./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2523622187 <...> Warning: Permanently added '10.128.1.68' (ED25519) to the list of known hosts. execve("./syz-executor2523622187", ["./syz-executor2523622187"], 0x7ffcf5b600d0 /* 10 vars */) = 0 brk(NULL) = 0x5555951c7000 brk(0x5555951c7e00) = 0x5555951c7e00 arch_prctl(ARCH_SET_FS, 0x5555951c7480) = 0 set_tid_address(0x5555951c7750) = 290 set_robust_list(0x5555951c7760, 24) = 0 rseq(0x5555951c7da0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2523622187", 4096) = 28 getrandom("\x3f\xb0\xde\xba\x51\x6e\xb4\xfb", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555951c7e00 brk(0x5555951e8e00) = 0x5555951e8e00 brk(0x5555951e9000) = 0x5555951e9000 mprotect(0x7f6727fc2000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 291 ./strace-static-x86_64: Process 291 attached [pid 291] set_robust_list(0x5555951c7760, 24) = 0 [pid 290] openat(AT_FDCWD, "/sys/kernel/debug/x86/nmi_longest_ns", O_WRONLY|O_CLOEXEC) = 3 [pid 290] write(3, "10000000000", 11) = 11 [pid 290] close(3) = 0 [pid 290] openat(AT_FDCWD, "/proc/sys/kernel/hung_task_check_interval_secs", O_WRONLY|O_CLOEXEC) = 3 [pid 290] write(3, "20", 2) = 2 [pid 290] close(3) = 0 [pid 290] openat(AT_FDCWD, "/proc/sys/net/core/bpf_jit_kallsyms", O_WRONLY|O_CLOEXEC) = 3 [pid 290] write(3, "1", 1) = 1 [pid 290] close(3) = 0 [pid 290] openat(AT_FDCWD, "/proc/sys/net/core/bpf_jit_harden", O_WRONLY|O_CLOEXEC) = 3 [pid 290] write(3, "0", 1) = 1 [pid 290] close(3) = 0 [pid 290] openat(AT_FDCWD, "/proc/sys/kernel/kptr_restrict", O_WRONLY|O_CLOEXEC) = 3 [pid 290] write(3, "0", 1) = 1 [pid 290] close(3) = 0 [pid 290] openat(AT_FDCWD, "/proc/sys/kernel/softlockup_all_cpu_backtrace", O_WRONLY|O_CLOEXEC) = 3 [pid 290] write(3, "1", 1) = 1 [pid 290] close(3) = 0 [pid 290] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3 [pid 290] write(3, "100", 3) = 3 [pid 290] close(3) = 0 [pid 290] openat(AT_FDCWD, "/proc/sys/vm/oom_dump_tasks", O_WRONLY|O_CLOEXEC) = 3 [pid 290] write(3, "0", 1) = 1 [pid 290] close(3) = 0 [pid 290] openat(AT_FDCWD, "/proc/sys/debug/exception-trace", O_WRONLY|O_CLOEXEC) = 3 [pid 290] write(3, "0", 1) = 1 [pid 290] close(3) = 0 [pid 290] openat(AT_FDCWD, "/proc/sys/kernel/printk", O_WRONLY|O_CLOEXEC) = 3 [pid 290] write(3, "7 4 1 3", 7) = 7 [pid 290] close(3) = 0 [pid 290] openat(AT_FDCWD, "/proc/sys/kernel/keys/gc_delay", O_WRONLY|O_CLOEXEC) = 3 [pid 290] write(3, "1", 1) = 1 [pid 290] close(3) = 0 [pid 290] openat(AT_FDCWD, "/proc/sys/vm/oom_kill_allocating_task", O_WRONLY|O_CLOEXEC) = 3 [pid 290] write(3, "1", 1) = 1 [pid 290] close(3) = 0 [pid 290] openat(AT_FDCWD, "/proc/sys/kernel/ctrl-alt-del", O_WRONLY|O_CLOEXEC) = 3 [pid 290] write(3, "0", 1) = 1 [pid 290] close(3) = 0 [pid 290] openat(AT_FDCWD, "/proc/sys/kernel/cad_pid", O_WRONLY|O_CLOEXEC) = 3 [pid 290] write(3, "291", 3) = 3 [pid 290] close(3) = 0 [pid 290] kill(291, SIGKILL) = 0 [pid 291] +++ killed by SIGKILL +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=291, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- swapoff("./swap-file") = -1 ENOENT (No such file or directory) unlink("./swap-file") = -1 ENOENT (No such file or directory) openat(AT_FDCWD, "./swap-file", O_WRONLY|O_CREAT|O_CLOEXEC, 0600) = 3 fallocate(3, FALLOC_FL_ZERO_RANGE, 0, 128000000) = 0 close(3) = 0 rt_sigaction(SIGINT, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 rt_sigaction(SIGQUIT, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, 8) = 0 rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0 mmap(NULL, 36864, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ef1000 rt_sigprocmask(SIG_BLOCK, ~[], [CHLD], 8) = 0 clone3({flags=CLONE_VM|CLONE_VFORK, exit_signal=SIGCHLD, stack=0x7f6727ef1000, stack_size=0x9000}, 88./strace-static-x86_64: Process 292 attached [pid 292] rt_sigprocmask(SIG_BLOCK, NULL, ~[KILL STOP], 8) = 0 [pid 292] rt_sigaction(SIGHUP, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGHUP, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGINT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGQUIT, NULL, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, 8) = 0 [pid 292] rt_sigaction(SIGILL, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGILL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGTRAP, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGTRAP, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGABRT, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGABRT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGBUS, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGBUS, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGFPE, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGFPE, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGUSR1, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGUSR1, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGSEGV, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGSEGV, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGUSR2, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGUSR2, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGPIPE, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGPIPE, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGALRM, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGALRM, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGTERM, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGTERM, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGSTKFLT, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGSTKFLT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGCHLD, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGCHLD, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGCONT, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGCONT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGTSTP, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGTSTP, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGTTIN, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGTTIN, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGTTOU, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGTTOU, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGURG, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGURG, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGXCPU, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGXCPU, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGXFSZ, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGXFSZ, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGVTALRM, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGVTALRM, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGPROF, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGPROF, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGWINCH, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGWINCH, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGIO, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGIO, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGPWR, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGPWR, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGSYS, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGSYS, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGRT_2, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGRT_2, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGRT_3, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGRT_3, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGRT_4, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGRT_4, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGRT_5, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGRT_5, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGRT_6, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGRT_6, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGRT_7, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGRT_7, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGRT_8, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGRT_8, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGRT_9, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGRT_9, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGRT_10, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGRT_10, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGRT_11, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGRT_11, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGRT_12, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGRT_12, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGRT_13, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGRT_13, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGRT_14, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGRT_14, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGRT_15, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGRT_15, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGRT_16, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGRT_16, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGRT_17, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGRT_17, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGRT_18, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGRT_18, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGRT_19, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGRT_19, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGRT_20, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGRT_20, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGRT_21, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGRT_21, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGRT_22, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGRT_22, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGRT_23, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGRT_23, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGRT_24, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGRT_24, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGRT_25, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGRT_25, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGRT_26, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGRT_26, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGRT_27, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [ 28.974151][ T28] audit: type=1400 audit(1751002612.392:64): avc: denied { execmem } for pid=290 comm="syz-executor252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [pid 292] rt_sigaction(SIGRT_27, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGRT_28, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGRT_28, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGRT_29, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGRT_29, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGRT_30, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGRT_30, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGRT_31, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGRT_31, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGRT_32, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGRT_32, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 292] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 292] execve("/bin/sh", ["sh", "-c", "mkswap ./swap-file"], 0x7ffc3c17e078 /* 10 vars */ [pid 290] <... clone3 resumed>) = 292 [pid 290] munmap(0x7f6727ef1000, 36864 [pid 292] <... execve resumed>) = 0 [pid 290] <... munmap resumed>) = 0 [pid 292] brk(NULL [pid 290] rt_sigprocmask(SIG_SETMASK, [CHLD], [pid 292] <... brk resumed>) = 0x562b4f23f000 [pid 290] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 292] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4a278db000 [pid 292] access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) [pid 292] openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 292] openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v3/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 292] newfstatat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v3/", 0x7ffdb50d1b60, 0) = -1 ENOENT (No such file or directory) [pid 292] openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v2/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 292] newfstatat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v2/", 0x7ffdb50d1b60, 0) = -1 ENOENT (No such file or directory) [pid 292] openat(AT_FDCWD, "/lib64/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = 3 [pid 292] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x38\x13\x0c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x09\x00\x40\x00\x19\x00\x18\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8\xf4\x00\x00"..., 832) = 832 [pid 292] fstat(3, {st_mode=S_IFREG|0644, st_size=792952, ...}) = 0 [pid 292] mmap(NULL, 792856, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f4a27819000 [pid 292] mmap(0x7f4a27829000, 548864, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x10000) = 0x7f4a27829000 [pid 292] mmap(0x7f4a278af000, 163840, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x96000) = 0x7f4a278af000 [pid 292] mmap(0x7f4a278d7000, 16384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xbe000) = 0x7f4a278d7000 [pid 292] close(3) = 0 [pid 292] openat(AT_FDCWD, "/lib64/libc.so.6", O_RDONLY|O_CLOEXEC) = 3 [pid 292] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\xf0\xab\x02\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x38\x22\x1d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0e\x00\x40\x00\x3b\x00\x3a\x00\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00"..., 832) = 832 [pid 292] pread64(3, "\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x1c\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00"..., 784, 64) = 784 [pid 292] fstat(3, {st_mode=S_IFREG|0755, st_size=1913080, ...}) = 0 [pid 292] pread64(3, "\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x1c\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00"..., 784, 64) = 784 [pid 292] mmap(NULL, 1965720, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f4a27639000 [pid 292] mmap(0x7f4a27661000, 1368064, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x28000) = 0x7f4a27661000 [pid 292] mmap(0x7f4a277af000, 356352, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x176000) = 0x7f4a277af000 [pid 292] mmap(0x7f4a27806000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1cc000) = 0x7f4a27806000 [pid 292] mmap(0x7f4a2780c000, 52888, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f4a2780c000 [pid 292] close(3) = 0 [pid 292] openat(AT_FDCWD, "/lib64/libpam.so.0", O_RDONLY|O_CLOEXEC) = 3 [pid 292] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xf8\xf0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1b\x00\x1a\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe0\x29\x00\x00"..., 832) = 832 [pid 292] fstat(3, {st_mode=S_IFREG|0755, st_size=63416, ...}) = 0 [pid 292] mmap(NULL, 65552, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f4a27628000 [pid 292] mmap(0x7f4a2762b000, 32768, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f4a2762b000 [pid 292] mmap(0x7f4a27633000, 16384, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7f4a27633000 [pid 292] mmap(0x7f4a27637000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xe000) = 0x7f4a27637000 [pid 292] close(3) = 0 [pid 292] openat(AT_FDCWD, "/lib64/libpam_misc.so.0", O_RDONLY|O_CLOEXEC) = 3 [pid 292] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x00\x51\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1a\x00\x19\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd8\x12\x00\x00"..., 832) = 832 [pid 292] fstat(3, {st_mode=S_IFREG|0755, st_size=22400, ...}) = 0 [pid 292] mmap(NULL, 24656, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f4a27621000 [pid 292] mmap(0x7f4a27623000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f4a27623000 [pid 292] mmap(0x7f4a27625000, 4096, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7f4a27625000 [pid 292] mmap(0x7f4a27626000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7f4a27626000 [pid 292] close(3) = 0 [pid 292] openat(AT_FDCWD, "/lib64/libresolv.so.2", O_RDONLY|O_CLOEXEC) = 3 [pid 292] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xa8\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0b\x00\x40\x00\x1d\x00\x1c\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x08\x27\x00\x00"..., 832) = 832 [pid 292] fstat(3, {st_mode=S_IFREG|0755, st_size=59624, ...}) = 0 [pid 292] mmap(NULL, 67720, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f4a27610000 [pid 292] mmap(0x7f4a27613000, 32768, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f4a27613000 [pid 292] mmap(0x7f4a2761b000, 8192, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7f4a2761b000 [pid 292] mmap(0x7f4a2761d000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xd000) = 0x7f4a2761d000 [pid 292] mmap(0x7f4a2761f000, 6280, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f4a2761f000 [pid 292] close(3) = 0 [pid 292] openat(AT_FDCWD, "/lib64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 292] openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v3/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 292] newfstatat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v3/", 0x7ffdb50d1ac0, 0) = -1 ENOENT (No such file or directory) [pid 292] openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v2/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 292] newfstatat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v2/", 0x7ffdb50d1ac0, 0) = -1 ENOENT (No such file or directory) [pid 292] openat(AT_FDCWD, "/usr/lib64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = 3 [pid 292] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x60\xd1\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0b\x00\x40\x00\x1d\x00\x1c\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x28\x74\x00\x00"..., 832) = 832 [pid 292] fstat(3, {st_mode=S_IFREG|0755, st_size=186528, ...}) = 0 [pid 292] mmap(NULL, 194256, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f4a275e0000 [pid 292] mmap(0x7f4a275e8000, 114688, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x8000) = 0x7f4a275e8000 [pid 292] mmap(0x7f4a27604000, 32768, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x24000) = 0x7f4a27604000 [pid 292] mmap(0x7f4a2760c000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2c000) = 0x7f4a2760c000 [pid 292] mmap(0x7f4a2760e000, 5840, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f4a2760e000 [pid 292] close(3) = 0 [pid 292] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4a275de000 [pid 292] openat(AT_FDCWD, "/lib64/libatomic.so.1", O_RDONLY|O_CLOEXEC) = 3 [pid 292] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x30\x71\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1b\x00\x1a\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x78\x1f\x00\x00"..., 832) = 832 [pid 292] fstat(3, {st_mode=S_IFREG|0755, st_size=30704, ...}) = 0 [pid 292] mmap(NULL, 37000, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f4a275d4000 [pid 292] mmap(0x7f4a275d6000, 12288, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f4a275d6000 [pid 292] mmap(0x7f4a275d9000, 8192, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5000) = 0x7f4a275d9000 [pid 292] mmap(0x7f4a275db000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6000) = 0x7f4a275db000 [pid 292] mmap(0x7f4a275dd000, 136, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f4a275dd000 [pid 292] close(3) = 0 [pid 292] openat(AT_FDCWD, "/lib64/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 292] openat(AT_FDCWD, "/usr/lib64/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = 3 [pid 292] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xf0\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1a\x00\x19\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8\x20\x00\x00"..., 832) = 832 [pid 292] fstat(3, {st_mode=S_IFREG|0755, st_size=395120, ...}) = 0 [pid 292] mmap(NULL, 397336, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f4a27572000 [pid 292] mmap(0x7f4a27575000, 225280, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f4a27575000 [pid 292] mmap(0x7f4a275ac000, 155648, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3a000) = 0x7f4a275ac000 [pid 292] mmap(0x7f4a275d2000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5f000) = 0x7f4a275d2000 [pid 292] close(3) = 0 [pid 292] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4a27570000 [pid 292] arch_prctl(ARCH_SET_FS, 0x7f4a27570c80) = 0 [pid 292] set_tid_address(0x7f4a27570f50) = 292 [pid 292] set_robust_list(0x7f4a27570f60, 24) = 0 [pid 292] rseq(0x7f4a27570ae0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) [pid 292] mprotect(0x7f4a27806000, 16384, PROT_READ) = 0 [pid 292] mprotect(0x7f4a275d2000, 4096, PROT_READ) = 0 [pid 292] mprotect(0x7f4a275db000, 4096, PROT_READ) = 0 [pid 292] mprotect(0x7f4a2760c000, 4096, PROT_READ) = 0 [pid 292] mprotect(0x7f4a2761d000, 4096, PROT_READ) = 0 [pid 292] mprotect(0x7f4a27637000, 4096, PROT_READ) = 0 [pid 292] mprotect(0x7f4a27626000, 4096, PROT_READ) = 0 [pid 292] mprotect(0x7f4a278d7000, 12288, PROT_READ) = 0 [pid 292] mprotect(0x562b17677000, 4096, PROT_READ) = 0 [pid 292] mprotect(0x7f4a27910000, 8192, PROT_READ) = 0 [pid 292] prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 [pid 292] statfs("/sys/fs/selinux", {f_type=SELINUX_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOSUID|ST_NOEXEC|ST_RELATIME}) = 0 [pid 292] statfs("/sys/fs/selinux", {f_type=SELINUX_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOSUID|ST_NOEXEC|ST_RELATIME}) = 0 [pid 292] getrandom("\x4a\xfc\x36\x6d\xda\xf5\x57\x5c", 8, GRND_NONBLOCK) = 8 [pid 292] brk(NULL) = 0x562b4f23f000 [pid 292] brk(0x562b4f260000) = 0x562b4f260000 [pid 292] access("/etc/selinux/config", F_OK) = 0 [pid 292] getpid() = 292 [pid 292] rt_sigaction(SIGCHLD, {sa_handler=0x7f4a2785c287, sa_mask=~[RTMIN RT_1], sa_flags=SA_RESTORER, sa_restorer=0x7f4a27678180}, NULL, 8) = 0 [pid 292] getppid() = 290 [pid 292] uname({sysname="Linux", nodename="syzkaller", ...}) = 0 [pid 292] newfstatat(AT_FDCWD, "/root", {st_mode=S_IFDIR|0700, st_size=4096, ...}, 0) = 0 [pid 292] newfstatat(AT_FDCWD, ".", {st_mode=S_IFDIR|0700, st_size=4096, ...}, 0) = 0 [pid 292] rt_sigaction(SIGINT, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGINT, {sa_handler=0x7f4a2785c287, sa_mask=~[RTMIN RT_1], sa_flags=SA_RESTORER, sa_restorer=0x7f4a27678180}, NULL, 8) = 0 [pid 292] rt_sigaction(SIGQUIT, NULL, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] rt_sigaction(SIGTERM, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 292] newfstatat(AT_FDCWD, "/bin/mkswap", 0x7ffdb50d2458, 0) = -1 ENOENT (No such file or directory) [pid 292] newfstatat(AT_FDCWD, "/sbin/mkswap", {st_mode=S_IFREG|0755, st_size=14256, ...}, 0) = 0 [pid 292] execve("/sbin/mkswap", ["mkswap", "./swap-file"], 0x562b4f23f6f0 /* 10 vars */) = 0 [pid 292] brk(NULL) = 0x56315cee4000 [pid 292] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1e9a035000 [pid 292] access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) [pid 292] openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 292] openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v3/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 292] newfstatat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v3/", 0x7ffedde12340, 0) = -1 ENOENT (No such file or directory) [pid 292] openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v2/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 292] newfstatat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v2/", 0x7ffedde12340, 0) = -1 ENOENT (No such file or directory) [pid 292] openat(AT_FDCWD, "/lib64/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = 3 [pid 292] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x38\x13\x0c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x09\x00\x40\x00\x19\x00\x18\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8\xf4\x00\x00"..., 832) = 832 [pid 292] fstat(3, {st_mode=S_IFREG|0644, st_size=792952, ...}) = 0 [pid 292] mmap(NULL, 792856, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f1e99f73000 [pid 292] mmap(0x7f1e99f83000, 548864, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x10000) = 0x7f1e99f83000 [pid 292] mmap(0x7f1e9a009000, 163840, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x96000) = 0x7f1e9a009000 [pid 292] mmap(0x7f1e9a031000, 16384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xbe000) = 0x7f1e9a031000 [pid 292] close(3) = 0 [pid 292] openat(AT_FDCWD, "/lib64/libc.so.6", O_RDONLY|O_CLOEXEC) = 3 [pid 292] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\xf0\xab\x02\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x38\x22\x1d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0e\x00\x40\x00\x3b\x00\x3a\x00\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00"..., 832) = 832 [pid 292] pread64(3, "\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x1c\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00"..., 784, 64) = 784 [pid 292] fstat(3, {st_mode=S_IFREG|0755, st_size=1913080, ...}) = 0 [pid 292] pread64(3, "\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x1c\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00"..., 784, 64) = 784 [pid 292] mmap(NULL, 1965720, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f1e99d93000 [pid 292] mmap(0x7f1e99dbb000, 1368064, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x28000) = 0x7f1e99dbb000 [pid 292] mmap(0x7f1e99f09000, 356352, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x176000) = 0x7f1e99f09000 [pid 292] mmap(0x7f1e99f60000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1cc000) = 0x7f1e99f60000 [pid 292] mmap(0x7f1e99f66000, 52888, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f1e99f66000 [pid 292] close(3) = 0 [pid 292] openat(AT_FDCWD, "/lib64/libpam.so.0", O_RDONLY|O_CLOEXEC) = 3 [pid 292] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xf8\xf0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1b\x00\x1a\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe0\x29\x00\x00"..., 832) = 832 [pid 292] fstat(3, {st_mode=S_IFREG|0755, st_size=63416, ...}) = 0 [pid 292] mmap(NULL, 65552, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f1e99d82000 [pid 292] mmap(0x7f1e99d85000, 32768, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f1e99d85000 [pid 292] mmap(0x7f1e99d8d000, 16384, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7f1e99d8d000 [pid 292] mmap(0x7f1e99d91000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xe000) = 0x7f1e99d91000 [pid 292] close(3) = 0 [pid 292] openat(AT_FDCWD, "/lib64/libpam_misc.so.0", O_RDONLY|O_CLOEXEC) = 3 [pid 292] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x00\x51\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1a\x00\x19\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd8\x12\x00\x00"..., 832) = 832 [pid 292] fstat(3, {st_mode=S_IFREG|0755, st_size=22400, ...}) = 0 [pid 292] mmap(NULL, 24656, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f1e99d7b000 [pid 292] mmap(0x7f1e99d7d000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f1e99d7d000 [pid 292] mmap(0x7f1e99d7f000, 4096, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7f1e99d7f000 [pid 292] mmap(0x7f1e99d80000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7f1e99d80000 [pid 292] close(3) = 0 [pid 292] openat(AT_FDCWD, "/lib64/libresolv.so.2", O_RDONLY|O_CLOEXEC) = 3 [pid 292] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xa8\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0b\x00\x40\x00\x1d\x00\x1c\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x08\x27\x00\x00"..., 832) = 832 [pid 292] fstat(3, {st_mode=S_IFREG|0755, st_size=59624, ...}) = 0 [pid 292] mmap(NULL, 67720, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f1e99d6a000 [pid 292] mmap(0x7f1e99d6d000, 32768, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f1e99d6d000 [pid 292] mmap(0x7f1e99d75000, 8192, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7f1e99d75000 [pid 292] mmap(0x7f1e99d77000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xd000) = 0x7f1e99d77000 [pid 292] mmap(0x7f1e99d79000, 6280, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f1e99d79000 [pid 292] close(3) = 0 [pid 292] openat(AT_FDCWD, "/lib64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 292] openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v3/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 292] newfstatat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v3/", 0x7ffedde122a0, 0) = -1 ENOENT (No such file or directory) [pid 292] openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v2/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 292] newfstatat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v2/", 0x7ffedde122a0, 0) = -1 ENOENT (No such file or directory) [pid 292] openat(AT_FDCWD, "/usr/lib64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = 3 [pid 292] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x60\xd1\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0b\x00\x40\x00\x1d\x00\x1c\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x28\x74\x00\x00"..., 832) = 832 [pid 292] fstat(3, {st_mode=S_IFREG|0755, st_size=186528, ...}) = 0 [pid 292] mmap(NULL, 194256, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f1e99d3a000 [pid 292] mmap(0x7f1e99d42000, 114688, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x8000) = 0x7f1e99d42000 [pid 292] mmap(0x7f1e99d5e000, 32768, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x24000) = 0x7f1e99d5e000 [pid 292] mmap(0x7f1e99d66000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2c000) = 0x7f1e99d66000 [pid 292] mmap(0x7f1e99d68000, 5840, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f1e99d68000 [pid 292] close(3) = 0 [pid 292] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1e99d38000 [pid 292] openat(AT_FDCWD, "/lib64/libatomic.so.1", O_RDONLY|O_CLOEXEC) = 3 [pid 292] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x30\x71\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1b\x00\x1a\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x78\x1f\x00\x00"..., 832) = 832 [pid 292] fstat(3, {st_mode=S_IFREG|0755, st_size=30704, ...}) = 0 [pid 292] mmap(NULL, 37000, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f1e99d2e000 [pid 292] mmap(0x7f1e99d30000, 12288, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f1e99d30000 [pid 292] mmap(0x7f1e99d33000, 8192, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5000) = 0x7f1e99d33000 [pid 292] mmap(0x7f1e99d35000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6000) = 0x7f1e99d35000 [pid 292] mmap(0x7f1e99d37000, 136, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f1e99d37000 [pid 292] close(3) = 0 [pid 292] openat(AT_FDCWD, "/lib64/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 292] openat(AT_FDCWD, "/usr/lib64/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = 3 [pid 292] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xf0\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1a\x00\x19\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8\x20\x00\x00"..., 832) = 832 [pid 292] fstat(3, {st_mode=S_IFREG|0755, st_size=395120, ...}) = 0 [pid 292] mmap(NULL, 397336, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f1e99ccc000 [pid 292] mmap(0x7f1e99ccf000, 225280, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f1e99ccf000 [pid 292] mmap(0x7f1e99d06000, 155648, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3a000) = 0x7f1e99d06000 [pid 292] mmap(0x7f1e99d2c000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5f000) = 0x7f1e99d2c000 [pid 292] close(3) = 0 [pid 292] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1e99cca000 [pid 292] arch_prctl(ARCH_SET_FS, 0x7f1e99ccac80) = 0 [pid 292] set_tid_address(0x7f1e99ccaf50) = 292 [pid 292] set_robust_list(0x7f1e99ccaf60, 24) = 0 [pid 292] rseq(0x7f1e99ccaae0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) [pid 292] mprotect(0x7f1e99f60000, 16384, PROT_READ) = 0 [pid 292] mprotect(0x7f1e99d2c000, 4096, PROT_READ) = 0 [pid 292] mprotect(0x7f1e99d35000, 4096, PROT_READ) = 0 [pid 292] mprotect(0x7f1e99d66000, 4096, PROT_READ) = 0 [pid 292] mprotect(0x7f1e99d77000, 4096, PROT_READ) = 0 [pid 292] mprotect(0x7f1e99d91000, 4096, PROT_READ) = 0 [pid 292] mprotect(0x7f1e99d80000, 4096, PROT_READ) = 0 [pid 292] mprotect(0x7f1e9a031000, 12288, PROT_READ) = 0 [pid 292] mprotect(0x56313a699000, 4096, PROT_READ) = 0 [pid 292] mprotect(0x7f1e9a06a000, 8192, PROT_READ) = 0 [pid 292] prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 [pid 292] statfs("/sys/fs/selinux", {f_type=SELINUX_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOSUID|ST_NOEXEC|ST_RELATIME}) = 0 [pid 292] statfs("/sys/fs/selinux", {f_type=SELINUX_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOSUID|ST_NOEXEC|ST_RELATIME}) = 0 [pid 292] getrandom("\x32\x03\x19\xd9\x3f\x0f\xbf\x6e", 8, GRND_NONBLOCK) = 8 [pid 292] brk(NULL) = 0x56315cee4000 [pid 292] brk(0x56315cf05000) = 0x56315cf05000 [pid 292] access("/etc/selinux/config", F_OK) = 0 [pid 292] openat(AT_FDCWD, "./swap-file", O_WRONLY) = 3 [pid 292] lseek(3, 0, SEEK_END) = 128000000 [pid 292] lseek(3, 0, SEEK_SET) = 0 [pid 292] fstat(1, {st_mode=S_IFIFO|0600, st_size=0, ...}) = 0 [pid 292] fstat(3, {st_mode=S_IFREG|0600, st_size=128000000, ...}) = 0 [pid 292] fgetxattr(3, "security.selinux", "\x72\x6f\x6f\x74\x3a\x6f\x62\x6a\x65\x63\x74\x5f\x72\x3a\x75\x73\x65\x72\x5f\x68\x6f\x6d\x65\x5f\x74\x00", 255) = 26 [pid 292] access("/var/run/setrans/.setrans-unix", F_OK) = -1 ENOENT (No such file or directory) [pid 292] futex(0x7f1e99d696b8, FUTEX_WAKE_PRIVATE, 2147483647) = 0 [pid 292] fsetxattr(3, "security.selinux", "\x72\x6f\x6f\x74\x3a\x6f\x62\x6a\x65\x63\x74\x5f\x72\x3a\x73\x77\x61\x70\x66\x69\x6c\x65\x5f\x74\x00", 25, 0) = 0 [pid 292] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1024) = 1024 [pid 292] write(3, "\x01\x00\x00\x00\x11\x7a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 516) = 516 [pid 292] lseek(3, 4086, SEEK_SET) = 4086 [pid 292] write(3, "SWAPSPACE2", 10) = 10 [ 29.151474][ T292] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.161044][ T28] audit: type=1400 audit(1751002612.572:65): avc: denied { relabelto } for pid=292 comm="mkswap" name="swap-file" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [pid 292] fsync(3) = 0 Setting up swapspace version 1, size = 127995904 bytes [pid 292] write(1, "Setting up swapspace version 1, size = 127995904 bytes\n", 55) = 55 [pid 292] exit_group(0) = ? [pid 292] +++ exited with 0 +++ rt_sigaction(SIGINT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 rt_sigaction(SIGQUIT, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=292, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [ 29.190195][ T28] audit: type=1400 audit(1751002612.572:66): avc: denied { write } for pid=292 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.223479][ T28] audit: type=1400 audit(1751002612.642:67): avc: denied { read } for pid=290 comm="syz-executor252" name="swap-file" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" swapon("./swap-file", SWAP_FLAG_PREFER|0) = 0 rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGSEGV, {sa_handler=0x7f6727f042d0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 rt_sigaction(SIGBUS, {sa_handler=0x7f6727f042d0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 293 attached , child_tidptr=0x5555951c7750) = 293 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 293] set_robust_list(0x5555951c7760, 24) = 0 ./strace-static-x86_64: Process 294 attached [pid 290] <... clone resumed>, child_tidptr=0x5555951c7750) = 294 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 294] set_robust_list(0x5555951c7760, 24 [pid 293] mkdir("./syzkaller.ahVIBb", 0700 [pid 294] <... set_robust_list resumed>) = 0 [pid 290] <... clone resumed>, child_tidptr=0x5555951c7750) = 295 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 294] mkdir("./syzkaller.YLvSjP", 0700 [pid 290] <... clone resumed>, child_tidptr=0x5555951c7750) = 296 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 295 attached , child_tidptr=0x5555951c7750) = 297 [pid 295] set_robust_list(0x5555951c7760, 24) = 0 [ 29.251813][ T28] audit: type=1400 audit(1751002612.642:68): avc: denied { open } for pid=290 comm="syz-executor252" path="/root/swap-file" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.251915][ T290] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [pid 294] <... mkdir resumed>) = 0 [pid 293] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 296 attached ./strace-static-x86_64: Process 297 attached [pid 294] chmod("./syzkaller.YLvSjP", 0777 [pid 293] chmod("./syzkaller.ahVIBb", 0777 [pid 296] set_robust_list(0x5555951c7760, 24 [pid 294] <... chmod resumed>) = 0 [pid 297] set_robust_list(0x5555951c7760, 24 [pid 296] <... set_robust_list resumed>) = 0 [pid 295] mkdir("./syzkaller.XKiAWF", 0700 [pid 294] chdir("./syzkaller.YLvSjP" [pid 293] <... chmod resumed>) = 0 [pid 297] <... set_robust_list resumed>) = 0 [pid 294] <... chdir resumed>) = 0 [pid 294] unshare(CLONE_NEWPID [pid 296] mkdir("./syzkaller.Njyq8V", 0700 [pid 294] <... unshare resumed>) = 0 [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 296] <... mkdir resumed>) = 0 [pid 294] <... clone resumed>, child_tidptr=0x5555951c7750) = 298 [pid 296] chmod("./syzkaller.Njyq8V", 0777 [pid 293] chdir("./syzkaller.ahVIBb") = 0 [pid 293] unshare(CLONE_NEWPID) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 298 attached [pid 297] getrandom( [pid 296] <... chmod resumed>) = 0 [pid 293] <... clone resumed>, child_tidptr=0x5555951c7750) = 299 [pid 297] <... getrandom resumed>"\x05\x34\x31\xbe\x31\xcd\x20\x53", 8, GRND_NONBLOCK) = 8 [pid 296] chdir("./syzkaller.Njyq8V" [pid 298] set_robust_list(0x5555951c7760, 24./strace-static-x86_64: Process 299 attached [pid 299] set_robust_list(0x5555951c7760, 24 [pid 296] <... chdir resumed>) = 0 [pid 299] <... set_robust_list resumed>) = 0 [pid 296] unshare(CLONE_NEWPID [pid 297] mkdir("./syzkaller.lRAr9b", 0700 [pid 299] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 299] getppid() = 0 [pid 299] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 296] <... unshare resumed>) = 0 [pid 299] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 299] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 299] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 299] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 299] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 296] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 299] <... prlimit64 resumed>NULL) = 0 [pid 299] unshare(CLONE_NEWNS) = 0 [pid 299] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL./strace-static-x86_64: Process 300 attached ) = 0 [pid 298] <... set_robust_list resumed>) = 0 [pid 297] <... mkdir resumed>) = 0 [pid 295] <... mkdir resumed>) = 0 [pid 296] <... clone resumed>, child_tidptr=0x5555951c7750) = 300 [pid 297] chmod("./syzkaller.lRAr9b", 0777) = 0 [pid 297] chdir("./syzkaller.lRAr9b") = 0 [pid 297] unshare(CLONE_NEWPID) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 301 [pid 298] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 298] getppid() = 0 [pid 298] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 298] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 298] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 298] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 298] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 298] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 298] unshare(CLONE_NEWNS) = 0 [pid 295] chmod("./syzkaller.XKiAWF", 0777) = 0 [pid 295] chdir("./syzkaller.XKiAWF") = 0 [pid 295] unshare(CLONE_NEWPID) = 0 [pid 298] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 298] unshare(CLONE_NEWIPC) = -1 EINVAL (Invalid argument) [pid 298] unshare(CLONE_NEWCGROUP) = 0 [pid 298] unshare(CLONE_NEWUTS) = 0 [pid 298] unshare(CLONE_SYSVSEM) = 0 [pid 298] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 298] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 298] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 298] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 295] <... clone resumed>, child_tidptr=0x5555951c7750) = 302 [pid 298] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 298] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 298] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 298] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 298] getpid() = 1 [pid 298] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 300] set_robust_list(0x5555951c7760, 24 [pid 299] unshare(CLONE_NEWIPC) = -1 EINVAL (Invalid argument) [pid 300] <... set_robust_list resumed>) = 0 [pid 299] unshare(CLONE_NEWCGROUP [pid 300] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 299] <... unshare resumed>) = 0 [pid 299] unshare(CLONE_NEWUTS) = 0 [pid 299] unshare(CLONE_SYSVSEM) = 0 [pid 300] <... prctl resumed>) = 0 [pid 299] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 300] getppid() = 0 [pid 300] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 299] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 300] <... prlimit64 resumed>NULL) = 0 [pid 300] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 300] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 300] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 300] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 300] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 299] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 300] <... prlimit64 resumed>NULL) = 0 [pid 299] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 300] unshare(CLONE_NEWNS [pid 299] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 301 attached ) = -1 ENOENT (No such file or directory) [pid 300] <... unshare resumed>) = 0 [pid 301] set_robust_list(0x5555951c7760, 24 [pid 299] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 301] <... set_robust_list resumed>) = 0 [pid 299] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 300] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 301] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 300] <... mount resumed>) = 0 [pid 299] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 300] unshare(CLONE_NEWIPC [pid 299] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 300] <... unshare resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 302 attached [pid 301] <... prctl resumed>) = 0 [pid 300] unshare(CLONE_NEWCGROUP) = 0 [pid 299] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 300] unshare(CLONE_NEWUTS [pid 302] set_robust_list(0x5555951c7760, 24 [pid 301] getppid( [pid 300] <... unshare resumed>) = 0 [pid 302] <... set_robust_list resumed>) = 0 [pid 301] <... getppid resumed>) = 0 [pid 299] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 302] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 301] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 302] <... prctl resumed>) = 0 [pid 300] unshare(CLONE_SYSVSEM) = 0 [pid 300] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 299] getpid( [pid 302] getppid( [pid 301] <... prlimit64 resumed>NULL) = 0 [pid 300] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 299] <... getpid resumed>) = 1 [pid 300] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 299] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 300] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 299] <... capget resumed>{effective=1<) = 0 [pid 301] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 300] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 299] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 300] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 299] <... capset resumed>) = 0 [pid 302] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 301] <... prlimit64 resumed>NULL) = 0 [pid 302] <... prlimit64 resumed>NULL) = 0 [pid 301] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 300] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 299] unshare(CLONE_NEWNET [pid 302] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 301] <... prlimit64 resumed>NULL) = 0 [pid 300] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 302] <... prlimit64 resumed>NULL) = 0 [pid 301] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 302] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 301] <... prlimit64 resumed>NULL) = 0 [pid 300] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 302] <... prlimit64 resumed>NULL) = 0 [pid 301] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 302] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 301] <... prlimit64 resumed>NULL) = 0 [pid 300] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 302] <... prlimit64 resumed>NULL) = 0 [pid 301] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 302] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 301] <... prlimit64 resumed>NULL) = 0 [pid 300] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 302] <... prlimit64 resumed>NULL) = 0 [pid 301] unshare(CLONE_NEWNS [pid 302] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 301] <... unshare resumed>) = 0 [pid 300] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 302] <... prlimit64 resumed>NULL) = 0 [pid 301] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 302] unshare(CLONE_NEWNS [pid 301] <... mount resumed>) = 0 [pid 300] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 302] <... unshare resumed>) = 0 [pid 301] unshare(CLONE_NEWIPC [pid 302] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 301] <... unshare resumed>) = -1 EINVAL (Invalid argument) [pid 300] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 302] <... mount resumed>) = 0 [pid 301] unshare(CLONE_NEWCGROUP [pid 302] unshare(CLONE_NEWIPC [pid 301] <... unshare resumed>) = 0 [pid 300] getpid( [pid 302] <... unshare resumed>) = -1 EINVAL (Invalid argument) [pid 301] unshare(CLONE_NEWUTS [pid 302] unshare(CLONE_NEWCGROUP [pid 301] <... unshare resumed>) = 0 [pid 300] <... getpid resumed>) = 1 [pid 302] <... unshare resumed>) = 0 [pid 301] unshare(CLONE_SYSVSEM [pid 300] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 302] unshare(CLONE_NEWUTS [pid 301] <... unshare resumed>) = 0 [pid 300] <... capget resumed>{effective=1<) = 0 [pid 301] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 300] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 302] unshare(CLONE_SYSVSEM [pid 301] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 300] <... capset resumed>) = 0 [pid 302] <... unshare resumed>) = 0 [pid 301] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 300] unshare(CLONE_NEWNET [pid 302] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 301] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 302] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 301] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 302] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 301] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 302] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 301] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 302] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 301] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 302] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 301] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 302] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 301] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 302] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 301] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 302] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 301] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 302] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 301] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 302] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 301] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 302] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 301] getpid( [pid 302] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 301] <... getpid resumed>) = 1 [pid 302] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 301] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 302] getpid( [pid 301] <... capget resumed>{effective=1<) = 1 [pid 301] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 302] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 301] <... capset resumed>) = 0 [pid 302] <... capget resumed>{effective=1< [pid 302] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 298] <... unshare resumed>) = 0 [pid 302] <... capset resumed>) = 0 [ 29.299944][ T28] audit: type=1400 audit(1751002612.712:69): avc: denied { mounton } for pid=299 comm="syz-executor252" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [pid 302] unshare(CLONE_NEWNET [pid 298] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3 [pid 298] write(3, "0 65535", 7) = 7 [pid 298] close(3) = 0 [pid 298] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3 [pid 298] write(3, "100000", 6) = 6 [pid 298] close(3) = 0 [pid 298] mkdir("./syz-tmp", 0777 [pid 299] <... unshare resumed>) = 0 [pid 298] <... mkdir resumed>) = 0 [pid 298] mount("", "./syz-tmp", "tmpfs", 0, NULL) = 0 [pid 298] mkdir("./syz-tmp/newroot", 0777) = 0 [pid 298] mkdir("./syz-tmp/newroot/dev", 0700) = 0 [pid 298] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 298] mkdir("./syz-tmp/newroot/proc", 0700) = 0 [pid 298] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL) = 0 [pid 298] mkdir("./syz-tmp/newroot/selinux", 0700) = 0 [pid 298] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 298] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 298] mkdir("./syz-tmp/newroot/sys", 0700) = 0 [pid 298] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 298] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 298] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 298] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 298] mkdir("./syz-tmp/newroot/syz-inputs", 0700) = 0 [pid 298] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 298] mkdir("./syz-tmp/pivot", 0777) = 0 [pid 298] pivot_root("./syz-tmp", "./syz-tmp/pivot") = 0 [pid 298] chdir("/") = 0 [pid 298] umount2("./pivot", MNT_DETACH [pid 302] <... unshare resumed>) = 0 [pid 302] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3 [pid 302] write(3, "0 65535", 7) = 7 [pid 302] close(3) = 0 [pid 302] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3 [pid 302] write(3, "100000", 6) = 6 [pid 302] close(3) = 0 [pid 302] mkdir("./syz-tmp", 0777) = 0 [pid 302] mount("", "./syz-tmp", "tmpfs", 0, NULL) = 0 [pid 302] mkdir("./syz-tmp/newroot", 0777) = 0 [pid 302] mkdir("./syz-tmp/newroot/dev", 0700) = 0 [pid 302] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 302] mkdir("./syz-tmp/newroot/proc", 0700) = 0 [pid 302] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL) = 0 [pid 302] mkdir("./syz-tmp/newroot/selinux", 0700) = 0 [pid 302] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 302] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 302] mkdir("./syz-tmp/newroot/sys", 0700) = 0 [pid 302] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 302] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 302] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 302] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 302] mkdir("./syz-tmp/newroot/syz-inputs", 0700) = 0 [pid 302] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 302] mkdir("./syz-tmp/pivot", 0777) = 0 [pid 302] pivot_root("./syz-tmp", "./syz-tmp/pivot") = 0 [pid 302] chdir("/") = 0 [pid 302] umount2("./pivot", MNT_DETACH [pid 299] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3 [pid 299] write(3, "0 65535", 7) = 7 [pid 299] close(3) = 0 [pid 299] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3 [pid 299] write(3, "100000", 6) = 6 [pid 299] close(3) = 0 [pid 299] mkdir("./syz-tmp", 0777) = 0 [pid 299] mount("", "./syz-tmp", "tmpfs", 0, NULL) = 0 [pid 299] mkdir("./syz-tmp/newroot", 0777) = 0 [pid 299] mkdir("./syz-tmp/newroot/dev", 0700) = 0 [pid 299] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 299] mkdir("./syz-tmp/newroot/proc", 0700) = 0 [pid 299] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL) = 0 [pid 299] mkdir("./syz-tmp/newroot/selinux", 0700) = 0 [pid 299] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 299] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 299] mkdir("./syz-tmp/newroot/sys", 0700) = 0 [pid 299] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 299] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 298] <... umount2 resumed>) = 0 [pid 298] chroot("./newroot") = 0 [pid 298] chdir("/") = 0 [pid 298] mkdir("/dev/gadgetfs", 0777) = 0 [pid 298] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL [pid 300] <... unshare resumed>) = 0 [pid 299] <... mount resumed>) = 0 [pid 301] <... unshare resumed>) = 0 [pid 298] <... mount resumed>) = -1 ENODEV (No such device) [pid 298] mkdir("/dev/binderfs", 0777) = 0 [pid 298] mount("binder", "/dev/binderfs", "binder", 0, NULL) = 0 [pid 301] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3 [pid 301] write(3, "0 65535", 7) = 7 [pid 301] close(3) = 0 [pid 301] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3 [pid 301] write(3, "100000", 6) = 6 [ 29.392148][ T28] audit: type=1400 audit(1751002612.802:70): avc: denied { mounton } for pid=298 comm="syz-executor252" path="/root/syzkaller.YLvSjP/syz-tmp" dev="sda1" ino=2030 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 29.419124][ T298] request_module fs-gadgetfs succeeded, but still no fs? [pid 301] close(3) = 0 [pid 301] mkdir("./syz-tmp", 0777) = 0 [pid 301] mount("", "./syz-tmp", "tmpfs", 0, NULL) = 0 [pid 301] mkdir("./syz-tmp/newroot", 0777) = 0 [pid 298] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 301] mkdir("./syz-tmp/newroot/dev", 0700) = 0 [pid 301] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 301] mkdir("./syz-tmp/newroot/proc", 0700) = 0 [pid 301] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL [pid 302] <... umount2 resumed>) = 0 [pid 300] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 299] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 302] chroot("./newroot") = 0 [pid 302] chdir("/") = 0 [pid 302] mkdir("/dev/gadgetfs", 0777) = -1 EEXIST (File exists) [pid 302] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL) = -1 ENODEV (No such device) [pid 302] mkdir("/dev/binderfs", 0777) = -1 EEXIST (File exists) [pid 302] mount("binder", "/dev/binderfs", "binder", 0, NULL) = 0 [pid 302] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 302] mkdir("./0", 0777) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 2 [pid 301] <... mount resumed>) = 0 [pid 298] mkdir("./0", 0777) = 0 [pid 301] mkdir("./syz-tmp/newroot/selinux", 0700) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 301] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 301] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 301] mkdir("./syz-tmp/newroot/sys", 0700) = 0 [pid 301] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 298] <... clone resumed>, child_tidptr=0x5555951c7750) = 2 [pid 301] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 301] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 301] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 301] mkdir("./syz-tmp/newroot/syz-inputs", 0700) = 0 [pid 301] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 301] mkdir("./syz-tmp/pivot", 0777) = 0 [pid 301] pivot_root("./syz-tmp", "./syz-tmp/pivot") = 0 [pid 301] chdir("/") = 0 [pid 301] umount2("./pivot", MNT_DETACH./strace-static-x86_64: Process 304 attached [pid 304] set_robust_list(0x5555951c7760, 24) = 0 [pid 304] chdir("./0") = 0 [pid 304] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 304] setpgid(0, 0) = 0 [pid 304] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 304] write(3, "1000", 4) = 4 [pid 304] close(3) = 0 ./strace-static-x86_64: Process 303 attached [pid 301] <... umount2 resumed>) = 0 [pid 300] <... openat resumed>) = 3 [pid 299] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 300] write(3, "0 65535", 7 [pid 299] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 300] <... write resumed>) = 7 [pid 299] <... mount resumed>) = 0 [pid 300] close(3) = 0 [pid 300] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC [pid 299] mkdir("./syz-tmp/newroot/syz-inputs", 0700 [pid 300] <... openat resumed>) = 3 [pid 299] <... mkdir resumed>) = 0 [pid 300] write(3, "100000", 6 [pid 299] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 300] <... write resumed>) = 6 [pid 299] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 300] close(3 [pid 299] mkdir("./syz-tmp/pivot", 0777 [pid 300] <... close resumed>) = 0 [pid 299] <... mkdir resumed>) = 0 [pid 300] mkdir("./syz-tmp", 0777 [pid 299] pivot_root("./syz-tmp", "./syz-tmp/pivot" [pid 300] <... mkdir resumed>) = 0 [pid 299] <... pivot_root resumed>) = 0 [pid 300] mount("", "./syz-tmp", "tmpfs", 0, NULL [pid 299] chdir("/" [pid 300] <... mount resumed>) = 0 [pid 299] <... chdir resumed>) = 0 [pid 300] mkdir("./syz-tmp/newroot", 0777 [pid 299] umount2("./pivot", MNT_DETACH [pid 300] <... mkdir resumed>) = 0 [pid 300] mkdir("./syz-tmp/newroot/dev", 0700) = 0 [pid 300] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 300] mkdir("./syz-tmp/newroot/proc", 0700) = 0 [pid 300] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL) = 0 [pid 300] mkdir("./syz-tmp/newroot/selinux", 0700) = 0 [pid 300] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 300] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 300] mkdir("./syz-tmp/newroot/sys", 0700) = 0 [pid 300] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 300] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 300] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 301] chroot("./newroot" [pid 300] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 301] <... chroot resumed>) = 0 [pid 300] <... mount resumed>) = 0 [pid 301] chdir("/") = 0 [pid 301] mkdir("/dev/gadgetfs", 0777) = -1 EEXIST (File exists) [pid 301] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL) = -1 ENODEV (No such device) [pid 301] mkdir("/dev/binderfs", 0777 [pid 300] mkdir("./syz-tmp/newroot/syz-inputs", 0700 [pid 301] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 300] <... mkdir resumed>) = 0 [pid 301] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 300] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 301] <... mount resumed>) = 0 [pid 300] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 300] mkdir("./syz-tmp/pivot", 0777) = 0 [pid 300] pivot_root("./syz-tmp", "./syz-tmp/pivot") = 0 [pid 300] chdir("/") = 0 [pid 301] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 300] umount2("./pivot", MNT_DETACH [pid 301] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 301] mkdir("./0", 0777) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 2 [pid 304] symlink("/dev/binderfs", "./binderfs") = 0 [pid 303] set_robust_list(0x5555951c7760, 24) = 0 [pid 303] chdir("./0") = 0 [ 29.425811][ T28] audit: type=1400 audit(1751002612.802:71): avc: denied { mount } for pid=298 comm="syz-executor252" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 29.450114][ T28] audit: type=1400 audit(1751002612.802:72): avc: denied { mounton } for pid=298 comm="syz-executor252" path="/root/syzkaller.YLvSjP/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [pid 303] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 304] write(1, "executing program\n", 18 [pid 303] setpgid(0, 0executing program [pid 304] <... write resumed>) = 18 [pid 304] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] <... setpgid resumed>) = 0 [pid 303] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 304] <... futex resumed>) = 0 [pid 304] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 304] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 304] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 303] <... openat resumed>) = 3 [pid 304] <... mmap resumed>) = 0x7f6727ed9000 [pid 304] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 304] rt_sigprocmask(SIG_BLOCK, ~[], [pid 303] write(3, "1000", 4) = 4 [pid 303] close(3) = 0 [pid 303] symlink("/dev/binderfs", "./binderfs") = 0 [pid 304] <... rt_sigprocmask resumed>[], 8) = 0 [pid 304] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0}./strace-static-x86_64: Process 305 attached ./strace-static-x86_64: Process 306 attached [pid 303] write(1, "executing program\n", 18executing program [pid 300] <... umount2 resumed>) = 0 [pid 299] <... umount2 resumed>) = 0 [pid 305] set_robust_list(0x5555951c7760, 24 [pid 304] <... clone3 resumed> => {parent_tid=[3]}, 88) = 3 [pid 303] <... write resumed>) = 18 [pid 305] <... set_robust_list resumed>) = 0 [pid 304] rt_sigprocmask(SIG_SETMASK, [], [pid 303] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] chdir("./0" [pid 304] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 303] <... futex resumed>) = 0 [pid 305] <... chdir resumed>) = 0 [pid 304] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, [pid 305] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 304] <... futex resumed>) = 0 [pid 303] <... rt_sigaction resumed>NULL, 8) = 0 [pid 305] <... prctl resumed>) = 0 [pid 304] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 303] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 305] setpgid(0, 0 [pid 303] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 305] <... setpgid resumed>) = 0 [pid 303] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 305] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 303] <... mmap resumed>) = 0x7f6727ed9000 [pid 299] chroot("./newroot" [pid 306] set_robust_list(0x7f6727ef99a0, 24 [pid 305] <... openat resumed>) = 3 [pid 303] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE [pid 300] chroot("./newroot" [pid 306] <... set_robust_list resumed>) = 0 [pid 305] write(3, "1000", 4 [pid 303] <... mprotect resumed>) = 0 [pid 299] <... chroot resumed>) = 0 [pid 306] rt_sigprocmask(SIG_SETMASK, [], [pid 305] <... write resumed>) = 4 [pid 303] rt_sigprocmask(SIG_BLOCK, ~[], [pid 306] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 305] close(3 [pid 303] <... rt_sigprocmask resumed>[], 8) = 0 [pid 306] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0 [pid 305] <... close resumed>) = 0 [pid 303] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} [pid 306] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 305] symlink("/dev/binderfs", "./binderfs" [pid 306] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... symlink resumed>) = 0 [pid 303] <... clone3 resumed> => {parent_tid=[3]}, 88) = 3 executing program [pid 306] <... futex resumed>) = 1 [pid 305] write(1, "executing program\n", 18 [pid 304] <... futex resumed>) = 0 [pid 303] rt_sigprocmask(SIG_SETMASK, [], [pid 306] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 305] <... write resumed>) = 18 [pid 304] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 306] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 305] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] <... futex resumed>) = 0 [pid 303] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 305] <... futex resumed>) = 0 [pid 304] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 303] <... futex resumed>) = 0 ./strace-static-x86_64: Process 307 attached [pid 306] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 305] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, [pid 303] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 300] <... chroot resumed>) = 0 [pid 299] chdir("/" [pid 306] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... rt_sigaction resumed>NULL, 8) = 0 [pid 306] <... futex resumed>) = 1 [pid 305] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 304] <... futex resumed>) = 0 [pid 306] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 305] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 304] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 305] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 304] <... futex resumed>) = 0 [pid 306] socketpair(AF_UNIX, SOCK_STREAM, 0, [pid 305] <... mmap resumed>) = 0x7f6727ed9000 [pid 304] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... socketpair resumed>NULL) = -1 EFAULT (Bad address) [pid 305] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE [pid 306] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... mprotect resumed>) = 0 [pid 306] <... futex resumed>) = 1 [pid 305] rt_sigprocmask(SIG_BLOCK, ~[], [pid 304] <... futex resumed>) = 0 [pid 300] chdir("/" [pid 306] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 305] <... rt_sigprocmask resumed>[], 8) = 0 [pid 304] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... chdir resumed>) = 0 [pid 306] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 305] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} [pid 304] <... futex resumed>) = 0 [pid 306] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 304] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 307] set_robust_list(0x7f6727ef99a0, 24 [pid 306] <... openat resumed>) = 3 [pid 300] <... chdir resumed>) = 0 [pid 299] mkdir("/dev/gadgetfs", 0777 [pid 306] ioctl(3, USB_RAW_IOCTL_INIT [pid 305] <... clone3 resumed> => {parent_tid=[3]}, 88) = 3 [pid 306] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 300] mkdir("/dev/gadgetfs", 0777 [pid 306] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 307] <... set_robust_list resumed>) = 0 [pid 306] <... ioctl resumed>, 0) = 0 [pid 305] rt_sigprocmask(SIG_SETMASK, [], [pid 300] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 299] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 306] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 306] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH./strace-static-x86_64: Process 308 attached [pid 308] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 308] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 308] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 307] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 307] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 307] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] <... futex resumed>) = 0 [pid 303] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 299] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL [pid 303] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] <... futex resumed>) = 1 [pid 300] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL [pid 305] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 299] <... mount resumed>) = -1 ENODEV (No such device) [pid 305] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... mount resumed>) = -1 ENODEV (No such device) [pid 299] mkdir("/dev/binderfs", 0777 [pid 305] <... futex resumed>) = 1 [pid 300] mkdir("/dev/binderfs", 0777 [pid 299] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 305] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 300] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 299] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 300] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 308] <... futex resumed>) = 0 [pid 308] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 308] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... mount resumed>) = 0 [pid 308] <... futex resumed>) = 1 [pid 307] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 305] <... futex resumed>) = 0 [pid 300] <... mount resumed>) = 0 [pid 299] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 305] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 305] <... futex resumed>) = 0 [pid 299] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 305] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 300] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 300] mkdir("./0", 0777 [pid 299] mkdir("./0", 0777 [pid 308] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 300] <... mkdir resumed>) = 0 [pid 299] <... mkdir resumed>) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 308] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 307] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] <... futex resumed>) = 0 [pid 303] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 303] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] <... futex resumed>) = 1 [pid 307] <... futex resumed>) = 1 [pid 308] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 305] <... futex resumed>) = 0 [pid 300] <... clone resumed>, child_tidptr=0x5555951c7750) = 2 [pid 305] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... clone resumed>, child_tidptr=0x5555951c7750) = 2 [pid 305] <... futex resumed>) = 0 [pid 305] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] socketpair(AF_UNIX, SOCK_STREAM, 0, [pid 308] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 307] <... socketpair resumed>NULL) = -1 EFAULT (Bad address) [pid 308] socketpair(AF_UNIX, SOCK_STREAM, 0, [pid 307] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... socketpair resumed>NULL) = -1 EFAULT (Bad address) [pid 308] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... futex resumed>) = 1 [pid 303] <... futex resumed>) = 0 [pid 308] <... futex resumed>) = 1 [pid 307] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 303] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... futex resumed>) = 0 [pid 308] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 307] <... openat resumed>) = 3 [pid 305] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] <... futex resumed>) = 0 [pid 308] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 307] ioctl(3, USB_RAW_IOCTL_INIT [pid 305] <... futex resumed>) = 0 [pid 303] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 308] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 307] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 305] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000}executing program [pid 308] <... openat resumed>) = 3 [pid 307] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 308] ioctl(3, USB_RAW_IOCTL_INIT [pid 307] <... ioctl resumed>, 0) = 0 [pid 308] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 307] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 308] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 307] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 308] <... ioctl resumed>, 0) = 0 [pid 307] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 308] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 308] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH./strace-static-x86_64: Process 310 attached [pid 310] set_robust_list(0x5555951c7760, 24) = 0 [pid 310] chdir("./0") = 0 [pid 310] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 310] setpgid(0, 0) = 0 [pid 310] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 310] write(3, "1000", 4) = 4 [pid 310] close(3) = 0 [pid 310] symlink("/dev/binderfs", "./binderfs") = 0 [pid 310] write(1, "executing program\n", 18) = 18 [pid 310] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 310] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 310] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 310] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 310] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 310] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 310] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0}./strace-static-x86_64: Process 311 attached [pid 311] set_robust_list(0x5555951c7760, 24) = 0 [pid 310] <... clone3 resumed> => {parent_tid=[3]}, 88) = 3 [pid 310] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 310] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 310] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 311] chdir("./0") = 0 [pid 311] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 ./strace-static-x86_64: Process 317 attached [pid 317] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 311] setpgid(0, 0) = 0 [pid 311] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 317] rt_sigprocmask(SIG_SETMASK, [], [pid 311] <... openat resumed>) = 3 [pid 311] write(3, "1000", 4) = 4 [pid 311] close(3) = 0 [pid 311] symlink("/dev/binderfs", "./binderfs" [pid 317] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 311] <... symlink resumed>) = 0 [pid 311] write(1, "executing program\n", 18 [pid 317] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) executing program [pid 311] <... write resumed>) = 18 [pid 317] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 317] <... futex resumed>) = 1 [pid 310] <... futex resumed>) = 0 [pid 310] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 311] <... futex resumed>) = 0 [pid 311] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, [pid 310] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 311] <... rt_sigaction resumed>NULL, 8) = 0 [pid 317] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 311] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 317] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 311] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 317] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 317] <... futex resumed>) = 1 [pid 310] <... futex resumed>) = 0 [pid 311] <... mmap resumed>) = 0x7f6727ed9000 [pid 311] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE [pid 310] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 311] <... mprotect resumed>) = 0 [pid 310] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 317] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 311] rt_sigprocmask(SIG_BLOCK, ~[], [pid 317] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] <... rt_sigprocmask resumed>[], 8) = 0 [pid 317] <... futex resumed>) = 1 [pid 311] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} [pid 310] <... futex resumed>) = 0 [pid 317] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 310] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 317] <... openat resumed>) = 3 [pid 311] <... clone3 resumed> => {parent_tid=[3]}, 88) = 3 [pid 310] <... futex resumed>) = 0 [pid 317] ioctl(3, USB_RAW_IOCTL_INIT [pid 311] rt_sigprocmask(SIG_SETMASK, [], [pid 310] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 317] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 311] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 317] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 311] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 317] <... ioctl resumed>, 0) = 0 [pid 311] <... futex resumed>) = 0 [pid 311] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 317] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 317] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH./strace-static-x86_64: Process 318 attached [pid 318] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 318] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 318] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 318] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 311] <... futex resumed>) = 0 [pid 311] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 311] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 318] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 318] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 311] <... futex resumed>) = 0 [pid 311] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 311] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 318] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 318] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 311] <... futex resumed>) = 0 [pid 311] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 311] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 318] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 318] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 318] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 318] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 29.476998][ T28] audit: type=1400 audit(1751002612.802:73): avc: denied { mount } for pid=298 comm="syz-executor252" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [pid 318] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 306] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 306] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 306] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 307] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 307] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 307] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 317] <... ioctl resumed>, 0x7f6727ef8120) = 0 [ 29.772247][ T39] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 29.792169][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 29.802279][ T315] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 29.810139][ T313] usb 5-1: new high-speed USB device number 2 using dummy_hcd [pid 317] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 318] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 318] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 308] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 318] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 308] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 318] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 308] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 308] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [ 29.819466][ T319] usb 1-1: new high-speed USB device number 2 using dummy_hcd [pid 317] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 306] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 306] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 306] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 306] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 306] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 306] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 306] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 306] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 306] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 306] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 306] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 306] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 306] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 306] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [ 29.954698][ T39] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.967024][ T39] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 29.980707][ T39] usb 2-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 29.990786][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.998980][ T39] usb 2-1: Product: syz [pid 306] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 318] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 317] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 307] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 308] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 307] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 318] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 317] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 308] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 318] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 317] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 308] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 307] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 318] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 317] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 308] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 307] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 318] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 317] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 308] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 307] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 318] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 317] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 308] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 307] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 318] <... ioctl resumed>, 0x7f6727ef7110) = 9 [pid 317] <... ioctl resumed>, 0x7f6727ef7110) = 9 [pid 308] <... ioctl resumed>, 0x7f6727ef7110) = 9 [pid 318] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 317] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 308] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 307] <... ioctl resumed>, 0x7f6727ef7110) = 9 [pid 307] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 318] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 317] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 308] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 307] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 318] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 317] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 308] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 307] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 306] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 317] <... ioctl resumed>, 0x7f6727ef7110) = 100 [pid 306] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW [pid 317] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 306] <... ioctl resumed>, 0) = 0 [pid 306] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 306] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 306] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 308] <... ioctl resumed>, 0x7f6727ef7110) = 100 [pid 307] <... ioctl resumed>, 0x7f6727ef7110) = 100 [pid 306] <... ioctl resumed>, 0x7f6727ef7110) = 0 [pid 308] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 307] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 318] <... ioctl resumed>, 0x7f6727ef7110) = 100 [ 30.003516][ T39] usb 2-1: Manufacturer: syz [ 30.009137][ T39] usb 2-1: SerialNumber: syz [ 30.022737][ T315] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.035707][ T313] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.049007][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.061376][ T319] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.073492][ T319] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 30.085473][ T24] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [pid 318] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 317] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 308] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 307] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 318] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 307] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 317] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 308] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 307] <... ioctl resumed>, 0x7f6727ef7110) = 4 [pid 318] <... ioctl resumed>, 0x7f6727ef7110) = 4 [pid 318] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 317] <... ioctl resumed>, 0x7f6727ef7110) = 4 [pid 308] <... ioctl resumed>, 0x7f6727ef7110) = 4 [pid 307] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 318] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 317] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 308] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 307] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 318] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 317] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 307] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 318] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 317] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 308] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 318] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 317] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 308] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 307] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 318] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 317] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 308] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 318] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 317] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 308] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 307] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 318] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 317] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 308] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 318] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 317] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 308] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 307] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 318] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 317] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 308] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 307] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 318] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 317] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 308] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 318] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 317] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 308] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 307] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 318] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 308] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 307] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 307] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 308] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 317] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 308] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 307] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 317] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [ 30.096720][ T315] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 30.107557][ T313] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 30.132477][ T319] usb 1-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 30.143392][ T313] usb 5-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 30.154520][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 30.164327][ T315] usb 4-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 30.173937][ T319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.183332][ T315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.191653][ T315] usb 4-1: Product: syz [ 30.196023][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [pid 307] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 306] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 304] <... futex resumed>) = 0 [pid 306] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 304] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 304] <... futex resumed>) = 0 [pid 306] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 304] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 306] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 306] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [ 30.205134][ T313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.214345][ T319] usb 1-1: Product: syz [ 30.218563][ T319] usb 1-1: Manufacturer: syz [ 30.223853][ T24] usb 3-1: Product: syz [ 30.228211][ T24] usb 3-1: Manufacturer: syz [ 30.233151][ T313] usb 5-1: Product: syz [ 30.237662][ T313] usb 5-1: Manufacturer: syz [ 30.242974][ T315] usb 4-1: Manufacturer: syz [ 30.248268][ T315] usb 4-1: SerialNumber: syz [pid 306] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 306] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 306] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 317] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 308] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 307] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 308] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW [pid 317] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW [pid 307] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW [pid 318] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 317] <... ioctl resumed>, 0) = 0 [pid 308] <... ioctl resumed>, 0) = 0 [pid 307] <... ioctl resumed>, 0) = 0 [pid 318] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW [pid 317] ioctl(3, USB_RAW_IOCTL_CONFIGURE [pid 308] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 318] <... ioctl resumed>, 0) = 0 [pid 307] ioctl(3, USB_RAW_IOCTL_CONFIGURE [pid 317] <... ioctl resumed>, 0) = 0 [pid 318] ioctl(3, USB_RAW_IOCTL_CONFIGURE [pid 307] <... ioctl resumed>, 0) = 0 [pid 308] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 308] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 317] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 308] <... ioctl resumed>, 0x7f6727ef7110) = 0 [pid 317] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 318] <... ioctl resumed>, 0) = 0 [pid 307] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 318] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 317] <... ioctl resumed>, 0x7f6727ef7110) = 0 [pid 307] <... ioctl resumed>, 0x7f6727fc850c) = 0 [pid 318] <... ioctl resumed>, 0x7f6727fc850c) = 0 [pid 307] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 318] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [pid 307] <... ioctl resumed>, 0x7f6727ef7110) = 0 [ 30.249021][ T306] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 30.253066][ T319] usb 1-1: SerialNumber: syz [ 30.267275][ T24] usb 3-1: SerialNumber: syz [ 30.272856][ T313] usb 5-1: SerialNumber: syz [pid 306] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 306] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 304] <... futex resumed>) = 0 [pid 304] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... futex resumed>) = 0 [pid 304] <... futex resumed>) = 1 [pid 306] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 304] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 306] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 306] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 306] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 306] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 308] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 305] <... futex resumed>) = 0 [pid 308] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 305] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 305] <... futex resumed>) = 0 [pid 308] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 305] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 308] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 317] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 317] <... futex resumed>) = 1 [pid 308] <... ioctl resumed>, 0) = 0 [pid 318] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 317] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 308] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 307] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 318] <... futex resumed>) = 1 [pid 311] <... futex resumed>) = 0 [pid 310] <... futex resumed>) = 0 [pid 310] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 310] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 307] <... futex resumed>) = 1 [pid 303] <... futex resumed>) = 0 [pid 307] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 303] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 303] <... futex resumed>) = 0 [pid 307] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 303] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 307] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 307] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 307] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 318] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 317] <... futex resumed>) = 0 [pid 311] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 318] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 317] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 311] <... futex resumed>) = 0 [pid 308] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 318] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 317] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 311] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 308] <... ioctl resumed>, 0x7f6727fc893c) = 11 [pid 318] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 317] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 308] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 318] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 317] <... ioctl resumed>, 0) = 0 [pid 318] <... ioctl resumed>, 0) = 0 [pid 317] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 318] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 307] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 307] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 307] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 308] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 307] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 317] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 317] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 317] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 318] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 318] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 318] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 30.486309][ T308] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 30.492569][ T307] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 30.496014][ T317] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 30.505766][ T318] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [pid 306] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 304] <... futex resumed>) = 0 [pid 306] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 304] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 304] <... futex resumed>) = 0 [pid 306] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 304] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 306] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 306] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [pid 308] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 307] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... futex resumed>) = 0 [pid 308] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 307] <... futex resumed>) = 1 [pid 303] <... futex resumed>) = 0 [pid 307] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 303] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 303] <... futex resumed>) = 0 [pid 307] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 303] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 307] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 307] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 307] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 307] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 305] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... futex resumed>) = 0 [pid 305] <... futex resumed>) = 1 [pid 308] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 305] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 308] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 308] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 308] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 308] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 317] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 310] <... futex resumed>) = 0 [pid 317] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 310] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 317] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 310] <... futex resumed>) = 0 [pid 318] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 317] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 310] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 318] <... futex resumed>) = 1 [pid 317] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 311] <... futex resumed>) = 0 [pid 318] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 317] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 318] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 317] <... ioctl resumed>, 0) = -1 EINVAL (Invalid argument) [pid 311] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 318] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 317] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 318] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 317] <... ioctl resumed>, 0xb) = 0 [pid 311] <... futex resumed>) = 0 [pid 318] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 317] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 318] <... ioctl resumed>, 0) = -1 EINVAL (Invalid argument) [pid 318] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 311] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 318] <... ioctl resumed>, 0xb) = 0 [pid 317] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 318] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 306] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 304] <... futex resumed>) = 0 [pid 306] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 304] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 304] <... futex resumed>) = 0 [pid 306] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 304] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 306] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 306] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 306] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 306] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 307] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 303] <... futex resumed>) = 0 [pid 307] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 303] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 303] <... futex resumed>) = 0 [pid 307] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 303] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 307] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 307] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [pid 308] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 305] <... futex resumed>) = 0 [pid 308] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 305] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 305] <... futex resumed>) = 0 [pid 308] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 305] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 308] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 308] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [pid 317] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 310] <... futex resumed>) = 0 [pid 317] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 310] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 317] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 310] <... futex resumed>) = 0 [pid 310] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 317] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 317] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 318] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 317] <... ioctl resumed>, 0x7f6727ef7130) = 28 [pid 318] <... futex resumed>) = 1 [pid 311] <... futex resumed>) = 0 [pid 318] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 311] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 318] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 311] <... futex resumed>) = 0 [pid 311] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 318] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 318] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [ 30.873627][ T306] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [pid 306] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 304] <... futex resumed>) = 0 [pid 304] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 304] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 306] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 306] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [pid 307] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 307] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 303] <... futex resumed>) = 0 [pid 303] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... futex resumed>) = 0 [pid 303] <... futex resumed>) = 1 [pid 307] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 303] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 307] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 307] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 308] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 305] <... futex resumed>) = 0 [pid 308] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 305] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 305] <... futex resumed>) = 0 [pid 308] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 305] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 307] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 307] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 307] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 318] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 311] <... futex resumed>) = 0 [pid 318] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 311] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 318] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 311] <... futex resumed>) = 0 [pid 318] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 311] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 308] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 307] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 317] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 317] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 308] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 308] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 310] <... futex resumed>) = 0 [pid 310] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 317] <... futex resumed>) = 0 [pid 310] <... futex resumed>) = 1 [pid 317] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 310] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 317] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 317] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 318] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 318] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [ 31.086027][ T39] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 31.093192][ T39] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 31.101111][ T39] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 31.109757][ T307] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 31.118232][ T308] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 31.123175][ T318] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [pid 318] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 317] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 317] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 317] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 31.130610][ T317] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [pid 306] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 304] <... futex resumed>) = 0 [pid 306] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 304] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 304] <... futex resumed>) = 0 [pid 306] bpf(BPF_PROG_LOAD, NULL, 0 [pid 304] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 306] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 306] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 304] <... futex resumed>) = 0 [pid 306] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 304] close(3) = 0 [pid 304] close(4) = -1 EBADF (Bad file descriptor) [pid 304] close(5) = -1 EBADF (Bad file descriptor) [pid 304] close(6) = -1 EBADF (Bad file descriptor) [pid 304] close(7 [pid 308] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 318] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 311] <... futex resumed>) = 0 [pid 318] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 317] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 318] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 317] <... futex resumed>) = 1 [pid 311] <... futex resumed>) = 0 [pid 310] <... futex resumed>) = 0 [pid 308] <... futex resumed>) = 1 [pid 307] <... futex resumed>) = 1 [pid 305] <... futex resumed>) = 0 [pid 304] close(8 [pid 303] <... futex resumed>) = 0 [pid 318] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 317] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 311] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 310] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 307] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 305] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 303] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 318] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 317] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 310] <... futex resumed>) = 0 [pid 308] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 307] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 305] <... futex resumed>) = 0 [pid 304] close(9 [pid 303] <... futex resumed>) = 0 [pid 318] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 317] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 310] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 308] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 307] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 305] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 304] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 303] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 318] <... ioctl resumed>, 0x7f6727ef7130) = 26 [pid 317] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 317] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [pid 308] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 307] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 304] close(10 [pid 308] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 307] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 304] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] close(11) = -1 EBADF (Bad file descriptor) [pid 304] close(12) = -1 EBADF (Bad file descriptor) [pid 304] close(13) = -1 EBADF (Bad file descriptor) [pid 304] close(14) = -1 EBADF (Bad file descriptor) [pid 304] close(15) = -1 EBADF (Bad file descriptor) [pid 304] close(16) = -1 EBADF (Bad file descriptor) [pid 304] close(17) = -1 EBADF (Bad file descriptor) [pid 304] close(18) = -1 EBADF (Bad file descriptor) [pid 304] close(19) = -1 EBADF (Bad file descriptor) [pid 304] close(20 [pid 308] <... ioctl resumed>, 0x7f6727ef7130) = 26 [pid 307] <... ioctl resumed>, 0x7f6727ef7130) = 26 [pid 304] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 304] close(21) = -1 EBADF (Bad file descriptor) [ 31.312172][ T39] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 31.325817][ T39] usb 2-1: USB disconnect, device number 2 [ 31.332936][ T39] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 31.349299][ T319] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [pid 304] close(22) = -1 EBADF (Bad file descriptor) [pid 304] close(23) = -1 EBADF (Bad file descriptor) [pid 304] close(24) = -1 EBADF (Bad file descriptor) [pid 304] close(25) = -1 EBADF (Bad file descriptor) [pid 304] close(26) = -1 EBADF (Bad file descriptor) [pid 304] close(27) = -1 EBADF (Bad file descriptor) [pid 304] close(28) = -1 EBADF (Bad file descriptor) [pid 304] close(29) = -1 EBADF (Bad file descriptor) [pid 304] exit_group(0) = ? [pid 306] <... futex resumed>) = ? [pid 306] +++ exited with 0 +++ [pid 304] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 298] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./0/binderfs") = 0 [pid 298] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./0") = 0 [pid 298] mkdir("./1", 0777) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 4 ./strace-static-x86_64: Process 326 attached [pid 326] set_robust_list(0x5555951c7760, 24) = 0 [pid 326] chdir("./1") = 0 [pid 326] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 326] setpgid(0, 0) = 0 [pid 326] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 326] write(3, "1000", 4) = 4 [pid 326] close(3) = 0 [pid 326] symlink("/dev/binderfs", "./binderfs") = 0 [pid 326] write(1, "executing program\n", 18executing program ) = 18 [pid 326] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 326] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 326] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 326] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 326] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 326] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 326] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[5]}, 88) = 5 [pid 326] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 326] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 326] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}./strace-static-x86_64: Process 327 attached [pid 327] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 327] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 327] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 327] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 326] <... futex resumed>) = 0 [pid 326] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 326] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 327] <... futex resumed>) = 1 [ 31.356467][ T315] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 31.363175][ T24] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 31.369812][ T313] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 31.376792][ T315] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 31.384842][ T319] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 31.400508][ T24] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [pid 327] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 327] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 326] <... futex resumed>) = 0 [pid 326] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 326] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 327] <... futex resumed>) = 1 [pid 327] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 327] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 326] <... futex resumed>) = 0 [pid 326] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 326] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 327] <... futex resumed>) = 1 [pid 327] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 327] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 327] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 327] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 31.409235][ T313] cdc_ncm 5-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 31.424390][ T315] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 31.430929][ T313] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 31.438269][ T24] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 31.445652][ T319] cdc_ncm 1-1:1.0: setting rx_max = 2048 [pid 327] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 318] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 311] <... futex resumed>) = 0 [pid 318] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 311] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 318] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 311] <... futex resumed>) = 0 [pid 318] bpf(BPF_PROG_LOAD, NULL, 0 [pid 311] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 318] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 318] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 311] <... futex resumed>) = 0 [pid 318] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 311] close(3) = 0 [pid 311] close(4) = -1 EBADF (Bad file descriptor) [pid 311] close(5) = -1 EBADF (Bad file descriptor) [pid 311] close(6) = -1 EBADF (Bad file descriptor) [pid 311] close(7) = -1 EBADF (Bad file descriptor) [pid 311] close(8) = -1 EBADF (Bad file descriptor) [pid 311] close(9) = -1 EBADF (Bad file descriptor) [pid 311] close(10) = -1 EBADF (Bad file descriptor) [pid 311] close(11) = -1 EBADF (Bad file descriptor) [pid 311] close(12) = -1 EBADF (Bad file descriptor) [pid 311] close(13) = -1 EBADF (Bad file descriptor) [pid 311] close(14) = -1 EBADF (Bad file descriptor) [pid 311] close(15) = -1 EBADF (Bad file descriptor) [pid 311] close(16) = -1 EBADF (Bad file descriptor) [pid 311] close(17) = -1 EBADF (Bad file descriptor) [pid 311] close(18) = -1 EBADF (Bad file descriptor) [pid 311] close(19) = -1 EBADF (Bad file descriptor) [pid 311] close(20) = -1 EBADF (Bad file descriptor) [pid 311] close(21) = -1 EBADF (Bad file descriptor) [pid 317] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] close(22 [pid 317] <... futex resumed>) = 1 [pid 311] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 310] <... futex resumed>) = 0 [pid 317] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 311] close(23 [pid 310] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 317] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 311] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 310] <... futex resumed>) = 0 [pid 317] bpf(BPF_PROG_LOAD, NULL, 0 [pid 311] close(24 [pid 310] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 317] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 311] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] close(25 [pid 317] <... futex resumed>) = 1 [pid 311] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 310] <... futex resumed>) = 0 [pid 317] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 311] close(26 [pid 310] close(3 [pid 311] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 310] <... close resumed>) = 0 [pid 311] close(27 [pid 310] close(4 [pid 311] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 310] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 311] close(28 [pid 310] close(5 [pid 311] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 310] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 311] close(29 [pid 310] close(6 [pid 311] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 310] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 311] exit_group(0 [pid 310] close(7 [pid 318] <... futex resumed>) = ? [pid 311] <... exit_group resumed>) = ? [pid 310] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 318] +++ exited with 0 +++ [pid 311] +++ exited with 0 +++ [pid 310] close(8) = -1 EBADF (Bad file descriptor) [pid 310] close(9) = -1 EBADF (Bad file descriptor) [pid 310] close(10) = -1 EBADF (Bad file descriptor) [pid 310] close(11) = -1 EBADF (Bad file descriptor) [pid 310] close(12) = -1 EBADF (Bad file descriptor) [pid 310] close(13 [pid 308] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 308] <... futex resumed>) = 1 [pid 307] <... futex resumed>) = 1 [pid 305] <... futex resumed>) = 0 [pid 303] <... futex resumed>) = 0 [pid 310] close(14 [pid 308] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 307] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 305] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 308] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 307] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 305] <... futex resumed>) = 0 [pid 303] <... futex resumed>) = 0 [pid 310] close(15 [pid 308] bpf(BPF_PROG_LOAD, NULL, 0 [pid 307] bpf(BPF_PROG_LOAD, NULL, 0 [pid 305] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 303] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 310] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 308] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 307] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 310] close(16 [pid 308] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 308] <... futex resumed>) = 1 [pid 307] <... futex resumed>) = 1 [pid 305] <... futex resumed>) = 0 [pid 303] <... futex resumed>) = 0 [pid 310] close(17 [pid 308] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 307] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 305] close(3 [pid 303] close(3 [pid 310] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] <... close resumed>) = 0 [pid 303] <... close resumed>) = 0 [pid 310] close(18 [pid 305] close(4 [pid 303] close(4 [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 310] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 303] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 310] close(19 [pid 305] close(5 [pid 303] close(5 [pid 310] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 303] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 310] close(20 [pid 305] close(6 [pid 303] close(6 [pid 310] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 303] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 299] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 310] close(21 [pid 305] close(7 [pid 303] close(7 [pid 310] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 303] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] close(22 [pid 305] close(8 [pid 303] close(8 [pid 310] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 303] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 299] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 310] close(23 [pid 305] close(9 [pid 303] close(9 [pid 310] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 303] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 299] <... openat resumed>) = 3 [pid 310] close(24 [pid 305] close(10 [pid 303] close(10 [pid 299] newfstatat(3, "", [pid 310] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 303] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 310] close(25 [pid 305] close(11 [pid 303] close(11 [pid 310] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 303] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 310] close(26 [pid 305] close(12 [pid 303] close(12 [pid 310] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 303] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 299] getdents64(3, [pid 310] close(27 [pid 305] close(13 [pid 303] close(13 [pid 310] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 303] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 310] close(28 [pid 305] close(14 [pid 303] close(14 [pid 310] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 303] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 310] close(29 [pid 305] close(15 [pid 303] close(15 [pid 310] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 303] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 310] exit_group(0 [pid 305] close(16 [pid 303] close(16 [pid 317] <... futex resumed>) = ? [pid 310] <... exit_group resumed>) = ? [pid 305] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 303] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 317] +++ exited with 0 +++ [pid 310] +++ exited with 0 +++ [pid 305] close(17 [pid 303] close(17 [pid 305] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 303] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 305] close(18 [pid 303] close(18 [pid 300] restart_syscall(<... resuming interrupted clone ...> [pid 305] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 303] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] close(19 [pid 303] close(19 [pid 305] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 303] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] close(20 [pid 303] close(20 [pid 305] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 303] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] close(21 [pid 303] close(21 [pid 305] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 303] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] close(22 [pid 303] close(22 [pid 305] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 303] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] close(23 [pid 303] close(23 [pid 305] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 303] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] close(24 [pid 303] close(24 [pid 305] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 303] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] close(25 [pid 303] close(25 [pid 305] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 303] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] close(26 [pid 303] close(26 [pid 305] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 303] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] close(27 [pid 303] close(27 [pid 305] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 303] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] close(28 [pid 303] close(28 [pid 305] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 303] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] close(29 [pid 303] close(29 [pid 305] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 303] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 305] exit_group(0 [pid 303] exit_group(0 [pid 308] <... futex resumed>) = ? [pid 307] <... futex resumed>) = ? [pid 305] <... exit_group resumed>) = ? [pid 303] <... exit_group resumed>) = ? [pid 308] +++ exited with 0 +++ [pid 307] +++ exited with 0 +++ [pid 305] +++ exited with 0 +++ [pid 303] +++ exited with 0 +++ [pid 300] <... restart_syscall resumed>) = 0 [pid 300] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 300] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./0/binderfs") = 0 [pid 300] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./0") = 0 [pid 300] mkdir("./1", 0777) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 299] <... getdents64 resumed>0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 300] <... clone resumed>, child_tidptr=0x5555951c7750) = 4 [pid 299] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./0/binderfs", [pid 302] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] <... openat resumed>) = 3 [pid 301] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 299] unlink("./0/binderfs" [pid 302] newfstatat(3, "", [pid 301] <... openat resumed>) = 3 [pid 299] <... unlink resumed>) = 0 [pid 302] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 301] newfstatat(3, "", [pid 299] getdents64(3, [pid 302] getdents64(3, [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 299] <... getdents64 resumed>0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 302] <... getdents64 resumed>0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 302] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] getdents64(3, [pid 299] close(3 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] <... getdents64 resumed>0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 302] newfstatat(AT_FDCWD, "./0/binderfs", [pid 301] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] <... close resumed>) = 0 [pid 302] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 302] unlink("./0/binderfs" [pid 301] newfstatat(AT_FDCWD, "./0/binderfs", [pid 299] rmdir("./0" [pid 302] <... unlink resumed>) = 0 [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] getdents64(3, [pid 301] unlink("./0/binderfs" [pid 299] <... rmdir resumed>) = 0 [pid 302] <... getdents64 resumed>0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 301] <... unlink resumed>) = 0 [pid 302] close(3 [pid 299] mkdir("./1", 0777 [pid 302] <... close resumed>) = 0 [pid 301] getdents64(3, [pid 302] rmdir("./0" [pid 301] <... getdents64 resumed>0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 299] <... mkdir resumed>) = 0 [pid 302] <... rmdir resumed>) = 0 [pid 301] close(3 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 302] mkdir("./1", 0777 [pid 301] <... close resumed>) = 0 ./strace-static-x86_64: Process 328 attached [pid 328] set_robust_list(0x5555951c7760, 24 [pid 301] rmdir("./0" [pid 302] <... mkdir resumed>) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 301] <... rmdir resumed>) = 0 [pid 299] <... clone resumed>, child_tidptr=0x5555951c7750) = 4 [pid 328] <... set_robust_list resumed>) = 0 [pid 328] chdir("./1" [pid 301] mkdir("./1", 0777 [pid 302] <... clone resumed>, child_tidptr=0x5555951c7750) = 4 [pid 301] <... mkdir resumed>) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 328] <... chdir resumed>) = 0 [pid 328] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 301] <... clone resumed>, child_tidptr=0x5555951c7750) = 4 [pid 328] setpgid(0, 0) = 0 [pid 328] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 328] write(3, "1000", 4) = 4 [pid 328] close(3) = 0 [pid 328] symlink("/dev/binderfs", "./binderfs") = 0 [pid 328] write(1, "executing program\n", 18executing program ) = 18 [pid 328] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 328] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 328] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 328] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 328] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 328] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 328] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0}./strace-static-x86_64: Process 329 attached [pid 329] set_robust_list(0x5555951c7760, 24) = 0 [pid 328] <... clone3 resumed> => {parent_tid=[5]}, 88) = 5 [pid 329] chdir("./1" [pid 328] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 329] <... chdir resumed>) = 0 [pid 328] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 331 attached [pid 329] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 328] <... futex resumed>) = 0 [pid 331] set_robust_list(0x5555951c7760, 24 [pid 329] <... prctl resumed>) = 0 [pid 328] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 331] <... set_robust_list resumed>) = 0 [pid 329] setpgid(0, 0 [pid 331] chdir("./1" [pid 329] <... setpgid resumed>) = 0 [pid 331] <... chdir resumed>) = 0 [pid 329] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 331] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 329] <... openat resumed>) = 3 [pid 331] <... prctl resumed>) = 0 [pid 329] write(3, "1000", 4 [pid 331] setpgid(0, 0 [pid 329] <... write resumed>) = 4 [pid 331] <... setpgid resumed>) = 0 [pid 329] close(3 [pid 331] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 329] <... close resumed>) = 0 [pid 331] <... openat resumed>) = 3 [pid 329] symlink("/dev/binderfs", "./binderfs" [pid 331] write(3, "1000", 4 [pid 329] <... symlink resumed>) = 0 [ 31.559244][ T319] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 31.576312][ T315] cdc_ncm 4-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 31.592652][ T24] cdc_ncm 3-1:1.0 usb2: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 executing program [pid 331] <... write resumed>) = 4 [pid 329] write(1, "executing program\n", 18 [pid 331] close(3 [pid 329] <... write resumed>) = 18 [pid 331] <... close resumed>) = 0 [pid 329] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 331] symlink("/dev/binderfs", "./binderfs" [pid 329] <... futex resumed>) = 0 [pid 331] <... symlink resumed>) = 0 [pid 329] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, executing program [pid 331] write(1, "executing program\n", 18 [pid 329] <... rt_sigaction resumed>NULL, 8) = 0 [pid 331] <... write resumed>) = 18 [pid 329] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 331] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 329] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 332 attached [pid 331] <... futex resumed>) = 0 [pid 329] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 332] set_robust_list(0x7f6727ef99a0, 24 [pid 331] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, [pid 329] <... mmap resumed>) = 0x7f6727ed9000 [pid 332] <... set_robust_list resumed>) = 0 [pid 331] <... rt_sigaction resumed>NULL, 8) = 0 [pid 329] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE [pid 332] rt_sigprocmask(SIG_SETMASK, [], [pid 331] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 329] <... mprotect resumed>) = 0 [pid 332] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 331] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 329] rt_sigprocmask(SIG_BLOCK, ~[], [pid 332] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0 [pid 331] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 329] <... rt_sigprocmask resumed>[], 8) = 0 [pid 332] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 331] <... mmap resumed>) = 0x7f6727ed9000 [pid 329] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} [pid 332] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 331] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE [pid 332] <... futex resumed>) = 1 [pid 331] <... mprotect resumed>) = 0 [pid 329] <... clone3 resumed> => {parent_tid=[5]}, 88) = 5 [pid 328] <... futex resumed>) = 0 [pid 332] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 331] rt_sigprocmask(SIG_BLOCK, ~[], [pid 329] rt_sigprocmask(SIG_SETMASK, [], [pid 328] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 332] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 331] <... rt_sigprocmask resumed>[], 8) = 0 [pid 329] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 328] <... futex resumed>) = 0 [pid 332] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 331] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} [pid 329] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 328] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 332] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 329] <... futex resumed>) = 0 [pid 332] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 331] <... clone3 resumed> => {parent_tid=[5]}, 88) = 5 [pid 329] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 332] <... futex resumed>) = 1 [pid 331] rt_sigprocmask(SIG_SETMASK, [], [pid 328] <... futex resumed>) = 0 [pid 332] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 331] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 328] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 334 attached ./strace-static-x86_64: Process 330 attached [pid 332] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 331] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 328] <... futex resumed>) = 0 [pid 334] set_robust_list(0x7f6727ef99a0, 24 [pid 332] socketpair(AF_UNIX, SOCK_STREAM, 0, [pid 331] <... futex resumed>) = 0 [pid 330] set_robust_list(0x5555951c7760, 24 [pid 328] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 333 attached [pid 334] <... set_robust_list resumed>) = 0 [pid 332] <... socketpair resumed>NULL) = -1 EFAULT (Bad address) [pid 331] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 330] <... set_robust_list resumed>) = 0 [pid 334] rt_sigprocmask(SIG_SETMASK, [], [pid 333] set_robust_list(0x7f6727ef99a0, 24 [ 31.597199][ T313] cdc_ncm 5-1:1.0 usb3: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 31.621455][ T313] usb 5-1: USB disconnect, device number 2 [ 31.628114][ T313] cdc_ncm 5-1:1.0 usb3: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 31.641257][ T315] usb 4-1: USB disconnect, device number 2 [ 31.648263][ T319] usb 1-1: USB disconnect, device number 2 [pid 332] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 334] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 333] <... set_robust_list resumed>) = 0 [pid 332] <... futex resumed>) = 1 [pid 330] chdir("./1" [pid 328] <... futex resumed>) = 0 [pid 334] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0 [pid 333] rt_sigprocmask(SIG_SETMASK, [], [pid 332] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 330] <... chdir resumed>) = 0 [pid 328] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 334] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 333] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 332] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 330] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 328] <... futex resumed>) = 0 [pid 334] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0 [pid 332] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 330] <... prctl resumed>) = 0 [pid 328] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 334] <... futex resumed>) = 1 [pid 333] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 332] <... openat resumed>) = 3 [pid 331] <... futex resumed>) = 0 [pid 330] setpgid(0, 0 [pid 334] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 333] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 332] ioctl(3, USB_RAW_IOCTL_INIT [pid 331] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 332] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 331] <... futex resumed>) = 0 [pid 332] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 331] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 330] <... setpgid resumed>) = 0 [pid 332] <... ioctl resumed>, 0) = 0 [pid 330] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 332] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 330] <... openat resumed>) = 3 [pid 332] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 330] write(3, "1000", 4 [pid 332] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 330] <... write resumed>) = 4 [pid 330] close(3) = 0 [pid 330] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 330] write(1, "executing program\n", 18) = 18 [pid 334] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 333] <... futex resumed>) = 1 [pid 330] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 329] <... futex resumed>) = 0 [pid 330] <... futex resumed>) = 0 [pid 329] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 334] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 333] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 330] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, [pid 329] <... futex resumed>) = 0 [pid 334] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 330] <... rt_sigaction resumed>NULL, 8) = 0 [pid 329] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 333] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 330] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 330] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 333] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 334] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 330] <... mmap resumed>) = 0x7f6727ed9000 [pid 334] <... futex resumed>) = 1 [pid 333] <... futex resumed>) = 1 [pid 331] <... futex resumed>) = 0 [pid 330] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE [pid 329] <... futex resumed>) = 0 [pid 334] socketpair(AF_UNIX, SOCK_STREAM, 0, [pid 333] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 331] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 330] <... mprotect resumed>) = 0 [pid 329] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 334] <... socketpair resumed>NULL) = -1 EFAULT (Bad address) [pid 333] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 331] <... futex resumed>) = 0 [pid 334] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] socketpair(AF_UNIX, SOCK_STREAM, 0, [pid 331] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 330] rt_sigprocmask(SIG_BLOCK, ~[], [pid 329] <... futex resumed>) = 0 [pid 334] <... futex resumed>) = 0 [pid 333] <... socketpair resumed>NULL) = -1 EFAULT (Bad address) [pid 331] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 330] <... rt_sigprocmask resumed>[], 8) = 0 [pid 329] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 334] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 333] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 331] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 330] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} [pid 329] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) ./strace-static-x86_64: Process 335 attached [pid 334] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 333] <... futex resumed>) = 0 [pid 331] <... futex resumed>) = 0 [pid 329] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 331] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 330] <... clone3 resumed> => {parent_tid=[5]}, 88) = 5 [pid 329] <... futex resumed>) = 0 [pid 330] rt_sigprocmask(SIG_SETMASK, [], [pid 329] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 334] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 333] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 330] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 330] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 333] <... openat resumed>) = 3 [pid 330] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 334] <... openat resumed>) = 3 [pid 333] ioctl(3, USB_RAW_IOCTL_INIT [pid 334] ioctl(3, USB_RAW_IOCTL_INIT [pid 333] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 334] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 333] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 334] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 335] set_robust_list(0x7f6727ef99a0, 24 [pid 333] <... ioctl resumed>, 0) = 0 [pid 335] <... set_robust_list resumed>) = 0 [pid 335] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 335] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0 [pid 334] <... ioctl resumed>, 0) = 0 [pid 333] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 335] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 335] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 330] <... futex resumed>) = 0 [pid 335] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 330] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 335] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 334] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 333] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 330] <... futex resumed>) = 0 [pid 335] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 330] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 335] <... futex resumed>) = 0 [pid 330] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 335] socketpair(AF_UNIX, SOCK_STREAM, 0, [pid 334] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 333] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 330] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 335] <... socketpair resumed>NULL) = -1 EFAULT (Bad address) [pid 334] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 330] <... futex resumed>) = 0 [pid 335] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 330] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 335] <... futex resumed>) = 0 [pid 330] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 335] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 330] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 335] <... openat resumed>) = 3 [pid 330] <... futex resumed>) = 0 [pid 335] ioctl(3, USB_RAW_IOCTL_INIT [pid 330] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 335] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 335] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 335] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 31.656866][ T315] cdc_ncm 4-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 31.667082][ T319] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 31.679776][ T24] usb 3-1: USB disconnect, device number 2 [ 31.688964][ T24] cdc_ncm 3-1:1.0 usb2: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [pid 335] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 327] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 327] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [ 31.792206][ T39] usb 2-1: new high-speed USB device number 3 using dummy_hcd [pid 327] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 327] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 327] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 327] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 327] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 327] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 327] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 327] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 327] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 327] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 327] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 327] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 327] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 327] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [ 31.973629][ T39] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.986288][ T39] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 32.000694][ T39] usb 2-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 32.012232][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [pid 327] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 327] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 327] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 327] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 327] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [ 32.021000][ T39] usb 2-1: Product: syz [ 32.026386][ T39] usb 2-1: Manufacturer: syz [ 32.031808][ T39] usb 2-1: SerialNumber: syz [pid 334] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 332] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 332] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 334] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 332] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 332] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 334] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 334] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 333] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 333] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 333] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 335] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 335] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [ 32.102264][ T315] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 32.110570][ T313] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 32.132187][ T319] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 32.140724][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [pid 335] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 327] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 326] <... futex resumed>) = 0 [pid 326] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 326] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 327] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 327] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 327] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 327] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 327] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 334] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 332] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 334] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 332] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 334] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 332] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 334] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 332] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 334] <... ioctl resumed>, 0x7f6727ef7110) = 9 [pid 334] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 332] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 334] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 334] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [ 32.247993][ T327] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [pid 332] <... ioctl resumed>, 0x7f6727ef7110) = 9 [pid 334] <... ioctl resumed>, 0x7f6727ef7110) = 100 [pid 332] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 334] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 332] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 332] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 332] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 335] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 333] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 335] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 333] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 335] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 333] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 335] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 334] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 333] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 332] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 335] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 334] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 333] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 332] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 335] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 333] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 335] <... ioctl resumed>, 0x7f6727ef7110) = 9 [pid 335] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 332] <... ioctl resumed>, 0x7f6727ef7110) = 4 [pid 333] <... ioctl resumed>, 0x7f6727ef7110) = 9 [pid 334] <... ioctl resumed>, 0x7f6727ef7110) = 4 [pid 333] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 332] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 335] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 334] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 333] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 335] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 334] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 333] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 334] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 335] <... ioctl resumed>, 0x7f6727ef7110) = 100 [pid 335] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 333] <... ioctl resumed>, 0x7f6727ef7110) = 100 [ 32.294078][ T313] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.306411][ T313] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 32.317516][ T315] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.329366][ T315] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [pid 333] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 334] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 334] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 332] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 334] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 332] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 334] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 332] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 335] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 334] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 332] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 333] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 335] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 334] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 332] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 333] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 332] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 335] <... ioctl resumed>, 0x7f6727ef7110) = 4 [pid 334] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 333] <... ioctl resumed>, 0x7f6727ef7110) = 4 [pid 335] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 334] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 333] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 332] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 334] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 332] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 32.341328][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.352468][ T319] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.365069][ T24] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 32.375944][ T319] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [pid 332] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 335] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 332] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 335] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 332] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 335] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 335] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 333] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 335] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 333] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 335] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 333] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 335] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 333] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 335] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 333] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 335] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 333] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 335] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 333] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 335] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [ 32.387817][ T313] usb 5-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 32.397287][ T315] usb 4-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 32.406676][ T315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.415200][ T313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.423932][ T313] usb 5-1: Product: syz [ 32.428339][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 32.437761][ T315] usb 4-1: Product: syz [pid 333] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 333] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 333] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 327] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 326] <... futex resumed>) = 0 [pid 327] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 326] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 327] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 326] <... futex resumed>) = 0 [pid 327] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 326] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 327] <... ioctl resumed>, 0) = -1 EINVAL (Invalid argument) [pid 327] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 327] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 32.442232][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.450280][ T24] usb 3-1: Product: syz [ 32.454579][ T319] usb 1-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 32.464961][ T315] usb 4-1: Manufacturer: syz [ 32.469947][ T313] usb 5-1: Manufacturer: syz [ 32.475300][ T319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.484011][ T315] usb 4-1: SerialNumber: syz [pid 332] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 332] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 332] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 332] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 332] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 334] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 332] <... ioctl resumed>, 0x7f6727ef7110) = 0 [pid 334] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 334] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 334] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 334] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [pid 335] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 335] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 335] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 335] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 333] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 335] <... ioctl resumed>, 0x7f6727fc850c) = 0 [pid 335] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 333] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW [pid 335] <... ioctl resumed>, 0x7f6727ef7110) = 0 [pid 333] <... ioctl resumed>, 0) = 0 [pid 333] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 333] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 333] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [ 32.491018][ T313] usb 5-1: SerialNumber: syz [ 32.497061][ T24] usb 3-1: Manufacturer: syz [ 32.502971][ T319] usb 1-1: Product: syz [ 32.508170][ T24] usb 3-1: SerialNumber: syz [ 32.515186][ T319] usb 1-1: Manufacturer: syz [ 32.521330][ T319] usb 1-1: SerialNumber: syz [pid 327] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 326] <... futex resumed>) = 0 [pid 327] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 326] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 327] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 326] <... futex resumed>) = 0 [pid 327] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 326] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 327] <... ioctl resumed>, 0x7f6727ef7130) = 28 [pid 332] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 328] <... futex resumed>) = 0 [pid 332] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 328] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 332] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 328] <... futex resumed>) = 0 [pid 332] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 328] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 332] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 332] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 332] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 334] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 331] <... futex resumed>) = 0 [pid 334] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 331] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 334] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 334] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 331] <... futex resumed>) = 0 [pid 334] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 334] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 331] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 334] <... ioctl resumed>, 0) = 0 [pid 334] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 332] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 332] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 334] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 334] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 334] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 332] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 335] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 330] <... futex resumed>) = 0 [pid 335] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 330] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 335] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 330] <... futex resumed>) = 0 [pid 335] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 330] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 335] <... ioctl resumed>, 0) = 0 [pid 335] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 333] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 329] <... futex resumed>) = 0 [pid 333] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 329] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 329] <... futex resumed>) = 0 [pid 333] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 333] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 329] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 333] <... ioctl resumed>, 0) = 0 [pid 333] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 335] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 333] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 333] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 333] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 335] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 333] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 335] <... ioctl resumed>, 0x7f6727fc893c) = 11 [pid 335] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 32.705286][ T332] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 32.713694][ T334] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 32.735326][ T335] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 32.744182][ T333] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [pid 327] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 326] <... futex resumed>) = 0 [pid 327] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 326] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 327] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 326] <... futex resumed>) = 0 [pid 327] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 326] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 327] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 327] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 327] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 334] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 332] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 334] <... futex resumed>) = 1 [pid 332] <... futex resumed>) = 1 [pid 331] <... futex resumed>) = 0 [pid 334] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 331] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 328] <... futex resumed>) = 0 [pid 334] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 332] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 331] <... futex resumed>) = 0 [pid 334] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 332] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 331] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 328] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 334] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 332] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 334] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 328] <... futex resumed>) = 0 [pid 334] <... ioctl resumed>, 0) = -1 EINVAL (Invalid argument) [pid 332] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 328] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 334] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 332] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 334] <... ioctl resumed>, 0xb) = 0 [pid 332] <... ioctl resumed>, 0) = -1 EINVAL (Invalid argument) [pid 334] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 332] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 334] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 332] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 32.873291][ T327] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [pid 333] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 335] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] <... futex resumed>) = 1 [pid 329] <... futex resumed>) = 0 [pid 335] <... futex resumed>) = 1 [pid 333] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 330] <... futex resumed>) = 0 [pid 329] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 335] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 333] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 330] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 329] <... futex resumed>) = 0 [pid 335] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 333] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 330] <... futex resumed>) = 0 [pid 329] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 335] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 333] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 330] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 335] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 333] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 335] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 333] <... ioctl resumed>, 0) = -1 EINVAL (Invalid argument) [pid 335] <... ioctl resumed>, 0) = -1 EINVAL (Invalid argument) [pid 333] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 335] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 333] <... ioctl resumed>, 0xb) = 0 [pid 335] <... ioctl resumed>, 0xb) = 0 [pid 333] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 335] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 333] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 335] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 327] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 326] <... futex resumed>) = 0 [pid 326] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 326] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 327] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 327] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [pid 334] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 332] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 328] <... futex resumed>) = 0 [pid 332] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 328] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 332] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 328] <... futex resumed>) = 0 [pid 334] <... futex resumed>) = 1 [pid 332] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 331] <... futex resumed>) = 0 [pid 328] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 334] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 332] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 332] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [pid 331] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 334] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 331] <... futex resumed>) = 0 [pid 334] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 331] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 334] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 334] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [ 33.085112][ T39] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 33.092520][ T39] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 33.100996][ T39] cdc_ncm 2-1:1.0: setting rx_max = 2048 [pid 333] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 335] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] <... futex resumed>) = 1 [pid 333] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 335] <... futex resumed>) = 1 [pid 335] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 329] <... futex resumed>) = 0 [pid 329] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] <... futex resumed>) = 0 [pid 329] <... futex resumed>) = 1 [pid 333] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 329] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 333] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 333] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [pid 330] <... futex resumed>) = 0 [pid 330] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 335] <... futex resumed>) = 0 [pid 330] <... futex resumed>) = 1 [pid 335] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 330] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 335] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 335] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [pid 327] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 327] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 326] <... futex resumed>) = 0 [pid 326] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 327] <... futex resumed>) = 0 [pid 326] <... futex resumed>) = 1 [pid 327] bpf(BPF_PROG_LOAD, NULL, 0 [pid 326] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 327] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 327] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 326] <... futex resumed>) = 0 [pid 327] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 326] close(3) = 0 [pid 326] close(4) = -1 EBADF (Bad file descriptor) [pid 326] close(5) = -1 EBADF (Bad file descriptor) [pid 326] close(6) = -1 EBADF (Bad file descriptor) [pid 326] close(7) = -1 EBADF (Bad file descriptor) [pid 326] close(8) = -1 EBADF (Bad file descriptor) [pid 326] close(9) = -1 EBADF (Bad file descriptor) [pid 326] close(10) = -1 EBADF (Bad file descriptor) [pid 326] close(11) = -1 EBADF (Bad file descriptor) [pid 326] close(12) = -1 EBADF (Bad file descriptor) [pid 326] close(13) = -1 EBADF (Bad file descriptor) [pid 326] close(14) = -1 EBADF (Bad file descriptor) [pid 326] close(15) = -1 EBADF (Bad file descriptor) [pid 326] close(16) = -1 EBADF (Bad file descriptor) [pid 326] close(17) = -1 EBADF (Bad file descriptor) [pid 326] close(18) = -1 EBADF (Bad file descriptor) [pid 326] close(19) = -1 EBADF (Bad file descriptor) [pid 326] close(20) = -1 EBADF (Bad file descriptor) [pid 332] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 326] close(21) = -1 EBADF (Bad file descriptor) [pid 326] close(22) = -1 EBADF (Bad file descriptor) [pid 326] close(23) = -1 EBADF (Bad file descriptor) [pid 326] close(24) = -1 EBADF (Bad file descriptor) [pid 326] close(25) = -1 EBADF (Bad file descriptor) [pid 326] close(26) = -1 EBADF (Bad file descriptor) [pid 326] close(27) = -1 EBADF (Bad file descriptor) [pid 326] close(28) = -1 EBADF (Bad file descriptor) [pid 326] close(29) = -1 EBADF (Bad file descriptor) [pid 326] exit_group(0 [pid 327] <... futex resumed>) = ? [pid 326] <... exit_group resumed>) = ? [pid 332] <... futex resumed>) = 1 [pid 328] <... futex resumed>) = 0 [pid 327] +++ exited with 0 +++ [pid 326] +++ exited with 0 +++ [pid 334] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 332] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 328] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 334] <... futex resumed>) = 1 [pid 332] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 331] <... futex resumed>) = 0 [pid 328] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 334] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 332] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 331] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 334] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 332] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 331] <... futex resumed>) = 0 [pid 298] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 334] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 332] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 331] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 334] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 298] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 298] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./1/binderfs") = 0 [pid 298] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./1") = 0 [pid 298] mkdir("./2", 0777) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 6 [ 33.292695][ T39] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 33.309653][ T39] usb 2-1: USB disconnect, device number 3 [ 33.318066][ T39] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 33.332818][ T332] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [pid 334] ioctl(3, USB_RAW_IOCTL_EP_ENABLE./strace-static-x86_64: Process 336 attached [pid 332] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 332] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 336] set_robust_list(0x5555951c7760, 24 [pid 332] <... ioctl resumed>, 0x7f6727fc893c) = 11 [pid 336] <... set_robust_list resumed>) = 0 [pid 332] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 336] chdir("./2" [pid 332] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 336] <... chdir resumed>) = 0 [pid 336] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 336] setpgid(0, 0) = 0 [pid 336] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 336] write(3, "1000", 4) = 4 [pid 336] close(3) = 0 [pid 334] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 336] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 336] write(1, "executing program\n", 18) = 18 [pid 336] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 336] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 336] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 334] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 334] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 336] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 334] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 336] <... mmap resumed>) = 0x7f6727ed9000 [pid 336] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 336] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 336] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0}./strace-static-x86_64: Process 337 attached [pid 337] set_robust_list(0x7f6727ef99a0, 24 [pid 336] <... clone3 resumed> => {parent_tid=[7]}, 88) = 7 [pid 337] <... set_robust_list resumed>) = 0 [pid 336] rt_sigprocmask(SIG_SETMASK, [], [pid 337] rt_sigprocmask(SIG_SETMASK, [], [pid 336] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 337] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 336] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 335] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] <... futex resumed>) = 1 [pid 329] <... futex resumed>) = 0 [pid 336] <... futex resumed>) = 0 [pid 337] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0 [pid 329] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 337] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 336] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 335] <... futex resumed>) = 1 [pid 333] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 330] <... futex resumed>) = 0 [pid 329] <... futex resumed>) = 0 [pid 337] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 335] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 333] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 330] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 329] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 335] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 333] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 330] <... futex resumed>) = 0 [pid 336] <... futex resumed>) = 0 [pid 335] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 330] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 336] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 336] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 337] <... futex resumed>) = 1 [pid 335] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 333] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 337] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 335] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 333] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 337] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 333] <... ioctl resumed>, 0x7f6727fc893c) = 11 [pid 335] <... ioctl resumed>, 0x7f6727fc893c) = 11 [pid 337] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 335] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 333] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 337] <... futex resumed>) = 1 [pid 336] <... futex resumed>) = 0 [pid 336] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 336] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 337] socketpair(AF_UNIX, SOCK_STREAM, 0, [pid 335] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 333] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 337] <... socketpair resumed>NULL) = -1 EFAULT (Bad address) [pid 337] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 336] <... futex resumed>) = 0 [pid 337] <... futex resumed>) = 1 [pid 336] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 336] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 337] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 337] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 337] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 337] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 33.337292][ T334] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 33.362449][ T333] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 33.370482][ T335] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [pid 337] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 332] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 332] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 328] <... futex resumed>) = 0 [pid 328] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 332] <... futex resumed>) = 0 [pid 328] <... futex resumed>) = 1 [pid 332] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 328] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 332] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 332] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [pid 334] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 331] <... futex resumed>) = 0 [pid 334] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 331] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 334] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 331] <... futex resumed>) = 0 [pid 334] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 331] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 334] <... ioctl resumed>, 0x7f6727ef7130) = 26 [pid 335] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 335] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 330] <... futex resumed>) = 0 [pid 330] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 330] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 335] <... futex resumed>) = 0 [pid 335] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 335] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 333] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 329] <... futex resumed>) = 0 [pid 333] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 329] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 329] <... futex resumed>) = 0 [pid 333] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 329] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 335] <... ioctl resumed>, 0x7f6727ef7130) = 26 [pid 333] <... ioctl resumed>, 0x7f6727ef7130) = 26 [ 33.551742][ T315] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 33.559762][ T315] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 33.569240][ T315] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 33.578542][ T313] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 33.586188][ T313] cdc_ncm 5-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 33.594056][ T24] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 33.601909][ T24] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 33.610127][ T319] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 33.617739][ T313] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 33.624364][ T319] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 33.632302][ T24] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 33.638863][ T319] cdc_ncm 1-1:1.0: setting rx_max = 2048 [pid 332] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 332] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 328] <... futex resumed>) = 0 [pid 328] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 332] <... futex resumed>) = 0 [pid 328] <... futex resumed>) = 1 [pid 332] bpf(BPF_PROG_LOAD, NULL, 0 [pid 328] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 332] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 332] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 328] <... futex resumed>) = 0 [pid 332] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 328] close(3) = 0 [pid 328] close(4) = -1 EBADF (Bad file descriptor) [pid 328] close(5) = -1 EBADF (Bad file descriptor) [pid 328] close(6) = -1 EBADF (Bad file descriptor) [pid 328] close(7) = -1 EBADF (Bad file descriptor) [pid 328] close(8) = -1 EBADF (Bad file descriptor) [pid 328] close(9) = -1 EBADF (Bad file descriptor) [pid 328] close(10) = -1 EBADF (Bad file descriptor) [pid 328] close(11) = -1 EBADF (Bad file descriptor) [pid 328] close(12) = -1 EBADF (Bad file descriptor) [pid 328] close(13) = -1 EBADF (Bad file descriptor) [pid 328] close(14) = -1 EBADF (Bad file descriptor) [pid 328] close(15) = -1 EBADF (Bad file descriptor) [pid 328] close(16) = -1 EBADF (Bad file descriptor) [pid 328] close(17) = -1 EBADF (Bad file descriptor) [pid 328] close(18) = -1 EBADF (Bad file descriptor) [pid 328] close(19) = -1 EBADF (Bad file descriptor) [pid 328] close(20) = -1 EBADF (Bad file descriptor) [pid 328] close(21) = -1 EBADF (Bad file descriptor) [pid 328] close(22) = -1 EBADF (Bad file descriptor) [pid 328] close(23) = -1 EBADF (Bad file descriptor) [pid 328] close(24) = -1 EBADF (Bad file descriptor) [pid 328] close(25) = -1 EBADF (Bad file descriptor) [pid 328] close(26) = -1 EBADF (Bad file descriptor) [pid 328] close(27) = -1 EBADF (Bad file descriptor) [pid 328] close(28) = -1 EBADF (Bad file descriptor) [pid 328] close(29) = -1 EBADF (Bad file descriptor) [pid 328] exit_group(0 [pid 332] <... futex resumed>) = ? [pid 328] <... exit_group resumed>) = ? [pid 332] +++ exited with 0 +++ [pid 328] +++ exited with 0 +++ [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 300] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 300] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 300] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./1/binderfs") = 0 [pid 300] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./1") = 0 [pid 300] mkdir("./2", 0777) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 6 ./strace-static-x86_64: Process 338 attached [pid 338] set_robust_list(0x5555951c7760, 24) = 0 [pid 338] chdir("./2") = 0 [pid 338] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 334] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 331] <... futex resumed>) = 0 [pid 334] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 331] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 334] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 331] <... futex resumed>) = 0 [pid 334] bpf(BPF_PROG_LOAD, NULL, 0 [pid 331] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 334] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 334] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 331] <... futex resumed>) = 0 [pid 334] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 331] close(3) = 0 [pid 331] close(4) = -1 EBADF (Bad file descriptor) [pid 331] close(5) = -1 EBADF (Bad file descriptor) [pid 331] close(6) = -1 EBADF (Bad file descriptor) [pid 331] close(7) = -1 EBADF (Bad file descriptor) [pid 331] close(8) = -1 EBADF (Bad file descriptor) [pid 331] close(9) = -1 EBADF (Bad file descriptor) [pid 331] close(10) = -1 EBADF (Bad file descriptor) [pid 331] close(11) = -1 EBADF (Bad file descriptor) [pid 331] close(12) = -1 EBADF (Bad file descriptor) [pid 331] close(13) = -1 EBADF (Bad file descriptor) [pid 331] close(14) = -1 EBADF (Bad file descriptor) [pid 331] close(15) = -1 EBADF (Bad file descriptor) [pid 331] close(16) = -1 EBADF (Bad file descriptor) [pid 331] close(17) = -1 EBADF (Bad file descriptor) [pid 331] close(18) = -1 EBADF (Bad file descriptor) [pid 331] close(19) = -1 EBADF (Bad file descriptor) [pid 331] close(20) = -1 EBADF (Bad file descriptor) [pid 331] close(21) = -1 EBADF (Bad file descriptor) [pid 331] close(22) = -1 EBADF (Bad file descriptor) [pid 331] close(23) = -1 EBADF (Bad file descriptor) [pid 331] close(24) = -1 EBADF (Bad file descriptor) [pid 331] close(25) = -1 EBADF (Bad file descriptor) [pid 331] close(26) = -1 EBADF (Bad file descriptor) [pid 331] close(27) = -1 EBADF (Bad file descriptor) [pid 331] close(28) = -1 EBADF (Bad file descriptor) [pid 335] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 331] close(29 [pid 335] <... futex resumed>) = 1 [pid 333] <... futex resumed>) = 1 [pid 331] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 330] <... futex resumed>) = 0 [pid 329] <... futex resumed>) = 0 [pid 335] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 333] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 331] exit_group(0 [pid 330] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 329] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 335] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 334] <... futex resumed>) = ? [pid 333] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 331] <... exit_group resumed>) = ? [pid 330] <... futex resumed>) = 0 [pid 329] <... futex resumed>) = 0 [pid 335] bpf(BPF_PROG_LOAD, NULL, 0 [pid 334] +++ exited with 0 +++ [pid 333] bpf(BPF_PROG_LOAD, NULL, 0 [pid 331] +++ exited with 0 +++ [pid 330] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 329] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 338] <... prctl resumed>) = 0 [pid 335] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 333] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 338] setpgid(0, 0 [pid 335] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 338] <... setpgid resumed>) = 0 [pid 335] <... futex resumed>) = 1 [pid 333] <... futex resumed>) = 1 [pid 330] <... futex resumed>) = 0 [pid 329] <... futex resumed>) = 0 [pid 338] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 335] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 333] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 330] close(3 [pid 329] close(3 [pid 338] <... openat resumed>) = 3 [pid 337] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 330] <... close resumed>) = 0 [pid 329] <... close resumed>) = 0 [pid 338] write(3, "1000", 4 [pid 330] close(4 [pid 329] close(4 [pid 338] <... write resumed>) = 4 [pid 330] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] close(3 [pid 330] close(5 [pid 329] close(5 [pid 338] <... close resumed>) = 0 [pid 330] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] symlink("/dev/binderfs", "./binderfs" [pid 330] close(6 [pid 329] close(6 [pid 338] <... symlink resumed>) = 0 [pid 330] <... close resumed>) = -1 EBADF (Bad file descriptor) executing program [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] write(1, "executing program\n", 18 [pid 330] close(7 [pid 329] close(7 [pid 338] <... write resumed>) = 18 [pid 330] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 330] close(8 [pid 329] close(8 [pid 338] <... futex resumed>) = 0 [pid 330] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, [pid 330] close(9 [pid 329] close(9 [pid 338] <... rt_sigaction resumed>NULL, 8) = 0 [pid 330] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 330] close(10 [pid 329] close(10 [pid 338] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 330] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 330] close(11 [pid 329] close(11 [pid 338] <... mmap resumed>) = 0x7f6727ed9000 [pid 330] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE [pid 330] close(12 [pid 329] close(12 [pid 338] <... mprotect resumed>) = 0 [pid 330] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] rt_sigprocmask(SIG_BLOCK, ~[], [pid 330] close(13 [pid 329] close(13 [pid 338] <... rt_sigprocmask resumed>[], 8) = 0 [pid 330] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} [pid 330] close(14 [pid 329] close(14 [pid 330] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] <... clone3 resumed> => {parent_tid=[7]}, 88) = 7 [ 33.764412][ T315] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 33.777940][ T39] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 33.788526][ T313] cdc_ncm 5-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [pid 330] close(15 [pid 329] close(15 [pid 338] rt_sigprocmask(SIG_SETMASK, [], [pid 330] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 330] close(16 [pid 329] close(16 [pid 338] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 330] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] <... futex resumed>) = 0 [pid 330] close(17 [pid 329] close(17 [pid 338] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 330] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 330] close(18 [pid 329] close(18 [pid 330] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 330] close(19 [pid 329] close(19 [pid 330] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 330] close(20 [pid 329] close(20 [pid 330] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 330] close(21 [pid 329] close(21 [pid 330] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 330] close(22 [pid 329] close(22 [pid 330] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 330] close(23 [pid 329] close(23 [pid 330] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 330] close(24 [pid 329] close(24 [pid 330] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 330] close(25 [pid 329] close(25 [pid 330] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 330] close(26 [pid 329] close(26 [pid 330] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 330] close(27 [pid 329] close(27 [pid 330] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 330] close(28 [pid 329] close(28 [pid 330] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 330] close(29 [pid 329] close(29 [pid 330] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 329] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 330] exit_group(0 [pid 329] exit_group(0 [pid 335] <... futex resumed>) = ? [pid 333] <... futex resumed>) = ? [pid 330] <... exit_group resumed>) = ? [pid 329] <... exit_group resumed>) = ? [pid 335] +++ exited with 0 +++ [pid 333] +++ exited with 0 +++ [pid 330] +++ exited with 0 +++ [pid 329] +++ exited with 0 +++ ./strace-static-x86_64: Process 340 attached [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 340] set_robust_list(0x7f6727ef99a0, 24 [pid 299] restart_syscall(<... resuming interrupted clone ...> [pid 340] <... set_robust_list resumed>) = 0 [pid 340] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 340] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 340] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 338] <... futex resumed>) = 0 [pid 340] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 338] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 340] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 338] <... futex resumed>) = 0 [pid 340] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 338] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 340] <... futex resumed>) = 0 [pid 338] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 340] socketpair(AF_UNIX, SOCK_STREAM, 0, [pid 338] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 340] <... socketpair resumed>NULL) = -1 EFAULT (Bad address) [pid 338] <... futex resumed>) = 0 [pid 340] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 338] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 340] <... futex resumed>) = 0 [pid 338] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 340] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 338] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... restart_syscall resumed>) = 0 [pid 340] <... openat resumed>) = 3 [pid 338] <... futex resumed>) = 0 [pid 340] ioctl(3, USB_RAW_IOCTL_INIT [pid 338] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 340] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 299] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 340] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 340] <... ioctl resumed>, 0) = 0 [pid 299] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 340] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 299] <... openat resumed>) = 3 [pid 340] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 299] newfstatat(3, "", [pid 340] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 337] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 299] getdents64(3, [pid 337] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 302] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] <... getdents64 resumed>0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 337] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 302] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 302] <... openat resumed>) = 3 [pid 301] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 299] newfstatat(AT_FDCWD, "./1/binderfs", [pid 302] newfstatat(3, "", [pid 301] <... openat resumed>) = 3 [pid 299] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./1/binderfs") = 0 [pid 302] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 301] newfstatat(3, "", [pid 299] getdents64(3, [pid 302] getdents64(3, [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 299] <... getdents64 resumed>0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 302] <... getdents64 resumed>0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 301] getdents64(3, [pid 299] close(3 [pid 302] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 301] <... getdents64 resumed>0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 299] <... close resumed>) = 0 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 301] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 299] rmdir("./1" [pid 302] newfstatat(AT_FDCWD, "./1/binderfs", [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 299] <... rmdir resumed>) = 0 [pid 302] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] newfstatat(AT_FDCWD, "./1/binderfs", [pid 299] mkdir("./2", 0777 [pid 302] unlink("./1/binderfs" [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] <... mkdir resumed>) = 0 [pid 302] <... unlink resumed>) = 0 [pid 301] unlink("./1/binderfs" [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 302] getdents64(3, [pid 301] <... unlink resumed>) = 0 [pid 302] <... getdents64 resumed>0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 301] getdents64(3, [pid 299] <... clone resumed>, child_tidptr=0x5555951c7750) = 6 [pid 302] close(3 [pid 301] <... getdents64 resumed>0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 302] <... close resumed>) = 0 [pid 301] close(3 [pid 302] rmdir("./1" [pid 301] <... close resumed>) = 0 [pid 302] <... rmdir resumed>) = 0 [pid 301] rmdir("./1" [pid 302] mkdir("./2", 0777 [pid 301] <... rmdir resumed>) = 0 [pid 302] <... mkdir resumed>) = 0 [pid 301] mkdir("./2", 0777 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 301] <... mkdir resumed>) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 302] <... clone resumed>, child_tidptr=0x5555951c7750) = 6 [pid 301] <... clone resumed>, child_tidptr=0x5555951c7750) = 6 ./strace-static-x86_64: Process 341 attached [pid 341] set_robust_list(0x5555951c7760, 24) = 0 [pid 341] chdir("./2") = 0 [pid 341] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 341] setpgid(0, 0./strace-static-x86_64: Process 342 attached ) = 0 [pid 341] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 342] set_robust_list(0x5555951c7760, 24) = 0 [pid 342] chdir("./2" [pid 341] <... openat resumed>) = 3 [pid 342] <... chdir resumed>) = 0 [pid 342] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 342] setpgid(0, 0 [pid 341] write(3, "1000", 4) = 4 [pid 341] close(3) = 0 [pid 342] <... setpgid resumed>) = 0 [pid 341] symlink("/dev/binderfs", "./binderfs" [pid 342] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 341] <... symlink resumed>) = 0 [ 33.806907][ T24] cdc_ncm 3-1:1.0 usb2: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 33.826640][ T319] cdc_ncm 1-1:1.0 usb3: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 33.842773][ T313] usb 5-1: USB disconnect, device number 3 [ 33.849215][ T313] cdc_ncm 5-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) executing program [pid 342] <... openat resumed>) = 3 [pid 341] write(1, "executing program\n", 18) = 18 [pid 341] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 341] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 341] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 342] write(3, "1000", 4 [pid 341] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 342] <... write resumed>) = 4 [pid 341] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 342] close(3) = 0 executing program [pid 342] symlink("/dev/binderfs", "./binderfs") = 0 [pid 341] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 341] rt_sigprocmask(SIG_BLOCK, ~[], [pid 342] write(1, "executing program\n", 18) = 18 [pid 342] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, [pid 341] <... rt_sigprocmask resumed>[], 8) = 0 [pid 342] <... rt_sigaction resumed>NULL, 8) = 0 [pid 341] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} [pid 342] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], ./strace-static-x86_64: Process 343 attached NULL, 8) = 0 [pid 341] <... clone3 resumed> => {parent_tid=[7]}, 88) = 7 [pid 342] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 341] rt_sigprocmask(SIG_SETMASK, [], [pid 342] <... mmap resumed>) = 0x7f6727ed9000 [pid 341] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 342] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE [pid 341] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... mprotect resumed>) = 0 [pid 341] <... futex resumed>) = 0 [pid 342] rt_sigprocmask(SIG_BLOCK, ~[], [pid 341] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 342] <... rt_sigprocmask resumed>[], 8) = 0 [pid 342] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0}./strace-static-x86_64: Process 344 attached [pid 343] set_robust_list(0x5555951c7760, 24 [pid 344] set_robust_list(0x7f6727ef99a0, 24 [pid 343] <... set_robust_list resumed>) = 0 [pid 344] <... set_robust_list resumed>) = 0 [pid 344] rt_sigprocmask(SIG_SETMASK, [], [pid 343] chdir("./2" [pid 342] <... clone3 resumed> => {parent_tid=[7]}, 88) = 7 [pid 344] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 343] <... chdir resumed>) = 0 [pid 344] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0 [pid 343] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 344] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 343] <... prctl resumed>) = 0 [pid 344] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 343] setpgid(0, 0 [pid 342] rt_sigprocmask(SIG_SETMASK, [], [pid 341] <... futex resumed>) = 0 [pid 342] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 341] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 341] <... futex resumed>) = 0 [pid 342] <... futex resumed>) = 0 [pid 341] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 342] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 344] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 343] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 347 attached [pid 347] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 347] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 347] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 347] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... futex resumed>) = 0 [pid 342] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 347] <... futex resumed>) = 1 [pid 347] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [ 33.860676][ T315] usb 4-1: USB disconnect, device number 3 [ 33.869295][ T319] usb 1-1: USB disconnect, device number 3 [ 33.877368][ T24] usb 3-1: USB disconnect, device number 3 [ 33.883906][ T315] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 33.896650][ T319] cdc_ncm 1-1:1.0 usb3: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [pid 347] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 342] <... futex resumed>) = 0 [pid 347] socketpair(AF_UNIX, SOCK_STREAM, 0, [pid 344] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 343] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 342] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 347] <... socketpair resumed>NULL) = -1 EFAULT (Bad address) [pid 342] <... futex resumed>) = 0 [pid 347] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 347] <... futex resumed>) = 0 [pid 344] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 347] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 344] <... futex resumed>) = 1 [pid 343] <... openat resumed>) = 3 [pid 342] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 341] <... futex resumed>) = 0 [pid 347] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 344] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 343] write(3, "1000", 4 [pid 342] <... futex resumed>) = 0 [pid 341] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 347] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 344] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 343] <... write resumed>) = 4 [pid 342] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 341] <... futex resumed>) = 0 [pid 347] <... openat resumed>) = 3 [pid 344] socketpair(AF_UNIX, SOCK_STREAM, 0, [pid 343] close(3 [pid 341] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 347] ioctl(3, USB_RAW_IOCTL_INIT [pid 344] <... socketpair resumed>NULL) = -1 EFAULT (Bad address) [pid 343] <... close resumed>) = 0 [pid 344] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 343] symlink("/dev/binderfs", "./binderfs" [pid 347] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 344] <... futex resumed>) = 1 [pid 341] <... futex resumed>) = 0 [pid 347] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 344] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 343] <... symlink resumed>) = 0 [pid 341] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000executing program [pid 347] <... ioctl resumed>, 0) = 0 [pid 344] <... openat resumed>) = 3 [pid 343] write(1, "executing program\n", 18 [pid 341] <... futex resumed>) = 0 [pid 347] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 344] ioctl(3, USB_RAW_IOCTL_INIT [pid 343] <... write resumed>) = 18 [pid 341] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 347] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 344] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 343] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 347] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 344] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 343] <... futex resumed>) = 0 [pid 344] <... ioctl resumed>, 0) = 0 [pid 343] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, [pid 344] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 343] <... rt_sigaction resumed>NULL, 8) = 0 [pid 344] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 343] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 344] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 343] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 343] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 343] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 343] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 343] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[7]}, 88) = 7 [pid 343] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 343] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 343] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}./strace-static-x86_64: Process 348 attached [pid 348] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 348] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 348] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 348] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 343] <... futex resumed>) = 0 [pid 343] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 343] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 348] <... futex resumed>) = 1 [pid 348] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 348] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 343] <... futex resumed>) = 0 [pid 343] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 343] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 348] <... futex resumed>) = 1 [pid 348] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 348] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 343] <... futex resumed>) = 0 [pid 343] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 343] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 348] <... futex resumed>) = 1 [pid 348] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 348] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 348] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 348] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 33.908916][ T24] cdc_ncm 3-1:1.0 usb2: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [pid 348] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 337] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 337] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 337] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 337] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 337] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 337] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 337] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 337] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 337] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 337] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 337] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 337] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 337] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 337] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [ 34.014419][ T39] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.026442][ T39] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 34.042804][ T39] usb 2-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 34.053013][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [pid 337] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 337] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 337] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 337] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 337] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [ 34.062306][ T39] usb 2-1: Product: syz [ 34.066725][ T39] usb 2-1: Manufacturer: syz [ 34.071805][ T39] usb 2-1: SerialNumber: syz [pid 337] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 336] <... futex resumed>) = 0 [pid 337] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 336] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 337] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 336] <... futex resumed>) = 0 [pid 337] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 336] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 337] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 337] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 337] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 337] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 337] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 348] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 348] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [ 34.283089][ T337] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 34.295461][ T313] usb 5-1: new high-speed USB device number 4 using dummy_hcd [pid 348] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 340] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 347] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 344] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 340] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 347] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 344] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 347] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 347] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 344] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 340] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 344] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [ 34.332289][ T315] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 34.341364][ T319] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 34.350269][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [pid 340] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 348] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 348] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 348] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 348] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 348] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 348] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 348] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 337] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 337] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 336] <... futex resumed>) = 0 [pid 336] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 337] <... futex resumed>) = 0 [pid 336] <... futex resumed>) = 1 [pid 348] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 337] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 336] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 348] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 337] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 348] <... ioctl resumed>, 0x7f6727ef7110) = 4 [pid 348] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 337] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 348] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 348] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 337] <... ioctl resumed>, 0) = -1 EINVAL (Invalid argument) [pid 348] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 348] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 337] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 348] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 337] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 348] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 337] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 348] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 348] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [ 34.485913][ T313] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.497640][ T313] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 34.516044][ T313] usb 5-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 34.527624][ T313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [pid 348] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 347] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 344] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 340] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 347] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 344] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 340] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 347] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 344] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 340] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 347] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 344] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 340] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 344] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 344] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 347] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 344] <... ioctl resumed>, 0x7f6727ef7110) = 9 [pid 340] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 347] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 344] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 347] <... ioctl resumed>, 0x7f6727ef7110) = 9 [pid 344] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 340] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 344] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 348] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 348] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW [pid 347] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 340] <... ioctl resumed>, 0x7f6727ef7110) = 9 [pid 348] <... ioctl resumed>, 0) = 0 [pid 347] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 344] <... ioctl resumed>, 0x7f6727ef7110) = 100 [pid 348] ioctl(3, USB_RAW_IOCTL_CONFIGURE [pid 347] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 344] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 340] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 348] <... ioctl resumed>, 0) = 0 [pid 340] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 347] <... ioctl resumed>, 0x7f6727ef7110) = 100 [pid 348] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 347] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 340] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 348] <... ioctl resumed>, 0x7f6727fc850c) = 0 [pid 348] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [pid 340] <... ioctl resumed>, 0x7f6727ef7110) = 100 [ 34.536300][ T313] usb 5-1: Product: syz [ 34.541797][ T313] usb 5-1: Manufacturer: syz [ 34.547239][ T313] usb 5-1: SerialNumber: syz [ 34.554043][ T319] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.566380][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 340] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 347] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 344] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 340] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 347] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 344] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 340] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 347] <... ioctl resumed>, 0x7f6727ef7110) = 4 [pid 344] <... ioctl resumed>, 0x7f6727ef7110) = 4 [pid 340] <... ioctl resumed>, 0x7f6727ef7110) = 4 [pid 347] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 344] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 340] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 347] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 344] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 347] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 344] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 347] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 344] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 347] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 344] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 347] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 344] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 347] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 344] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 347] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 344] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 347] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 344] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 347] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 344] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 347] <... ioctl resumed>, 0x7f6727ef7110) = 8 [ 34.578915][ T315] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.591439][ T319] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 34.603306][ T24] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 34.614601][ T315] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [pid 347] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 344] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 344] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 340] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 340] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 340] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 340] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 340] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 34.629887][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 34.641178][ T319] usb 1-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 34.652665][ T319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.661634][ T319] usb 1-1: Product: syz [ 34.666322][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.675547][ T24] usb 3-1: Product: syz [ 34.680326][ T319] usb 1-1: Manufacturer: syz [pid 340] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 340] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 337] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 336] <... futex resumed>) = 0 [pid 337] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 336] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 337] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 344] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 337] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 336] <... futex resumed>) = 0 [pid 344] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 344] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 344] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 344] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 336] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 347] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 344] <... ioctl resumed>, 0x7f6727ef7110) = 0 [pid 337] <... ioctl resumed>, 0x7f6727ef7130) = 28 [pid 347] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 347] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 347] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 347] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [ 34.685812][ T319] usb 1-1: SerialNumber: syz [ 34.691245][ T315] usb 4-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 34.703183][ T24] usb 3-1: Manufacturer: syz [ 34.708251][ T24] usb 3-1: SerialNumber: syz [ 34.713798][ T315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.724842][ T315] usb 4-1: Product: syz [ 34.730556][ T315] usb 4-1: Manufacturer: syz [pid 340] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 340] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 340] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 340] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 340] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [ 34.736105][ T315] usb 4-1: SerialNumber: syz [pid 348] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 343] <... futex resumed>) = 0 [pid 348] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 343] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 348] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 343] <... futex resumed>) = 0 [pid 348] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 343] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 348] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 348] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 348] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 348] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 348] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 34.781000][ T348] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [pid 344] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 341] <... futex resumed>) = 0 [pid 344] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 341] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 344] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 341] <... futex resumed>) = 0 [pid 337] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 344] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 341] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 337] <... futex resumed>) = 1 [pid 336] <... futex resumed>) = 0 [pid 344] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 337] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 336] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 344] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 337] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 336] <... futex resumed>) = 0 [pid 344] <... ioctl resumed>, 0) = 0 [pid 337] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 336] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 344] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 337] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 337] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 344] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 347] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 344] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 347] <... futex resumed>) = 1 [pid 344] <... ioctl resumed>, 0x7f6727fc893c) = 11 [pid 342] <... futex resumed>) = 0 [pid 347] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 344] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 342] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 347] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 342] <... futex resumed>) = 0 [pid 347] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 342] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 347] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 347] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 347] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 337] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 337] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 337] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 344] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 340] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 347] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 347] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 347] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 340] <... futex resumed>) = 1 [pid 338] <... futex resumed>) = 0 [pid 340] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 338] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 340] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 338] <... futex resumed>) = 0 [pid 340] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 338] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 340] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 340] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 340] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 340] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 340] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 348] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 343] <... futex resumed>) = 0 [pid 348] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 343] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 343] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 348] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 348] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 348] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 348] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 348] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 34.932424][ T344] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 34.933024][ T337] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 34.942568][ T347] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 34.956574][ T340] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [pid 337] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 337] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 336] <... futex resumed>) = 0 [pid 336] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 337] <... futex resumed>) = 0 [pid 336] <... futex resumed>) = 1 [pid 337] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 336] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 337] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 337] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 344] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 341] <... futex resumed>) = 0 [pid 337] <... ioctl resumed>, 0x7f6727ef7130) = 26 [pid 347] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 344] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 341] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 347] <... futex resumed>) = 1 [pid 342] <... futex resumed>) = 0 [pid 344] <... futex resumed>) = 0 [pid 342] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 341] <... futex resumed>) = 1 [pid 344] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 344] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 344] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 342] <... futex resumed>) = 0 [pid 341] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 347] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 344] <... ioctl resumed>, 0xb) = 0 [pid 344] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 347] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 344] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 342] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 347] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 340] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 347] <... ioctl resumed>, 0) = -1 EINVAL (Invalid argument) [pid 340] <... futex resumed>) = 1 [pid 338] <... futex resumed>) = 0 [pid 347] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 340] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 338] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 347] <... ioctl resumed>, 0xb) = 0 [pid 340] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 338] <... futex resumed>) = 0 [pid 347] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 340] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 338] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 340] <... ioctl resumed>, 0) = -1 EINVAL (Invalid argument) [pid 347] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 340] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 340] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 348] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 343] <... futex resumed>) = 0 [pid 348] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 343] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 348] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 348] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 343] <... futex resumed>) = 0 [pid 343] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 348] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 348] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [ 35.152009][ T39] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 35.164435][ T39] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 35.176297][ T39] cdc_ncm 2-1:1.0: setting rx_max = 2048 [pid 337] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 336] <... futex resumed>) = 0 [pid 336] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 336] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 337] bpf(BPF_PROG_LOAD, NULL, 0) = -1 EFAULT (Bad address) [pid 337] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 336] <... futex resumed>) = 0 [pid 336] close(3 [pid 337] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 336] <... close resumed>) = 0 [pid 336] close(4) = -1 EBADF (Bad file descriptor) [pid 336] close(5) = -1 EBADF (Bad file descriptor) [pid 336] close(6) = -1 EBADF (Bad file descriptor) [pid 336] close(7) = -1 EBADF (Bad file descriptor) [pid 336] close(8) = -1 EBADF (Bad file descriptor) [pid 336] close(9) = -1 EBADF (Bad file descriptor) [pid 336] close(10) = -1 EBADF (Bad file descriptor) [pid 336] close(11) = -1 EBADF (Bad file descriptor) [pid 336] close(12) = -1 EBADF (Bad file descriptor) [pid 336] close(13) = -1 EBADF (Bad file descriptor) [pid 336] close(14) = -1 EBADF (Bad file descriptor) [pid 336] close(15) = -1 EBADF (Bad file descriptor) [pid 336] close(16) = -1 EBADF (Bad file descriptor) [pid 336] close(17) = -1 EBADF (Bad file descriptor) [pid 336] close(18) = -1 EBADF (Bad file descriptor) [pid 336] close(19) = -1 EBADF (Bad file descriptor) [pid 336] close(20) = -1 EBADF (Bad file descriptor) [pid 336] close(21) = -1 EBADF (Bad file descriptor) [pid 336] close(22) = -1 EBADF (Bad file descriptor) [pid 336] close(23) = -1 EBADF (Bad file descriptor) [pid 336] close(24) = -1 EBADF (Bad file descriptor) [pid 336] close(25) = -1 EBADF (Bad file descriptor) [pid 336] close(26) = -1 EBADF (Bad file descriptor) [pid 336] close(27) = -1 EBADF (Bad file descriptor) [pid 336] close(28) = -1 EBADF (Bad file descriptor) [pid 336] close(29) = -1 EBADF (Bad file descriptor) [pid 336] exit_group(0) = ? [pid 344] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 341] <... futex resumed>) = 0 [pid 344] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 341] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 344] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 341] <... futex resumed>) = 0 [pid 344] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 341] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 344] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 344] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 337] <... futex resumed>) = ? [pid 344] <... ioctl resumed>, 0x7f6727ef7130) = 28 [pid 337] +++ exited with 0 +++ [pid 336] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 298] restart_syscall(<... resuming interrupted clone ...> [pid 347] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 342] <... futex resumed>) = 0 [pid 347] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 342] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 347] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 342] <... futex resumed>) = 0 [pid 347] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 342] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 298] <... restart_syscall resumed>) = 0 [pid 347] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 347] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [pid 298] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 340] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... openat resumed>) = 3 [pid 340] <... futex resumed>) = 1 [pid 338] <... futex resumed>) = 0 [pid 298] newfstatat(3, "", [pid 340] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 338] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 340] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 338] <... futex resumed>) = 0 [pid 298] getdents64(3, [pid 340] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 338] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 298] <... getdents64 resumed>0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 340] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 298] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 340] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./2/binderfs", [pid 340] <... ioctl resumed>, 0x7f6727ef7130) = 28 [pid 298] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./2/binderfs") = 0 [pid 298] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./2") = 0 [pid 298] mkdir("./3", 0777) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 8 ./strace-static-x86_64: Process 349 attached [pid 349] set_robust_list(0x5555951c7760, 24) = 0 [pid 349] chdir("./3") = 0 [pid 349] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 349] setpgid(0, 0) = 0 [pid 349] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 349] write(3, "1000", 4) = 4 [pid 349] close(3) = 0 [pid 349] symlink("/dev/binderfs", "./binderfs") = 0 [pid 349] write(1, "executing program\n", 18executing program ) = 18 [pid 349] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 349] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 349] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 349] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 349] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 349] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 349] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[9]}, 88) = 9 [pid 349] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 349] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 349] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}./strace-static-x86_64: Process 350 attached [pid 350] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 350] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 350] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 350] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 349] <... futex resumed>) = 0 [pid 349] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 349] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 350] <... futex resumed>) = 1 [pid 350] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 350] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 349] <... futex resumed>) = 0 [pid 349] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 349] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 350] <... futex resumed>) = 1 [pid 350] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 348] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 343] <... futex resumed>) = 0 [pid 348] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 343] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 348] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 343] <... futex resumed>) = 0 [pid 348] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 343] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 350] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 349] <... futex resumed>) = 0 [pid 349] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 349] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 350] <... futex resumed>) = 1 [pid 350] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 350] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 350] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 350] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 350] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 348] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 348] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 348] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 35.367466][ T39] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 35.397240][ T348] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 35.410705][ T39] usb 2-1: USB disconnect, device number 4 [ 35.418418][ T39] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [pid 344] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 341] <... futex resumed>) = 0 [pid 344] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 341] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 344] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 341] <... futex resumed>) = 0 [pid 341] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 344] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 344] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 347] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 340] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 344] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 344] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 344] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 347] <... futex resumed>) = 1 [pid 347] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 344] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 340] <... futex resumed>) = 1 [pid 340] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 342] <... futex resumed>) = 0 [pid 338] <... futex resumed>) = 0 [pid 342] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 338] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 347] <... futex resumed>) = 0 [pid 342] <... futex resumed>) = 1 [pid 347] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 342] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 347] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 347] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 340] <... futex resumed>) = 0 [pid 338] <... futex resumed>) = 1 [pid 340] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 338] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 340] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 340] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 347] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 347] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 347] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 340] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 348] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 343] <... futex resumed>) = 0 [pid 348] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 343] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 348] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 343] <... futex resumed>) = 0 [pid 348] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 343] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 348] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 348] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [pid 340] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [ 35.582494][ T344] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 35.595148][ T347] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 35.603632][ T340] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 35.618105][ T313] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [pid 340] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 35.625591][ T313] cdc_ncm 5-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 35.635015][ T313] cdc_ncm 5-1:1.0: setting rx_max = 2048 [pid 344] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 341] <... futex resumed>) = 0 [pid 341] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 344] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 341] <... futex resumed>) = 0 [pid 341] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 344] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 344] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [pid 347] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 347] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 342] <... futex resumed>) = 0 [pid 342] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 347] <... futex resumed>) = 0 [pid 342] <... futex resumed>) = 1 [pid 347] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 347] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [pid 342] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 348] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 343] <... futex resumed>) = 0 [pid 348] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 343] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 348] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 343] <... futex resumed>) = 0 [pid 348] bpf(BPF_PROG_LOAD, NULL, 0 [pid 343] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 348] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 348] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 343] <... futex resumed>) = 0 [pid 348] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 343] close(3) = 0 [pid 343] close(4) = -1 EBADF (Bad file descriptor) [pid 343] close(5) = -1 EBADF (Bad file descriptor) [pid 343] close(6) = -1 EBADF (Bad file descriptor) [pid 343] close(7) = -1 EBADF (Bad file descriptor) [pid 343] close(8) = -1 EBADF (Bad file descriptor) [pid 343] close(9) = -1 EBADF (Bad file descriptor) [pid 343] close(10) = -1 EBADF (Bad file descriptor) [pid 343] close(11) = -1 EBADF (Bad file descriptor) [pid 343] close(12) = -1 EBADF (Bad file descriptor) [pid 343] close(13) = -1 EBADF (Bad file descriptor) [pid 343] close(14) = -1 EBADF (Bad file descriptor) [pid 343] close(15) = -1 EBADF (Bad file descriptor) [pid 343] close(16) = -1 EBADF (Bad file descriptor) [pid 343] close(17) = -1 EBADF (Bad file descriptor) [pid 343] close(18) = -1 EBADF (Bad file descriptor) [pid 343] close(19) = -1 EBADF (Bad file descriptor) [pid 343] close(20) = -1 EBADF (Bad file descriptor) [pid 343] close(21) = -1 EBADF (Bad file descriptor) [pid 343] close(22) = -1 EBADF (Bad file descriptor) [pid 343] close(23) = -1 EBADF (Bad file descriptor) [pid 343] close(24) = -1 EBADF (Bad file descriptor) [pid 343] close(25) = -1 EBADF (Bad file descriptor) [pid 343] close(26) = -1 EBADF (Bad file descriptor) [pid 343] close(27) = -1 EBADF (Bad file descriptor) [pid 343] close(28) = -1 EBADF (Bad file descriptor) [pid 343] close(29) = -1 EBADF (Bad file descriptor) [pid 343] exit_group(0 [pid 348] <... futex resumed>) = ? [pid 343] <... exit_group resumed>) = ? [pid 348] +++ exited with 0 +++ [pid 343] +++ exited with 0 +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 340] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 338] <... futex resumed>) = 0 [pid 340] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 338] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 340] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 338] <... futex resumed>) = 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 340] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 338] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 301] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 340] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 301] <... openat resumed>) = 3 [pid 340] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 301] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 35.796178][ T319] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 35.803259][ T319] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 35.811508][ T319] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 35.820273][ T24] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 35.829021][ T24] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [pid 301] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./2/binderfs") = 0 [pid 301] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 340] <... ioctl resumed>, 0x7f6727ef7130) = 26 [pid 301] rmdir("./2") = 0 [pid 301] mkdir("./3", 0777) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 8 ./strace-static-x86_64: Process 351 attached [pid 351] set_robust_list(0x5555951c7760, 24) = 0 [pid 351] chdir("./3") = 0 [pid 351] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 351] setpgid(0, 0) = 0 [pid 351] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 351] write(3, "1000", 4) = 4 [pid 351] close(3) = 0 [pid 351] symlink("/dev/binderfs", "./binderfs") = 0 [pid 351] write(1, "executing program\n", 18executing program ) = 18 [pid 351] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 351] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 351] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 351] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 351] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 351] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 351] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[9]}, 88) = 9 [pid 351] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 351] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 351] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}./strace-static-x86_64: Process 352 attached [pid 352] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 352] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 352] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 352] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 351] <... futex resumed>) = 0 [pid 351] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 351] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 352] <... futex resumed>) = 1 [pid 352] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 352] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 351] <... futex resumed>) = 0 [pid 351] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 351] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 352] <... futex resumed>) = 1 [pid 352] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 352] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 351] <... futex resumed>) = 0 [pid 351] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 351] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 352] <... futex resumed>) = 1 [pid 352] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 352] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 352] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 352] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 352] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 350] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 350] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [ 35.838131][ T39] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 35.849224][ T315] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 35.856511][ T315] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 35.857894][ T313] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 35.880111][ T315] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 35.887242][ T24] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 35.898307][ T313] usb 5-1: USB disconnect, device number 4 [ 35.905300][ T313] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [pid 350] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 344] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 341] <... futex resumed>) = 0 [pid 344] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 341] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 344] bpf(BPF_PROG_LOAD, NULL, 0 [pid 341] <... futex resumed>) = 0 [pid 344] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 341] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 344] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 341] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 344] <... futex resumed>) = 0 [pid 341] close(3 [pid 344] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 341] <... close resumed>) = 0 [pid 341] close(4) = -1 EBADF (Bad file descriptor) [pid 341] close(5) = -1 EBADF (Bad file descriptor) [pid 341] close(6) = -1 EBADF (Bad file descriptor) [pid 341] close(7) = -1 EBADF (Bad file descriptor) [pid 341] close(8) = -1 EBADF (Bad file descriptor) [pid 341] close(9) = -1 EBADF (Bad file descriptor) [pid 341] close(10) = -1 EBADF (Bad file descriptor) [pid 341] close(11) = -1 EBADF (Bad file descriptor) [pid 341] close(12) = -1 EBADF (Bad file descriptor) [pid 341] close(13) = -1 EBADF (Bad file descriptor) [pid 341] close(14) = -1 EBADF (Bad file descriptor) [pid 341] close(15) = -1 EBADF (Bad file descriptor) [pid 341] close(16) = -1 EBADF (Bad file descriptor) [pid 341] close(17) = -1 EBADF (Bad file descriptor) [pid 341] close(18) = -1 EBADF (Bad file descriptor) [pid 341] close(19) = -1 EBADF (Bad file descriptor) [pid 341] close(20) = -1 EBADF (Bad file descriptor) [pid 341] close(21) = -1 EBADF (Bad file descriptor) [pid 341] close(22) = -1 EBADF (Bad file descriptor) [pid 341] close(23) = -1 EBADF (Bad file descriptor) [pid 341] close(24) = -1 EBADF (Bad file descriptor) [pid 341] close(25) = -1 EBADF (Bad file descriptor) [pid 341] close(26) = -1 EBADF (Bad file descriptor) [pid 341] close(27) = -1 EBADF (Bad file descriptor) [pid 341] close(28) = -1 EBADF (Bad file descriptor) [pid 341] close(29) = -1 EBADF (Bad file descriptor) [pid 341] exit_group(0) = ? [pid 344] <... futex resumed>) = ? [pid 344] +++ exited with 0 +++ [pid 341] +++ exited with 0 +++ [pid 347] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 347] <... futex resumed>) = 1 [pid 342] <... futex resumed>) = 0 [pid 299] restart_syscall(<... resuming interrupted clone ...> [pid 347] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 342] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 347] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 342] <... futex resumed>) = 0 [pid 347] bpf(BPF_PROG_LOAD, NULL, 0 [pid 342] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 347] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 347] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 342] <... futex resumed>) = 0 [pid 347] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 342] close(3) = 0 [pid 299] <... restart_syscall resumed>) = 0 [pid 342] close(4) = -1 EBADF (Bad file descriptor) [pid 342] close(5 [pid 299] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW [pid 342] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 342] close(6 [pid 299] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 342] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 299] <... openat resumed>) = 3 [pid 342] close(7 [pid 299] newfstatat(3, "", [pid 342] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 342] close(8 [pid 299] getdents64(3, [pid 342] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 299] <... getdents64 resumed>0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 342] close(9 [pid 299] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 342] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 342] close(10 [pid 299] newfstatat(AT_FDCWD, "./2/binderfs", [pid 342] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 299] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 342] close(11 [pid 299] unlink("./2/binderfs" [pid 342] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 299] <... unlink resumed>) = 0 [pid 342] close(12 [pid 299] getdents64(3, [pid 342] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 299] <... getdents64 resumed>0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 342] close(13 [pid 299] close(3 [pid 342] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 299] <... close resumed>) = 0 [pid 342] close(14 [pid 299] rmdir("./2" [pid 342] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 299] <... rmdir resumed>) = 0 [pid 342] close(15 [pid 299] mkdir("./3", 0777 [pid 342] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 299] <... mkdir resumed>) = 0 [pid 342] close(16 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 342] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 342] close(17 [pid 299] <... clone resumed>, child_tidptr=0x5555951c7750) = 8 [pid 342] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 342] close(18) = -1 EBADF (Bad file descriptor) [pid 342] close(19) = -1 EBADF (Bad file descriptor) [pid 342] close(20) = -1 EBADF (Bad file descriptor) [pid 342] close(21) = -1 EBADF (Bad file descriptor) [pid 342] close(22) = -1 EBADF (Bad file descriptor) [pid 342] close(23) = -1 EBADF (Bad file descriptor) [pid 342] close(24) = -1 EBADF (Bad file descriptor) [pid 342] close(25) = -1 EBADF (Bad file descriptor) [pid 342] close(26) = -1 EBADF (Bad file descriptor) [pid 342] close(27) = -1 EBADF (Bad file descriptor) [pid 342] close(28) = -1 EBADF (Bad file descriptor) [pid 342] close(29) = -1 EBADF (Bad file descriptor) [pid 342] exit_group(0 [pid 347] <... futex resumed>) = ? [pid 342] <... exit_group resumed>) = ? [pid 347] +++ exited with 0 +++ [pid 342] +++ exited with 0 +++ ./strace-static-x86_64: Process 353 attached [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 353] set_robust_list(0x5555951c7760, 24) = 0 [pid 302] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 302] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 302] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 302] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 340] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] unlink("./2/binderfs" [pid 340] <... futex resumed>) = 1 [pid 338] <... futex resumed>) = 0 [pid 302] <... unlink resumed>) = 0 [ 36.000866][ T319] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 36.023947][ T24] cdc_ncm 3-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 36.038186][ T319] usb 1-1: USB disconnect, device number 4 [pid 340] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 338] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] getdents64(3, [pid 340] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 338] <... futex resumed>) = 0 [pid 302] <... getdents64 resumed>0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 340] bpf(BPF_PROG_LOAD, NULL, 0 [pid 338] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 302] close(3 [pid 353] chdir("./3" [pid 340] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 302] <... close resumed>) = 0 [pid 353] <... chdir resumed>) = 0 [pid 340] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] rmdir("./2" [pid 353] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 340] <... futex resumed>) = 1 [pid 338] <... futex resumed>) = 0 [pid 302] <... rmdir resumed>) = 0 [pid 353] <... prctl resumed>) = 0 [pid 340] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 338] close(3 [pid 302] mkdir("./3", 0777 [pid 353] setpgid(0, 0 [pid 338] <... close resumed>) = 0 [pid 302] <... mkdir resumed>) = 0 [pid 338] close(4 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] close(5 [pid 302] <... clone resumed>, child_tidptr=0x5555951c7750) = 8 [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] close(6) = -1 EBADF (Bad file descriptor) [pid 338] close(7 [pid 353] <... setpgid resumed>) = 0 [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] close(8) = -1 EBADF (Bad file descriptor) [pid 353] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 338] close(9) = -1 EBADF (Bad file descriptor) [pid 353] <... openat resumed>) = 3 [pid 338] close(10 [pid 353] write(3, "1000", 4 [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 353] <... write resumed>) = 4 [pid 338] close(11 [pid 353] close(3 [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 353] <... close resumed>) = 0 [pid 338] close(12 [pid 353] symlink("/dev/binderfs", "./binderfs" [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 353] <... symlink resumed>) = 0 [pid 338] close(13) = -1 EBADF (Bad file descriptor) [pid 338] close(14) = -1 EBADF (Bad file descriptor) [pid 338] close(15) = -1 EBADF (Bad file descriptor) [pid 338] close(16) = -1 EBADF (Bad file descriptor) [pid 338] close(17) = -1 EBADF (Bad file descriptor) [pid 338] close(18) = -1 EBADF (Bad file descriptor) [pid 338] close(19) = -1 EBADF (Bad file descriptor) [pid 338] close(20) = -1 EBADF (Bad file descriptor) [pid 338] close(21) = -1 EBADF (Bad file descriptor) [pid 338] close(22) = -1 EBADF (Bad file descriptor) [pid 338] close(23) = -1 EBADF (Bad file descriptor) ./strace-static-x86_64: Process 354 attached [pid 338] close(24 [pid 354] set_robust_list(0x5555951c7760, 24 [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 354] <... set_robust_list resumed>) = 0 [pid 338] close(25 [pid 354] chdir("./3" [pid 353] write(1, "executing program\n", 18 [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 354] <... chdir resumed>) = 0 [pid 338] close(26 [pid 354] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 354] <... prctl resumed>) = 0 [pid 338] close(27 [pid 354] setpgid(0, 0 [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 354] <... setpgid resumed>) = 0 [pid 338] close(28 [pid 354] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 338] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 338] close(29) = -1 EBADF (Bad file descriptor) [pid 338] exit_group(0 [pid 340] <... futex resumed>) = ? [pid 338] <... exit_group resumed>) = ? [pid 340] +++ exited with 0 +++ [pid 338] +++ exited with 0 +++ [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 300] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 354] <... openat resumed>) = 3 [pid 300] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 354] write(3, "1000", 4 [pid 300] <... openat resumed>) = 3 [pid 354] <... write resumed>) = 4 [pid 300] newfstatat(3, "", [pid 354] close(3 [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 354] <... close resumed>) = 0 [pid 300] getdents64(3, [pid 354] symlink("/dev/binderfs", "./binderfs" [pid 300] <... getdents64 resumed>0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 354] <... symlink resumed>) = 0 [pid 300] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOWexecuting program [pid 354] write(1, "executing program\n", 18 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 354] <... write resumed>) = 18 [pid 300] newfstatat(AT_FDCWD, "./2/binderfs", [pid 354] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 354] <... futex resumed>) = 0 [pid 300] unlink("./2/binderfs" [pid 354] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, [pid 300] <... unlink resumed>) = 0 [pid 354] <... rt_sigaction resumed>NULL, 8) = 0 [pid 300] getdents64(3, [pid 354] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 300] <... getdents64 resumed>0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 354] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 300] close(3 [pid 354] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 300] <... close resumed>) = 0 executing program [pid 354] <... mmap resumed>) = 0x7f6727ed9000 [pid 300] rmdir("./2" [pid 353] <... write resumed>) = 18 [pid 354] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE [pid 353] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 350] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 300] <... rmdir resumed>) = 0 [pid 354] <... mprotect resumed>) = 0 [pid 350] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 300] mkdir("./3", 0777 [pid 354] rt_sigprocmask(SIG_BLOCK, ~[], [pid 300] <... mkdir resumed>) = 0 [pid 354] <... rt_sigprocmask resumed>[], 8) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 354] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} [pid 300] <... clone resumed>, child_tidptr=0x5555951c7750) = 8 [pid 354] <... clone3 resumed> => {parent_tid=[9]}, 88) = 9 [pid 354] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 354] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 354] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}./strace-static-x86_64: Process 355 attached [pid 355] set_robust_list(0x5555951c7760, 24) = 0 [pid 355] chdir("./3") = 0 [pid 355] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 355] setpgid(0, 0) = 0 [pid 355] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 355] write(3, "1000", 4) = 4 [pid 355] close(3) = 0 [pid 355] symlink("/dev/binderfs", "./binderfs") = 0 [pid 355] write(1, "executing program\n", 18executing program ) = 18 [pid 350] <... ioctl resumed>, 0x7f6727ef7110) = 18 [ 36.045551][ T319] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 36.057900][ T24] usb 3-1: USB disconnect, device number 4 [ 36.070035][ T315] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 36.082884][ T24] cdc_ncm 3-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [pid 350] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH./strace-static-x86_64: Process 356 attached [pid 353] <... futex resumed>) = 0 [pid 350] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 356] set_robust_list(0x7f6727ef99a0, 24 [pid 353] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, [pid 350] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 356] <... set_robust_list resumed>) = 0 [pid 353] <... rt_sigaction resumed>NULL, 8) = 0 [pid 350] <... ioctl resumed>, 0x7f6727ef7110) = 9 [pid 350] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 350] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 355] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 350] <... ioctl resumed>, 0x7f6727ef7110) = 100 [pid 350] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 355] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, [pid 353] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 355] <... rt_sigaction resumed>NULL, 8) = 0 [pid 355] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 355] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 355] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 355] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 355] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[9]}, 88) = 9 [pid 355] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 355] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 355] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}./strace-static-x86_64: Process 357 attached [pid 357] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 357] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 357] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 357] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 355] <... futex resumed>) = 0 [pid 355] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 355] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 357] <... futex resumed>) = 1 [pid 357] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 357] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 355] <... futex resumed>) = 0 [pid 355] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 355] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 357] <... futex resumed>) = 1 [pid 357] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 357] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 355] <... futex resumed>) = 0 [pid 355] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 355] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 357] <... futex resumed>) = 1 [pid 357] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 357] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 357] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 357] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 356] rt_sigprocmask(SIG_SETMASK, [], [pid 353] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 356] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 357] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 356] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0 [pid 353] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 356] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 356] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 353] <... mmap resumed>) = 0x7f6727ed9000 [pid 356] <... futex resumed>) = 1 [pid 354] <... futex resumed>) = 0 [pid 353] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE [pid 356] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 354] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 354] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 356] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 353] <... mprotect resumed>) = 0 [pid 356] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 353] rt_sigprocmask(SIG_BLOCK, ~[], [pid 356] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 356] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 354] <... futex resumed>) = 0 [pid 356] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 354] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 356] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 354] <... futex resumed>) = 0 [pid 356] socketpair(AF_UNIX, SOCK_STREAM, 0, [pid 354] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 356] <... socketpair resumed>NULL) = -1 EFAULT (Bad address) [pid 356] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 354] <... futex resumed>) = 0 [pid 353] <... rt_sigprocmask resumed>[], 8) = 0 [pid 356] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 354] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 356] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 354] <... futex resumed>) = 0 [pid 356] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 354] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 356] <... openat resumed>) = 3 [pid 356] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 356] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 356] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 356] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 353] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[9]}, 88) = 9 [pid 353] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 353] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 353] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}./strace-static-x86_64: Process 358 attached [pid 358] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 358] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 358] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 358] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 353] <... futex resumed>) = 0 [pid 353] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 353] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 358] <... futex resumed>) = 1 [pid 358] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 358] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 353] <... futex resumed>) = 0 [pid 353] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 353] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 358] <... futex resumed>) = 1 [pid 358] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 358] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 353] <... futex resumed>) = 0 [pid 353] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 353] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 358] <... futex resumed>) = 1 [pid 358] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 358] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 358] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 350] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 350] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 350] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 358] <... ioctl resumed>, 0) = 0 [pid 358] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 358] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 350] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 350] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 350] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 350] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 350] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 350] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [ 36.095742][ T315] usb 4-1: USB disconnect, device number 4 [ 36.104123][ T39] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.118692][ T39] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 36.131370][ T315] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [pid 350] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 350] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 350] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 350] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 350] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [ 36.154397][ T39] usb 2-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 36.164992][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.179184][ T39] usb 2-1: Product: syz [ 36.184276][ T39] usb 2-1: Manufacturer: syz [ 36.189449][ T39] usb 2-1: SerialNumber: syz [pid 352] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 352] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [ 36.312236][ T313] usb 5-1: new high-speed USB device number 5 using dummy_hcd [pid 352] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 350] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 349] <... futex resumed>) = 0 [pid 350] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 349] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 350] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 349] <... futex resumed>) = 0 [pid 350] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 349] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 350] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 350] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 350] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 350] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 350] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 36.398405][ T350] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [pid 358] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 352] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 358] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 352] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 358] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 358] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 352] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 352] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 352] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 352] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 352] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 352] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 356] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 352] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 352] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 356] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 352] <... ioctl resumed>, 0x7f6727ef7110) = 4 [pid 352] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 356] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 356] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 352] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 352] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 352] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 352] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 352] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 352] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [ 36.492206][ T319] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 36.503731][ T313] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.517617][ T313] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 36.530618][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [pid 352] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 357] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 357] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 357] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 352] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 352] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 352] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 352] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 352] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [pid 350] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 349] <... futex resumed>) = 0 [pid 350] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 349] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 350] <... futex resumed>) = 0 [pid 349] <... futex resumed>) = 1 [pid 350] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 349] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 350] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 350] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 350] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 350] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 36.544145][ T313] usb 5-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 36.554863][ T313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.564024][ T315] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 36.573556][ T313] usb 5-1: Product: syz [ 36.578631][ T313] usb 5-1: Manufacturer: syz [ 36.583970][ T313] usb 5-1: SerialNumber: syz [pid 358] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 358] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 358] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 358] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 358] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 358] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 358] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 358] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 358] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 358] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 358] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 358] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 358] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 358] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 358] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 356] <... ioctl resumed>, 0x7f6727ef8120) = 0 [ 36.685027][ T319] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.699432][ T319] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 36.713586][ T319] usb 1-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 36.724058][ T319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [pid 356] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 356] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 356] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 356] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 356] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 356] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 357] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 357] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 358] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 357] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 356] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 356] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 358] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW [pid 356] <... ioctl resumed>, 0x7f6727ef7110) = 4 [pid 358] <... ioctl resumed>, 0) = 0 [pid 356] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 358] ioctl(3, USB_RAW_IOCTL_CONFIGURE [pid 357] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 356] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 358] <... ioctl resumed>, 0) = 0 [pid 356] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 358] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 356] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 358] <... ioctl resumed>, 0x7f6727fc850c) = 0 [pid 356] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 358] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 357] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 356] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 358] <... ioctl resumed>, 0x7f6727ef7110) = 0 [pid 357] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 356] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 357] <... ioctl resumed>, 0x7f6727ef7110) = 9 [pid 356] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 357] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 356] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 357] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 356] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 357] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 356] <... ioctl resumed>, 0x7f6727ef7110) = 8 [ 36.734751][ T319] usb 1-1: Product: syz [ 36.739652][ T319] usb 1-1: Manufacturer: syz [ 36.744532][ T319] usb 1-1: SerialNumber: syz [ 36.750813][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.764475][ T24] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [pid 357] <... ioctl resumed>, 0x7f6727ef7110) = 100 [pid 356] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 357] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 352] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 351] <... futex resumed>) = 0 [pid 352] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 351] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 352] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 351] <... futex resumed>) = 0 [pid 352] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 351] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 352] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 352] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 352] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 352] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 352] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 350] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 349] <... futex resumed>) = 0 [pid 350] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 349] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 350] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 349] <... futex resumed>) = 0 [ 36.779140][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 36.788843][ T315] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.798089][ T352] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 36.800114][ T315] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 36.819436][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.829187][ T24] usb 3-1: Product: syz [pid 350] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 349] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 350] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 350] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [pid 357] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 357] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 357] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 357] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 357] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 357] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 356] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 357] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 357] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 356] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 357] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 356] ioctl(3, USB_RAW_IOCTL_CONFIGURE [pid 357] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 356] <... ioctl resumed>, 0) = 0 [pid 356] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 357] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 356] <... ioctl resumed>, 0x7f6727fc850c) = 0 [pid 357] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 356] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [pid 357] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 357] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [ 36.834628][ T24] usb 3-1: Manufacturer: syz [ 36.839426][ T24] usb 3-1: SerialNumber: syz [ 36.848421][ T315] usb 4-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 36.859850][ T315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.869959][ T315] usb 4-1: Product: syz [ 36.875727][ T315] usb 4-1: Manufacturer: syz [pid 357] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 357] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 357] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [ 36.881119][ T315] usb 4-1: SerialNumber: syz [pid 358] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 353] <... futex resumed>) = 0 [pid 358] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 353] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 358] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 353] <... futex resumed>) = 0 [pid 358] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 353] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 358] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 358] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 358] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 352] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 351] <... futex resumed>) = 0 [pid 352] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 351] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 352] <... futex resumed>) = 0 [pid 351] <... futex resumed>) = 1 [pid 352] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 351] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 352] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 352] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 352] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 352] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 36.979302][ T358] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [pid 350] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 349] <... futex resumed>) = 0 [pid 350] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 349] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 350] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 349] <... futex resumed>) = 0 [pid 349] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 350] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 350] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 356] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 354] <... futex resumed>) = 0 [pid 356] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 354] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 356] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 354] <... futex resumed>) = 0 [pid 356] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 354] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 356] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 356] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 356] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 350] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 350] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 350] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 356] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 356] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 356] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 357] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 355] <... futex resumed>) = 0 [pid 355] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 355] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 357] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 357] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [ 37.048805][ T350] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 37.059210][ T356] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [pid 357] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 357] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 357] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 37.092266][ T357] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [pid 358] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 358] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 353] <... futex resumed>) = 0 [pid 353] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 358] <... futex resumed>) = 0 [pid 353] <... futex resumed>) = 1 [pid 358] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 353] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 358] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 358] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 358] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 358] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 352] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 351] <... futex resumed>) = 0 [pid 352] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 351] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 352] <... futex resumed>) = 0 [pid 351] <... futex resumed>) = 1 [pid 352] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 352] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [pid 351] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 350] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 349] <... futex resumed>) = 0 [pid 349] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 350] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 349] <... futex resumed>) = 0 [pid 349] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 350] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 350] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [pid 356] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 354] <... futex resumed>) = 0 [pid 354] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 354] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 356] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 356] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 356] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 356] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 357] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 355] <... futex resumed>) = 0 [pid 355] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 355] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 357] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 357] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 357] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 357] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 37.263518][ T39] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 37.271083][ T39] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 37.280765][ T39] cdc_ncm 2-1:1.0: setting rx_max = 2048 [pid 358] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 353] <... futex resumed>) = 0 [pid 358] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 353] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 358] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 353] <... futex resumed>) = 0 [pid 358] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 353] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 358] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 358] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [pid 352] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 351] <... futex resumed>) = 0 [pid 352] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 351] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 351] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 352] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 352] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 352] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 352] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 350] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 349] <... futex resumed>) = 0 [pid 350] bpf(BPF_PROG_LOAD, NULL, 0 [pid 349] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 350] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 349] <... futex resumed>) = 0 [pid 350] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 349] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 350] <... futex resumed>) = 0 [pid 350] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 349] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 349] close(3) = 0 [pid 349] close(4) = -1 EBADF (Bad file descriptor) [pid 349] close(5) = -1 EBADF (Bad file descriptor) [pid 349] close(6) = -1 EBADF (Bad file descriptor) [pid 349] close(7) = -1 EBADF (Bad file descriptor) [pid 349] close(8) = -1 EBADF (Bad file descriptor) [pid 349] close(9) = -1 EBADF (Bad file descriptor) [pid 349] close(10) = -1 EBADF (Bad file descriptor) [pid 349] close(11) = -1 EBADF (Bad file descriptor) [pid 349] close(12) = -1 EBADF (Bad file descriptor) [pid 349] close(13) = -1 EBADF (Bad file descriptor) [pid 349] close(14) = -1 EBADF (Bad file descriptor) [pid 349] close(15) = -1 EBADF (Bad file descriptor) [pid 349] close(16) = -1 EBADF (Bad file descriptor) [pid 349] close(17) = -1 EBADF (Bad file descriptor) [pid 349] close(18) = -1 EBADF (Bad file descriptor) [pid 349] close(19) = -1 EBADF (Bad file descriptor) [pid 349] close(20) = -1 EBADF (Bad file descriptor) [pid 349] close(21) = -1 EBADF (Bad file descriptor) [pid 349] close(22) = -1 EBADF (Bad file descriptor) [pid 349] close(23) = -1 EBADF (Bad file descriptor) [pid 349] close(24) = -1 EBADF (Bad file descriptor) [pid 349] close(25) = -1 EBADF (Bad file descriptor) [pid 349] close(26) = -1 EBADF (Bad file descriptor) [pid 349] close(27) = -1 EBADF (Bad file descriptor) [pid 349] close(28) = -1 EBADF (Bad file descriptor) [pid 349] close(29) = -1 EBADF (Bad file descriptor) [pid 349] exit_group(0) = ? [pid 350] <... futex resumed>) = ? [pid 350] +++ exited with 0 +++ [pid 349] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 298] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./3/binderfs") = 0 [pid 298] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./3") = 0 [pid 298] mkdir("./4", 0777) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 10 ./strace-static-x86_64: Process 359 attached [pid 359] set_robust_list(0x5555951c7760, 24) = 0 [pid 359] chdir("./4") = 0 [pid 359] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 356] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 354] <... futex resumed>) = 0 [pid 356] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 354] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 356] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 354] <... futex resumed>) = 0 [pid 356] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 354] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 356] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 356] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 359] setpgid(0, 0) = 0 [pid 359] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 356] <... ioctl resumed>, 0x7f6727ef7130) = 28 [pid 359] <... openat resumed>) = 3 executing program [pid 359] write(3, "1000", 4) = 4 [pid 359] close(3) = 0 [pid 359] symlink("/dev/binderfs", "./binderfs") = 0 [pid 359] write(1, "executing program\n", 18) = 18 [pid 359] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 359] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 359] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 359] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 359] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 359] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 359] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[11]}, 88) = 11 [pid 359] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 359] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 359] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}./strace-static-x86_64: Process 360 attached [pid 360] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 360] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 360] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 360] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 359] <... futex resumed>) = 0 [pid 359] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 359] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 360] <... futex resumed>) = 1 [pid 360] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 360] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 359] <... futex resumed>) = 0 [pid 359] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 359] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 360] <... futex resumed>) = 1 [pid 360] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 360] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 359] <... futex resumed>) = 0 [pid 359] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 359] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 360] <... futex resumed>) = 1 [pid 360] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 360] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 360] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 360] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 37.434950][ T352] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 37.469729][ T39] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [pid 360] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 357] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 355] <... futex resumed>) = 0 [pid 357] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 355] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 357] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 355] <... futex resumed>) = 0 [pid 357] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 355] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 357] <... ioctl resumed>, 0x7f6727ef7130) = 28 [ 37.503133][ T39] usb 2-1: USB disconnect, device number 5 [ 37.512497][ T39] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [pid 358] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 353] <... futex resumed>) = 0 [pid 358] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 353] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 358] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 353] <... futex resumed>) = 0 [pid 353] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 358] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 358] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 358] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 352] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 351] <... futex resumed>) = 0 [pid 352] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 351] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 352] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 351] <... futex resumed>) = 0 [pid 352] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 351] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 352] <... ioctl resumed>, 0x7f6727ef8140) = 0 [ 37.594470][ T358] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [pid 352] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [pid 356] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 354] <... futex resumed>) = 0 [pid 356] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 354] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 356] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 354] <... futex resumed>) = 0 [pid 356] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 354] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [ 37.647069][ T313] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 37.654694][ T313] cdc_ncm 5-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 37.664087][ T313] cdc_ncm 5-1:1.0: setting rx_max = 2048 [pid 356] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 356] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 356] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 357] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 355] <... futex resumed>) = 0 [pid 357] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 355] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 357] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 355] <... futex resumed>) = 0 [pid 357] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 355] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 357] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 357] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 357] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 357] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 37.696312][ T356] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 37.711995][ T357] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [pid 358] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 353] <... futex resumed>) = 0 [pid 358] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 353] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 358] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 353] <... futex resumed>) = 0 [pid 358] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 353] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 358] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 358] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [pid 352] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 351] <... futex resumed>) = 0 [pid 352] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 351] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 352] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 351] <... futex resumed>) = 0 [pid 352] bpf(BPF_PROG_LOAD, NULL, 0 [pid 351] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 352] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 352] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 351] <... futex resumed>) = 0 [pid 352] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [ 37.811262][ T319] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 37.818550][ T319] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 37.826632][ T319] cdc_ncm 1-1:1.0: setting rx_max = 2048 [pid 351] close(3) = 0 [pid 351] close(4) = -1 EBADF (Bad file descriptor) [pid 351] close(5) = -1 EBADF (Bad file descriptor) [pid 351] close(6) = -1 EBADF (Bad file descriptor) [pid 351] close(7) = -1 EBADF (Bad file descriptor) [pid 351] close(8) = -1 EBADF (Bad file descriptor) [pid 351] close(9) = -1 EBADF (Bad file descriptor) [pid 351] close(10) = -1 EBADF (Bad file descriptor) [pid 351] close(11) = -1 EBADF (Bad file descriptor) [pid 351] close(12) = -1 EBADF (Bad file descriptor) [pid 351] close(13) = -1 EBADF (Bad file descriptor) [pid 351] close(14) = -1 EBADF (Bad file descriptor) [pid 351] close(15) = -1 EBADF (Bad file descriptor) [pid 351] close(16) = -1 EBADF (Bad file descriptor) [pid 351] close(17) = -1 EBADF (Bad file descriptor) [pid 351] close(18) = -1 EBADF (Bad file descriptor) [pid 351] close(19) = -1 EBADF (Bad file descriptor) [pid 351] close(20) = -1 EBADF (Bad file descriptor) [pid 351] close(21) = -1 EBADF (Bad file descriptor) [pid 351] close(22) = -1 EBADF (Bad file descriptor) [pid 351] close(23) = -1 EBADF (Bad file descriptor) [pid 351] close(24) = -1 EBADF (Bad file descriptor) [pid 351] close(25) = -1 EBADF (Bad file descriptor) [pid 351] close(26) = -1 EBADF (Bad file descriptor) [pid 351] close(27) = -1 EBADF (Bad file descriptor) [pid 351] close(28) = -1 EBADF (Bad file descriptor) [pid 351] close(29) = -1 EBADF (Bad file descriptor) [pid 351] exit_group(0) = ? [pid 352] <... futex resumed>) = ? [pid 352] +++ exited with 0 +++ [pid 351] +++ exited with 0 +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 301] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 301] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./3/binderfs") = 0 [pid 301] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./3") = 0 [pid 301] mkdir("./4", 0777) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 10 ./strace-static-x86_64: Process 361 attached [pid 361] set_robust_list(0x5555951c7760, 24) = 0 [pid 361] chdir("./4") = 0 [pid 361] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 361] setpgid(0, 0) = 0 [pid 361] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 361] write(3, "1000", 4) = 4 [pid 361] close(3 [pid 356] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 354] <... futex resumed>) = 0 [pid 356] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 354] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 356] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 354] <... futex resumed>) = 0 [pid 356] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 354] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [ 37.858046][ T313] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 37.874645][ T313] usb 5-1: USB disconnect, device number 5 [ 37.884177][ T313] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [pid 356] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 361] <... close resumed>) = 0 [pid 356] <... ioctl resumed>, 0x7f6727ef7130) = 26 [pid 361] symlink("/dev/binderfs", "./binderfs") = 0 [pid 361] write(1, "executing program\n", 18executing program ) = 18 [pid 361] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 361] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 361] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 361] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 361] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 361] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 361] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[11]}, 88) = 11 [pid 361] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 361] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 361] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}./strace-static-x86_64: Process 362 attached [pid 362] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 362] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 362] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 362] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 361] <... futex resumed>) = 0 [pid 361] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 361] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 362] <... futex resumed>) = 1 [pid 362] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 362] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 361] <... futex resumed>) = 0 [pid 361] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 361] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 362] <... futex resumed>) = 1 [pid 362] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 362] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 361] <... futex resumed>) = 0 [pid 361] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 361] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 362] <... futex resumed>) = 1 [pid 362] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 362] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 362] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 362] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 362] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 357] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 357] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 355] <... futex resumed>) = 0 [pid 355] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 357] <... futex resumed>) = 0 [pid 355] <... futex resumed>) = 1 [pid 355] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 357] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 357] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [ 37.906830][ T24] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 37.917312][ T24] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 37.925558][ T39] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 37.936726][ T315] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 37.945868][ T315] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [pid 360] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 360] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 360] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 358] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 353] <... futex resumed>) = 0 [pid 358] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 353] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 358] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 353] <... futex resumed>) = 0 [pid 358] bpf(BPF_PROG_LOAD, NULL, 0 [pid 353] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 358] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 358] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 353] <... futex resumed>) = 0 [pid 358] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [ 37.955078][ T24] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 37.961116][ T315] cdc_ncm 4-1:1.0: setting rx_max = 2048 [pid 353] close(3) = 0 [pid 353] close(4) = -1 EBADF (Bad file descriptor) [pid 353] close(5) = -1 EBADF (Bad file descriptor) [pid 353] close(6) = -1 EBADF (Bad file descriptor) [pid 353] close(7) = -1 EBADF (Bad file descriptor) [pid 353] close(8) = -1 EBADF (Bad file descriptor) [pid 353] close(9) = -1 EBADF (Bad file descriptor) [pid 353] close(10) = -1 EBADF (Bad file descriptor) [pid 353] close(11) = -1 EBADF (Bad file descriptor) [pid 353] close(12) = -1 EBADF (Bad file descriptor) [pid 353] close(13) = -1 EBADF (Bad file descriptor) [pid 353] close(14) = -1 EBADF (Bad file descriptor) [pid 353] close(15) = -1 EBADF (Bad file descriptor) [pid 353] close(16) = -1 EBADF (Bad file descriptor) [pid 353] close(17) = -1 EBADF (Bad file descriptor) [pid 353] close(18) = -1 EBADF (Bad file descriptor) [pid 353] close(19) = -1 EBADF (Bad file descriptor) [pid 353] close(20) = -1 EBADF (Bad file descriptor) [pid 353] close(21) = -1 EBADF (Bad file descriptor) [pid 353] close(22) = -1 EBADF (Bad file descriptor) [pid 353] close(23) = -1 EBADF (Bad file descriptor) [pid 353] close(24) = -1 EBADF (Bad file descriptor) [pid 353] close(25) = -1 EBADF (Bad file descriptor) [pid 353] close(26) = -1 EBADF (Bad file descriptor) [pid 353] close(27) = -1 EBADF (Bad file descriptor) [pid 353] close(28) = -1 EBADF (Bad file descriptor) [pid 353] close(29) = -1 EBADF (Bad file descriptor) [pid 353] exit_group(0 [pid 358] <... futex resumed>) = ? [pid 353] <... exit_group resumed>) = ? [pid 358] +++ exited with 0 +++ [pid 353] +++ exited with 0 +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 299] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 299] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./3/binderfs") = 0 [pid 299] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./3") = 0 [pid 299] mkdir("./4", 0777) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 10 ./strace-static-x86_64: Process 363 attached [pid 363] set_robust_list(0x5555951c7760, 24) = 0 [pid 363] chdir("./4") = 0 [pid 363] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 363] setpgid(0, 0) = 0 [pid 363] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 363] write(3, "1000", 4) = 4 [pid 363] close(3) = 0 [pid 363] symlink("/dev/binderfs", "./binderfs") = 0 [pid 363] write(1, "executing program\n", 18executing program ) = 18 [pid 363] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 363] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 363] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 363] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 363] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 363] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 363] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0}./strace-static-x86_64: Process 364 attached => {parent_tid=[11]}, 88) = 11 [pid 364] set_robust_list(0x7f6727ef99a0, 24 [pid 363] rt_sigprocmask(SIG_SETMASK, [], [pid 364] <... set_robust_list resumed>) = 0 [pid 364] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 364] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 363] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 363] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 364] <... futex resumed>) = 0 [pid 364] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 364] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 364] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 363] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 363] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 364] <... futex resumed>) = 0 [pid 363] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 364] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 364] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 363] <... futex resumed>) = 0 [pid 364] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 363] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 363] <... futex resumed>) = 0 [pid 364] socketpair(AF_UNIX, SOCK_STREAM, 0, [pid 363] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 364] <... socketpair resumed>NULL) = -1 EFAULT (Bad address) [pid 364] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 363] <... futex resumed>) = 0 [pid 363] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 363] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 364] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 364] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 364] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 364] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 38.015304][ T319] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 38.031047][ T319] usb 1-1: USB disconnect, device number 5 [ 38.038404][ T319] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [pid 364] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 356] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 354] <... futex resumed>) = 0 [pid 356] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 354] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 356] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 354] <... futex resumed>) = 0 [pid 356] bpf(BPF_PROG_LOAD, NULL, 0 [pid 354] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 356] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 356] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 354] <... futex resumed>) = 0 [pid 354] close(3 [pid 356] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 354] <... close resumed>) = 0 [pid 354] close(4) = -1 EBADF (Bad file descriptor) [pid 354] close(5) = -1 EBADF (Bad file descriptor) [pid 354] close(6) = -1 EBADF (Bad file descriptor) [pid 354] close(7) = -1 EBADF (Bad file descriptor) [pid 354] close(8) = -1 EBADF (Bad file descriptor) [pid 354] close(9) = -1 EBADF (Bad file descriptor) [pid 354] close(10) = -1 EBADF (Bad file descriptor) [pid 354] close(11) = -1 EBADF (Bad file descriptor) [pid 354] close(12) = -1 EBADF (Bad file descriptor) [pid 354] close(13) = -1 EBADF (Bad file descriptor) [pid 354] close(14) = -1 EBADF (Bad file descriptor) [pid 357] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 354] close(15 [pid 357] <... futex resumed>) = 1 [pid 354] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 357] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 354] close(16) = -1 EBADF (Bad file descriptor) [pid 354] close(17) = -1 EBADF (Bad file descriptor) [pid 354] close(18) = -1 EBADF (Bad file descriptor) [pid 354] close(19) = -1 EBADF (Bad file descriptor) [pid 354] close(20) = -1 EBADF (Bad file descriptor) [pid 354] close(21) = -1 EBADF (Bad file descriptor) [pid 354] close(22) = -1 EBADF (Bad file descriptor) [pid 354] close(23) = -1 EBADF (Bad file descriptor) [pid 354] close(24) = -1 EBADF (Bad file descriptor) [pid 354] close(25) = -1 EBADF (Bad file descriptor) [pid 354] close(26) = -1 EBADF (Bad file descriptor) [pid 354] close(27) = -1 EBADF (Bad file descriptor) [pid 354] close(28) = -1 EBADF (Bad file descriptor) [pid 354] close(29) = -1 EBADF (Bad file descriptor) [pid 354] exit_group(0 [pid 356] <... futex resumed>) = ? [pid 354] <... exit_group resumed>) = ? [pid 356] +++ exited with 0 +++ [pid 360] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 355] <... futex resumed>) = 0 [pid 354] +++ exited with 0 +++ [pid 360] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 355] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 360] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 357] <... futex resumed>) = 0 [pid 355] <... futex resumed>) = 1 [pid 360] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 357] bpf(BPF_PROG_LOAD, NULL, 0 [pid 355] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 360] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 357] <... bpf resumed>) = -1 EFAULT (Bad address) [ 38.116840][ T24] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 38.132038][ T24] usb 3-1: USB disconnect, device number 5 [ 38.138958][ T24] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 38.153177][ T39] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 360] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 357] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW [pid 360] <... ioctl resumed>, 0x7f6727ef7110) = 9 [pid 357] <... futex resumed>) = 1 [pid 355] <... futex resumed>) = 0 [pid 360] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 357] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 355] close(3 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 360] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 360] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 355] <... close resumed>) = 0 [pid 302] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 360] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 355] close(4 [pid 302] <... openat resumed>) = 3 [pid 355] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 302] newfstatat(3, "", [pid 355] close(5 [pid 302] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 355] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 302] getdents64(3, [pid 355] close(6 [pid 302] <... getdents64 resumed>0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 355] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 302] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 355] close(7 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 355] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 302] newfstatat(AT_FDCWD, "./3/binderfs", [pid 355] close(8 [pid 302] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 355] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 302] unlink("./3/binderfs" [pid 355] close(9 [pid 302] <... unlink resumed>) = 0 [pid 355] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 302] getdents64(3, [pid 355] close(10 [pid 302] <... getdents64 resumed>0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 355] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 302] close(3 [pid 355] close(11 [pid 302] <... close resumed>) = 0 [pid 355] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 302] rmdir("./3" [pid 355] close(12 [pid 302] <... rmdir resumed>) = 0 [pid 355] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 302] mkdir("./4", 0777 [pid 355] close(13 [pid 302] <... mkdir resumed>) = 0 [pid 355] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 355] close(14) = -1 EBADF (Bad file descriptor) [pid 302] <... clone resumed>, child_tidptr=0x5555951c7750) = 10 [pid 355] close(15) = -1 EBADF (Bad file descriptor) [pid 355] close(16) = -1 EBADF (Bad file descriptor) [pid 355] close(17./strace-static-x86_64: Process 365 attached [pid 360] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 355] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 360] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 355] close(18 [pid 365] set_robust_list(0x5555951c7760, 24 [pid 360] <... ioctl resumed>, 0x7f6727ef7110) = 4 [pid 355] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 360] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 355] close(19 [pid 365] <... set_robust_list resumed>) = 0 [pid 360] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 355] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 360] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 355] close(20) = -1 EBADF (Bad file descriptor) [pid 355] close(21) = -1 EBADF (Bad file descriptor) [pid 355] close(22) = -1 EBADF (Bad file descriptor) [pid 355] close(23) = -1 EBADF (Bad file descriptor) [pid 355] close(24) = -1 EBADF (Bad file descriptor) [pid 355] close(25) = -1 EBADF (Bad file descriptor) [pid 355] close(26) = -1 EBADF (Bad file descriptor) [pid 355] close(27) = -1 EBADF (Bad file descriptor) [pid 355] close(28) = -1 EBADF (Bad file descriptor) [pid 355] close(29) = -1 EBADF (Bad file descriptor) [pid 355] exit_group(0 [pid 357] <... futex resumed>) = ? [pid 355] <... exit_group resumed>) = ? [pid 357] +++ exited with 0 +++ [pid 355] +++ exited with 0 +++ [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [ 38.166072][ T315] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 38.178703][ T39] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 38.196048][ T315] usb 4-1: USB disconnect, device number 5 [pid 300] restart_syscall(<... resuming interrupted clone ...> [pid 365] chdir("./4" [pid 360] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 360] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 365] <... chdir resumed>) = 0 [pid 360] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 360] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 365] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 360] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 365] <... prctl resumed>) = 0 [pid 360] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 365] setpgid(0, 0 [pid 360] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 365] <... setpgid resumed>) = 0 [pid 360] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 365] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 360] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 300] <... restart_syscall resumed>) = 0 [pid 300] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 300] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./3/binderfs") = 0 [pid 300] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./3") = 0 [pid 300] mkdir("./4", 0777) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 10 ./strace-static-x86_64: Process 367 attached [pid 367] set_robust_list(0x5555951c7760, 24) = 0 [pid 367] chdir("./4") = 0 [pid 367] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 367] setpgid(0, 0) = 0 [pid 367] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 367] write(3, "1000", 4) = 4 [pid 367] close(3 [pid 365] <... openat resumed>) = 3 [pid 365] write(3, "1000", 4) = 4 [pid 365] close(3) = 0 [pid 365] symlink("/dev/binderfs", "./binderfs") = 0 [pid 367] <... close resumed>) = 0 [pid 367] symlink("/dev/binderfs", "./binderfs") = 0 [pid 367] write(1, "executing program\n", 18executing program ) = 18 [pid 367] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 367] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 367] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 367] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 367] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 367] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 367] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[11]}, 88) = 11 [pid 367] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 367] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 367] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}./strace-static-x86_64: Process 368 attached [pid 368] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 368] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 368] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 368] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] write(1, "executing program\n", 18executing program [pid 367] <... futex resumed>) = 0 [pid 365] <... write resumed>) = 18 [pid 367] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 367] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 368] <... futex resumed>) = 1 [pid 368] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 368] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 367] <... futex resumed>) = 0 [pid 367] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 367] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 368] <... futex resumed>) = 1 [pid 368] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 368] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 367] <... futex resumed>) = 0 [pid 367] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 367] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 368] <... futex resumed>) = 1 [pid 368] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 365] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 368] <... openat resumed>) = 3 [pid 368] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 368] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 368] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 368] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 365] <... futex resumed>) = 0 [pid 365] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 365] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 365] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 365] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 365] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 365] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[11]}, 88) = 11 [pid 365] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 365] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 365] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}./strace-static-x86_64: Process 369 attached [pid 369] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 369] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 369] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 369] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 369] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 360] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 365] <... futex resumed>) = 0 [pid 360] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW [pid 365] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] <... ioctl resumed>, 0) = 0 [pid 365] <... futex resumed>) = 1 [pid 369] <... futex resumed>) = 0 [pid 360] ioctl(3, USB_RAW_IOCTL_CONFIGURE [pid 365] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 360] <... ioctl resumed>, 0) = 0 [pid 369] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 360] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 369] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 369] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] <... ioctl resumed>, 0x7f6727fc850c) = 0 [pid 369] <... futex resumed>) = 1 [pid 365] <... futex resumed>) = 0 [pid 360] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 369] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 365] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] <... ioctl resumed>, 0x7f6727ef7110) = 0 [pid 369] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 365] <... futex resumed>) = 0 [pid 369] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 365] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 369] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 365] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 369] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 365] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] <... futex resumed>) = 0 [pid 365] <... futex resumed>) = 1 [pid 369] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 365] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 369] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 369] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 369] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 38.209890][ T315] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 38.222426][ T39] usb 2-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 38.233914][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.243248][ T39] usb 2-1: Product: syz [ 38.247868][ T39] usb 2-1: Manufacturer: syz [ 38.262739][ T39] usb 2-1: SerialNumber: syz [pid 369] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 362] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 362] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [ 38.322370][ T313] usb 5-1: new high-speed USB device number 6 using dummy_hcd [pid 362] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 360] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 359] <... futex resumed>) = 0 [pid 359] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 359] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 360] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 360] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 360] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 360] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 360] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 364] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 364] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 364] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 362] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 362] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 362] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 362] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 362] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 38.479066][ T360] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 38.486795][ T319] usb 1-1: new high-speed USB device number 6 using dummy_hcd [pid 362] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 362] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 362] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 362] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 362] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 362] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 362] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 362] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 362] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [ 38.524058][ T313] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.540682][ T313] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [pid 362] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 362] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 362] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 362] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 362] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [ 38.561656][ T313] usb 5-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 38.576913][ T313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.586725][ T313] usb 5-1: Product: syz [ 38.591773][ T313] usb 5-1: Manufacturer: syz [ 38.597044][ T313] usb 5-1: SerialNumber: syz [pid 368] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 368] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 368] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 369] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 369] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 369] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 364] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 364] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 364] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 38.622191][ T315] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 38.642225][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [pid 364] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 364] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 364] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 364] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 360] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 359] <... futex resumed>) = 0 [pid 360] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 359] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 359] <... futex resumed>) = 0 [pid 360] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 359] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 360] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 360] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 360] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 360] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 364] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 364] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 364] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 364] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 364] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 364] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 364] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 364] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [ 38.674779][ T319] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.688646][ T319] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 38.709594][ T319] usb 1-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [pid 364] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 364] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 364] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 364] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 364] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [ 38.721680][ T319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.733008][ T319] usb 1-1: Product: syz [ 38.737624][ T319] usb 1-1: Manufacturer: syz [ 38.743747][ T319] usb 1-1: SerialNumber: syz [pid 368] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 368] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 368] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 368] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 368] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 368] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 368] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 362] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 361] <... futex resumed>) = 0 [pid 362] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 361] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 362] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 361] <... futex resumed>) = 0 [pid 362] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 361] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 362] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 362] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 362] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 369] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 368] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 369] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 368] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 369] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 368] <... ioctl resumed>, 0x7f6727ef7110) = 4 [pid 369] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 368] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 369] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 368] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 362] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 369] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 368] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 362] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 368] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 362] <... ioctl resumed>, 0x7f6727fc893c) = 11 [pid 369] <... ioctl resumed>, 0x7f6727ef7110) = 9 [pid 368] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 369] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 362] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 369] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 369] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 368] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 362] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 368] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 368] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 369] <... ioctl resumed>, 0x7f6727ef7110) = 100 [pid 369] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 368] <... ioctl resumed>, 0x7f6727ef8120) = 0 [ 38.805047][ T315] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.817448][ T315] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 38.820256][ T362] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 38.838489][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 368] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 368] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 369] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 369] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 369] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 369] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 369] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 369] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 369] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 369] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 369] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 360] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 359] <... futex resumed>) = 0 [pid 360] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 359] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 359] <... futex resumed>) = 0 [pid 360] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 359] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 360] <... ioctl resumed>, 0x7f6727ef8140) = 0 [ 38.850829][ T24] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 38.862845][ T315] usb 4-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 38.873252][ T315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.881951][ T315] usb 4-1: Product: syz [ 38.886610][ T315] usb 4-1: Manufacturer: syz [ 38.891516][ T315] usb 4-1: SerialNumber: syz [pid 360] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [pid 368] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 368] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 368] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 368] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 368] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [pid 369] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 369] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 369] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 369] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 369] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [pid 364] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 363] <... futex resumed>) = 0 [ 38.897700][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 38.907769][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.916181][ T24] usb 3-1: Product: syz [ 38.921512][ T24] usb 3-1: Manufacturer: syz [ 38.927009][ T24] usb 3-1: SerialNumber: syz [pid 364] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 363] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 363] <... futex resumed>) = 0 [pid 364] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 363] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 364] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 364] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 364] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 364] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 364] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 38.951822][ T364] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [pid 362] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 361] <... futex resumed>) = 0 [pid 362] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 361] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 362] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 361] <... futex resumed>) = 0 [pid 361] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 362] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 362] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 362] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 362] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 360] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 359] <... futex resumed>) = 0 [pid 360] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 359] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 359] <... futex resumed>) = 0 [pid 360] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 359] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 360] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 360] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 360] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 360] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 368] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 367] <... futex resumed>) = 0 [pid 368] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 367] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 368] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 367] <... futex resumed>) = 0 [pid 368] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 367] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 368] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 368] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 368] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 368] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 368] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 369] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 365] <... futex resumed>) = 0 [pid 369] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 365] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 365] <... futex resumed>) = 0 [pid 369] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 365] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 369] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 369] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 369] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 369] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 369] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 364] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 363] <... futex resumed>) = 0 [pid 364] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 363] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 364] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 363] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 364] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 364] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 364] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 39.108386][ T360] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 39.122168][ T368] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 39.135490][ T369] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [pid 362] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 361] <... futex resumed>) = 0 [pid 362] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 361] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 362] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 361] <... futex resumed>) = 0 [pid 362] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 361] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 362] <... ioctl resumed>, 0x7f6727ef7130) = 28 [pid 360] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 359] <... futex resumed>) = 0 [pid 360] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 359] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 359] <... futex resumed>) = 0 [pid 360] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 359] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 360] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 360] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [pid 368] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 367] <... futex resumed>) = 0 [pid 368] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 367] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 368] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 367] <... futex resumed>) = 0 [pid 368] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 367] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 368] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 368] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 368] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 368] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 369] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 365] <... futex resumed>) = 0 [pid 369] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 365] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 365] <... futex resumed>) = 0 [pid 365] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 369] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 369] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 369] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 369] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 364] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 363] <... futex resumed>) = 0 [pid 364] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 363] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 363] <... futex resumed>) = 0 [pid 364] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 363] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 364] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 364] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [ 39.318062][ T39] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 39.325069][ T39] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 39.333108][ T39] cdc_ncm 2-1:1.0: setting rx_max = 2048 [pid 362] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 361] <... futex resumed>) = 0 [pid 362] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 361] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 361] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 362] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 362] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 362] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 362] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 362] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 39.447070][ T362] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [pid 360] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 360] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 359] <... futex resumed>) = 0 [pid 359] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 360] <... futex resumed>) = 0 [pid 359] <... futex resumed>) = 1 [pid 360] bpf(BPF_PROG_LOAD, NULL, 0 [pid 359] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 360] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 360] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 359] <... futex resumed>) = 0 [pid 360] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 359] close(3) = 0 [pid 359] close(4) = -1 EBADF (Bad file descriptor) [pid 359] close(5) = -1 EBADF (Bad file descriptor) [pid 359] close(6) = -1 EBADF (Bad file descriptor) [pid 359] close(7) = -1 EBADF (Bad file descriptor) [pid 359] close(8) = -1 EBADF (Bad file descriptor) [pid 359] close(9) = -1 EBADF (Bad file descriptor) [pid 359] close(10) = -1 EBADF (Bad file descriptor) [pid 359] close(11) = -1 EBADF (Bad file descriptor) [pid 359] close(12) = -1 EBADF (Bad file descriptor) [pid 359] close(13) = -1 EBADF (Bad file descriptor) [pid 359] close(14) = -1 EBADF (Bad file descriptor) [pid 359] close(15) = -1 EBADF (Bad file descriptor) [pid 359] close(16) = -1 EBADF (Bad file descriptor) [pid 359] close(17) = -1 EBADF (Bad file descriptor) [pid 359] close(18) = -1 EBADF (Bad file descriptor) [pid 359] close(19) = -1 EBADF (Bad file descriptor) [pid 359] close(20) = -1 EBADF (Bad file descriptor) [pid 359] close(21) = -1 EBADF (Bad file descriptor) [pid 359] close(22) = -1 EBADF (Bad file descriptor) [pid 359] close(23) = -1 EBADF (Bad file descriptor) [pid 368] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 359] close(24 [pid 368] <... futex resumed>) = 1 [pid 367] <... futex resumed>) = 0 [pid 359] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 368] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 367] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 359] close(25 [pid 368] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 367] <... futex resumed>) = 0 [pid 359] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 368] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 367] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 359] close(26 [pid 368] <... ioctl resumed>, 0x7f6727ef7130) = 28 [pid 359] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 359] close(27) = -1 EBADF (Bad file descriptor) [pid 359] close(28) = -1 EBADF (Bad file descriptor) [pid 359] close(29) = -1 EBADF (Bad file descriptor) [pid 359] exit_group(0 [pid 360] <... futex resumed>) = ? [pid 359] <... exit_group resumed>) = ? [pid 360] +++ exited with 0 +++ [pid 359] +++ exited with 0 +++ [pid 369] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 369] <... futex resumed>) = 1 [pid 365] <... futex resumed>) = 0 [pid 298] restart_syscall(<... resuming interrupted clone ...> [pid 369] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 365] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 365] <... futex resumed>) = 0 [pid 298] <... restart_syscall resumed>) = 0 [pid 369] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 365] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 369] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 369] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 298] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW [pid 369] <... ioctl resumed>, 0x7f6727ef7130) = 28 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 298] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./4/binderfs") = 0 [pid 298] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./4") = 0 [pid 298] mkdir("./5", 0777) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 12 [pid 364] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 363] <... futex resumed>) = 0 [pid 364] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 363] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 363] <... futex resumed>) = 0 [pid 364] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 363] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 364] <... ioctl resumed>, 0x7f6727ef8140) = 0 executing program [pid 364] ioctl(3, USB_RAW_IOCTL_EP_ENABLE./strace-static-x86_64: Process 370 attached [pid 370] set_robust_list(0x5555951c7760, 24) = 0 [pid 370] chdir("./5") = 0 [pid 370] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 370] setpgid(0, 0) = 0 [pid 370] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 370] write(3, "1000", 4) = 4 [pid 370] close(3) = 0 [pid 370] symlink("/dev/binderfs", "./binderfs") = 0 [pid 370] write(1, "executing program\n", 18) = 18 [pid 370] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 370] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 370] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 370] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 370] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 370] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 370] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[13]}, 88) = 13 [pid 370] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 370] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 39.524902][ T39] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 39.544148][ T39] usb 2-1: USB disconnect, device number 6 [ 39.556926][ T39] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [pid 370] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}./strace-static-x86_64: Process 371 attached [pid 364] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 371] set_robust_list(0x7f6727ef99a0, 24 [pid 364] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 371] <... set_robust_list resumed>) = 0 [pid 364] <... ioctl resumed>, 0x7f6727fc893c) = 11 [pid 371] rt_sigprocmask(SIG_SETMASK, [], [pid 364] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 371] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 371] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0 [pid 364] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 371] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 371] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 370] <... futex resumed>) = 0 [pid 371] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 370] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 371] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 370] <... futex resumed>) = 0 [pid 370] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 371] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 370] <... futex resumed>) = 0 [pid 371] socketpair(AF_UNIX, SOCK_STREAM, 0, [pid 370] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 371] <... socketpair resumed>NULL) = -1 EFAULT (Bad address) [pid 370] <... futex resumed>) = 0 [pid 371] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 370] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 371] <... futex resumed>) = 0 [pid 370] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 371] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 370] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 371] <... openat resumed>) = 3 [pid 370] <... futex resumed>) = 0 [pid 371] ioctl(3, USB_RAW_IOCTL_INIT [pid 370] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 371] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 371] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 371] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 39.566222][ T364] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [pid 371] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 362] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 361] <... futex resumed>) = 0 [pid 362] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 361] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 362] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 361] <... futex resumed>) = 0 [pid 362] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 361] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 362] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 362] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [ 39.659644][ T313] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 39.667687][ T313] cdc_ncm 5-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 39.675534][ T313] cdc_ncm 5-1:1.0: setting rx_max = 2048 [pid 368] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 368] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 367] <... futex resumed>) = 0 [pid 367] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 368] <... futex resumed>) = 0 [pid 367] <... futex resumed>) = 1 [pid 368] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 367] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 368] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 368] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 369] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 365] <... futex resumed>) = 0 [pid 368] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 368] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 369] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 365] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 369] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 369] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 365] <... futex resumed>) = 0 [pid 368] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 369] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 369] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 365] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 369] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 364] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 363] <... futex resumed>) = 0 [pid 364] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 363] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 364] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 363] <... futex resumed>) = 0 [pid 363] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 364] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 364] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [ 39.743123][ T368] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 39.763932][ T369] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 39.784455][ T319] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 39.793481][ T319] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 39.803516][ T319] cdc_ncm 1-1:1.0: setting rx_max = 2048 [pid 362] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 361] <... futex resumed>) = 0 [pid 361] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 361] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 362] bpf(BPF_PROG_LOAD, NULL, 0) = -1 EFAULT (Bad address) [pid 362] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 361] <... futex resumed>) = 0 [pid 362] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 361] close(3) = 0 [pid 361] close(4) = -1 EBADF (Bad file descriptor) [pid 361] close(5) = -1 EBADF (Bad file descriptor) [pid 361] close(6) = -1 EBADF (Bad file descriptor) [pid 361] close(7) = -1 EBADF (Bad file descriptor) [pid 361] close(8) = -1 EBADF (Bad file descriptor) [pid 361] close(9) = -1 EBADF (Bad file descriptor) [pid 361] close(10) = -1 EBADF (Bad file descriptor) [pid 361] close(11) = -1 EBADF (Bad file descriptor) [pid 361] close(12) = -1 EBADF (Bad file descriptor) [pid 361] close(13) = -1 EBADF (Bad file descriptor) [pid 361] close(14) = -1 EBADF (Bad file descriptor) [pid 361] close(15) = -1 EBADF (Bad file descriptor) [pid 361] close(16) = -1 EBADF (Bad file descriptor) [pid 361] close(17) = -1 EBADF (Bad file descriptor) [pid 361] close(18) = -1 EBADF (Bad file descriptor) [pid 361] close(19) = -1 EBADF (Bad file descriptor) [pid 361] close(20) = -1 EBADF (Bad file descriptor) [pid 361] close(21) = -1 EBADF (Bad file descriptor) [pid 361] close(22) = -1 EBADF (Bad file descriptor) [pid 361] close(23) = -1 EBADF (Bad file descriptor) [pid 361] close(24) = -1 EBADF (Bad file descriptor) [pid 361] close(25) = -1 EBADF (Bad file descriptor) [pid 361] close(26) = -1 EBADF (Bad file descriptor) [pid 361] close(27) = -1 EBADF (Bad file descriptor) [pid 361] close(28) = -1 EBADF (Bad file descriptor) [pid 361] close(29) = -1 EBADF (Bad file descriptor) [pid 361] exit_group(0 [pid 362] <... futex resumed>) = ? [pid 361] <... exit_group resumed>) = ? [pid 362] +++ exited with 0 +++ [pid 361] +++ exited with 0 +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 301] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 301] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 301] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./4/binderfs") = 0 [pid 301] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./4") = 0 [pid 301] mkdir("./5", 0777) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 12 ./strace-static-x86_64: Process 372 attached [pid 372] set_robust_list(0x5555951c7760, 24) = 0 [pid 372] chdir("./5") = 0 [pid 372] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 372] setpgid(0, 0) = 0 [pid 372] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 372] write(3, "1000", 4) = 4 [pid 372] close(3) = 0 [pid 372] symlink("/dev/binderfs", "./binderfs") = 0 [pid 372] write(1, "executing program\n", 18executing program ) = 18 [pid 372] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 372] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 372] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 372] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 372] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 372] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 372] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0}./strace-static-x86_64: Process 373 attached [pid 373] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 372] <... clone3 resumed> => {parent_tid=[13]}, 88) = 13 [pid 372] rt_sigprocmask(SIG_SETMASK, [], [pid 373] rt_sigprocmask(SIG_SETMASK, [], [pid 372] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 373] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 373] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 372] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 372] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 373] <... futex resumed>) = 0 [pid 373] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 373] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 39.865251][ T313] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 39.879956][ T313] usb 5-1: USB disconnect, device number 6 [ 39.887443][ T313] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [pid 373] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 372] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 372] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 373] <... futex resumed>) = 0 [pid 372] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 373] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 372] <... futex resumed>) = 0 [pid 373] socketpair(AF_UNIX, SOCK_STREAM, 0, [pid 372] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... socketpair resumed>NULL) = -1 EFAULT (Bad address) [pid 372] <... futex resumed>) = 0 [pid 373] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 372] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 373] <... futex resumed>) = 0 [pid 372] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 373] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 373] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 373] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 373] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 373] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 368] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 367] <... futex resumed>) = 0 [pid 368] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 367] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 368] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 367] <... futex resumed>) = 0 [pid 368] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 367] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 368] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 368] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 369] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 368] <... ioctl resumed>, 0x7f6727ef7130) = 26 [pid 365] <... futex resumed>) = 0 [pid 369] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 365] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 369] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 369] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 365] <... futex resumed>) = 0 [pid 369] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 365] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 369] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [pid 364] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 363] <... futex resumed>) = 0 [pid 363] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 363] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 364] bpf(BPF_PROG_LOAD, NULL, 0) = -1 EFAULT (Bad address) [pid 364] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 363] <... futex resumed>) = 0 [pid 364] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 363] close(3) = 0 [pid 363] close(4) = -1 EBADF (Bad file descriptor) [pid 363] close(5) = -1 EBADF (Bad file descriptor) [pid 363] close(6) = -1 EBADF (Bad file descriptor) [pid 363] close(7) = -1 EBADF (Bad file descriptor) [pid 363] close(8) = -1 EBADF (Bad file descriptor) [pid 363] close(9) = -1 EBADF (Bad file descriptor) [pid 363] close(10) = -1 EBADF (Bad file descriptor) [pid 363] close(11) = -1 EBADF (Bad file descriptor) [pid 363] close(12) = -1 EBADF (Bad file descriptor) [pid 363] close(13) = -1 EBADF (Bad file descriptor) [pid 363] close(14) = -1 EBADF (Bad file descriptor) [pid 363] close(15) = -1 EBADF (Bad file descriptor) [pid 363] close(16) = -1 EBADF (Bad file descriptor) [pid 363] close(17) = -1 EBADF (Bad file descriptor) [pid 363] close(18) = -1 EBADF (Bad file descriptor) [pid 363] close(19) = -1 EBADF (Bad file descriptor) [pid 363] close(20) = -1 EBADF (Bad file descriptor) [pid 363] close(21) = -1 EBADF (Bad file descriptor) [pid 363] close(22) = -1 EBADF (Bad file descriptor) [pid 363] close(23) = -1 EBADF (Bad file descriptor) [pid 363] close(24) = -1 EBADF (Bad file descriptor) [pid 363] close(25) = -1 EBADF (Bad file descriptor) [pid 363] close(26) = -1 EBADF (Bad file descriptor) [pid 363] close(27) = -1 EBADF (Bad file descriptor) [pid 363] close(28) = -1 EBADF (Bad file descriptor) [pid 363] close(29) = -1 EBADF (Bad file descriptor) [pid 363] exit_group(0 [pid 364] <... futex resumed>) = ? [pid 363] <... exit_group resumed>) = ? [pid 364] +++ exited with 0 +++ [pid 363] +++ exited with 0 +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 299] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 299] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 299] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./4/binderfs") = 0 [pid 371] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 299] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./4") = 0 [pid 299] mkdir("./5", 0777) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 12 ./strace-static-x86_64: Process 374 attached [ 39.972990][ T315] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 39.980880][ T24] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 39.988073][ T39] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 39.996086][ T315] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 40.004350][ T24] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 40.014024][ T315] cdc_ncm 4-1:1.0: setting rx_max = 2048 [pid 374] set_robust_list(0x5555951c7760, 24) = 0 [pid 374] chdir("./5") = 0 [pid 374] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 374] setpgid(0, 0) = 0 [pid 374] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 374] write(3, "1000", 4) = 4 [pid 371] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 374] close(3) = 0 [pid 374] symlink("/dev/binderfs", "./binderfs") = 0 [pid 374] write(1, "executing program\n", 18executing program ) = 18 [pid 374] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 374] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 374] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 374] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 374] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 374] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 374] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[13]}, 88) = 13 [pid 374] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 374] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 374] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}./strace-static-x86_64: Process 375 attached [pid 375] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 375] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 375] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 375] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... futex resumed>) = 0 [pid 374] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 374] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... futex resumed>) = 1 [pid 375] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 375] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... futex resumed>) = 0 [pid 374] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 374] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... futex resumed>) = 1 [pid 375] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 375] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... futex resumed>) = 0 [pid 374] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 374] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 375] <... futex resumed>) = 1 [pid 371] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 371] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 375] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 375] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 375] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 375] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 40.021057][ T24] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 40.029460][ T319] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 40.055264][ T319] usb 1-1: USB disconnect, device number 6 [ 40.064723][ T319] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [pid 375] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 368] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 367] <... futex resumed>) = 0 [pid 368] bpf(BPF_PROG_LOAD, NULL, 0 [pid 367] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 368] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 367] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 368] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 367] <... futex resumed>) = 0 [pid 368] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 367] close(3 [pid 369] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 365] <... futex resumed>) = 0 [pid 365] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 367] <... close resumed>) = 0 [pid 365] <... futex resumed>) = 0 [pid 365] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 369] bpf(BPF_PROG_LOAD, NULL, 0) = -1 EFAULT (Bad address) [pid 369] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 365] <... futex resumed>) = 0 [pid 369] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 365] close(3) = 0 [pid 365] close(4) = -1 EBADF (Bad file descriptor) [pid 365] close(5) = -1 EBADF (Bad file descriptor) [pid 365] close(6) = -1 EBADF (Bad file descriptor) [pid 365] close(7) = -1 EBADF (Bad file descriptor) [pid 365] close(8) = -1 EBADF (Bad file descriptor) [pid 365] close(9) = -1 EBADF (Bad file descriptor) [pid 365] close(10) = -1 EBADF (Bad file descriptor) [pid 365] close(11) = -1 EBADF (Bad file descriptor) [pid 365] close(12) = -1 EBADF (Bad file descriptor) [pid 365] close(13) = -1 EBADF (Bad file descriptor) [pid 365] close(14) = -1 EBADF (Bad file descriptor) [pid 365] close(15) = -1 EBADF (Bad file descriptor) [pid 365] close(16) = -1 EBADF (Bad file descriptor) [pid 365] close(17) = -1 EBADF (Bad file descriptor) [pid 365] close(18) = -1 EBADF (Bad file descriptor) [pid 365] close(19) = -1 EBADF (Bad file descriptor) [pid 365] close(20) = -1 EBADF (Bad file descriptor) [pid 365] close(21) = -1 EBADF (Bad file descriptor) [pid 365] close(22) = -1 EBADF (Bad file descriptor) [pid 365] close(23) = -1 EBADF (Bad file descriptor) [pid 365] close(24) = -1 EBADF (Bad file descriptor) [pid 365] close(25) = -1 EBADF (Bad file descriptor) [pid 365] close(26) = -1 EBADF (Bad file descriptor) [pid 365] close(27) = -1 EBADF (Bad file descriptor) [pid 365] close(28) = -1 EBADF (Bad file descriptor) [pid 365] close(29 [pid 367] close(4 [pid 365] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 367] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 365] exit_group(0 [pid 369] <... futex resumed>) = ? [pid 367] close(5 [pid 365] <... exit_group resumed>) = ? [pid 369] +++ exited with 0 +++ [pid 367] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 365] +++ exited with 0 +++ [pid 367] close(6) = -1 EBADF (Bad file descriptor) [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 367] close(7 [pid 302] restart_syscall(<... resuming interrupted clone ...> [pid 367] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 302] <... restart_syscall resumed>) = 0 [pid 302] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 302] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 302] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 302] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] unlink("./4/binderfs") = 0 [pid 302] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 302] close(3) = 0 [pid 302] rmdir("./4") = 0 [pid 302] mkdir("./5", 0777) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 12 ./strace-static-x86_64: Process 376 attached [pid 376] set_robust_list(0x5555951c7760, 24) = 0 [ 40.185565][ T315] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 40.199002][ T24] cdc_ncm 3-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 40.215345][ T24] usb 3-1: USB disconnect, device number 6 [ 40.222567][ T315] usb 4-1: USB disconnect, device number 6 [pid 376] chdir("./5") = 0 [pid 376] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 376] setpgid(0, 0) = 0 [pid 376] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 376] write(3, "1000", 4) = 4 [pid 367] close(8 [pid 371] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 371] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 367] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 367] close(9 [pid 371] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 367] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 367] close(10 [pid 371] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 371] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 367] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 376] close(3 [pid 371] <... ioctl resumed>, 0x7f6727ef7110) = 9 [pid 367] close(11 [pid 376] <... close resumed>) = 0 [pid 376] symlink("/dev/binderfs", "./binderfs") = 0 [pid 376] write(1, "executing program\n", 18executing program ) = 18 [pid 376] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 376] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 376] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 376] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 376] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 376] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 376] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[13]}, 88) = 13 [pid 376] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 376] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 376] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}./strace-static-x86_64: Process 377 attached [pid 377] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 377] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 377] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 377] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... futex resumed>) = 0 [pid 376] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 376] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... futex resumed>) = 1 [pid 377] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 377] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 371] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 367] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 367] close(12 [pid 371] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 367] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 367] close(13 [pid 376] <... futex resumed>) = 0 [pid 376] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 376] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... futex resumed>) = 1 [pid 377] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 377] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... futex resumed>) = 0 [pid 376] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 376] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 377] <... futex resumed>) = 1 [pid 377] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 377] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 377] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 377] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 377] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 371] <... ioctl resumed>, 0x7f6727ef7110) = 100 [pid 367] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 371] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 367] close(14) = -1 EBADF (Bad file descriptor) [pid 367] close(15) = -1 EBADF (Bad file descriptor) [pid 367] close(16) = -1 EBADF (Bad file descriptor) [pid 367] close(17) = -1 EBADF (Bad file descriptor) [pid 367] close(18) = -1 EBADF (Bad file descriptor) [pid 367] close(19) = -1 EBADF (Bad file descriptor) [pid 367] close(20) = -1 EBADF (Bad file descriptor) [pid 367] close(21) = -1 EBADF (Bad file descriptor) [pid 367] close(22) = -1 EBADF (Bad file descriptor) [pid 367] close(23) = -1 EBADF (Bad file descriptor) [pid 367] close(24) = -1 EBADF (Bad file descriptor) [pid 367] close(25) = -1 EBADF (Bad file descriptor) [pid 367] close(26) = -1 EBADF (Bad file descriptor) [pid 367] close(27) = -1 EBADF (Bad file descriptor) [pid 367] close(28) = -1 EBADF (Bad file descriptor) [pid 367] close(29) = -1 EBADF (Bad file descriptor) [pid 367] exit_group(0 [pid 368] <... futex resumed>) = ? [pid 367] <... exit_group resumed>) = ? [pid 368] +++ exited with 0 +++ [pid 371] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 371] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 371] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 367] +++ exited with 0 +++ [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 371] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 300] restart_syscall(<... resuming interrupted clone ...> [pid 371] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 371] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 371] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 371] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 40.230373][ T315] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 40.242375][ T24] cdc_ncm 3-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 40.256779][ T39] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.270102][ T39] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [pid 371] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 371] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 300] <... restart_syscall resumed>) = 0 [pid 300] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 300] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./4/binderfs") = 0 [pid 300] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./4") = 0 [pid 300] mkdir("./5", 0777) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 12 ./strace-static-x86_64: Process 378 attached executing program [pid 378] set_robust_list(0x5555951c7760, 24) = 0 [pid 378] chdir("./5") = 0 [pid 378] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 378] setpgid(0, 0) = 0 [pid 378] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 378] write(3, "1000", 4) = 4 [pid 378] close(3) = 0 [pid 378] symlink("/dev/binderfs", "./binderfs") = 0 [pid 378] write(1, "executing program\n", 18) = 18 [pid 378] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 378] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 378] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 378] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 378] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 378] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[13]}, 88) = 13 [pid 378] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 378] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}./strace-static-x86_64: Process 379 attached [pid 379] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 379] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 379] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 379] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] <... futex resumed>) = 0 [pid 378] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 379] <... futex resumed>) = 1 [pid 379] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 379] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] <... futex resumed>) = 0 [pid 378] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 379] <... futex resumed>) = 1 [pid 379] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 379] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] <... futex resumed>) = 0 [pid 378] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 379] <... futex resumed>) = 1 [pid 379] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 379] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 379] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 379] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 379] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 371] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 371] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 371] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 371] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 371] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [ 40.289922][ T39] usb 2-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 40.301417][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.311001][ T39] usb 2-1: Product: syz [ 40.320819][ T39] usb 2-1: Manufacturer: syz [ 40.327027][ T39] usb 2-1: SerialNumber: syz [pid 373] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 373] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [ 40.352390][ T313] usb 5-1: new high-speed USB device number 7 using dummy_hcd [pid 373] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 375] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 375] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [ 40.452190][ T319] usb 1-1: new high-speed USB device number 7 using dummy_hcd [pid 375] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 371] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 370] <... futex resumed>) = 0 [pid 371] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 370] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 371] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 370] <... futex resumed>) = 0 [pid 371] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 370] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 371] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 371] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 371] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 373] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 371] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 373] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 371] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 373] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 373] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 371] <... ioctl resumed>, 0x7f6727fc893c) = 11 [pid 373] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 373] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 373] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 371] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 373] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 371] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 373] <... ioctl resumed>, 0x7f6727ef7110) = 100 [pid 373] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 373] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 373] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 373] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 373] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 373] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 373] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 40.536186][ T371] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 40.548470][ T313] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.563092][ T313] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [pid 373] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 373] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 373] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 373] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 373] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 373] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [pid 375] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 375] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 375] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 375] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 375] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 40.583217][ T313] usb 5-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 40.594731][ T313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.603509][ T313] usb 5-1: Product: syz [ 40.608470][ T313] usb 5-1: Manufacturer: syz [ 40.613317][ T313] usb 5-1: SerialNumber: syz [pid 375] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 375] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 375] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 375] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 375] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 375] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 375] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 375] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 375] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [ 40.656626][ T319] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.669544][ T319] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 40.689379][ T319] usb 1-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [pid 375] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 379] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 379] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 379] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 377] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 377] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 375] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 377] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 375] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW [pid 371] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 371] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 375] <... ioctl resumed>, 0) = 0 [pid 375] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 375] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 375] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [pid 370] <... futex resumed>) = 0 [pid 370] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 371] <... futex resumed>) = 0 [pid 370] <... futex resumed>) = 1 [pid 371] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 370] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 371] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 371] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 371] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 371] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 40.700342][ T319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.709238][ T319] usb 1-1: Product: syz [ 40.715843][ T319] usb 1-1: Manufacturer: syz [ 40.722449][ T315] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 40.731500][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 40.741183][ T319] usb 1-1: SerialNumber: syz [pid 373] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 372] <... futex resumed>) = 0 [pid 373] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 372] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 372] <... futex resumed>) = 0 [pid 373] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 372] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 373] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 373] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 373] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 373] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 373] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 40.823961][ T373] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [pid 379] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 377] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 379] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 377] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 379] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 379] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 377] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 379] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 377] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 379] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 377] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 377] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 379] <... ioctl resumed>, 0x7f6727ef7110) = 9 [pid 379] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 377] <... ioctl resumed>, 0x7f6727ef7110) = 9 [pid 377] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 379] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 377] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 379] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 377] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 379] <... ioctl resumed>, 0x7f6727ef7110) = 100 [pid 377] <... ioctl resumed>, 0x7f6727ef7110) = 100 [pid 379] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 377] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 375] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 374] <... futex resumed>) = 0 [pid 375] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 374] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 374] <... futex resumed>) = 0 [pid 375] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 374] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 375] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 375] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 375] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 371] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 370] <... futex resumed>) = 0 [pid 371] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 370] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 371] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 370] <... futex resumed>) = 0 [pid 371] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 370] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 371] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 371] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 375] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 375] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 375] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 371] <... ioctl resumed>, 0x7f6727ef7130) = 28 [pid 375] <... ioctl resumed>, 0x7f6727ef7130) = 0 [ 40.925967][ T315] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.939374][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.950908][ T375] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 40.951745][ T315] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [pid 379] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 377] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 379] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 377] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 379] <... ioctl resumed>, 0x7f6727ef7110) = 4 [pid 377] <... ioctl resumed>, 0x7f6727ef7110) = 4 [pid 379] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 377] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 379] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 377] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 379] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 377] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 379] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 377] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 379] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 377] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 379] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 377] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 379] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 377] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 379] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 377] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 379] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 377] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 379] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 377] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 379] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 377] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 379] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [ 40.971909][ T24] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 40.988024][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 40.998121][ T315] usb 4-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 41.010337][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [pid 377] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 373] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 372] <... futex resumed>) = 0 [pid 373] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 372] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 372] <... futex resumed>) = 0 [pid 373] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 372] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 373] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 373] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 373] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 373] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 377] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 379] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 377] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW [pid 379] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 377] <... ioctl resumed>, 0) = 0 [pid 379] ioctl(3, USB_RAW_IOCTL_CONFIGURE [pid 377] ioctl(3, USB_RAW_IOCTL_CONFIGURE [pid 379] <... ioctl resumed>, 0) = 0 [pid 377] <... ioctl resumed>, 0) = 0 [pid 379] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 377] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 379] <... ioctl resumed>, 0x7f6727fc850c) = 0 [pid 379] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 377] <... ioctl resumed>, 0x7f6727fc850c) = 0 [pid 377] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 379] <... ioctl resumed>, 0x7f6727ef7110) = 0 [pid 377] <... ioctl resumed>, 0x7f6727ef7110) = 0 [ 41.019189][ T315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.027683][ T24] usb 3-1: Product: syz [ 41.032396][ T24] usb 3-1: Manufacturer: syz [ 41.037408][ T24] usb 3-1: SerialNumber: syz [ 41.042371][ T315] usb 4-1: Product: syz [ 41.048048][ T315] usb 4-1: Manufacturer: syz [ 41.053473][ T315] usb 4-1: SerialNumber: syz [pid 371] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 370] <... futex resumed>) = 0 [pid 375] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 371] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 375] <... futex resumed>) = 1 [pid 374] <... futex resumed>) = 0 [pid 371] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 370] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 374] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 371] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 370] <... futex resumed>) = 0 [pid 375] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 374] <... futex resumed>) = 0 [pid 371] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 370] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 375] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 374] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 371] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 375] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 375] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 375] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 375] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 371] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 371] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 371] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 41.174939][ T371] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [pid 373] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 372] <... futex resumed>) = 0 [pid 372] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 372] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 373] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 373] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [pid 379] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 378] <... futex resumed>) = 0 [pid 379] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 378] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 377] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 379] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 378] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 377] <... futex resumed>) = 1 [pid 376] <... futex resumed>) = 0 [pid 379] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 377] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 376] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 379] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 377] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 376] <... futex resumed>) = 0 [pid 379] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 377] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 376] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 379] <... ioctl resumed>, 0) = 0 [pid 377] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 379] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 377] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 377] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 379] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 377] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 379] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 379] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 377] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 379] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 377] <... ioctl resumed>, 0x7f6727fc893c) = 11 [pid 377] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 41.264584][ T379] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 41.273773][ T377] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [pid 375] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 374] <... futex resumed>) = 0 [pid 374] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 374] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 375] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 375] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [pid 371] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 370] <... futex resumed>) = 0 [pid 370] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 370] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 371] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 371] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [pid 373] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 372] <... futex resumed>) = 0 [pid 373] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 372] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 372] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 373] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 373] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [ 41.393888][ T39] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 41.401601][ T39] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 41.409894][ T39] cdc_ncm 2-1:1.0: setting rx_max = 2048 [pid 373] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 373] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 373] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 379] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 378] <... futex resumed>) = 0 [pid 378] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 378] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 379] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 377] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 379] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 379] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 377] <... futex resumed>) = 1 [pid 376] <... futex resumed>) = 0 [pid 376] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 376] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 379] <... ioctl resumed>, 0) = -1 EINVAL (Invalid argument) [pid 377] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 379] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 377] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 379] <... ioctl resumed>, 0xb) = 0 [pid 377] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 379] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 377] <... ioctl resumed>, 0) = -1 EINVAL (Invalid argument) [pid 377] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 379] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 377] <... ioctl resumed>, 0xb) = 0 [pid 377] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 41.452696][ T373] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [pid 375] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 374] <... futex resumed>) = 0 [pid 375] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 374] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 374] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 375] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 375] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 375] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 375] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 371] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 370] <... futex resumed>) = 0 [pid 370] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 371] bpf(BPF_PROG_LOAD, NULL, 0 [pid 370] <... futex resumed>) = 0 [pid 371] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 370] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 371] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 371] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 370] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 370] close(3) = 0 [pid 370] close(4) = -1 EBADF (Bad file descriptor) [pid 370] close(5) = -1 EBADF (Bad file descriptor) [pid 370] close(6) = -1 EBADF (Bad file descriptor) [pid 370] close(7) = -1 EBADF (Bad file descriptor) [ 41.582233][ T375] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 41.616071][ T39] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [pid 370] close(8) = -1 EBADF (Bad file descriptor) [pid 370] close(9) = -1 EBADF (Bad file descriptor) [pid 370] close(10) = -1 EBADF (Bad file descriptor) [pid 370] close(11) = -1 EBADF (Bad file descriptor) [pid 370] close(12) = -1 EBADF (Bad file descriptor) [pid 370] close(13) = -1 EBADF (Bad file descriptor) [pid 370] close(14) = -1 EBADF (Bad file descriptor) [pid 370] close(15) = -1 EBADF (Bad file descriptor) [pid 370] close(16) = -1 EBADF (Bad file descriptor) [pid 370] close(17) = -1 EBADF (Bad file descriptor) [pid 370] close(18) = -1 EBADF (Bad file descriptor) [pid 370] close(19) = -1 EBADF (Bad file descriptor) [pid 370] close(20) = -1 EBADF (Bad file descriptor) [pid 370] close(21) = -1 EBADF (Bad file descriptor) [pid 370] close(22) = -1 EBADF (Bad file descriptor) [pid 370] close(23) = -1 EBADF (Bad file descriptor) [pid 370] close(24) = -1 EBADF (Bad file descriptor) [pid 370] close(25) = -1 EBADF (Bad file descriptor) [pid 370] close(26) = -1 EBADF (Bad file descriptor) [pid 370] close(27) = -1 EBADF (Bad file descriptor) [pid 370] close(28) = -1 EBADF (Bad file descriptor) [pid 370] close(29) = -1 EBADF (Bad file descriptor) [pid 370] exit_group(0 [pid 371] <... futex resumed>) = ? [pid 370] <... exit_group resumed>) = ? [pid 371] +++ exited with 0 +++ [pid 370] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 298] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./5/binderfs") = 0 [pid 298] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./5") = 0 [pid 298] mkdir("./6", 0777) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 14 ./strace-static-x86_64: Process 380 attached [pid 373] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 372] <... futex resumed>) = 0 [pid 373] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 372] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 372] <... futex resumed>) = 0 [pid 373] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 372] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 373] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 373] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 380] set_robust_list(0x5555951c7760, 24) = 0 [ 41.629090][ T39] usb 2-1: USB disconnect, device number 7 [ 41.635930][ T39] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [pid 373] <... ioctl resumed>, 0x7f6727ef7130) = 26 [pid 380] chdir("./6") = 0 [pid 380] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 380] setpgid(0, 0) = 0 [pid 380] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 379] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 379] <... futex resumed>) = 1 [pid 379] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 380] write(3, "1000", 4) = 4 [pid 380] close(3) = 0 [pid 380] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 380] write(1, "executing program\n", 18) = 18 [pid 380] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 380] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 380] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 380] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 380] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 380] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 380] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[15]}, 88) = 15 [pid 380] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 380] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 380] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 378] <... futex resumed>) = 0 [pid 377] <... futex resumed>) = 1 [pid 376] <... futex resumed>) = 0 ./strace-static-x86_64: Process 381 attached [pid 378] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 376] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 379] <... futex resumed>) = 0 [pid 378] <... futex resumed>) = 1 [pid 377] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 376] <... futex resumed>) = 0 [pid 381] set_robust_list(0x7f6727ef99a0, 24 [pid 379] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 378] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 377] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 376] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 381] <... set_robust_list resumed>) = 0 [pid 379] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 377] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 381] rt_sigprocmask(SIG_SETMASK, [], [pid 379] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 377] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 381] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 377] <... ioctl resumed>, 0x7f6727ef7130) = 28 [pid 379] <... ioctl resumed>, 0x7f6727ef7130) = 28 [pid 381] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 381] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 380] <... futex resumed>) = 0 [pid 380] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 380] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 381] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 381] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 381] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 380] <... futex resumed>) = 0 [pid 380] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 381] <... futex resumed>) = 0 [pid 380] <... futex resumed>) = 1 [pid 381] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 381] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 381] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 380] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 380] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 381] <... futex resumed>) = 0 [pid 380] <... futex resumed>) = 1 [pid 381] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 381] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 381] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 380] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 381] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 41.675455][ T313] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 41.683307][ T313] cdc_ncm 5-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 41.693143][ T313] cdc_ncm 5-1:1.0: setting rx_max = 2048 [pid 381] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 375] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 374] <... futex resumed>) = 0 [pid 374] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 374] <... futex resumed>) = 0 [pid 374] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 375] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 375] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [ 41.793392][ T319] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 41.800629][ T319] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 41.808263][ T319] cdc_ncm 1-1:1.0: setting rx_max = 2048 [pid 373] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 373] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 372] <... futex resumed>) = 0 [pid 372] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... futex resumed>) = 0 [pid 372] <... futex resumed>) = 1 [pid 373] bpf(BPF_PROG_LOAD, NULL, 0 [pid 372] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 373] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 373] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 372] <... futex resumed>) = 0 [pid 373] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 372] close(3) = 0 [pid 372] close(4) = -1 EBADF (Bad file descriptor) [pid 372] close(5) = -1 EBADF (Bad file descriptor) [pid 372] close(6) = -1 EBADF (Bad file descriptor) [pid 372] close(7 [pid 379] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 379] <... futex resumed>) = 1 [pid 378] <... futex resumed>) = 0 [pid 377] <... futex resumed>) = 1 [pid 376] <... futex resumed>) = 0 [pid 376] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 376] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 379] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 372] close(8) = -1 EBADF (Bad file descriptor) [pid 372] close(9) = -1 EBADF (Bad file descriptor) [pid 372] close(10) = -1 EBADF (Bad file descriptor) [pid 372] close(11) = -1 EBADF (Bad file descriptor) [pid 372] close(12) = -1 EBADF (Bad file descriptor) [pid 372] close(13) = -1 EBADF (Bad file descriptor) [pid 372] close(14) = -1 EBADF (Bad file descriptor) [pid 372] close(15) = -1 EBADF (Bad file descriptor) [pid 372] close(16) = -1 EBADF (Bad file descriptor) [pid 372] close(17) = -1 EBADF (Bad file descriptor) [pid 372] close(18) = -1 EBADF (Bad file descriptor) [pid 372] close(19) = -1 EBADF (Bad file descriptor) [pid 372] close(20 [pid 378] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 372] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 379] <... futex resumed>) = 0 [pid 378] <... futex resumed>) = 1 [pid 377] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 379] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 378] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 377] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 372] close(21 [pid 379] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 372] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 379] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 372] close(22 [pid 377] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 377] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 377] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 372] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 372] close(23) = -1 EBADF (Bad file descriptor) [pid 372] close(24) = -1 EBADF (Bad file descriptor) [pid 372] close(25) = -1 EBADF (Bad file descriptor) [pid 372] close(26) = -1 EBADF (Bad file descriptor) [pid 372] close(27) = -1 EBADF (Bad file descriptor) [pid 372] close(28) = -1 EBADF (Bad file descriptor) [pid 372] close(29) = -1 EBADF (Bad file descriptor) [pid 372] exit_group(0 [pid 373] <... futex resumed>) = ? [pid 372] <... exit_group resumed>) = ? [pid 373] +++ exited with 0 +++ [pid 372] +++ exited with 0 +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 301] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 301] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 41.886766][ T313] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 41.901663][ T313] usb 5-1: USB disconnect, device number 7 [ 41.910104][ T313] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 41.921746][ T377] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [pid 301] newfstatat(3, "", [pid 379] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 301] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./5/binderfs") = 0 [pid 301] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./5") = 0 [pid 301] mkdir("./6", 0777 [pid 379] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 301] <... mkdir resumed>) = 0 [pid 379] <... ioctl resumed>, 0x7f6727fc893c) = 11 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 379] ioctl(3, USB_RAW_IOCTL_EP0_READ./strace-static-x86_64: Process 382 attached [pid 301] <... clone resumed>, child_tidptr=0x5555951c7750) = 14 [pid 382] set_robust_list(0x5555951c7760, 24 [pid 379] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 382] <... set_robust_list resumed>) = 0 [pid 382] chdir("./6") = 0 [pid 382] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 382] setpgid(0, 0) = 0 [pid 382] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 382] write(3, "1000", 4) = 4 [pid 382] close(3) = 0 [pid 382] symlink("/dev/binderfs", "./binderfs") = 0 [pid 382] write(1, "executing program\n", 18executing program ) = 18 [pid 382] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 382] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 382] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 382] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 382] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 382] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0}./strace-static-x86_64: Process 383 attached [pid 383] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 383] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 383] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 382] <... clone3 resumed> => {parent_tid=[15]}, 88) = 15 [pid 382] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 382] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 382] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 383] <... futex resumed>) = 0 [pid 383] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 383] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 383] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 382] <... futex resumed>) = 0 [pid 382] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 383] <... futex resumed>) = 0 [pid 382] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 383] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 383] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 383] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 382] <... futex resumed>) = 0 [pid 382] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 383] <... futex resumed>) = 0 [pid 383] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 383] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 383] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 382] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 382] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 383] <... futex resumed>) = 0 [pid 383] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 383] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 382] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 383] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 383] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 41.930331][ T379] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [pid 383] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 375] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 374] <... futex resumed>) = 0 [pid 375] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 374] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 374] <... futex resumed>) = 0 [pid 375] bpf(BPF_PROG_LOAD, NULL, 0 [pid 374] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 375] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 375] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 374] <... futex resumed>) = 0 [pid 374] close(3 [pid 375] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 374] <... close resumed>) = 0 [pid 374] close(4) = -1 EBADF (Bad file descriptor) [pid 374] close(5) = -1 EBADF (Bad file descriptor) [pid 374] close(6) = -1 EBADF (Bad file descriptor) [pid 374] close(7) = -1 EBADF (Bad file descriptor) [pid 374] close(8) = -1 EBADF (Bad file descriptor) [pid 374] close(9) = -1 EBADF (Bad file descriptor) [pid 374] close(10) = -1 EBADF (Bad file descriptor) [pid 374] close(11) = -1 EBADF (Bad file descriptor) [pid 374] close(12) = -1 EBADF (Bad file descriptor) [pid 374] close(13) = -1 EBADF (Bad file descriptor) [pid 374] close(14) = -1 EBADF (Bad file descriptor) [pid 374] close(15) = -1 EBADF (Bad file descriptor) [pid 374] close(16) = -1 EBADF (Bad file descriptor) [pid 374] close(17) = -1 EBADF (Bad file descriptor) [pid 374] close(18) = -1 EBADF (Bad file descriptor) [pid 374] close(19) = -1 EBADF (Bad file descriptor) [pid 374] close(20) = -1 EBADF (Bad file descriptor) [pid 374] close(21) = -1 EBADF (Bad file descriptor) [pid 374] close(22) = -1 EBADF (Bad file descriptor) [pid 374] close(23) = -1 EBADF (Bad file descriptor) [pid 374] close(24) = -1 EBADF (Bad file descriptor) [pid 374] close(25) = -1 EBADF (Bad file descriptor) [pid 374] close(26) = -1 EBADF (Bad file descriptor) [pid 374] close(27) = -1 EBADF (Bad file descriptor) [pid 374] close(28) = -1 EBADF (Bad file descriptor) [pid 374] close(29) = -1 EBADF (Bad file descriptor) [pid 374] exit_group(0 [pid 375] <... futex resumed>) = ? [pid 375] +++ exited with 0 +++ [pid 374] <... exit_group resumed>) = ? [pid 374] +++ exited with 0 +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 299] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 299] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 299] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./5/binderfs") = 0 [pid 299] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./5") = 0 [pid 299] mkdir("./6", 0777) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 14 ./strace-static-x86_64: Process 384 attached [pid 384] set_robust_list(0x5555951c7760, 24) = 0 [pid 384] chdir("./6") = 0 [pid 384] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 384] setpgid(0, 0) = 0 [pid 384] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 384] write(3, "1000", 4) = 4 [pid 384] close(3) = 0 [pid 384] symlink("/dev/binderfs", "./binderfs") = 0 [pid 384] write(1, "executing program\n", 18executing program ) = 18 [pid 384] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 384] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 384] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 384] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 384] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 384] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 384] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[15]}, 88) = 15 [pid 384] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 385 attached [pid 385] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 385] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 385] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 384] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 384] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 385] <... futex resumed>) = 0 [pid 385] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0 [pid 384] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 385] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 385] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 385] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 384] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 384] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 385] <... futex resumed>) = 0 [pid 384] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 385] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 385] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 385] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 384] <... futex resumed>) = 0 [pid 384] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 384] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 385] <... futex resumed>) = 0 [pid 385] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 385] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 384] <... futex resumed>) = 0 [pid 384] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 384] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 385] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 385] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 385] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 385] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 41.998323][ T319] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 42.013796][ T319] usb 1-1: USB disconnect, device number 7 [ 42.020838][ T319] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [pid 385] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 381] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 381] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 381] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [ 42.082195][ T39] usb 2-1: new high-speed USB device number 8 using dummy_hcd [pid 377] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 376] <... futex resumed>) = 0 [pid 377] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 376] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 376] <... futex resumed>) = 0 [pid 377] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 376] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 377] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 377] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 379] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 379] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 378] <... futex resumed>) = 0 [pid 377] <... ioctl resumed>, 0x7f6727ef7130) = 26 [pid 378] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 379] <... futex resumed>) = 0 [pid 378] <... futex resumed>) = 1 [pid 379] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 378] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 379] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 379] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [ 42.133088][ T24] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 42.141203][ T24] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 42.150055][ T24] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 42.156639][ T315] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 42.163895][ T315] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 42.171581][ T315] cdc_ncm 4-1:1.0: setting rx_max = 2048 [pid 381] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 381] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 381] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 381] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 381] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 381] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 381] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 381] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 381] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 381] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 381] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 381] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 381] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 381] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [ 42.266230][ T39] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.277641][ T39] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 42.293189][ T39] usb 2-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 42.302670][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.310798][ T39] usb 2-1: Product: syz [pid 381] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 381] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 381] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 381] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 381] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [pid 377] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 376] <... futex resumed>) = 0 [pid 376] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 376] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 377] bpf(BPF_PROG_LOAD, NULL, 0) = -1 EFAULT (Bad address) [pid 377] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 376] <... futex resumed>) = 0 [pid 377] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 376] close(3) = 0 [pid 376] close(4) = -1 EBADF (Bad file descriptor) [pid 376] close(5) = -1 EBADF (Bad file descriptor) [pid 376] close(6) = -1 EBADF (Bad file descriptor) [pid 376] close(7) = -1 EBADF (Bad file descriptor) [pid 376] close(8) = -1 EBADF (Bad file descriptor) [pid 376] close(9) = -1 EBADF (Bad file descriptor) [pid 376] close(10) = -1 EBADF (Bad file descriptor) [pid 376] close(11) = -1 EBADF (Bad file descriptor) [pid 376] close(12) = -1 EBADF (Bad file descriptor) [pid 376] close(13) = -1 EBADF (Bad file descriptor) [pid 376] close(14) = -1 EBADF (Bad file descriptor) [pid 376] close(15) = -1 EBADF (Bad file descriptor) [pid 376] close(16) = -1 EBADF (Bad file descriptor) [pid 376] close(17) = -1 EBADF (Bad file descriptor) [pid 379] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] close(18 [pid 379] <... futex resumed>) = 1 [pid 376] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 379] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 376] close(19) = -1 EBADF (Bad file descriptor) [pid 376] close(20) = -1 EBADF (Bad file descriptor) [pid 376] close(21) = -1 EBADF (Bad file descriptor) [pid 376] close(22) = -1 EBADF (Bad file descriptor) [pid 376] close(23) = -1 EBADF (Bad file descriptor) [pid 376] close(24) = -1 EBADF (Bad file descriptor) [pid 376] close(25) = -1 EBADF (Bad file descriptor) [pid 376] close(26) = -1 EBADF (Bad file descriptor) [pid 376] close(27) = -1 EBADF (Bad file descriptor) [pid 376] close(28) = -1 EBADF (Bad file descriptor) [pid 376] close(29) = -1 EBADF (Bad file descriptor) [pid 376] exit_group(0) = ? [pid 377] <... futex resumed>) = ? [pid 377] +++ exited with 0 +++ [pid 376] +++ exited with 0 +++ [pid 378] <... futex resumed>) = 0 [ 42.315218][ T39] usb 2-1: Manufacturer: syz [ 42.319878][ T39] usb 2-1: SerialNumber: syz [ 42.354892][ T24] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 302] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 302] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 302] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 378] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 383] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 379] <... futex resumed>) = 0 [pid 378] <... futex resumed>) = 1 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 383] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 379] bpf(BPF_PROG_LOAD, NULL, 0 [pid 378] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 302] newfstatat(AT_FDCWD, "./5/binderfs", [pid 383] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 379] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 302] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 383] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 379] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 302] unlink("./5/binderfs" [pid 379] <... futex resumed>) = 0 [pid 302] <... unlink resumed>) = 0 [pid 379] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 302] getdents64(3, [pid 378] close(3 [pid 302] <... getdents64 resumed>0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 302] close(3) = 0 [pid 302] rmdir("./5" [pid 378] <... close resumed>) = 0 [pid 302] <... rmdir resumed>) = 0 [pid 302] mkdir("./6", 0777 [pid 378] close(4 [pid 302] <... mkdir resumed>) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 14 ./strace-static-x86_64: Process 386 attached [pid 386] set_robust_list(0x5555951c7760, 24) = 0 [pid 378] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 386] chdir("./6") = 0 [pid 386] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 386] setpgid(0, 0) = 0 [pid 386] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 386] write(3, "1000", 4) = 4 [pid 386] close(3) = 0 [pid 386] symlink("/dev/binderfs", "./binderfs") = 0 [pid 386] write(1, "executing program\n", 18executing program ) = 18 [pid 386] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 386] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 386] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 386] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 386] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 386] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 386] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[15]}, 88) = 15 [pid 386] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 386] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 386] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}./strace-static-x86_64: Process 387 attached [pid 387] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 387] rt_sigprocmask(SIG_SETMASK, [], [pid 378] close(5) = -1 EBADF (Bad file descriptor) [pid 378] close(6) = -1 EBADF (Bad file descriptor) [pid 387] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 387] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 387] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 386] <... futex resumed>) = 0 [pid 386] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 386] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 387] <... futex resumed>) = 1 [pid 387] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 387] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 386] <... futex resumed>) = 0 [pid 386] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 386] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 387] <... futex resumed>) = 1 [pid 387] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 387] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 386] <... futex resumed>) = 0 [pid 386] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 386] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 387] <... futex resumed>) = 1 [pid 387] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 387] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 387] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 387] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 387] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 378] close(7) = -1 EBADF (Bad file descriptor) [pid 378] close(8) = -1 EBADF (Bad file descriptor) [pid 378] close(9) = -1 EBADF (Bad file descriptor) [pid 378] close(10) = -1 EBADF (Bad file descriptor) [pid 378] close(11) = -1 EBADF (Bad file descriptor) [pid 378] close(12) = -1 EBADF (Bad file descriptor) [pid 378] close(13) = -1 EBADF (Bad file descriptor) [pid 378] close(14) = -1 EBADF (Bad file descriptor) [pid 378] close(15) = -1 EBADF (Bad file descriptor) [pid 378] close(16) = -1 EBADF (Bad file descriptor) [pid 378] close(17) = -1 EBADF (Bad file descriptor) [pid 378] close(18) = -1 EBADF (Bad file descriptor) [pid 378] close(19) = -1 EBADF (Bad file descriptor) [pid 378] close(20) = -1 EBADF (Bad file descriptor) [pid 378] close(21) = -1 EBADF (Bad file descriptor) [pid 378] close(22) = -1 EBADF (Bad file descriptor) [pid 378] close(23) = -1 EBADF (Bad file descriptor) [pid 378] close(24) = -1 EBADF (Bad file descriptor) [pid 378] close(25) = -1 EBADF (Bad file descriptor) [pid 378] close(26) = -1 EBADF (Bad file descriptor) [pid 378] close(27) = -1 EBADF (Bad file descriptor) [pid 378] close(28) = -1 EBADF (Bad file descriptor) [pid 378] close(29) = -1 EBADF (Bad file descriptor) [ 42.366998][ T313] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 42.378298][ T24] usb 3-1: USB disconnect, device number 7 [ 42.389883][ T315] cdc_ncm 4-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 42.403617][ T24] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [pid 378] exit_group(0 [pid 379] <... futex resumed>) = ? [pid 378] <... exit_group resumed>) = ? [pid 379] +++ exited with 0 +++ [pid 378] +++ exited with 0 +++ [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 300] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 300] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 300] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./5/binderfs") = 0 [pid 300] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./5") = 0 [pid 300] mkdir("./6", 0777) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 14 ./strace-static-x86_64: Process 388 attached [pid 385] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 385] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 385] ioctl(3, USB_RAW_IOCTL_EVENT_FETCHexecuting program [pid 388] set_robust_list(0x5555951c7760, 24) = 0 [pid 388] chdir("./6") = 0 [pid 388] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 388] setpgid(0, 0) = 0 [pid 388] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 388] write(3, "1000", 4) = 4 [pid 388] close(3) = 0 [pid 388] symlink("/dev/binderfs", "./binderfs") = 0 [pid 388] write(1, "executing program\n", 18) = 18 [pid 388] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 388] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 388] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 388] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 388] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 388] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 388] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[15]}, 88) = 15 [pid 388] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 389 attached [pid 389] set_robust_list(0x7f6727ef99a0, 24 [pid 388] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 388] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 389] <... set_robust_list resumed>) = 0 [pid 389] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 389] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 389] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 388] <... futex resumed>) = 0 [pid 388] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 388] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 389] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 389] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 388] <... futex resumed>) = 0 [pid 388] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 388] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 389] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 389] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 389] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 388] <... futex resumed>) = 0 [pid 388] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 389] <... futex resumed>) = 0 [pid 388] <... futex resumed>) = 1 [pid 389] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 388] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 389] <... openat resumed>) = 3 [pid 389] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 389] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 389] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 42.422337][ T319] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 42.438413][ T315] usb 4-1: USB disconnect, device number 7 [ 42.455580][ T315] cdc_ncm 4-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [pid 389] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 381] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 380] <... futex resumed>) = 0 [pid 381] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 380] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 381] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 380] <... futex resumed>) = 0 [pid 380] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 381] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 381] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 381] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 381] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 383] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 383] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 383] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 383] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 383] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 383] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 383] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 383] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 383] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 383] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 383] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 383] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 383] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 383] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [ 42.530120][ T381] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 42.554244][ T313] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.566700][ T313] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [pid 383] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 383] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 383] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 383] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 383] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [pid 385] <... ioctl resumed>, 0x7f6727ef8120) = 0 [ 42.581907][ T313] usb 5-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 42.591767][ T313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.600472][ T313] usb 5-1: Product: syz [ 42.604995][ T313] usb 5-1: Manufacturer: syz [ 42.609801][ T313] usb 5-1: SerialNumber: syz [pid 385] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 385] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 385] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 385] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 385] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 385] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 385] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 385] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 385] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 385] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 385] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 385] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 385] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [ 42.634169][ T319] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.645978][ T319] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 42.659738][ T319] usb 1-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 42.669054][ T319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.677579][ T319] usb 1-1: Product: syz [pid 385] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 385] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 385] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 385] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 385] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [pid 381] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 380] <... futex resumed>) = 0 [pid 381] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 380] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 381] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 380] <... futex resumed>) = 0 [pid 380] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 381] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 381] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 381] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 381] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 42.681775][ T319] usb 1-1: Manufacturer: syz [ 42.686436][ T319] usb 1-1: SerialNumber: syz [pid 383] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 382] <... futex resumed>) = 0 [pid 383] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 382] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 383] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 382] <... futex resumed>) = 0 [pid 383] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 382] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 383] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 383] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 383] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 383] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 383] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 387] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 383] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 387] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [ 42.819325][ T383] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 42.826593][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [pid 387] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 389] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 389] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 389] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 385] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 384] <... futex resumed>) = 0 [pid 385] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 384] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 385] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 384] <... futex resumed>) = 0 [pid 385] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 384] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 385] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 385] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 385] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 385] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 385] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 381] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 380] <... futex resumed>) = 0 [pid 381] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 380] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 381] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 380] <... futex resumed>) = 0 [pid 381] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 380] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 381] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 381] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [ 42.872212][ T315] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 42.894063][ T385] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [pid 387] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 387] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 387] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 387] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 387] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 387] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 387] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 383] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 387] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 383] <... futex resumed>) = 1 [pid 382] <... futex resumed>) = 0 [pid 387] <... ioctl resumed>, 0x7f6727ef7110) = 4 [pid 383] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 382] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 387] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 383] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 382] <... futex resumed>) = 0 [pid 387] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 383] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 382] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 383] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 383] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 383] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 383] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 387] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 383] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 387] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 387] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 387] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 387] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 387] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 387] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 389] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 389] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [ 43.013936][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.026722][ T24] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 43.044501][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 43.054164][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [pid 389] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 389] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 389] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 389] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 389] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 387] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 389] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 387] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW [pid 389] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 387] <... ioctl resumed>, 0) = 0 [pid 389] <... ioctl resumed>, 0x7f6727ef7110) = 4 [pid 387] ioctl(3, USB_RAW_IOCTL_CONFIGURE [pid 389] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 387] <... ioctl resumed>, 0) = 0 [pid 387] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 387] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [pid 385] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 384] <... futex resumed>) = 0 [pid 389] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 389] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 389] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 385] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 384] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 389] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 389] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 385] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 384] <... futex resumed>) = 0 [pid 385] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 384] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 389] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 385] <... ioctl resumed>, 0) = -1 EINVAL (Invalid argument) [pid 389] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 385] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 389] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 389] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 385] <... ioctl resumed>, 0xb) = 0 [pid 385] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 389] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 389] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 385] <... ioctl resumed>, 0x7f6727ef7130) = 0 [ 43.063098][ T24] usb 3-1: Product: syz [ 43.067987][ T24] usb 3-1: Manufacturer: syz [ 43.072778][ T24] usb 3-1: SerialNumber: syz [ 43.078974][ T315] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.090963][ T315] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [pid 389] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 389] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 389] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 389] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 389] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 381] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 389] <... ioctl resumed>, 0x7f6727ef7110) = 0 [pid 381] <... futex resumed>) = 1 [pid 380] <... futex resumed>) = 0 [pid 381] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 380] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 381] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 380] <... futex resumed>) = 0 [pid 381] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 380] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 381] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 381] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 381] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 43.108427][ T315] usb 4-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 43.118052][ T315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.126375][ T315] usb 4-1: Product: syz [ 43.130675][ T315] usb 4-1: Manufacturer: syz [ 43.135456][ T315] usb 4-1: SerialNumber: syz [ 43.145401][ T381] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [pid 383] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 382] <... futex resumed>) = 0 [pid 383] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 382] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 383] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 382] <... futex resumed>) = 0 [pid 383] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 382] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 383] <... ioctl resumed>, 0x7f6727ef7130) = 28 [pid 387] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 386] <... futex resumed>) = 0 [pid 386] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 386] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 387] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 387] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 387] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 385] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 384] <... futex resumed>) = 0 [pid 385] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 384] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 385] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 384] <... futex resumed>) = 0 [pid 385] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 384] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 385] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 385] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [pid 387] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 387] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 387] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 389] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 388] <... futex resumed>) = 0 [pid 389] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 388] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 389] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 388] <... futex resumed>) = 0 [pid 389] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 388] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 389] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [ 43.305695][ T387] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [pid 389] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 381] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 389] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 381] <... futex resumed>) = 1 [pid 380] <... futex resumed>) = 0 [pid 389] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 381] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 389] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 381] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 380] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 381] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 381] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 380] <... futex resumed>) = 0 [pid 381] <... ioctl resumed>, 0x7f6727ef7130) = 26 [ 43.348218][ T389] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 43.360794][ T39] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 43.368871][ T39] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 43.377535][ T39] cdc_ncm 2-1:1.0: setting rx_max = 2048 [pid 380] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 383] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 382] <... futex resumed>) = 0 [pid 382] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 383] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 382] <... futex resumed>) = 0 [pid 382] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 383] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 383] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 383] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 383] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 383] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 43.445220][ T383] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [pid 385] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 384] <... futex resumed>) = 0 [pid 384] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 384] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 385] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 385] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 387] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 386] <... futex resumed>) = 0 [pid 387] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 386] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 387] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 386] <... futex resumed>) = 0 [pid 387] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 386] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 387] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 387] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 387] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 387] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 385] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 385] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 385] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 389] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 388] <... futex resumed>) = 0 [pid 389] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 388] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 388] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 389] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 389] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 389] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 389] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 389] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 381] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 380] <... futex resumed>) = 0 [pid 381] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 380] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 380] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 381] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 43.511640][ T385] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [pid 381] bpf(BPF_PROG_LOAD, NULL, 0) = -1 EFAULT (Bad address) [pid 381] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 380] <... futex resumed>) = 0 [pid 381] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 380] close(3) = 0 [pid 380] close(4) = -1 EBADF (Bad file descriptor) [pid 380] close(5) = -1 EBADF (Bad file descriptor) [pid 380] close(6) = -1 EBADF (Bad file descriptor) [pid 380] close(7) = -1 EBADF (Bad file descriptor) [pid 380] close(8) = -1 EBADF (Bad file descriptor) [pid 380] close(9) = -1 EBADF (Bad file descriptor) [pid 380] close(10) = -1 EBADF (Bad file descriptor) [pid 380] close(11) = -1 EBADF (Bad file descriptor) [pid 380] close(12) = -1 EBADF (Bad file descriptor) [pid 380] close(13) = -1 EBADF (Bad file descriptor) [pid 380] close(14) = -1 EBADF (Bad file descriptor) [pid 380] close(15) = -1 EBADF (Bad file descriptor) [pid 380] close(16) = -1 EBADF (Bad file descriptor) [pid 380] close(17) = -1 EBADF (Bad file descriptor) [pid 380] close(18) = -1 EBADF (Bad file descriptor) [pid 380] close(19) = -1 EBADF (Bad file descriptor) [pid 380] close(20) = -1 EBADF (Bad file descriptor) [pid 380] close(21) = -1 EBADF (Bad file descriptor) [pid 380] close(22) = -1 EBADF (Bad file descriptor) [pid 380] close(23) = -1 EBADF (Bad file descriptor) [pid 380] close(24) = -1 EBADF (Bad file descriptor) [pid 380] close(25) = -1 EBADF (Bad file descriptor) [pid 380] close(26) = -1 EBADF (Bad file descriptor) [pid 380] close(27) = -1 EBADF (Bad file descriptor) [pid 380] close(28) = -1 EBADF (Bad file descriptor) [pid 380] close(29) = -1 EBADF (Bad file descriptor) [pid 380] exit_group(0 [pid 381] <... futex resumed>) = ? [pid 380] <... exit_group resumed>) = ? [pid 381] +++ exited with 0 +++ [pid 380] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=14, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 298] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./6/binderfs") = 0 [pid 298] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./6") = 0 [pid 298] mkdir("./7", 0777) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 390 attached [pid 390] set_robust_list(0x5555951c7760, 24) = 0 [pid 390] chdir("./7") = 0 [pid 390] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 390] setpgid(0, 0) = 0 [pid 298] <... clone resumed>, child_tidptr=0x5555951c7750) = 16 [pid 390] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 390] write(3, "1000", 4) = 4 [pid 390] close(3) = 0 [pid 390] symlink("/dev/binderfs", "./binderfs") = 0 [pid 390] write(1, "executing program\n", 18executing program ) = 18 [pid 390] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 390] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 390] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 390] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 390] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 390] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 390] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0}./strace-static-x86_64: Process 391 attached [pid 391] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 391] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 391] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 390] <... clone3 resumed> => {parent_tid=[17]}, 88) = 17 [pid 390] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 390] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 390] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 391] <... futex resumed>) = 0 [pid 391] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 391] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 391] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 390] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 390] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 391] <... futex resumed>) = 0 [pid 391] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 390] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 391] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 391] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 391] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 390] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 390] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 391] <... futex resumed>) = 0 [pid 390] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 391] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 391] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 391] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 390] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 390] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 391] <... futex resumed>) = 0 [pid 391] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 390] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 391] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 391] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 391] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 43.588821][ T39] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 43.604721][ T39] usb 2-1: USB disconnect, device number 8 [ 43.611109][ T39] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [pid 391] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 383] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 383] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 382] <... futex resumed>) = 0 [pid 382] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 383] <... futex resumed>) = 0 [pid 382] <... futex resumed>) = 1 [pid 383] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 382] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 383] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 383] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [ 43.655508][ T313] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 43.662199][ T313] cdc_ncm 5-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 43.669976][ T313] cdc_ncm 5-1:1.0: setting rx_max = 2048 [pid 387] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 386] <... futex resumed>) = 0 [pid 387] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 386] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 387] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 386] <... futex resumed>) = 0 [pid 387] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 386] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 387] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 387] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [pid 385] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 384] <... futex resumed>) = 0 [pid 385] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 384] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 385] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 384] <... futex resumed>) = 0 [pid 384] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 385] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 385] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [pid 389] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 388] <... futex resumed>) = 0 [pid 389] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 388] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 388] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 389] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 389] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 389] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [ 43.722757][ T319] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 43.730152][ T319] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 43.738089][ T319] cdc_ncm 1-1:1.0: setting rx_max = 2048 [pid 383] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 382] <... futex resumed>) = 0 [pid 383] bpf(BPF_PROG_LOAD, NULL, 0 [pid 382] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 383] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 383] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 382] <... futex resumed>) = 0 [pid 383] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 382] close(3) = 0 [pid 382] close(4) = -1 EBADF (Bad file descriptor) [pid 382] close(5) = -1 EBADF (Bad file descriptor) [pid 382] close(6) = -1 EBADF (Bad file descriptor) [pid 382] close(7) = -1 EBADF (Bad file descriptor) [pid 382] close(8) = -1 EBADF (Bad file descriptor) [pid 382] close(9) = -1 EBADF (Bad file descriptor) [pid 382] close(10) = -1 EBADF (Bad file descriptor) [pid 382] close(11) = -1 EBADF (Bad file descriptor) [pid 382] close(12) = -1 EBADF (Bad file descriptor) [pid 382] close(13) = -1 EBADF (Bad file descriptor) [pid 382] close(14) = -1 EBADF (Bad file descriptor) [pid 382] close(15) = -1 EBADF (Bad file descriptor) [pid 382] close(16) = -1 EBADF (Bad file descriptor) [pid 382] close(17) = -1 EBADF (Bad file descriptor) [pid 382] close(18) = -1 EBADF (Bad file descriptor) [pid 382] close(19) = -1 EBADF (Bad file descriptor) [pid 382] close(20) = -1 EBADF (Bad file descriptor) [pid 382] close(21) = -1 EBADF (Bad file descriptor) [pid 382] close(22) = -1 EBADF (Bad file descriptor) [pid 382] close(23) = -1 EBADF (Bad file descriptor) [pid 382] close(24) = -1 EBADF (Bad file descriptor) [pid 382] close(25) = -1 EBADF (Bad file descriptor) [pid 382] close(26) = -1 EBADF (Bad file descriptor) [pid 382] close(27) = -1 EBADF (Bad file descriptor) [pid 382] close(28) = -1 EBADF (Bad file descriptor) [pid 382] close(29) = -1 EBADF (Bad file descriptor) [pid 382] exit_group(0 [pid 383] <... futex resumed>) = ? [pid 382] <... exit_group resumed>) = ? [pid 383] +++ exited with 0 +++ [pid 382] +++ exited with 0 +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=14, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 301] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 301] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 301] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./6/binderfs") = 0 [pid 301] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./6") = 0 [pid 301] mkdir("./7", 0777) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 16 ./strace-static-x86_64: Process 392 attached [pid 392] set_robust_list(0x5555951c7760, 24) = 0 [pid 392] chdir("./7") = 0 [pid 392] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 392] setpgid(0, 0) = 0 [pid 392] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 392] write(3, "1000", 4) = 4 [pid 392] close(3) = 0 [pid 392] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 392] write(1, "executing program\n", 18) = 18 [pid 392] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 392] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 392] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 392] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 392] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 392] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 392] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0}./strace-static-x86_64: Process 393 attached [pid 393] set_robust_list(0x7f6727ef99a0, 24 [pid 392] <... clone3 resumed> => {parent_tid=[17]}, 88) = 17 [pid 392] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 393] <... set_robust_list resumed>) = 0 [pid 393] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 393] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 392] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 393] <... futex resumed>) = 0 [pid 393] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 393] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 393] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 392] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 392] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 393] <... futex resumed>) = 0 [pid 393] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 392] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 393] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 387] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 393] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 387] <... futex resumed>) = 1 [pid 386] <... futex resumed>) = 0 [pid 387] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 393] <... futex resumed>) = 1 [pid 392] <... futex resumed>) = 0 [pid 393] socketpair(AF_UNIX, SOCK_STREAM, 0, [pid 392] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [ 43.866863][ T313] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 43.881028][ T313] usb 5-1: USB disconnect, device number 8 [ 43.889719][ T313] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [pid 386] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 393] <... socketpair resumed>NULL) = -1 EFAULT (Bad address) [pid 392] <... futex resumed>) = 0 [pid 393] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 392] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 387] <... futex resumed>) = 0 [pid 386] <... futex resumed>) = 1 [pid 387] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 393] <... futex resumed>) = 0 [pid 392] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 387] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 392] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 387] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 393] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 392] <... futex resumed>) = 0 [pid 386] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 393] <... openat resumed>) = 3 [pid 392] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 387] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 385] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 385] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 393] ioctl(3, USB_RAW_IOCTL_INIT [pid 384] <... futex resumed>) = 0 [pid 384] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 393] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 387] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 385] <... futex resumed>) = 0 [pid 384] <... futex resumed>) = 1 [pid 393] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 387] <... ioctl resumed>, 0x7f6727fc893c) = 11 [pid 385] bpf(BPF_PROG_LOAD, NULL, 0 [pid 384] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 385] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 385] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 384] <... futex resumed>) = 0 [pid 385] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 384] close(3 [pid 393] <... ioctl resumed>, 0) = 0 [pid 387] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 384] <... close resumed>) = 0 [pid 393] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 393] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 387] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 384] close(4) = -1 EBADF (Bad file descriptor) [pid 384] close(5) = -1 EBADF (Bad file descriptor) [pid 384] close(6) = -1 EBADF (Bad file descriptor) [pid 384] close(7) = -1 EBADF (Bad file descriptor) [pid 384] close(8) = -1 EBADF (Bad file descriptor) [pid 384] close(9) = -1 EBADF (Bad file descriptor) [ 43.921691][ T387] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 43.942911][ T319] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 43.958579][ T319] usb 1-1: USB disconnect, device number 8 [pid 384] close(10) = -1 EBADF (Bad file descriptor) [pid 389] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 388] <... futex resumed>) = 0 [pid 389] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 388] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 389] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 388] <... futex resumed>) = 0 [pid 389] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 388] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 389] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 389] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 384] close(11) = -1 EBADF (Bad file descriptor) [pid 389] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 384] close(12) = -1 EBADF (Bad file descriptor) [pid 384] close(13) = -1 EBADF (Bad file descriptor) [pid 384] close(14) = -1 EBADF (Bad file descriptor) [pid 384] close(15) = -1 EBADF (Bad file descriptor) [pid 384] close(16) = -1 EBADF (Bad file descriptor) [pid 384] close(17) = -1 EBADF (Bad file descriptor) [pid 384] close(18) = -1 EBADF (Bad file descriptor) [pid 384] close(19 [pid 389] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 384] close(20) = -1 EBADF (Bad file descriptor) [pid 389] <... ioctl resumed>, 0x7f6727fc893c) = 11 [pid 384] close(21 [pid 389] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 384] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 384] close(22) = -1 EBADF (Bad file descriptor) [pid 389] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 384] close(23) = -1 EBADF (Bad file descriptor) [pid 384] close(24) = -1 EBADF (Bad file descriptor) [pid 384] close(25) = -1 EBADF (Bad file descriptor) [pid 384] close(26) = -1 EBADF (Bad file descriptor) [pid 384] close(27) = -1 EBADF (Bad file descriptor) [pid 384] close(28) = -1 EBADF (Bad file descriptor) [pid 384] close(29) = -1 EBADF (Bad file descriptor) [pid 384] exit_group(0 [pid 385] <... futex resumed>) = ? [pid 384] <... exit_group resumed>) = ? [pid 385] +++ exited with 0 +++ [pid 384] +++ exited with 0 +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=14, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 299] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 299] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 299] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./6/binderfs") = 0 [pid 299] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./6") = 0 [pid 299] mkdir("./7", 0777) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 16 ./strace-static-x86_64: Process 394 attached [pid 394] set_robust_list(0x5555951c7760, 24) = 0 [pid 394] chdir("./7") = 0 [pid 394] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 394] setpgid(0, 0) = 0 [pid 394] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 394] write(3, "1000", 4) = 4 [pid 394] close(3) = 0 [pid 394] symlink("/dev/binderfs", "./binderfs") = 0 [pid 394] write(1, "executing program\n", 18executing program ) = 18 [pid 394] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 394] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 394] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 394] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 394] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 394] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 394] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0}./strace-static-x86_64: Process 395 attached [pid 395] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 395] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 395] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 394] <... clone3 resumed> => {parent_tid=[17]}, 88) = 17 [pid 394] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 394] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 395] <... futex resumed>) = 0 [pid 394] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 395] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 395] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 395] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 394] <... futex resumed>) = 0 [pid 394] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 395] <... futex resumed>) = 0 [pid 394] <... futex resumed>) = 1 [pid 395] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 394] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 395] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 395] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 394] <... futex resumed>) = 0 [pid 395] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 394] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 395] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 394] <... futex resumed>) = 0 [pid 395] socketpair(AF_UNIX, SOCK_STREAM, 0, [pid 394] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 395] <... socketpair resumed>NULL) = -1 EFAULT (Bad address) [pid 395] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 394] <... futex resumed>) = 0 [pid 395] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 394] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 395] <... futex resumed>) = 0 [pid 394] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 395] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 395] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 395] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 395] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 43.969206][ T389] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 43.969786][ T319] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [pid 395] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 391] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 391] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [ 44.032283][ T39] usb 2-1: new high-speed USB device number 9 using dummy_hcd [pid 391] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 387] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 386] <... futex resumed>) = 0 [pid 387] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 386] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 387] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 386] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 387] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 387] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [pid 389] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 388] <... futex resumed>) = 0 [pid 389] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 388] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 389] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 388] <... futex resumed>) = 0 [pid 389] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 388] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 389] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 389] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [ 44.157549][ T24] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 44.164368][ T24] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 44.172503][ T24] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 44.195481][ T315] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [pid 391] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 391] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 391] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 391] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 391] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 391] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 391] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 391] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 391] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 391] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 391] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 391] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 391] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 391] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [ 44.202881][ T315] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 44.210571][ T315] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 44.223972][ T39] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.236071][ T39] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [pid 391] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 391] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 391] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 391] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 391] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [ 44.250079][ T39] usb 2-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 44.259624][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.269000][ T39] usb 2-1: Product: syz [ 44.274467][ T39] usb 2-1: Manufacturer: syz [ 44.279305][ T39] usb 2-1: SerialNumber: syz [pid 393] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 393] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 393] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 387] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 386] <... futex resumed>) = 0 [pid 387] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 386] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 387] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 386] <... futex resumed>) = 0 [pid 387] bpf(BPF_PROG_LOAD, NULL, 0 [pid 386] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 387] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 387] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 386] <... futex resumed>) = 0 [pid 387] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 386] close(3) = 0 [pid 386] close(4) = -1 EBADF (Bad file descriptor) [pid 386] close(5) = -1 EBADF (Bad file descriptor) [pid 386] close(6) = -1 EBADF (Bad file descriptor) [pid 386] close(7) = -1 EBADF (Bad file descriptor) [pid 386] close(8) = -1 EBADF (Bad file descriptor) [pid 386] close(9) = -1 EBADF (Bad file descriptor) [pid 386] close(10) = -1 EBADF (Bad file descriptor) [pid 386] close(11) = -1 EBADF (Bad file descriptor) [pid 386] close(12) = -1 EBADF (Bad file descriptor) [pid 386] close(13) = -1 EBADF (Bad file descriptor) [pid 386] close(14) = -1 EBADF (Bad file descriptor) [pid 386] close(15) = -1 EBADF (Bad file descriptor) [pid 386] close(16) = -1 EBADF (Bad file descriptor) [pid 386] close(17) = -1 EBADF (Bad file descriptor) [pid 386] close(18) = -1 EBADF (Bad file descriptor) [pid 386] close(19) = -1 EBADF (Bad file descriptor) [pid 386] close(20) = -1 EBADF (Bad file descriptor) [ 44.332416][ T313] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 44.364654][ T24] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [pid 386] close(21) = -1 EBADF (Bad file descriptor) [pid 386] close(22) = -1 EBADF (Bad file descriptor) [pid 386] close(23) = -1 EBADF (Bad file descriptor) [pid 386] close(24) = -1 EBADF (Bad file descriptor) [pid 386] close(25) = -1 EBADF (Bad file descriptor) [pid 386] close(26) = -1 EBADF (Bad file descriptor) [pid 386] close(27) = -1 EBADF (Bad file descriptor) [pid 386] close(28) = -1 EBADF (Bad file descriptor) [pid 386] close(29) = -1 EBADF (Bad file descriptor) [pid 386] exit_group(0 [pid 387] <... futex resumed>) = ? [pid 386] <... exit_group resumed>) = ? [pid 387] +++ exited with 0 +++ [pid 386] +++ exited with 0 +++ [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=14, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 302] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 302] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 302] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 302] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] unlink("./6/binderfs") = 0 [pid 302] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 302] close(3) = 0 [pid 302] rmdir("./6") = 0 [pid 302] mkdir("./7", 0777) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 16 ./strace-static-x86_64: Process 396 attached [pid 389] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 388] <... futex resumed>) = 0 [pid 389] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 388] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 389] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 388] <... futex resumed>) = 0 [pid 389] bpf(BPF_PROG_LOAD, NULL, 0 [pid 388] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 389] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 389] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 396] set_robust_list(0x5555951c7760, 24 [pid 389] <... futex resumed>) = 1 [pid 388] <... futex resumed>) = 0 [pid 389] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 388] close(3 [pid 396] <... set_robust_list resumed>) = 0 executing program [pid 388] <... close resumed>) = 0 [pid 396] chdir("./7") = 0 [pid 396] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 396] setpgid(0, 0) = 0 [pid 396] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 388] close(4 [pid 396] write(3, "1000", 4) = 4 [pid 396] close(3) = 0 [pid 396] symlink("/dev/binderfs", "./binderfs") = 0 [pid 396] write(1, "executing program\n", 18) = 18 [pid 396] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 396] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 396] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 396] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 396] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 396] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 396] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[17]}, 88) = 17 [pid 396] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 396] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 396] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}./strace-static-x86_64: Process 397 attached [pid 397] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 397] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 397] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 397] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 396] <... futex resumed>) = 0 [pid 396] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 396] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 397] <... futex resumed>) = 1 [pid 397] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 397] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 396] <... futex resumed>) = 0 [pid 396] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 396] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 397] <... futex resumed>) = 1 [pid 397] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 397] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 396] <... futex resumed>) = 0 [pid 396] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 396] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 397] <... futex resumed>) = 1 [pid 397] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 397] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 397] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 397] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 397] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 388] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 388] close(5) = -1 EBADF (Bad file descriptor) [pid 388] close(6) = -1 EBADF (Bad file descriptor) [pid 388] close(7) = -1 EBADF (Bad file descriptor) [pid 388] close(8) = -1 EBADF (Bad file descriptor) [pid 388] close(9) = -1 EBADF (Bad file descriptor) [pid 388] close(10) = -1 EBADF (Bad file descriptor) [pid 388] close(11) = -1 EBADF (Bad file descriptor) [pid 388] close(12) = -1 EBADF (Bad file descriptor) [pid 388] close(13) = -1 EBADF (Bad file descriptor) [pid 388] close(14) = -1 EBADF (Bad file descriptor) [pid 388] close(15) = -1 EBADF (Bad file descriptor) [pid 388] close(16) = -1 EBADF (Bad file descriptor) [pid 388] close(17) = -1 EBADF (Bad file descriptor) [pid 388] close(18) = -1 EBADF (Bad file descriptor) [pid 388] close(19) = -1 EBADF (Bad file descriptor) [pid 388] close(20) = -1 EBADF (Bad file descriptor) [pid 388] close(21) = -1 EBADF (Bad file descriptor) [pid 388] close(22) = -1 EBADF (Bad file descriptor) [pid 388] close(23) = -1 EBADF (Bad file descriptor) [pid 388] close(24) = -1 EBADF (Bad file descriptor) [pid 388] close(25) = -1 EBADF (Bad file descriptor) [pid 388] close(26) = -1 EBADF (Bad file descriptor) [pid 388] close(27) = -1 EBADF (Bad file descriptor) [pid 388] close(28) = -1 EBADF (Bad file descriptor) [pid 388] close(29) = -1 EBADF (Bad file descriptor) [pid 388] exit_group(0) = ? [pid 389] <... futex resumed>) = ? [pid 389] +++ exited with 0 +++ [pid 388] +++ exited with 0 +++ [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=14, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 300] restart_syscall(<... resuming interrupted clone ...> [pid 395] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 395] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 300] <... restart_syscall resumed>) = 0 [pid 395] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 395] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 300] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 300] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./6/binderfs") = 0 [ 44.382490][ T24] usb 3-1: USB disconnect, device number 8 [ 44.390158][ T24] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 44.407255][ T315] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 44.419174][ T319] usb 1-1: new high-speed USB device number 9 using dummy_hcd [pid 300] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./6") = 0 [pid 300] mkdir("./7", 0777) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 16 ./strace-static-x86_64: Process 398 attached [pid 398] set_robust_list(0x5555951c7760, 24) = 0 [pid 398] chdir("./7"executing program ) = 0 [pid 398] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 398] setpgid(0, 0) = 0 [pid 398] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 398] write(3, "1000", 4) = 4 [pid 398] close(3) = 0 [pid 398] symlink("/dev/binderfs", "./binderfs") = 0 [pid 398] write(1, "executing program\n", 18) = 18 [pid 398] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 398] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 398] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 398] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 398] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 398] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 398] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0}./strace-static-x86_64: Process 399 attached => {parent_tid=[17]}, 88) = 17 [pid 398] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 399] set_robust_list(0x7f6727ef99a0, 24 [pid 398] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] <... set_robust_list resumed>) = 0 [pid 398] <... futex resumed>) = 0 [pid 399] rt_sigprocmask(SIG_SETMASK, [], [pid 398] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 399] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 399] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 399] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 398] <... futex resumed>) = 0 [pid 399] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 398] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 399] <... futex resumed>) = 0 [pid 398] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 399] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 399] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 398] <... futex resumed>) = 0 [pid 399] socketpair(AF_UNIX, SOCK_STREAM, 0, [pid 398] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] <... socketpair resumed>NULL) = -1 EFAULT (Bad address) [pid 398] <... futex resumed>) = 0 [pid 399] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 398] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 399] <... futex resumed>) = 0 [pid 398] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 399] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 398] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] <... openat resumed>) = 3 [pid 398] <... futex resumed>) = 0 [pid 399] ioctl(3, USB_RAW_IOCTL_INIT [pid 398] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 399] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 399] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 399] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 399] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 391] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 390] <... futex resumed>) = 0 [pid 391] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 390] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 391] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 390] <... futex resumed>) = 0 [pid 391] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [ 44.429382][ T315] usb 4-1: USB disconnect, device number 8 [ 44.438904][ T315] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [pid 390] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 391] <... ioctl resumed>, 0) = 0 [pid 391] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 391] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 391] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 393] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 393] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 393] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 393] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 393] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 393] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [ 44.490244][ T391] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 44.524317][ T313] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 393] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 393] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 393] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 393] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 393] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 393] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 393] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 393] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 393] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 393] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 393] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 393] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 393] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [pid 395] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 395] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 395] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 395] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 395] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 44.536882][ T313] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 44.551631][ T313] usb 5-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 44.561516][ T313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.570287][ T313] usb 5-1: Product: syz [ 44.575185][ T313] usb 5-1: Manufacturer: syz [ 44.580321][ T313] usb 5-1: SerialNumber: syz [pid 395] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 395] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 395] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 395] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 395] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 395] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 395] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 395] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 395] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [ 44.603876][ T319] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.617957][ T319] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 44.633154][ T319] usb 1-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 44.643835][ T319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [pid 395] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 395] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 395] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 395] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 395] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [pid 391] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 390] <... futex resumed>) = 0 [pid 391] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 390] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 391] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 390] <... futex resumed>) = 0 [pid 391] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 390] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 391] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 391] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 391] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 391] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 44.653117][ T319] usb 1-1: Product: syz [ 44.657690][ T319] usb 1-1: Manufacturer: syz [ 44.665294][ T319] usb 1-1: SerialNumber: syz [pid 393] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 392] <... futex resumed>) = 0 [pid 393] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 392] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 393] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 392] <... futex resumed>) = 0 [pid 393] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 392] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 393] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 393] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 393] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 393] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 397] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 393] <... ioctl resumed>, 0x7f6727fc893c) = 11 [pid 397] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 397] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 393] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 44.792031][ T393] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 44.792256][ T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd [pid 399] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 399] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 399] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 395] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 394] <... futex resumed>) = 0 [pid 395] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 394] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 395] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 394] <... futex resumed>) = 0 [pid 395] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 394] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 395] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 395] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 395] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 395] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 395] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 391] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 390] <... futex resumed>) = 0 [pid 391] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 390] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 391] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 390] <... futex resumed>) = 0 [pid 391] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 390] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 391] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 391] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [ 44.842159][ T315] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 44.873398][ T395] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [pid 397] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 397] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 397] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 397] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 397] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 397] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 397] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 397] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 397] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 397] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 393] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 397] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 393] <... futex resumed>) = 1 [pid 392] <... futex resumed>) = 0 [pid 397] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 393] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 392] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 393] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 392] <... futex resumed>) = 0 [pid 393] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 392] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 393] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 393] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 393] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 393] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 397] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 397] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 397] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 397] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 397] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 399] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 399] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 399] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 399] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 399] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 399] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [ 44.984192][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.997090][ T24] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 45.014190][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [pid 399] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 395] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 394] <... futex resumed>) = 0 [pid 395] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 399] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 394] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 395] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 394] <... futex resumed>) = 0 [pid 395] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 394] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 399] <... ioctl resumed>, 0x7f6727ef7110) = 4 [ 45.027774][ T315] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.041157][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.052469][ T315] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 45.065548][ T24] usb 3-1: Product: syz [ 45.071409][ T24] usb 3-1: Manufacturer: syz [ 45.079898][ T24] usb 3-1: SerialNumber: syz [pid 395] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 399] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 395] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 399] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 395] <... ioctl resumed>, 0) = -1 EINVAL (Invalid argument) [pid 399] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 395] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 395] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 399] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 399] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 395] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 399] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 399] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 399] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 399] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 399] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 397] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 397] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW [pid 391] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 397] <... ioctl resumed>, 0) = 0 [pid 391] <... futex resumed>) = 1 [pid 397] ioctl(3, USB_RAW_IOCTL_CONFIGURE [pid 391] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 397] <... ioctl resumed>, 0) = 0 [pid 397] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 397] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [pid 390] <... futex resumed>) = 0 [pid 390] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 391] <... futex resumed>) = 0 [pid 390] <... futex resumed>) = 1 [pid 391] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 391] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 390] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 391] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 391] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 391] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 399] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 399] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 399] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 399] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 399] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [ 45.091135][ T315] usb 4-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 45.104352][ T315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.113346][ T315] usb 4-1: Product: syz [ 45.119872][ T315] usb 4-1: Manufacturer: syz [ 45.120264][ T391] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 45.127510][ T315] usb 4-1: SerialNumber: syz [pid 393] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 392] <... futex resumed>) = 0 [pid 392] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 392] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 393] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 393] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [pid 395] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 394] <... futex resumed>) = 0 [pid 395] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 394] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 395] <... futex resumed>) = 0 [pid 394] <... futex resumed>) = 1 [pid 395] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 394] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 395] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 395] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [pid 397] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 396] <... futex resumed>) = 0 [pid 397] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 396] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 397] <... futex resumed>) = 0 [pid 396] <... futex resumed>) = 1 [pid 397] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 396] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 397] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 397] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 397] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 397] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 397] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 391] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 390] <... futex resumed>) = 0 [pid 390] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 390] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 391] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 391] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [pid 399] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 398] <... futex resumed>) = 0 [pid 399] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 398] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 398] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 399] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 399] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [ 45.320343][ T397] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 45.342540][ T39] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 45.350650][ T39] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 45.359270][ T39] cdc_ncm 2-1:1.0: setting rx_max = 2048 [pid 399] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 399] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 399] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 399] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 45.366478][ T399] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [pid 393] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 392] <... futex resumed>) = 0 [pid 393] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 392] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 393] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 392] <... futex resumed>) = 0 [pid 393] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 392] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 393] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 393] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 393] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 393] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 45.415589][ T393] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [pid 395] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 394] <... futex resumed>) = 0 [pid 395] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 394] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 395] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 394] <... futex resumed>) = 0 [pid 395] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 394] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 395] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 395] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 395] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 395] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 397] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 396] <... futex resumed>) = 0 [pid 396] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 396] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 397] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 397] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 397] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 397] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 391] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 390] <... futex resumed>) = 0 [ 45.490138][ T395] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [pid 390] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 391] bpf(BPF_PROG_LOAD, NULL, 0 [pid 390] <... futex resumed>) = 0 [pid 391] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 390] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 391] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 390] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 391] <... futex resumed>) = 0 [pid 391] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 390] close(3) = 0 [pid 390] close(4) = -1 EBADF (Bad file descriptor) [pid 390] close(5) = -1 EBADF (Bad file descriptor) [pid 390] close(6) = -1 EBADF (Bad file descriptor) [pid 390] close(7) = -1 EBADF (Bad file descriptor) [pid 390] close(8) = -1 EBADF (Bad file descriptor) [pid 390] close(9) = -1 EBADF (Bad file descriptor) [pid 390] close(10) = -1 EBADF (Bad file descriptor) [pid 390] close(11) = -1 EBADF (Bad file descriptor) [pid 390] close(12) = -1 EBADF (Bad file descriptor) [pid 390] close(13) = -1 EBADF (Bad file descriptor) [pid 390] close(14) = -1 EBADF (Bad file descriptor) [pid 390] close(15) = -1 EBADF (Bad file descriptor) [pid 390] close(16) = -1 EBADF (Bad file descriptor) [pid 390] close(17) = -1 EBADF (Bad file descriptor) [pid 390] close(18) = -1 EBADF (Bad file descriptor) [pid 390] close(19) = -1 EBADF (Bad file descriptor) [pid 390] close(20) = -1 EBADF (Bad file descriptor) [pid 390] close(21) = -1 EBADF (Bad file descriptor) [pid 390] close(22) = -1 EBADF (Bad file descriptor) [pid 390] close(23) = -1 EBADF (Bad file descriptor) [pid 390] close(24) = -1 EBADF (Bad file descriptor) [pid 390] close(25 [pid 399] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 398] <... futex resumed>) = 0 [pid 399] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 398] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 398] <... futex resumed>) = 0 [pid 399] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 398] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 399] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 399] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 399] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 399] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 390] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 390] close(26) = -1 EBADF (Bad file descriptor) [pid 390] close(27) = -1 EBADF (Bad file descriptor) [pid 390] close(28) = -1 EBADF (Bad file descriptor) [pid 390] close(29) = -1 EBADF (Bad file descriptor) [pid 390] exit_group(0) = ? [pid 391] <... futex resumed>) = ? [pid 399] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 391] +++ exited with 0 +++ [pid 390] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=16, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 298] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 298] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./7/binderfs") = 0 [pid 298] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./7") = 0 [pid 298] mkdir("./8", 0777) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 400 attached , child_tidptr=0x5555951c7750) = 18 [pid 400] set_robust_list(0x5555951c7760, 24) = 0 [pid 400] chdir("./8") = 0 [pid 400] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 400] setpgid(0, 0) = 0 [pid 400] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 400] write(3, "1000", 4) = 4 [pid 400] close(3) = 0 [pid 400] symlink("/dev/binderfs", "./binderfs") = 0 [pid 400] write(1, "executing program\n", 18executing program ) = 18 [pid 400] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 400] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 400] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 400] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 400] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 400] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 400] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0}./strace-static-x86_64: Process 401 attached => {parent_tid=[19]}, 88) = 19 [pid 401] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 401] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 401] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 400] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 400] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 401] <... futex resumed>) = 0 [pid 400] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 401] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 401] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 401] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 400] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 400] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 401] <... futex resumed>) = 0 [pid 400] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 401] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 401] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 401] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 400] <... futex resumed>) = 0 [pid 400] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 400] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 401] <... futex resumed>) = 0 [pid 401] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 401] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 401] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 400] <... futex resumed>) = 0 [pid 400] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 401] <... futex resumed>) = 0 [pid 400] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 401] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 401] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 401] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 401] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 401] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 393] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 392] <... futex resumed>) = 0 [pid 393] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 392] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 393] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 392] <... futex resumed>) = 0 [ 45.557586][ T39] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 45.572375][ T39] usb 2-1: USB disconnect, device number 9 [ 45.579802][ T39] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [pid 392] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 393] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 393] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [ 45.629289][ T313] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 45.638196][ T313] cdc_ncm 5-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 45.647341][ T313] cdc_ncm 5-1:1.0: setting rx_max = 2048 [pid 395] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 394] <... futex resumed>) = 0 [pid 395] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 394] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 395] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 394] <... futex resumed>) = 0 [pid 395] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 394] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 395] <... ioctl resumed>, 0x7f6727ef7130) = 26 [pid 397] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 396] <... futex resumed>) = 0 [pid 397] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 396] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 397] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 396] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 397] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 397] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [ 45.701749][ T319] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 45.709874][ T319] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 45.717692][ T319] cdc_ncm 1-1:1.0: setting rx_max = 2048 [pid 399] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 398] <... futex resumed>) = 0 [pid 399] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 398] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 398] <... futex resumed>) = 0 [pid 399] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 398] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 399] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 399] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [pid 393] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 392] <... futex resumed>) = 0 [pid 393] bpf(BPF_PROG_LOAD, NULL, 0 [pid 392] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 393] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 392] <... futex resumed>) = 0 [pid 392] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 393] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 392] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 393] <... futex resumed>) = 0 [pid 392] close(3 [pid 393] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 392] <... close resumed>) = 0 [pid 392] close(4) = -1 EBADF (Bad file descriptor) [pid 392] close(5) = -1 EBADF (Bad file descriptor) [pid 392] close(6) = -1 EBADF (Bad file descriptor) [pid 392] close(7) = -1 EBADF (Bad file descriptor) [pid 392] close(8) = -1 EBADF (Bad file descriptor) [pid 392] close(9) = -1 EBADF (Bad file descriptor) [pid 392] close(10) = -1 EBADF (Bad file descriptor) [pid 392] close(11) = -1 EBADF (Bad file descriptor) [pid 392] close(12) = -1 EBADF (Bad file descriptor) [pid 392] close(13) = -1 EBADF (Bad file descriptor) [pid 392] close(14) = -1 EBADF (Bad file descriptor) [pid 392] close(15) = -1 EBADF (Bad file descriptor) [pid 392] close(16) = -1 EBADF (Bad file descriptor) [pid 392] close(17) = -1 EBADF (Bad file descriptor) [pid 392] close(18) = -1 EBADF (Bad file descriptor) [pid 392] close(19) = -1 EBADF (Bad file descriptor) [pid 392] close(20) = -1 EBADF (Bad file descriptor) [pid 392] close(21) = -1 EBADF (Bad file descriptor) [pid 392] close(22) = -1 EBADF (Bad file descriptor) [pid 392] close(23) = -1 EBADF (Bad file descriptor) [pid 392] close(24) = -1 EBADF (Bad file descriptor) [pid 392] close(25) = -1 EBADF (Bad file descriptor) [pid 392] close(26) = -1 EBADF (Bad file descriptor) [pid 392] close(27) = -1 EBADF (Bad file descriptor) [pid 392] close(28) = -1 EBADF (Bad file descriptor) [pid 392] close(29) = -1 EBADF (Bad file descriptor) [pid 392] exit_group(0 [pid 393] <... futex resumed>) = ? [pid 392] <... exit_group resumed>) = ? [pid 393] +++ exited with 0 +++ [pid 392] +++ exited with 0 +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=16, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 301] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 301] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 301] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./7/binderfs") = 0 [pid 301] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./7") = 0 [pid 301] mkdir("./8", 0777) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 18 ./strace-static-x86_64: Process 402 attached [pid 402] set_robust_list(0x5555951c7760, 24) = 0 [pid 402] chdir("./8") = 0 [pid 402] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 402] setpgid(0, 0) = 0 [pid 402] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 402] write(3, "1000", 4) = 4 [pid 402] close(3) = 0 [pid 402] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 402] write(1, "executing program\n", 18) = 18 [pid 395] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 394] <... futex resumed>) = 0 [pid 402] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 394] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] <... futex resumed>) = 0 [pid 395] bpf(BPF_PROG_LOAD, NULL, 0 [pid 394] <... futex resumed>) = 0 [pid 402] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, [pid 395] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 394] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 402] <... rt_sigaction resumed>NULL, 8) = 0 [pid 395] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 394] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 402] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 395] <... futex resumed>) = 0 [pid 394] close(3 [pid 402] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 395] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 394] <... close resumed>) = 0 [ 45.838041][ T313] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 45.852493][ T313] usb 5-1: USB disconnect, device number 9 [ 45.859173][ T313] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [pid 402] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 394] close(4) = -1 EBADF (Bad file descriptor) [pid 394] close(5) = -1 EBADF (Bad file descriptor) [pid 394] close(6) = -1 EBADF (Bad file descriptor) [pid 394] close(7) = -1 EBADF (Bad file descriptor) [pid 394] close(8) = -1 EBADF (Bad file descriptor) [pid 394] close(9) = -1 EBADF (Bad file descriptor) [pid 394] close(10) = -1 EBADF (Bad file descriptor) [pid 394] close(11) = -1 EBADF (Bad file descriptor) [pid 394] close(12) = -1 EBADF (Bad file descriptor) [pid 394] close(13) = -1 EBADF (Bad file descriptor) [pid 394] close(14) = -1 EBADF (Bad file descriptor) [pid 394] close(15) = -1 EBADF (Bad file descriptor) [pid 394] close(16) = -1 EBADF (Bad file descriptor) [pid 394] close(17) = -1 EBADF (Bad file descriptor) [pid 394] close(18) = -1 EBADF (Bad file descriptor) [pid 394] close(19) = -1 EBADF (Bad file descriptor) [pid 394] close(20 [pid 402] <... mmap resumed>) = 0x7f6727ed9000 [pid 394] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 394] close(21) = -1 EBADF (Bad file descriptor) [pid 402] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE [pid 394] close(22 [pid 402] <... mprotect resumed>) = 0 [pid 394] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 402] rt_sigprocmask(SIG_BLOCK, ~[], [pid 394] close(23) = -1 EBADF (Bad file descriptor) [pid 402] <... rt_sigprocmask resumed>[], 8) = 0 [pid 394] close(24 [pid 402] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} [pid 394] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 394] close(25 [pid 402] <... clone3 resumed> => {parent_tid=[19]}, 88) = 19 [pid 394] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 402] rt_sigprocmask(SIG_SETMASK, [], [pid 394] close(26 [pid 402] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 394] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 402] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 394] close(27 [pid 402] <... futex resumed>) = 0 [pid 394] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 402] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 394] close(28) = -1 EBADF (Bad file descriptor) [pid 394] close(29) = -1 EBADF (Bad file descriptor) [pid 394] exit_group(0 [pid 395] <... futex resumed>) = ? [pid 394] <... exit_group resumed>) = ? [pid 395] +++ exited with 0 +++ [pid 394] +++ exited with 0 +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=16, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 299] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 403 attached [pid 403] set_robust_list(0x7f6727ef99a0, 24 [pid 299] <... openat resumed>) = 3 [pid 403] <... set_robust_list resumed>) = 0 [pid 299] newfstatat(3, "", [pid 403] rt_sigprocmask(SIG_SETMASK, [], [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 403] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 299] getdents64(3, [pid 403] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0 [pid 299] <... getdents64 resumed>0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 403] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 299] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 403] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 402] <... futex resumed>) = 0 [pid 397] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 403] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 402] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 397] <... futex resumed>) = 1 [pid 396] <... futex resumed>) = 0 [pid 299] newfstatat(AT_FDCWD, "./7/binderfs", [pid 403] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 402] <... futex resumed>) = 0 [pid 397] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 396] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 403] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 397] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 396] <... futex resumed>) = 0 [pid 299] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 402] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 397] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 396] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 402] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 397] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 402] <... futex resumed>) = 0 [pid 397] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 403] <... futex resumed>) = 0 [pid 402] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 299] unlink("./7/binderfs" [pid 397] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 397] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 397] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 403] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 299] <... unlink resumed>) = 0 [pid 403] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 299] close(3 [pid 403] <... futex resumed>) = 1 [pid 402] <... futex resumed>) = 0 [pid 299] <... close resumed>) = 0 [pid 403] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 402] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] rmdir("./7" [pid 403] <... openat resumed>) = 3 [pid 402] <... futex resumed>) = 0 [pid 403] ioctl(3, USB_RAW_IOCTL_INIT [pid 402] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 299] <... rmdir resumed>) = 0 [pid 403] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 299] mkdir("./8", 0777 [pid 403] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 299] <... mkdir resumed>) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 397] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 299] <... clone resumed>, child_tidptr=0x5555951c7750) = 18 ./strace-static-x86_64: Process 404 attached [pid 403] <... ioctl resumed>, 0) = 0 [pid 403] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 403] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 404] set_robust_list(0x5555951c7760, 24) = 0 [pid 404] chdir("./8") = 0 [pid 404] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 404] setpgid(0, 0) = 0 [pid 404] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 404] write(3, "1000", 4) = 4 [pid 404] close(3) = 0 [pid 404] symlink("/dev/binderfs", "./binderfs") = 0 [pid 404] write(1, "executing program\n", 18executing program ) = 18 [pid 404] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 404] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 404] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 404] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 404] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 404] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 404] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[19]}, 88) = 19 ./strace-static-x86_64: Process 405 attached [pid 405] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 405] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 405] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 404] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 404] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 405] <... futex resumed>) = 0 [pid 405] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 405] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 405] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 404] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 404] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 405] <... futex resumed>) = 0 [pid 405] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 404] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 405] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 405] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 405] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 404] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 404] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 405] <... futex resumed>) = 0 [pid 405] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 405] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 45.912175][ T319] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 45.936115][ T319] usb 1-1: USB disconnect, device number 9 [ 45.937826][ T397] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 45.944004][ T319] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [pid 405] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 404] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 399] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 398] <... futex resumed>) = 0 [pid 399] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 398] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 398] <... futex resumed>) = 0 [pid 399] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 398] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 399] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 404] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 399] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 404] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 405] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 404] <... futex resumed>) = 0 [pid 404] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 405] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 405] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 405] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 405] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 405] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 399] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 399] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 401] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 399] <... ioctl resumed>, 0x7f6727fc893c) = 11 [pid 401] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 399] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 401] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 399] <... ioctl resumed>, 0x7f6727ef7130) = 0 [ 46.001752][ T399] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 46.009499][ T39] usb 2-1: new high-speed USB device number 10 using dummy_hcd [pid 401] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 397] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 396] <... futex resumed>) = 0 [pid 397] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 396] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 397] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 397] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 396] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 397] <... ioctl resumed>, 0x7f6727ef7130) = 26 [pid 401] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 401] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 401] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 401] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 401] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 401] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [ 46.168013][ T24] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 46.177590][ T24] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 46.185555][ T24] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 46.204494][ T39] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 401] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 399] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 401] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 399] <... futex resumed>) = 1 [pid 398] <... futex resumed>) = 0 [pid 401] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 399] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 398] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 398] <... futex resumed>) = 0 [pid 399] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 401] <... ioctl resumed>, 0x7f6727ef7110) = 4 [pid 398] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 401] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 399] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 401] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 399] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 401] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 399] <... ioctl resumed>, 0x7f6727ef7130) = 26 [pid 401] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 401] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 401] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 401] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 401] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [ 46.218122][ T39] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 46.230393][ T315] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 46.238318][ T315] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 46.247654][ T315] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 46.254347][ T39] usb 2-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [pid 401] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 401] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 401] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 401] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 401] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [ 46.264808][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.273689][ T39] usb 2-1: Product: syz [ 46.278275][ T39] usb 2-1: Manufacturer: syz [ 46.283524][ T39] usb 2-1: SerialNumber: syz [pid 403] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 403] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 403] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 405] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 397] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 405] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 397] <... futex resumed>) = 1 [pid 396] <... futex resumed>) = 0 [pid 405] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 397] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 396] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 405] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 397] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 396] <... futex resumed>) = 0 [pid 397] bpf(BPF_PROG_LOAD, NULL, 0 [pid 396] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 397] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 397] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 396] <... futex resumed>) = 0 [pid 397] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [ 46.332275][ T313] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 46.372248][ T319] usb 1-1: new high-speed USB device number 10 using dummy_hcd [pid 396] close(3) = 0 [pid 396] close(4) = -1 EBADF (Bad file descriptor) [pid 396] close(5) = -1 EBADF (Bad file descriptor) [pid 396] close(6) = -1 EBADF (Bad file descriptor) [pid 396] close(7) = -1 EBADF (Bad file descriptor) [pid 396] close(8) = -1 EBADF (Bad file descriptor) [pid 396] close(9) = -1 EBADF (Bad file descriptor) [pid 396] close(10) = -1 EBADF (Bad file descriptor) [pid 396] close(11) = -1 EBADF (Bad file descriptor) [pid 396] close(12) = -1 EBADF (Bad file descriptor) [pid 396] close(13) = -1 EBADF (Bad file descriptor) [pid 396] close(14) = -1 EBADF (Bad file descriptor) [pid 396] close(15) = -1 EBADF (Bad file descriptor) [pid 396] close(16) = -1 EBADF (Bad file descriptor) [pid 396] close(17) = -1 EBADF (Bad file descriptor) [pid 396] close(18) = -1 EBADF (Bad file descriptor) [pid 396] close(19) = -1 EBADF (Bad file descriptor) [pid 396] close(20) = -1 EBADF (Bad file descriptor) [pid 396] close(21) = -1 EBADF (Bad file descriptor) [pid 396] close(22) = -1 EBADF (Bad file descriptor) [pid 396] close(23) = -1 EBADF (Bad file descriptor) [pid 396] close(24) = -1 EBADF (Bad file descriptor) [pid 396] close(25) = -1 EBADF (Bad file descriptor) [pid 396] close(26) = -1 EBADF (Bad file descriptor) [pid 396] close(27) = -1 EBADF (Bad file descriptor) [pid 396] close(28) = -1 EBADF (Bad file descriptor) [pid 396] close(29) = -1 EBADF (Bad file descriptor) [pid 396] exit_group(0 [pid 397] <... futex resumed>) = ? [pid 396] <... exit_group resumed>) = ? [pid 397] +++ exited with 0 +++ [pid 396] +++ exited with 0 +++ [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=16, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 302] restart_syscall(<... resuming interrupted clone ...> [pid 399] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 398] <... futex resumed>) = 0 [pid 399] bpf(BPF_PROG_LOAD, NULL, 0 [pid 398] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 398] <... futex resumed>) = 0 [pid 399] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 398] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 399] <... futex resumed>) = 0 [pid 398] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 399] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 398] close(3) = 0 [ 46.384596][ T24] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 46.399966][ T24] usb 3-1: USB disconnect, device number 9 [ 46.411689][ T24] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [pid 302] <... restart_syscall resumed>) = 0 [pid 302] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 302] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 302] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 302] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] unlink("./7/binderfs") = 0 [pid 302] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 302] close(3) = 0 [pid 302] rmdir("./7") = 0 [pid 302] mkdir("./8", 0777) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 18 ./strace-static-x86_64: Process 406 attached [pid 406] set_robust_list(0x5555951c7760, 24) = 0 [pid 406] chdir("./8") = 0 [pid 406] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 406] setpgid(0, 0) = 0 [pid 406] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 406] write(3, "1000", 4) = 4 [pid 406] close(3) = 0 executing program [pid 406] symlink("/dev/binderfs", "./binderfs") = 0 [pid 406] write(1, "executing program\n", 18) = 18 [pid 406] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 406] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 406] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 406] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 406] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 406] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 406] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[19]}, 88) = 19 [pid 406] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 406] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 406] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}./strace-static-x86_64: Process 407 attached [pid 398] close(4) = -1 EBADF (Bad file descriptor) [pid 398] close(5) = -1 EBADF (Bad file descriptor) [pid 398] close(6) = -1 EBADF (Bad file descriptor) [pid 398] close(7) = -1 EBADF (Bad file descriptor) [pid 398] close(8) = -1 EBADF (Bad file descriptor) [pid 398] close(9) = -1 EBADF (Bad file descriptor) [pid 398] close(10) = -1 EBADF (Bad file descriptor) [pid 398] close(11 [pid 407] set_robust_list(0x7f6727ef99a0, 24 [pid 398] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 398] close(12) = -1 EBADF (Bad file descriptor) [pid 398] close(13) = -1 EBADF (Bad file descriptor) [pid 407] <... set_robust_list resumed>) = 0 [pid 398] close(14) = -1 EBADF (Bad file descriptor) [pid 398] close(15) = -1 EBADF (Bad file descriptor) [pid 398] close(16 [pid 407] rt_sigprocmask(SIG_SETMASK, [], [pid 398] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 398] close(17) = -1 EBADF (Bad file descriptor) [pid 407] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 407] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 407] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 406] <... futex resumed>) = 0 [pid 406] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 406] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 407] <... futex resumed>) = 1 [pid 407] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 407] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 406] <... futex resumed>) = 0 [pid 406] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 406] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 407] <... futex resumed>) = 1 [pid 407] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 407] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 406] <... futex resumed>) = 0 [pid 406] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 406] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 407] <... futex resumed>) = 1 [pid 407] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 407] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 407] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 398] close(18) = -1 EBADF (Bad file descriptor) [pid 398] close(19) = -1 EBADF (Bad file descriptor) [pid 398] close(20 [pid 407] <... ioctl resumed>, 0) = 0 [pid 407] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 407] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 398] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 398] close(21) = -1 EBADF (Bad file descriptor) [pid 398] close(22) = -1 EBADF (Bad file descriptor) [pid 398] close(23) = -1 EBADF (Bad file descriptor) [pid 398] close(24) = -1 EBADF (Bad file descriptor) [pid 398] close(25) = -1 EBADF (Bad file descriptor) [pid 398] close(26) = -1 EBADF (Bad file descriptor) [pid 398] close(27) = -1 EBADF (Bad file descriptor) [pid 398] close(28) = -1 EBADF (Bad file descriptor) [pid 398] close(29) = -1 EBADF (Bad file descriptor) [pid 398] exit_group(0) = ? [pid 399] <... futex resumed>) = ? [pid 399] +++ exited with 0 +++ [pid 398] +++ exited with 0 +++ [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=16, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 300] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 300] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./7/binderfs") = 0 [pid 300] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./7") = 0 [pid 300] mkdir("./8", 0777) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 408 attached , child_tidptr=0x5555951c7750) = 18 [pid 408] set_robust_list(0x5555951c7760, 24) = 0 [pid 408] chdir("./8") = 0 [pid 408] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 408] setpgid(0, 0) = 0 [pid 408] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 408] write(3, "1000", 4) = 4 [pid 408] close(3) = 0 [pid 408] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 408] write(1, "executing program\n", 18) = 18 [pid 408] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 408] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 408] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 408] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 408] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 408] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 408] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0}./strace-static-x86_64: Process 409 attached => {parent_tid=[19]}, 88) = 19 [pid 408] rt_sigprocmask(SIG_SETMASK, [], [pid 409] set_robust_list(0x7f6727ef99a0, 24 [pid 408] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 409] <... set_robust_list resumed>) = 0 [pid 408] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 401] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 401] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 409] rt_sigprocmask(SIG_SETMASK, [], [pid 408] <... futex resumed>) = 0 [pid 400] <... futex resumed>) = 0 [pid 408] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 409] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 400] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 401] <... futex resumed>) = 0 [pid 400] <... futex resumed>) = 1 [pid 401] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 401] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 409] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0 [pid 401] <... ioctl resumed>, 0) = 0 [pid 400] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [ 46.434139][ T315] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 46.452005][ T315] usb 4-1: USB disconnect, device number 9 [ 46.460083][ T315] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [pid 401] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 409] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 401] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 401] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 401] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 409] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 401] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 409] <... futex resumed>) = 1 [pid 408] <... futex resumed>) = 0 [pid 408] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 408] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 409] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 409] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 408] <... futex resumed>) = 0 [pid 408] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 408] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 409] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 409] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 408] <... futex resumed>) = 0 [pid 408] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 408] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 409] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 409] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 409] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 409] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 409] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 403] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 403] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 403] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 403] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 403] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 403] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [ 46.494854][ T401] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 46.527155][ T313] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 403] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 405] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 405] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 405] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 405] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 403] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 405] <... ioctl resumed>, 0x7f6727ef7110) = 9 [pid 403] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 405] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 403] <... ioctl resumed>, 0x7f6727ef7110) = 4 [pid 403] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 405] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 403] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 405] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 403] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 405] <... ioctl resumed>, 0x7f6727ef7110) = 100 [pid 405] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 403] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 403] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 403] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 403] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 403] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [ 46.541858][ T313] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 46.559413][ T319] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.575434][ T319] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [pid 403] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 405] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 405] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 405] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 405] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 405] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 405] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 405] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 403] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 405] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 403] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW [pid 405] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 403] <... ioctl resumed>, 0) = 0 [pid 403] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 403] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 403] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [ 46.588514][ T313] usb 5-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 46.600045][ T313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.610622][ T313] usb 5-1: Product: syz [ 46.615307][ T313] usb 5-1: Manufacturer: syz [ 46.620182][ T313] usb 5-1: SerialNumber: syz [ 46.627890][ T319] usb 1-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [pid 405] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 405] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 405] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 405] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 405] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [ 46.638701][ T319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.647679][ T319] usb 1-1: Product: syz [ 46.652027][ T319] usb 1-1: Manufacturer: syz [ 46.657288][ T319] usb 1-1: SerialNumber: syz [pid 401] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 400] <... futex resumed>) = 0 [pid 400] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 400] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 401] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 401] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 401] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 401] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 407] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 407] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 407] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 403] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 402] <... futex resumed>) = 0 [pid 403] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 402] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 403] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 402] <... futex resumed>) = 0 [pid 403] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 402] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 403] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 403] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 403] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 405] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 404] <... futex resumed>) = 0 [pid 405] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 404] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 405] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 404] <... futex resumed>) = 0 [pid 405] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [ 46.822175][ T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 46.839427][ T403] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [pid 404] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 405] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 405] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 405] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 405] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 405] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 409] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 409] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 409] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 401] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 400] <... futex resumed>) = 0 [pid 401] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 400] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 401] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 400] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 401] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 401] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [ 46.870438][ T405] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 46.892173][ T315] usb 4-1: new high-speed USB device number 10 using dummy_hcd [pid 407] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 407] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 407] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 407] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 407] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 407] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 407] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 407] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 407] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 407] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 407] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 407] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 407] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 407] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [ 47.004939][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.018603][ T24] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 47.036410][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [pid 407] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 403] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 403] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 402] <... futex resumed>) = 0 [pid 402] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 403] <... futex resumed>) = 0 [pid 402] <... futex resumed>) = 1 [pid 403] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 402] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 403] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 403] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 403] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 403] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 407] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 407] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 407] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 407] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 407] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [pid 405] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 404] <... futex resumed>) = 0 [pid 405] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 404] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 405] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 404] <... futex resumed>) = 0 [pid 405] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 404] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 405] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 405] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 405] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 405] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 409] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 409] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 409] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 409] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 409] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 409] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [ 47.047147][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.056929][ T24] usb 3-1: Product: syz [ 47.062161][ T24] usb 3-1: Manufacturer: syz [ 47.067591][ T24] usb 3-1: SerialNumber: syz [ 47.084462][ T315] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 409] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 409] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 409] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 409] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 409] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 401] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 409] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 409] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 401] <... futex resumed>) = 1 [pid 400] <... futex resumed>) = 0 [pid 401] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 400] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 400] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 409] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 401] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 409] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 401] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 409] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 409] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 401] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 401] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 409] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 409] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 401] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 401] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 401] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 47.097944][ T315] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 47.114407][ T401] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 47.123064][ T315] usb 4-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 47.133413][ T315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.142736][ T315] usb 4-1: Product: syz [ 47.147364][ T315] usb 4-1: Manufacturer: syz [pid 409] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 409] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 409] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 409] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 409] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [ 47.152482][ T315] usb 4-1: SerialNumber: syz [pid 403] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 402] <... futex resumed>) = 0 [pid 403] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 402] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 403] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 402] <... futex resumed>) = 0 [pid 403] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 402] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 403] <... ioctl resumed>, 0x7f6727ef7130) = 28 [pid 407] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 406] <... futex resumed>) = 0 [pid 406] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 406] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 407] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 407] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 407] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 405] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 404] <... futex resumed>) = 0 [pid 405] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 404] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 405] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 404] <... futex resumed>) = 0 [pid 405] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 404] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 405] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 405] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [pid 407] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 407] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 407] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 47.279446][ T407] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [pid 401] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 400] <... futex resumed>) = 0 [pid 400] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 400] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 401] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 401] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [pid 409] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 408] <... futex resumed>) = 0 [pid 409] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 408] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 409] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 408] <... futex resumed>) = 0 [pid 408] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 409] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 409] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 409] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 409] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 409] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 47.346029][ T39] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 47.354063][ T39] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 47.363123][ T39] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 47.371615][ T409] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [pid 403] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 402] <... futex resumed>) = 0 [pid 403] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 402] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 403] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 402] <... futex resumed>) = 0 [pid 403] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 402] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 403] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 403] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 403] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 403] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 405] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 404] <... futex resumed>) = 0 [pid 405] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 404] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 405] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 404] <... futex resumed>) = 0 [pid 405] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 404] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 405] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 405] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 407] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 407] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 406] <... futex resumed>) = 0 [pid 406] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 407] <... futex resumed>) = 0 [pid 406] <... futex resumed>) = 1 [pid 407] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 406] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 405] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 407] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 405] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 407] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 405] <... ioctl resumed>, 0x7f6727fc893c) = 11 [pid 407] <... ioctl resumed>, 0) = -1 EINVAL (Invalid argument) [pid 405] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 407] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 405] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 407] <... ioctl resumed>, 0xb) = 0 [pid 407] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 47.465700][ T403] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 47.484605][ T405] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [pid 401] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 400] <... futex resumed>) = 0 [pid 401] bpf(BPF_PROG_LOAD, NULL, 0 [pid 400] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 401] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 400] <... futex resumed>) = 0 [pid 401] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 400] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 401] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 400] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 400] close(3) = 0 [pid 400] close(4) = -1 EBADF (Bad file descriptor) [pid 400] close(5) = -1 EBADF (Bad file descriptor) [pid 400] close(6) = -1 EBADF (Bad file descriptor) [pid 400] close(7) = -1 EBADF (Bad file descriptor) [pid 400] close(8) = -1 EBADF (Bad file descriptor) [pid 400] close(9) = -1 EBADF (Bad file descriptor) [pid 400] close(10) = -1 EBADF (Bad file descriptor) [pid 400] close(11) = -1 EBADF (Bad file descriptor) [pid 400] close(12) = -1 EBADF (Bad file descriptor) [pid 400] close(13) = -1 EBADF (Bad file descriptor) [pid 400] close(14) = -1 EBADF (Bad file descriptor) [pid 400] close(15) = -1 EBADF (Bad file descriptor) [pid 400] close(16) = -1 EBADF (Bad file descriptor) [pid 400] close(17) = -1 EBADF (Bad file descriptor) [pid 400] close(18) = -1 EBADF (Bad file descriptor) [pid 400] close(19) = -1 EBADF (Bad file descriptor) [pid 400] close(20) = -1 EBADF (Bad file descriptor) [pid 400] close(21) = -1 EBADF (Bad file descriptor) [pid 400] close(22) = -1 EBADF (Bad file descriptor) [pid 400] close(23) = -1 EBADF (Bad file descriptor) [pid 400] close(24) = -1 EBADF (Bad file descriptor) [pid 400] close(25) = -1 EBADF (Bad file descriptor) [pid 400] close(26) = -1 EBADF (Bad file descriptor) [pid 400] close(27) = -1 EBADF (Bad file descriptor) [pid 400] close(28) = -1 EBADF (Bad file descriptor) [pid 400] close(29) = -1 EBADF (Bad file descriptor) [pid 400] exit_group(0 [pid 401] <... futex resumed>) = ? [pid 400] <... exit_group resumed>) = ? [pid 401] +++ exited with 0 +++ [pid 400] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=18, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 298] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./8/binderfs") = 0 [pid 298] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./8") = 0 [pid 298] mkdir("./9", 0777) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 20 ./strace-static-x86_64: Process 410 attached [pid 410] set_robust_list(0x5555951c7760, 24) = 0 [pid 410] chdir("./9" [pid 409] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 408] <... futex resumed>) = 0 [pid 409] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 408] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 409] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 408] <... futex resumed>) = 0 [pid 409] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 408] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 409] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 409] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 409] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 409] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 410] <... chdir resumed>) = 0 [pid 410] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 410] setpgid(0, 0) = 0 [pid 410] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 410] write(3, "1000", 4) = 4 [pid 410] close(3) = 0 [pid 410] symlink("/dev/binderfs", "./binderfs") = 0 [pid 410] write(1, "executing program\n", 18executing program ) = 18 [pid 410] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 410] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 410] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 410] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 410] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 410] rt_sigprocmask(SIG_BLOCK, ~[], [pid 409] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 410] <... rt_sigprocmask resumed>[], 8) = 0 [pid 410] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[21]}, 88) = 21 [pid 410] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 410] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 410] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}./strace-static-x86_64: Process 411 attached [pid 411] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 411] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 411] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 411] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 410] <... futex resumed>) = 0 [pid 410] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 410] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 411] <... futex resumed>) = 1 [pid 411] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 411] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 410] <... futex resumed>) = 0 [pid 410] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 410] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 411] <... futex resumed>) = 1 [pid 411] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 411] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 410] <... futex resumed>) = 0 [pid 410] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 410] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 411] <... futex resumed>) = 1 [pid 411] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 411] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 411] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 411] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 47.559164][ T39] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 47.573562][ T39] usb 2-1: USB disconnect, device number 10 [ 47.582987][ T39] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [pid 411] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 403] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 402] <... futex resumed>) = 0 [pid 403] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 402] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 403] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 402] <... futex resumed>) = 0 [pid 403] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 402] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 403] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 403] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [pid 407] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 405] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 407] <... futex resumed>) = 1 [pid 406] <... futex resumed>) = 0 [pid 407] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 406] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 405] <... futex resumed>) = 1 [pid 404] <... futex resumed>) = 0 [pid 407] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 406] <... futex resumed>) = 0 [pid 405] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 404] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 407] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 406] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 405] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 404] <... futex resumed>) = 0 [pid 407] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 405] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 404] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 407] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 405] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 405] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 407] <... ioctl resumed>, 0x7f6727ef7130) = 28 [pid 405] <... ioctl resumed>, 0x7f6727ef7130) = 26 [ 47.675323][ T313] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 47.682647][ T313] cdc_ncm 5-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 47.690980][ T313] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 47.699623][ T319] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 47.706350][ T319] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 47.714546][ T319] cdc_ncm 1-1:1.0: setting rx_max = 2048 [pid 409] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 408] <... futex resumed>) = 0 [pid 409] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 408] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 409] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 408] <... futex resumed>) = 0 [pid 409] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 408] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 409] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 409] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [pid 403] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 402] <... futex resumed>) = 0 [pid 403] bpf(BPF_PROG_LOAD, NULL, 0 [pid 402] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 403] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 402] <... futex resumed>) = 0 [pid 403] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 402] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 403] <... futex resumed>) = 0 [pid 402] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 403] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 402] close(3) = 0 [pid 402] close(4) = -1 EBADF (Bad file descriptor) [pid 402] close(5) = -1 EBADF (Bad file descriptor) [pid 402] close(6) = -1 EBADF (Bad file descriptor) [pid 402] close(7) = -1 EBADF (Bad file descriptor) [pid 402] close(8) = -1 EBADF (Bad file descriptor) [pid 402] close(9) = -1 EBADF (Bad file descriptor) [pid 402] close(10) = -1 EBADF (Bad file descriptor) [pid 402] close(11) = -1 EBADF (Bad file descriptor) [pid 402] close(12) = -1 EBADF (Bad file descriptor) [pid 402] close(13) = -1 EBADF (Bad file descriptor) [pid 402] close(14) = -1 EBADF (Bad file descriptor) [pid 402] close(15) = -1 EBADF (Bad file descriptor) [pid 402] close(16) = -1 EBADF (Bad file descriptor) [pid 402] close(17) = -1 EBADF (Bad file descriptor) [pid 402] close(18) = -1 EBADF (Bad file descriptor) [pid 402] close(19) = -1 EBADF (Bad file descriptor) [pid 402] close(20) = -1 EBADF (Bad file descriptor) [pid 402] close(21) = -1 EBADF (Bad file descriptor) [pid 402] close(22) = -1 EBADF (Bad file descriptor) [pid 402] close(23) = -1 EBADF (Bad file descriptor) [pid 402] close(24) = -1 EBADF (Bad file descriptor) [pid 402] close(25) = -1 EBADF (Bad file descriptor) [pid 402] close(26) = -1 EBADF (Bad file descriptor) [pid 402] close(27) = -1 EBADF (Bad file descriptor) [pid 402] close(28) = -1 EBADF (Bad file descriptor) [pid 402] close(29) = -1 EBADF (Bad file descriptor) [pid 402] exit_group(0 [pid 403] <... futex resumed>) = ? [pid 402] <... exit_group resumed>) = ? [pid 403] +++ exited with 0 +++ [pid 402] +++ exited with 0 +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=18, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 301] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 407] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 405] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 407] <... futex resumed>) = 1 [pid 406] <... futex resumed>) = 0 [pid 407] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 406] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 405] <... futex resumed>) = 1 [pid 404] <... futex resumed>) = 0 [pid 407] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 406] <... futex resumed>) = 0 [pid 405] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 404] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 407] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 406] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 405] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 404] <... futex resumed>) = 0 [pid 407] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 405] bpf(BPF_PROG_LOAD, NULL, 0 [pid 404] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 301] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW [pid 407] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 405] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 407] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 405] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 407] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 405] <... futex resumed>) = 1 [pid 404] <... futex resumed>) = 0 [pid 301] <... openat resumed>) = 3 [pid 405] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 404] close(3 [pid 301] newfstatat(3, "", [pid 404] <... close resumed>) = 0 [pid 301] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 404] close(4 [pid 301] getdents64(3, [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] <... getdents64 resumed>0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 404] close(5 [pid 301] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 404] close(6 [pid 301] newfstatat(AT_FDCWD, "./8/binderfs", [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 404] close(7) = -1 EBADF (Bad file descriptor) [pid 301] unlink("./8/binderfs" [pid 404] close(8) = -1 EBADF (Bad file descriptor) [pid 301] <... unlink resumed>) = 0 [pid 404] close(9 [pid 301] getdents64(3, [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] <... getdents64 resumed>0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 404] close(10 [pid 301] close(3 [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] <... close resumed>) = 0 [pid 404] close(11 [pid 301] rmdir("./8" [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 404] close(12 [pid 301] <... rmdir resumed>) = 0 [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 301] mkdir("./9", 0777 [pid 404] close(13 [pid 301] <... mkdir resumed>) = 0 [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 404] close(14 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 404] close(15 [pid 301] <... clone resumed>, child_tidptr=0x5555951c7750) = 20 [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 404] close(16 [pid 407] <... ioctl resumed>, 0x7f6727fc893c) = 11 [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 404] close(17 [pid 407] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 404] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 404] close(18) = -1 EBADF (Bad file descriptor) [pid 407] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 404] close(19) = -1 EBADF (Bad file descriptor) [pid 404] close(20) = -1 EBADF (Bad file descriptor) [pid 404] close(21) = -1 EBADF (Bad file descriptor) [pid 404] close(22) = -1 EBADF (Bad file descriptor) [pid 404] close(23) = -1 EBADF (Bad file descriptor) [pid 404] close(24) = -1 EBADF (Bad file descriptor) [pid 404] close(25) = -1 EBADF (Bad file descriptor) [pid 404] close(26) = -1 EBADF (Bad file descriptor) [pid 404] close(27) = -1 EBADF (Bad file descriptor) [pid 404] close(28) = -1 EBADF (Bad file descriptor) [pid 404] close(29) = -1 EBADF (Bad file descriptor) [pid 404] exit_group(0) = ? [pid 405] <... futex resumed>) = ? [pid 405] +++ exited with 0 +++ [pid 404] +++ exited with 0 +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=18, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [ 47.886315][ T313] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 47.904986][ T313] usb 5-1: USB disconnect, device number 10 [ 47.913562][ T407] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 47.914262][ T313] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [pid 299] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 299] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 299] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./8/binderfs") = 0 [pid 299] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./8") = 0 [pid 299] mkdir("./9", 0777) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 20 ./strace-static-x86_64: Process 412 attached ./strace-static-x86_64: Process 413 attached [pid 413] set_robust_list(0x5555951c7760, 24) = 0 [pid 413] chdir("./9") = 0 [pid 412] set_robust_list(0x5555951c7760, 24 [pid 413] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 413] setpgid(0, 0) = 0 [pid 413] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 413] write(3, "1000", 4) = 4 [pid 413] close(3) = 0 [pid 413] symlink("/dev/binderfs", "./binderfs") = 0 [pid 412] <... set_robust_list resumed>) = 0 executing program [pid 413] write(1, "executing program\n", 18) = 18 [pid 413] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 412] chdir("./9" [pid 413] <... futex resumed>) = 0 [pid 412] <... chdir resumed>) = 0 [pid 412] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 413] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, [pid 412] <... prctl resumed>) = 0 [pid 413] <... rt_sigaction resumed>NULL, 8) = 0 [pid 413] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 413] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 412] setpgid(0, 0 [pid 413] <... mmap resumed>) = 0x7f6727ed9000 [pid 412] <... setpgid resumed>) = 0 [pid 412] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 412] write(3, "1000", 4) = 4 [pid 412] close(3) = 0 [pid 412] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 412] write(1, "executing program\n", 18) = 18 [pid 412] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 412] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 412] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 412] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 412] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 412] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 412] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[21]}, 88) = 21 [pid 412] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 412] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 412] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}./strace-static-x86_64: Process 414 attached [pid 414] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 414] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 414] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 414] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 412] <... futex resumed>) = 0 [pid 412] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 412] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 414] <... futex resumed>) = 1 [pid 414] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 414] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 412] <... futex resumed>) = 0 [pid 412] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 412] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 413] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 413] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 413] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} [pid 414] <... futex resumed>) = 1 [pid 413] <... clone3 resumed> => {parent_tid=[21]}, 88) = 21 [pid 413] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 413] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 415 attached [pid 414] socketpair(AF_UNIX, SOCK_STREAM, 0, [pid 413] <... futex resumed>) = 0 [pid 415] set_robust_list(0x7f6727ef99a0, 24 [pid 413] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 415] <... set_robust_list resumed>) = 0 [pid 414] <... socketpair resumed>NULL) = -1 EFAULT (Bad address) [pid 415] rt_sigprocmask(SIG_SETMASK, [], [pid 414] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 415] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 414] <... futex resumed>) = 1 [pid 412] <... futex resumed>) = 0 [pid 412] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 412] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 415] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0 [pid 414] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 415] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 414] <... openat resumed>) = 3 [pid 415] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 414] ioctl(3, USB_RAW_IOCTL_INIT [pid 415] <... futex resumed>) = 1 [pid 413] <... futex resumed>) = 0 [pid 414] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 415] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 413] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 414] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 415] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 413] <... futex resumed>) = 0 [pid 415] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 413] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 415] <... futex resumed>) = 0 [pid 413] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 415] socketpair(AF_UNIX, SOCK_STREAM, 0, [pid 413] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 415] <... socketpair resumed>NULL) = -1 EFAULT (Bad address) [pid 413] <... futex resumed>) = 0 [pid 413] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 415] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 413] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 415] <... futex resumed>) = 0 [pid 413] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 413] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 415] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [ 47.944073][ T319] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 47.960871][ T319] usb 1-1: USB disconnect, device number 10 [ 47.969315][ T319] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [pid 415] ioctl(3, USB_RAW_IOCTL_INIT [pid 409] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 408] <... futex resumed>) = 0 [pid 409] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 408] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 409] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 408] <... futex resumed>) = 0 [pid 409] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 408] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 409] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 409] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 414] <... ioctl resumed>, 0) = 0 [pid 414] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 414] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 415] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 411] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 409] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 415] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 411] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 409] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 411] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 409] <... ioctl resumed>, 0x7f6727fc893c) = 11 [pid 411] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 415] <... ioctl resumed>, 0) = 0 [pid 415] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 409] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 415] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 409] <... ioctl resumed>, 0x7f6727ef7130) = 0 [ 47.998144][ T409] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 48.006228][ T39] usb 2-1: new high-speed USB device number 11 using dummy_hcd [pid 407] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 406] <... futex resumed>) = 0 [pid 407] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 406] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 407] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 406] <... futex resumed>) = 0 [pid 407] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 406] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 407] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 407] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [pid 411] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 411] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 411] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 411] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 411] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 48.140080][ T24] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 48.147799][ T24] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 48.157927][ T24] cdc_ncm 3-1:1.0: setting rx_max = 2048 [pid 411] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 411] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 409] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 411] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 409] <... futex resumed>) = 1 [pid 409] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 408] <... futex resumed>) = 0 [pid 411] <... ioctl resumed>, 0x7f6727ef7110) = 4 [pid 408] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 411] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 409] <... futex resumed>) = 0 [pid 408] <... futex resumed>) = 1 [pid 409] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 408] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 409] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 409] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [pid 411] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 411] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 411] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 411] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 411] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 411] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [ 48.215558][ T39] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.228697][ T39] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 48.243387][ T315] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 48.249984][ T315] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 48.259564][ T315] cdc_ncm 4-1:1.0: setting rx_max = 2048 [pid 411] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 411] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 411] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 411] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 411] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [pid 407] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 406] <... futex resumed>) = 0 [pid 406] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 406] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 407] bpf(BPF_PROG_LOAD, NULL, 0) = -1 EFAULT (Bad address) [pid 407] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 406] <... futex resumed>) = 0 [pid 407] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 406] close(3) = 0 [pid 406] close(4) = -1 EBADF (Bad file descriptor) [pid 406] close(5) = -1 EBADF (Bad file descriptor) [pid 406] close(6) = -1 EBADF (Bad file descriptor) [pid 406] close(7) = -1 EBADF (Bad file descriptor) [pid 406] close(8) = -1 EBADF (Bad file descriptor) [pid 406] close(9) = -1 EBADF (Bad file descriptor) [pid 406] close(10) = -1 EBADF (Bad file descriptor) [pid 406] close(11) = -1 EBADF (Bad file descriptor) [pid 406] close(12) = -1 EBADF (Bad file descriptor) [pid 406] close(13) = -1 EBADF (Bad file descriptor) [pid 406] close(14) = -1 EBADF (Bad file descriptor) [pid 406] close(15) = -1 EBADF (Bad file descriptor) [pid 406] close(16) = -1 EBADF (Bad file descriptor) [pid 406] close(17) = -1 EBADF (Bad file descriptor) [pid 406] close(18) = -1 EBADF (Bad file descriptor) [pid 406] close(19) = -1 EBADF (Bad file descriptor) [pid 406] close(20) = -1 EBADF (Bad file descriptor) [pid 406] close(21) = -1 EBADF (Bad file descriptor) [pid 406] close(22) = -1 EBADF (Bad file descriptor) [pid 406] close(23) = -1 EBADF (Bad file descriptor) [pid 406] close(24) = -1 EBADF (Bad file descriptor) [pid 406] close(25) = -1 EBADF (Bad file descriptor) [pid 406] close(26) = -1 EBADF (Bad file descriptor) [pid 406] close(27) = -1 EBADF (Bad file descriptor) [pid 406] close(28) = -1 EBADF (Bad file descriptor) [pid 406] close(29) = -1 EBADF (Bad file descriptor) [pid 406] exit_group(0 [pid 407] <... futex resumed>) = ? [pid 406] <... exit_group resumed>) = ? [ 48.267212][ T39] usb 2-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 48.279012][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.287943][ T39] usb 2-1: Product: syz [ 48.292803][ T39] usb 2-1: Manufacturer: syz [ 48.298148][ T39] usb 2-1: SerialNumber: syz [pid 407] +++ exited with 0 +++ [pid 406] +++ exited with 0 +++ [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=18, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 302] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 302] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 302] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 302] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./8/binderfs", [pid 414] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 302] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 414] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 302] unlink("./8/binderfs" [pid 414] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 302] <... unlink resumed>) = 0 [pid 414] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 302] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 302] close(3) = 0 [pid 302] rmdir("./8") = 0 [pid 302] mkdir("./9", 0777) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 20 ./strace-static-x86_64: Process 416 attached [pid 416] set_robust_list(0x5555951c7760, 24) = 0 [pid 416] chdir("./9") = 0 [pid 416] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 416] setpgid(0, 0) = 0 [pid 416] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 416] write(3, "1000", 4) = 4 [pid 416] close(3) = 0 [pid 416] symlink("/dev/binderfs", "./binderfs") = 0 [pid 416] write(1, "executing program\n", 18executing program ) = 18 [pid 416] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 416] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 416] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 416] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 416] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 416] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 416] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[21]}, 88) = 21 [pid 416] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 416] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 416] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}./strace-static-x86_64: Process 417 attached [pid 417] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 417] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 417] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 417] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 416] <... futex resumed>) = 0 [pid 416] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 416] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 417] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 417] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 416] <... futex resumed>) = 0 [pid 416] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 416] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 417] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 417] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 416] <... futex resumed>) = 0 [pid 416] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 416] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 417] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 417] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 417] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 417] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 48.349923][ T24] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 48.362640][ T313] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 48.374496][ T24] usb 3-1: USB disconnect, device number 10 [ 48.382576][ T24] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [pid 417] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 415] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 415] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 415] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 409] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 408] <... futex resumed>) = 0 [pid 409] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 408] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 409] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 408] <... futex resumed>) = 0 [pid 409] bpf(BPF_PROG_LOAD, NULL, 0 [pid 408] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 409] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 409] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 408] <... futex resumed>) = 0 [pid 409] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 408] close(3) = 0 [pid 408] close(4) = -1 EBADF (Bad file descriptor) [pid 408] close(5) = -1 EBADF (Bad file descriptor) [pid 408] close(6) = -1 EBADF (Bad file descriptor) [pid 408] close(7) = -1 EBADF (Bad file descriptor) [pid 408] close(8) = -1 EBADF (Bad file descriptor) [pid 408] close(9) = -1 EBADF (Bad file descriptor) [pid 408] close(10) = -1 EBADF (Bad file descriptor) [pid 408] close(11) = -1 EBADF (Bad file descriptor) [ 48.432244][ T319] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 48.448108][ T315] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 48.469747][ T315] usb 4-1: USB disconnect, device number 10 [pid 408] close(12) = -1 EBADF (Bad file descriptor) [pid 408] close(13) = -1 EBADF (Bad file descriptor) [pid 408] close(14) = -1 EBADF (Bad file descriptor) [pid 408] close(15) = -1 EBADF (Bad file descriptor) [pid 408] close(16) = -1 EBADF (Bad file descriptor) [pid 408] close(17) = -1 EBADF (Bad file descriptor) [pid 408] close(18) = -1 EBADF (Bad file descriptor) [pid 408] close(19) = -1 EBADF (Bad file descriptor) [pid 408] close(20) = -1 EBADF (Bad file descriptor) [pid 408] close(21) = -1 EBADF (Bad file descriptor) [pid 408] close(22) = -1 EBADF (Bad file descriptor) [pid 408] close(23) = -1 EBADF (Bad file descriptor) [pid 408] close(24) = -1 EBADF (Bad file descriptor) [pid 408] close(25) = -1 EBADF (Bad file descriptor) [pid 408] close(26) = -1 EBADF (Bad file descriptor) [pid 408] close(27) = -1 EBADF (Bad file descriptor) [pid 408] close(28) = -1 EBADF (Bad file descriptor) [pid 408] close(29) = -1 EBADF (Bad file descriptor) [pid 408] exit_group(0 [pid 409] <... futex resumed>) = ? [pid 408] <... exit_group resumed>) = ? [pid 409] +++ exited with 0 +++ [pid 408] +++ exited with 0 +++ [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=18, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 300] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 300] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 300] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./8/binderfs") = 0 [pid 300] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./8") = 0 [pid 300] mkdir("./9", 0777) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 418 attached , child_tidptr=0x5555951c7750) = 20 [pid 418] set_robust_list(0x5555951c7760, 24) = 0 [pid 418] chdir("./9") = 0 [pid 418] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 418] setpgid(0, 0) = 0 [pid 418] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 418] write(3, "1000", 4) = 4 [pid 418] close(3) = 0 [pid 418] symlink("/dev/binderfs", "./binderfs" [pid 411] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 410] <... futex resumed>) = 0 [pid 411] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 410] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 411] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 410] <... futex resumed>) = 0 [pid 411] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 410] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 411] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 411] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [ 48.477934][ T315] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [pid 411] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 418] <... symlink resumed>) = 0 [pid 418] write(1, "executing program\n", 18 [pid 411] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 411] ioctl(3, USB_RAW_IOCTL_EP_ENABLEexecuting program [pid 418] <... write resumed>) = 18 [pid 411] <... ioctl resumed>, 0x7f6727fc893c) = 11 [pid 418] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 411] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 418] <... futex resumed>) = 0 [pid 418] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 418] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 418] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 411] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 418] <... mmap resumed>) = 0x7f6727ed9000 [pid 418] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 418] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 418] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0}./strace-static-x86_64: Process 419 attached [pid 419] set_robust_list(0x7f6727ef99a0, 24 [pid 418] <... clone3 resumed> => {parent_tid=[21]}, 88) = 21 [pid 419] <... set_robust_list resumed>) = 0 [pid 418] rt_sigprocmask(SIG_SETMASK, [], [pid 419] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 418] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 419] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 418] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 419] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 419] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0 [pid 418] <... futex resumed>) = 0 [pid 419] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 418] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 419] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 418] <... futex resumed>) = 0 [pid 419] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 418] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 419] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 418] <... futex resumed>) = 0 [pid 419] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 418] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 419] <... futex resumed>) = 0 [pid 418] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 419] socketpair(AF_UNIX, SOCK_STREAM, 0, [pid 418] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 419] <... socketpair resumed>NULL) = -1 EFAULT (Bad address) [pid 418] <... futex resumed>) = 0 [pid 419] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 418] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 419] <... futex resumed>) = 0 [pid 418] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 419] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 418] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 419] <... openat resumed>) = 3 [pid 418] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 419] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 419] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 419] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 419] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 414] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 414] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 414] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 414] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 414] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 48.509709][ T411] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [pid 414] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 414] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 414] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 414] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 414] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 414] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 414] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 414] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 414] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 414] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 414] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [ 48.555877][ T313] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.570949][ T313] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 48.591856][ T313] usb 5-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [pid 414] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 414] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 414] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [pid 415] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 415] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 415] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 415] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 415] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 415] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [ 48.601244][ T313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.610505][ T313] usb 5-1: Product: syz [ 48.615357][ T313] usb 5-1: Manufacturer: syz [ 48.621216][ T313] usb 5-1: SerialNumber: syz [ 48.633602][ T319] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 415] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 415] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 415] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 415] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 415] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 415] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 415] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 415] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 415] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 415] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 415] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 415] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 415] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [pid 411] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 410] <... futex resumed>) = 0 [pid 410] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 410] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 411] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 411] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 411] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 411] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 48.649107][ T319] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 48.669989][ T319] usb 1-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 48.681599][ T319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.691291][ T319] usb 1-1: Product: syz [ 48.695797][ T319] usb 1-1: Manufacturer: syz [ 48.701288][ T319] usb 1-1: SerialNumber: syz [pid 417] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 417] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 417] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 414] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 412] <... futex resumed>) = 0 [pid 414] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 412] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 414] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 412] <... futex resumed>) = 0 [pid 414] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 412] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 414] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 414] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 414] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 414] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 414] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 48.812258][ T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 48.833111][ T414] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [pid 419] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 419] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 419] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 415] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 413] <... futex resumed>) = 0 [pid 413] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 415] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 413] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 415] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 415] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 415] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 415] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 415] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 411] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 410] <... futex resumed>) = 0 [pid 410] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 411] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 410] <... futex resumed>) = 0 [pid 410] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 411] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 411] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [ 48.892141][ T315] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 48.913852][ T415] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [pid 417] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 417] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 417] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 417] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 417] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 417] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 417] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 417] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 417] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 417] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 417] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 417] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 417] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 417] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 417] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 414] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 412] <... futex resumed>) = 0 [pid 414] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 412] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 414] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 412] <... futex resumed>) = 0 [pid 414] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 412] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 414] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 414] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 414] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 414] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 49.005518][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.017170][ T24] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 49.032619][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 49.042369][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [pid 417] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 417] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 417] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 417] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 417] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [pid 419] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 419] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 419] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 419] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 419] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 419] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 419] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 419] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 419] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 419] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 419] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 419] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 419] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 419] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [ 49.051859][ T24] usb 3-1: Product: syz [ 49.057219][ T24] usb 3-1: Manufacturer: syz [ 49.062600][ T24] usb 3-1: SerialNumber: syz [ 49.075144][ T315] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.088169][ T315] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [pid 419] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 411] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 411] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 415] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 413] <... futex resumed>) = 0 [pid 415] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 413] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 415] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 413] <... futex resumed>) = 0 [pid 415] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 413] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 415] <... ioctl resumed>, 0) = -1 EINVAL (Invalid argument) [pid 415] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 415] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 410] <... futex resumed>) = 0 [pid 410] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 411] <... futex resumed>) = 0 [pid 410] <... futex resumed>) = 1 [pid 411] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 410] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 411] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 411] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 415] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 411] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 411] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 411] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 419] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 419] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 419] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 419] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 419] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [ 49.105335][ T315] usb 4-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 49.119024][ T315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.127942][ T315] usb 4-1: Product: syz [ 49.131750][ T411] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 49.132597][ T315] usb 4-1: Manufacturer: syz [ 49.145603][ T315] usb 4-1: SerialNumber: syz [pid 414] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 412] <... futex resumed>) = 0 [pid 412] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 414] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 412] <... futex resumed>) = 0 [pid 414] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 412] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 414] <... ioctl resumed>, 0x7f6727ef7130) = 28 [pid 417] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 416] <... futex resumed>) = 0 [pid 417] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 416] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 417] <... futex resumed>) = 0 [pid 416] <... futex resumed>) = 1 [pid 417] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 416] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 417] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 417] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 417] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 417] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 417] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 49.272911][ T417] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [pid 415] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 413] <... futex resumed>) = 0 [pid 415] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 413] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 415] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 413] <... futex resumed>) = 0 [pid 415] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 413] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 415] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 415] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [pid 411] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 410] <... futex resumed>) = 0 [pid 410] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 410] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 411] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 411] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [pid 419] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 418] <... futex resumed>) = 0 [pid 419] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 418] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 419] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 418] <... futex resumed>) = 0 [pid 419] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 418] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 419] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 419] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 419] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 419] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 419] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 49.347457][ T39] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 49.355668][ T39] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 49.365341][ T39] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 49.365375][ T419] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [pid 414] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 412] <... futex resumed>) = 0 [pid 414] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 412] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 414] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 412] <... futex resumed>) = 0 [pid 414] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 412] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 414] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 414] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 414] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 417] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 416] <... futex resumed>) = 0 [pid 417] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 416] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 417] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 416] <... futex resumed>) = 0 [pid 417] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 416] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 417] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 417] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 417] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 417] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 49.455427][ T414] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [pid 415] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 413] <... futex resumed>) = 0 [pid 415] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 413] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 415] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 413] <... futex resumed>) = 0 [pid 415] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 413] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 415] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 415] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 415] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 415] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 411] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 410] <... futex resumed>) = 0 [pid 411] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 410] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 411] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 410] <... futex resumed>) = 0 [pid 411] bpf(BPF_PROG_LOAD, NULL, 0 [pid 410] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 411] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 411] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 410] <... futex resumed>) = 0 [pid 411] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 410] close(3) = 0 [pid 410] close(4) = -1 EBADF (Bad file descriptor) [pid 410] close(5) = -1 EBADF (Bad file descriptor) [pid 410] close(6) = -1 EBADF (Bad file descriptor) [pid 410] close(7) = -1 EBADF (Bad file descriptor) [pid 410] close(8) = -1 EBADF (Bad file descriptor) [pid 410] close(9) = -1 EBADF (Bad file descriptor) [pid 410] close(10) = -1 EBADF (Bad file descriptor) [pid 410] close(11) = -1 EBADF (Bad file descriptor) [pid 410] close(12) = -1 EBADF (Bad file descriptor) [pid 410] close(13) = -1 EBADF (Bad file descriptor) [pid 410] close(14) = -1 EBADF (Bad file descriptor) [pid 410] close(15) = -1 EBADF (Bad file descriptor) [pid 410] close(16) = -1 EBADF (Bad file descriptor) [pid 410] close(17) = -1 EBADF (Bad file descriptor) [pid 410] close(18) = -1 EBADF (Bad file descriptor) [pid 410] close(19) = -1 EBADF (Bad file descriptor) [pid 410] close(20) = -1 EBADF (Bad file descriptor) [pid 410] close(21) = -1 EBADF (Bad file descriptor) [pid 410] close(22) = -1 EBADF (Bad file descriptor) [pid 410] close(23 [pid 419] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 410] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 419] <... futex resumed>) = 1 [pid 418] <... futex resumed>) = 0 [pid 410] close(24 [pid 419] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 418] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 410] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 410] close(25) = -1 EBADF (Bad file descriptor) [pid 410] close(26) = -1 EBADF (Bad file descriptor) [pid 410] close(27) = -1 EBADF (Bad file descriptor) [pid 410] close(28) = -1 EBADF (Bad file descriptor) [pid 410] close(29) = -1 EBADF (Bad file descriptor) [pid 410] exit_group(0 [pid 411] <... futex resumed>) = ? [pid 410] <... exit_group resumed>) = ? [pid 411] +++ exited with 0 +++ [pid 410] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=20, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 298] restart_syscall(<... resuming interrupted clone ...> [pid 419] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 418] <... futex resumed>) = 0 [pid 419] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 418] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 419] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 298] <... restart_syscall resumed>) = 0 [pid 419] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 419] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 298] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW [pid 419] <... ioctl resumed>, 0xb) = 0 [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 419] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 298] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, [pid 419] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 298] <... getdents64 resumed>0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 298] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./9/binderfs") = 0 [pid 298] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./9") = 0 [pid 298] mkdir("./10", 0777) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 420 attached , child_tidptr=0x5555951c7750) = 22 [pid 420] set_robust_list(0x5555951c7760, 24) = 0 [pid 420] chdir("./10") = 0 [pid 420] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 420] setpgid(0, 0) = 0 [pid 420] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 420] write(3, "1000", 4) = 4 [pid 420] close(3) = 0 [pid 420] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 420] write(1, "executing program\n", 18) = 18 [pid 420] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 420] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 420] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 420] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 420] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 420] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 420] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0}./strace-static-x86_64: Process 421 attached => {parent_tid=[23]}, 88) = 23 [pid 421] set_robust_list(0x7f6727ef99a0, 24 [pid 420] rt_sigprocmask(SIG_SETMASK, [], [pid 421] <... set_robust_list resumed>) = 0 [pid 420] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 420] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 421] rt_sigprocmask(SIG_SETMASK, [], [pid 420] <... futex resumed>) = 0 [pid 421] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 420] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 421] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 421] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 420] <... futex resumed>) = 0 [pid 421] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 420] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 421] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 420] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 421] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 420] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 421] <... futex resumed>) = 0 [pid 420] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 421] socketpair(AF_UNIX, SOCK_STREAM, 0, [pid 420] <... futex resumed>) = 0 [pid 420] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 421] <... socketpair resumed>NULL) = -1 EFAULT (Bad address) [pid 421] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 420] <... futex resumed>) = 0 [pid 421] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 420] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 420] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 421] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 421] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 421] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 421] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 49.545191][ T415] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 49.560565][ T39] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 49.576311][ T39] usb 2-1: USB disconnect, device number 11 [ 49.584203][ T39] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [pid 421] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 414] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 412] <... futex resumed>) = 0 [pid 414] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 412] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 414] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 412] <... futex resumed>) = 0 [pid 414] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 412] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 414] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 414] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [pid 417] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 416] <... futex resumed>) = 0 [pid 417] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 416] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 417] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 416] <... futex resumed>) = 0 [pid 417] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 416] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 417] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 417] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [ 49.667985][ T313] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 49.677577][ T313] cdc_ncm 5-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 49.686365][ T313] cdc_ncm 5-1:1.0: setting rx_max = 2048 [pid 415] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 413] <... futex resumed>) = 0 [pid 415] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 413] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 415] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 413] <... futex resumed>) = 0 [pid 413] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 415] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [pid 419] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 419] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 418] <... futex resumed>) = 0 [pid 418] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 419] <... futex resumed>) = 0 [pid 418] <... futex resumed>) = 1 [pid 419] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 418] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 419] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 419] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [ 49.756570][ T319] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 49.764735][ T319] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 49.772708][ T319] cdc_ncm 1-1:1.0: setting rx_max = 2048 [pid 414] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 412] <... futex resumed>) = 0 [pid 412] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 412] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 414] bpf(BPF_PROG_LOAD, NULL, 0) = -1 EFAULT (Bad address) [pid 414] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 412] <... futex resumed>) = 0 [pid 412] close(3 [pid 414] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 412] <... close resumed>) = 0 [pid 412] close(4) = -1 EBADF (Bad file descriptor) [pid 412] close(5) = -1 EBADF (Bad file descriptor) [pid 412] close(6) = -1 EBADF (Bad file descriptor) [pid 412] close(7) = -1 EBADF (Bad file descriptor) [pid 412] close(8) = -1 EBADF (Bad file descriptor) [pid 412] close(9) = -1 EBADF (Bad file descriptor) [pid 412] close(10) = -1 EBADF (Bad file descriptor) [pid 412] close(11) = -1 EBADF (Bad file descriptor) [pid 412] close(12) = -1 EBADF (Bad file descriptor) [pid 412] close(13) = -1 EBADF (Bad file descriptor) [pid 412] close(14) = -1 EBADF (Bad file descriptor) [pid 412] close(15) = -1 EBADF (Bad file descriptor) [pid 412] close(16) = -1 EBADF (Bad file descriptor) [pid 412] close(17) = -1 EBADF (Bad file descriptor) [pid 412] close(18) = -1 EBADF (Bad file descriptor) [pid 412] close(19) = -1 EBADF (Bad file descriptor) [pid 412] close(20) = -1 EBADF (Bad file descriptor) [pid 412] close(21) = -1 EBADF (Bad file descriptor) [pid 412] close(22) = -1 EBADF (Bad file descriptor) [pid 412] close(23) = -1 EBADF (Bad file descriptor) [pid 412] close(24) = -1 EBADF (Bad file descriptor) [pid 412] close(25) = -1 EBADF (Bad file descriptor) [pid 412] close(26) = -1 EBADF (Bad file descriptor) [pid 412] close(27) = -1 EBADF (Bad file descriptor) [pid 412] close(28) = -1 EBADF (Bad file descriptor) [pid 412] close(29) = -1 EBADF (Bad file descriptor) [pid 412] exit_group(0 [pid 414] <... futex resumed>) = ? [pid 412] <... exit_group resumed>) = ? [pid 414] +++ exited with 0 +++ [pid 412] +++ exited with 0 +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=20, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 301] restart_syscall(<... resuming interrupted clone ...> [pid 417] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 416] <... futex resumed>) = 0 [pid 417] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 416] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 417] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 417] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 416] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 301] <... restart_syscall resumed>) = 0 [ 49.874168][ T313] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 49.900297][ T313] usb 5-1: USB disconnect, device number 11 [ 49.906853][ T417] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [pid 417] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 301] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 301] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./9/binderfs") = 0 [pid 301] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./9") = 0 [pid 301] mkdir("./10", 0777) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 22 ./strace-static-x86_64: Process 422 attached [pid 417] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 417] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 422] set_robust_list(0x5555951c7760, 24) = 0 [pid 422] chdir("./10" [pid 417] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 422] <... chdir resumed>) = 0 [pid 422] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 422] setpgid(0, 0) = 0 [pid 422] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 422] write(3, "1000", 4) = 4 [pid 422] close(3) = 0 [pid 422] symlink("/dev/binderfs", "./binderfs") = 0 [pid 422] write(1, "executing program\n", 18executing program ) = 18 [pid 422] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 422] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 422] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 422] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 422] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 422] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 422] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0}./strace-static-x86_64: Process 423 attached [pid 423] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 423] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 423] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 422] <... clone3 resumed> => {parent_tid=[23]}, 88) = 23 [pid 422] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 422] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 423] <... futex resumed>) = 0 [pid 423] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 423] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 423] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 422] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 422] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 423] <... futex resumed>) = 0 [pid 423] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 422] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 423] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 423] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 423] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 422] <... futex resumed>) = 0 [pid 422] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 423] <... futex resumed>) = 0 [pid 423] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 423] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 423] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 422] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 422] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 423] <... futex resumed>) = 0 [pid 422] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 423] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 423] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 423] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 423] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 423] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 415] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 413] <... futex resumed>) = 0 [pid 415] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 413] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 415] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 413] <... futex resumed>) = 0 [pid 415] bpf(BPF_PROG_LOAD, NULL, 0 [pid 413] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 415] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 415] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 413] <... futex resumed>) = 0 [pid 415] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [ 49.908340][ T313] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [pid 413] close(3) = 0 [pid 413] close(4) = -1 EBADF (Bad file descriptor) [pid 413] close(5) = -1 EBADF (Bad file descriptor) [pid 413] close(6) = -1 EBADF (Bad file descriptor) [pid 413] close(7) = -1 EBADF (Bad file descriptor) [pid 413] close(8) = -1 EBADF (Bad file descriptor) [pid 413] close(9) = -1 EBADF (Bad file descriptor) [pid 413] close(10) = -1 EBADF (Bad file descriptor) [pid 413] close(11) = -1 EBADF (Bad file descriptor) [pid 413] close(12) = -1 EBADF (Bad file descriptor) [pid 413] close(13) = -1 EBADF (Bad file descriptor) [pid 413] close(14) = -1 EBADF (Bad file descriptor) [pid 413] close(15) = -1 EBADF (Bad file descriptor) [pid 413] close(16) = -1 EBADF (Bad file descriptor) [pid 413] close(17) = -1 EBADF (Bad file descriptor) [pid 413] close(18) = -1 EBADF (Bad file descriptor) [pid 413] close(19) = -1 EBADF (Bad file descriptor) [pid 413] close(20) = -1 EBADF (Bad file descriptor) [pid 413] close(21) = -1 EBADF (Bad file descriptor) [pid 413] close(22) = -1 EBADF (Bad file descriptor) [pid 413] close(23) = -1 EBADF (Bad file descriptor) [pid 413] close(24) = -1 EBADF (Bad file descriptor) [pid 413] close(25) = -1 EBADF (Bad file descriptor) [pid 413] close(26) = -1 EBADF (Bad file descriptor) [pid 413] close(27) = -1 EBADF (Bad file descriptor) [pid 413] close(28) = -1 EBADF (Bad file descriptor) [pid 413] close(29) = -1 EBADF (Bad file descriptor) [pid 413] exit_group(0) = ? [pid 415] <... futex resumed>) = ? [pid 415] +++ exited with 0 +++ [pid 413] +++ exited with 0 +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=20, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 299] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 299] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 299] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./9/binderfs") = 0 [pid 299] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./9") = 0 [pid 299] mkdir("./10", 0777) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 419] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 419] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 418] <... futex resumed>) = 0 [pid 299] <... clone resumed>, child_tidptr=0x5555951c7750) = 22 [pid 418] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 419] <... futex resumed>) = 0 [pid 418] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 419] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 419] ioctl(3, USB_RAW_IOCTL_EP_ENABLEexecuting program ./strace-static-x86_64: Process 424 attached [pid 424] set_robust_list(0x5555951c7760, 24) = 0 [pid 424] chdir("./10") = 0 [pid 424] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 424] setpgid(0, 0) = 0 [pid 424] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 424] write(3, "1000", 4) = 4 [pid 424] close(3) = 0 [pid 424] symlink("/dev/binderfs", "./binderfs") = 0 [pid 424] write(1, "executing program\n", 18) = 18 [pid 424] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 424] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 424] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 424] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 424] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 424] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 424] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[23]}, 88) = 23 [pid 424] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 424] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 49.960779][ T319] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 49.981461][ T319] usb 1-1: USB disconnect, device number 11 [ 49.992470][ T39] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 50.002337][ T419] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [pid 424] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}./strace-static-x86_64: Process 425 attached [pid 421] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 419] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 421] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 421] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 419] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 425] set_robust_list(0x7f6727ef99a0, 24 [pid 419] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 425] <... set_robust_list resumed>) = 0 [pid 425] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 425] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 425] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 424] <... futex resumed>) = 0 [pid 424] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 424] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 425] <... futex resumed>) = 1 [pid 425] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 419] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 425] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 424] <... futex resumed>) = 0 [pid 424] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 424] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 425] <... futex resumed>) = 1 [pid 425] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 425] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 424] <... futex resumed>) = 0 [pid 424] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 424] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 425] <... futex resumed>) = 1 [pid 425] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 425] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 425] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 425] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 50.007150][ T319] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [pid 425] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 417] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 416] <... futex resumed>) = 0 [pid 417] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 416] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 417] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 416] <... futex resumed>) = 0 [pid 416] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 417] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 417] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [pid 421] <... ioctl resumed>, 0x7f6727ef8120) = 0 [ 50.131704][ T24] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 50.138699][ T24] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 50.147166][ T24] cdc_ncm 3-1:1.0: setting rx_max = 2048 [pid 421] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 421] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 421] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 421] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 421] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 421] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 421] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 421] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 421] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 421] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 421] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 421] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 421] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 421] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 419] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 418] <... futex resumed>) = 0 [pid 419] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 418] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 419] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 418] <... futex resumed>) = 0 [pid 419] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 418] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 419] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 419] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [ 50.193593][ T39] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.206490][ T39] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 50.221942][ T39] usb 2-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 50.233764][ T315] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [pid 421] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 421] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 421] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 421] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 421] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [ 50.240646][ T315] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 50.249724][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.259389][ T315] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 50.265513][ T39] usb 2-1: Product: syz [ 50.270862][ T39] usb 2-1: Manufacturer: syz [ 50.276529][ T39] usb 2-1: SerialNumber: syz [pid 417] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 416] <... futex resumed>) = 0 [pid 416] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 416] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 417] bpf(BPF_PROG_LOAD, NULL, 0) = -1 EFAULT (Bad address) [pid 417] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 416] <... futex resumed>) = 0 [pid 417] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 416] close(3) = 0 [pid 416] close(4) = -1 EBADF (Bad file descriptor) [pid 416] close(5) = -1 EBADF (Bad file descriptor) [pid 416] close(6) = -1 EBADF (Bad file descriptor) [pid 416] close(7) = -1 EBADF (Bad file descriptor) [pid 416] close(8) = -1 EBADF (Bad file descriptor) [pid 416] close(9) = -1 EBADF (Bad file descriptor) [pid 416] close(10) = -1 EBADF (Bad file descriptor) [pid 416] close(11) = -1 EBADF (Bad file descriptor) [pid 416] close(12) = -1 EBADF (Bad file descriptor) [pid 416] close(13 [pid 423] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 416] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 423] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 416] close(14 [pid 423] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 416] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 423] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 416] close(15) = -1 EBADF (Bad file descriptor) [pid 416] close(16) = -1 EBADF (Bad file descriptor) [pid 416] close(17) = -1 EBADF (Bad file descriptor) [pid 416] close(18) = -1 EBADF (Bad file descriptor) [pid 416] close(19) = -1 EBADF (Bad file descriptor) [pid 416] close(20) = -1 EBADF (Bad file descriptor) [pid 416] close(21) = -1 EBADF (Bad file descriptor) [pid 416] close(22) = -1 EBADF (Bad file descriptor) [pid 416] close(23) = -1 EBADF (Bad file descriptor) [pid 416] close(24) = -1 EBADF (Bad file descriptor) [pid 416] close(25) = -1 EBADF (Bad file descriptor) [pid 416] close(26) = -1 EBADF (Bad file descriptor) [pid 416] close(27) = -1 EBADF (Bad file descriptor) [pid 416] close(28) = -1 EBADF (Bad file descriptor) [pid 416] close(29) = -1 EBADF (Bad file descriptor) [pid 416] exit_group(0) = ? [pid 417] <... futex resumed>) = ? [pid 417] +++ exited with 0 +++ [pid 416] +++ exited with 0 +++ [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=20, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 302] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 302] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 302] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 302] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 302] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] unlink("./9/binderfs") = 0 [pid 302] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 302] close(3) = 0 [pid 302] rmdir("./9") = 0 [pid 302] mkdir("./10", 0777) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 22 ./strace-static-x86_64: Process 426 attached [pid 426] set_robust_list(0x5555951c7760, 24) = 0 [pid 426] chdir("./10") = 0 [pid 426] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 426] setpgid(0, 0) = 0 [pid 426] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 426] write(3, "1000", 4) = 4 [pid 426] close(3) = 0 [pid 426] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 426] write(1, "executing program\n", 18) = 18 [pid 426] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 426] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 426] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 426] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 426] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 426] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 426] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0}./strace-static-x86_64: Process 427 attached => {parent_tid=[23]}, 88) = 23 [pid 427] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 427] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 427] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 426] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 426] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 427] <... futex resumed>) = 0 [pid 427] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 426] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 427] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 426] <... futex resumed>) = 0 [pid 427] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 426] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 427] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 427] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 426] <... futex resumed>) = 0 [pid 427] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 427] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 427] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 426] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 426] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 427] <... futex resumed>) = 0 [pid 426] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 427] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 427] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 427] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 426] <... futex resumed>) = 0 [pid 426] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 427] <... futex resumed>) = 0 [pid 426] <... futex resumed>) = 1 [pid 426] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 427] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 427] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 427] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 427] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 50.336055][ T24] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 50.348942][ T313] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 50.361134][ T24] usb 3-1: USB disconnect, device number 11 [ 50.368356][ T24] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [pid 427] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 419] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 425] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 419] <... futex resumed>) = 1 [pid 418] <... futex resumed>) = 0 [pid 425] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 419] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 418] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 425] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 419] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 418] <... futex resumed>) = 0 [pid 425] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 419] bpf(BPF_PROG_LOAD, NULL, 0 [pid 418] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 419] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 419] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 418] <... futex resumed>) = 0 [pid 419] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 418] close(3) = 0 [pid 418] close(4) = -1 EBADF (Bad file descriptor) [pid 418] close(5) = -1 EBADF (Bad file descriptor) [pid 418] close(6) = -1 EBADF (Bad file descriptor) [pid 418] close(7) = -1 EBADF (Bad file descriptor) [pid 418] close(8) = -1 EBADF (Bad file descriptor) [pid 418] close(9) = -1 EBADF (Bad file descriptor) [pid 418] close(10) = -1 EBADF (Bad file descriptor) [pid 418] close(11) = -1 EBADF (Bad file descriptor) [pid 418] close(12) = -1 EBADF (Bad file descriptor) [pid 418] close(13) = -1 EBADF (Bad file descriptor) [pid 418] close(14) = -1 EBADF (Bad file descriptor) [pid 418] close(15) = -1 EBADF (Bad file descriptor) [pid 418] close(16) = -1 EBADF (Bad file descriptor) [pid 418] close(17) = -1 EBADF (Bad file descriptor) [pid 418] close(18) = -1 EBADF (Bad file descriptor) [pid 418] close(19) = -1 EBADF (Bad file descriptor) [pid 418] close(20) = -1 EBADF (Bad file descriptor) [pid 418] close(21) = -1 EBADF (Bad file descriptor) [pid 418] close(22) = -1 EBADF (Bad file descriptor) [pid 418] close(23) = -1 EBADF (Bad file descriptor) [pid 418] close(24) = -1 EBADF (Bad file descriptor) [pid 418] close(25) = -1 EBADF (Bad file descriptor) [pid 418] close(26) = -1 EBADF (Bad file descriptor) [pid 418] close(27) = -1 EBADF (Bad file descriptor) [pid 418] close(28) = -1 EBADF (Bad file descriptor) [pid 418] close(29) = -1 EBADF (Bad file descriptor) [pid 418] exit_group(0 [pid 419] <... futex resumed>) = ? [pid 418] <... exit_group resumed>) = ? [pid 419] +++ exited with 0 +++ [pid 418] +++ exited with 0 +++ [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=20, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 300] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 300] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 300] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./9/binderfs") = 0 [pid 300] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./9") = 0 [pid 300] mkdir("./10", 0777) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 22 ./strace-static-x86_64: Process 428 attached [pid 428] set_robust_list(0x5555951c7760, 24) = 0 [pid 428] chdir("./10") = 0 [pid 428] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 428] setpgid(0, 0) = 0 [pid 428] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 428] write(3, "1000", 4) = 4 [pid 428] close(3) = 0 [pid 428] symlink("/dev/binderfs", "./binderfs") = 0 [pid 428] write(1, "executing program\n", 18executing program ) = 18 [pid 428] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 428] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 428] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 428] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 428] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 428] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 428] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[23]}, 88) = 23 [pid 428] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 428] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 428] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}./strace-static-x86_64: Process 429 attached [pid 429] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 429] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 429] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 429] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 428] <... futex resumed>) = 0 [pid 428] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 428] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 429] <... futex resumed>) = 1 [pid 429] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 429] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 428] <... futex resumed>) = 0 [pid 428] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 428] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 429] <... futex resumed>) = 1 [pid 429] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 429] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 428] <... futex resumed>) = 0 [pid 428] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 428] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 429] <... futex resumed>) = 1 [pid 429] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 429] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 429] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 429] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 429] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 421] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 420] <... futex resumed>) = 0 [pid 421] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 420] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 421] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 420] <... futex resumed>) = 0 [pid 421] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 420] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 421] <... ioctl resumed>, 0) = 0 [ 50.432281][ T319] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 50.445535][ T315] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 50.460515][ T315] usb 4-1: USB disconnect, device number 11 [ 50.467142][ T315] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [pid 421] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 421] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 421] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 423] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 423] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 423] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 423] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 423] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 50.488643][ T421] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [pid 423] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 423] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 423] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 423] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 423] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 423] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 423] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 423] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 423] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [ 50.545001][ T313] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.556740][ T313] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 50.573332][ T313] usb 5-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 50.583577][ T313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [pid 423] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 423] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 423] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 423] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 423] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [ 50.593058][ T313] usb 5-1: Product: syz [ 50.597687][ T313] usb 5-1: Manufacturer: syz [ 50.603749][ T313] usb 5-1: SerialNumber: syz [ 50.645298][ T319] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.659420][ T319] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 50.675665][ T319] usb 1-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 50.685788][ T319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [pid 425] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 425] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 425] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 425] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 425] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 425] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 425] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 425] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 425] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 425] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 425] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 425] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 425] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 425] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 425] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 421] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 421] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 420] <... futex resumed>) = 0 [pid 420] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 421] <... futex resumed>) = 0 [pid 420] <... futex resumed>) = 1 [pid 421] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 420] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 421] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 421] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 421] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 421] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 425] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 425] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 425] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 425] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 425] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [ 50.695316][ T319] usb 1-1: Product: syz [ 50.700002][ T319] usb 1-1: Manufacturer: syz [ 50.706174][ T319] usb 1-1: SerialNumber: syz [pid 427] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 427] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 427] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 423] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 422] <... futex resumed>) = 0 [pid 423] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 422] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 423] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 422] <... futex resumed>) = 0 [pid 423] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 422] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 423] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 423] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [ 50.772219][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [pid 423] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 423] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 423] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 50.813250][ T423] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [pid 429] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 429] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 429] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 421] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 420] <... futex resumed>) = 0 [pid 421] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 420] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 421] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 420] <... futex resumed>) = 0 [pid 421] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [pid 420] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 425] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 424] <... futex resumed>) = 0 [pid 425] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 424] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 425] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 424] <... futex resumed>) = 0 [pid 425] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 424] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 425] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 425] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [ 50.872288][ T315] usb 4-1: new high-speed USB device number 12 using dummy_hcd [pid 425] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 425] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 425] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 427] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 427] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 427] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 427] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 427] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 50.918471][ T425] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [pid 427] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 427] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 427] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 427] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 427] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 427] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 427] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 427] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 427] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [ 50.965035][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.976533][ T24] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 50.990326][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 51.000323][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.008978][ T24] usb 3-1: Product: syz [pid 427] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 423] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 422] <... futex resumed>) = 0 [pid 423] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 422] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 423] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 422] <... futex resumed>) = 0 [pid 423] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 422] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 427] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 423] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 427] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW [pid 423] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 427] <... ioctl resumed>, 0) = 0 [pid 423] <... ioctl resumed>, 0) = -1 EINVAL (Invalid argument) [pid 427] ioctl(3, USB_RAW_IOCTL_CONFIGURE [pid 423] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 427] <... ioctl resumed>, 0) = 0 [pid 427] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 423] <... ioctl resumed>, 0xb) = 0 [pid 427] <... ioctl resumed>, 0x7f6727fc850c) = 0 [pid 427] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 423] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 427] <... ioctl resumed>, 0x7f6727ef7110) = 0 [pid 423] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 429] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 429] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 429] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 51.013540][ T24] usb 3-1: Manufacturer: syz [ 51.019055][ T24] usb 3-1: SerialNumber: syz [pid 429] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 429] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 429] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 429] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 429] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 429] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 429] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 429] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 429] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 429] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 429] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [ 51.064064][ T315] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.077504][ T315] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 51.096338][ T315] usb 4-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [pid 429] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 421] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 420] <... futex resumed>) = 0 [pid 421] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 420] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 421] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 420] <... futex resumed>) = 0 [pid 421] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 420] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 421] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 421] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 421] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 421] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 425] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 424] <... futex resumed>) = 0 [pid 425] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 424] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 425] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 424] <... futex resumed>) = 0 [pid 425] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 424] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 425] <... ioctl resumed>, 0) = -1 EINVAL (Invalid argument) [pid 425] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 425] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 421] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 425] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 429] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 429] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 429] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 429] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 429] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [ 51.107832][ T315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.108805][ T421] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 51.117231][ T315] usb 4-1: Product: syz [ 51.134330][ T315] usb 4-1: Manufacturer: syz [ 51.140372][ T315] usb 4-1: SerialNumber: syz [pid 427] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 423] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 427] <... futex resumed>) = 1 [pid 426] <... futex resumed>) = 0 [pid 423] <... futex resumed>) = 1 [pid 422] <... futex resumed>) = 0 [pid 422] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 422] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 427] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 426] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 427] <... futex resumed>) = 0 [pid 426] <... futex resumed>) = 1 [pid 427] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 426] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 427] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 427] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 427] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 423] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 423] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [pid 427] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 427] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 427] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 51.229904][ T427] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [pid 425] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 421] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 425] <... futex resumed>) = 1 [pid 424] <... futex resumed>) = 0 [pid 425] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 424] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 425] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 424] <... futex resumed>) = 0 [pid 425] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 424] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 425] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 425] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 421] <... futex resumed>) = 1 [pid 420] <... futex resumed>) = 0 [pid 425] <... ioctl resumed>, 0x7f6727ef7130) = 28 [pid 421] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 420] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 421] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 420] <... futex resumed>) = 0 [pid 421] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 420] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 421] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 421] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [pid 429] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 428] <... futex resumed>) = 0 [pid 429] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 428] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 429] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 428] <... futex resumed>) = 0 [pid 429] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 428] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 429] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 429] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 429] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 429] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 429] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 51.336189][ T39] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 51.346584][ T39] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 51.354403][ T429] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 51.355574][ T39] cdc_ncm 2-1:1.0: setting rx_max = 2048 [pid 423] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 422] <... futex resumed>) = 0 [pid 423] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 422] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 423] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 422] <... futex resumed>) = 0 [pid 423] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 422] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 423] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 423] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 427] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 423] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 423] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 427] <... futex resumed>) = 1 [pid 426] <... futex resumed>) = 0 [pid 423] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 427] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 426] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 427] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 426] <... futex resumed>) = 0 [pid 427] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 426] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 427] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 427] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 427] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 427] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 51.439090][ T423] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [pid 425] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 424] <... futex resumed>) = 0 [pid 425] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 424] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 425] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 424] <... futex resumed>) = 0 [pid 425] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 424] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 425] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 425] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 421] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 421] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 420] <... futex resumed>) = 0 [pid 420] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 421] <... futex resumed>) = 0 [pid 420] <... futex resumed>) = 1 [pid 421] bpf(BPF_PROG_LOAD, NULL, 0 [pid 420] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 421] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 421] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 420] <... futex resumed>) = 0 [pid 421] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 420] close(3 [pid 425] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 420] <... close resumed>) = 0 [pid 425] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 425] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 420] close(4) = -1 EBADF (Bad file descriptor) [pid 420] close(5) = -1 EBADF (Bad file descriptor) [pid 420] close(6) = -1 EBADF (Bad file descriptor) [pid 420] close(7) = -1 EBADF (Bad file descriptor) [pid 420] close(8) = -1 EBADF (Bad file descriptor) [pid 420] close(9) = -1 EBADF (Bad file descriptor) [pid 420] close(10) = -1 EBADF (Bad file descriptor) [pid 420] close(11) = -1 EBADF (Bad file descriptor) [pid 420] close(12) = -1 EBADF (Bad file descriptor) [pid 420] close(13) = -1 EBADF (Bad file descriptor) [pid 420] close(14) = -1 EBADF (Bad file descriptor) [pid 420] close(15) = -1 EBADF (Bad file descriptor) [pid 420] close(16) = -1 EBADF (Bad file descriptor) [pid 420] close(17) = -1 EBADF (Bad file descriptor) [pid 420] close(18) = -1 EBADF (Bad file descriptor) [pid 420] close(19) = -1 EBADF (Bad file descriptor) [pid 420] close(20) = -1 EBADF (Bad file descriptor) [pid 420] close(21) = -1 EBADF (Bad file descriptor) [pid 420] close(22) = -1 EBADF (Bad file descriptor) [pid 420] close(23) = -1 EBADF (Bad file descriptor) [pid 420] close(24) = -1 EBADF (Bad file descriptor) [pid 420] close(25) = -1 EBADF (Bad file descriptor) [pid 420] close(26) = -1 EBADF (Bad file descriptor) [pid 420] close(27) = -1 EBADF (Bad file descriptor) [pid 420] close(28) = -1 EBADF (Bad file descriptor) [pid 420] close(29) = -1 EBADF (Bad file descriptor) [pid 420] exit_group(0 [pid 421] <... futex resumed>) = ? [pid 420] <... exit_group resumed>) = ? [pid 421] +++ exited with 0 +++ [pid 420] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=22, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 298] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./10/binderfs") = 0 [pid 298] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./10") = 0 [pid 298] mkdir("./11", 0777) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 24 ./strace-static-x86_64: Process 430 attached [pid 430] set_robust_list(0x5555951c7760, 24) = 0 [pid 430] chdir("./11") = 0 [pid 430] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 430] setpgid(0, 0) = 0 [pid 430] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 430] write(3, "1000", 4) = 4 [pid 430] close(3) = 0 [pid 430] symlink("/dev/binderfs", "./binderfs") = 0 [pid 430] write(1, "executing program\n", 18executing program ) = 18 [pid 430] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 429] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 428] <... futex resumed>) = 0 [pid 428] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 428] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 430] <... futex resumed>) = 0 [pid 430] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 430] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 430] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 430] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 430] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 430] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[25]}, 88) = 25 [pid 430] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 430] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 430] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}./strace-static-x86_64: Process 431 attached [pid 431] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 431] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 431] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 431] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 430] <... futex resumed>) = 0 [pid 430] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 430] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] <... futex resumed>) = 1 [pid 431] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 431] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [ 51.536963][ T425] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 51.552982][ T39] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 51.569792][ T39] usb 2-1: USB disconnect, device number 12 [pid 429] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 429] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 431] <... futex resumed>) = 1 [pid 429] <... ioctl resumed>, 0) = -1 EINVAL (Invalid argument) [pid 430] <... futex resumed>) = 0 [pid 431] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 429] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 430] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 429] <... ioctl resumed>, 0xb) = 0 [pid 431] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 429] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 431] socketpair(AF_UNIX, SOCK_STREAM, 0, [pid 430] <... futex resumed>) = 0 [pid 429] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 430] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] <... socketpair resumed>NULL) = -1 EFAULT (Bad address) [pid 431] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 430] <... futex resumed>) = 0 [pid 430] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 430] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 431] <... futex resumed>) = 1 [pid 431] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 431] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 431] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 431] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 51.578304][ T39] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [pid 431] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 423] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 422] <... futex resumed>) = 0 [pid 423] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 422] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 423] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 422] <... futex resumed>) = 0 [pid 423] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 422] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 423] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 423] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [pid 427] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 426] <... futex resumed>) = 0 [pid 427] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 426] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 427] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 426] <... futex resumed>) = 0 [pid 427] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 426] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 427] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 427] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [ 51.650258][ T313] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 51.658994][ T313] cdc_ncm 5-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 51.667140][ T313] cdc_ncm 5-1:1.0: setting rx_max = 2048 [pid 425] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 424] <... futex resumed>) = 0 [pid 425] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 424] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 425] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 424] <... futex resumed>) = 0 [pid 425] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 424] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 425] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 425] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [pid 429] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 428] <... futex resumed>) = 0 [pid 429] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 428] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 429] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 428] <... futex resumed>) = 0 [pid 428] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 429] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 429] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [ 51.747820][ T319] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 51.755407][ T319] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 51.763737][ T319] cdc_ncm 1-1:1.0: setting rx_max = 2048 [pid 423] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 422] <... futex resumed>) = 0 [pid 423] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 422] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 423] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 422] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 423] bpf(BPF_PROG_LOAD, NULL, 0) = -1 EFAULT (Bad address) [pid 423] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 422] <... futex resumed>) = 0 [pid 423] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 422] close(3) = 0 [pid 422] close(4) = -1 EBADF (Bad file descriptor) [pid 422] close(5) = -1 EBADF (Bad file descriptor) [pid 422] close(6) = -1 EBADF (Bad file descriptor) [pid 422] close(7) = -1 EBADF (Bad file descriptor) [pid 422] close(8) = -1 EBADF (Bad file descriptor) [pid 422] close(9) = -1 EBADF (Bad file descriptor) [pid 422] close(10) = -1 EBADF (Bad file descriptor) [pid 422] close(11) = -1 EBADF (Bad file descriptor) [pid 422] close(12) = -1 EBADF (Bad file descriptor) [pid 422] close(13) = -1 EBADF (Bad file descriptor) [pid 422] close(14) = -1 EBADF (Bad file descriptor) [pid 422] close(15) = -1 EBADF (Bad file descriptor) [pid 422] close(16) = -1 EBADF (Bad file descriptor) [pid 422] close(17) = -1 EBADF (Bad file descriptor) [pid 422] close(18) = -1 EBADF (Bad file descriptor) [pid 422] close(19) = -1 EBADF (Bad file descriptor) [pid 422] close(20) = -1 EBADF (Bad file descriptor) [pid 422] close(21) = -1 EBADF (Bad file descriptor) [pid 422] close(22) = -1 EBADF (Bad file descriptor) [pid 422] close(23) = -1 EBADF (Bad file descriptor) [pid 422] close(24) = -1 EBADF (Bad file descriptor) [pid 422] close(25) = -1 EBADF (Bad file descriptor) [pid 422] close(26) = -1 EBADF (Bad file descriptor) [pid 422] close(27) = -1 EBADF (Bad file descriptor) [pid 422] close(28) = -1 EBADF (Bad file descriptor) [pid 422] close(29) = -1 EBADF (Bad file descriptor) [pid 422] exit_group(0) = ? [pid 423] <... futex resumed>) = ? [pid 423] +++ exited with 0 +++ [pid 422] +++ exited with 0 +++ [pid 427] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=22, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 427] <... futex resumed>) = 1 [pid 426] <... futex resumed>) = 0 [pid 301] restart_syscall(<... resuming interrupted clone ...> [pid 427] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 426] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 427] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 426] <... futex resumed>) = 0 [pid 427] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 426] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 427] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 427] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 301] <... restart_syscall resumed>) = 0 [pid 301] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 301] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./10/binderfs") = 0 [pid 301] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./10") = 0 [pid 301] mkdir("./11", 0777) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 24 [pid 427] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 427] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 427] ioctl(3, USB_RAW_IOCTL_EP0_READ./strace-static-x86_64: Process 432 attached [pid 432] set_robust_list(0x5555951c7760, 24) = 0 [pid 432] chdir("./11") = 0 [pid 432] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 432] setpgid(0, 0) = 0 [pid 432] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 432] write(3, "1000", 4) = 4 [pid 427] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 432] close(3) = 0 [pid 432] symlink("/dev/binderfs", "./binderfs") = 0 [pid 432] write(1, "executing program\n", 18executing program ) = 18 [pid 432] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 432] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 432] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 432] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 432] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 432] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[25]}, 88) = 25 [pid 432] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 432] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}./strace-static-x86_64: Process 433 attached [pid 433] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 433] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 433] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 433] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 433] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 432] <... futex resumed>) = 0 [pid 433] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 432] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 433] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 432] <... futex resumed>) = 0 [pid 433] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 432] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 433] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 432] <... futex resumed>) = 0 [pid 433] socketpair(AF_UNIX, SOCK_STREAM, 0, [pid 432] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 433] <... socketpair resumed>NULL) = -1 EFAULT (Bad address) [pid 433] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 433] <... futex resumed>) = 0 [pid 432] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 432] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 433] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 432] <... futex resumed>) = 0 [pid 433] <... openat resumed>) = 3 [pid 432] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 433] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 433] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 433] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 51.864390][ T313] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 51.876891][ T427] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 51.882524][ T313] usb 5-1: USB disconnect, device number 12 [ 51.893817][ T313] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [pid 433] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 425] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 424] <... futex resumed>) = 0 [pid 425] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 424] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 425] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 424] <... futex resumed>) = 0 [pid 425] bpf(BPF_PROG_LOAD, NULL, 0 [pid 424] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 425] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 425] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 424] <... futex resumed>) = 0 [pid 425] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 424] close(3) = 0 [pid 424] close(4) = -1 EBADF (Bad file descriptor) [pid 424] close(5) = -1 EBADF (Bad file descriptor) [pid 424] close(6) = -1 EBADF (Bad file descriptor) [pid 424] close(7) = -1 EBADF (Bad file descriptor) [pid 424] close(8) = -1 EBADF (Bad file descriptor) [pid 424] close(9) = -1 EBADF (Bad file descriptor) [pid 424] close(10) = -1 EBADF (Bad file descriptor) [pid 424] close(11) = -1 EBADF (Bad file descriptor) [pid 424] close(12) = -1 EBADF (Bad file descriptor) [pid 424] close(13) = -1 EBADF (Bad file descriptor) [pid 424] close(14) = -1 EBADF (Bad file descriptor) [pid 424] close(15) = -1 EBADF (Bad file descriptor) [pid 424] close(16) = -1 EBADF (Bad file descriptor) [pid 424] close(17) = -1 EBADF (Bad file descriptor) [pid 424] close(18) = -1 EBADF (Bad file descriptor) [pid 424] close(19) = -1 EBADF (Bad file descriptor) [pid 424] close(20) = -1 EBADF (Bad file descriptor) [pid 424] close(21) = -1 EBADF (Bad file descriptor) [pid 424] close(22) = -1 EBADF (Bad file descriptor) [pid 424] close(23) = -1 EBADF (Bad file descriptor) [pid 424] close(24) = -1 EBADF (Bad file descriptor) [pid 424] close(25) = -1 EBADF (Bad file descriptor) [pid 424] close(26) = -1 EBADF (Bad file descriptor) [pid 424] close(27) = -1 EBADF (Bad file descriptor) [pid 424] close(28) = -1 EBADF (Bad file descriptor) [pid 424] close(29) = -1 EBADF (Bad file descriptor) [pid 424] exit_group(0 [pid 425] <... futex resumed>) = ? [pid 424] <... exit_group resumed>) = ? [pid 425] +++ exited with 0 +++ [pid 424] +++ exited with 0 +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=22, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 299] restart_syscall(<... resuming interrupted clone ...> [pid 431] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 299] <... restart_syscall resumed>) = 0 [pid 431] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 431] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 299] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 299] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./10/binderfs") = 0 [pid 299] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./10") = 0 [pid 299] mkdir("./11", 0777) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 24 ./strace-static-x86_64: Process 434 attached [pid 434] set_robust_list(0x5555951c7760, 24) = 0 [pid 434] chdir("./11") = 0 [pid 434] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 434] setpgid(0, 0 [pid 429] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 434] <... setpgid resumed>) = 0 [pid 429] <... futex resumed>) = 1 [pid 434] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 429] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 428] <... futex resumed>) = 0 [pid 434] <... openat resumed>) = 3 [pid 428] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 434] write(3, "1000", 4 [pid 429] <... futex resumed>) = 0 [pid 428] <... futex resumed>) = 1 [pid 434] <... write resumed>) = 4 [pid 429] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 428] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 434] close(3 [pid 429] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 434] <... close resumed>) = 0 [pid 429] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [ 51.952444][ T319] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 51.964846][ T39] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 51.977056][ T319] usb 1-1: USB disconnect, device number 12 [ 51.985876][ T319] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [pid 434] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 429] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 434] write(1, "executing program\n", 18) = 18 [pid 434] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 434] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 434] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 434] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 429] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 434] <... mmap resumed>) = 0x7f6727ed9000 [pid 434] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE [pid 429] <... ioctl resumed>, 0x7f6727fc893c) = 11 [pid 434] <... mprotect resumed>) = 0 [pid 434] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 434] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} [pid 429] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 434] <... clone3 resumed> => {parent_tid=[25]}, 88) = 25 ./strace-static-x86_64: Process 435 attached [pid 434] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 434] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 429] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 434] <... futex resumed>) = 0 [pid 435] set_robust_list(0x7f6727ef99a0, 24 [pid 434] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 435] <... set_robust_list resumed>) = 0 [pid 435] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 435] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 435] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 434] <... futex resumed>) = 0 [pid 435] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 434] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 435] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 434] <... futex resumed>) = 0 [pid 435] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 434] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 435] <... futex resumed>) = 0 [pid 434] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 435] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 434] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 435] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 434] <... futex resumed>) = 0 [pid 434] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 435] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 435] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 434] <... futex resumed>) = 0 [pid 435] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 434] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 435] <... openat resumed>) = 3 [pid 434] <... futex resumed>) = 0 [pid 435] ioctl(3, USB_RAW_IOCTL_INIT [pid 434] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 435] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 435] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 435] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 51.998625][ T429] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [pid 435] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 427] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 426] <... futex resumed>) = 0 [pid 427] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 426] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 427] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 426] <... futex resumed>) = 0 [pid 427] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 426] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 427] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 427] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [pid 431] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 431] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 431] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 431] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 431] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 431] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [ 52.106836][ T24] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 52.115557][ T24] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 52.126438][ T24] cdc_ncm 3-1:1.0: setting rx_max = 2048 [pid 431] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 431] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 431] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 431] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 431] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 431] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 431] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 431] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [ 52.164212][ T39] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.177926][ T39] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 52.194413][ T39] usb 2-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 52.204537][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [pid 431] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 429] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 428] <... futex resumed>) = 0 [pid 429] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 428] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 429] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 428] <... futex resumed>) = 0 [pid 429] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 428] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 429] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 429] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [pid 431] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 431] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 431] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 431] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 431] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [ 52.213935][ T39] usb 2-1: Product: syz [ 52.218253][ T39] usb 2-1: Manufacturer: syz [ 52.223995][ T39] usb 2-1: SerialNumber: syz [ 52.229570][ T315] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 52.236268][ T315] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 52.245505][ T315] cdc_ncm 4-1:1.0: setting rx_max = 2048 [pid 433] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 433] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 433] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 427] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 427] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 426] <... futex resumed>) = 0 [pid 426] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 427] <... futex resumed>) = 0 [pid 426] <... futex resumed>) = 1 [pid 427] bpf(BPF_PROG_LOAD, NULL, 0 [pid 426] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 427] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 427] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 426] <... futex resumed>) = 0 [pid 427] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 426] close(3) = 0 [pid 426] close(4) = -1 EBADF (Bad file descriptor) [pid 426] close(5) = -1 EBADF (Bad file descriptor) [pid 426] close(6) = -1 EBADF (Bad file descriptor) [pid 426] close(7) = -1 EBADF (Bad file descriptor) [pid 426] close(8) = -1 EBADF (Bad file descriptor) [pid 426] close(9) = -1 EBADF (Bad file descriptor) [pid 426] close(10) = -1 EBADF (Bad file descriptor) [pid 426] close(11) = -1 EBADF (Bad file descriptor) [pid 426] close(12) = -1 EBADF (Bad file descriptor) [pid 426] close(13) = -1 EBADF (Bad file descriptor) [pid 426] close(14) = -1 EBADF (Bad file descriptor) [pid 426] close(15) = -1 EBADF (Bad file descriptor) [pid 426] close(16) = -1 EBADF (Bad file descriptor) [pid 426] close(17) = -1 EBADF (Bad file descriptor) [pid 426] close(18) = -1 EBADF (Bad file descriptor) [pid 426] close(19) = -1 EBADF (Bad file descriptor) [pid 426] close(20) = -1 EBADF (Bad file descriptor) [pid 426] close(21) = -1 EBADF (Bad file descriptor) [pid 426] close(22) = -1 EBADF (Bad file descriptor) [pid 426] close(23) = -1 EBADF (Bad file descriptor) [pid 426] close(24) = -1 EBADF (Bad file descriptor) [pid 426] close(25) = -1 EBADF (Bad file descriptor) [pid 426] close(26) = -1 EBADF (Bad file descriptor) [pid 426] close(27) = -1 EBADF (Bad file descriptor) [pid 426] close(28) = -1 EBADF (Bad file descriptor) [pid 426] close(29) = -1 EBADF (Bad file descriptor) [pid 426] exit_group(0) = ? [pid 427] <... futex resumed>) = ? [pid 427] +++ exited with 0 +++ [pid 426] +++ exited with 0 +++ [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=22, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 302] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 52.282232][ T313] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 52.319116][ T24] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [pid 302] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 302] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 302] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 302] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] unlink("./10/binderfs") = 0 [pid 302] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 302] close(3) = 0 [pid 302] rmdir("./10") = 0 [pid 302] mkdir("./11", 0777) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 24 ./strace-static-x86_64: Process 436 attached [pid 436] set_robust_list(0x5555951c7760, 24) = 0 [pid 436] chdir("./11") = 0 [pid 436] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 436] setpgid(0, 0) = 0 [pid 436] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 436] write(3, "1000", 4) = 4 [pid 436] close(3) = 0 [pid 436] symlink("/dev/binderfs", "./binderfs") = 0 [pid 436] write(1, "executing program\n", 18executing program ) = 18 [pid 436] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 436] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 436] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 436] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 436] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 436] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 436] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0}./strace-static-x86_64: Process 437 attached [pid 437] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 437] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 437] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 436] <... clone3 resumed> => {parent_tid=[25]}, 88) = 25 [pid 436] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 436] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 436] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 437] <... futex resumed>) = 0 [pid 437] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 437] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 436] <... futex resumed>) = 0 [pid 437] <... futex resumed>) = 1 [pid 436] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 437] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 436] <... futex resumed>) = 0 [pid 437] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 436] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 437] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 436] <... futex resumed>) = 0 [pid 437] socketpair(AF_UNIX, SOCK_STREAM, 0, [pid 436] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 436] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 437] <... socketpair resumed>NULL) = -1 EFAULT (Bad address) [pid 437] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 436] <... futex resumed>) = 0 [pid 437] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 436] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 437] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 436] <... futex resumed>) = 0 [pid 436] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 437] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 437] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 437] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 437] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 52.353661][ T24] usb 3-1: USB disconnect, device number 12 [ 52.361024][ T24] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [pid 437] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 435] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 435] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 435] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 429] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 429] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 428] <... futex resumed>) = 0 [pid 428] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 429] <... futex resumed>) = 0 [pid 428] <... futex resumed>) = 1 [pid 429] bpf(BPF_PROG_LOAD, NULL, 0 [pid 428] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 429] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 429] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 428] <... futex resumed>) = 0 [pid 429] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 428] close(3) = 0 [pid 428] close(4) = -1 EBADF (Bad file descriptor) [pid 428] close(5) = -1 EBADF (Bad file descriptor) [pid 428] close(6) = -1 EBADF (Bad file descriptor) [pid 428] close(7) = -1 EBADF (Bad file descriptor) [pid 428] close(8) = -1 EBADF (Bad file descriptor) [pid 428] close(9) = -1 EBADF (Bad file descriptor) [pid 428] close(10) = -1 EBADF (Bad file descriptor) [pid 428] close(11) = -1 EBADF (Bad file descriptor) [pid 428] close(12) = -1 EBADF (Bad file descriptor) [pid 428] close(13) = -1 EBADF (Bad file descriptor) [pid 431] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 430] <... futex resumed>) = 0 [pid 431] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 430] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 430] <... futex resumed>) = 0 [pid 431] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 430] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 431] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 431] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [ 52.402306][ T319] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 52.435313][ T315] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [pid 431] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 428] close(14 [pid 431] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 431] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 431] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 433] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 428] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 433] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 433] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 428] close(15) = -1 EBADF (Bad file descriptor) [pid 433] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 433] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 433] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 428] close(16 [pid 433] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 428] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 433] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 428] close(17 [pid 433] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 428] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 428] close(18) = -1 EBADF (Bad file descriptor) [pid 428] close(19) = -1 EBADF (Bad file descriptor) [pid 428] close(20) = -1 EBADF (Bad file descriptor) [pid 428] close(21) = -1 EBADF (Bad file descriptor) [pid 428] close(22) = -1 EBADF (Bad file descriptor) [pid 428] close(23) = -1 EBADF (Bad file descriptor) [pid 428] close(24) = -1 EBADF (Bad file descriptor) [pid 428] close(25) = -1 EBADF (Bad file descriptor) [pid 428] close(26) = -1 EBADF (Bad file descriptor) [pid 428] close(27) = -1 EBADF (Bad file descriptor) [pid 428] close(28) = -1 EBADF (Bad file descriptor) [pid 428] close(29) = -1 EBADF (Bad file descriptor) [pid 428] exit_group(0 [pid 429] <... futex resumed>) = ? [pid 428] <... exit_group resumed>) = ? [pid 429] +++ exited with 0 +++ [pid 428] +++ exited with 0 +++ [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=22, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 300] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 300] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 300] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./10/binderfs") = 0 [pid 300] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./10") = 0 [pid 300] mkdir("./11", 0777) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 24 ./strace-static-x86_64: Process 438 attached [pid 438] set_robust_list(0x5555951c7760, 24) = 0 [pid 438] chdir("./11") = 0 [pid 438] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 438] setpgid(0, 0) = 0 [pid 438] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 438] write(3, "1000", 4) = 4 [pid 438] close(3) = 0 [pid 438] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 438] write(1, "executing program\n", 18) = 18 [pid 438] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 438] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 438] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 438] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 438] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 438] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 438] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[25]}, 88) = 25 [pid 438] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 438] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 438] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}./strace-static-x86_64: Process 439 attached [pid 439] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 439] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 439] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 439] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] <... futex resumed>) = 0 [pid 438] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 438] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 439] <... futex resumed>) = 1 [pid 439] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 439] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] <... futex resumed>) = 0 [pid 438] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 438] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 439] <... futex resumed>) = 1 [pid 439] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 439] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] <... futex resumed>) = 0 [pid 438] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 438] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 439] <... futex resumed>) = 1 [pid 439] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 439] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 439] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 439] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 52.452314][ T315] usb 4-1: USB disconnect, device number 12 [ 52.457086][ T431] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 52.460708][ T315] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 52.480185][ T313] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 439] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 433] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 433] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 433] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 433] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 433] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 433] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 433] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 433] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 433] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 433] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 433] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 433] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 433] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [ 52.496212][ T313] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 52.513514][ T313] usb 5-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 52.523826][ T313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.532002][ T313] usb 5-1: Product: syz [ 52.538781][ T313] usb 5-1: Manufacturer: syz [ 52.544025][ T313] usb 5-1: SerialNumber: syz [pid 435] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 435] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 435] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 435] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 435] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 435] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 435] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 435] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 435] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 435] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 435] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 435] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 435] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 435] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [ 52.595998][ T319] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.608252][ T319] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 52.621840][ T319] usb 1-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 52.631360][ T319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.639704][ T319] usb 1-1: Product: syz [pid 435] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 435] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 435] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 435] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 435] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [pid 431] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 430] <... futex resumed>) = 0 [pid 431] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 430] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 430] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 431] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 431] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 431] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 431] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 431] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 52.644359][ T319] usb 1-1: Manufacturer: syz [ 52.649390][ T319] usb 1-1: SerialNumber: syz [pid 433] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 432] <... futex resumed>) = 0 [pid 433] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 432] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 433] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 432] <... futex resumed>) = 0 [pid 433] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 432] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 433] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 433] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 433] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 433] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 433] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 52.757509][ T433] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [pid 437] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 437] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 437] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 435] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 434] <... futex resumed>) = 0 [pid 435] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 434] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 434] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 435] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 435] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 435] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [ 52.802151][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [pid 435] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 435] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 435] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 431] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 430] <... futex resumed>) = 0 [pid 430] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 430] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 431] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 431] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [ 52.860503][ T435] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [pid 439] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 439] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [ 52.902208][ T315] usb 4-1: new high-speed USB device number 13 using dummy_hcd [pid 439] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 433] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 432] <... futex resumed>) = 0 [pid 432] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 432] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 433] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 433] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 433] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 433] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 437] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 437] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 437] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 437] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 437] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 437] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 437] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 437] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 437] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 437] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 437] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 437] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 437] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 437] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [ 52.984929][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.997021][ T24] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 53.012785][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 53.022803][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [pid 437] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 437] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 437] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 437] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 437] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [pid 435] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 434] <... futex resumed>) = 0 [pid 435] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 434] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 434] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 435] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 435] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 435] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 435] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 435] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 431] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 430] <... futex resumed>) = 0 [pid 430] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 430] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [ 53.031002][ T24] usb 3-1: Product: syz [ 53.035785][ T24] usb 3-1: Manufacturer: syz [ 53.040777][ T24] usb 3-1: SerialNumber: syz [pid 431] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 431] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 431] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 431] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 439] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 439] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 431] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 439] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 439] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 439] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 439] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 439] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 439] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 439] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 439] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 439] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 439] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 439] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 439] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 439] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [ 53.083174][ T431] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 53.095006][ T315] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.106358][ T315] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 53.120931][ T315] usb 4-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [pid 439] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 439] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 439] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 439] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 439] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [pid 433] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 432] <... futex resumed>) = 0 [pid 433] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 432] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 433] <... futex resumed>) = 0 [pid 432] <... futex resumed>) = 1 [pid 433] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 432] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 433] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 433] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [ 53.130815][ T315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.139132][ T315] usb 4-1: Product: syz [ 53.143512][ T315] usb 4-1: Manufacturer: syz [ 53.148295][ T315] usb 4-1: SerialNumber: syz [pid 437] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 436] <... futex resumed>) = 0 [pid 437] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 436] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 437] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 436] <... futex resumed>) = 0 [pid 437] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 436] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 437] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 437] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 437] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 437] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 437] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 435] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 434] <... futex resumed>) = 0 [pid 434] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 434] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 435] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 435] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [pid 431] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 430] <... futex resumed>) = 0 [pid 431] <... futex resumed>) = 1 [pid 430] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 430] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 431] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [ 53.250538][ T437] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [pid 431] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [ 53.295646][ T39] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 53.305308][ T39] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 53.313957][ T39] cdc_ncm 2-1:1.0: setting rx_max = 2048 [pid 439] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 438] <... futex resumed>) = 0 [pid 438] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 438] <... futex resumed>) = 0 [pid 438] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 439] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 439] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 439] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 433] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 432] <... futex resumed>) = 0 [pid 433] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 432] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 433] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 432] <... futex resumed>) = 0 [pid 433] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 432] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 439] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 439] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 439] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 433] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 433] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 433] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 53.358916][ T439] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 53.372501][ T433] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [pid 437] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 436] <... futex resumed>) = 0 [pid 436] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 436] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 437] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 437] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 437] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 437] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 435] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 434] <... futex resumed>) = 0 [pid 435] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 434] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 435] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 434] <... futex resumed>) = 0 [pid 435] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 434] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 435] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 435] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 435] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 431] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 430] <... futex resumed>) = 0 [pid 430] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 430] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 431] bpf(BPF_PROG_LOAD, NULL, 0) = -1 EFAULT (Bad address) [pid 431] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 430] <... futex resumed>) = 0 [pid 430] close(3 [pid 431] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 430] <... close resumed>) = 0 [pid 430] close(4) = -1 EBADF (Bad file descriptor) [pid 430] close(5) = -1 EBADF (Bad file descriptor) [pid 430] close(6) = -1 EBADF (Bad file descriptor) [pid 430] close(7) = -1 EBADF (Bad file descriptor) [pid 430] close(8) = -1 EBADF (Bad file descriptor) [pid 430] close(9) = -1 EBADF (Bad file descriptor) [pid 430] close(10) = -1 EBADF (Bad file descriptor) [pid 430] close(11) = -1 EBADF (Bad file descriptor) [pid 430] close(12) = -1 EBADF (Bad file descriptor) [pid 430] close(13) = -1 EBADF (Bad file descriptor) [pid 430] close(14) = -1 EBADF (Bad file descriptor) [pid 430] close(15) = -1 EBADF (Bad file descriptor) [pid 430] close(16) = -1 EBADF (Bad file descriptor) [pid 430] close(17) = -1 EBADF (Bad file descriptor) [pid 430] close(18) = -1 EBADF (Bad file descriptor) [pid 430] close(19) = -1 EBADF (Bad file descriptor) [pid 430] close(20) = -1 EBADF (Bad file descriptor) [pid 430] close(21) = -1 EBADF (Bad file descriptor) [pid 430] close(22) = -1 EBADF (Bad file descriptor) [pid 430] close(23) = -1 EBADF (Bad file descriptor) [pid 430] close(24) = -1 EBADF (Bad file descriptor) [pid 430] close(25) = -1 EBADF (Bad file descriptor) [pid 430] close(26) = -1 EBADF (Bad file descriptor) [pid 430] close(27) = -1 EBADF (Bad file descriptor) [pid 430] close(28) = -1 EBADF (Bad file descriptor) [pid 430] close(29) = -1 EBADF (Bad file descriptor) [pid 430] exit_group(0) = ? [pid 431] <... futex resumed>) = ? [pid 431] +++ exited with 0 +++ [pid 430] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=24, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [ 53.479586][ T435] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 53.512582][ T39] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 298] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./11/binderfs") = 0 [pid 298] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./11") = 0 [pid 298] mkdir("./12", 0777) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 26 ./strace-static-x86_64: Process 440 attached [pid 440] set_robust_list(0x5555951c7760, 24) = 0 [pid 440] chdir("./12") = 0 [pid 440] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 440] setpgid(0, 0) = 0 [pid 440] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 440] write(3, "1000", 4) = 4 [pid 440] close(3) = 0 [pid 440] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 440] write(1, "executing program\n", 18) = 18 [pid 440] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 440] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 440] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 440] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 440] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 440] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 440] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0}./strace-static-x86_64: Process 441 attached => {parent_tid=[27]}, 88) = 27 [pid 441] set_robust_list(0x7f6727ef99a0, 24 [pid 440] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 440] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 441] <... set_robust_list resumed>) = 0 [pid 440] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 441] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 441] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 441] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 440] <... futex resumed>) = 0 [pid 440] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 440] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 441] <... futex resumed>) = 1 [pid 441] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 441] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 440] <... futex resumed>) = 0 [pid 440] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 440] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 441] <... futex resumed>) = 1 [pid 441] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 441] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 440] <... futex resumed>) = 0 [pid 440] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 440] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 441] <... futex resumed>) = 1 [pid 441] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 441] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 441] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 441] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 441] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 439] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 438] <... futex resumed>) = 0 [pid 439] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 438] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 438] <... futex resumed>) = 0 [pid 439] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 438] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 439] <... ioctl resumed>, 0) = -1 EINVAL (Invalid argument) [pid 433] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 433] <... futex resumed>) = 1 [pid 432] <... futex resumed>) = 0 [pid 439] <... ioctl resumed>, 0xb) = 0 [pid 433] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 432] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 433] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 432] <... futex resumed>) = 0 [pid 433] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 439] <... ioctl resumed>, 0x7f6727ef7130) = 0 [ 53.527472][ T39] usb 2-1: USB disconnect, device number 13 [ 53.534423][ T39] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [pid 432] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 433] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 433] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [ 53.583518][ T313] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 53.590135][ T313] cdc_ncm 5-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 53.601080][ T313] cdc_ncm 5-1:1.0: setting rx_max = 2048 [pid 437] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 436] <... futex resumed>) = 0 [pid 437] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 436] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 437] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 436] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 437] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 437] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [pid 435] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 434] <... futex resumed>) = 0 [pid 435] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 434] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 435] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 434] <... futex resumed>) = 0 [pid 435] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 434] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 435] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 435] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [ 53.690277][ T319] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 53.697117][ T319] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 53.705026][ T319] cdc_ncm 1-1:1.0: setting rx_max = 2048 [pid 439] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 438] <... futex resumed>) = 0 [pid 439] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 438] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 438] <... futex resumed>) = 0 [pid 439] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 438] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 439] <... ioctl resumed>, 0x7f6727ef7130) = 28 [pid 433] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 432] <... futex resumed>) = 0 [pid 433] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 432] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 433] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 432] <... futex resumed>) = 0 [pid 433] bpf(BPF_PROG_LOAD, NULL, 0 [pid 432] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 433] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 433] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 432] <... futex resumed>) = 0 [pid 433] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 432] close(3) = 0 [pid 432] close(4) = -1 EBADF (Bad file descriptor) [pid 432] close(5) = -1 EBADF (Bad file descriptor) [pid 432] close(6) = -1 EBADF (Bad file descriptor) [pid 432] close(7) = -1 EBADF (Bad file descriptor) [pid 432] close(8) = -1 EBADF (Bad file descriptor) [pid 432] close(9) = -1 EBADF (Bad file descriptor) [pid 432] close(10) = -1 EBADF (Bad file descriptor) [pid 432] close(11) = -1 EBADF (Bad file descriptor) [pid 432] close(12) = -1 EBADF (Bad file descriptor) [pid 432] close(13) = -1 EBADF (Bad file descriptor) [pid 432] close(14) = -1 EBADF (Bad file descriptor) [pid 432] close(15) = -1 EBADF (Bad file descriptor) [pid 432] close(16) = -1 EBADF (Bad file descriptor) [pid 432] close(17) = -1 EBADF (Bad file descriptor) [pid 432] close(18) = -1 EBADF (Bad file descriptor) [pid 432] close(19) = -1 EBADF (Bad file descriptor) [pid 432] close(20) = -1 EBADF (Bad file descriptor) [pid 432] close(21) = -1 EBADF (Bad file descriptor) [pid 432] close(22) = -1 EBADF (Bad file descriptor) [pid 432] close(23) = -1 EBADF (Bad file descriptor) [pid 432] close(24) = -1 EBADF (Bad file descriptor) [pid 432] close(25) = -1 EBADF (Bad file descriptor) [pid 432] close(26) = -1 EBADF (Bad file descriptor) [pid 432] close(27) = -1 EBADF (Bad file descriptor) [pid 432] close(28) = -1 EBADF (Bad file descriptor) [pid 432] close(29) = -1 EBADF (Bad file descriptor) [pid 432] exit_group(0 [pid 433] <... futex resumed>) = ? [pid 432] <... exit_group resumed>) = ? [pid 433] +++ exited with 0 +++ [pid 432] +++ exited with 0 +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=24, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 301] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 301] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./11/binderfs") = 0 [pid 301] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./11") = 0 [pid 301] mkdir("./12", 0777) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 26 ./strace-static-x86_64: Process 442 attached [pid 442] set_robust_list(0x5555951c7760, 24) = 0 [pid 442] chdir("./12") = 0 [pid 442] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 442] setpgid(0, 0) = 0 [pid 442] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 442] write(3, "1000", 4) = 4 [pid 442] close(3) = 0 [pid 442] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 442] write(1, "executing program\n", 18) = 18 [pid 442] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 442] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 442] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 442] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 442] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 442] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 442] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0}./strace-static-x86_64: Process 443 attached => {parent_tid=[27]}, 88) = 27 [pid 443] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 443] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 443] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 442] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 442] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 443] <... futex resumed>) = 0 [pid 442] <... futex resumed>) = 1 [pid 443] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0 [pid 442] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 443] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 443] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 442] <... futex resumed>) = 0 [pid 442] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 442] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 443] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 443] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 442] <... futex resumed>) = 0 [pid 443] socketpair(AF_UNIX, SOCK_STREAM, 0, [pid 442] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 443] <... socketpair resumed>NULL) = -1 EFAULT (Bad address) [pid 442] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 443] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 442] <... futex resumed>) = 0 [pid 442] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 443] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 442] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 443] <... openat resumed>) = 3 [pid 443] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 443] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 443] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 443] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 437] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 436] <... futex resumed>) = 0 [pid 437] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 436] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 437] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 436] <... futex resumed>) = 0 [pid 437] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 436] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 437] <... ioctl resumed>, 0x7f6727ef8140) = 0 [ 53.804695][ T313] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 53.819831][ T313] usb 5-1: USB disconnect, device number 13 [ 53.827874][ T313] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [pid 437] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 437] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 437] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 435] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 434] <... futex resumed>) = 0 [pid 435] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 434] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 435] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 434] <... futex resumed>) = 0 [pid 435] bpf(BPF_PROG_LOAD, NULL, 0 [pid 434] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 435] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 435] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 434] <... futex resumed>) = 0 [pid 435] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 434] close(3) = 0 [pid 434] close(4) = -1 EBADF (Bad file descriptor) [pid 434] close(5) = -1 EBADF (Bad file descriptor) [pid 434] close(6) = -1 EBADF (Bad file descriptor) [pid 434] close(7) = -1 EBADF (Bad file descriptor) [pid 434] close(8) = -1 EBADF (Bad file descriptor) [pid 434] close(9) = -1 EBADF (Bad file descriptor) [pid 434] close(10) = -1 EBADF (Bad file descriptor) [pid 434] close(11) = -1 EBADF (Bad file descriptor) [pid 434] close(12) = -1 EBADF (Bad file descriptor) [pid 434] close(13) = -1 EBADF (Bad file descriptor) [pid 434] close(14) = -1 EBADF (Bad file descriptor) [pid 434] close(15) = -1 EBADF (Bad file descriptor) [pid 434] close(16) = -1 EBADF (Bad file descriptor) [pid 434] close(17) = -1 EBADF (Bad file descriptor) [pid 434] close(18) = -1 EBADF (Bad file descriptor) [pid 434] close(19) = -1 EBADF (Bad file descriptor) [pid 434] close(20) = -1 EBADF (Bad file descriptor) [pid 434] close(21) = -1 EBADF (Bad file descriptor) [pid 434] close(22) = -1 EBADF (Bad file descriptor) [pid 434] close(23) = -1 EBADF (Bad file descriptor) [pid 434] close(24) = -1 EBADF (Bad file descriptor) [pid 434] close(25) = -1 EBADF (Bad file descriptor) [pid 434] close(26) = -1 EBADF (Bad file descriptor) [pid 434] close(27) = -1 EBADF (Bad file descriptor) [pid 434] close(28) = -1 EBADF (Bad file descriptor) [pid 434] close(29) = -1 EBADF (Bad file descriptor) [pid 434] exit_group(0) = ? [pid 435] <... futex resumed>) = ? [pid 435] +++ exited with 0 +++ [pid 434] +++ exited with 0 +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=24, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 299] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 299] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 299] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./11/binderfs") = 0 [pid 299] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./11") = 0 [pid 299] mkdir("./12", 0777) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 26 ./strace-static-x86_64: Process 444 attached [pid 444] set_robust_list(0x5555951c7760, 24) = 0 [pid 444] chdir("./12") = 0 [pid 444] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 444] setpgid(0, 0) = 0 [ 53.865134][ T437] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 53.893265][ T319] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [pid 444] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 444] write(3, "1000", 4) = 4 [pid 444] close(3) = 0 [pid 444] symlink("/dev/binderfs", "./binderfs") = 0 [pid 444] write(1, "executing program\n", 18executing program ) = 18 [pid 444] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 444] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 444] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 444] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 444] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 444] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 444] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[27]}, 88) = 27 ./strace-static-x86_64: Process 445 attached [pid 444] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 445] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 444] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 445] rt_sigprocmask(SIG_SETMASK, [], [pid 444] <... futex resumed>) = 0 [pid 445] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 444] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 445] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 445] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 444] <... futex resumed>) = 0 [pid 444] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 444] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 445] <... futex resumed>) = 1 [pid 445] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 445] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 444] <... futex resumed>) = 0 [pid 444] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 444] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 445] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 445] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 444] <... futex resumed>) = 0 [pid 444] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 444] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 445] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 445] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 445] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 445] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 445] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 441] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 441] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 441] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 439] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 438] <... futex resumed>) = 0 [pid 439] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 438] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 438] <... futex resumed>) = 0 [ 53.910730][ T319] usb 1-1: USB disconnect, device number 13 [ 53.918641][ T319] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 53.952233][ T39] usb 2-1: new high-speed USB device number 14 using dummy_hcd [pid 439] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 438] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 439] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 439] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 439] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 439] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 53.984989][ T439] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [pid 437] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 436] <... futex resumed>) = 0 [pid 437] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 436] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 437] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 436] <... futex resumed>) = 0 [pid 437] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 436] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 437] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 437] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [ 54.075931][ T24] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 54.083591][ T24] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 54.092221][ T24] cdc_ncm 3-1:1.0: setting rx_max = 2048 [pid 441] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 441] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 441] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 441] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 441] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 441] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 441] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 441] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 441] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 441] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 441] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 441] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 441] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 441] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [ 54.144293][ T39] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.157012][ T39] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 54.172953][ T39] usb 2-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 54.184282][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [pid 441] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 439] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 439] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 438] <... futex resumed>) = 0 [pid 438] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] <... futex resumed>) = 0 [pid 438] <... futex resumed>) = 1 [pid 439] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 438] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 439] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 439] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [pid 441] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 441] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 441] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 441] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 441] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [pid 443] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 443] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [ 54.193668][ T39] usb 2-1: Product: syz [ 54.198617][ T39] usb 2-1: Manufacturer: syz [ 54.203526][ T315] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 54.210947][ T315] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 54.219885][ T39] usb 2-1: SerialNumber: syz [ 54.224999][ T315] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 54.232200][ T313] usb 5-1: new high-speed USB device number 14 using dummy_hcd [pid 443] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 437] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 436] <... futex resumed>) = 0 [pid 436] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 437] bpf(BPF_PROG_LOAD, NULL, 0 [pid 436] <... futex resumed>) = 0 [pid 437] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 436] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 437] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 436] <... futex resumed>) = 0 [pid 437] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 436] close(3) = 0 [pid 436] close(4) = -1 EBADF (Bad file descriptor) [pid 436] close(5) = -1 EBADF (Bad file descriptor) [pid 436] close(6) = -1 EBADF (Bad file descriptor) [pid 436] close(7) = -1 EBADF (Bad file descriptor) [pid 436] close(8) = -1 EBADF (Bad file descriptor) [pid 436] close(9) = -1 EBADF (Bad file descriptor) [pid 436] close(10) = -1 EBADF (Bad file descriptor) [pid 436] close(11) = -1 EBADF (Bad file descriptor) [pid 436] close(12) = -1 EBADF (Bad file descriptor) [pid 436] close(13) = -1 EBADF (Bad file descriptor) [pid 436] close(14) = -1 EBADF (Bad file descriptor) [pid 436] close(15) = -1 EBADF (Bad file descriptor) [pid 436] close(16) = -1 EBADF (Bad file descriptor) [pid 436] close(17) = -1 EBADF (Bad file descriptor) [pid 436] close(18) = -1 EBADF (Bad file descriptor) [pid 436] close(19) = -1 EBADF (Bad file descriptor) [pid 436] close(20) = -1 EBADF (Bad file descriptor) [pid 436] close(21) = -1 EBADF (Bad file descriptor) [pid 436] close(22) = -1 EBADF (Bad file descriptor) [pid 436] close(23) = -1 EBADF (Bad file descriptor) [pid 436] close(24) = -1 EBADF (Bad file descriptor) [pid 436] close(25) = -1 EBADF (Bad file descriptor) [pid 436] close(26) = -1 EBADF (Bad file descriptor) [pid 436] close(27) = -1 EBADF (Bad file descriptor) [pid 436] close(28) = -1 EBADF (Bad file descriptor) [pid 436] close(29) = -1 EBADF (Bad file descriptor) [pid 436] exit_group(0 [pid 437] <... futex resumed>) = ? [pid 436] <... exit_group resumed>) = ? [pid 437] +++ exited with 0 +++ [pid 436] +++ exited with 0 +++ [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=24, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 302] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 302] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 302] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 302] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] unlink("./11/binderfs") = 0 [pid 302] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 302] close(3) = 0 [pid 302] rmdir("./11") = 0 [pid 302] mkdir("./12", 0777) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 26 ./strace-static-x86_64: Process 446 attached [pid 446] set_robust_list(0x5555951c7760, 24) = 0 [pid 446] chdir("./12") = 0 [pid 446] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 446] setpgid(0, 0) = 0 [pid 446] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 446] write(3, "1000", 4) = 4 [pid 446] close(3) = 0 [pid 446] symlink("/dev/binderfs", "./binderfs") = 0 [pid 446] write(1, "executing program\n", 18executing program ) = 18 [pid 446] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 446] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 446] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 446] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 446] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 446] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 446] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[27]}, 88) = 27 [pid 446] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 446] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 446] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}./strace-static-x86_64: Process 447 attached [pid 447] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 447] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 447] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 447] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 446] <... futex resumed>) = 0 [pid 446] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 446] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 447] <... futex resumed>) = 1 [pid 445] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 445] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 445] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 447] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 447] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 446] <... futex resumed>) = 0 [pid 446] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 446] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 447] <... futex resumed>) = 1 [pid 447] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 447] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 446] <... futex resumed>) = 0 [pid 446] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 446] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 447] <... futex resumed>) = 1 [pid 447] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 447] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 447] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 447] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 54.282860][ T24] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 54.299399][ T24] usb 3-1: USB disconnect, device number 13 [ 54.311850][ T24] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 54.322864][ T319] usb 1-1: new high-speed USB device number 14 using dummy_hcd [pid 447] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 439] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 438] <... futex resumed>) = 0 [pid 439] bpf(BPF_PROG_LOAD, NULL, 0 [pid 438] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 439] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 438] <... futex resumed>) = 0 [pid 439] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 439] <... futex resumed>) = 0 [pid 438] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 439] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 438] close(3) = 0 [pid 438] close(4 [pid 443] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 438] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 438] close(5 [pid 443] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 438] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 438] close(6 [pid 443] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 438] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 443] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 438] close(7 [pid 443] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 438] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 443] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 438] close(8 [pid 443] <... ioctl resumed>, 0x7f6727ef7110) = 9 [pid 438] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 443] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 438] close(9) = -1 EBADF (Bad file descriptor) [pid 438] close(10) = -1 EBADF (Bad file descriptor) [pid 443] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 438] close(11 [pid 443] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 438] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 438] close(12) = -1 EBADF (Bad file descriptor) [pid 443] <... ioctl resumed>, 0x7f6727ef7110) = 100 [pid 443] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 438] close(13) = -1 EBADF (Bad file descriptor) [pid 438] close(14 [pid 441] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 438] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 441] <... futex resumed>) = 1 [pid 438] close(15 [pid 441] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 438] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 438] close(16) = -1 EBADF (Bad file descriptor) [pid 438] close(17) = -1 EBADF (Bad file descriptor) [pid 438] close(18) = -1 EBADF (Bad file descriptor) [pid 438] close(19) = -1 EBADF (Bad file descriptor) [pid 438] close(20) = -1 EBADF (Bad file descriptor) [pid 438] close(21) = -1 EBADF (Bad file descriptor) [pid 438] close(22) = -1 EBADF (Bad file descriptor) [pid 438] close(23) = -1 EBADF (Bad file descriptor) [pid 438] close(24) = -1 EBADF (Bad file descriptor) [pid 438] close(25) = -1 EBADF (Bad file descriptor) [pid 438] close(26) = -1 EBADF (Bad file descriptor) [pid 438] close(27) = -1 EBADF (Bad file descriptor) [pid 438] close(28) = -1 EBADF (Bad file descriptor) [pid 438] close(29) = -1 EBADF (Bad file descriptor) [pid 438] exit_group(0 [pid 439] <... futex resumed>) = ? [pid 438] <... exit_group resumed>) = ? [pid 439] +++ exited with 0 +++ [pid 438] +++ exited with 0 +++ [pid 440] <... futex resumed>) = 0 [pid 440] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=24, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 441] <... futex resumed>) = 0 [pid 440] <... futex resumed>) = 1 [pid 300] restart_syscall(<... resuming interrupted clone ...> [pid 441] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 440] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 441] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 441] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 441] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 300] <... restart_syscall resumed>) = 0 [pid 300] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 300] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./11/binderfs") = 0 [pid 300] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./11") = 0 [pid 300] mkdir("./12", 0777) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 26 [ 54.409958][ T315] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 54.425379][ T313] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.438728][ T315] usb 4-1: USB disconnect, device number 13 [ 54.442205][ T441] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [pid 441] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 441] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 441] ioctl(3, USB_RAW_IOCTL_EP0_READ./strace-static-x86_64: Process 448 attached [pid 448] set_robust_list(0x5555951c7760, 24) = 0 [pid 448] chdir("./12") = 0 [pid 448] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 441] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 448] setpgid(0, 0) = 0 [pid 448] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 443] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 448] <... openat resumed>) = 3 [pid 443] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 448] write(3, "1000", 4 [pid 443] <... ioctl resumed>, 0x7f6727ef7110) = 4 [pid 443] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 443] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 443] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 448] <... write resumed>) = 4 [pid 443] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 443] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 443] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 448] close(3 [pid 443] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 443] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 executing program [pid 443] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 448] <... close resumed>) = 0 [pid 448] symlink("/dev/binderfs", "./binderfs") = 0 [pid 448] write(1, "executing program\n", 18) = 18 [pid 448] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 448] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 448] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 448] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 448] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 448] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 448] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[27]}, 88) = 27 [pid 448] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 448] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 448] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}./strace-static-x86_64: Process 449 attached [pid 449] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 449] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 449] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 449] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 448] <... futex resumed>) = 0 [pid 448] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 448] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 449] <... futex resumed>) = 1 [pid 449] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 449] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 448] <... futex resumed>) = 0 [pid 448] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 448] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 449] <... futex resumed>) = 1 [pid 449] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 449] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 448] <... futex resumed>) = 0 [pid 448] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 448] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 449] <... futex resumed>) = 1 [pid 449] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 449] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 449] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 449] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 54.444952][ T313] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 54.463664][ T315] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 54.478517][ T313] usb 5-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 54.490450][ T313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.500464][ T313] usb 5-1: Product: syz [ 54.504930][ T313] usb 5-1: Manufacturer: syz [pid 449] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 443] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 443] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 443] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 443] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 443] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [pid 445] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 445] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 445] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 445] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 445] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 54.510263][ T313] usb 5-1: SerialNumber: syz [pid 445] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 445] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 445] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 445] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 445] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 445] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 445] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 445] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 445] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [ 54.545402][ T319] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.557702][ T319] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 54.572787][ T319] usb 1-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 54.584415][ T319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [pid 445] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 445] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 445] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 445] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 445] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [ 54.592980][ T319] usb 1-1: Product: syz [ 54.597239][ T319] usb 1-1: Manufacturer: syz [ 54.602372][ T319] usb 1-1: SerialNumber: syz [pid 441] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 440] <... futex resumed>) = 0 [pid 441] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 440] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 441] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 440] <... futex resumed>) = 0 [pid 441] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 440] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 441] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 441] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 441] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 441] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 443] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 442] <... futex resumed>) = 0 [pid 443] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 442] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 443] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 442] <... futex resumed>) = 0 [pid 443] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 442] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 443] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 443] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 443] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 443] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 443] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 447] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 447] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [ 54.730088][ T443] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 54.738487][ T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd [pid 447] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 445] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 444] <... futex resumed>) = 0 [pid 445] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 444] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 445] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 444] <... futex resumed>) = 0 [pid 445] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 444] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 445] <... ioctl resumed>, 0) = 0 [pid 445] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 445] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 445] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 54.812315][ T445] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [pid 449] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 449] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 449] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 441] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 440] <... futex resumed>) = 0 [pid 441] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 440] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 441] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 440] <... futex resumed>) = 0 [pid 441] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 440] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 441] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 441] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [pid 447] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 447] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 447] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 54.862193][ T315] usb 4-1: new high-speed USB device number 14 using dummy_hcd [pid 447] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 447] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 447] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 447] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 447] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 443] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 442] <... futex resumed>) = 0 [pid 447] <... ioctl resumed>, 0x7f6727ef7110) = 4 [pid 443] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 442] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 447] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 443] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 442] <... futex resumed>) = 0 [pid 447] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 443] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 442] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 447] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 443] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 443] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 447] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 443] <... ioctl resumed>, 0) = -1 EINVAL (Invalid argument) [pid 447] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 443] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 447] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 443] <... ioctl resumed>, 0xb) = 0 [pid 447] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 443] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 447] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 443] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 447] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 447] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [ 54.924704][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.936484][ T24] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 54.950594][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 54.960611][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.968965][ T24] usb 3-1: Product: syz [pid 447] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 447] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 447] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 447] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 447] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [pid 445] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 444] <... futex resumed>) = 0 [pid 445] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 444] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 445] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 444] <... futex resumed>) = 0 [pid 445] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 444] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 445] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 445] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 445] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 445] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 54.973696][ T24] usb 3-1: Manufacturer: syz [ 54.978781][ T24] usb 3-1: SerialNumber: syz [pid 449] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 449] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 449] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 449] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 449] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 449] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 449] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 449] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 449] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 449] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 449] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 449] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 449] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 449] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 441] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 441] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 449] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 440] <... futex resumed>) = 0 [pid 440] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 441] <... futex resumed>) = 0 [pid 440] <... futex resumed>) = 1 [pid 441] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 440] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 441] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 441] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 441] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [ 55.045609][ T315] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.057387][ T315] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 55.071411][ T315] usb 4-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 55.080768][ T315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [pid 441] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 449] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 449] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 449] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 449] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 449] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [pid 443] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 442] <... futex resumed>) = 0 [pid 442] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 442] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 443] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 443] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [ 55.082379][ T441] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 55.089745][ T315] usb 4-1: Product: syz [ 55.101447][ T315] usb 4-1: Manufacturer: syz [ 55.106532][ T315] usb 4-1: SerialNumber: syz [pid 447] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 446] <... futex resumed>) = 0 [pid 447] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 446] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 447] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 446] <... futex resumed>) = 0 [pid 447] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 446] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 447] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 447] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 447] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 445] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 444] <... futex resumed>) = 0 [pid 445] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 444] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 445] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 444] <... futex resumed>) = 0 [pid 445] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 444] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 445] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 445] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [ 55.188281][ T447] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [pid 441] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 440] <... futex resumed>) = 0 [pid 441] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 440] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 441] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 440] <... futex resumed>) = 0 [pid 441] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 440] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 441] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 441] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [pid 449] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 448] <... futex resumed>) = 0 [pid 449] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 448] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 449] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 448] <... futex resumed>) = 0 [pid 449] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 448] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 449] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 449] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 449] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 449] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 449] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 443] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 55.302953][ T39] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 55.311074][ T39] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 55.319129][ T39] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 55.322787][ T449] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [pid 442] <... futex resumed>) = 0 [pid 442] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 443] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 442] <... futex resumed>) = 0 [pid 442] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 443] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 443] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 443] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 443] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 447] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 446] <... futex resumed>) = 0 [pid 446] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 446] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 447] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 447] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 447] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 447] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 55.354399][ T443] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [pid 445] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 444] <... futex resumed>) = 0 [pid 444] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 444] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 445] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 445] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 445] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 445] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 55.426146][ T445] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [pid 441] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 440] <... futex resumed>) = 0 [pid 441] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 440] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 440] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 441] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 441] bpf(BPF_PROG_LOAD, NULL, 0) = -1 EFAULT (Bad address) [pid 441] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 440] <... futex resumed>) = 0 [pid 440] close(3 [pid 441] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 440] <... close resumed>) = 0 [pid 440] close(4) = -1 EBADF (Bad file descriptor) [pid 440] close(5) = -1 EBADF (Bad file descriptor) [pid 440] close(6) = -1 EBADF (Bad file descriptor) [pid 440] close(7) = -1 EBADF (Bad file descriptor) [pid 440] close(8) = -1 EBADF (Bad file descriptor) [pid 440] close(9) = -1 EBADF (Bad file descriptor) [pid 440] close(10) = -1 EBADF (Bad file descriptor) [pid 440] close(11 [pid 449] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 448] <... futex resumed>) = 0 [pid 449] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 448] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 449] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 448] <... futex resumed>) = 0 [pid 449] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 448] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 449] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 449] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 449] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 449] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 440] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 440] close(12) = -1 EBADF (Bad file descriptor) [pid 440] close(13) = -1 EBADF (Bad file descriptor) [pid 440] close(14) = -1 EBADF (Bad file descriptor) [pid 440] close(15) = -1 EBADF (Bad file descriptor) [pid 440] close(16) = -1 EBADF (Bad file descriptor) [pid 440] close(17) = -1 EBADF (Bad file descriptor) [pid 440] close(18) = -1 EBADF (Bad file descriptor) [pid 440] close(19) = -1 EBADF (Bad file descriptor) [pid 440] close(20) = -1 EBADF (Bad file descriptor) [pid 440] close(21) = -1 EBADF (Bad file descriptor) [pid 440] close(22) = -1 EBADF (Bad file descriptor) [pid 440] close(23) = -1 EBADF (Bad file descriptor) [pid 440] close(24) = -1 EBADF (Bad file descriptor) [pid 440] close(25) = -1 EBADF (Bad file descriptor) [pid 440] close(26) = -1 EBADF (Bad file descriptor) [pid 440] close(27) = -1 EBADF (Bad file descriptor) [pid 440] close(28) = -1 EBADF (Bad file descriptor) [pid 440] close(29) = -1 EBADF (Bad file descriptor) [pid 440] exit_group(0 [pid 441] <... futex resumed>) = ? [pid 440] <... exit_group resumed>) = ? [pid 441] +++ exited with 0 +++ [pid 440] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=26, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 298] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./12/binderfs") = 0 [pid 298] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./12") = 0 [pid 298] mkdir("./13", 0777) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 28 ./strace-static-x86_64: Process 450 attached [pid 450] set_robust_list(0x5555951c7760, 24) = 0 [pid 450] chdir("./13") = 0 [pid 450] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 450] setpgid(0, 0) = 0 [pid 450] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 443] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 442] <... futex resumed>) = 0 [pid 450] <... openat resumed>) = 3 [pid 443] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 442] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 450] write(3, "1000", 4 [pid 443] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 442] <... futex resumed>) = 0 [pid 443] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 450] <... write resumed>) = 4 [pid 443] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 442] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 443] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [ 55.508213][ T39] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 55.524435][ T39] usb 2-1: USB disconnect, device number 14 [ 55.532781][ T39] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [pid 450] close(3executing program ) = 0 [pid 443] <... ioctl resumed>, 0x7f6727ef7130) = 26 [pid 450] symlink("/dev/binderfs", "./binderfs") = 0 [pid 450] write(1, "executing program\n", 18) = 18 [pid 450] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 450] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 450] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 450] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 450] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 450] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 450] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[29]}, 88) = 29 [pid 450] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 450] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 450] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}./strace-static-x86_64: Process 451 attached [pid 451] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 451] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 451] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 451] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 451] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 450] <... futex resumed>) = 0 [pid 450] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 451] <... futex resumed>) = 0 [pid 450] <... futex resumed>) = 1 [pid 451] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 451] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 451] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 450] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 450] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 451] <... futex resumed>) = 0 [pid 450] <... futex resumed>) = 1 [pid 451] socketpair(AF_UNIX, SOCK_STREAM, 0, [pid 450] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 451] <... socketpair resumed>NULL) = -1 EFAULT (Bad address) [pid 451] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 450] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 451] <... futex resumed>) = 0 [pid 451] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 450] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 451] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 451] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 450] <... futex resumed>) = 0 [pid 450] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 451] <... openat resumed>) = 3 [pid 451] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 451] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 451] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 451] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 447] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 446] <... futex resumed>) = 0 [pid 447] <... futex resumed>) = 1 [pid 446] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 447] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 446] <... futex resumed>) = 0 [pid 447] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 446] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 447] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [ 55.566104][ T313] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 55.572948][ T313] cdc_ncm 5-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 55.580657][ T313] cdc_ncm 5-1:1.0: setting rx_max = 2048 [pid 445] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 444] <... futex resumed>) = 0 [pid 445] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 444] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 445] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 444] <... futex resumed>) = 0 [pid 445] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 444] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 445] <... ioctl resumed>, 0x7f6727ef7130) = 26 [ 55.638419][ T319] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 55.645473][ T319] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 55.653259][ T319] cdc_ncm 1-1:1.0: setting rx_max = 2048 [pid 449] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 448] <... futex resumed>) = 0 [pid 449] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 448] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 449] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 448] <... futex resumed>) = 0 [pid 449] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 448] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 449] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 449] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [pid 443] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 442] <... futex resumed>) = 0 [pid 442] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 443] bpf(BPF_PROG_LOAD, NULL, 0 [pid 442] <... futex resumed>) = 0 [pid 442] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 443] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 443] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 442] <... futex resumed>) = 0 [pid 443] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 442] close(3) = 0 [pid 442] close(4) = -1 EBADF (Bad file descriptor) [pid 442] close(5) = -1 EBADF (Bad file descriptor) [pid 442] close(6) = -1 EBADF (Bad file descriptor) [pid 442] close(7) = -1 EBADF (Bad file descriptor) [pid 442] close(8) = -1 EBADF (Bad file descriptor) [pid 442] close(9) = -1 EBADF (Bad file descriptor) [pid 442] close(10) = -1 EBADF (Bad file descriptor) [pid 442] close(11) = -1 EBADF (Bad file descriptor) [pid 442] close(12) = -1 EBADF (Bad file descriptor) [pid 442] close(13) = -1 EBADF (Bad file descriptor) [pid 442] close(14) = -1 EBADF (Bad file descriptor) [pid 442] close(15) = -1 EBADF (Bad file descriptor) [pid 442] close(16) = -1 EBADF (Bad file descriptor) [pid 442] close(17) = -1 EBADF (Bad file descriptor) [pid 442] close(18) = -1 EBADF (Bad file descriptor) [pid 442] close(19) = -1 EBADF (Bad file descriptor) [pid 442] close(20) = -1 EBADF (Bad file descriptor) [pid 442] close(21) = -1 EBADF (Bad file descriptor) [pid 442] close(22) = -1 EBADF (Bad file descriptor) [pid 442] close(23) = -1 EBADF (Bad file descriptor) [pid 442] close(24) = -1 EBADF (Bad file descriptor) [pid 442] close(25) = -1 EBADF (Bad file descriptor) [pid 442] close(26) = -1 EBADF (Bad file descriptor) [pid 442] close(27) = -1 EBADF (Bad file descriptor) [pid 442] close(28) = -1 EBADF (Bad file descriptor) [pid 442] close(29) = -1 EBADF (Bad file descriptor) [pid 442] exit_group(0 [pid 443] <... futex resumed>) = ? [pid 442] <... exit_group resumed>) = ? [pid 443] +++ exited with 0 +++ [pid 442] +++ exited with 0 +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=26, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 301] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 301] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 301] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./12/binderfs") = 0 [pid 301] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./12") = 0 [pid 301] mkdir("./13", 0777) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 28 ./strace-static-x86_64: Process 452 attached [pid 452] set_robust_list(0x5555951c7760, 24) = 0 [pid 452] chdir("./13") = 0 [pid 452] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 452] setpgid(0, 0) = 0 [pid 452] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 447] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 446] <... futex resumed>) = 0 [pid 447] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 446] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 447] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 446] <... futex resumed>) = 0 [pid 447] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 446] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 447] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 447] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 452] <... openat resumed>) = 3 [pid 452] write(3, "1000", 4) = 4 [pid 452] close(3) = 0 [pid 452] symlink("/dev/binderfs", "./binderfs") = 0 [pid 452] write(1, "executing program\n", 18executing program ) = 18 [pid 452] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 452] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 452] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 452] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 452] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 452] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 452] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[29]}, 88) = 29 [pid 452] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 452] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 452] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}./strace-static-x86_64: Process 453 attached [pid 453] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 453] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 453] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 453] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 452] <... futex resumed>) = 0 [pid 452] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 452] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 453] <... futex resumed>) = 1 [pid 453] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 453] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 452] <... futex resumed>) = 0 [pid 452] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 452] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 453] <... futex resumed>) = 1 [pid 453] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 453] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 452] <... futex resumed>) = 0 [pid 452] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 452] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 453] <... futex resumed>) = 1 [pid 453] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 453] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 453] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 447] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 447] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 447] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 453] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 447] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 453] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 453] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 445] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 444] <... futex resumed>) = 0 [pid 445] bpf(BPF_PROG_LOAD, NULL, 0 [pid 444] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 445] <... bpf resumed>) = -1 EFAULT (Bad address) [ 55.784435][ T313] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 55.797925][ T313] usb 5-1: USB disconnect, device number 14 [ 55.805170][ T447] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 55.812978][ T313] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [pid 444] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 445] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 444] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 445] <... futex resumed>) = 0 [pid 444] close(3 [pid 445] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 444] <... close resumed>) = 0 [pid 444] close(4) = -1 EBADF (Bad file descriptor) [pid 444] close(5) = -1 EBADF (Bad file descriptor) [pid 444] close(6) = -1 EBADF (Bad file descriptor) [pid 444] close(7) = -1 EBADF (Bad file descriptor) [pid 444] close(8) = -1 EBADF (Bad file descriptor) [pid 444] close(9) = -1 EBADF (Bad file descriptor) [pid 444] close(10) = -1 EBADF (Bad file descriptor) [pid 444] close(11) = -1 EBADF (Bad file descriptor) [pid 444] close(12) = -1 EBADF (Bad file descriptor) [pid 444] close(13) = -1 EBADF (Bad file descriptor) [pid 444] close(14) = -1 EBADF (Bad file descriptor) [pid 444] close(15) = -1 EBADF (Bad file descriptor) [pid 444] close(16) = -1 EBADF (Bad file descriptor) [pid 444] close(17) = -1 EBADF (Bad file descriptor) [pid 444] close(18) = -1 EBADF (Bad file descriptor) [pid 444] close(19) = -1 EBADF (Bad file descriptor) [pid 444] close(20) = -1 EBADF (Bad file descriptor) [pid 444] close(21) = -1 EBADF (Bad file descriptor) [pid 444] close(22) = -1 EBADF (Bad file descriptor) [pid 444] close(23) = -1 EBADF (Bad file descriptor) [pid 444] close(24) = -1 EBADF (Bad file descriptor) [pid 444] close(25) = -1 EBADF (Bad file descriptor) [pid 444] close(26) = -1 EBADF (Bad file descriptor) [pid 444] close(27) = -1 EBADF (Bad file descriptor) [pid 444] close(28) = -1 EBADF (Bad file descriptor) [pid 444] close(29) = -1 EBADF (Bad file descriptor) [pid 444] exit_group(0) = ? [pid 445] <... futex resumed>) = ? [pid 445] +++ exited with 0 +++ [pid 444] +++ exited with 0 +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=26, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 299] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 299] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 299] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./12/binderfs") = 0 [pid 299] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./12") = 0 [pid 299] mkdir("./13", 0777) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 454 attached [pid 454] set_robust_list(0x5555951c7760, 24) = 0 [pid 299] <... clone resumed>, child_tidptr=0x5555951c7750) = 28 [pid 454] chdir("./13") = 0 [pid 454] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 454] setpgid(0, 0) = 0 [pid 454] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 454] write(3, "1000", 4) = 4 [pid 454] close(3) = 0 [pid 454] symlink("/dev/binderfs", "./binderfs") = 0 [pid 454] write(1, "executing program\n", 18executing program ) = 18 [pid 454] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 454] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 454] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 454] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 454] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 454] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 454] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[29]}, 88) = 29 ./strace-static-x86_64: Process 455 attached [pid 454] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 454] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 454] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 455] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 455] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 455] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 455] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 454] <... futex resumed>) = 0 [pid 454] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 454] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 455] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 455] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 454] <... futex resumed>) = 0 [pid 454] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 454] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 455] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 455] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 454] <... futex resumed>) = 0 [pid 454] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 454] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 455] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 455] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 455] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 455] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 55.856062][ T319] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 55.880012][ T319] usb 1-1: USB disconnect, device number 14 [ 55.893266][ T319] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [pid 455] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 449] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 448] <... futex resumed>) = 0 [pid 448] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 449] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 448] <... futex resumed>) = 0 [pid 449] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 448] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 449] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 449] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 449] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 55.946125][ T449] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [pid 451] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 451] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 451] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 447] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 446] <... futex resumed>) = 0 [pid 447] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 446] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 447] <... futex resumed>) = 0 [pid 446] <... futex resumed>) = 1 [pid 447] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 446] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 447] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 447] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [ 56.002233][ T39] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 56.027884][ T24] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 56.034813][ T24] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 56.042687][ T24] cdc_ncm 3-1:1.0: setting rx_max = 2048 [pid 449] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 448] <... futex resumed>) = 0 [pid 448] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 448] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 449] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 449] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [pid 451] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 451] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 451] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 451] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 451] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 451] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 451] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 451] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 451] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 451] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 451] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 451] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 451] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 56.158604][ T315] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 56.165736][ T315] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 56.175485][ T315] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 56.185288][ T39] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 451] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 451] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 453] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 453] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 447] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 446] <... futex resumed>) = 0 [pid 447] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 446] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 447] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 446] <... futex resumed>) = 0 [pid 453] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 447] bpf(BPF_PROG_LOAD, NULL, 0 [pid 446] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 453] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 447] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 447] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 446] <... futex resumed>) = 0 [pid 447] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 446] close(3) = 0 [pid 446] close(4) = -1 EBADF (Bad file descriptor) [pid 446] close(5) = -1 EBADF (Bad file descriptor) [pid 446] close(6) = -1 EBADF (Bad file descriptor) [pid 446] close(7) = -1 EBADF (Bad file descriptor) [pid 446] close(8) = -1 EBADF (Bad file descriptor) [pid 446] close(9) = -1 EBADF (Bad file descriptor) [pid 446] close(10) = -1 EBADF (Bad file descriptor) [pid 446] close(11) = -1 EBADF (Bad file descriptor) [pid 446] close(12) = -1 EBADF (Bad file descriptor) [pid 446] close(13) = -1 EBADF (Bad file descriptor) [pid 446] close(14) = -1 EBADF (Bad file descriptor) [pid 446] close(15) = -1 EBADF (Bad file descriptor) [ 56.198805][ T39] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 56.214173][ T39] usb 2-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 56.224055][ T313] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 56.232069][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.240552][ T39] usb 2-1: Product: syz [ 56.245038][ T39] usb 2-1: Manufacturer: syz [ 56.251808][ T39] usb 2-1: SerialNumber: syz [pid 446] close(16) = -1 EBADF (Bad file descriptor) [pid 446] close(17) = -1 EBADF (Bad file descriptor) [pid 446] close(18) = -1 EBADF (Bad file descriptor) [pid 446] close(19) = -1 EBADF (Bad file descriptor) [pid 446] close(20) = -1 EBADF (Bad file descriptor) [pid 446] close(21) = -1 EBADF (Bad file descriptor) [pid 446] close(22) = -1 EBADF (Bad file descriptor) [pid 446] close(23) = -1 EBADF (Bad file descriptor) [pid 446] close(24) = -1 EBADF (Bad file descriptor) [pid 446] close(25) = -1 EBADF (Bad file descriptor) [pid 446] close(26) = -1 EBADF (Bad file descriptor) [pid 446] close(27) = -1 EBADF (Bad file descriptor) [pid 446] close(28) = -1 EBADF (Bad file descriptor) [pid 446] close(29) = -1 EBADF (Bad file descriptor) [pid 446] exit_group(0 [pid 447] <... futex resumed>) = ? [pid 446] <... exit_group resumed>) = ? [pid 447] +++ exited with 0 +++ [pid 446] +++ exited with 0 +++ [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=26, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 302] restart_syscall(<... resuming interrupted clone ...> [pid 451] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 451] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 451] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 451] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 451] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [pid 302] <... restart_syscall resumed>) = 0 [pid 302] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 302] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 302] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 302] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] unlink("./12/binderfs") = 0 [pid 302] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 302] close(3) = 0 [pid 302] rmdir("./12") = 0 [pid 302] mkdir("./13", 0777) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 28 ./strace-static-x86_64: Process 456 attached [pid 456] set_robust_list(0x5555951c7760, 24) = 0 [pid 456] chdir("./13") = 0 [pid 456] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 456] setpgid(0, 0) = 0 [pid 456] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 456] write(3, "1000", 4) = 4 [pid 456] close(3) = 0 [pid 456] symlink("/dev/binderfs", "./binderfs") = 0 [pid 456] write(1, "executing program\n", 18executing program ) = 18 [pid 456] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 456] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 456] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 456] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 456] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 456] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 456] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[29]}, 88) = 29 [pid 456] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 456] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 456] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}./strace-static-x86_64: Process 457 attached [pid 457] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 457] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 457] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 457] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 456] <... futex resumed>) = 0 [pid 456] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 457] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 456] <... futex resumed>) = 0 [pid 457] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 456] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 457] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 456] <... futex resumed>) = 0 [pid 457] socketpair(AF_UNIX, SOCK_STREAM, 0, [pid 456] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 457] <... socketpair resumed>NULL) = -1 EFAULT (Bad address) [pid 456] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 457] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 456] <... futex resumed>) = 0 [pid 456] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 457] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 456] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 457] <... openat resumed>) = 3 [pid 457] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 457] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 457] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 56.258281][ T24] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 56.273221][ T24] usb 3-1: USB disconnect, device number 14 [ 56.280406][ T24] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [pid 457] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 455] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 455] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 455] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 449] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 448] <... futex resumed>) = 0 [pid 449] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 448] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 449] bpf(BPF_PROG_LOAD, NULL, 0 [pid 448] <... futex resumed>) = 0 [pid 449] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 448] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [ 56.312200][ T319] usb 1-1: new high-speed USB device number 15 using dummy_hcd [pid 449] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 448] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 449] <... futex resumed>) = 0 [pid 448] close(3 [pid 449] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 448] <... close resumed>) = 0 [pid 448] close(4) = -1 EBADF (Bad file descriptor) [pid 448] close(5) = -1 EBADF (Bad file descriptor) [pid 448] close(6) = -1 EBADF (Bad file descriptor) [pid 448] close(7) = -1 EBADF (Bad file descriptor) [pid 448] close(8) = -1 EBADF (Bad file descriptor) [pid 448] close(9) = -1 EBADF (Bad file descriptor) [pid 448] close(10) = -1 EBADF (Bad file descriptor) [pid 448] close(11) = -1 EBADF (Bad file descriptor) [pid 448] close(12) = -1 EBADF (Bad file descriptor) [pid 448] close(13) = -1 EBADF (Bad file descriptor) [pid 448] close(14) = -1 EBADF (Bad file descriptor) [pid 448] close(15) = -1 EBADF (Bad file descriptor) [pid 448] close(16) = -1 EBADF (Bad file descriptor) [pid 448] close(17) = -1 EBADF (Bad file descriptor) [pid 448] close(18) = -1 EBADF (Bad file descriptor) [pid 448] close(19) = -1 EBADF (Bad file descriptor) [pid 448] close(20) = -1 EBADF (Bad file descriptor) [pid 448] close(21) = -1 EBADF (Bad file descriptor) [pid 448] close(22) = -1 EBADF (Bad file descriptor) [pid 448] close(23) = -1 EBADF (Bad file descriptor) [pid 448] close(24) = -1 EBADF (Bad file descriptor) [pid 448] close(25) = -1 EBADF (Bad file descriptor) [pid 448] close(26) = -1 EBADF (Bad file descriptor) [pid 448] close(27) = -1 EBADF (Bad file descriptor) [pid 448] close(28) = -1 EBADF (Bad file descriptor) [pid 448] close(29) = -1 EBADF (Bad file descriptor) [pid 448] exit_group(0) = ? [pid 449] <... futex resumed>) = ? [pid 449] +++ exited with 0 +++ [pid 448] +++ exited with 0 +++ [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=26, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 300] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 300] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 300] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./12/binderfs") = 0 [pid 300] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./12") = 0 [pid 300] mkdir("./13", 0777) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 28 ./strace-static-x86_64: Process 458 attached [pid 458] set_robust_list(0x5555951c7760, 24) = 0 [pid 458] chdir("./13"executing program ) = 0 [pid 458] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 458] setpgid(0, 0) = 0 [pid 458] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 458] write(3, "1000", 4) = 4 [pid 458] close(3) = 0 [pid 458] symlink("/dev/binderfs", "./binderfs") = 0 [pid 458] write(1, "executing program\n", 18) = 18 [pid 458] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 458] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 458] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 458] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 458] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 458] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 458] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[29]}, 88) = 29 [pid 458] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 458] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 458] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}./strace-static-x86_64: Process 459 attached [pid 459] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 459] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 459] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 459] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 458] <... futex resumed>) = 0 [pid 459] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 458] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 459] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 458] <... futex resumed>) = 0 [pid 459] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 458] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 459] <... futex resumed>) = 0 [pid 458] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 459] socketpair(AF_UNIX, SOCK_STREAM, 0, [pid 458] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 459] <... socketpair resumed>NULL) = -1 EFAULT (Bad address) [pid 458] <... futex resumed>) = 0 [pid 459] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 458] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 459] <... futex resumed>) = 0 [pid 458] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 459] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 458] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 459] <... openat resumed>) = 3 [pid 458] <... futex resumed>) = 0 [pid 459] ioctl(3, USB_RAW_IOCTL_INIT [pid 458] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 459] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 459] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 459] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 459] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 453] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 453] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 453] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 453] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 453] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 56.363929][ T315] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 56.383540][ T315] usb 4-1: USB disconnect, device number 14 [ 56.391075][ T315] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [pid 453] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 453] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 453] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 453] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 453] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 453] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 453] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 453] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 453] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 453] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 451] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 450] <... futex resumed>) = 0 [pid 451] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 450] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 451] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 450] <... futex resumed>) = 0 [pid 451] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [ 56.424092][ T313] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.436318][ T313] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 56.452916][ T313] usb 5-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 56.462379][ T313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [pid 450] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 451] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 451] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 451] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 451] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 451] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 455] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 455] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 455] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 455] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 455] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 453] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 455] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 453] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 453] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 453] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 453] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 455] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 453] <... ioctl resumed>, 0x7f6727ef7110) = 0 [pid 455] <... ioctl resumed>, 0x7f6727ef7110) = 100 [pid 455] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 455] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 455] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 455] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 455] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 455] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 455] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 455] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [ 56.470906][ T313] usb 5-1: Product: syz [ 56.475328][ T313] usb 5-1: Manufacturer: syz [ 56.477395][ T451] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 56.480068][ T313] usb 5-1: SerialNumber: syz [ 56.495400][ T319] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.507815][ T319] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [pid 455] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 455] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 455] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 455] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 455] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [ 56.523009][ T319] usb 1-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 56.532982][ T319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.541048][ T319] usb 1-1: Product: syz [ 56.546223][ T319] usb 1-1: Manufacturer: syz [ 56.551005][ T319] usb 1-1: SerialNumber: syz [pid 451] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 450] <... futex resumed>) = 0 [pid 451] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 450] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 451] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 450] <... futex resumed>) = 0 [pid 451] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 450] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 451] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 451] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 451] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 451] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 453] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 452] <... futex resumed>) = 0 [pid 453] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 452] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 453] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 452] <... futex resumed>) = 0 [pid 453] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 452] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 453] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 453] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 453] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 451] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 457] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 457] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 457] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 453] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 453] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 453] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 56.692169][ T24] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 56.699564][ T453] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [pid 455] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 454] <... futex resumed>) = 0 [pid 454] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 454] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 455] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 455] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 455] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 455] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 455] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 56.759833][ T455] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [pid 459] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 459] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [ 56.802216][ T315] usb 4-1: new high-speed USB device number 15 using dummy_hcd [pid 459] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 457] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 457] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 457] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 457] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 457] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 457] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 457] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 457] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 457] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 457] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 451] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 457] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 451] <... futex resumed>) = 1 [pid 450] <... futex resumed>) = 0 [pid 450] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 450] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 457] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 451] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 457] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 451] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 457] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 451] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 457] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 451] <... ioctl resumed>, 0x7f6727ef7130) = 28 [pid 457] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 457] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 453] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 452] <... futex resumed>) = 0 [pid 453] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 452] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 453] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 452] <... futex resumed>) = 0 [pid 453] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 452] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 453] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 453] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 453] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 453] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 457] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 453] <... ioctl resumed>, 0x7f6727ef7130) = 0 [ 56.875090][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.887857][ T24] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 56.904168][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 56.913853][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [pid 457] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 457] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 457] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 457] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 457] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [pid 455] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 454] <... futex resumed>) = 0 [pid 455] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 454] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 455] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 454] <... futex resumed>) = 0 [pid 455] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 454] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 455] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 455] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 455] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 455] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 56.922553][ T24] usb 3-1: Product: syz [ 56.927496][ T24] usb 3-1: Manufacturer: syz [ 56.932795][ T24] usb 3-1: SerialNumber: syz [pid 459] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 459] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 459] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 459] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 459] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 459] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 459] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 459] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 459] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 459] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 459] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 459] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 459] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 459] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [ 57.005025][ T315] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.016717][ T315] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 57.031821][ T315] usb 4-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 57.043204][ T315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [pid 459] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 459] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 459] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 459] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 459] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [pid 451] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 450] <... futex resumed>) = 0 [pid 451] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 450] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 451] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 450] <... futex resumed>) = 0 [pid 451] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 450] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 451] <... ioctl resumed>, 0x7f6727ef8140) = 0 [ 57.051690][ T315] usb 4-1: Product: syz [ 57.056930][ T315] usb 4-1: Manufacturer: syz [ 57.062316][ T315] usb 4-1: SerialNumber: syz [pid 451] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 451] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 451] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 453] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 452] <... futex resumed>) = 0 [pid 453] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 452] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 453] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 452] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 453] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 453] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [pid 457] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 456] <... futex resumed>) = 0 [pid 457] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 456] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 457] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 456] <... futex resumed>) = 0 [pid 457] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 456] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 457] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 457] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 457] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 457] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 457] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 455] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 454] <... futex resumed>) = 0 [pid 455] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 454] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 455] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 454] <... futex resumed>) = 0 [pid 455] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 454] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 455] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 455] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [ 57.104816][ T451] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 57.141294][ T457] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [pid 459] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 458] <... futex resumed>) = 0 [pid 459] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 458] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 458] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 459] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 459] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 459] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 459] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 459] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 459] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 57.272280][ T459] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [pid 451] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 451] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 450] <... futex resumed>) = 0 [pid 450] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 451] <... futex resumed>) = 0 [pid 450] <... futex resumed>) = 1 [pid 451] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 450] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 451] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 451] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [pid 453] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 452] <... futex resumed>) = 0 [pid 453] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 452] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 453] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 452] <... futex resumed>) = 0 [pid 453] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 452] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 453] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 453] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 453] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 453] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 457] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 456] <... futex resumed>) = 0 [pid 456] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 456] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 457] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 457] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 457] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 457] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 455] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 454] <... futex resumed>) = 0 [pid 454] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 57.315999][ T39] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 57.322988][ T39] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 57.330877][ T39] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 57.335188][ T453] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [pid 454] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 455] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 455] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 455] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 455] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 57.376736][ T455] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [pid 459] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 458] <... futex resumed>) = 0 [pid 459] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 458] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 459] <... futex resumed>) = 0 [pid 458] <... futex resumed>) = 1 [pid 459] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 458] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 459] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 459] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 459] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 459] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 451] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 450] <... futex resumed>) = 0 [pid 450] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 450] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 451] bpf(BPF_PROG_LOAD, NULL, 0) = -1 EFAULT (Bad address) [pid 451] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 450] <... futex resumed>) = 0 [pid 450] close(3 [pid 451] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 450] <... close resumed>) = 0 [pid 450] close(4) = -1 EBADF (Bad file descriptor) [pid 450] close(5) = -1 EBADF (Bad file descriptor) [pid 450] close(6) = -1 EBADF (Bad file descriptor) [pid 450] close(7) = -1 EBADF (Bad file descriptor) [pid 450] close(8) = -1 EBADF (Bad file descriptor) [pid 450] close(9) = -1 EBADF (Bad file descriptor) [pid 450] close(10) = -1 EBADF (Bad file descriptor) [pid 450] close(11) = -1 EBADF (Bad file descriptor) [pid 450] close(12) = -1 EBADF (Bad file descriptor) [pid 450] close(13) = -1 EBADF (Bad file descriptor) [pid 450] close(14) = -1 EBADF (Bad file descriptor) [pid 450] close(15) = -1 EBADF (Bad file descriptor) [pid 450] close(16) = -1 EBADF (Bad file descriptor) [pid 450] close(17) = -1 EBADF (Bad file descriptor) [pid 450] close(18) = -1 EBADF (Bad file descriptor) [pid 450] close(19) = -1 EBADF (Bad file descriptor) [pid 450] close(20) = -1 EBADF (Bad file descriptor) [pid 450] close(21) = -1 EBADF (Bad file descriptor) [pid 450] close(22) = -1 EBADF (Bad file descriptor) [pid 450] close(23) = -1 EBADF (Bad file descriptor) [pid 450] close(24) = -1 EBADF (Bad file descriptor) [pid 450] close(25) = -1 EBADF (Bad file descriptor) [pid 450] close(26) = -1 EBADF (Bad file descriptor) [pid 450] close(27) = -1 EBADF (Bad file descriptor) [pid 450] close(28) = -1 EBADF (Bad file descriptor) [pid 450] close(29) = -1 EBADF (Bad file descriptor) [pid 450] exit_group(0 [pid 451] <... futex resumed>) = ? [pid 450] <... exit_group resumed>) = ? [pid 451] +++ exited with 0 +++ [pid 450] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=28, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 298] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 298] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./13/binderfs") = 0 [pid 298] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./13") = 0 [pid 298] mkdir("./14", 0777) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 30 ./strace-static-x86_64: Process 460 attached [pid 460] set_robust_list(0x5555951c7760, 24) = 0 [pid 460] chdir("./14") = 0 [pid 460] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 460] setpgid(0, 0) = 0 [pid 460] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 460] write(3, "1000", 4) = 4 [pid 460] close(3) = 0 [pid 453] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 452] <... futex resumed>) = 0 [pid 453] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 452] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 453] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 452] <... futex resumed>) = 0 [pid 453] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 452] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 453] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 453] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 460] symlink("/dev/binderfs", "./binderfs") = 0 [pid 460] write(1, "executing program\n", 18executing program ) = 18 [pid 453] <... ioctl resumed>, 0x7f6727ef7130) = 26 [pid 460] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 460] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 460] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 460] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 460] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 460] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 460] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[31]}, 88) = 31 [pid 460] rt_sigprocmask(SIG_SETMASK, [], [pid 457] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 456] <... futex resumed>) = 0 [pid 457] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 456] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 457] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 456] <... futex resumed>) = 0 [pid 457] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 456] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 457] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 457] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 460] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 460] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 460] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}./strace-static-x86_64: Process 461 attached [pid 461] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 461] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 461] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 461] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 457] <... ioctl resumed>, 0x7f6727ef7130) = 28 [pid 460] <... futex resumed>) = 0 [pid 460] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 460] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 461] <... futex resumed>) = 1 [pid 461] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 461] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 460] <... futex resumed>) = 0 [pid 460] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 460] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 461] <... futex resumed>) = 1 [pid 461] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 461] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 460] <... futex resumed>) = 0 [pid 460] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 460] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 461] <... futex resumed>) = 1 [pid 461] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 461] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 461] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 461] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 57.525467][ T39] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 57.541452][ T39] usb 2-1: USB disconnect, device number 15 [ 57.547776][ T313] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 57.555663][ T39] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 57.565542][ T313] cdc_ncm 5-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [pid 461] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 455] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 454] <... futex resumed>) = 0 [pid 455] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 454] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 455] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 454] <... futex resumed>) = 0 [pid 455] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 454] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 455] <... ioctl resumed>, 0x7f6727ef7130) = 26 [ 57.573657][ T313] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 57.587819][ T319] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 57.595108][ T319] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 57.603636][ T319] cdc_ncm 1-1:1.0: setting rx_max = 2048 [pid 459] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 458] <... futex resumed>) = 0 [pid 459] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 458] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 459] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 458] <... futex resumed>) = 0 [pid 459] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 458] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 459] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 459] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [pid 453] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 452] <... futex resumed>) = 0 [pid 452] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 452] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 453] bpf(BPF_PROG_LOAD, NULL, 0) = -1 EFAULT (Bad address) [pid 453] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 452] <... futex resumed>) = 0 [pid 453] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 452] close(3) = 0 [pid 457] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 452] close(4 [pid 457] <... futex resumed>) = 1 [pid 456] <... futex resumed>) = 0 [pid 452] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 457] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 456] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 452] close(5 [pid 457] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 456] <... futex resumed>) = 0 [pid 452] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 457] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 456] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 452] close(6 [pid 457] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 457] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 452] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 452] close(7 [pid 457] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 452] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 457] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 457] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 452] close(8) = -1 EBADF (Bad file descriptor) [pid 452] close(9) = -1 EBADF (Bad file descriptor) [pid 452] close(10) = -1 EBADF (Bad file descriptor) [pid 452] close(11) = -1 EBADF (Bad file descriptor) [pid 452] close(12) = -1 EBADF (Bad file descriptor) [pid 452] close(13) = -1 EBADF (Bad file descriptor) [pid 452] close(14) = -1 EBADF (Bad file descriptor) [pid 452] close(15) = -1 EBADF (Bad file descriptor) [pid 452] close(16 [pid 455] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 452] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 455] <... futex resumed>) = 1 [pid 454] <... futex resumed>) = 0 [pid 452] close(17 [pid 455] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 454] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 452] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 455] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 454] <... futex resumed>) = 0 [pid 455] bpf(BPF_PROG_LOAD, NULL, 0 [pid 454] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 452] close(18 [pid 455] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 452] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 455] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 452] close(19 [pid 455] <... futex resumed>) = 1 [pid 454] <... futex resumed>) = 0 [pid 452] <... close resumed>) = -1 EBADF (Bad file descriptor) [ 57.752724][ T313] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 57.770328][ T313] usb 5-1: USB disconnect, device number 15 [ 57.774523][ T457] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 57.778543][ T313] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [pid 455] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 454] close(3) = 0 [pid 452] close(20 [pid 454] close(4) = -1 EBADF (Bad file descriptor) [pid 454] close(5) = -1 EBADF (Bad file descriptor) [pid 454] close(6) = -1 EBADF (Bad file descriptor) [pid 454] close(7) = -1 EBADF (Bad file descriptor) [pid 454] close(8) = -1 EBADF (Bad file descriptor) [pid 454] close(9) = -1 EBADF (Bad file descriptor) [pid 454] close(10) = -1 EBADF (Bad file descriptor) [pid 454] close(11) = -1 EBADF (Bad file descriptor) [pid 454] close(12) = -1 EBADF (Bad file descriptor) [pid 454] close(13) = -1 EBADF (Bad file descriptor) [pid 454] close(14) = -1 EBADF (Bad file descriptor) [pid 454] close(15) = -1 EBADF (Bad file descriptor) [pid 454] close(16) = -1 EBADF (Bad file descriptor) [pid 454] close(17) = -1 EBADF (Bad file descriptor) [pid 454] close(18) = -1 EBADF (Bad file descriptor) [pid 454] close(19) = -1 EBADF (Bad file descriptor) [pid 454] close(20) = -1 EBADF (Bad file descriptor) [pid 454] close(21) = -1 EBADF (Bad file descriptor) [pid 454] close(22) = -1 EBADF (Bad file descriptor) [pid 454] close(23) = -1 EBADF (Bad file descriptor) [pid 454] close(24) = -1 EBADF (Bad file descriptor) [pid 454] close(25) = -1 EBADF (Bad file descriptor) [pid 454] close(26) = -1 EBADF (Bad file descriptor) [pid 454] close(27) = -1 EBADF (Bad file descriptor) [pid 454] close(28) = -1 EBADF (Bad file descriptor) [pid 454] close(29) = -1 EBADF (Bad file descriptor) [pid 454] exit_group(0 [pid 455] <... futex resumed>) = ? [pid 454] <... exit_group resumed>) = ? [pid 455] +++ exited with 0 +++ [pid 454] +++ exited with 0 +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=28, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 299] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 299] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 299] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 452] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 299] unlink("./13/binderfs" [pid 452] close(21 [pid 299] <... unlink resumed>) = 0 [pid 452] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 299] getdents64(3, [pid 452] close(22 [pid 299] <... getdents64 resumed>0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 452] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 299] close(3 [pid 452] close(23 [pid 299] <... close resumed>) = 0 [pid 452] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 299] rmdir("./13" [pid 452] close(24 [pid 299] <... rmdir resumed>) = 0 [pid 452] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 299] mkdir("./14", 0777 [pid 452] close(25 [pid 299] <... mkdir resumed>) = 0 [pid 452] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 452] close(26 [pid 299] <... clone resumed>, child_tidptr=0x5555951c7750) = 30 ./strace-static-x86_64: Process 462 attached [pid 452] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 452] close(27) = -1 EBADF (Bad file descriptor) [pid 452] close(28) = -1 EBADF (Bad file descriptor) [pid 452] close(29) = -1 EBADF (Bad file descriptor) [pid 452] exit_group(0 [pid 453] <... futex resumed>) = ? [pid 452] <... exit_group resumed>) = ? [pid 453] +++ exited with 0 +++ [pid 462] set_robust_list(0x5555951c7760, 24) = 0 [pid 462] chdir("./14" [pid 452] +++ exited with 0 +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=28, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 301] restart_syscall(<... resuming interrupted clone ...> [pid 462] <... chdir resumed>) = 0 [pid 462] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 462] setpgid(0, 0) = 0 [pid 462] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 462] write(3, "1000", 4) = 4 [pid 462] close(3) = 0 [pid 462] symlink("/dev/binderfs", "./binderfs") = 0 [pid 462] write(1, "executing program\n", 18executing program ) = 18 [pid 462] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 462] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 462] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 462] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 462] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE [pid 301] <... restart_syscall resumed>) = 0 [pid 301] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 301] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./13/binderfs" [pid 462] <... mprotect resumed>) = 0 [pid 301] <... unlink resumed>) = 0 [pid 301] getdents64(3, [pid 462] rt_sigprocmask(SIG_BLOCK, ~[], [pid 301] <... getdents64 resumed>0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./13" [pid 462] <... rt_sigprocmask resumed>[], 8) = 0 [pid 301] <... rmdir resumed>) = 0 [pid 462] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} [pid 301] mkdir("./14", 0777) = 0 [pid 462] <... clone3 resumed> => {parent_tid=[31]}, 88) = 31 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 462] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 301] <... clone resumed>, child_tidptr=0x5555951c7750) = 30 [pid 462] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 462] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}./strace-static-x86_64: Process 463 attached [pid 463] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 463] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 463] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 463] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 462] <... futex resumed>) = 0 [pid 462] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 462] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 463] <... futex resumed>) = 1 [pid 463] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 463] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 462] <... futex resumed>) = 0 [pid 462] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 462] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 463] <... futex resumed>) = 1 [pid 463] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 463] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 462] <... futex resumed>) = 0 [pid 462] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 462] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 463] <... futex resumed>) = 1 [pid 463] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 463] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 463] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 463] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 463] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH./strace-static-x86_64: Process 464 attached [pid 464] set_robust_list(0x5555951c7760, 24) = 0 [pid 464] chdir("./14") = 0 [pid 464] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 464] setpgid(0, 0) = 0 [pid 464] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 464] write(3, "1000", 4) = 4 [ 57.806662][ T319] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 57.846807][ T319] usb 1-1: USB disconnect, device number 15 [pid 464] close(3) = 0 [pid 464] symlink("/dev/binderfs", "./binderfs") = 0 [pid 459] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000executing program [pid 464] write(1, "executing program\n", 18 [pid 459] <... futex resumed>) = 1 [pid 458] <... futex resumed>) = 0 [pid 464] <... write resumed>) = 18 [pid 464] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 459] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 458] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 464] <... futex resumed>) = 0 [pid 459] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 458] <... futex resumed>) = 0 [pid 459] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 458] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 464] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 464] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 464] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 464] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 464] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 464] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0}./strace-static-x86_64: Process 466 attached => {parent_tid=[31]}, 88) = 31 [pid 464] rt_sigprocmask(SIG_SETMASK, [], [pid 466] set_robust_list(0x7f6727ef99a0, 24 [pid 464] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 464] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 466] <... set_robust_list resumed>) = 0 [pid 464] <... futex resumed>) = 0 [pid 464] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 466] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 459] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 459] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 459] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 466] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0 [pid 459] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 466] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 466] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 464] <... futex resumed>) = 0 [pid 466] <... futex resumed>) = 1 [pid 464] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 464] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 466] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 466] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 464] <... futex resumed>) = 0 [pid 464] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 464] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 466] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 466] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 464] <... futex resumed>) = 0 [pid 466] <... futex resumed>) = 1 [pid 464] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 464] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 466] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 466] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 466] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 466] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 57.871620][ T319] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 57.886754][ T459] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [pid 466] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 461] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 461] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 461] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 457] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 457] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 456] <... futex resumed>) = 0 [pid 456] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 457] <... futex resumed>) = 0 [pid 456] <... futex resumed>) = 1 [pid 457] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 456] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 457] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 457] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [ 57.972259][ T39] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 58.000603][ T24] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 58.008176][ T24] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 58.017674][ T24] cdc_ncm 3-1:1.0: setting rx_max = 2048 [pid 459] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 458] <... futex resumed>) = 0 [pid 458] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 458] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 459] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 459] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [pid 461] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 461] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 461] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 461] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 461] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 58.103948][ T315] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 58.110894][ T315] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 58.118885][ T315] cdc_ncm 4-1:1.0: setting rx_max = 2048 [pid 461] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 461] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 461] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 461] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 461] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 461] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 461] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 461] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 461] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 461] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 457] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 456] <... futex resumed>) = 0 [pid 457] bpf(BPF_PROG_LOAD, NULL, 0 [pid 456] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 457] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 456] <... futex resumed>) = 0 [pid 457] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 456] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 457] <... futex resumed>) = 0 [pid 456] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 457] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 456] close(3) = 0 [pid 456] close(4) = -1 EBADF (Bad file descriptor) [pid 456] close(5) = -1 EBADF (Bad file descriptor) [pid 456] close(6) = -1 EBADF (Bad file descriptor) [pid 456] close(7) = -1 EBADF (Bad file descriptor) [pid 456] close(8) = -1 EBADF (Bad file descriptor) [ 58.163710][ T39] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.175903][ T39] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 58.190224][ T39] usb 2-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 58.200172][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.208687][ T39] usb 2-1: Product: syz [pid 456] close(9) = -1 EBADF (Bad file descriptor) [pid 456] close(10) = -1 EBADF (Bad file descriptor) [pid 456] close(11) = -1 EBADF (Bad file descriptor) [pid 456] close(12) = -1 EBADF (Bad file descriptor) [pid 456] close(13) = -1 EBADF (Bad file descriptor) [pid 456] close(14) = -1 EBADF (Bad file descriptor) [pid 456] close(15) = -1 EBADF (Bad file descriptor) [pid 456] close(16) = -1 EBADF (Bad file descriptor) [pid 456] close(17) = -1 EBADF (Bad file descriptor) [pid 456] close(18) = -1 EBADF (Bad file descriptor) [pid 456] close(19) = -1 EBADF (Bad file descriptor) [pid 456] close(20) = -1 EBADF (Bad file descriptor) [pid 456] close(21) = -1 EBADF (Bad file descriptor) [pid 456] close(22) = -1 EBADF (Bad file descriptor) [pid 456] close(23) = -1 EBADF (Bad file descriptor) [pid 456] close(24) = -1 EBADF (Bad file descriptor) [pid 456] close(25) = -1 EBADF (Bad file descriptor) [pid 456] close(26) = -1 EBADF (Bad file descriptor) [pid 456] close(27) = -1 EBADF (Bad file descriptor) [pid 456] close(28) = -1 EBADF (Bad file descriptor) [pid 456] close(29) = -1 EBADF (Bad file descriptor) [pid 456] exit_group(0 [pid 457] <... futex resumed>) = ? [pid 456] <... exit_group resumed>) = ? [pid 457] +++ exited with 0 +++ [pid 456] +++ exited with 0 +++ [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=28, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 302] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 302] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 302] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 302] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 302] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] unlink("./13/binderfs") = 0 [pid 302] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 302] close(3) = 0 [pid 302] rmdir("./13") = 0 [pid 302] mkdir("./14", 0777) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 30 ./strace-static-x86_64: Process 493 attached [pid 493] set_robust_list(0x5555951c7760, 24) = 0 [pid 493] chdir("./14") = 0 [pid 493] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 493] setpgid(0, 0) = 0 [pid 493] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 493] write(3, "1000", 4) = 4 [pid 493] close(3) = 0 [pid 493] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 493] write(1, "executing program\n", 18) = 18 [pid 493] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 493] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 493] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 493] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 493] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 493] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 493] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[31]}, 88) = 31 [pid 493] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 493] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 493] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}./strace-static-x86_64: Process 494 attached [pid 461] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 494] set_robust_list(0x7f6727ef99a0, 24 [pid 461] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW [pid 494] <... set_robust_list resumed>) = 0 [pid 494] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 494] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 494] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 493] <... futex resumed>) = 0 [pid 494] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 493] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 494] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 493] <... futex resumed>) = 0 [pid 494] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 493] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 494] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 494] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 493] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 494] <... futex resumed>) = 0 [pid 494] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 493] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 494] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 494] socketpair(AF_UNIX, SOCK_STREAM, 0, [pid 493] <... futex resumed>) = 0 [pid 494] <... socketpair resumed>NULL) = -1 EFAULT (Bad address) [pid 494] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 493] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 494] <... futex resumed>) = 0 [pid 494] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 493] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 493] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 494] <... futex resumed>) = 0 [pid 493] <... futex resumed>) = 1 [pid 494] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 493] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 494] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 494] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 494] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 494] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 461] <... ioctl resumed>, 0) = 0 [pid 461] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 461] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 461] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [ 58.213133][ T39] usb 2-1: Manufacturer: syz [ 58.221616][ T24] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 58.233367][ T39] usb 2-1: SerialNumber: syz [ 58.240564][ T24] usb 3-1: USB disconnect, device number 15 [ 58.249587][ T24] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [pid 463] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 463] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 463] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 459] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 458] <... futex resumed>) = 0 [pid 459] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 458] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 459] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 458] <... futex resumed>) = 0 [pid 459] bpf(BPF_PROG_LOAD, NULL, 0 [pid 458] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 459] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 459] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 458] <... futex resumed>) = 0 [pid 459] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 458] close(3) = 0 [pid 458] close(4) = -1 EBADF (Bad file descriptor) [pid 458] close(5) = -1 EBADF (Bad file descriptor) [pid 458] close(6) = -1 EBADF (Bad file descriptor) [pid 458] close(7) = -1 EBADF (Bad file descriptor) [pid 458] close(8) = -1 EBADF (Bad file descriptor) [pid 458] close(9) = -1 EBADF (Bad file descriptor) [pid 458] close(10) = -1 EBADF (Bad file descriptor) [pid 458] close(11) = -1 EBADF (Bad file descriptor) [pid 458] close(12) = -1 EBADF (Bad file descriptor) [pid 458] close(13) = -1 EBADF (Bad file descriptor) [pid 458] close(14) = -1 EBADF (Bad file descriptor) [pid 458] close(15) = -1 EBADF (Bad file descriptor) [pid 458] close(16) = -1 EBADF (Bad file descriptor) [pid 458] close(17) = -1 EBADF (Bad file descriptor) [pid 458] close(18) = -1 EBADF (Bad file descriptor) [pid 458] close(19) = -1 EBADF (Bad file descriptor) [pid 458] close(20) = -1 EBADF (Bad file descriptor) [pid 458] close(21) = -1 EBADF (Bad file descriptor) [pid 458] close(22) = -1 EBADF (Bad file descriptor) [pid 458] close(23) = -1 EBADF (Bad file descriptor) [pid 458] close(24) = -1 EBADF (Bad file descriptor) [pid 458] close(25) = -1 EBADF (Bad file descriptor) [pid 458] close(26) = -1 EBADF (Bad file descriptor) [pid 458] close(27) = -1 EBADF (Bad file descriptor) [pid 458] close(28) = -1 EBADF (Bad file descriptor) [pid 458] close(29) = -1 EBADF (Bad file descriptor) [pid 458] exit_group(0 [pid 459] <... futex resumed>) = ? [pid 458] <... exit_group resumed>) = ? [pid 459] +++ exited with 0 +++ [pid 458] +++ exited with 0 +++ [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=28, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 300] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 300] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./13/binderfs") = 0 [pid 300] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./13") = 0 [pid 300] mkdir("./14", 0777) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 30 ./strace-static-x86_64: Process 495 attached [pid 495] set_robust_list(0x5555951c7760, 24) = 0 [pid 495] chdir("./14") = 0 [pid 495] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 495] setpgid(0, 0) = 0 [ 58.272220][ T319] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 58.302318][ T313] usb 5-1: new high-speed USB device number 16 using dummy_hcd [pid 495] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 495] write(3, "1000", 4) = 4 [pid 495] close(3) = 0 [pid 495] symlink("/dev/binderfs", "./binderfs") = 0 [pid 495] write(1, "executing program\n", 18executing program ) = 18 [pid 495] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 495] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 495] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 495] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 495] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 495] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 495] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[31]}, 88) = 31 [pid 466] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 495] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 495] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 495] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}./strace-static-x86_64: Process 496 attached [pid 496] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 496] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 496] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 496] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 495] <... futex resumed>) = 0 [pid 466] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 495] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 495] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 466] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 466] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 496] <... futex resumed>) = 1 [pid 496] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 496] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 495] <... futex resumed>) = 0 [pid 495] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 495] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 496] <... futex resumed>) = 1 [pid 496] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 496] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 495] <... futex resumed>) = 0 [pid 495] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 495] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 496] <... futex resumed>) = 1 [pid 496] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 496] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 496] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 496] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 58.313862][ T315] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 58.352808][ T315] usb 4-1: USB disconnect, device number 15 [ 58.359479][ T315] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [pid 496] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 463] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 463] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 463] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 463] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 463] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 463] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 461] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 460] <... futex resumed>) = 0 [pid 461] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 460] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 461] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 460] <... futex resumed>) = 0 [pid 461] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 460] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 461] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 461] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 461] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 463] <... ioctl resumed>, 0x7f6727ef7110) = 100 [pid 461] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 461] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 461] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 463] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 463] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 463] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 463] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 463] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 463] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 463] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 463] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [ 58.453988][ T319] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.461852][ T461] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 58.466956][ T319] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 58.489340][ T319] usb 1-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [pid 463] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 466] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 466] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 466] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 466] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 466] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 466] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 466] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 463] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 466] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 463] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW [pid 466] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 463] <... ioctl resumed>, 0) = 0 [pid 466] <... ioctl resumed>, 0x7f6727ef7110) = 4 [pid 463] ioctl(3, USB_RAW_IOCTL_CONFIGURE [pid 466] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 463] <... ioctl resumed>, 0) = 0 [pid 466] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 463] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 466] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 463] <... ioctl resumed>, 0x7f6727fc850c) = 0 [pid 466] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 466] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 463] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [pid 466] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 466] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 466] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 466] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [ 58.498971][ T319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.507800][ T319] usb 1-1: Product: syz [ 58.512387][ T319] usb 1-1: Manufacturer: syz [ 58.517757][ T319] usb 1-1: SerialNumber: syz [ 58.524086][ T313] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.536988][ T313] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [pid 466] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 466] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 466] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 466] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 466] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [ 58.552639][ T313] usb 5-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 58.562593][ T313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.570952][ T313] usb 5-1: Product: syz [ 58.575192][ T313] usb 5-1: Manufacturer: syz [ 58.579821][ T313] usb 5-1: SerialNumber: syz [pid 461] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 460] <... futex resumed>) = 0 [pid 460] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 460] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 461] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 461] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 461] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 461] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 494] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 494] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 494] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 463] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 462] <... futex resumed>) = 0 [pid 463] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 462] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 463] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 462] <... futex resumed>) = 0 [pid 463] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 462] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 463] <... ioctl resumed>, 0x7f6727ef8140) = 0 [ 58.692237][ T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd [pid 463] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 463] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 463] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 463] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 496] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 496] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 496] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 466] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 464] <... futex resumed>) = 0 [pid 466] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 464] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 464] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 466] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 466] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 466] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 466] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 466] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 466] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 58.752417][ T463] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 58.772223][ T315] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 58.789463][ T466] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [pid 494] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 494] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 494] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 494] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 494] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 494] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 494] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 461] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 461] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 460] <... futex resumed>) = 0 [pid 460] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 461] <... futex resumed>) = 0 [pid 460] <... futex resumed>) = 1 [pid 461] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 460] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 461] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 461] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [pid 494] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 494] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 494] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 494] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 494] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 494] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 494] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 494] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [ 58.873827][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.885119][ T24] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 58.897551][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 58.907900][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.916724][ T24] usb 3-1: Product: syz [pid 494] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 494] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 494] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 494] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 494] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [pid 496] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 463] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 496] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 463] <... futex resumed>) = 1 [pid 462] <... futex resumed>) = 0 [pid 463] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 462] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 496] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 463] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 462] <... futex resumed>) = 0 [pid 496] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 463] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 462] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 496] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 463] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 496] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 463] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 463] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 496] <... ioctl resumed>, 0x7f6727ef7110) = 9 [pid 463] <... ioctl resumed>, 0xb) = 0 [pid 496] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 463] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 496] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 496] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [ 58.921681][ T24] usb 3-1: Manufacturer: syz [ 58.926585][ T24] usb 3-1: SerialNumber: syz [pid 496] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 496] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 496] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 496] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 496] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 496] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 496] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 496] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 496] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 466] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 464] <... futex resumed>) = 0 [pid 466] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 464] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 466] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 464] <... futex resumed>) = 0 [pid 466] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 464] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 466] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 466] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 466] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 466] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 58.965184][ T315] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.976366][ T315] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 58.991833][ T315] usb 4-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 59.002192][ T315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [pid 496] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 496] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 496] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 496] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 496] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [ 59.013306][ T315] usb 4-1: Product: syz [ 59.018078][ T315] usb 4-1: Manufacturer: syz [ 59.023285][ T315] usb 4-1: SerialNumber: syz [pid 461] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 460] <... futex resumed>) = 0 [pid 461] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 460] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 461] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 460] <... futex resumed>) = 0 [pid 461] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 460] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 461] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 461] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 461] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 461] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 494] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 493] <... futex resumed>) = 0 [pid 494] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 493] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 494] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 493] <... futex resumed>) = 0 [pid 494] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 493] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 494] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 494] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 494] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 494] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 494] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 463] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 462] <... futex resumed>) = 0 [pid 463] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 462] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 463] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 462] <... futex resumed>) = 0 [pid 463] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 462] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 463] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 463] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [ 59.097165][ T461] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 59.135834][ T494] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [pid 466] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 464] <... futex resumed>) = 0 [pid 466] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 464] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 466] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 464] <... futex resumed>) = 0 [pid 466] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 464] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 466] <... ioctl resumed>, 0x7f6727ef7130) = 28 [pid 496] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 495] <... futex resumed>) = 0 [pid 496] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 495] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 496] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 495] <... futex resumed>) = 0 [pid 496] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 495] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 496] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 496] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 496] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 496] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 496] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 59.231754][ T496] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [pid 461] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 460] <... futex resumed>) = 0 [pid 461] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 460] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 461] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 460] <... futex resumed>) = 0 [pid 461] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 460] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 461] <... ioctl resumed>, 0x7f6727ef7130) = 26 [pid 494] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 493] <... futex resumed>) = 0 [pid 494] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 493] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 494] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 493] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 494] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 494] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 494] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 494] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 463] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 59.310073][ T39] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 59.317066][ T39] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 59.325302][ T39] cdc_ncm 2-1:1.0: setting rx_max = 2048 [pid 462] <... futex resumed>) = 0 [pid 463] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 462] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 463] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 462] <... futex resumed>) = 0 [pid 463] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 462] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 463] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 463] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 463] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 463] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 466] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 464] <... futex resumed>) = 0 [ 59.366851][ T463] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [pid 466] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 464] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 466] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 464] <... futex resumed>) = 0 [pid 466] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 464] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 466] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 466] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 466] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 466] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 496] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 495] <... futex resumed>) = 0 [pid 496] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 495] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 496] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 495] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 496] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 496] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 496] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 496] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 59.416296][ T466] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [pid 461] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 460] <... futex resumed>) = 0 [pid 461] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 460] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 461] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 460] <... futex resumed>) = 0 [pid 461] bpf(BPF_PROG_LOAD, NULL, 0 [pid 460] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 461] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 461] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 460] <... futex resumed>) = 0 [pid 461] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 460] close(3) = 0 [pid 460] close(4) = -1 EBADF (Bad file descriptor) [pid 460] close(5) = -1 EBADF (Bad file descriptor) [pid 460] close(6) = -1 EBADF (Bad file descriptor) [pid 460] close(7) = -1 EBADF (Bad file descriptor) [pid 460] close(8) = -1 EBADF (Bad file descriptor) [pid 460] close(9) = -1 EBADF (Bad file descriptor) [pid 460] close(10) = -1 EBADF (Bad file descriptor) [pid 460] close(11) = -1 EBADF (Bad file descriptor) [pid 460] close(12) = -1 EBADF (Bad file descriptor) [pid 460] close(13) = -1 EBADF (Bad file descriptor) [pid 460] close(14) = -1 EBADF (Bad file descriptor) [pid 460] close(15) = -1 EBADF (Bad file descriptor) [pid 460] close(16) = -1 EBADF (Bad file descriptor) [pid 460] close(17) = -1 EBADF (Bad file descriptor) [pid 460] close(18) = -1 EBADF (Bad file descriptor) [pid 460] close(19) = -1 EBADF (Bad file descriptor) [pid 460] close(20) = -1 EBADF (Bad file descriptor) [pid 460] close(21) = -1 EBADF (Bad file descriptor) [pid 460] close(22) = -1 EBADF (Bad file descriptor) [pid 460] close(23) = -1 EBADF (Bad file descriptor) [pid 460] close(24) = -1 EBADF (Bad file descriptor) [pid 460] close(25) = -1 EBADF (Bad file descriptor) [pid 460] close(26) = -1 EBADF (Bad file descriptor) [pid 460] close(27) = -1 EBADF (Bad file descriptor) [pid 460] close(28 [pid 494] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 493] <... futex resumed>) = 0 [pid 494] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 493] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 494] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 493] <... futex resumed>) = 0 [pid 494] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 493] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 494] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 494] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 460] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 460] close(29) = -1 EBADF (Bad file descriptor) [pid 460] exit_group(0 [pid 461] <... futex resumed>) = ? [pid 460] <... exit_group resumed>) = ? [pid 461] +++ exited with 0 +++ [pid 460] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=30, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 298] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 298] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./14/binderfs") = 0 [pid 298] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./14") = 0 [pid 298] mkdir("./15", 0777 [pid 494] <... ioctl resumed>, 0x7f6727ef7130) = 28 [pid 298] <... mkdir resumed>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 32 ./strace-static-x86_64: Process 497 attached [pid 497] set_robust_list(0x5555951c7760, 24) = 0 [pid 497] chdir("./15") = 0 [pid 497] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 497] setpgid(0, 0) = 0 [pid 497] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 497] write(3, "1000", 4) = 4 [pid 497] close(3) = 0 [pid 497] symlink("/dev/binderfs", "./binderfs"executing program ) = 0 [pid 497] write(1, "executing program\n", 18) = 18 [pid 497] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 497] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 497] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 497] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 497] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 497] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 497] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[33]}, 88) = 33 ./strace-static-x86_64: Process 498 attached [pid 498] set_robust_list(0x7f6727ef99a0, 24 [pid 497] rt_sigprocmask(SIG_SETMASK, [], [pid 498] <... set_robust_list resumed>) = 0 [pid 498] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 498] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 497] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 497] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 498] <... futex resumed>) = 0 [pid 497] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 498] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 498] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 498] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 497] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 497] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 498] <... futex resumed>) = 0 [pid 498] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 497] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 498] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 498] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 498] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 497] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 497] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 498] <... futex resumed>) = 0 [pid 497] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 498] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 498] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 498] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 497] <... futex resumed>) = 0 [pid 497] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 498] <... futex resumed>) = 0 [pid 498] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 497] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 498] <... openat resumed>) = 3 [pid 498] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 498] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 463] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 462] <... futex resumed>) = 0 [pid 463] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 462] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 463] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 462] <... futex resumed>) = 0 [pid 463] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 462] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 463] <... ioctl resumed>, 0x7f6727ef8140) = 0 [ 59.516407][ T39] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 59.537101][ T39] usb 2-1: USB disconnect, device number 16 [ 59.545927][ T39] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [pid 463] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [pid 498] <... ioctl resumed>, 0) = 0 [pid 498] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 498] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 466] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 464] <... futex resumed>) = 0 [ 59.577631][ T319] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 59.586043][ T319] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 59.597079][ T319] cdc_ncm 1-1:1.0: setting rx_max = 2048 [pid 466] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 464] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 466] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 464] <... futex resumed>) = 0 [pid 466] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 464] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 466] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 466] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [pid 496] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 495] <... futex resumed>) = 0 [pid 496] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 495] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 496] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 495] <... futex resumed>) = 0 [pid 496] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 495] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 496] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 496] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [ 59.626364][ T313] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 59.633557][ T313] cdc_ncm 5-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 59.641955][ T313] cdc_ncm 5-1:1.0: setting rx_max = 2048 [pid 494] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 493] <... futex resumed>) = 0 [pid 493] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 493] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 494] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 494] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 494] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 494] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 463] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 462] <... futex resumed>) = 0 [pid 462] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 462] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 463] bpf(BPF_PROG_LOAD, NULL, 0) = -1 EFAULT (Bad address) [pid 463] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 462] <... futex resumed>) = 0 [pid 463] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 462] close(3) = 0 [pid 462] close(4) = -1 EBADF (Bad file descriptor) [pid 462] close(5) = -1 EBADF (Bad file descriptor) [pid 462] close(6) = -1 EBADF (Bad file descriptor) [pid 462] close(7) = -1 EBADF (Bad file descriptor) [pid 462] close(8) = -1 EBADF (Bad file descriptor) [pid 462] close(9) = -1 EBADF (Bad file descriptor) [pid 462] close(10) = -1 EBADF (Bad file descriptor) [ 59.759231][ T494] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 59.789485][ T319] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [pid 462] close(11) = -1 EBADF (Bad file descriptor) [pid 462] close(12) = -1 EBADF (Bad file descriptor) [pid 462] close(13) = -1 EBADF (Bad file descriptor) [pid 462] close(14) = -1 EBADF (Bad file descriptor) [pid 462] close(15) = -1 EBADF (Bad file descriptor) [pid 462] close(16) = -1 EBADF (Bad file descriptor) [pid 462] close(17) = -1 EBADF (Bad file descriptor) [pid 462] close(18) = -1 EBADF (Bad file descriptor) [pid 462] close(19) = -1 EBADF (Bad file descriptor) [pid 462] close(20) = -1 EBADF (Bad file descriptor) [pid 462] close(21) = -1 EBADF (Bad file descriptor) [pid 462] close(22) = -1 EBADF (Bad file descriptor) [pid 462] close(23) = -1 EBADF (Bad file descriptor) [pid 462] close(24) = -1 EBADF (Bad file descriptor) [pid 462] close(25) = -1 EBADF (Bad file descriptor) [pid 462] close(26) = -1 EBADF (Bad file descriptor) [pid 462] close(27) = -1 EBADF (Bad file descriptor) [pid 462] close(28) = -1 EBADF (Bad file descriptor) [pid 462] close(29) = -1 EBADF (Bad file descriptor) [pid 462] exit_group(0 [pid 463] <... futex resumed>) = ? [pid 462] <... exit_group resumed>) = ? [pid 463] +++ exited with 0 +++ [pid 462] +++ exited with 0 +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=30, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 299] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 299] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 466] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] newfstatat(3, "", [pid 466] <... futex resumed>) = 1 [pid 464] <... futex resumed>) = 0 [pid 466] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 464] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 466] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 464] <... futex resumed>) = 0 [pid 466] bpf(BPF_PROG_LOAD, NULL, 0 [pid 464] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 299] getdents64(3, [pid 466] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 466] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... getdents64 resumed>0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 466] <... futex resumed>) = 1 [pid 464] <... futex resumed>) = 0 [pid 299] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 466] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 464] close(3 [pid 299] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 464] <... close resumed>) = 0 [pid 299] newfstatat(AT_FDCWD, "./14/binderfs", [pid 464] close(4 [pid 299] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 464] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 299] unlink("./14/binderfs" [pid 464] close(5) = -1 EBADF (Bad file descriptor) [pid 299] <... unlink resumed>) = 0 [pid 464] close(6 [pid 299] getdents64(3, [pid 464] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 299] <... getdents64 resumed>0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 464] close(7 [pid 299] close(3 [pid 464] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 299] <... close resumed>) = 0 [pid 464] close(8 [pid 299] rmdir("./14" [pid 464] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 299] <... rmdir resumed>) = 0 [pid 464] close(9) = -1 EBADF (Bad file descriptor) [pid 299] mkdir("./15", 0777 [pid 464] close(10 [pid 299] <... mkdir resumed>) = 0 [pid 464] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 464] close(11./strace-static-x86_64: Process 499 attached ) = -1 EBADF (Bad file descriptor) [pid 464] close(12 [pid 299] <... clone resumed>, child_tidptr=0x5555951c7750) = 32 [pid 464] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 464] close(13) = -1 EBADF (Bad file descriptor) [pid 464] close(14) = -1 EBADF (Bad file descriptor) [pid 464] close(15) = -1 EBADF (Bad file descriptor) [pid 464] close(16) = -1 EBADF (Bad file descriptor) [pid 464] close(17) = -1 EBADF (Bad file descriptor) [pid 464] close(18) = -1 EBADF (Bad file descriptor) [pid 464] close(19) = -1 EBADF (Bad file descriptor) [pid 464] close(20) = -1 EBADF (Bad file descriptor) [pid 464] close(21) = -1 EBADF (Bad file descriptor) [pid 464] close(22) = -1 EBADF (Bad file descriptor) [pid 464] close(23) = -1 EBADF (Bad file descriptor) [pid 464] close(24) = -1 EBADF (Bad file descriptor) [pid 464] close(25) = -1 EBADF (Bad file descriptor) [pid 464] close(26) = -1 EBADF (Bad file descriptor) [pid 464] close(27) = -1 EBADF (Bad file descriptor) [pid 464] close(28) = -1 EBADF (Bad file descriptor) [pid 464] close(29) = -1 EBADF (Bad file descriptor) [pid 464] exit_group(0) = ? [pid 466] <... futex resumed>) = ? [pid 466] +++ exited with 0 +++ [pid 464] +++ exited with 0 +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=30, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 301] restart_syscall(<... resuming interrupted clone ...> [pid 496] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 499] set_robust_list(0x5555951c7760, 24 [pid 496] <... futex resumed>) = 1 [pid 495] <... futex resumed>) = 0 [pid 301] <... restart_syscall resumed>) = 0 [pid 496] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 495] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 496] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 495] <... futex resumed>) = 0 [pid 496] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 495] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 301] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW [pid 496] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 301] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 59.804639][ T319] usb 1-1: USB disconnect, device number 16 [ 59.810974][ T319] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 59.829661][ T313] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 59.848408][ T313] usb 5-1: USB disconnect, device number 16 [pid 496] ioctl(3, USB_RAW_IOCTL_EP_ENABLEexecuting program [pid 301] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 301] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./14/binderfs") = 0 [pid 301] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./14") = 0 [pid 301] mkdir("./15", 0777) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 32 [pid 499] <... set_robust_list resumed>) = 0 [pid 499] chdir("./15") = 0 [pid 499] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 499] setpgid(0, 0) = 0 [pid 499] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 499] write(3, "1000", 4) = 4 [pid 499] close(3) = 0 [pid 499] symlink("/dev/binderfs", "./binderfs") = 0 [pid 499] write(1, "executing program\n", 18) = 18 [pid 499] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 499] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 499] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 499] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 499] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 499] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 499] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[33]}, 88) = 33 [pid 499] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 499] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 499] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 496] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 496] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 496] ioctl(3, USB_RAW_IOCTL_EP0_READ./strace-static-x86_64: Process 501 attached [pid 501] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 501] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 501] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 501] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 499] <... futex resumed>) = 0 [pid 499] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 499] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 501] <... futex resumed>) = 1 [pid 501] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 501] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 499] <... futex resumed>) = 0 [pid 499] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 499] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 501] <... futex resumed>) = 1 [pid 501] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 501] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 499] <... futex resumed>) = 0 [pid 499] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 499] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 501] <... futex resumed>) = 1 [pid 501] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 501] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 501] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 496] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 501] <... ioctl resumed>, 0) = 0 [pid 501] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 501] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH./strace-static-x86_64: Process 500 attached [pid 500] set_robust_list(0x5555951c7760, 24) = 0 [pid 500] chdir("./15") = 0 [pid 500] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 500] setpgid(0, 0) = 0 [pid 500] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 500] write(3, "1000", 4) = 4 [pid 500] close(3) = 0 [pid 500] symlink("/dev/binderfs", "./binderfs") = 0 [pid 500] write(1, "executing program\n", 18executing program ) = 18 [pid 500] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 500] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 500] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 500] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 500] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 500] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 500] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0}./strace-static-x86_64: Process 502 attached => {parent_tid=[33]}, 88) = 33 [pid 500] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 500] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 500] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 502] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 502] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 502] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 502] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 500] <... futex resumed>) = 0 [pid 500] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 500] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 502] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 502] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 500] <... futex resumed>) = 0 [pid 500] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 500] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 502] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 502] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 500] <... futex resumed>) = 0 [pid 500] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 500] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 502] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 502] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 502] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 502] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 59.853292][ T496] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 59.855418][ T313] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [pid 502] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 494] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 493] <... futex resumed>) = 0 [pid 498] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 498] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 494] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 493] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 498] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 494] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 493] <... futex resumed>) = 0 [pid 498] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 494] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 493] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 494] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 494] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [ 59.962297][ T39] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 59.972972][ T24] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 59.980126][ T24] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 59.987981][ T24] cdc_ncm 3-1:1.0: setting rx_max = 2048 [pid 496] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 495] <... futex resumed>) = 0 [pid 496] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 495] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 495] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 496] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 496] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 496] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [ 60.073180][ T315] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 60.080884][ T315] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 60.089767][ T315] cdc_ncm 4-1:1.0: setting rx_max = 2048 [pid 498] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 498] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 498] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 498] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 498] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 498] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 498] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 494] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 493] <... futex resumed>) = 0 [pid 494] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 493] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 494] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 493] <... futex resumed>) = 0 [pid 494] bpf(BPF_PROG_LOAD, NULL, 0 [pid 493] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 494] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 494] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 493] <... futex resumed>) = 0 [pid 494] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 493] close(3) = 0 [pid 493] close(4) = -1 EBADF (Bad file descriptor) [pid 493] close(5) = -1 EBADF (Bad file descriptor) [pid 493] close(6) = -1 EBADF (Bad file descriptor) [pid 493] close(7) = -1 EBADF (Bad file descriptor) [pid 493] close(8) = -1 EBADF (Bad file descriptor) [pid 493] close(9) = -1 EBADF (Bad file descriptor) [pid 493] close(10) = -1 EBADF (Bad file descriptor) [pid 493] close(11) = -1 EBADF (Bad file descriptor) [pid 493] close(12) = -1 EBADF (Bad file descriptor) [pid 493] close(13) = -1 EBADF (Bad file descriptor) [pid 493] close(14) = -1 EBADF (Bad file descriptor) [pid 493] close(15) = -1 EBADF (Bad file descriptor) [pid 493] close(16) = -1 EBADF (Bad file descriptor) [pid 493] close(17) = -1 EBADF (Bad file descriptor) [pid 493] close(18) = -1 EBADF (Bad file descriptor) [pid 493] close(19) = -1 EBADF (Bad file descriptor) [pid 493] close(20) = -1 EBADF (Bad file descriptor) [pid 493] close(21) = -1 EBADF (Bad file descriptor) [pid 493] close(22) = -1 EBADF (Bad file descriptor) [pid 493] close(23) = -1 EBADF (Bad file descriptor) [pid 493] close(24) = -1 EBADF (Bad file descriptor) [pid 493] close(25) = -1 EBADF (Bad file descriptor) [pid 493] close(26) = -1 EBADF (Bad file descriptor) [pid 493] close(27) = -1 EBADF (Bad file descriptor) [pid 493] close(28) = -1 EBADF (Bad file descriptor) [pid 493] close(29) = -1 EBADF (Bad file descriptor) [pid 493] exit_group(0 [pid 494] <... futex resumed>) = ? [pid 493] <... exit_group resumed>) = ? [pid 494] +++ exited with 0 +++ [pid 493] +++ exited with 0 +++ [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=30, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 302] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 302] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 302] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 302] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 302] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] unlink("./14/binderfs") = 0 [pid 302] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 302] close(3) = 0 [pid 302] rmdir("./14") = 0 [pid 302] mkdir("./15", 0777) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 32 ./strace-static-x86_64: Process 503 attached [pid 503] set_robust_list(0x5555951c7760, 24) = 0 [pid 503] chdir("./15") = 0 [pid 503] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 503] setpgid(0, 0) = 0 [pid 503] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 503] write(3, "1000", 4) = 4 [pid 503] close(3) = 0 [pid 503] symlink("/dev/binderfs", "./binderfs") = 0 [pid 503] write(1, "executing program\n", 18executing program ) = 18 [pid 503] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 503] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 503] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 503] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 503] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 503] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 503] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[33]}, 88) = 33 [pid 503] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 503] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 503] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}./strace-static-x86_64: Process 504 attached [pid 504] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 504] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 60.166562][ T39] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.188649][ T24] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 60.201180][ T39] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [pid 504] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 504] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 503] <... futex resumed>) = 0 [pid 503] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 503] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 504] <... futex resumed>) = 1 [pid 504] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 504] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 503] <... futex resumed>) = 0 [pid 503] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 503] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 504] <... futex resumed>) = 1 [pid 504] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 504] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 503] <... futex resumed>) = 0 [pid 503] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 503] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 498] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 498] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 504] <... futex resumed>) = 1 [pid 504] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 504] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 504] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 504] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 504] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 498] <... ioctl resumed>, 0x7f6727ef7110) = 4 [pid 498] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 501] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 498] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 501] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 498] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 501] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 498] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 501] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 498] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 498] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 498] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 498] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [ 60.215694][ T24] usb 3-1: USB disconnect, device number 16 [ 60.222537][ T24] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 60.232983][ T319] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 60.242879][ T39] usb 2-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 60.254351][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [pid 498] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 496] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 495] <... futex resumed>) = 0 [pid 496] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 495] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 496] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 495] <... futex resumed>) = 0 [pid 496] bpf(BPF_PROG_LOAD, NULL, 0 [pid 495] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 496] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 496] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 495] <... futex resumed>) = 0 [pid 496] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 495] close(3) = 0 [pid 495] close(4) = -1 EBADF (Bad file descriptor) [pid 495] close(5) = -1 EBADF (Bad file descriptor) [pid 495] close(6) = -1 EBADF (Bad file descriptor) [pid 495] close(7) = -1 EBADF (Bad file descriptor) [pid 495] close(8) = -1 EBADF (Bad file descriptor) [pid 495] close(9) = -1 EBADF (Bad file descriptor) [pid 495] close(10) = -1 EBADF (Bad file descriptor) [pid 495] close(11) = -1 EBADF (Bad file descriptor) [pid 495] close(12) = -1 EBADF (Bad file descriptor) [pid 495] close(13) = -1 EBADF (Bad file descriptor) [pid 495] close(14) = -1 EBADF (Bad file descriptor) [pid 495] close(15) = -1 EBADF (Bad file descriptor) [pid 495] close(16) = -1 EBADF (Bad file descriptor) [pid 495] close(17) = -1 EBADF (Bad file descriptor) [pid 495] close(18) = -1 EBADF (Bad file descriptor) [pid 495] close(19) = -1 EBADF (Bad file descriptor) [pid 495] close(20) = -1 EBADF (Bad file descriptor) [pid 495] close(21) = -1 EBADF (Bad file descriptor) [pid 495] close(22) = -1 EBADF (Bad file descriptor) [pid 495] close(23) = -1 EBADF (Bad file descriptor) [pid 495] close(24) = -1 EBADF (Bad file descriptor) [pid 495] close(25) = -1 EBADF (Bad file descriptor) [pid 495] close(26) = -1 EBADF (Bad file descriptor) [pid 495] close(27) = -1 EBADF (Bad file descriptor) [pid 495] close(28) = -1 EBADF (Bad file descriptor) [pid 495] close(29) = -1 EBADF (Bad file descriptor) [pid 495] exit_group(0 [pid 496] <... futex resumed>) = ? [pid 495] <... exit_group resumed>) = ? [pid 496] +++ exited with 0 +++ [pid 495] +++ exited with 0 +++ [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=30, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 300] restart_syscall(<... resuming interrupted clone ...> [pid 502] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 502] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 300] <... restart_syscall resumed>) = 0 [pid 300] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 300] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./14/binderfs") = 0 [pid 300] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./14") = 0 [pid 300] mkdir("./15", 0777) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 32 ./strace-static-x86_64: Process 505 attached [pid 505] set_robust_list(0x5555951c7760, 24) = 0 [pid 505] chdir("./15") = 0 [pid 505] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 505] setpgid(0, 0) = 0 [pid 505] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 505] write(3, "1000", 4) = 4 [pid 505] close(3) = 0 [pid 505] symlink("/dev/binderfs", "./binderfs") = 0 [pid 505] write(1, "executing program\n", 18 [pid 502] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 502] ioctl(3, USB_RAW_IOCTL_EVENT_FETCHexecuting program [pid 505] <... write resumed>) = 18 [pid 505] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 505] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 505] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 505] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 505] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 505] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 505] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[33]}, 88) = 33 [pid 505] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 505] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 498] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 498] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 498] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 498] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 498] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 505] <... futex resumed>) = 0 [pid 505] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 498] <... ioctl resumed>, 0x7f6727ef7110) = 0 ./strace-static-x86_64: Process 506 attached [pid 506] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 506] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 506] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 506] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 505] <... futex resumed>) = 0 [pid 505] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 505] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 506] <... futex resumed>) = 1 [pid 506] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 506] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 505] <... futex resumed>) = 0 [pid 505] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 505] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 506] <... futex resumed>) = 1 [pid 506] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 506] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 505] <... futex resumed>) = 0 [pid 505] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 505] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 506] <... futex resumed>) = 1 [pid 506] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 506] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 506] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 506] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 60.265928][ T39] usb 2-1: Product: syz [ 60.270483][ T39] usb 2-1: Manufacturer: syz [ 60.275736][ T39] usb 2-1: SerialNumber: syz [ 60.282519][ T313] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 60.292878][ T315] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 60.326215][ T315] usb 4-1: USB disconnect, device number 16 [ 60.333693][ T321] ================================================================== [ 60.342855][ T321] BUG: KASAN: use-after-free in worker_thread+0x9ff/0x11f0 [ 60.350263][ T321] Read of size 8 at addr ffff888110984ce0 by task kworker/1:5/321 [ 60.360398][ T321] [ 60.365651][ T321] CPU: 1 PID: 321 Comm: kworker/1:5 Not tainted 6.1.141-syzkaller-00033-g36d69f6a49eb #0 [ 60.377013][ T321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 60.389075][ T321] Workqueue: 0x0 (events) [ 60.394069][ T321] Call Trace: [ 60.398396][ T321] [ 60.405339][ T321] __dump_stack+0x21/0x24 [ 60.410495][ T321] dump_stack_lvl+0xee/0x150 [ 60.415304][ T321] ? __cfi_dump_stack_lvl+0x8/0x8 [ 60.421426][ T321] ? __cfi__printk+0x8/0x8 [ 60.426761][ T321] ? __schedule+0xb8f/0x14e0 [ 60.432095][ T321] ? worker_thread+0x9ff/0x11f0 [ 60.437856][ T321] print_address_description+0x71/0x210 [ 60.444052][ T321] print_report+0x4a/0x60 [ 60.448588][ T321] kasan_report+0x122/0x150 [ 60.453197][ T321] ? worker_thread+0x9ff/0x11f0 [ 60.458252][ T321] __asan_report_load8_noabort+0x14/0x20 [ 60.464367][ T321] worker_thread+0x9ff/0x11f0 [ 60.469687][ T321] kthread+0x281/0x320 [ 60.474150][ T321] ? __cfi_worker_thread+0x10/0x10 [ 60.479990][ T321] ? __cfi_kthread+0x10/0x10 [ 60.484696][ T321] ret_from_fork+0x1f/0x30 [ 60.489666][ T321] [ 60.492796][ T321] [ 60.495423][ T321] Allocated by task 24: [ 60.499624][ T321] kasan_set_track+0x4b/0x70 [ 60.504545][ T321] kasan_save_alloc_info+0x25/0x30 [ 60.511265][ T321] __kasan_kmalloc+0x95/0xb0 [ 60.516835][ T321] __kmalloc_node+0xb2/0x1e0 [ 60.522067][ T321] kvmalloc_node+0x294/0x480 [ 60.527504][ T321] alloc_netdev_mqs+0x8d/0xf90 [ 60.533419][ T321] alloc_etherdev_mqs+0x37/0x40 [ 60.539272][ T321] usbnet_probe+0x20c/0x2780 [ 60.544490][ T321] usb_probe_interface+0x610/0xaf0 [ 60.550848][ T321] really_probe+0x2cb/0x960 [ 60.555610][ T321] __driver_probe_device+0x198/0x280 [ 60.562594][ T321] driver_probe_device+0x54/0x3e0 [ 60.569301][ T321] __device_attach_driver+0x2e9/0x4a0 [ 60.574750][ T321] bus_for_each_drv+0x183/0x210 [ 60.581271][ T321] __device_attach+0x2a2/0x400 [ 60.586519][ T321] device_initial_probe+0x1a/0x20 [ 60.592092][ T321] bus_probe_device+0xc0/0x1f0 [ 60.596997][ T321] device_add+0xb4d/0xef0 [ 60.601644][ T321] usb_set_configuration+0x19c2/0x1f10 [ 60.610903][ T321] usb_generic_driver_probe+0x91/0x150 [ 60.616846][ T321] usb_probe_device+0x159/0x270 [ 60.621904][ T321] really_probe+0x2cb/0x960 [ 60.626438][ T321] __driver_probe_device+0x198/0x280 [ 60.632017][ T321] driver_probe_device+0x54/0x3e0 [ 60.637172][ T321] __device_attach_driver+0x2e9/0x4a0 [ 60.643173][ T321] bus_for_each_drv+0x183/0x210 [ 60.648659][ T321] __device_attach+0x2a2/0x400 [ 60.653528][ T321] device_initial_probe+0x1a/0x20 [ 60.658645][ T321] bus_probe_device+0xc0/0x1f0 [ 60.663630][ T321] device_add+0xb4d/0xef0 [ 60.668285][ T321] usb_new_device+0xa70/0x1520 [ 60.673334][ T321] hub_event+0x2a5d/0x4680 [ 60.677775][ T321] process_one_work+0x71f/0xc40 [ 60.682816][ T321] worker_thread+0xd2e/0x11f0 [ 60.687548][ T321] kthread+0x281/0x320 [ 60.691669][ T321] ret_from_fork+0x1f/0x30 [ 60.696887][ T321] [ 60.699583][ T321] Freed by task 24: [ 60.704892][ T321] kasan_set_track+0x4b/0x70 [ 60.709986][ T321] kasan_save_free_info+0x31/0x50 [ 60.715392][ T321] ____kasan_slab_free+0x132/0x180 [ 60.725907][ T321] __kasan_slab_free+0x11/0x20 [ 60.731261][ T321] slab_free_freelist_hook+0xc2/0x190 [ 60.736839][ T321] __kmem_cache_free+0xb7/0x1b0 [ 60.742693][ T321] kfree+0x6f/0xf0 [ 60.746888][ T321] kvfree+0x35/0x40 [ 60.751005][ T321] netdev_freemem+0x3f/0x60 [ 60.755627][ T321] netdev_release+0x7f/0xb0 [ 60.760157][ T321] device_release+0xa4/0x1d0 [ 60.764897][ T321] kobject_put+0x19d/0x280 [ 60.769506][ T321] put_device+0x1f/0x30 [ 60.773788][ T321] free_netdev+0x392/0x490 [ 60.778229][ T321] usbnet_disconnect+0x25a/0x3b0 [ 60.783724][ T321] usb_unbind_interface+0x223/0x8d0 [ 60.789300][ T321] device_release_driver_internal+0x508/0x820 [ 60.795749][ T321] device_release_driver+0x19/0x20 [ 60.801343][ T321] bus_remove_device+0x2ee/0x350 [ 60.806397][ T321] device_del+0x6a4/0xeb0 [ 60.811031][ T321] usb_disable_device+0x3a8/0x750 [ 60.816693][ T321] usb_disconnect+0x31e/0x860 [ 60.822209][ T321] hub_event+0x1bd5/0x4680 [ 60.827177][ T321] process_one_work+0x71f/0xc40 [ 60.833014][ T321] worker_thread+0xd2e/0x11f0 [ 60.838273][ T321] kthread+0x281/0x320 [ 60.842486][ T321] ret_from_fork+0x1f/0x30 [ 60.847294][ T321] [ 60.849748][ T321] Last potentially related work creation: [ 60.856845][ T321] kasan_save_stack+0x3a/0x60 [ 60.862062][ T321] __kasan_record_aux_stack+0xb6/0xc0 [ 60.868018][ T321] kasan_record_aux_stack_noalloc+0xb/0x10 [ 60.874681][ T321] insert_work+0x51/0x300 [ 60.879745][ T321] __queue_work+0x9b1/0xd30 [ 60.885533][ T321] queue_work_on+0xd2/0x140 [ 60.890855][ T321] usbnet_link_change+0x176/0x1a0 [ 60.897223][ T321] usbnet_probe+0x1d55/0x2780 [ 60.902224][ T321] usb_probe_interface+0x610/0xaf0 [ 60.907673][ T321] really_probe+0x2cb/0x960 [ 60.912534][ T321] __driver_probe_device+0x198/0x280 [ 60.919495][ T321] driver_probe_device+0x54/0x3e0 [ 60.924739][ T321] __device_attach_driver+0x2e9/0x4a0 [ 60.930574][ T321] bus_for_each_drv+0x183/0x210 [ 60.936323][ T321] __device_attach+0x2a2/0x400 [ 60.941836][ T321] device_initial_probe+0x1a/0x20 [ 60.948070][ T321] bus_probe_device+0xc0/0x1f0 [ 60.952867][ T321] device_add+0xb4d/0xef0 [ 60.957594][ T321] usb_set_configuration+0x19c2/0x1f10 [ 60.963607][ T321] usb_generic_driver_probe+0x91/0x150 [ 60.971471][ T321] usb_probe_device+0x159/0x270 [ 60.976795][ T321] really_probe+0x2cb/0x960 [ 60.982139][ T321] __driver_probe_device+0x198/0x280 [ 60.988334][ T321] driver_probe_device+0x54/0x3e0 [ 60.993982][ T321] __device_attach_driver+0x2e9/0x4a0 [ 60.999648][ T321] bus_for_each_drv+0x183/0x210 [ 61.005680][ T321] __device_attach+0x2a2/0x400 [ 61.010992][ T321] device_initial_probe+0x1a/0x20 [ 61.016751][ T321] bus_probe_device+0xc0/0x1f0 [ 61.022330][ T321] device_add+0xb4d/0xef0 [ 61.026803][ T321] usb_new_device+0xa70/0x1520 [ 61.031778][ T321] hub_event+0x2a5d/0x4680 [ 61.036533][ T321] process_one_work+0x71f/0xc40 [ 61.042179][ T321] worker_thread+0xd2e/0x11f0 [ 61.046962][ T321] kthread+0x281/0x320 [ 61.051584][ T321] ret_from_fork+0x1f/0x30 [ 61.056207][ T321] [ 61.059054][ T321] The buggy address belongs to the object at ffff888110984000 [ 61.059054][ T321] which belongs to the cache kmalloc-4k of size 4096 [ 61.073909][ T321] The buggy address is located 3296 bytes inside of [ 61.073909][ T321] 4096-byte region [ffff888110984000, ffff888110985000) [ 61.087815][ T321] [ 61.090246][ T321] The buggy address belongs to the physical page: [ 61.097037][ T321] page:ffffea0004426000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x110980 [ 61.108106][ T321] head:ffffea0004426000 order:3 compound_mapcount:0 compound_pincount:0 [ 61.117663][ T321] flags: 0x4000000000010200(slab|head|zone=1) [ 61.123978][ T321] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100043380 [ 61.132584][ T321] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 61.141279][ T321] page dumped because: kasan: bad access detected [ 61.147691][ T321] page_owner tracks the page as allocated [ 61.153501][ T321] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 24, tgid 24 (kworker/1:0), ts 58932274037, free_ts 58415545886 [ 61.174718][ T321] post_alloc_hook+0x1f5/0x210 [ 61.179626][ T321] prep_new_page+0x1c/0x110 [ 61.184553][ T321] get_page_from_freelist+0x2c7b/0x2cf0 [ 61.190177][ T321] __alloc_pages+0x19e/0x3a0 [ 61.194943][ T321] alloc_slab_page+0x6e/0xf0 [ 61.199546][ T321] new_slab+0x98/0x3d0 [ 61.203621][ T321] ___slab_alloc+0x6f6/0xb50 [ 61.208392][ T321] __slab_alloc+0x5e/0xa0 [ 61.212731][ T321] __kmem_cache_alloc_node+0x203/0x2c0 [ 61.218193][ T321] kmalloc_trace+0x29/0xb0 [ 61.222624][ T321] kobject_uevent_env+0x287/0x730 [ 61.227659][ T321] kobject_uevent+0x1d/0x30 [ 61.232168][ T321] device_add+0xa5c/0xef0 [ 61.236507][ T321] usb_new_device+0xa70/0x1520 [ 61.241282][ T321] hub_event+0x2a5d/0x4680 [ 61.245723][ T321] process_one_work+0x71f/0xc40 [ 61.250682][ T321] page last free stack trace: [ 61.255356][ T321] free_unref_page_prepare+0x742/0x750 [ 61.261081][ T321] free_unref_page+0x8f/0x530 [ 61.265961][ T321] __free_pages+0x67/0x100 [ 61.270423][ T321] __free_slab+0xca/0x1a0 [ 61.274763][ T321] __unfreeze_partials+0x160/0x190 [ 61.279903][ T321] put_cpu_partial+0xa9/0x100 [ 61.284673][ T321] __slab_free+0x1c4/0x280 [ 61.289284][ T321] ___cache_free+0xbf/0xd0 [ 61.293812][ T321] qlist_free_all+0xc6/0x140 [ 61.298439][ T321] kasan_quarantine_reduce+0x14a/0x170 [ 61.303953][ T321] __kasan_slab_alloc+0x24/0x80 [ 61.309077][ T321] slab_post_alloc_hook+0x4f/0x2d0 [ 61.314294][ T321] __kmem_cache_alloc_node+0x192/0x2c0 [ 61.319857][ T321] kmalloc_trace+0x29/0xb0 [ 61.324378][ T321] usb_control_msg+0x74/0x3f0 [ 61.329241][ T321] hub_ext_port_status+0x100/0x6b0 [ 61.334448][ T321] [ 61.337034][ T321] Memory state around the buggy address: [ 61.342666][ T321] ffff888110984b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 61.350901][ T321] ffff888110984c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 61.359688][ T321] >ffff888110984c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 61.368112][ T321] ^ [pid 506] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 498] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 497] <... futex resumed>) = 0 [pid 498] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 497] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 498] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 497] <... futex resumed>) = 0 [pid 498] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 497] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 498] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 498] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [ 61.375331][ T321] ffff888110984d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 61.383664][ T321] ffff888110984d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 61.392254][ T321] ================================================================== [ 61.400402][ T321] Disabling lock debugging due to kernel taint [ 61.408615][ T315] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 61.418199][ T28] kauditd_printk_skb: 15 callbacks suppressed [pid 498] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 498] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 498] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 501] <... ioctl resumed>, 0x7f6727ef8120) = 0 [ 61.418215][ T28] audit: type=1400 audit(1751002644.832:89): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 61.419102][ T498] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 61.424933][ T28] audit: type=1400 audit(1751002644.832:90): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [pid 501] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 502] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 501] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 502] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 501] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 502] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 61.480685][ T28] audit: type=1400 audit(1751002644.832:91): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.503880][ T28] audit: type=1400 audit(1751002644.832:92): avc: denied { add_name } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [pid 502] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 502] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 502] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 501] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 502] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 501] <... ioctl resumed>, 0x7f6727ef7110) = 9 [pid 501] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 61.527242][ T28] audit: type=1400 audit(1751002644.832:93): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.534308][ T313] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 501] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [ 61.549078][ T28] audit: type=1400 audit(1751002644.832:94): avc: denied { append open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.564677][ T313] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 61.564789][ T319] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.597294][ T28] audit: type=1400 audit(1751002644.832:95): avc: denied { getattr } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [pid 501] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 502] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 502] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 501] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 502] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 501] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 501] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 502] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 501] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 502] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 501] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 502] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 501] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 502] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 501] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 502] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 501] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 502] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 501] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 502] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 501] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 502] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 501] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 502] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 501] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 502] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 501] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 502] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 502] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 501] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 501] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 498] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 497] <... futex resumed>) = 0 [pid 498] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 497] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 498] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 497] <... futex resumed>) = 0 [pid 498] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 497] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 498] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 498] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 498] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 498] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 61.630146][ T319] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 61.644055][ T313] usb 5-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 61.653667][ T319] usb 1-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 61.663365][ T313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.671803][ T313] usb 5-1: Product: syz [pid 502] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 502] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 502] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 502] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 502] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 501] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 502] <... ioctl resumed>, 0x7f6727ef7110) = 0 [pid 501] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 501] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 501] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 501] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [ 61.676145][ T319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.684623][ T313] usb 5-1: Manufacturer: syz [ 61.689455][ T313] usb 5-1: SerialNumber: syz [ 61.694306][ T319] usb 1-1: Product: syz [ 61.698587][ T319] usb 1-1: Manufacturer: syz [ 61.705048][ T319] usb 1-1: SerialNumber: syz [pid 504] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 504] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [ 61.752307][ T24] usb 3-1: new high-speed USB device number 17 using dummy_hcd [pid 504] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 498] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 497] <... futex resumed>) = 0 [pid 498] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 497] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 498] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 497] <... futex resumed>) = 0 [pid 498] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 497] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 498] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 498] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [pid 502] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 500] <... futex resumed>) = 0 [pid 502] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 500] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 502] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 500] <... futex resumed>) = 0 [pid 502] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 500] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 502] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 502] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 502] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 501] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 499] <... futex resumed>) = 0 [pid 502] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 501] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 499] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 501] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 499] <... futex resumed>) = 0 [pid 501] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 499] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 501] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 501] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 501] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 502] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 501] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 501] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 501] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 502] <... ioctl resumed>, 0x7f6727fc893c) = 11 [pid 501] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 502] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 504] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 504] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 504] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 504] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 504] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 504] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [ 61.913685][ T502] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 61.923360][ T501] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 61.944649][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 504] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 506] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 504] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 504] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 506] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 504] <... ioctl resumed>, 0x7f6727ef7110) = 4 [pid 506] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 504] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 504] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 504] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 504] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 504] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 504] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [ 61.958504][ T24] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 61.970821][ T315] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 61.983316][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 61.994187][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.002639][ T24] usb 3-1: Product: syz [ 62.007235][ T24] usb 3-1: Manufacturer: syz [pid 504] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 504] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 504] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 504] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 504] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [ 62.012566][ T24] usb 3-1: SerialNumber: syz [pid 498] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 497] <... futex resumed>) = 0 [pid 498] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 497] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 497] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 498] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 498] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 498] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 498] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 498] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 62.066536][ T498] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [pid 501] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 502] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 499] <... futex resumed>) = 0 [pid 502] <... futex resumed>) = 1 [pid 500] <... futex resumed>) = 0 [pid 502] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 500] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 502] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 500] <... futex resumed>) = 0 [pid 502] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 500] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 502] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 502] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 502] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 502] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 501] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 499] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 501] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 501] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 499] <... futex resumed>) = 0 [pid 501] <... ioctl resumed>, 0) = -1 EINVAL (Invalid argument) [pid 499] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 501] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 501] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 506] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 506] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 506] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 506] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 506] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 506] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 506] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 506] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 506] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 506] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 506] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 506] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 506] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 506] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [ 62.153962][ T315] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.166566][ T315] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 62.181529][ T315] usb 4-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 62.191273][ T315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.199589][ T315] usb 4-1: Product: syz [pid 506] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 506] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 506] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 506] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 506] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [pid 504] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 503] <... futex resumed>) = 0 [pid 503] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 504] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 503] <... futex resumed>) = 0 [pid 503] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 504] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 504] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 504] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 504] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 504] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 498] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 497] <... futex resumed>) = 0 [pid 497] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 498] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 497] <... futex resumed>) = 0 [pid 498] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 497] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 498] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [ 62.204198][ T315] usb 4-1: Manufacturer: syz [ 62.209422][ T315] usb 4-1: SerialNumber: syz [ 62.222754][ T504] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [pid 502] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 500] <... futex resumed>) = 0 [pid 502] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 500] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 502] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 500] <... futex resumed>) = 0 [pid 502] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 500] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 502] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 502] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [pid 501] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 499] <... futex resumed>) = 0 [pid 499] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 499] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 501] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 501] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [ 62.278328][ T39] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 62.286064][ T39] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 62.294507][ T39] cdc_ncm 2-1:1.0: setting rx_max = 2048 [pid 506] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 505] <... futex resumed>) = 0 [pid 505] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 506] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 505] <... futex resumed>) = 0 [pid 505] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 506] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 506] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 506] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 506] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 506] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 504] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 503] <... futex resumed>) = 0 [pid 504] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 503] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 504] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 503] <... futex resumed>) = 0 [pid 503] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 504] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 504] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 504] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 504] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 498] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 497] <... futex resumed>) = 0 [pid 498] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 497] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 498] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 497] <... futex resumed>) = 0 [pid 498] bpf(BPF_PROG_LOAD, NULL, 0 [pid 497] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 498] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 498] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 497] <... futex resumed>) = 0 [pid 498] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [ 62.420485][ T506] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [pid 497] close(3) = 0 [pid 497] close(4) = -1 EBADF (Bad file descriptor) [pid 497] close(5) = -1 EBADF (Bad file descriptor) [pid 497] close(6) = -1 EBADF (Bad file descriptor) [pid 497] close(7) = -1 EBADF (Bad file descriptor) [pid 497] close(8) = -1 EBADF (Bad file descriptor) [pid 497] close(9) = -1 EBADF (Bad file descriptor) [pid 497] close(10) = -1 EBADF (Bad file descriptor) [pid 497] close(11) = -1 EBADF (Bad file descriptor) [pid 497] close(12) = -1 EBADF (Bad file descriptor) [pid 497] close(13) = -1 EBADF (Bad file descriptor) [pid 497] close(14) = -1 EBADF (Bad file descriptor) [pid 497] close(15) = -1 EBADF (Bad file descriptor) [pid 497] close(16) = -1 EBADF (Bad file descriptor) [pid 497] close(17) = -1 EBADF (Bad file descriptor) [pid 497] close(18) = -1 EBADF (Bad file descriptor) [pid 497] close(19) = -1 EBADF (Bad file descriptor) [pid 497] close(20) = -1 EBADF (Bad file descriptor) [pid 497] close(21) = -1 EBADF (Bad file descriptor) [pid 497] close(22) = -1 EBADF (Bad file descriptor) [pid 497] close(23) = -1 EBADF (Bad file descriptor) [pid 497] close(24) = -1 EBADF (Bad file descriptor) [pid 497] close(25) = -1 EBADF (Bad file descriptor) [pid 497] close(26) = -1 EBADF (Bad file descriptor) [pid 497] close(27) = -1 EBADF (Bad file descriptor) [pid 497] close(28) = -1 EBADF (Bad file descriptor) [pid 497] close(29) = -1 EBADF (Bad file descriptor) [pid 497] exit_group(0 [pid 498] <... futex resumed>) = ? [pid 498] +++ exited with 0 +++ [pid 497] <... exit_group resumed>) = ? [pid 497] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=32, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 298] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./15/binderfs") = 0 [pid 298] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./15") = 0 [pid 298] mkdir("./16", 0777) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 34 ./strace-static-x86_64: Process 507 attached [pid 507] set_robust_list(0x5555951c7760, 24) = 0 [pid 507] chdir("./16") = 0 [pid 507] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 507] setpgid(0, 0) = 0 [pid 502] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 507] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 502] <... futex resumed>) = 1 [pid 500] <... futex resumed>) = 0 [pid 502] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 500] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 502] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 500] <... futex resumed>) = 0 [pid 507] <... openat resumed>) = 3 [pid 502] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [ 62.484115][ T39] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 62.501046][ T39] usb 2-1: USB disconnect, device number 17 [ 62.508224][ T39] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [pid 500] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 507] write(3, "1000", 4 [pid 502] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 502] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 507] <... write resumed>) = 4 [pid 501] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 499] <... futex resumed>) = 0 [pid 501] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 499] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 501] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 499] <... futex resumed>) = 0 [pid 501] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 499] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 501] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 501] ioctl(3, USB_RAW_IOCTL_EP_ENABLEexecuting program [pid 507] close(3 [pid 502] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 507] <... close resumed>) = 0 [pid 507] symlink("/dev/binderfs", "./binderfs") = 0 [pid 507] write(1, "executing program\n", 18) = 18 [pid 507] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 507] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 507] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 507] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 507] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 507] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 507] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[35]}, 88) = 35 ./strace-static-x86_64: Process 508 attached [pid 507] rt_sigprocmask(SIG_SETMASK, [], [pid 502] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 501] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 502] <... ioctl resumed>, 0x7f6727fc893c) = 11 [pid 501] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 502] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 501] <... ioctl resumed>, 0x7f6727fc893c) = 11 [pid 507] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 507] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 502] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 501] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 507] <... futex resumed>) = 0 [pid 507] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 501] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 508] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 508] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 508] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 508] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 507] <... futex resumed>) = 0 [pid 508] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 507] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 507] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 508] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 508] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 508] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 507] <... futex resumed>) = 0 [pid 508] socketpair(AF_UNIX, SOCK_STREAM, 0, [pid 507] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 508] <... socketpair resumed>NULL) = -1 EFAULT (Bad address) [pid 507] <... futex resumed>) = 0 [pid 508] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 507] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 508] <... futex resumed>) = 0 [pid 507] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 508] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 507] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 508] <... openat resumed>) = 3 [pid 507] <... futex resumed>) = 0 [pid 508] ioctl(3, USB_RAW_IOCTL_INIT [pid 507] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 508] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 508] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 508] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 62.538679][ T502] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 62.539809][ T501] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [pid 508] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 506] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 505] <... futex resumed>) = 0 [pid 506] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 505] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 506] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 505] <... futex resumed>) = 0 [pid 506] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 505] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 506] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 506] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 506] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 504] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 503] <... futex resumed>) = 0 [pid 504] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 503] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 504] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 503] <... futex resumed>) = 0 [pid 504] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 503] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 504] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 504] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [pid 502] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 501] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 502] <... futex resumed>) = 1 [pid 501] <... futex resumed>) = 1 [pid 502] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 500] <... futex resumed>) = 0 [pid 499] <... futex resumed>) = 0 [pid 501] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 500] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 499] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 501] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 500] <... futex resumed>) = 1 [pid 499] <... futex resumed>) = 0 [pid 502] <... futex resumed>) = 0 [pid 501] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 500] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 499] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 502] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 501] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 502] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 501] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 502] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 501] <... ioctl resumed>, 0x7f6727ef7130) = 26 [pid 502] <... ioctl resumed>, 0x7f6727ef7130) = 26 [pid 506] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 505] <... futex resumed>) = 0 [pid 505] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 505] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 506] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 506] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [ 62.757876][ T319] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 62.765209][ T313] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 62.774101][ T319] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 62.782155][ T313] cdc_ncm 5-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 62.790745][ T313] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 62.797267][ T319] cdc_ncm 1-1:1.0: setting rx_max = 2048 [pid 504] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 503] <... futex resumed>) = 0 [pid 503] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 504] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 503] <... futex resumed>) = 0 [pid 504] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 503] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 504] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 504] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 504] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 62.836449][ T504] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [pid 508] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 508] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 508] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 501] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 499] <... futex resumed>) = 0 [pid 501] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 499] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 501] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 499] <... futex resumed>) = 0 [pid 501] bpf(BPF_PROG_LOAD, NULL, 0 [pid 499] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 501] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 501] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 499] <... futex resumed>) = 0 [pid 501] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 499] close(3) = 0 [pid 499] close(4) = -1 EBADF (Bad file descriptor) [pid 499] close(5) = -1 EBADF (Bad file descriptor) [pid 499] close(6) = -1 EBADF (Bad file descriptor) [pid 499] close(7) = -1 EBADF (Bad file descriptor) [pid 499] close(8) = -1 EBADF (Bad file descriptor) [pid 499] close(9) = -1 EBADF (Bad file descriptor) [pid 499] close(10) = -1 EBADF (Bad file descriptor) [pid 499] close(11) = -1 EBADF (Bad file descriptor) [pid 499] close(12) = -1 EBADF (Bad file descriptor) [pid 499] close(13) = -1 EBADF (Bad file descriptor) [pid 499] close(14) = -1 EBADF (Bad file descriptor) [pid 499] close(15) = -1 EBADF (Bad file descriptor) [pid 499] close(16) = -1 EBADF (Bad file descriptor) [pid 499] close(17) = -1 EBADF (Bad file descriptor) [pid 499] close(18) = -1 EBADF (Bad file descriptor) [ 62.922171][ T39] usb 2-1: new high-speed USB device number 18 using dummy_hcd [pid 499] close(19) = -1 EBADF (Bad file descriptor) [pid 499] close(20) = -1 EBADF (Bad file descriptor) [pid 499] close(21) = -1 EBADF (Bad file descriptor) [pid 499] close(22) = -1 EBADF (Bad file descriptor) [pid 499] close(23) = -1 EBADF (Bad file descriptor) [pid 499] close(24) = -1 EBADF (Bad file descriptor) [pid 499] close(25) = -1 EBADF (Bad file descriptor) [pid 502] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 499] close(26 [pid 502] <... futex resumed>) = 1 [pid 499] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 502] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 499] close(27) = -1 EBADF (Bad file descriptor) [pid 499] close(28) = -1 EBADF (Bad file descriptor) [pid 499] close(29) = -1 EBADF (Bad file descriptor) [pid 499] exit_group(0) = ? [pid 500] <... futex resumed>) = 0 [pid 500] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 502] <... futex resumed>) = 0 [pid 500] <... futex resumed>) = 1 [pid 502] bpf(BPF_PROG_LOAD, NULL, 0 [pid 500] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 502] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 502] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 500] <... futex resumed>) = 0 [pid 502] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 500] close(3 [pid 501] <... futex resumed>) = ? [pid 500] <... close resumed>) = 0 [pid 500] close(4) = -1 EBADF (Bad file descriptor) [pid 500] close(5) = -1 EBADF (Bad file descriptor) [pid 500] close(6) = -1 EBADF (Bad file descriptor) [pid 500] close(7) = -1 EBADF (Bad file descriptor) [pid 500] close(8) = -1 EBADF (Bad file descriptor) [pid 500] close(9) = -1 EBADF (Bad file descriptor) [pid 500] close(10) = -1 EBADF (Bad file descriptor) [pid 500] close(11) = -1 EBADF (Bad file descriptor) [pid 500] close(12) = -1 EBADF (Bad file descriptor) [pid 500] close(13) = -1 EBADF (Bad file descriptor) [pid 500] close(14) = -1 EBADF (Bad file descriptor) [pid 500] close(15) = -1 EBADF (Bad file descriptor) [pid 500] close(16) = -1 EBADF (Bad file descriptor) [pid 500] close(17) = -1 EBADF (Bad file descriptor) [pid 500] close(18) = -1 EBADF (Bad file descriptor) [pid 500] close(19) = -1 EBADF (Bad file descriptor) [pid 500] close(20) = -1 EBADF (Bad file descriptor) [pid 500] close(21) = -1 EBADF (Bad file descriptor) [pid 500] close(22) = -1 EBADF (Bad file descriptor) [pid 500] close(23) = -1 EBADF (Bad file descriptor) [pid 500] close(24) = -1 EBADF (Bad file descriptor) [pid 500] close(25) = -1 EBADF (Bad file descriptor) [pid 500] close(26) = -1 EBADF (Bad file descriptor) [pid 500] close(27) = -1 EBADF (Bad file descriptor) [pid 500] close(28) = -1 EBADF (Bad file descriptor) [pid 500] close(29) = -1 EBADF (Bad file descriptor) [pid 500] exit_group(0 [pid 502] <... futex resumed>) = ? [pid 500] <... exit_group resumed>) = ? [pid 502] +++ exited with 0 +++ [pid 500] +++ exited with 0 +++ [pid 501] +++ exited with 0 +++ [pid 499] +++ exited with 0 +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=32, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 299] restart_syscall(<... resuming interrupted clone ...> [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=32, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 301] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 301] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./15/binderfs") = 0 [pid 301] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 301] close(3executing program ) = 0 [pid 301] rmdir("./15") = 0 [pid 301] mkdir("./16", 0777) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 34 ./strace-static-x86_64: Process 509 attached [pid 509] set_robust_list(0x5555951c7760, 24) = 0 [pid 509] chdir("./16") = 0 [pid 509] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 509] setpgid(0, 0) = 0 [pid 509] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 509] write(3, "1000", 4) = 4 [pid 509] close(3) = 0 [pid 509] symlink("/dev/binderfs", "./binderfs") = 0 [pid 509] write(1, "executing program\n", 18) = 18 [pid 509] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 509] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 509] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 509] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 509] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 509] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 509] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[35]}, 88) = 35 [pid 509] rt_sigprocmask(SIG_SETMASK, [], [pid 299] <... restart_syscall resumed>) = 0 [pid 299] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 299] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./15/binderfs") = 0 [pid 299] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./15") = 0 [pid 299] mkdir("./16", 0777) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 34 [pid 509] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 509] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 509] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}./strace-static-x86_64: Process 510 attached [pid 510] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 510] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 510] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 510] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 509] <... futex resumed>) = 0 [pid 509] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 509] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 510] <... futex resumed>) = 1 [pid 510] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72./strace-static-x86_64: Process 511 attached ) = -1 EINVAL (Invalid argument) [pid 510] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 509] <... futex resumed>) = 0 [pid 509] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 509] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 510] <... futex resumed>) = 1 [pid 510] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 510] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 509] <... futex resumed>) = 0 [pid 509] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 509] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 510] <... futex resumed>) = 1 executing program [pid 510] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 510] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 510] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 510] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 510] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 511] set_robust_list(0x5555951c7760, 24) = 0 [pid 511] chdir("./16") = 0 [pid 511] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 511] setpgid(0, 0) = 0 [pid 511] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 511] write(3, "1000", 4) = 4 [pid 511] close(3) = 0 [pid 511] symlink("/dev/binderfs", "./binderfs") = 0 [pid 511] write(1, "executing program\n", 18) = 18 [pid 511] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 511] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 511] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 511] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 511] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 511] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 511] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[35]}, 88) = 35 [pid 511] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 511] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 511] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}./strace-static-x86_64: Process 512 attached [pid 512] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 512] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 512] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 512] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 511] <... futex resumed>) = 0 [pid 511] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 511] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 512] <... futex resumed>) = 1 [pid 512] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 512] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 511] <... futex resumed>) = 0 [pid 511] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 511] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 512] <... futex resumed>) = 1 [pid 512] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 512] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 511] <... futex resumed>) = 0 [pid 511] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 511] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 512] <... futex resumed>) = 1 [pid 512] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 512] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 512] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 512] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 62.965543][ T319] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 62.980676][ T313] cdc_ncm 5-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 62.994740][ T319] usb 1-1: USB disconnect, device number 17 [pid 512] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 506] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 505] <... futex resumed>) = 0 [pid 506] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 505] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 506] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 505] <... futex resumed>) = 0 [pid 506] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 505] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 506] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 506] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 504] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 503] <... futex resumed>) = 0 [pid 504] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 503] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 504] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 503] <... futex resumed>) = 0 [pid 504] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 503] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 504] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 504] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [pid 506] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 506] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 506] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 63.012653][ T319] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 63.024396][ T313] usb 5-1: USB disconnect, device number 17 [ 63.030796][ T313] cdc_ncm 5-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 63.041213][ T506] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 63.051473][ T24] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [pid 508] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 508] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 508] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 508] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 508] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 508] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [ 63.059588][ T24] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 63.068558][ T24] cdc_ncm 3-1:1.0: setting rx_max = 2048 [pid 508] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 508] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 508] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 508] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 508] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 508] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 508] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 508] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 508] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 508] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 508] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 508] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 508] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [ 63.105155][ T39] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.117349][ T39] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 63.134837][ T39] usb 2-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 63.145796][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.154836][ T39] usb 2-1: Product: syz [ 63.159246][ T39] usb 2-1: Manufacturer: syz [ 63.164184][ T39] usb 2-1: SerialNumber: syz [pid 504] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 503] <... futex resumed>) = 0 [pid 504] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 503] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 504] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 503] <... futex resumed>) = 0 [pid 504] bpf(BPF_PROG_LOAD, NULL, 0 [pid 503] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 504] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 504] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 503] <... futex resumed>) = 0 [pid 504] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 503] close(3) = 0 [pid 506] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 506] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 503] close(4 [pid 505] <... futex resumed>) = 0 [pid 503] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 505] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 503] close(5 [pid 506] <... futex resumed>) = 0 [pid 505] <... futex resumed>) = 1 [pid 503] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 505] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 503] close(6 [pid 506] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 503] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 506] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 503] close(7) = -1 EBADF (Bad file descriptor) [pid 503] close(8) = -1 EBADF (Bad file descriptor) [pid 503] close(9) = -1 EBADF (Bad file descriptor) [pid 503] close(10) = -1 EBADF (Bad file descriptor) [pid 503] close(11) = -1 EBADF (Bad file descriptor) [pid 503] close(12) = -1 EBADF (Bad file descriptor) [pid 503] close(13) = -1 EBADF (Bad file descriptor) [pid 503] close(14) = -1 EBADF (Bad file descriptor) [pid 503] close(15) = -1 EBADF (Bad file descriptor) [pid 503] close(16 [pid 506] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 503] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 503] close(17) = -1 EBADF (Bad file descriptor) [pid 503] close(18) = -1 EBADF (Bad file descriptor) [pid 503] close(19) = -1 EBADF (Bad file descriptor) [pid 506] <... ioctl resumed>, 0x7f6727ef7130) = 26 [pid 503] close(20) = -1 EBADF (Bad file descriptor) [pid 503] close(21) = -1 EBADF (Bad file descriptor) [pid 503] close(22) = -1 EBADF (Bad file descriptor) [pid 503] close(23) = -1 EBADF (Bad file descriptor) [pid 503] close(24) = -1 EBADF (Bad file descriptor) [pid 503] close(25) = -1 EBADF (Bad file descriptor) [pid 503] close(26) = -1 EBADF (Bad file descriptor) [pid 503] close(27) = -1 EBADF (Bad file descriptor) [pid 503] close(28) = -1 EBADF (Bad file descriptor) [pid 503] close(29) = -1 EBADF (Bad file descriptor) [pid 503] exit_group(0 [pid 504] <... futex resumed>) = ? [pid 503] <... exit_group resumed>) = ? [pid 504] +++ exited with 0 +++ [pid 503] +++ exited with 0 +++ [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=32, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [ 63.257957][ T24] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 63.272601][ T24] usb 3-1: USB disconnect, device number 17 [ 63.282608][ T315] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 63.289301][ T315] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 63.298035][ T315] cdc_ncm 4-1:1.0: setting rx_max = 2048 [pid 302] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 302] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 302] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 302] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 302] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] unlink("./15/binderfs") = 0 [pid 302] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 302] close(3) = 0 [pid 302] rmdir("./15") = 0 [pid 302] mkdir("./16", 0777) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 34 ./strace-static-x86_64: Process 513 attached [pid 513] set_robust_list(0x5555951c7760, 24) = 0 [pid 513] chdir("./16") = 0 [pid 513] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 513] setpgid(0, 0) = 0 [pid 513] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 513] write(3, "1000", 4) = 4 [pid 513] close(3) = 0 [pid 513] symlink("/dev/binderfs", "./binderfs") = 0 [pid 513] write(1, "executing program\n", 18executing program ) = 18 [pid 513] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 513] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 513] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 513] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 513] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 513] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 513] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[35]}, 88) = 35 ./strace-static-x86_64: Process 514 attached [pid 514] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 514] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 514] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 513] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 513] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 514] <... futex resumed>) = 0 [pid 514] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 514] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 514] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 513] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 513] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 514] <... futex resumed>) = 0 [pid 513] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 514] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 514] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 513] <... futex resumed>) = 0 [pid 514] socketpair(AF_UNIX, SOCK_STREAM, 0, [pid 513] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 514] <... socketpair resumed>NULL) = -1 EFAULT (Bad address) [pid 514] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 513] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 514] <... futex resumed>) = 0 [pid 513] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 513] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 514] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 513] <... futex resumed>) = 0 [pid 514] <... openat resumed>) = 3 [pid 513] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 514] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 514] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 514] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 63.304350][ T24] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [pid 514] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 508] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 507] <... futex resumed>) = 0 [pid 508] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 507] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 508] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 507] <... futex resumed>) = 0 [pid 508] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 507] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 508] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 508] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 508] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 508] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 508] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 63.373075][ T508] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [pid 512] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 512] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 512] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 506] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 505] <... futex resumed>) = 0 [pid 506] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 505] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 506] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 505] <... futex resumed>) = 0 [pid 506] bpf(BPF_PROG_LOAD, NULL, 0 [pid 505] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 506] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 506] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 505] <... futex resumed>) = 0 [pid 506] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [ 63.442302][ T319] usb 1-1: new high-speed USB device number 18 using dummy_hcd [pid 505] close(3) = 0 [pid 505] close(4) = -1 EBADF (Bad file descriptor) [pid 505] close(5) = -1 EBADF (Bad file descriptor) [pid 505] close(6) = -1 EBADF (Bad file descriptor) [pid 505] close(7) = -1 EBADF (Bad file descriptor) [pid 505] close(8) = -1 EBADF (Bad file descriptor) [pid 505] close(9) = -1 EBADF (Bad file descriptor) [pid 505] close(10) = -1 EBADF (Bad file descriptor) [pid 505] close(11) = -1 EBADF (Bad file descriptor) [pid 505] close(12) = -1 EBADF (Bad file descriptor) [pid 505] close(13) = -1 EBADF (Bad file descriptor) [pid 505] close(14) = -1 EBADF (Bad file descriptor) [pid 505] close(15) = -1 EBADF (Bad file descriptor) [pid 505] close(16) = -1 EBADF (Bad file descriptor) [pid 505] close(17) = -1 EBADF (Bad file descriptor) [pid 505] close(18) = -1 EBADF (Bad file descriptor) [pid 505] close(19 [pid 510] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 505] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 510] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 505] close(20) = -1 EBADF (Bad file descriptor) [pid 505] close(21) = -1 EBADF (Bad file descriptor) [pid 505] close(22) = -1 EBADF (Bad file descriptor) [pid 505] close(23) = -1 EBADF (Bad file descriptor) [pid 505] close(24) = -1 EBADF (Bad file descriptor) [pid 505] close(25) = -1 EBADF (Bad file descriptor) [pid 505] close(26) = -1 EBADF (Bad file descriptor) [pid 505] close(27) = -1 EBADF (Bad file descriptor) [pid 505] close(28) = -1 EBADF (Bad file descriptor) [pid 505] close(29) = -1 EBADF (Bad file descriptor) [pid 505] exit_group(0 [pid 506] <... futex resumed>) = ? [pid 505] <... exit_group resumed>) = ? [pid 510] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 506] +++ exited with 0 +++ [pid 505] +++ exited with 0 +++ [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=32, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 300] restart_syscall(<... resuming interrupted clone ...> [pid 510] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 300] <... restart_syscall resumed>) = 0 [pid 300] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 300] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./15/binderfs") = 0 [pid 300] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./15") = 0 [pid 300] mkdir("./16", 0777) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDexecuting program , child_tidptr=0x5555951c7750) = 34 ./strace-static-x86_64: Process 515 attached [pid 515] set_robust_list(0x5555951c7760, 24) = 0 [pid 515] chdir("./16") = 0 [pid 515] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 515] setpgid(0, 0) = 0 [pid 515] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 515] write(3, "1000", 4) = 4 [pid 515] close(3) = 0 [pid 515] symlink("/dev/binderfs", "./binderfs") = 0 [pid 515] write(1, "executing program\n", 18) = 18 [pid 515] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 515] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 515] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 515] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 515] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 515] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 515] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[35]}, 88) = 35 ./strace-static-x86_64: Process 516 attached [pid 515] rt_sigprocmask(SIG_SETMASK, [], [pid 516] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 516] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 516] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 515] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 515] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 516] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 516] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 516] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 516] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 515] <... futex resumed>) = 1 [pid 516] <... futex resumed>) = 0 [pid 516] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 515] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 515] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 516] <... futex resumed>) = 0 [pid 516] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 515] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 516] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 516] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 516] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 515] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 515] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 515] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 516] <... futex resumed>) = 0 [pid 516] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 516] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 515] <... futex resumed>) = 0 [pid 515] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 515] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 516] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 516] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 516] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 516] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 63.486257][ T315] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 63.499131][ T313] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 63.510502][ T315] usb 4-1: USB disconnect, device number 17 [ 63.518404][ T315] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [pid 516] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 508] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 507] <... futex resumed>) = 0 [pid 508] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 507] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 508] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 507] <... futex resumed>) = 0 [pid 508] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 507] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 508] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 508] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 508] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 508] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 512] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 512] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 512] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 512] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 512] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 512] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 512] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 512] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 512] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 512] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 512] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 512] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 512] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 512] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [ 63.634119][ T319] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.647331][ T319] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 63.660972][ T319] usb 1-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 63.671226][ T319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [pid 512] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 512] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 512] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 512] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 512] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [pid 510] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 510] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 510] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 510] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 510] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 510] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [ 63.680360][ T319] usb 1-1: Product: syz [ 63.685257][ T319] usb 1-1: Manufacturer: syz [ 63.690847][ T319] usb 1-1: SerialNumber: syz [ 63.713855][ T313] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 510] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 510] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 510] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 510] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 510] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 510] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 510] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 510] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 510] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 514] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 514] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [ 63.727774][ T313] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 63.743419][ T313] usb 5-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 63.753633][ T24] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 63.761930][ T313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.770280][ T313] usb 5-1: Product: syz [ 63.775332][ T313] usb 5-1: Manufacturer: syz [pid 514] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 508] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 507] <... futex resumed>) = 0 [pid 508] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 507] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 508] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 508] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 507] <... futex resumed>) = 0 [pid 507] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 508] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 508] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [pid 510] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 510] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 510] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 510] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 510] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [ 63.780304][ T313] usb 5-1: SerialNumber: syz [pid 512] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 511] <... futex resumed>) = 0 [pid 512] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 511] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 512] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 511] <... futex resumed>) = 0 [pid 512] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 511] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 512] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 512] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 512] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 512] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 512] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 516] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 516] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 516] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 514] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 514] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 514] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 514] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [ 63.900387][ T512] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 63.932274][ T315] usb 4-1: new high-speed USB device number 18 using dummy_hcd [pid 514] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 514] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 514] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 514] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 514] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 514] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 514] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 514] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 514] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 514] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 514] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 508] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 507] <... futex resumed>) = 0 [pid 508] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 507] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 508] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 507] <... futex resumed>) = 0 [pid 508] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 507] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 508] <... ioctl resumed>, 0x7f6727ef8140) = 0 [ 63.953571][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.965410][ T24] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 63.979113][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 63.988583][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.989483][ T508] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [pid 508] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 510] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 509] <... futex resumed>) = 0 [pid 509] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 509] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 510] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 508] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 508] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 508] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 510] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 510] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 508] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 510] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 510] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 514] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 514] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 514] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 514] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 514] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 510] <... ioctl resumed>, 0x7f6727fc893c) = 11 [pid 514] <... ioctl resumed>, 0x7f6727ef7110) = 0 [pid 510] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 63.997021][ T24] usb 3-1: Product: syz [ 64.008362][ T24] usb 3-1: Manufacturer: syz [ 64.013202][ T24] usb 3-1: SerialNumber: syz [ 64.019993][ T510] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [pid 512] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 511] <... futex resumed>) = 0 [pid 511] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 511] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 512] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 512] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 512] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 512] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 516] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 516] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 516] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 516] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 516] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 516] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 516] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 516] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 516] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 516] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 516] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 516] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 516] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 516] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [ 64.114323][ T315] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.126793][ T315] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 64.141917][ T315] usb 4-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 64.151293][ T315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [pid 516] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 516] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 516] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 516] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 516] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [pid 508] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 507] <... futex resumed>) = 0 [pid 508] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 507] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 508] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 508] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [ 64.160773][ T315] usb 4-1: Product: syz [ 64.165114][ T315] usb 4-1: Manufacturer: syz [ 64.170395][ T315] usb 4-1: SerialNumber: syz [pid 508] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [pid 507] <... futex resumed>) = 0 [pid 514] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 507] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 514] <... futex resumed>) = 1 [pid 513] <... futex resumed>) = 0 [pid 510] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 514] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 513] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 514] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 513] <... futex resumed>) = 0 [pid 514] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 513] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 514] <... ioctl resumed>, 0) = 0 [pid 514] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 510] <... futex resumed>) = 1 [pid 509] <... futex resumed>) = 0 [pid 509] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 509] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 510] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 510] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 510] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 510] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 514] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 514] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 514] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 64.222037][ T39] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 64.230349][ T39] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 64.238727][ T39] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 64.239874][ T514] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [pid 512] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 511] <... futex resumed>) = 0 [pid 512] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 511] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 512] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 511] <... futex resumed>) = 0 [pid 512] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 511] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 512] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 512] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [pid 516] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 515] <... futex resumed>) = 0 [pid 516] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 515] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 516] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 515] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 516] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 516] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 516] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 516] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 516] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 508] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 507] <... futex resumed>) = 0 [pid 508] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 507] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 508] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 507] <... futex resumed>) = 0 [pid 508] bpf(BPF_PROG_LOAD, NULL, 0 [pid 507] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 508] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 508] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 507] <... futex resumed>) = 0 [pid 508] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [ 64.384211][ T516] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [pid 507] close(3executing program ) = 0 [pid 507] close(4) = -1 EBADF (Bad file descriptor) [pid 507] close(5) = -1 EBADF (Bad file descriptor) [pid 507] close(6) = -1 EBADF (Bad file descriptor) [pid 507] close(7) = -1 EBADF (Bad file descriptor) [pid 507] close(8) = -1 EBADF (Bad file descriptor) [pid 507] close(9) = -1 EBADF (Bad file descriptor) [pid 507] close(10) = -1 EBADF (Bad file descriptor) [pid 507] close(11) = -1 EBADF (Bad file descriptor) [pid 507] close(12) = -1 EBADF (Bad file descriptor) [pid 507] close(13) = -1 EBADF (Bad file descriptor) [pid 507] close(14) = -1 EBADF (Bad file descriptor) [pid 507] close(15) = -1 EBADF (Bad file descriptor) [pid 507] close(16) = -1 EBADF (Bad file descriptor) [pid 507] close(17) = -1 EBADF (Bad file descriptor) [pid 507] close(18) = -1 EBADF (Bad file descriptor) [pid 507] close(19) = -1 EBADF (Bad file descriptor) [pid 507] close(20) = -1 EBADF (Bad file descriptor) [pid 507] close(21) = -1 EBADF (Bad file descriptor) [pid 507] close(22) = -1 EBADF (Bad file descriptor) [pid 507] close(23) = -1 EBADF (Bad file descriptor) [pid 507] close(24) = -1 EBADF (Bad file descriptor) [pid 507] close(25) = -1 EBADF (Bad file descriptor) [pid 507] close(26) = -1 EBADF (Bad file descriptor) [pid 507] close(27) = -1 EBADF (Bad file descriptor) [pid 507] close(28) = -1 EBADF (Bad file descriptor) [pid 507] close(29) = -1 EBADF (Bad file descriptor) [pid 507] exit_group(0) = ? [pid 508] <... futex resumed>) = ? [pid 514] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 510] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 514] <... futex resumed>) = 1 [pid 513] <... futex resumed>) = 0 [pid 510] <... futex resumed>) = 1 [pid 514] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 513] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 510] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 514] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 513] <... futex resumed>) = 0 [pid 514] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 513] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 514] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 514] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 514] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 514] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 508] +++ exited with 0 +++ [pid 509] <... futex resumed>) = 0 [pid 507] +++ exited with 0 +++ [pid 509] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=34, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 510] <... futex resumed>) = 0 [pid 509] <... futex resumed>) = 1 [pid 510] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 509] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 510] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 298] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW [pid 510] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 298] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 510] <... ioctl resumed>, 0x7f6727ef7130) = 28 [pid 298] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 298] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./16/binderfs") = 0 [pid 298] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./16") = 0 [pid 298] mkdir("./17", 0777) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 36 ./strace-static-x86_64: Process 517 attached [pid 517] set_robust_list(0x5555951c7760, 24) = 0 [pid 517] chdir("./17") = 0 [pid 517] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 517] setpgid(0, 0) = 0 [pid 517] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 517] write(3, "1000", 4) = 4 [pid 517] close(3) = 0 [pid 517] symlink("/dev/binderfs", "./binderfs") = 0 [pid 517] write(1, "executing program\n", 18) = 18 [pid 517] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 517] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 517] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 517] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 517] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 517] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 517] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[37]}, 88) = 37 [pid 517] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 517] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 517] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}./strace-static-x86_64: Process 518 attached [pid 518] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 518] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 518] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 518] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 517] <... futex resumed>) = 0 [pid 517] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 517] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 518] <... futex resumed>) = 1 [pid 518] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 518] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 517] <... futex resumed>) = 0 [pid 517] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 517] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 518] <... futex resumed>) = 1 [pid 518] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 518] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 517] <... futex resumed>) = 0 [pid 517] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 517] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 518] <... futex resumed>) = 1 [pid 518] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 518] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 518] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 518] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 518] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 512] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 511] <... futex resumed>) = 0 [pid 511] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 511] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 512] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [ 64.442561][ T39] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 64.471464][ T39] usb 2-1: USB disconnect, device number 18 [ 64.478769][ T39] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [pid 512] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 512] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 512] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 64.515025][ T512] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [pid 516] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 515] <... futex resumed>) = 0 [pid 515] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 516] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 515] <... futex resumed>) = 0 [pid 516] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 515] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 516] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 516] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 516] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 514] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 513] <... futex resumed>) = 0 [pid 514] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 513] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 514] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 513] <... futex resumed>) = 0 [pid 514] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 513] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 510] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 509] <... futex resumed>) = 0 [pid 510] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 509] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 510] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 509] <... futex resumed>) = 0 [pid 510] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 509] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 510] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 510] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 514] <... ioctl resumed>, 0x7f6727ef7130) = 28 [pid 510] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 510] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 510] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 64.658610][ T510] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [pid 512] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 511] <... futex resumed>) = 0 [pid 512] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 511] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 512] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 511] <... futex resumed>) = 0 [pid 512] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 511] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 512] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 512] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [ 64.728267][ T319] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 64.735509][ T319] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 64.743610][ T319] cdc_ncm 1-1:1.0: setting rx_max = 2048 [pid 516] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 515] <... futex resumed>) = 0 [pid 516] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 515] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 515] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 516] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 516] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [pid 514] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 514] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 513] <... futex resumed>) = 0 [pid 513] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 514] <... futex resumed>) = 0 [pid 513] <... futex resumed>) = 1 [pid 514] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 513] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 514] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 514] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 510] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 518] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 514] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 510] <... futex resumed>) = 1 [pid 509] <... futex resumed>) = 0 [pid 518] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 509] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 510] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 509] <... futex resumed>) = 0 [pid 509] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 514] <... ioctl resumed>, 0x7f6727fc893c) = 11 [pid 518] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 510] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 514] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 518] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 510] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 514] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 510] <... ioctl resumed>, 0x7f6727ef7130) = 26 [pid 512] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 511] <... futex resumed>) = 0 [pid 511] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 511] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 512] bpf(BPF_PROG_LOAD, NULL, 0) = -1 EFAULT (Bad address) [pid 512] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 511] <... futex resumed>) = 0 [pid 512] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 511] close(3) = 0 [pid 511] close(4) = -1 EBADF (Bad file descriptor) [pid 511] close(5) = -1 EBADF (Bad file descriptor) [pid 511] close(6) = -1 EBADF (Bad file descriptor) [pid 511] close(7) = -1 EBADF (Bad file descriptor) [pid 511] close(8) = -1 EBADF (Bad file descriptor) [pid 511] close(9) = -1 EBADF (Bad file descriptor) [pid 511] close(10) = -1 EBADF (Bad file descriptor) [ 64.868701][ T514] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 64.876511][ T39] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 64.886736][ T313] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 64.894457][ T313] cdc_ncm 5-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 64.902457][ T313] cdc_ncm 5-1:1.0: setting rx_max = 2048 [pid 511] close(11) = -1 EBADF (Bad file descriptor) [pid 511] close(12) = -1 EBADF (Bad file descriptor) [pid 511] close(13) = -1 EBADF (Bad file descriptor) [pid 511] close(14) = -1 EBADF (Bad file descriptor) [pid 511] close(15) = -1 EBADF (Bad file descriptor) [pid 511] close(16) = -1 EBADF (Bad file descriptor) [pid 511] close(17) = -1 EBADF (Bad file descriptor) [pid 511] close(18) = -1 EBADF (Bad file descriptor) [pid 511] close(19) = -1 EBADF (Bad file descriptor) [pid 511] close(20) = -1 EBADF (Bad file descriptor) [pid 511] close(21) = -1 EBADF (Bad file descriptor) [pid 511] close(22) = -1 EBADF (Bad file descriptor) [pid 511] close(23) = -1 EBADF (Bad file descriptor) [pid 511] close(24) = -1 EBADF (Bad file descriptor) [pid 511] close(25) = -1 EBADF (Bad file descriptor) [pid 511] close(26) = -1 EBADF (Bad file descriptor) [pid 511] close(27) = -1 EBADF (Bad file descriptor) [pid 511] close(28) = -1 EBADF (Bad file descriptor) [pid 511] close(29) = -1 EBADF (Bad file descriptor) [pid 511] exit_group(0 [pid 512] <... futex resumed>) = ? [pid 511] <... exit_group resumed>) = ? [pid 512] +++ exited with 0 +++ [pid 511] +++ exited with 0 +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=34, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 299] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 299] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 299] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./16/binderfs") = 0 [pid 299] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./16") = 0 [pid 299] mkdir("./17", 0777) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 519 attached , child_tidptr=0x5555951c7750) = 36 [pid 519] set_robust_list(0x5555951c7760, 24) = 0 [pid 519] chdir("./17") = 0 [pid 519] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 519] setpgid(0, 0) = 0 [pid 519] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 519] write(3, "1000", 4) = 4 [pid 519] close(3) = 0 [pid 519] symlink("/dev/binderfs", "./binderfs") = 0 [pid 519] write(1, "executing program\n", 18executing program ) = 18 [pid 519] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 519] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 519] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 519] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 519] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 519] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 519] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0}./strace-static-x86_64: Process 520 attached => {parent_tid=[37]}, 88) = 37 [pid 519] rt_sigprocmask(SIG_SETMASK, [], [pid 520] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 520] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 519] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 519] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 520] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0 [pid 519] <... futex resumed>) = 0 [pid 520] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 520] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 520] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 519] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 519] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 520] <... futex resumed>) = 0 [pid 520] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 519] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 520] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 520] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 520] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 519] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 519] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 520] <... futex resumed>) = 0 [pid 519] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 520] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 520] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 519] <... futex resumed>) = 0 [pid 520] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 519] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 520] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 519] <... futex resumed>) = 0 [pid 519] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 520] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 520] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 520] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 520] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 520] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 516] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 515] <... futex resumed>) = 0 [pid 516] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 515] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 516] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 515] <... futex resumed>) = 0 [pid 515] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 516] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [ 64.934179][ T319] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 64.949427][ T319] usb 1-1: USB disconnect, device number 18 [ 64.956678][ T319] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [pid 516] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 516] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 516] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 518] <... ioctl resumed>, 0x7f6727ef8120) = 0 [ 65.001484][ T516] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [pid 518] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 518] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 518] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 518] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 518] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 518] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 518] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 518] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 518] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 518] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 518] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 518] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 518] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 518] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 510] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 510] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 514] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 509] <... futex resumed>) = 0 [pid 514] <... futex resumed>) = 1 [pid 513] <... futex resumed>) = 0 [pid 509] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 510] <... futex resumed>) = 0 [pid 509] <... futex resumed>) = 1 [pid 510] bpf(BPF_PROG_LOAD, NULL, 0 [pid 509] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 510] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 510] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 509] <... futex resumed>) = 0 [ 65.064851][ T39] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.076979][ T39] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 65.090925][ T39] usb 2-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 65.101155][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.109600][ T39] usb 2-1: Product: syz [pid 510] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 509] close(3 [pid 514] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 513] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 509] <... close resumed>) = 0 [pid 509] close(4) = -1 EBADF (Bad file descriptor) [pid 509] close(5) = -1 EBADF (Bad file descriptor) [pid 509] close(6) = -1 EBADF (Bad file descriptor) [pid 509] close(7) = -1 EBADF (Bad file descriptor) [pid 509] close(8) = -1 EBADF (Bad file descriptor) [pid 509] close(9) = -1 EBADF (Bad file descriptor) [pid 509] close(10) = -1 EBADF (Bad file descriptor) [pid 509] close(11) = -1 EBADF (Bad file descriptor) [pid 509] close(12) = -1 EBADF (Bad file descriptor) [pid 509] close(13) = -1 EBADF (Bad file descriptor) [pid 509] close(14) = -1 EBADF (Bad file descriptor) [pid 509] close(15) = -1 EBADF (Bad file descriptor) [pid 509] close(16) = -1 EBADF (Bad file descriptor) [pid 509] close(17) = -1 EBADF (Bad file descriptor) [pid 509] close(18) = -1 EBADF (Bad file descriptor) [pid 509] close(19) = -1 EBADF (Bad file descriptor) [pid 509] close(20) = -1 EBADF (Bad file descriptor) [pid 509] close(21) = -1 EBADF (Bad file descriptor) [pid 509] close(22) = -1 EBADF (Bad file descriptor) [pid 509] close(23) = -1 EBADF (Bad file descriptor) [pid 509] close(24) = -1 EBADF (Bad file descriptor) [pid 509] close(25) = -1 EBADF (Bad file descriptor) [pid 509] close(26) = -1 EBADF (Bad file descriptor) [pid 509] close(27) = -1 EBADF (Bad file descriptor) [pid 509] close(28) = -1 EBADF (Bad file descriptor) [pid 509] close(29) = -1 EBADF (Bad file descriptor) [pid 509] exit_group(0 [pid 510] <... futex resumed>) = ? [pid 509] <... exit_group resumed>) = ? [pid 510] +++ exited with 0 +++ [pid 509] +++ exited with 0 +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=34, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 301] restart_syscall(<... resuming interrupted clone ...> [pid 514] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 514] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 514] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 513] <... futex resumed>) = 0 [pid 513] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 301] <... restart_syscall resumed>) = 0 [pid 301] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 514] <... ioctl resumed>, 0x7f6727ef7130) = 26 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 301] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./16/binderfs") = 0 [pid 301] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./16") = 0 [pid 301] mkdir("./17", 0777) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 36 ./strace-static-x86_64: Process 521 attached [pid 521] set_robust_list(0x5555951c7760, 24) = 0 [pid 521] chdir("./17") = 0 [pid 521] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 521] setpgid(0, 0) = 0 [pid 521] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 521] write(3, "1000", 4) = 4 [pid 521] close(3) = 0 [pid 521] symlink("/dev/binderfs", "./binderfs") = 0 [pid 521] write(1, "executing program\n", 18executing program ) = 18 [pid 521] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 521] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 521] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 521] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 521] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 521] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 521] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[37]}, 88) = 37 [pid 521] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 521] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 521] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}./strace-static-x86_64: Process 522 attached [pid 522] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 522] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 522] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 522] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 521] <... futex resumed>) = 0 [pid 521] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 521] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 522] <... futex resumed>) = 1 [pid 522] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 522] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 521] <... futex resumed>) = 0 [pid 521] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 521] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 522] <... futex resumed>) = 1 [pid 522] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 522] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 521] <... futex resumed>) = 0 [pid 521] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 521] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 522] <... futex resumed>) = 1 [pid 522] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 522] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 522] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 522] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 65.114599][ T39] usb 2-1: Manufacturer: syz [ 65.122340][ T313] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 65.135238][ T24] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 65.142564][ T39] usb 2-1: SerialNumber: syz [ 65.148129][ T24] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [pid 522] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 518] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 518] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 518] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 518] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 518] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [pid 516] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 515] <... futex resumed>) = 0 [ 65.161228][ T313] usb 5-1: USB disconnect, device number 18 [ 65.168591][ T24] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 65.176300][ T313] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [pid 516] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 515] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 515] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 516] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 516] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 516] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [ 65.214189][ T315] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 65.221347][ T315] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 65.230733][ T315] cdc_ncm 4-1:1.0: setting rx_max = 2048 [pid 514] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 513] <... futex resumed>) = 0 [pid 514] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 513] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 514] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 513] <... futex resumed>) = 0 [pid 514] bpf(BPF_PROG_LOAD, NULL, 0 [pid 513] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 514] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 514] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 513] <... futex resumed>) = 0 [pid 513] close(3 [pid 514] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 513] <... close resumed>) = 0 [pid 513] close(4) = -1 EBADF (Bad file descriptor) [pid 513] close(5) = -1 EBADF (Bad file descriptor) [pid 513] close(6) = -1 EBADF (Bad file descriptor) [pid 513] close(7) = -1 EBADF (Bad file descriptor) [pid 513] close(8) = -1 EBADF (Bad file descriptor) [pid 513] close(9) = -1 EBADF (Bad file descriptor) [pid 513] close(10) = -1 EBADF (Bad file descriptor) [pid 513] close(11) = -1 EBADF (Bad file descriptor) [pid 513] close(12) = -1 EBADF (Bad file descriptor) [pid 513] close(13) = -1 EBADF (Bad file descriptor) [pid 513] close(14) = -1 EBADF (Bad file descriptor) [pid 513] close(15) = -1 EBADF (Bad file descriptor) [pid 513] close(16) = -1 EBADF (Bad file descriptor) [pid 513] close(17) = -1 EBADF (Bad file descriptor) [pid 513] close(18 [pid 520] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 513] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 513] close(19) = -1 EBADF (Bad file descriptor) [pid 520] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 513] close(20 [pid 520] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 513] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 520] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 513] close(21) = -1 EBADF (Bad file descriptor) [pid 513] close(22) = -1 EBADF (Bad file descriptor) [pid 513] close(23) = -1 EBADF (Bad file descriptor) [pid 513] close(24) = -1 EBADF (Bad file descriptor) [pid 513] close(25) = -1 EBADF (Bad file descriptor) [pid 513] close(26) = -1 EBADF (Bad file descriptor) [pid 513] close(27) = -1 EBADF (Bad file descriptor) [pid 513] close(28) = -1 EBADF (Bad file descriptor) [pid 513] close(29) = -1 EBADF (Bad file descriptor) [pid 513] exit_group(0 [pid 514] <... futex resumed>) = ? [pid 513] <... exit_group resumed>) = ? [pid 514] +++ exited with 0 +++ [pid 513] +++ exited with 0 +++ [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=34, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 302] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 302] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 302] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 302] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] unlink("./16/binderfs") = 0 [pid 302] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 302] close(3) = 0 [pid 302] rmdir("./16") = 0 [pid 302] mkdir("./17", 0777) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 36 ./strace-static-x86_64: Process 523 attached [pid 523] set_robust_list(0x5555951c7760, 24) = 0 [pid 523] chdir("./17") = 0 [pid 523] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 523] setpgid(0, 0) = 0 [pid 523] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 518] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 517] <... futex resumed>) = 0 [pid 518] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 517] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 518] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 517] <... futex resumed>) = 0 [pid 518] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 517] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 518] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 518] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 518] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 523] <... openat resumed>) = 3 [pid 518] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 518] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 523] write(3, "1000", 4) = 4 [pid 523] close(3) = 0 [pid 518] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 523] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 523] write(1, "executing program\n", 18) = 18 [pid 518] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 523] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 523] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 523] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 523] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 523] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 523] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 523] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0}./strace-static-x86_64: Process 524 attached => {parent_tid=[37]}, 88) = 37 [pid 524] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 523] rt_sigprocmask(SIG_SETMASK, [], [pid 524] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 524] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 523] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 523] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 524] <... futex resumed>) = 0 [pid 523] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 524] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 524] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 524] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 523] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 523] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 524] <... futex resumed>) = 0 [pid 523] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 524] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 524] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 523] <... futex resumed>) = 0 [pid 524] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 523] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 524] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 523] <... futex resumed>) = 0 [pid 523] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 524] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 524] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 523] <... futex resumed>) = 0 [pid 523] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 524] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 523] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 524] <... openat resumed>) = 3 [pid 524] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 524] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 524] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 524] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 516] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 515] <... futex resumed>) = 0 [pid 516] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 515] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 516] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 515] <... futex resumed>) = 0 [pid 516] bpf(BPF_PROG_LOAD, NULL, 0 [pid 515] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 516] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 516] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 515] <... futex resumed>) = 0 [pid 516] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [ 65.340481][ T24] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 65.352415][ T319] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 65.364912][ T24] usb 3-1: USB disconnect, device number 18 [ 65.371492][ T24] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 65.376225][ T518] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [pid 515] close(3) = 0 [pid 515] close(4) = -1 EBADF (Bad file descriptor) [pid 515] close(5) = -1 EBADF (Bad file descriptor) [pid 515] close(6) = -1 EBADF (Bad file descriptor) [pid 515] close(7) = -1 EBADF (Bad file descriptor) [pid 515] close(8) = -1 EBADF (Bad file descriptor) [pid 515] close(9) = -1 EBADF (Bad file descriptor) [pid 515] close(10) = -1 EBADF (Bad file descriptor) [pid 515] close(11) = -1 EBADF (Bad file descriptor) [pid 515] close(12) = -1 EBADF (Bad file descriptor) [pid 515] close(13) = -1 EBADF (Bad file descriptor) [pid 515] close(14) = -1 EBADF (Bad file descriptor) [pid 515] close(15) = -1 EBADF (Bad file descriptor) [pid 515] close(16) = -1 EBADF (Bad file descriptor) [pid 515] close(17) = -1 EBADF (Bad file descriptor) [pid 515] close(18) = -1 EBADF (Bad file descriptor) [pid 515] close(19) = -1 EBADF (Bad file descriptor) [pid 515] close(20) = -1 EBADF (Bad file descriptor) [pid 515] close(21) = -1 EBADF (Bad file descriptor) [pid 515] close(22) = -1 EBADF (Bad file descriptor) [pid 515] close(23) = -1 EBADF (Bad file descriptor) [pid 515] close(24) = -1 EBADF (Bad file descriptor) [pid 515] close(25) = -1 EBADF (Bad file descriptor) [pid 515] close(26) = -1 EBADF (Bad file descriptor) [pid 515] close(27) = -1 EBADF (Bad file descriptor) [pid 515] close(28) = -1 EBADF (Bad file descriptor) [pid 515] close(29) = -1 EBADF (Bad file descriptor) [pid 515] exit_group(0) = ? [pid 516] <... futex resumed>) = ? [pid 516] +++ exited with 0 +++ [pid 515] +++ exited with 0 +++ [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=34, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 300] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 300] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 300] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./16/binderfs") = 0 [pid 300] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./16") = 0 [pid 300] mkdir("./17", 0777) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 525 attached , child_tidptr=0x5555951c7750) = 36 [pid 525] set_robust_list(0x5555951c7760, 24) = 0 [pid 525] chdir("./17") = 0 [pid 525] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 executing program [pid 525] setpgid(0, 0) = 0 [pid 525] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 525] write(3, "1000", 4) = 4 [pid 525] close(3) = 0 [pid 525] symlink("/dev/binderfs", "./binderfs") = 0 [pid 525] write(1, "executing program\n", 18) = 18 [pid 525] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 525] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 525] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 525] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 525] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 525] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 525] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[37]}, 88) = 37 ./strace-static-x86_64: Process 526 attached [pid 525] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 525] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 525] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 526] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 526] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 526] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 526] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 526] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 525] <... futex resumed>) = 0 [pid 525] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 525] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 526] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 526] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 526] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 525] <... futex resumed>) = 0 [pid 525] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 525] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 526] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 526] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 525] <... futex resumed>) = 0 [pid 525] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 525] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 526] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 526] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 526] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 526] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 65.417878][ T315] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 65.446344][ T315] usb 4-1: USB disconnect, device number 18 [ 65.455482][ T315] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [pid 526] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 520] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 520] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 520] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 520] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 520] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 520] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 520] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 520] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 520] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 520] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 520] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 520] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 520] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 520] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 520] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 518] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 517] <... futex resumed>) = 0 [pid 518] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 517] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 518] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 517] <... futex resumed>) = 0 [pid 518] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 517] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 518] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 518] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 518] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 518] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 65.554924][ T319] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.568115][ T319] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 65.583251][ T319] usb 1-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 65.593301][ T319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [pid 522] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 522] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 522] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 520] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 520] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 520] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 520] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 520] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [ 65.602056][ T319] usb 1-1: Product: syz [ 65.606843][ T319] usb 1-1: Manufacturer: syz [ 65.612070][ T319] usb 1-1: SerialNumber: syz [ 65.616865][ T313] usb 5-1: new high-speed USB device number 19 using dummy_hcd [pid 524] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 524] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 524] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 522] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 518] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 522] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 518] <... futex resumed>) = 1 [pid 522] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 518] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 517] <... futex resumed>) = 0 [pid 522] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 517] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 522] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 518] <... futex resumed>) = 0 [pid 517] <... futex resumed>) = 1 [pid 522] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 518] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 517] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 518] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 522] <... ioctl resumed>, 0x7f6727ef7110) = 9 [pid 518] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 522] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 518] <... ioctl resumed>, 0x7f6727ef7130) = 28 [pid 522] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 522] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 522] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 520] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 519] <... futex resumed>) = 0 [pid 520] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 519] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 522] <... ioctl resumed>, 0x7f6727ef7110) = 4 [pid 520] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 522] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 520] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 519] <... futex resumed>) = 0 [pid 520] <... ioctl resumed>, 0) = 0 [pid 522] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 520] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 522] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 519] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 522] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 522] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 522] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 522] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 522] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 520] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 520] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 522] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 522] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 520] <... ioctl resumed>, 0x7f6727fc893c) = 11 [ 65.792174][ T24] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 65.804088][ T313] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.816130][ T313] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 65.829150][ T520] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [pid 520] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 526] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 526] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 526] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 522] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 522] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 522] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 522] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 522] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [ 65.838908][ T313] usb 5-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 65.849585][ T313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.858852][ T315] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 65.867090][ T313] usb 5-1: Product: syz [ 65.871363][ T313] usb 5-1: Manufacturer: syz [ 65.876375][ T313] usb 5-1: SerialNumber: syz [pid 524] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 524] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 524] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 524] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 524] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 524] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 524] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 524] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 524] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 524] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 524] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 524] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 524] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 524] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 524] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 518] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 517] <... futex resumed>) = 0 [pid 518] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 517] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 518] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 517] <... futex resumed>) = 0 [pid 518] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 517] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 518] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 518] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 518] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [ 65.974215][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.985965][ T24] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 66.001392][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 66.005137][ T518] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [pid 518] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 524] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 524] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 524] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 524] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 524] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [pid 520] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 519] <... futex resumed>) = 0 [pid 519] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 519] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 520] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 520] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 520] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 520] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 526] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 526] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 520] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 526] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 526] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 526] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 526] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 526] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [ 66.010824][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.028134][ T24] usb 3-1: Product: syz [ 66.032799][ T24] usb 3-1: Manufacturer: syz [ 66.037822][ T24] usb 3-1: SerialNumber: syz [ 66.054289][ T315] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 526] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 526] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 526] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 526] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 526] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 526] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 526] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 526] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 522] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 526] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 522] <... futex resumed>) = 1 [pid 521] <... futex resumed>) = 0 [pid 522] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 521] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 522] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 521] <... futex resumed>) = 0 [pid 522] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 521] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 522] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 522] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 522] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 522] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 522] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 526] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 526] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 526] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 526] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 526] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [ 66.066516][ T315] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 66.082668][ T315] usb 4-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 66.092338][ T315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.097198][ T522] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 66.100858][ T315] usb 4-1: Product: syz [ 66.113221][ T315] usb 4-1: Manufacturer: syz [ 66.118180][ T315] usb 4-1: SerialNumber: syz [pid 518] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 517] <... futex resumed>) = 0 [pid 518] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 517] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 517] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 518] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 518] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 518] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [pid 524] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 524] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 523] <... futex resumed>) = 0 [pid 523] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 524] <... futex resumed>) = 0 [pid 523] <... futex resumed>) = 1 [pid 524] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 524] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 524] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 523] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 520] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 524] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 524] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 524] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 520] <... futex resumed>) = 1 [pid 519] <... futex resumed>) = 0 [pid 524] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 520] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 519] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 520] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 519] <... futex resumed>) = 0 [pid 520] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 519] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 520] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 520] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [ 66.229978][ T39] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 66.237121][ T39] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 66.245048][ T39] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 66.252217][ T524] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [pid 522] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 521] <... futex resumed>) = 0 [pid 522] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 521] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 522] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 521] <... futex resumed>) = 0 [pid 522] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 521] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 522] <... ioctl resumed>, 0) = -1 EINVAL (Invalid argument) [pid 522] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 522] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 526] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 525] <... futex resumed>) = 0 [pid 526] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 525] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 526] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 525] <... futex resumed>) = 0 [pid 526] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 525] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 526] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 526] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 526] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 526] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 526] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 66.328589][ T526] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [pid 518] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 517] <... futex resumed>) = 0 [pid 518] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 517] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 518] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 517] <... futex resumed>) = 0 [pid 518] bpf(BPF_PROG_LOAD, NULL, 0 [pid 517] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 518] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 518] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 517] <... futex resumed>) = 0 [pid 517] close(3 [pid 518] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 517] <... close resumed>) = 0 [pid 517] close(4) = -1 EBADF (Bad file descriptor) [pid 517] close(5) = -1 EBADF (Bad file descriptor) [pid 517] close(6) = -1 EBADF (Bad file descriptor) [pid 517] close(7) = -1 EBADF (Bad file descriptor) [pid 517] close(8) = -1 EBADF (Bad file descriptor) [pid 517] close(9) = -1 EBADF (Bad file descriptor) [pid 517] close(10) = -1 EBADF (Bad file descriptor) [pid 517] close(11) = -1 EBADF (Bad file descriptor) [pid 517] close(12) = -1 EBADF (Bad file descriptor) [pid 517] close(13) = -1 EBADF (Bad file descriptor) [pid 517] close(14) = -1 EBADF (Bad file descriptor) [pid 517] close(15) = -1 EBADF (Bad file descriptor) [pid 517] close(16) = -1 EBADF (Bad file descriptor) [pid 517] close(17) = -1 EBADF (Bad file descriptor) [pid 517] close(18) = -1 EBADF (Bad file descriptor) [pid 517] close(19) = -1 EBADF (Bad file descriptor) [pid 517] close(20) = -1 EBADF (Bad file descriptor) [pid 517] close(21) = -1 EBADF (Bad file descriptor) [pid 517] close(22) = -1 EBADF (Bad file descriptor) [pid 517] close(23) = -1 EBADF (Bad file descriptor) [pid 517] close(24) = -1 EBADF (Bad file descriptor) [pid 517] close(25) = -1 EBADF (Bad file descriptor) [pid 517] close(26) = -1 EBADF (Bad file descriptor) [pid 517] close(27) = -1 EBADF (Bad file descriptor) [pid 517] close(28) = -1 EBADF (Bad file descriptor) [pid 517] close(29) = -1 EBADF (Bad file descriptor) [pid 517] exit_group(0) = ? [pid 518] <... futex resumed>) = ? [pid 518] +++ exited with 0 +++ [pid 517] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=36, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 524] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 520] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 524] <... futex resumed>) = 1 [pid 520] <... futex resumed>) = 1 [pid 524] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 520] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 298] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 523] <... futex resumed>) = 0 [pid 519] <... futex resumed>) = 0 [pid 298] <... openat resumed>) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 523] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 519] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 298] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./17/binderfs") = 0 [pid 298] getdents64(3, [pid 524] <... futex resumed>) = 0 [pid 523] <... futex resumed>) = 1 [pid 520] <... futex resumed>) = 0 [pid 519] <... futex resumed>) = 1 [pid 298] <... getdents64 resumed>0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 520] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 298] close(3 [pid 520] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 298] <... close resumed>) = 0 [pid 520] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 298] rmdir("./17" [pid 524] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 523] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 519] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 524] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 524] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 524] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 524] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 298] <... rmdir resumed>) = 0 [pid 298] mkdir("./18", 0777) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 38 ./strace-static-x86_64: Process 527 attached [pid 520] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 527] set_robust_list(0x5555951c7760, 24 [pid 520] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 527] <... set_robust_list resumed>) = 0 [pid 527] chdir("./18" [pid 520] <... ioctl resumed>, 0x7f6727fc893c) = 11 [pid 527] <... chdir resumed>) = 0 [pid 520] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 527] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 527] setpgid(0, 0) = 0 [pid 527] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 527] write(3, "1000", 4 [pid 520] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 527] <... write resumed>) = 4 [pid 527] close(3) = 0 [pid 527] symlink("/dev/binderfs", "./binderfs") = 0 [pid 527] write(1, "executing program\n", 18executing program ) = 18 [pid 527] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 527] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 527] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 527] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 527] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 527] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 527] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0}./strace-static-x86_64: Process 528 attached => {parent_tid=[39]}, 88) = 39 [pid 527] rt_sigprocmask(SIG_SETMASK, [], [pid 528] set_robust_list(0x7f6727ef99a0, 24 [pid 527] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 527] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 527] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 528] <... set_robust_list resumed>) = 0 [pid 528] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 528] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 528] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 527] <... futex resumed>) = 0 [pid 528] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 527] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 528] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 527] <... futex resumed>) = 0 [pid 528] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 527] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 528] <... futex resumed>) = 0 [pid 527] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 528] socketpair(AF_UNIX, SOCK_STREAM, 0, [pid 527] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 528] <... socketpair resumed>NULL) = -1 EFAULT (Bad address) [pid 527] <... futex resumed>) = 0 [pid 528] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 527] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 528] <... futex resumed>) = 0 [pid 527] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 528] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 527] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 528] <... openat resumed>) = 3 [pid 527] <... futex resumed>) = 0 [pid 528] ioctl(3, USB_RAW_IOCTL_INIT [pid 527] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 528] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 528] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 528] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 528] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 522] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 521] <... futex resumed>) = 0 [pid 521] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 521] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 522] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 522] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [ 66.440152][ T39] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 66.456677][ T39] usb 2-1: USB disconnect, device number 19 [ 66.464617][ T39] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 66.473220][ T520] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [pid 526] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 525] <... futex resumed>) = 0 [pid 526] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 525] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 526] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 525] <... futex resumed>) = 0 [pid 526] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 525] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 526] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 526] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 526] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 526] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 524] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 523] <... futex resumed>) = 0 [pid 523] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 523] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 524] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 524] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [pid 520] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 519] <... futex resumed>) = 0 [pid 519] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 520] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 519] <... futex resumed>) = 0 [pid 520] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 519] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 520] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [pid 522] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 521] <... futex resumed>) = 0 [pid 522] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 521] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 521] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 522] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 522] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 522] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 522] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 522] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 526] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 525] <... futex resumed>) = 0 [pid 526] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 525] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 525] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 526] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 526] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 526] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [ 66.688094][ T319] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 66.695020][ T319] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 66.703246][ T319] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 66.718931][ T522] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [pid 528] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 524] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 528] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 528] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 524] <... futex resumed>) = 1 [pid 523] <... futex resumed>) = 0 [pid 524] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 523] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 524] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 523] <... futex resumed>) = 0 [pid 524] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 523] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 524] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 524] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 524] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 524] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 520] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 519] <... futex resumed>) = 0 [pid 520] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 519] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 520] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 519] <... futex resumed>) = 0 [pid 520] bpf(BPF_PROG_LOAD, NULL, 0 [pid 519] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 520] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 520] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 519] <... futex resumed>) = 0 [pid 520] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 519] close(3) = 0 [pid 519] close(4) = -1 EBADF (Bad file descriptor) [pid 519] close(5) = -1 EBADF (Bad file descriptor) [pid 519] close(6) = -1 EBADF (Bad file descriptor) [pid 519] close(7) = -1 EBADF (Bad file descriptor) [pid 519] close(8) = -1 EBADF (Bad file descriptor) [pid 519] close(9) = -1 EBADF (Bad file descriptor) [pid 519] close(10) = -1 EBADF (Bad file descriptor) [pid 519] close(11) = -1 EBADF (Bad file descriptor) [pid 519] close(12) = -1 EBADF (Bad file descriptor) [pid 519] close(13) = -1 EBADF (Bad file descriptor) [pid 519] close(14) = -1 EBADF (Bad file descriptor) [pid 519] close(15) = -1 EBADF (Bad file descriptor) [pid 519] close(16) = -1 EBADF (Bad file descriptor) [pid 519] close(17) = -1 EBADF (Bad file descriptor) [pid 519] close(18) = -1 EBADF (Bad file descriptor) [pid 519] close(19) = -1 EBADF (Bad file descriptor) [pid 519] close(20) = -1 EBADF (Bad file descriptor) [pid 519] close(21) = -1 EBADF (Bad file descriptor) [pid 519] close(22) = -1 EBADF (Bad file descriptor) [pid 519] close(23) = -1 EBADF (Bad file descriptor) [pid 519] close(24) = -1 EBADF (Bad file descriptor) [pid 519] close(25) = -1 EBADF (Bad file descriptor) [pid 519] close(26) = -1 EBADF (Bad file descriptor) [pid 519] close(27) = -1 EBADF (Bad file descriptor) [pid 519] close(28) = -1 EBADF (Bad file descriptor) [pid 519] close(29) = -1 EBADF (Bad file descriptor) [pid 519] exit_group(0) = ? [pid 520] <... futex resumed>) = ? [pid 520] +++ exited with 0 +++ [pid 519] +++ exited with 0 +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=36, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 299] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 299] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 299] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./17/binderfs") = 0 [pid 299] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 299] rmdir("./17") = 0 [pid 299] mkdir("./18", 0777) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 38 ./strace-static-x86_64: Process 529 attached [pid 529] set_robust_list(0x5555951c7760, 24) = 0 [pid 529] chdir("./18") = 0 [pid 529] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 529] setpgid(0, 0) = 0 [pid 522] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 521] <... futex resumed>) = 0 [pid 522] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 521] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 522] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 521] <... futex resumed>) = 0 [pid 522] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 521] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 522] <... ioctl resumed>, 0x7f6727ef8140) = 0 [ 66.882164][ T39] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 66.891594][ T524] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 66.906694][ T319] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 66.922573][ T319] usb 1-1: USB disconnect, device number 19 [pid 529] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 522] ioctl(3, USB_RAW_IOCTL_EP0_WRITEexecuting program [pid 529] <... openat resumed>) = 3 [pid 529] write(3, "1000", 4 [pid 522] <... ioctl resumed>, 0x7f6727ef7130) = 26 [pid 529] <... write resumed>) = 4 [pid 529] close(3) = 0 [pid 529] symlink("/dev/binderfs", "./binderfs") = 0 [pid 529] write(1, "executing program\n", 18) = 18 [pid 529] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 529] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 529] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 529] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 529] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 529] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 529] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[39]}, 88) = 39 [pid 529] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 529] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 529] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}./strace-static-x86_64: Process 530 attached [pid 530] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 530] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 530] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 530] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 529] <... futex resumed>) = 0 [pid 529] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 529] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 530] <... futex resumed>) = 1 [pid 530] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 530] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 529] <... futex resumed>) = 0 [pid 529] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 529] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 530] <... futex resumed>) = 1 [pid 530] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 530] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 529] <... futex resumed>) = 0 [pid 529] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 529] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 530] <... futex resumed>) = 1 [pid 530] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 530] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 530] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 530] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 530] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 526] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 526] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 525] <... futex resumed>) = 0 [pid 525] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 526] <... futex resumed>) = 0 [pid 525] <... futex resumed>) = 1 [pid 526] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 525] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 526] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 526] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 526] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 526] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 66.931266][ T313] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 66.941266][ T313] cdc_ncm 5-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 66.952751][ T526] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 66.954360][ T319] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 66.970921][ T313] cdc_ncm 5-1:1.0: setting rx_max = 2048 [pid 528] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 528] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 528] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 528] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 528] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 528] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 528] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 528] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 528] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 528] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 528] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 528] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 528] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 528] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 528] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 524] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 523] <... futex resumed>) = 0 [pid 524] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 523] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 524] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 523] <... futex resumed>) = 0 [pid 524] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 523] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 524] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 524] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [ 67.074422][ T39] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.085972][ T39] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 67.100103][ T39] usb 2-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 67.109777][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [pid 522] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 522] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 521] <... futex resumed>) = 0 [pid 521] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 522] <... futex resumed>) = 0 [pid 521] <... futex resumed>) = 1 [pid 522] bpf(BPF_PROG_LOAD, NULL, 0 [pid 521] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 522] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 522] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 521] <... futex resumed>) = 0 [pid 522] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 521] close(3) = 0 [pid 521] close(4) = -1 EBADF (Bad file descriptor) [pid 521] close(5) = -1 EBADF (Bad file descriptor) [pid 521] close(6) = -1 EBADF (Bad file descriptor) [pid 521] close(7) = -1 EBADF (Bad file descriptor) [pid 521] close(8) = -1 EBADF (Bad file descriptor) [pid 521] close(9) = -1 EBADF (Bad file descriptor) [pid 521] close(10) = -1 EBADF (Bad file descriptor) [pid 521] close(11) = -1 EBADF (Bad file descriptor) [pid 521] close(12) = -1 EBADF (Bad file descriptor) [pid 521] close(13) = -1 EBADF (Bad file descriptor) [pid 521] close(14) = -1 EBADF (Bad file descriptor) [pid 521] close(15) = -1 EBADF (Bad file descriptor) [pid 521] close(16) = -1 EBADF (Bad file descriptor) [pid 521] close(17) = -1 EBADF (Bad file descriptor) [pid 521] close(18) = -1 EBADF (Bad file descriptor) [pid 521] close(19) = -1 EBADF (Bad file descriptor) [pid 521] close(20) = -1 EBADF (Bad file descriptor) [pid 521] close(21) = -1 EBADF (Bad file descriptor) [pid 521] close(22) = -1 EBADF (Bad file descriptor) [pid 521] close(23) = -1 EBADF (Bad file descriptor) [pid 521] close(24) = -1 EBADF (Bad file descriptor) [pid 521] close(25) = -1 EBADF (Bad file descriptor) [pid 521] close(26) = -1 EBADF (Bad file descriptor) [pid 521] close(27) = -1 EBADF (Bad file descriptor) [pid 521] close(28) = -1 EBADF (Bad file descriptor) [pid 521] close(29) = -1 EBADF (Bad file descriptor) [pid 521] exit_group(0 [pid 522] <... futex resumed>) = ? [pid 521] <... exit_group resumed>) = ? [pid 522] +++ exited with 0 +++ [pid 521] +++ exited with 0 +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=36, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 301] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 301] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./17/binderfs") = 0 [pid 301] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./17") = 0 [pid 301] mkdir("./18", 0777) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 38 ./strace-static-x86_64: Process 531 attached [pid 531] set_robust_list(0x5555951c7760, 24) = 0 [pid 531] chdir("./18" [pid 526] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 525] <... futex resumed>) = 0 [pid 526] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 525] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 526] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 525] <... futex resumed>) = 0 [pid 526] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 525] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 526] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 526] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 531] <... chdir resumed>) = 0 [pid 531] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 526] <... ioctl resumed>, 0x7f6727ef7130) = 26 [pid 531] setpgid(0, 0) = 0 [pid 531] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 531] write(3, "1000", 4) = 4 [ 67.118547][ T24] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 67.126234][ T24] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 67.134741][ T39] usb 2-1: Product: syz [ 67.139342][ T39] usb 2-1: Manufacturer: syz [ 67.144359][ T24] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 67.154466][ T313] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 67.167774][ T39] usb 2-1: SerialNumber: syz [pid 531] close(3) = 0 [pid 531] symlink("/dev/binderfs", "./binderfs") = 0 [pid 531] write(1, "executing program\n", 18executing program ) = 18 [pid 531] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 531] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 531] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 531] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 531] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 531] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 531] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[39]}, 88) = 39 [pid 531] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 531] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 531] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}./strace-static-x86_64: Process 532 attached [pid 532] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 532] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 532] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 532] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 531] <... futex resumed>) = 0 [pid 531] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 531] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 532] <... futex resumed>) = 1 [pid 532] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 532] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 531] <... futex resumed>) = 0 [pid 531] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 531] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 532] <... futex resumed>) = 1 [pid 532] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 532] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 531] <... futex resumed>) = 0 [pid 531] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 531] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 532] <... futex resumed>) = 1 [pid 532] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 532] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 532] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 528] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 528] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 528] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 532] <... ioctl resumed>, 0) = 0 [pid 532] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 532] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 528] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 528] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [ 67.172847][ T315] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 67.183061][ T315] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 67.190803][ T315] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 67.202519][ T313] usb 5-1: USB disconnect, device number 19 [ 67.210820][ T313] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [pid 524] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 524] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 523] <... futex resumed>) = 0 [pid 523] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 524] <... futex resumed>) = 0 [pid 523] <... futex resumed>) = 1 [pid 524] bpf(BPF_PROG_LOAD, NULL, 0 [pid 523] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 524] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 524] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 523] <... futex resumed>) = 0 [pid 524] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 523] close(3) = 0 [pid 523] close(4) = -1 EBADF (Bad file descriptor) [pid 523] close(5) = -1 EBADF (Bad file descriptor) [pid 523] close(6) = -1 EBADF (Bad file descriptor) [pid 523] close(7) = -1 EBADF (Bad file descriptor) [pid 523] close(8) = -1 EBADF (Bad file descriptor) [pid 523] close(9) = -1 EBADF (Bad file descriptor) [pid 523] close(10) = -1 EBADF (Bad file descriptor) [pid 523] close(11) = -1 EBADF (Bad file descriptor) [pid 523] close(12) = -1 EBADF (Bad file descriptor) [pid 523] close(13) = -1 EBADF (Bad file descriptor) [pid 523] close(14) = -1 EBADF (Bad file descriptor) [pid 523] close(15) = -1 EBADF (Bad file descriptor) [pid 523] close(16) = -1 EBADF (Bad file descriptor) [pid 523] close(17) = -1 EBADF (Bad file descriptor) [pid 523] close(18) = -1 EBADF (Bad file descriptor) [pid 523] close(19) = -1 EBADF (Bad file descriptor) [pid 523] close(20) = -1 EBADF (Bad file descriptor) [pid 523] close(21) = -1 EBADF (Bad file descriptor) [pid 523] close(22) = -1 EBADF (Bad file descriptor) [pid 523] close(23) = -1 EBADF (Bad file descriptor) [pid 523] close(24) = -1 EBADF (Bad file descriptor) [pid 523] close(25) = -1 EBADF (Bad file descriptor) [pid 523] close(26) = -1 EBADF (Bad file descriptor) [pid 523] close(27) = -1 EBADF (Bad file descriptor) [pid 523] close(28) = -1 EBADF (Bad file descriptor) [pid 523] close(29) = -1 EBADF (Bad file descriptor) [pid 523] exit_group(0 [pid 524] <... futex resumed>) = ? [pid 523] <... exit_group resumed>) = ? [pid 524] +++ exited with 0 +++ [pid 523] +++ exited with 0 +++ [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=36, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 302] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 302] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 302] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 302] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 302] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 302] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 302] unlink("./17/binderfs") = 0 [pid 302] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 302] close(3) = 0 [pid 302] rmdir("./17") = 0 [pid 302] mkdir("./18", 0777) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 38 ./strace-static-x86_64: Process 533 attached [pid 533] set_robust_list(0x5555951c7760, 24) = 0 [pid 533] chdir("./18") = 0 [pid 533] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 533] setpgid(0, 0) = 0 [pid 533] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 533] write(3, "1000", 4) = 4 [pid 533] close(3) = 0 [pid 533] symlink("/dev/binderfs", "./binderfs") = 0 [pid 533] write(1, "executing program\n", 18executing program ) = 18 [pid 533] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 533] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 533] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 533] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 533] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [ 67.323687][ T24] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 67.340069][ T24] usb 3-1: USB disconnect, device number 19 [ 67.350845][ T24] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [pid 533] rt_sigprocmask(SIG_BLOCK, ~[], [pid 526] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 525] <... futex resumed>) = 0 [pid 526] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 525] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 526] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 525] <... futex resumed>) = 0 [pid 526] bpf(BPF_PROG_LOAD, NULL, 0 [pid 525] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 526] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 526] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 525] <... futex resumed>) = 0 [pid 526] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 525] close(3) = 0 [pid 525] close(4) = -1 EBADF (Bad file descriptor) [pid 525] close(5) = -1 EBADF (Bad file descriptor) [pid 525] close(6) = -1 EBADF (Bad file descriptor) [pid 525] close(7) = -1 EBADF (Bad file descriptor) [pid 525] close(8) = -1 EBADF (Bad file descriptor) [pid 525] close(9) = -1 EBADF (Bad file descriptor) [pid 525] close(10) = -1 EBADF (Bad file descriptor) [pid 525] close(11) = -1 EBADF (Bad file descriptor) [pid 525] close(12) = -1 EBADF (Bad file descriptor) [pid 525] close(13) = -1 EBADF (Bad file descriptor) [pid 525] close(14) = -1 EBADF (Bad file descriptor) [pid 525] close(15) = -1 EBADF (Bad file descriptor) [pid 525] close(16) = -1 EBADF (Bad file descriptor) [pid 525] close(17) = -1 EBADF (Bad file descriptor) [pid 525] close(18) = -1 EBADF (Bad file descriptor) [pid 525] close(19) = -1 EBADF (Bad file descriptor) [pid 525] close(20) = -1 EBADF (Bad file descriptor) [pid 525] close(21) = -1 EBADF (Bad file descriptor) [pid 525] close(22) = -1 EBADF (Bad file descriptor) [pid 525] close(23) = -1 EBADF (Bad file descriptor) [pid 525] close(24) = -1 EBADF (Bad file descriptor) [pid 525] close(25) = -1 EBADF (Bad file descriptor) [pid 525] close(26) = -1 EBADF (Bad file descriptor) [pid 525] close(27) = -1 EBADF (Bad file descriptor) [pid 525] close(28) = -1 EBADF (Bad file descriptor) [pid 525] close(29) = -1 EBADF (Bad file descriptor) [pid 525] exit_group(0 [pid 526] <... futex resumed>) = ? [pid 525] <... exit_group resumed>) = ? [pid 526] +++ exited with 0 +++ [pid 525] +++ exited with 0 +++ [pid 533] <... rt_sigprocmask resumed>[], 8) = 0 [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=36, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 533] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[39]}, 88) = 39 [pid 300] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW [pid 533] rt_sigprocmask(SIG_SETMASK, [], [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 533] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 300] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 533] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... openat resumed>) = 3 [pid 533] <... futex resumed>) = 0 [pid 300] newfstatat(3, "", [pid 533] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 300] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 300] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 534 attached [pid 530] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 300] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 534] set_robust_list(0x7f6727ef99a0, 24 [pid 530] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 300] newfstatat(AT_FDCWD, "./17/binderfs", [pid 534] <... set_robust_list resumed>) = 0 [pid 530] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 300] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 534] rt_sigprocmask(SIG_SETMASK, [], [pid 530] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 300] unlink("./17/binderfs") = 0 [pid 300] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 300] rmdir("./17") = 0 [pid 300] mkdir("./18", 0777) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 38 ./strace-static-x86_64: Process 535 attached [pid 535] set_robust_list(0x5555951c7760, 24) = 0 [pid 535] chdir("./18") = 0 [pid 535] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 534] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 535] <... prctl resumed>) = 0 [pid 535] setpgid(0, 0) = 0 [pid 534] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 528] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 534] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 528] <... futex resumed>) = 1 [pid 527] <... futex resumed>) = 0 [pid 534] <... futex resumed>) = 1 [pid 533] <... futex resumed>) = 0 [pid 528] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 527] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 534] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72 [pid 533] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 534] <... bpf resumed>) = -1 EINVAL (Invalid argument) [pid 533] <... futex resumed>) = 0 [pid 528] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 527] <... futex resumed>) = 0 [pid 533] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 534] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 528] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 527] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 534] <... futex resumed>) = 1 [pid 533] <... futex resumed>) = 0 [pid 528] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 533] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 534] socketpair(AF_UNIX, SOCK_STREAM, 0, [pid 533] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 528] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 535] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 534] <... socketpair resumed>NULL) = -1 EFAULT (Bad address) [pid 528] <... ioctl resumed>, 0) = 0 [pid 535] write(3, "1000", 4) = 4 [pid 535] close(3) = 0 [pid 535] symlink("/dev/binderfs", "./binderfs") = 0 [pid 534] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 528] ioctl(3, USB_RAW_IOCTL_EP_ENABLEexecuting program [pid 535] write(1, "executing program\n", 18) = 18 [pid 535] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 67.372188][ T319] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 67.384129][ T315] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 67.399910][ T315] usb 4-1: USB disconnect, device number 19 [ 67.408394][ T315] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [pid 535] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, [pid 534] <... futex resumed>) = 1 [pid 533] <... futex resumed>) = 0 [pid 533] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 533] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 535] <... rt_sigaction resumed>NULL, 8) = 0 [pid 535] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 535] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 535] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 535] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 535] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[39]}, 88) = 39 [pid 535] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 535] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 535] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}./strace-static-x86_64: Process 536 attached [pid 536] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 536] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 536] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 536] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 535] <... futex resumed>) = 0 [pid 535] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 535] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 536] <... futex resumed>) = 1 [pid 536] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 536] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 535] <... futex resumed>) = 0 [pid 535] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 535] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 536] <... futex resumed>) = 1 [pid 536] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 536] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 535] <... futex resumed>) = 0 [pid 535] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 535] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 536] <... futex resumed>) = 1 [pid 536] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 536] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 536] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 534] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 528] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 534] ioctl(3, USB_RAW_IOCTL_INIT [pid 528] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 534] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 536] <... ioctl resumed>, 0) = 0 [pid 536] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 536] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 534] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 528] <... ioctl resumed>, 0x7f6727fc893c) = 11 [pid 534] <... ioctl resumed>, 0) = 0 [pid 528] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 534] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 534] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 528] <... ioctl resumed>, 0x7f6727ef7130) = 0 [ 67.429583][ T528] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [pid 530] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 530] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 530] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 530] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 530] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 530] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 530] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 530] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 530] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 530] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 530] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 530] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 530] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 530] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [ 67.575115][ T319] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.587716][ T319] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 67.601279][ T319] usb 1-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 67.611006][ T319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.619664][ T319] usb 1-1: Product: syz [pid 530] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 530] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 530] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 530] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 530] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [pid 528] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 528] <... futex resumed>) = 1 [pid 527] <... futex resumed>) = 0 [pid 532] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 528] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 527] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 528] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 527] <... futex resumed>) = 0 [pid 532] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 528] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 527] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 528] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 528] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 528] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 528] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 67.624012][ T319] usb 1-1: Manufacturer: syz [ 67.629276][ T319] usb 1-1: SerialNumber: syz [ 67.642174][ T313] usb 5-1: new high-speed USB device number 20 using dummy_hcd [pid 536] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 536] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 534] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 532] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 536] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 534] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 532] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 536] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 534] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 534] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 532] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 532] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 532] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 532] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 532] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 532] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 530] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 529] <... futex resumed>) = 0 [pid 530] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 529] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 530] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 529] <... futex resumed>) = 0 [pid 530] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 529] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 530] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 530] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 530] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 530] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 530] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 528] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 532] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 532] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 528] <... futex resumed>) = 1 [pid 527] <... futex resumed>) = 0 [pid 530] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 532] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 532] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 528] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 527] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 528] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 527] <... futex resumed>) = 0 [pid 528] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 527] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 532] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 528] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 528] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [pid 532] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 532] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 532] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 532] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [ 67.812212][ T315] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 67.820661][ T24] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 67.832913][ T313] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.838225][ T530] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 67.844632][ T313] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [pid 532] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 532] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 532] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 532] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 532] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [ 67.877053][ T313] usb 5-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 67.887017][ T313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.895792][ T313] usb 5-1: Product: syz [ 67.900374][ T313] usb 5-1: Manufacturer: syz [ 67.905601][ T313] usb 5-1: SerialNumber: syz [pid 536] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 534] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 536] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 534] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 536] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 536] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 534] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 534] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 536] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 534] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 536] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 534] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 536] <... ioctl resumed>, 0x7f6727ef7110) = 9 [pid 534] <... ioctl resumed>, 0x7f6727ef7110) = 9 [pid 536] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 534] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 536] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 536] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 534] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 536] <... ioctl resumed>, 0x7f6727ef7110) = 100 [pid 534] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 536] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 534] <... ioctl resumed>, 0x7f6727ef7110) = 100 [pid 534] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 536] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 536] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 534] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 536] <... ioctl resumed>, 0x7f6727ef7110) = 4 [pid 534] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 536] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 534] <... ioctl resumed>, 0x7f6727ef7110) = 4 [pid 536] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 534] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 536] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 534] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 536] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 534] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 536] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 534] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 536] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 534] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 536] <... ioctl resumed>, 0x7f6727ef7110) = 8 [ 68.004689][ T315] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.016083][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.027359][ T315] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 68.038168][ T24] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [pid 536] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 536] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 536] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 534] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 534] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 530] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 529] <... futex resumed>) = 0 [pid 530] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 529] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 530] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 529] <... futex resumed>) = 0 [pid 530] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 529] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 530] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 530] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 534] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 530] <... ioctl resumed>, 0) = -1 EINVAL (Invalid argument) [pid 534] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 530] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 530] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 528] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 527] <... futex resumed>) = 0 [pid 528] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 527] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 528] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 527] <... futex resumed>) = 0 [pid 528] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 527] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 528] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 528] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 534] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 530] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 534] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 528] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 528] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 528] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 534] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 534] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 528] <... ioctl resumed>, 0x7f6727ef7130) = 0 [ 68.052767][ T315] usb 4-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 68.063483][ T315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.072624][ T315] usb 4-1: Product: syz [ 68.077346][ T315] usb 4-1: Manufacturer: syz [ 68.081701][ T528] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 68.082206][ T315] usb 4-1: SerialNumber: syz [ 68.096267][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [pid 532] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 531] <... futex resumed>) = 0 [pid 532] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 531] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 531] <... futex resumed>) = 0 [pid 532] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 531] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 532] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 532] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 532] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 536] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 536] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 536] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 536] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 536] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 532] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 532] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 532] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 536] <... ioctl resumed>, 0x7f6727ef7110) = 0 [pid 532] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 534] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 534] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 534] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 534] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 534] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [ 68.105924][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.114802][ T24] usb 3-1: Product: syz [ 68.119006][ T532] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 68.119886][ T24] usb 3-1: Manufacturer: syz [ 68.135121][ T24] usb 3-1: SerialNumber: syz [pid 530] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 529] <... futex resumed>) = 0 [pid 529] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 529] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 530] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 530] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [pid 528] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 527] <... futex resumed>) = 0 [pid 528] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 527] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 528] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 527] <... futex resumed>) = 0 [pid 528] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 527] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 528] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 528] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [pid 536] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 535] <... futex resumed>) = 0 [pid 536] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 535] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 536] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 535] <... futex resumed>) = 0 [pid 536] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 535] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 536] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 536] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 536] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 532] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 532] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 531] <... futex resumed>) = 0 [pid 531] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... futex resumed>) = 0 [pid 531] <... futex resumed>) = 1 [pid 532] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 531] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 532] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 532] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 532] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 532] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 68.298646][ T39] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 68.306539][ T39] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 68.314651][ T39] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 68.335598][ T536] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [pid 536] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 536] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 536] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 534] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 533] <... futex resumed>) = 0 [pid 534] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 533] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 536] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 534] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 533] <... futex resumed>) = 0 [pid 534] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 533] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 534] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 534] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 534] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 534] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 534] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 68.346041][ T534] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [pid 530] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 530] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 529] <... futex resumed>) = 0 [pid 529] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 530] <... futex resumed>) = 0 [pid 529] <... futex resumed>) = 1 [pid 530] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 530] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 529] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 530] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 530] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 530] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 528] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 527] <... futex resumed>) = 0 [pid 528] bpf(BPF_PROG_LOAD, NULL, 0 [pid 527] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 528] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 527] <... futex resumed>) = 0 [pid 528] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 528] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 527] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 527] close(3) = 0 [pid 527] close(4) = -1 EBADF (Bad file descriptor) [pid 527] close(5) = -1 EBADF (Bad file descriptor) [pid 527] close(6) = -1 EBADF (Bad file descriptor) [pid 527] close(7) = -1 EBADF (Bad file descriptor) [pid 527] close(8) = -1 EBADF (Bad file descriptor) [pid 527] close(9) = -1 EBADF (Bad file descriptor) [pid 527] close(10) = -1 EBADF (Bad file descriptor) [pid 527] close(11) = -1 EBADF (Bad file descriptor) [pid 527] close(12) = -1 EBADF (Bad file descriptor) [pid 527] close(13) = -1 EBADF (Bad file descriptor) [pid 527] close(14) = -1 EBADF (Bad file descriptor) [pid 527] close(15) = -1 EBADF (Bad file descriptor) [pid 527] close(16) = -1 EBADF (Bad file descriptor) [pid 527] close(17) = -1 EBADF (Bad file descriptor) [pid 527] close(18) = -1 EBADF (Bad file descriptor) [pid 527] close(19) = -1 EBADF (Bad file descriptor) [pid 527] close(20) = -1 EBADF (Bad file descriptor) [pid 527] close(21) = -1 EBADF (Bad file descriptor) [pid 527] close(22) = -1 EBADF (Bad file descriptor) [pid 527] close(23) = -1 EBADF (Bad file descriptor) [pid 527] close(24) = -1 EBADF (Bad file descriptor) [pid 527] close(25) = -1 EBADF (Bad file descriptor) [pid 527] close(26) = -1 EBADF (Bad file descriptor) [pid 527] close(27) = -1 EBADF (Bad file descriptor) [pid 527] close(28) = -1 EBADF (Bad file descriptor) [pid 527] close(29) = -1 EBADF (Bad file descriptor) [pid 527] exit_group(0 [pid 528] <... futex resumed>) = ? [pid 527] <... exit_group resumed>) = ? [pid 528] +++ exited with 0 +++ [pid 527] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=38, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 298] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 298] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 298] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 298] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 298] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 298] newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 298] unlink("./18/binderfs") = 0 [pid 298] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 298] close(3) = 0 [pid 298] rmdir("./18") = 0 [pid 298] mkdir("./19", 0777) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 40 ./strace-static-x86_64: Process 537 attached [pid 537] set_robust_list(0x5555951c7760, 24) = 0 [pid 537] chdir("./19") = 0 [pid 537] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 537] setpgid(0, 0) = 0 [pid 537] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 537] write(3, "1000", 4) = 4 [pid 537] close(3) = 0 [pid 537] symlink("/dev/binderfs", "./binderfs") = 0 [pid 537] write(1, "executing program\n", 18executing program ) = 18 [pid 537] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 537] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 537] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 537] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 537] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 537] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 537] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[41]}, 88) = 41 [pid 537] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 537] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 537] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}./strace-static-x86_64: Process 538 attached [pid 538] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 538] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 538] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 538] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 537] <... futex resumed>) = 0 [pid 537] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 537] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 538] <... futex resumed>) = 1 [pid 538] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 538] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 537] <... futex resumed>) = 0 [pid 537] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 531] <... futex resumed>) = 0 [pid 537] <... futex resumed>) = 0 [pid 532] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 531] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 531] <... futex resumed>) = 0 [pid 537] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 532] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 531] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 538] <... futex resumed>) = 1 [pid 536] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 536] <... futex resumed>) = 1 [pid 535] <... futex resumed>) = 0 [pid 536] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 535] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 536] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 535] <... futex resumed>) = 0 [pid 532] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 536] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 535] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 532] <... ioctl resumed>, 0x7f6727ef7130) = 28 [pid 536] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 536] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 536] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 536] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 538] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 538] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 537] <... futex resumed>) = 0 [pid 537] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 537] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 538] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 538] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 538] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 538] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 538] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 534] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 533] <... futex resumed>) = 0 [pid 534] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 533] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 534] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 533] <... futex resumed>) = 0 [pid 534] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 533] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 534] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 534] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 534] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 534] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 68.496921][ T530] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 68.510887][ T39] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 68.527036][ T39] usb 2-1: USB disconnect, device number 20 [ 68.534042][ T39] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [pid 530] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 529] <... futex resumed>) = 0 [pid 530] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 529] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 530] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 529] <... futex resumed>) = 0 [pid 530] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 529] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 530] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 530] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [pid 532] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 531] <... futex resumed>) = 0 [pid 532] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 531] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 531] <... futex resumed>) = 0 [pid 532] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 531] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 532] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 532] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 536] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 535] <... futex resumed>) = 0 [pid 536] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 535] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 536] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 535] <... futex resumed>) = 0 [pid 536] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [ 68.707694][ T319] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 68.715349][ T319] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 68.724324][ T319] cdc_ncm 1-1:1.0: setting rx_max = 2048 [pid 535] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 536] <... ioctl resumed>, 0x7f6727ef7130) = 28 [pid 532] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 532] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 532] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [pid 534] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 533] <... futex resumed>) = 0 [pid 534] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 533] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 534] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 533] <... futex resumed>) = 0 [pid 534] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 533] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 534] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 534] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [ 68.748086][ T532] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [pid 530] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 529] <... futex resumed>) = 0 [pid 530] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 529] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 530] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 529] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 530] bpf(BPF_PROG_LOAD, NULL, 0) = -1 EFAULT (Bad address) [pid 530] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 529] <... futex resumed>) = 0 [pid 530] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 529] close(3) = 0 [pid 529] close(4) = -1 EBADF (Bad file descriptor) [pid 529] close(5) = -1 EBADF (Bad file descriptor) [pid 529] close(6) = -1 EBADF (Bad file descriptor) [pid 529] close(7) = -1 EBADF (Bad file descriptor) [pid 529] close(8) = -1 EBADF (Bad file descriptor) [pid 529] close(9) = -1 EBADF (Bad file descriptor) [pid 529] close(10) = -1 EBADF (Bad file descriptor) [pid 529] close(11) = -1 EBADF (Bad file descriptor) [pid 529] close(12) = -1 EBADF (Bad file descriptor) [pid 529] close(13) = -1 EBADF (Bad file descriptor) [pid 529] close(14) = -1 EBADF (Bad file descriptor) [pid 529] close(15) = -1 EBADF (Bad file descriptor) [pid 529] close(16) = -1 EBADF (Bad file descriptor) [pid 529] close(17) = -1 EBADF (Bad file descriptor) [pid 529] close(18) = -1 EBADF (Bad file descriptor) [pid 529] close(19) = -1 EBADF (Bad file descriptor) [pid 529] close(20) = -1 EBADF (Bad file descriptor) [pid 529] close(21) = -1 EBADF (Bad file descriptor) [pid 529] close(22) = -1 EBADF (Bad file descriptor) [pid 529] close(23) = -1 EBADF (Bad file descriptor) [pid 529] close(24) = -1 EBADF (Bad file descriptor) [pid 529] close(25) = -1 EBADF (Bad file descriptor) [pid 529] close(26) = -1 EBADF (Bad file descriptor) [pid 529] close(27) = -1 EBADF (Bad file descriptor) [pid 529] close(28) = -1 EBADF (Bad file descriptor) [pid 529] close(29) = -1 EBADF (Bad file descriptor) [pid 529] exit_group(0) = ? [pid 530] <... futex resumed>) = ? [pid 530] +++ exited with 0 +++ [pid 529] +++ exited with 0 +++ [pid 299] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=38, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 299] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 299] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 299] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 299] newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 299] unlink("./18/binderfs") = 0 [pid 299] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 299] close(3 [pid 538] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 299] <... close resumed>) = 0 [pid 538] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 299] rmdir("./18" [pid 538] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 299] <... rmdir resumed>) = 0 [pid 538] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 299] mkdir("./19", 0777) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 40 ./strace-static-x86_64: Process 539 attached [pid 539] set_robust_list(0x5555951c7760, 24) = 0 [pid 539] chdir("./19") = 0 [pid 539] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 539] setpgid(0, 0) = 0 [pid 539] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 539] write(3, "1000", 4) = 4 [pid 539] close(3) = 0 [pid 539] symlink("/dev/binderfs", "./binderfs") = 0 [pid 539] write(1, "executing program\n", 18executing program ) = 18 [pid 539] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 539] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 539] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 539] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 539] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 539] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 539] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[41]}, 88) = 41 [pid 536] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 535] <... futex resumed>) = 0 [pid 536] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 535] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 536] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 535] <... futex resumed>) = 0 [pid 536] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 535] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 536] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 536] ioctl(3, USB_RAW_IOCTL_EP_ENABLE./strace-static-x86_64: Process 540 attached [pid 539] rt_sigprocmask(SIG_SETMASK, [], [pid 540] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 540] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 540] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 539] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 539] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] <... futex resumed>) = 0 [pid 540] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 540] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 540] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 539] <... futex resumed>) = 1 [pid 539] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 539] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] <... futex resumed>) = 0 [pid 540] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 540] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 540] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 539] <... futex resumed>) = 1 [pid 539] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 539] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] <... futex resumed>) = 0 [pid 539] <... futex resumed>) = 1 [pid 540] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 539] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 540] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 539] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 540] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 539] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] <... futex resumed>) = 0 [pid 539] <... futex resumed>) = 1 [pid 540] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 539] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 540] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 540] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 536] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [ 68.922221][ T39] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 68.932358][ T319] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 68.948325][ T319] usb 1-1: USB disconnect, device number 20 [ 68.955447][ T319] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [pid 540] <... ioctl resumed>, 0) = 0 [pid 536] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 534] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 536] <... ioctl resumed>, 0x7f6727fc893c) = 11 [pid 534] <... futex resumed>) = 1 [pid 533] <... futex resumed>) = 0 [pid 532] <... futex resumed>) = 1 [pid 531] <... futex resumed>) = 0 [pid 540] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 536] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 534] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 533] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 531] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 536] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 534] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 533] <... futex resumed>) = 0 [pid 532] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 531] <... futex resumed>) = 0 [pid 534] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 533] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 532] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 531] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 534] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 532] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 534] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 532] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 534] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 532] <... ioctl resumed>, 0x7f6727ef7130) = 26 [pid 534] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 534] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 68.958241][ T536] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 68.980263][ T534] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 68.980866][ T313] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 68.995429][ T313] cdc_ncm 5-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 69.004796][ T313] cdc_ncm 5-1:1.0: setting rx_max = 2048 [pid 538] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 538] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 538] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 538] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 538] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 538] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 538] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 538] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 538] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 538] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 538] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 538] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 538] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 538] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [ 69.126441][ T39] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.138296][ T39] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 69.152376][ T39] usb 2-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 69.161726][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.169810][ T39] usb 2-1: Product: syz [pid 538] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 536] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 535] <... futex resumed>) = 0 [pid 536] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 535] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 536] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 535] <... futex resumed>) = 0 [pid 536] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 535] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 536] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 536] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [pid 532] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 531] <... futex resumed>) = 0 [pid 532] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 531] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 531] <... futex resumed>) = 0 [pid 532] bpf(BPF_PROG_LOAD, NULL, 0 [pid 531] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 532] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 532] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 531] <... futex resumed>) = 0 [pid 532] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 531] close(3) = 0 [pid 534] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 531] close(4 [pid 534] <... futex resumed>) = 1 [pid 533] <... futex resumed>) = 0 [pid 531] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 534] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 533] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 531] close(5 [pid 534] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 533] <... futex resumed>) = 0 [pid 531] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 534] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 533] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 531] close(6 [pid 534] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 531] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 538] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 534] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 531] close(7 [pid 538] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW [pid 534] <... ioctl resumed>, 0x7f6727ef7130) = 26 [pid 531] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 538] <... ioctl resumed>, 0) = 0 [pid 531] close(8 [pid 538] ioctl(3, USB_RAW_IOCTL_CONFIGURE [pid 531] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 538] <... ioctl resumed>, 0) = 0 [pid 531] close(9 [pid 538] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 531] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 538] <... ioctl resumed>, 0x7f6727fc850c) = 0 [pid 531] close(10 [pid 538] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 531] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 538] <... ioctl resumed>, 0x7f6727ef7110) = 0 [pid 531] close(11) = -1 EBADF (Bad file descriptor) [pid 531] close(12) = -1 EBADF (Bad file descriptor) [pid 531] close(13) = -1 EBADF (Bad file descriptor) [pid 531] close(14) = -1 EBADF (Bad file descriptor) [pid 531] close(15) = -1 EBADF (Bad file descriptor) [pid 531] close(16) = -1 EBADF (Bad file descriptor) [pid 531] close(17) = -1 EBADF (Bad file descriptor) [pid 531] close(18) = -1 EBADF (Bad file descriptor) [pid 531] close(19) = -1 EBADF (Bad file descriptor) [pid 531] close(20) = -1 EBADF (Bad file descriptor) [pid 531] close(21) = -1 EBADF (Bad file descriptor) [pid 531] close(22) = -1 EBADF (Bad file descriptor) [pid 531] close(23) = -1 EBADF (Bad file descriptor) [pid 531] close(24) = -1 EBADF (Bad file descriptor) [pid 531] close(25) = -1 EBADF (Bad file descriptor) [pid 531] close(26) = -1 EBADF (Bad file descriptor) [pid 531] close(27) = -1 EBADF (Bad file descriptor) [pid 531] close(28) = -1 EBADF (Bad file descriptor) [pid 531] close(29) = -1 EBADF (Bad file descriptor) [pid 531] exit_group(0 [pid 532] <... futex resumed>) = ? [pid 531] <... exit_group resumed>) = ? [pid 532] +++ exited with 0 +++ [pid 531] +++ exited with 0 +++ [pid 301] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=38, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 301] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 301] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 301] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 301] newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 301] unlink("./18/binderfs") = 0 [pid 301] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0 [pid 301] rmdir("./18") = 0 [pid 301] mkdir("./19", 0777) = 0 [ 69.174234][ T39] usb 2-1: Manufacturer: syz [ 69.178886][ T39] usb 2-1: SerialNumber: syz [ 69.185519][ T315] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 69.192622][ T315] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 69.205707][ T24] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 69.212828][ T313] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 40 ./strace-static-x86_64: Process 541 attached [pid 541] set_robust_list(0x5555951c7760, 24) = 0 [pid 541] chdir("./19") = 0 [pid 541] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 541] setpgid(0, 0) = 0 [pid 541] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 541] write(3, "1000", 4) = 4 [pid 541] close(3) = 0 [pid 541] symlink("/dev/binderfs", "./binderfs") = 0 [pid 541] write(1, "executing program\n", 18executing program ) = 18 [pid 541] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 541] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [pid 541] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 541] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 541] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 541] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 541] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[41]}, 88) = 41 [pid 541] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 541] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 541] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}./strace-static-x86_64: Process 542 attached [pid 542] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 542] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 542] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 542] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 541] <... futex resumed>) = 0 [pid 541] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 541] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 542] <... futex resumed>) = 1 [pid 542] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 542] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 541] <... futex resumed>) = 0 [pid 541] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 541] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 542] <... futex resumed>) = 1 [pid 542] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 542] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 541] <... futex resumed>) = 0 [pid 541] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 541] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 542] <... futex resumed>) = 1 [pid 542] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 542] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 542] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 542] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 69.225075][ T24] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 69.233113][ T315] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 69.241259][ T24] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 69.248380][ T313] usb 5-1: USB disconnect, device number 20 [ 69.254723][ T313] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [pid 542] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 540] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 540] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 540] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 536] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 535] <... futex resumed>) = 0 [pid 536] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 535] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 536] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 535] <... futex resumed>) = 0 [pid 536] bpf(BPF_PROG_LOAD, NULL, 0 [pid 535] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 536] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 536] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 535] <... futex resumed>) = 0 [pid 535] close(3 [pid 536] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 535] <... close resumed>) = 0 [pid 535] close(4) = -1 EBADF (Bad file descriptor) [pid 535] close(5) = -1 EBADF (Bad file descriptor) [pid 535] close(6) = -1 EBADF (Bad file descriptor) [pid 535] close(7) = -1 EBADF (Bad file descriptor) [pid 535] close(8) = -1 EBADF (Bad file descriptor) [pid 535] close(9) = -1 EBADF (Bad file descriptor) [pid 535] close(10) = -1 EBADF (Bad file descriptor) [pid 535] close(11) = -1 EBADF (Bad file descriptor) [pid 535] close(12) = -1 EBADF (Bad file descriptor) [pid 535] close(13) = -1 EBADF (Bad file descriptor) [pid 535] close(14) = -1 EBADF (Bad file descriptor) [pid 535] close(15) = -1 EBADF (Bad file descriptor) [pid 535] close(16) = -1 EBADF (Bad file descriptor) [pid 535] close(17) = -1 EBADF (Bad file descriptor) [pid 535] close(18) = -1 EBADF (Bad file descriptor) [pid 535] close(19) = -1 EBADF (Bad file descriptor) [pid 535] close(20) = -1 EBADF (Bad file descriptor) [pid 535] close(21) = -1 EBADF (Bad file descriptor) [pid 535] close(22) = -1 EBADF (Bad file descriptor) [pid 535] close(23) = -1 EBADF (Bad file descriptor) [pid 535] close(24) = -1 EBADF (Bad file descriptor) [pid 535] close(25) = -1 EBADF (Bad file descriptor) [pid 535] close(26) = -1 EBADF (Bad file descriptor) [pid 535] close(27) = -1 EBADF (Bad file descriptor) [pid 535] close(28) = -1 EBADF (Bad file descriptor) [pid 535] close(29) = -1 EBADF (Bad file descriptor) [pid 535] exit_group(0 [pid 536] <... futex resumed>) = ? [pid 535] <... exit_group resumed>) = ? [pid 536] +++ exited with 0 +++ [pid 535] +++ exited with 0 +++ [pid 300] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=38, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 300] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 300] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 300] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 300] newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 300] unlink("./18/binderfs" [pid 534] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... unlink resumed>) = 0 [pid 538] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 534] <... futex resumed>) = 1 [pid 533] <... futex resumed>) = 0 [pid 300] getdents64(3, [pid 538] <... futex resumed>) = 1 [pid 534] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 533] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... getdents64 resumed>0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 538] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 534] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 533] <... futex resumed>) = 0 [pid 300] close(3 [pid 534] bpf(BPF_PROG_LOAD, NULL, 0 [pid 533] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 300] <... close resumed>) = 0 [pid 534] <... bpf resumed>) = -1 EFAULT (Bad address) [pid 300] rmdir("./18" [pid 534] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... rmdir resumed>) = 0 [pid 534] <... futex resumed>) = 1 [pid 533] <... futex resumed>) = 0 [pid 300] mkdir("./19", 0777 [pid 534] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 533] close(3 [pid 300] <... mkdir resumed>) = 0 [pid 537] <... futex resumed>) = 0 [pid 533] <... close resumed>) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 533] close(4) = -1 EBADF (Bad file descriptor) [pid 300] <... clone resumed>, child_tidptr=0x5555951c7750) = 40 [pid 533] close(5) = -1 EBADF (Bad file descriptor) [pid 533] close(6) = -1 EBADF (Bad file descriptor) [pid 533] close(7) = -1 EBADF (Bad file descriptor) [pid 533] close(8) = -1 EBADF (Bad file descriptor) [pid 533] close(9) = -1 EBADF (Bad file descriptor) [pid 533] close(10) = -1 EBADF (Bad file descriptor) [pid 533] close(11) = -1 EBADF (Bad file descriptor) [pid 533] close(12) = -1 EBADF (Bad file descriptor) [pid 533] close(13) = -1 EBADF (Bad file descriptor) [pid 533] close(14) = -1 EBADF (Bad file descriptor) [pid 533] close(15) = -1 EBADF (Bad file descriptor) [pid 533] close(16) = -1 EBADF (Bad file descriptor) [pid 533] close(17) = -1 EBADF (Bad file descriptor) [pid 533] close(18) = -1 EBADF (Bad file descriptor) [pid 533] close(19) = -1 EBADF (Bad file descriptor) [pid 533] close(20) = -1 EBADF (Bad file descriptor) [pid 533] close(21) = -1 EBADF (Bad file descriptor) [pid 533] close(22) = -1 EBADF (Bad file descriptor) [pid 533] close(23) = -1 EBADF (Bad file descriptor) [pid 533] close(24) = -1 EBADF (Bad file descriptor) [pid 533] close(25) = -1 EBADF (Bad file descriptor) [pid 533] close(26) = -1 EBADF (Bad file descriptor) [pid 533] close(27) = -1 EBADF (Bad file descriptor) [pid 533] close(28) = -1 EBADF (Bad file descriptor) [ 69.372205][ T319] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 69.391072][ T315] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 69.405088][ T315] usb 4-1: USB disconnect, device number 20 [pid 533] close(29) = -1 EBADF (Bad file descriptor) ./strace-static-x86_64: Process 543 attached [pid 533] exit_group(0 [pid 543] set_robust_list(0x5555951c7760, 24 [pid 534] <... futex resumed>) = ? [pid 533] <... exit_group resumed>) = ? [pid 543] <... set_robust_list resumed>) = 0 [pid 534] +++ exited with 0 +++ [pid 533] +++ exited with 0 +++ [pid 543] chdir("./19" [pid 302] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=38, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 543] <... chdir resumed>) = 0 [pid 302] restart_syscall(<... resuming interrupted clone ...> [pid 543] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 543] setpgid(0, 0) = 0 [pid 543] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 543] write(3, "1000", 4) = 4 [pid 543] close(3) = 0 [pid 302] <... restart_syscall resumed>) = 0 [pid 543] symlink("/dev/binderfs", "./binderfs" [pid 537] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 543] <... symlink resumed>) = 0 executing program [pid 543] write(1, "executing program\n", 18 [pid 302] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW [pid 543] <... write resumed>) = 18 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 543] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] <... futex resumed>) = 0 [pid 537] <... futex resumed>) = 1 [pid 302] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 543] <... futex resumed>) = 0 [pid 302] <... openat resumed>) = 3 [pid 543] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, [pid 302] newfstatat(3, "", [pid 543] <... rt_sigaction resumed>NULL, 8) = 0 [pid 538] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 537] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 302] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 543] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 538] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 302] getdents64(3, [pid 543] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 302] <... getdents64 resumed>0x5555951c87f0 /* 3 entries */, 32768) = 80 [pid 543] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 302] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 543] <... mmap resumed>) = 0x7f6727ed9000 [pid 302] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 543] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE [pid 302] newfstatat(AT_FDCWD, "./18/binderfs", [pid 543] <... mprotect resumed>) = 0 [pid 302] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 543] rt_sigprocmask(SIG_BLOCK, ~[], [pid 302] unlink("./18/binderfs" [pid 543] <... rt_sigprocmask resumed>[], 8) = 0 [pid 302] <... unlink resumed>) = 0 [pid 543] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} [pid 302] getdents64(3, 0x5555951c87f0 /* 0 entries */, 32768) = 0 [pid 543] <... clone3 resumed> => {parent_tid=[41]}, 88) = 41 [pid 302] close(3 [pid 543] rt_sigprocmask(SIG_SETMASK, [], [pid 538] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 302] <... close resumed>) = 0 [pid 543] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 538] <... ioctl resumed>, 0) = 0 [pid 302] rmdir("./18" [pid 543] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] <... rmdir resumed>) = 0 [pid 543] <... futex resumed>) = 0 [pid 538] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 302] mkdir("./19", 0777 [pid 543] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 302] <... mkdir resumed>) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555951c7750) = 40 ./strace-static-x86_64: Process 544 attached [pid 544] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 544] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 544] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 544] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 543] <... futex resumed>) = 0 [pid 543] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 543] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 544] <... futex resumed>) = 1 [pid 544] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 544] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 543] <... futex resumed>) = 0 [pid 543] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 543] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 544] <... futex resumed>) = 1 [pid 544] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 544] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 543] <... futex resumed>) = 0 [pid 543] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 543] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 544] <... futex resumed>) = 1 [pid 544] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 544] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 544] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 544] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 544] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 538] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 538] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 538] ioctl(3, USB_RAW_IOCTL_EP0_READ./strace-static-x86_64: Process 545 attached [pid 545] set_robust_list(0x5555951c7760, 24) = 0 [pid 545] chdir("./19") = 0 [pid 545] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 545] setpgid(0, 0) = 0 [pid 545] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 545] write(3, "1000", 4) = 4 [pid 545] close(3) = 0 [pid 538] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 545] symlink("/dev/binderfs", "./binderfs") = 0 [pid 545] write(1, "executing program\n", 18executing program ) = 18 [pid 545] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 545] rt_sigaction(SIGRT_1, {sa_handler=0x7f6727f6c8e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f6727f0d630}, NULL, 8) = 0 [ 69.416331][ T24] cdc_ncm 3-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 69.431135][ T315] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 69.446459][ T538] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 69.462209][ T24] usb 3-1: USB disconnect, device number 20 [pid 545] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 545] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f6727ed9000 [pid 545] mprotect(0x7f6727eda000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 545] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 545] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f6727ef9990, parent_tid=0x7f6727ef9990, exit_signal=0, stack=0x7f6727ed9000, stack_size=0x20240, tls=0x7f6727ef96c0} => {parent_tid=[41]}, 88) = 41 [pid 545] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 545] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 545] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000}./strace-static-x86_64: Process 546 attached [pid 546] set_robust_list(0x7f6727ef99a0, 24) = 0 [pid 546] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 546] bpf(BPF_RAW_TRACEPOINT_OPEN, NULL, 0) = -1 EINVAL (Invalid argument) [pid 546] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 545] <... futex resumed>) = 0 [pid 545] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 545] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 546] <... futex resumed>) = 1 [pid 546] bpf(BPF_MAP_CREATE, {map_type=BPF_MAP_TYPE_UNSPEC, key_size=0, value_size=0, max_entries=0, map_flags=0, inner_map_fd=0, map_name="", map_ifindex=0, btf_fd=0, btf_key_type_id=0, btf_value_type_id=0, btf_vmlinux_value_type_id=0, map_extra=0}, 72) = -1 EINVAL (Invalid argument) [pid 546] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 545] <... futex resumed>) = 0 [pid 545] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 545] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 546] <... futex resumed>) = 1 [pid 546] socketpair(AF_UNIX, SOCK_STREAM, 0, NULL) = -1 EFAULT (Bad address) [pid 546] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 545] <... futex resumed>) = 0 [pid 545] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 545] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=3, tv_nsec=50000000} [pid 546] <... futex resumed>) = 1 [pid 546] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 546] ioctl(3, USB_RAW_IOCTL_INIT, 0x7f6727ef8120) = 0 [pid 546] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 546] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [ 69.473520][ T24] cdc_ncm 3-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [pid 546] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 540] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 540] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 540] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 540] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 540] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 540] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 540] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 540] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 540] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 540] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 540] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 540] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 540] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 540] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [ 69.575055][ T319] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.586381][ T319] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 69.601117][ T319] usb 1-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 69.611187][ T319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.619593][ T319] usb 1-1: Product: syz [pid 540] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 540] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 540] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 540] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 540] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [pid 538] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 537] <... futex resumed>) = 0 [pid 538] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 537] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 537] <... futex resumed>) = 0 [pid 542] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 538] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 537] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 542] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 538] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 542] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 538] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 542] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 538] <... ioctl resumed>, 0) = -1 EINVAL (Invalid argument) [pid 538] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 538] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7130) = 0 [ 69.624241][ T319] usb 1-1: Manufacturer: syz [ 69.628981][ T319] usb 1-1: SerialNumber: syz [ 69.662459][ T313] usb 5-1: new high-speed USB device number 21 using dummy_hcd [pid 540] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 539] <... futex resumed>) = 0 [pid 539] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 539] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 540] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8140) = 0 [pid 540] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 542] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 540] <... ioctl resumed>, 0) = 0 [pid 542] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 542] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 540] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 542] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 542] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 540] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 540] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 542] <... ioctl resumed>, 0x7f6727ef7110) = 9 [pid 542] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 540] <... ioctl resumed>, 0x7f6727fc893c) = 11 [pid 542] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 542] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 540] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 542] <... ioctl resumed>, 0x7f6727ef7110) = 100 [pid 542] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 540] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 538] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 537] <... futex resumed>) = 0 [pid 538] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 537] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 537] <... futex resumed>) = 0 [pid 538] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 537] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 538] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 538] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [pid 544] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 542] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 544] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 542] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 544] <... ioctl resumed>, 0x7f6727ef7110) = 18 [pid 544] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 542] <... ioctl resumed>, 0x7f6727ef7110) = 4 [pid 542] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 542] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 542] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 542] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 542] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 542] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [ 69.843674][ T540] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 69.854103][ T313] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.865918][ T313] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 69.876574][ T315] usb 4-1: new high-speed USB device number 21 using dummy_hcd [pid 542] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 546] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 546] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 546] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 542] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 542] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 542] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 542] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 542] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [ 69.889899][ T313] usb 5-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 69.900668][ T313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.909295][ T313] usb 5-1: Product: syz [ 69.913914][ T24] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 69.921818][ T313] usb 5-1: Manufacturer: syz [ 69.927429][ T313] usb 5-1: SerialNumber: syz [pid 544] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 544] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 544] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 544] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 544] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 544] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 544] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 540] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 539] <... futex resumed>) = 0 [pid 540] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 539] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 539] <... futex resumed>) = 0 [pid 540] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 539] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 540] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 540] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 540] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 540] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 538] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 537] <... futex resumed>) = 0 [pid 538] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 537] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 537] <... futex resumed>) = 0 [pid 538] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 537] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 544] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 544] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 540] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 538] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 544] <... ioctl resumed>, 0x7f6727ef7110) = 4 [pid 538] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 544] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 538] <... ioctl resumed>, 0x7f6727fc893c) = 11 [pid 544] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 544] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 538] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 544] <... ioctl resumed>, 0x7f6727ef7110) = 8 [pid 544] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 538] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 544] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 544] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 544] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [ 70.064388][ T315] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.076782][ T315] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 70.087164][ T538] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 70.098628][ T315] usb 4-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [pid 544] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 546] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 546] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 18 [pid 546] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 546] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 9 [pid 546] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 546] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 100 [pid 546] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 542] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 541] <... futex resumed>) = 0 [pid 542] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 541] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 542] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 541] <... futex resumed>) = 0 [pid 542] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 541] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 542] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 542] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 542] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 544] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 544] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 544] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 544] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 544] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 542] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 542] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc893c) = 11 [pid 542] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 544] <... ioctl resumed>, 0x7f6727ef7110) = 0 [pid 542] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 546] <... ioctl resumed>, 0x7f6727ef8120) = 0 [pid 546] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 4 [pid 546] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 546] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 546] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 546] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [pid 546] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 546] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7110) = 8 [ 70.108688][ T315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.117612][ T315] usb 4-1: Product: syz [ 70.122196][ T315] usb 4-1: Manufacturer: syz [ 70.126971][ T315] usb 4-1: SerialNumber: syz [ 70.132719][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.144882][ T542] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 70.145421][ T24] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [pid 546] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7f6727ef8120) = 0 [pid 546] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 546] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 546] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f6727fc850c) = 0 [pid 546] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7f6727ef7110) = 0 [ 70.168458][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 70.179582][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.188520][ T24] usb 3-1: Product: syz [ 70.193156][ T24] usb 3-1: Manufacturer: syz [ 70.197879][ T24] usb 3-1: SerialNumber: syz [pid 540] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 539] <... futex resumed>) = 0 [pid 540] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 539] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 539] <... futex resumed>) = 0 [pid 540] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 539] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 540] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 540] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 28 [pid 538] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 537] <... futex resumed>) = 0 [pid 538] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 537] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 538] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 537] <... futex resumed>) = 0 [pid 538] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 537] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 538] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 538] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7f6727ef7130) = 26 [ 70.299009][ T39] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 70.306104][ T39] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 70.315447][ T39] cdc_ncm 2-1:1.0: setting rx_max = 2048 [pid 544] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 543] <... futex resumed>) = 0 [pid 544] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 543] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 544] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 543] <... futex resumed>) = 0 [pid 542] futex(0x7f6727fc83cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 544] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 543] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 544] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 542] <... futex resumed>) = 1 [pid 541] <... futex resumed>) = 0 [pid 544] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 542] futex(0x7f6727fc83c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 541] futex(0x7f6727fc83c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 544] <... ioctl resumed>, 0) = 0 [pid 544] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 542] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 541] <... futex resumed>) = 0 [pid 542] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 541] futex(0x7f6727fc83cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=350000000} [pid 542] <... ioctl resumed>, 0x7f6727ef8140) = 0 [pid 542] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 544] <... ioctl resumed>, 0x7f6727fc892c) = -1 EINVAL (Invalid argument) [pid 542] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 544] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 542] <... ioctl resumed>, 0xb) = 0 [pid 544] <... ioctl resumed>, 0x7f6727fc893c) = 11 [pid 542] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 544] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 542] <... ioctl resumed>, 0x7f6727ef7130) = 0 [pid 544] <... ioctl resumed>, 0x7f6727ef7130) = 0