF (Bad file descriptor) [pid 6326] close(28) = -1 EBADF (Bad file descriptor) [pid 6326] close(29) = -1 EBADF (Bad file descriptor) [pid 6326] exit_group(0) = ? [pid 6326] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=150, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./148", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./148", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./148/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./148/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./148/binderfs") = 0 [pid 5637] umount2("./148/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./148/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./148/cgroup.net") = 0 [pid 5637] umount2("./148/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./148/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./148/cgroup.cpu") = 0 [pid 5637] umount2("./148/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./148/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./148/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./148") = 0 [pid 5637] mkdir("./149", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6332 attached , child_tidptr=0x55557f25d790) = 151 [pid 6332] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 6332] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6332] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6332] chdir("./149") = 0 [pid 6332] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6332] setpgid(0, 0) = 0 [pid 6332] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6332] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6332] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6332] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6332] write(3, "1000", 4) = 4 [pid 6332] close(3) = 0 [pid 6332] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6332] write(1, "executing program\n", 18) = 18 executing program [pid 6332] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6332] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6332] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6332] close(3) = 0 [pid 6332] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6332] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6332] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6332] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6332] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6332] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6332] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6332] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6332] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6332] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6332] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6332] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6332] setns(201, 0) = 0 [pid 6332] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6332] setns(7, 0) = 0 [pid 6332] close(7) = 0 [pid 6332] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6332] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6332] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=151}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6332] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=151}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6332] close(7) = 0 [pid 6332] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6332] close(3) = 0 [pid 6332] close(4) = 0 [pid 6332] close(5) = 0 [pid 6332] close(6) = 0 [pid 6332] close(7) = -1 EBADF (Bad file descriptor) [pid 6332] close(8) = 0 [pid 6332] close(9) = -1 EBADF (Bad file descriptor) [pid 6332] close(10) = -1 EBADF (Bad file descriptor) [pid 6332] close(11) = -1 EBADF (Bad file descriptor) [pid 6332] close(12) = -1 EBADF (Bad file descriptor) [pid 6332] close(13) = -1 EBADF (Bad file descriptor) [pid 6332] close(14) = -1 EBADF (Bad file descriptor) [pid 6332] close(15) = -1 EBADF (Bad file descriptor) [pid 6332] close(16) = -1 EBADF (Bad file descriptor) [pid 6332] close(17) = -1 EBADF (Bad file descriptor) [pid 6332] close(18) = -1 EBADF (Bad file descriptor) [pid 6332] close(19) = -1 EBADF (Bad file descriptor) [pid 6332] close(20) = -1 EBADF (Bad file descriptor) [pid 6332] close(21) = -1 EBADF (Bad file descriptor) [pid 6332] close(22) = -1 EBADF (Bad file descriptor) [pid 6332] close(23) = -1 EBADF (Bad file descriptor) [pid 6332] close(24) = -1 EBADF (Bad file descriptor) [pid 6332] close(25) = -1 EBADF (Bad file descriptor) [pid 6332] close(26) = -1 EBADF (Bad file descriptor) [pid 6332] close(27) = -1 EBADF (Bad file descriptor) [pid 6332] close(28) = -1 EBADF (Bad file descriptor) [pid 6332] close(29) = -1 EBADF (Bad file descriptor) [pid 6332] exit_group(0) = ? [pid 6332] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=151, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./149", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./149", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./149/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./149/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./149/binderfs") = 0 [pid 5637] umount2("./149/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./149/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./149/cgroup.net") = 0 [pid 5637] umount2("./149/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./149/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./149/cgroup.cpu") = 0 [pid 5637] umount2("./149/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./149/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./149/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./149") = 0 [pid 5637] mkdir("./150", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6338 attached , child_tidptr=0x55557f25d790) = 152 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 6338] set_robust_list(0x55557f25d7a0, 24 [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6338] <... set_robust_list resumed>) = 0 [pid 6338] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6338] chdir("./150") = 0 [pid 6338] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6338] setpgid(0, 0) = 0 [pid 6338] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6338] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6338] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6338] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6338] write(3, "1000", 4) = 4 [pid 6338] close(3) = 0 [pid 6338] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 6338] write(1, "executing program\n", 18) = 18 [pid 6338] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6338] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6338] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6338] close(3) = 0 [pid 6338] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6338] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6338] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6338] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6338] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6338] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6338] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6338] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6338] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6338] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6338] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6338] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6338] setns(201, 0) = 0 [pid 6338] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6338] setns(7, 0) = 0 [pid 6338] close(7) = 0 [pid 6338] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6338] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6338] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=152}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6338] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=152}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6338] close(7) = 0 [pid 6338] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6338] close(3) = 0 [pid 6338] close(4) = 0 [pid 6338] close(5) = 0 [pid 6338] close(6) = 0 [pid 6338] close(7) = -1 EBADF (Bad file descriptor) [pid 6338] close(8) = 0 [pid 6338] close(9) = -1 EBADF (Bad file descriptor) [pid 6338] close(10) = -1 EBADF (Bad file descriptor) [pid 6338] close(11) = -1 EBADF (Bad file descriptor) [pid 6338] close(12) = -1 EBADF (Bad file descriptor) [pid 6338] close(13) = -1 EBADF (Bad file descriptor) [pid 6338] close(14) = -1 EBADF (Bad file descriptor) [pid 6338] close(15) = -1 EBADF (Bad file descriptor) [pid 6338] close(16) = -1 EBADF (Bad file descriptor) [pid 6338] close(17) = -1 EBADF (Bad file descriptor) [pid 6338] close(18) = -1 EBADF (Bad file descriptor) [pid 6338] close(19) = -1 EBADF (Bad file descriptor) [pid 6338] close(20) = -1 EBADF (Bad file descriptor) [pid 6338] close(21) = -1 EBADF (Bad file descriptor) [pid 6338] close(22) = -1 EBADF (Bad file descriptor) [pid 6338] close(23) = -1 EBADF (Bad file descriptor) [pid 6338] close(24) = -1 EBADF (Bad file descriptor) [pid 6338] close(25) = -1 EBADF (Bad file descriptor) [pid 6338] close(26) = -1 EBADF (Bad file descriptor) [pid 6338] close(27) = -1 EBADF (Bad file descriptor) [pid 6338] close(28) = -1 EBADF (Bad file descriptor) [pid 6338] close(29) = -1 EBADF (Bad file descriptor) [pid 6338] exit_group(0) = ? [pid 6338] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=152, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./150", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./150", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./150/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./150/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./150/binderfs") = 0 [pid 5637] umount2("./150/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./150/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./150/cgroup.net") = 0 [pid 5637] umount2("./150/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./150/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./150/cgroup.cpu") = 0 [pid 5637] umount2("./150/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./150/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./150/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./150") = 0 [pid 5637] mkdir("./151", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6342 attached , child_tidptr=0x55557f25d790) = 153 [pid 6342] set_robust_list(0x55557f25d7a0, 24) = 0 [pid 6342] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6342] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6342] chdir("./151") = 0 [pid 6342] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6342] setpgid(0, 0) = 0 [pid 6342] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6342] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6342] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6342] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6342] write(3, "1000", 4) = 4 [pid 6342] close(3) = 0 [pid 6342] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6342] write(1, "executing program\n", 18) = 18 executing program [pid 6342] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6342] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6342] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6342] close(3) = 0 [pid 6342] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6342] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6342] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6342] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6342] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6342] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6342] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6342] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6342] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6342] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6342] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6342] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6342] setns(201, 0) = 0 [pid 6342] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6342] setns(7, 0) = 0 [pid 6342] close(7) = 0 [pid 6342] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6342] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6342] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=153}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6342] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=153}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6342] close(7) = 0 [pid 6342] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6342] close(3) = 0 [pid 6342] close(4) = 0 [pid 6342] close(5) = 0 [pid 6342] close(6) = 0 [pid 6342] close(7) = -1 EBADF (Bad file descriptor) [pid 6342] close(8) = 0 [pid 6342] close(9) = -1 EBADF (Bad file descriptor) [pid 6342] close(10) = -1 EBADF (Bad file descriptor) [pid 6342] close(11) = -1 EBADF (Bad file descriptor) [pid 6342] close(12) = -1 EBADF (Bad file descriptor) [pid 6342] close(13) = -1 EBADF (Bad file descriptor) [pid 6342] close(14) = -1 EBADF (Bad file descriptor) [pid 6342] close(15) = -1 EBADF (Bad file descriptor) [pid 6342] close(16) = -1 EBADF (Bad file descriptor) [pid 6342] close(17) = -1 EBADF (Bad file descriptor) [pid 6342] close(18) = -1 EBADF (Bad file descriptor) [pid 6342] close(19) = -1 EBADF (Bad file descriptor) [pid 6342] close(20) = -1 EBADF (Bad file descriptor) [pid 6342] close(21) = -1 EBADF (Bad file descriptor) [pid 6342] close(22) = -1 EBADF (Bad file descriptor) [pid 6342] close(23) = -1 EBADF (Bad file descriptor) [pid 6342] close(24) = -1 EBADF (Bad file descriptor) [pid 6342] close(25) = -1 EBADF (Bad file descriptor) [pid 6342] close(26) = -1 EBADF (Bad file descriptor) [pid 6342] close(27) = -1 EBADF (Bad file descriptor) [pid 6342] close(28) = -1 EBADF (Bad file descriptor) [pid 6342] close(29) = -1 EBADF (Bad file descriptor) [pid 6342] exit_group(0) = ? [pid 6342] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=153, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./151", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./151", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./151/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./151/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./151/binderfs") = 0 [pid 5637] umount2("./151/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./151/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./151/cgroup.net") = 0 [pid 5637] umount2("./151/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./151/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./151/cgroup.cpu") = 0 [pid 5637] umount2("./151/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./151/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./151/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./151") = 0 [pid 5637] mkdir("./152", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6346 attached , child_tidptr=0x55557f25d790) = 154 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 6346] set_robust_list(0x55557f25d7a0, 24 [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6346] <... set_robust_list resumed>) = 0 [pid 6346] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6346] chdir("./152") = 0 [pid 6346] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6346] setpgid(0, 0) = 0 [pid 6346] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6346] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6346] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [pid 6346] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6346] write(3, "1000", 4) = 4 [pid 6346] close(3) = 0 [pid 6346] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6346] write(1, "executing program\n", 18) = 18 [pid 6346] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6346] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) executing program [pid 6346] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6346] close(3) = 0 [pid 6346] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6346] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6346] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6346] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6346] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6346] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6346] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6346] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6346] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6346] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6346] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [pid 6346] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6346] setns(201, 0) = 0 [pid 6346] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6346] setns(7, 0) = 0 [pid 6346] close(7) = 0 [pid 6346] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6346] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6346] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=154}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6346] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=154}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6346] close(7) = 0 [pid 6346] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6346] close(3) = 0 [pid 6346] close(4) = 0 [pid 6346] close(5) = 0 [pid 6346] close(6) = 0 [pid 6346] close(7) = -1 EBADF (Bad file descriptor) [pid 6346] close(8) = 0 [pid 6346] close(9) = -1 EBADF (Bad file descriptor) [pid 6346] close(10) = -1 EBADF (Bad file descriptor) [pid 6346] close(11) = -1 EBADF (Bad file descriptor) [pid 6346] close(12) = -1 EBADF (Bad file descriptor) [pid 6346] close(13) = -1 EBADF (Bad file descriptor) [pid 6346] close(14) = -1 EBADF (Bad file descriptor) [pid 6346] close(15) = -1 EBADF (Bad file descriptor) [pid 6346] close(16) = -1 EBADF (Bad file descriptor) [pid 6346] close(17) = -1 EBADF (Bad file descriptor) [pid 6346] close(18) = -1 EBADF (Bad file descriptor) [pid 6346] close(19) = -1 EBADF (Bad file descriptor) [pid 6346] close(20) = -1 EBADF (Bad file descriptor) [pid 6346] close(21) = -1 EBADF (Bad file descriptor) [pid 6346] close(22) = -1 EBADF (Bad file descriptor) [pid 6346] close(23) = -1 EBADF (Bad file descriptor) [pid 6346] close(24) = -1 EBADF (Bad file descriptor) [pid 6346] close(25) = -1 EBADF (Bad file descriptor) [pid 6346] close(26) = -1 EBADF (Bad file descriptor) [pid 6346] close(27) = -1 EBADF (Bad file descriptor) [pid 6346] close(28) = -1 EBADF (Bad file descriptor) [pid 6346] close(29) = -1 EBADF (Bad file descriptor) [pid 6346] exit_group(0) = ? [pid 6346] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=154, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./152", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./152", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./152/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./152/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./152/binderfs") = 0 [pid 5637] umount2("./152/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./152/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./152/cgroup.net") = 0 [pid 5637] umount2("./152/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./152/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 133.866531][ T13] ------------[ cut here ]------------ [ 133.866545][ T13] timer_delete_sync(&sdp->delay_work) && rcu_segcblist_n_cbs(&sdp->srcu_cblist) [ 133.866562][ T13] WARNING: kernel/rcu/srcutree.c:707 at cleanup_srcu_struct+0x3d6/0x8b0, CPU#0: kworker/u8:1/13 [ 133.892266][ T13] Modules linked in: [ 133.896729][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 133.906017][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [pid 5637] unlink("./152/cgroup.cpu") = 0 [pid 5637] umount2("./152/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./152/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./152/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./152") = 0 [pid 5637] mkdir("./153", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 133.916119][ T13] Workqueue: nbd-del nbd_dev_remove_work [ 133.921793][ T13] RIP: 0010:cleanup_srcu_struct+0x3d6/0x8b0 [ 133.927723][ T13] Code: 08 8c 00 48 83 7d 00 00 4c 8b 74 24 10 0f 85 dd 03 00 00 41 ff c5 41 83 e5 0f 41 83 fd 07 0f 86 e2 fe ff ff e9 ab 00 00 00 90 <0f> 0b 90 4c 8d b5 00 02 00 00 4c 89 f3 48 c1 eb 03 48 b8 00 00 00 [ 133.947369][ T13] RSP: 0018:ffffc900001279d0 EFLAGS: 00010202 [ 133.953429][ T13] RAX: 1ffffd1ffff8602d RBX: 0000607edaf63080 RCX: dffffc0000000000 [pid 5637] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-net-kasan-gce/strace-static-x86_64: Process 6352 attached , child_tidptr=0x55557f25d790) = 155 [pid 6352] set_robust_list(0x55557f25d7a0, 24 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 6352] <... set_robust_list resumed>) = 0 [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 6352] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 6352] chdir("./153") = 0 [pid 6352] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6352] setpgid(0, 0) = 0 [pid 6352] symlink("/syzcgroup/unified/syz0", "./cgroup") = 0 [pid 6352] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0 [pid 6352] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0 [ 133.961451][ T13] RDX: 0000000000000001 RSI: ffffffff8e4151e9 RDI: 00000000ffffffff [ 133.969474][ T13] RBP: ffffe8ffffc30080 R08: ffffffff907a417f R09: 1ffffffff20f482f [ 133.977695][ T13] R10: dffffc0000000000 R11: fffffbfff20f4830 R12: ffff88807ac8d000 [ 133.985833][ T13] R13: 0000000000000000 R14: ffffe8ffffc30168 R15: 1ffffffff1cdcdde [ 133.993866][ T13] FS: 0000000000000000(0000) GS:ffff888124ccd000(0000) knlGS:0000000000000000 [ 134.002828][ T13] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 134.009449][ T13] CR2: 00007ff91c6fe420 CR3: 000000000eb48000 CR4: 00000000003526f0 [pid 6352] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6352] write(3, "1000", 4) = 4 [pid 6352] close(3) = 0 [pid 6352] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6352] write(1, "executing program\n", 18) = 18 executing program [pid 6352] sendmsg(-1, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6352] sendmsg(-1, NULL, MSG_CTRUNC|MSG_PROBE|MSG_DONTWAIT|MSG_MORE|MSG_BATCH|MSG_ZEROCOPY|MSG_FASTOPEN) = -1 EBADF (Bad file descriptor) [pid 6352] socket(AF_NETLINK, SOCK_RAW|SOCK_NONBLOCK, NETLINK_ROUTE) = 3 [pid 6352] close(3) = 0 [pid 6352] socket(AF_INET, SOCK_SEQPACKET|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_IP) = 3 [pid 6352] shutdown(-1, SHUT_RD) = -1 EBADF (Bad file descriptor) [pid 6352] getsockopt(-1, SOL_SCTP, SCTP_SOCKOPT_PEELOFF_FLAGS, NULL, [0]) = -1 EBADF (Bad file descriptor) [pid 6352] sendmmsg(3, [{msg_hdr={msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=0, msg_control=NULL, msg_controllen=48, msg_flags=0}}], 1, 0) = -1 EFAULT (Bad address) [pid 6352] setsockopt(-1, SOL_SCTP, SCTP_AUTH_DEACTIVATE_KEY, NULL, 0) = -1 EBADF (Bad file descriptor) [pid 6352] sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=MSG_NOSIGNAL}, 0) = -1 EBADF (Bad file descriptor) [pid 6352] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 4 [pid 6352] socket(AF_INET, SOCK_RAW, IPPROTO_IGMP) = 5 [pid 6352] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 6 [pid 6352] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [pid 6352] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EFAULT (Bad address) [ 134.017466][ T13] Call Trace: [ 134.020743][ T13] [ 134.023670][ T13] blk_mq_free_tag_set+0x617/0x790 [ 134.028869][ T13] ? process_scheduled_works+0x97a/0x1630 [ 134.034607][ T13] nbd_dev_remove_work+0x4f/0xe0 [ 134.039596][ T13] process_scheduled_works+0xc3d/0x1630 [ 134.045192][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 134.051216][ T13] ? assign_work+0x3cf/0x5d0 [ 134.055823][ T13] worker_thread+0xa47/0xfb0 [ 134.060482][ T13] kthread+0x38b/0x480 [pid 6352] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 7 [pid 6352] setns(201, 0) = 0 [pid 6352] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 8 [pid 6352] setns(7, 0) = 0 [pid 6352] close(7) = 0 [pid 6352] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 7 [pid 6352] sendto(7, [{nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00"], 28, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 28 [pid 6352] recvfrom(7, [{nlmsg_len=180, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=155}, "\x01\x02\x00\x00\x08\x00\x02\x00\x6e\x62\x64\x00\x06\x00\x01\x00\x2b\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\x54\x00\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00\x03\x00\x00\x00"...], 4096, 0, NULL, NULL) = 180 [pid 6352] recvfrom(7, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=155}, {error=0, msg={nlmsg_len=28, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 6352] close(7) = 0 [ 134.064550][ T13] ? __pfx_worker_thread+0x10/0x10 [ 134.069711][ T13] ? __pfx_kthread+0x10/0x10 [ 134.074305][ T13] ret_from_fork+0x514/0xb70 [ 134.079096][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 134.084218][ T13] ? __switch_to+0xc89/0x1420 [ 134.089092][ T13] ? __pfx_kthread+0x10/0x10 [ 134.093689][ T13] ret_from_fork_asm+0x1a/0x30 [ 134.098515][ T13] [ 134.101556][ T13] Kernel panic - not syncing: kernel: panic_on_warn set ... [pid 6352] sendmsg(8, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base=[[{nlmsg_len=104, nlmsg_type=0x2b /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST, nlmsg_seq=0, nlmsg_pid=0}, "\x01\x00\x00\x00\x08\x00\x01\x00\x40\x00\x00\x00\x0c\x00\x02\x00\x70\x0f\x00\x00\x00\x00\x00\x00\x0c\x00\x06\x00\x03\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x0a\x00\x27\x2d\x5d\x29\x21\x2b\x00\x00\x14\x00\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"], "\x00\x00\x00\x00"], iov_len=108}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 108 [pid 6352] close(3) = 0 [pid 6352] close(4) = 0 [pid 6352] close(5) = 0 [pid 6352] close(6) = 0 [pid 6352] close(7) = -1 EBADF (Bad file descriptor) [pid 6352] close(8) = 0 [pid 6352] close(9) = -1 EBADF (Bad file descriptor) [pid 6352] close(10) = -1 EBADF (Bad file descriptor) [pid 6352] close(11) = -1 EBADF (Bad file descriptor) [pid 6352] close(12) = -1 EBADF (Bad file descriptor) [pid 6352] close(13) = -1 EBADF (Bad file descriptor) [pid 6352] close(14) = -1 EBADF (Bad file descriptor) [pid 6352] close(15) = -1 EBADF (Bad file descriptor) [pid 6352] close(16) = -1 EBADF (Bad file descriptor) [pid 6352] close(17) = -1 EBADF (Bad file descriptor) [pid 6352] close(18) = -1 EBADF (Bad file descriptor) [pid 6352] close(19) = -1 EBADF (Bad file descriptor) [pid 6352] close(20) = -1 EBADF (Bad file descriptor) [pid 6352] close(21) = -1 EBADF (Bad file descriptor) [pid 6352] close(22) = -1 EBADF (Bad file descriptor) [pid 6352] close(23) = -1 EBADF (Bad file descriptor) [pid 6352] close(24) = -1 EBADF (Bad file descriptor) [pid 6352] close(25) = -1 EBADF (Bad file descriptor) [pid 6352] close(26) = -1 EBADF (Bad file descriptor) [pid 6352] close(27) = -1 EBADF (Bad file descriptor) [pid 6352] close(28) = -1 EBADF (Bad file descriptor) [pid 6352] close(29) = -1 EBADF (Bad file descriptor) [pid 6352] exit_group(0) = ? [pid 6352] +++ exited with 0 +++ [pid 5637] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=155, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5637] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5637] umount2("./153", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] openat(AT_FDCWD, "./153", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5637] fstat(3, {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 6 entries */, 32768) = 176 [pid 5637] umount2("./153/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./153/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./153/binderfs") = 0 [pid 5637] umount2("./153/cgroup.net", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./153/cgroup.net", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./153/cgroup.net") = 0 [pid 5637] umount2("./153/cgroup.cpu", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./153/cgroup.cpu", {st_mode=S_IFLNK|0777, st_size=19, ...}, AT_SYMLINK_NOFOLLOW) = 0 [ 134.108831][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 134.118113][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 134.128165][ T13] Workqueue: nbd-del nbd_dev_remove_work [ 134.133799][ T13] Call Trace: [ 134.137078][ T13] [ 134.140008][ T13] vpanic+0x56d/0xa60 [ 134.143991][ T13] ? __pfx__printk+0x10/0x10 [ 134.148584][ T13] ? __pfx_vpanic+0x10/0x10 [ 134.153100][ T13] ? is_bpf_text_address+0x292/0x2b0 [ 134.158392][ T13] ? is_bpf_text_address+0x26/0x2b0 [ 134.163613][ T13] panic+0xc5/0xd0 [pid 5637] unlink("./153/cgroup.cpu") = 0 [pid 5637] umount2("./153/cgroup", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5637] newfstatat(AT_FDCWD, "./153/cgroup", {st_mode=S_IFLNK|0777, st_size=23, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5637] unlink("./153/cgroup") = 0 [pid 5637] getdents64(3, 0x55557f25e860 /* 0 entries */, 32768) = 0 [pid 5637] close(3) = 0 [pid 5637] rmdir("./153") = 0 [pid 5637] mkdir("./154", 0777) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [ 134.167352][ T13] ? __pfx_panic+0x10/0x10 [ 134.171793][ T13] ? ret_from_fork_asm+0x1a/0x30 [ 134.176754][ T13] __warn+0x315/0x4c0 [ 134.180749][ T13] ? cleanup_srcu_struct+0x3d6/0x8b0 [ 134.186032][ T13] ? cleanup_srcu_struct+0x3d6/0x8b0 [ 134.191313][ T13] __report_bug+0x276/0x570 [ 134.195842][ T13] ? cleanup_srcu_struct+0x3d6/0x8b0 [ 134.201124][ T13] ? __pfx___report_bug+0x10/0x10 [ 134.206142][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 134.211685][ T13] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 134.217055][ T13] ? cleanup_srcu_struct+0x3d6/0x8b0 [ 134.222325][ T13] report_bug+0x16b/0x220 [ 134.226645][ T13] ? cleanup_srcu_struct+0x3d6/0x8b0 [ 134.231933][ T13] ? cleanup_srcu_struct+0x3d8/0x8b0 [ 134.237202][ T13] handle_bug+0x9c/0x200 [ 134.241435][ T13] exc_invalid_op+0x1a/0x50 [ 134.245938][ T13] asm_exc_invalid_op+0x1a/0x20 [ 134.250783][ T13] RIP: 0010:cleanup_srcu_struct+0x3d6/0x8b0 [ 134.256663][ T13] Code: 08 8c 00 48 83 7d 00 00 4c 8b 74 24 10 0f 85 dd 03 00 00 41 ff c5 41 83 e5 0f 41 83 fd 07 0f 86 e2 fe ff ff e9 ab 00 00 00 90 <0f> 0b 90 4c 8d b5 00 02 00 00 4c 89 f3 48 c1 eb 03 48 b8 00 00 00 [ 134.276262][ T13] RSP: 0018:ffffc900001279d0 EFLAGS: 00010202 [ 134.282320][ T13] RAX: 1ffffd1ffff8602d RBX: 0000607edaf63080 RCX: dffffc0000000000 [ 134.290279][ T13] RDX: 0000000000000001 RSI: ffffffff8e4151e9 RDI: 00000000ffffffff [ 134.298234][ T13] RBP: ffffe8ffffc30080 R08: ffffffff907a417f R09: 1ffffffff20f482f [ 134.306189][ T13] R10: dffffc0000000000 R11: fffffbfff20f4830 R12: ffff88807ac8d000 [ 134.314145][ T13] R13: 0000000000000000 R14: ffffe8ffffc30168 R15: 1ffffffff1cdcdde [ 134.322123][ T13] blk_mq_free_tag_set+0x617/0x790 [ 134.327229][ T13] ? process_scheduled_works+0x97a/0x1630 [ 134.332937][ T13] nbd_dev_remove_work+0x4f/0xe0 [ 134.337862][ T13] process_scheduled_works+0xc3d/0x1630 [ 134.343416][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 134.349383][ T13] ? assign_work+0x3cf/0x5d0 [ 134.353966][ T13] worker_thread+0xa47/0xfb0 [ 134.358562][ T13] kthread+0x38b/0x480 [ 134.362614][ T13] ? __pfx_worker_thread+0x10/0x10 [ 134.367708][ T13] ? __pfx_kthread+0x10/0x10 [ 134.372280][ T13] ret_from_fork+0x514/0xb70 [ 134.376858][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 134.381949][ T13] ? __switch_to+0xc89/0x1420 [ 134.386616][ T13] ? __pfx_kthread+0x10/0x10 [ 134.391191][ T13] ret_from_fork_asm+0x1a/0x30 [ 134.395964][ T13] [ 134.399211][ T13] Kernel Offset: disabled [ 134.403522][ T13] Rebooting in 86400 seconds..