* [syzbot] [usb?] general protection fault in f_midi2_stop_eps
@ 2026-07-28 13:41 syzbot
2026-07-28 15:59 ` Forwarded: [PATCH] usb: gadget: f_midi2: Fix null dereference syzbot
` (2 more replies)
0 siblings, 3 replies; 6+ messages in thread
From: syzbot @ 2026-07-28 13:41 UTC (permalink / raw)
To: gregkh, linux-kernel, linux-usb, syzkaller-bugs
Hello,
syzbot found the following issue on:
HEAD commit: 3dab139d4795 Merge tag 'rust-fixes-7.2-2' of git://git.ker..
git tree: upstream
console output: https://syzkaller.appspot.com/x/log.txt?x=137366b9580000
kernel config: https://syzkaller.appspot.com/x/.config?x=cb17729fb04b1e3a
dashboard link: https://syzkaller.appspot.com/bug?extid=bbb6dad313f4aaa8da6b
compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8
syz repro: https://syzkaller.appspot.com/x/repro.syz?x=1369b746580000
C reproducer: https://syzkaller.appspot.com/x/repro.c?x=134a72ea580000
Downloadable assets:
disk image: https://storage.googleapis.com/syzbot-assets/647c579a2eab/disk-3dab139d.raw.xz
vmlinux: https://storage.googleapis.com/syzbot-assets/8800001c8ee2/vmlinux-3dab139d.xz
kernel image: https://storage.googleapis.com/syzbot-assets/337d386facb0/bzImage-3dab139d.xz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+bbb6dad313f4aaa8da6b@syzkaller.appspotmail.com
Oops: general protection fault, probably for non-canonical address 0xdffffc00000000ee: 0000 [#1] SMP KASAN PTI
KASAN: null-ptr-deref in range [0x0000000000000770-0x0000000000000777]
CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
RIP: 0010:f_midi2_free_ep_reqs drivers/usb/gadget/function/f_midi2.c:1166 [inline]
RIP: 0010:f_midi2_stop_eps+0x28e/0x4d0 drivers/usb/gadget/function/f_midi2.c:1246
Code: 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 27 af e7 fa 41 bf 70 07 00 00 4d 03 3e 4c 89 f8 48 c1 e8 03 48 89 44 24 18 <42> 0f b6 04 28 84 c0 0f 85 12 02 00 00 41 8b 1f 31 ff 89 de e8 e9
RSP: 0018:ffffc900001576f8 EFLAGS: 00010206
RAX: 00000000000000ee RBX: ffff88802eae0120 RCX: ffff88801caa8000
RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100
RBP: ffff88802eae0100 R08: ffffffff8faf9337 R09: 1ffffffff1f5f266
R10: dffffc0000000000 R11: fffffbfff1f5f267 R12: ffff88802eae0770
R13: dffffc0000000000 R14: ffff88802eae0128 R15: 0000000000000770
FS: 0000000000000000(0000) GS:ffff888125c42000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055557b4714e8 CR3: 0000000035be2000 CR4: 00000000003526f0
Call Trace:
<TASK>
f_midi2_set_alt+0x11c/0xf00 drivers/usb/gadget/function/f_midi2.c:1296
composite_setup+0x1ffd/0x3480 drivers/usb/gadget/composite.c:1933
configfs_composite_setup+0xbd/0x100 drivers/usb/gadget/configfs.c:1877
dummy_timer+0x2ea8/0x4b30 drivers/usb/gadget/udc/dummy_hcd.c:1937
__run_hrtimer kernel/time/hrtimer.c:2032 [inline]
__hrtimer_run_queues+0x3eb/0xaf0 kernel/time/hrtimer.c:2096
hrtimer_run_softirq+0x18f/0x260 kernel/time/hrtimer.c:2113
handle_softirqs+0x1d9/0x6c0 kernel/softirq.c:622
__do_softirq kernel/softirq.c:656 [inline]
run_ktimerd+0x69/0x100 kernel/softirq.c:1151
smpboot_thread_fn+0x57c/0xa80 kernel/smpboot.c:160
kthread+0x388/0x470 kernel/kthread.c:436
ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
</TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:f_midi2_free_ep_reqs drivers/usb/gadget/function/f_midi2.c:1166 [inline]
RIP: 0010:f_midi2_stop_eps+0x28e/0x4d0 drivers/usb/gadget/function/f_midi2.c:1246
Code: 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 27 af e7 fa 41 bf 70 07 00 00 4d 03 3e 4c 89 f8 48 c1 e8 03 48 89 44 24 18 <42> 0f b6 04 28 84 c0 0f 85 12 02 00 00 41 8b 1f 31 ff 89 de e8 e9
RSP: 0018:ffffc900001576f8 EFLAGS: 00010206
RAX: 00000000000000ee RBX: ffff88802eae0120 RCX: ffff88801caa8000
RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100
RBP: ffff88802eae0100 R08: ffffffff8faf9337 R09: 1ffffffff1f5f266
R10: dffffc0000000000 R11: fffffbfff1f5f267 R12: ffff88802eae0770
R13: dffffc0000000000 R14: ffff88802eae0128 R15: 0000000000000770
FS: 0000000000000000(0000) GS:ffff888125c42000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055557b4714e8 CR3: 0000000035be2000 CR4: 00000000003526f0
----------------
Code disassembly (best guess):
0: 89 f0 mov %esi,%eax
2: 48 c1 e8 03 shr $0x3,%rax
6: 42 80 3c 28 00 cmpb $0x0,(%rax,%r13,1)
b: 74 08 je 0x15
d: 4c 89 f7 mov %r14,%rdi
10: e8 27 af e7 fa call 0xfae7af3c
15: 41 bf 70 07 00 00 mov $0x770,%r15d
1b: 4d 03 3e add (%r14),%r15
1e: 4c 89 f8 mov %r15,%rax
21: 48 c1 e8 03 shr $0x3,%rax
25: 48 89 44 24 18 mov %rax,0x18(%rsp)
* 2a: 42 0f b6 04 28 movzbl (%rax,%r13,1),%eax <-- trapping instruction
2f: 84 c0 test %al,%al
31: 0f 85 12 02 00 00 jne 0x249
37: 41 8b 1f mov (%r15),%ebx
3a: 31 ff xor %edi,%edi
3c: 89 de mov %ebx,%esi
3e: e8 .byte 0xe8
3f: e9 .byte 0xe9
---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzkaller@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title
If you want syzbot to run the reproducer, reply with:
#syz test: git://repo/address.git branch-or-commit-hash
If you attach or paste a git patch, syzbot will apply it before testing.
If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)
If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report
If you want to undo deduplication, reply with:
#syz undup
^ permalink raw reply [flat|nested] 6+ messages in thread
* Forwarded: [PATCH] usb: gadget: f_midi2: Fix null dereference
2026-07-28 13:41 [syzbot] [usb?] general protection fault in f_midi2_stop_eps syzbot
@ 2026-07-28 15:59 ` syzbot
2026-07-28 17:25 ` syzbot
2026-07-28 17:25 ` syzbot
2 siblings, 0 replies; 6+ messages in thread
From: syzbot @ 2026-07-28 15:59 UTC (permalink / raw)
To: linux-kernel
For archival purposes, forwarding an incoming command email to
linux-kernel@vger.kernel.org.
***
Subject: [PATCH] usb: gadget: f_midi2: Fix null dereference
Author: michail.tatas@gmail.com
#syz test
f_midi2_bind only binds if
if (... != SNDRV_UMP_DIR_OUTPUT)
...
if (... != SNDRV_UMP_DIR_INPUT)
...
When f_midi2_set_alt gets called, it uncoditionally calls
f_midi2_stop_eps which triggers a null dereference in
f_midi2_free_ep_reqs
Add guard to catch dereference in f_midi2_free_ep_reqs like
f_midi2_drop_reqs already has
Signed-off-by: Michail Tatas <michail.tatas@gmail.com>
---
drivers/usb/gadget/function/f_midi2.c | 3 +++
1 file changed, 3 insertions(+)
diff --git a/drivers/usb/gadget/function/f_midi2.c b/drivers/usb/gadget/function/f_midi2.c
index 19fdac024343..b84f2c220b2e 100644
--- a/drivers/usb/gadget/function/f_midi2.c
+++ b/drivers/usb/gadget/function/f_midi2.c
@@ -1163,6 +1163,9 @@ static void f_midi2_free_ep_reqs(struct f_midi2_usb_ep *usb_ep)
struct f_midi2 *midi2 = usb_ep->card;
int i;
+ if (!usb_ep->usb_ep || !usb_ep->num_reqs)
+ return;
+
for (i = 0; i < midi2->info.num_reqs; i++) {
if (!usb_ep->reqs[i].req)
continue;
--
2.43.0
^ permalink raw reply related [flat|nested] 6+ messages in thread
* Re: [syzbot] [usb?] general protection fault in f_midi2_stop_eps
[not found] <amjR0wmv0Ri2tGwD@michalis-linux>
@ 2026-07-28 16:32 ` syzbot
0 siblings, 0 replies; 6+ messages in thread
From: syzbot @ 2026-07-28 16:32 UTC (permalink / raw)
To: linux-kernel, michail.tatas, syzkaller-bugs
Hello,
syzbot has tested the proposed patch but the reproducer is still triggering an issue:
SYZFAIL: setfilecon: setxattr failed\n", NUM) = NUM
[pid 6045] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 6045] setxattr(".", "security.selinux", "\x75\x3a\x6f\x62\x6a\x65\x63\x74\x5f\x72\x3a\x61\x70\x70\x5f\x64\x61\x74\x61\x5f\x66\x69\x6c\x65\x3a\x73\x30\x3a\x63\x35\x31\x32\x2c\x63\x37\x36\x38\x00", 38, 0) = -1 EPERM (Operation not permitted)
[pid 6045] write(2, "SYZFAIL: setfilecon: setxattr failed\n", 37) = 37
[pid 6010] <... pselect6 resumed>) = 1 (in [16], left {tv_sec=0, tv_nsec=816036307})
[pid 6010] read(16 <unfinished ...>
[pid 6045] write(2, " (errno 1: Operation not permitted)\n", 36 <unfinished ...>
[pid 6010] <... read resumed>, "SYZFAIL: setfilecon: setxattr failed\n", 1024) = 37
[pid 6045] <... write resumed>) = 36
[pid 6045] exit_group(67 <unfinished ...>
[pid 6010] pselect6(17, [3 13 16], NULL, NULL, {tv_sec=1, tv_nsec=0}, {sigmask=NULL, sigsetsize=8}) = 1 (in [16], left {tv_sec=0, tv_nsec=999975662})
[pid 6045] <... exit_group resumed>) = ?
[pid 6010] read(16, " (errno 1: Operation not permitted)\n", 1024) = 36
[pid 6010] pselect6(17, [3 13 16], NULL, NULL, {tv_sec=1, tv_nsec=0}, {sigmask=NULL, sigsetsize=8}) = 1 (in [13], left {tv_sec=0, tv_nsec=987949166})
[pid 6045] +++ exited with 67 +++
[pid 6010] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6045, si_uid=10999, si_status=67, si_utime=0, si_stime=14 /* 0.14 s */} ---
[pid 6010] rt_sigreturn({mask=[]}) = 1
[pid 6010] read(13, "", 4) = 0
[pid 6010] kill(6045, SIGKILL) = 0
[pid 6010] read(16, "", 1024) = 0
[pid 6010] write(3, "\x0c\x01\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x08\x00\x0c\x00\x07\x00\x08\x00\x08\x00\x00\x00\x00\x00\x00\x01\x14\x00\x00\x00\x10\x00\x18\x00\x10\x00\x00\x00\x04\x00\x00\x00\x08\x00\x0c\x00\x10\x00\x00\x00\x14\x00\x00\x00\x7c\x00\x00\x00\x98\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x68\x00\x00\x00\x53\x59\x5a\x46\x41\x49\x4c\x3a\x20\x73\x65\x74\x66\x69\x6c\x65\x63\x6f\x6e\x3a\x20\x73\x65\x74"..., 272 <unfinished ...>
[pid 6009] <... epoll_pwait resumed>, [{events=EPOLLIN|EPOLLOUT, data=0x3ff28efbcf000002}], 128, 971, NULL, 0) = 1
[pid 6009] futex(0x33e5300, FUTEX_WAKE_PRIVATE, 1 <unfinished ...>
[pid 6010] <... write resumed>) = 272
[pid 6009] <... futex resumed>) = 1
[pid 6010] pipe2( <unfinished ...>
[pid 6002] <... futex resumed>) = 0
[pid 6010] <... pipe2 resumed>[9, 10], 0) = 0
[pid 6009] read(6 <unfinished ...>
[pid 6002] sched_yield( <unfinished ...>
[pid 6010] pipe2( <unfinished ...>
[pid 6009] <... read resumed>, "\x0c\x01\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x08\x00\x0c\x00\x07\x00\x08\x00\x08\x00\x00\x00\x00\x00\x00\x01\x14\x00\x00\x00\x10\x00\x18\x00\x10\x00\x00\x00\x04\x00\x00\x00\x08\x00\x0c\x00\x10\x00\x00\x00\x14\x00\x00\x00\x7c\x00\x00\x00\x98\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x68\x00\x00\x00\x53\x59\x5a\x46\x41\x49\x4c\x3a\x20\x73\x65\x74\x66\x69\x6c\x65\x63\x6f\x6e\x3a\x20\x73\x65\x74"..., 32331684) = 272
[pid 6010] <... pipe2 resumed>[11, 14], 0) = 0
[pid 6009] futex(0x33e39b8, FUTEX_WAKE_PRIVATE, 1 <unfinished ...>
[pid 5986] <... futex resumed>) = 0
[pid 6010] pipe2( <unfinished ...>
[pid 6002] <... sched_yield resumed>) = 0
[pid 5986] epoll_pwait(4 <unfinished ...>
[pid 6010] <... pipe2 resumed>[15, 17], 0) = 0
[pid 6009] <... futex resumed>) = 1
[pid 6002] epoll_pwait(4 <unfinished ...>
[pid 5986] <... epoll_pwait resumed>, [], 128, 0, NULL, 0) = 0
[pid 6009] write(6, "\xbc\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x08\x00\x0a\x00\x09\x00\x04\x00\x08\x00\x00\x00\x18\x00\x00\x00\x00\x01\x12\x00\x3c\x00\x30\x00\x00\x00\x00\x00\x2c\x00\x10\x00\x08\x00\x04\x00\x12\x00\x00\x00\x38\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00\x10\x3c\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00\x00\x00\x08\x00\x00\x00"..., 192 <unfinished ...>
[pid 6002] <... epoll_pwait resumed>, [], 128, 0, NULL, 0) = 0
[pid 5986] epoll_pwait(4 <unfinished ...>
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL <unfinished ...>
[pid 6009] <... write resumed>) = 192
[pid 5986] <... epoll_pwait resumed>, [], 128, 0, NULL, 0) = 0
[pid 6010] <... prlimit64 resumed>, {rlim_cur=256, rlim_max=256}) = 0
[pid 5986] epoll_pwait(4 <unfinished ...>
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL <unfinished ...>
[pid 6009] read(6 <unfinished ...>
[pid 6010] <... prlimit64 resumed>, {rlim_cur=256, rlim_max=256}) = 0
[pid 6009] <... read resumed>, 0x31fd3b6a0000, 32331684) = -1 EAGAIN (Resource temporarily unavailable)
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL <unfinished ...>
[pid 6009] futex(0x31fd37ead160, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid 6010] <... prlimit64 resumed>, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL <unfinished ...>
[pid 6002] futex(0x33e5300, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=631528798} <unfinished ...>
[pid 6010] <... prlimit64 resumed>, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 5986] <... epoll_pwait resumed>, [], 128, 634, NULL, 0) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL <unfinished ...>
[pid 6002] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out)
[pid 5986] epoll_pwait(4 <unfinished ...>
[pid 6010] <... prlimit64 resumed>, {rlim_cur=256, rlim_max=256}) = 0
[pid 5986] <... epoll_pwait resumed>, [], 128, 0, NULL, 0) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL <unfinished ...>
[pid 5986] futex(0x31fd37ead160, FUTEX_WAKE_PRIVATE, 1 <unfinished ...>
[pid 6010] <... prlimit64 resumed>, {rlim_cur=256, rlim_max=256}) = 0
[pid 5986] <... futex resumed>) = 1
[pid 6009] <... futex resumed>) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL <unfinished ...>
[pid 6009] epoll_pwait(4 <unfinished ...>
[pid 5986] epoll_pwait(4 <unfinished ...>
[pid 6010] <... prlimit64 resumed>, {rlim_cur=256, rlim_max=256}) = 0
[pid 6009] <... epoll_pwait resumed>, [], 128, 0, NULL, 0) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6009] write(5, "\x01\x00\x00\x00\x00\x00\x00\x00", 8 <unfinished ...>
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL <unfinished ...>
[pid 6009] <... write resumed>) = 8
[pid 6002] futex(0x33e5300, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=989035913} <unfinished ...>
[pid 5986] <... epoll_pwait resumed>, [{events=EPOLLIN, data=0x3403e68}], 128, 2656, NULL, 0) = 1
[pid 6010] <... prlimit64 resumed>, {rlim_cur=256, rlim_max=256}) = 0
[pid 6009] futex(0x31fd37ead160, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid 5986] read(5 <unfinished ...>
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL <unfinished ...>
[pid 5986] <... read resumed>, "\x01\x00\x00\x00\x00\x00\x00\x00", 8) = 8
[pid 6010] <... prlimit64 resumed>, {rlim_cur=256, rlim_max=256}) = 0
[pid 5986] epoll_pwait(4 <unfinished ...>
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL <unfinished ...>
[pid 5986] <... epoll_pwait resumed>, [], 128, 0, NULL, 0) = 0
[pid 6010] <... prlimit64 resumed>, {rlim_cur=256, rlim_max=256}) = 0
[pid 5986] epoll_pwait(4 <unfinished ...>
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6010] prlimit64(0, RLIMIT_NOFILE, NULL <unfinished ...>
[pid 5986] <... epoll_pwait resumed>, [], 128, 977, NULL, 0) = 0
[pid 6010] <... prlimit64 resumed>, {rlim_cur=256, rlim_max=256}) = 0
[pid 5986] futex(0x31fd37ead160, FUTEX_WAKE_PRIVATE, 1 <unfinished ...>
[pid 6010] mmap(NULL, 36864, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 <unfinished ...>
[pid 5986] <... futex resumed>) = 1
[pid 6009] <... futex resumed>) = 0
[pid 5986] epoll_pwait(4 <unfinished ...>
[pid 6010] <... mmap resumed>) = 0x7f7c6f857000
[pid 6009] epoll_pwait(4 <unfinished ...>
[pid 5986] <... epoll_pwait resumed>, [], 128, 0, NULL, 0) = 0
[pid 6010] rt_sigprocmask(SIG_BLOCK, ~[] <unfinished ...>
[pid 5986] futex(0x33e39b8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid 6010] <... rt_sigprocmask resumed>, [], 8) = 0
[pid 6010] clone3({flags=CLONE_VM|CLONE_VFORK|CLONE_CLEAR_SIGHAND, exit_signal=SIGCHLD, stack=0x7f7c6f857000, stack_size=0x9000}, 88ci2-upstream-fs-test-job-parallel/strace-static-x86_64: Process 6048 attached
<unfinished ...>
[pid 6048] rt_sigprocmask(SIG_BLOCK, NULL <unfinished ...>
[pid 6002] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out)
[pid 6048] <... rt_sigprocmask resumed>, ~[KILL STOP], 8) = 0
[pid 6002] sched_getaffinity(0, 8192 <unfinished ...>
[pid 6048] setpgid(0, 0 <unfinished ...>
[pid 6002] <... sched_getaffinity resumed>, [0 1]) = 8
[pid 6048] <... setpgid resumed>) = 0
[pid 6048] dup2(9, 0) = 0
[pid 6048] dup2(14, 1 <unfinished ...>
[pid 6002] futex(0x33e5300, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=980235107} <unfinished ...>
[pid 6048] <... dup2 resumed>) = 1
[pid 6048] dup2(17, 2) = 2
[pid 6048] dup2(7, 3) = 3
[pid 6048] dup2(8, 4) = 4
[pid 6048] close(5) = 0
[pid 6048] close(6) = 0
[pid 6048] close(7) = 0
[pid 6048] close(8) = 0
[pid 6048] close(9) = 0
[pid 6048] close(10) = 0
[pid 6048] close(11) = 0
[pid 6048] close(12) = 0
[pid 6048] close(13) = 0
[pid 6048] close(14) = 0
[pid 6048] close(15) = 0
[pid 6048] close(16) = 0
[pid 6048] close(17) = 0
[pid 6048] close(18) = -1 EBADF (Bad file descriptor)
[pid 6048] prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=256, rlim_max=256}) = 0
[pid 6048] close(19) = -1 EBADF (Bad file descriptor)
[pid 6048] close(20) = -1 EBADF (Bad file descriptor)
[pid 6048] close(21) = -1 EBADF (Bad file descriptor)
[pid 6048] close(22) = -1 EBADF (Bad file descriptor)
[pid 6048] close(23) = -1 EBADF (Bad file descriptor)
[pid 6048] close(24) = -1 EBADF (Bad file descriptor)
[pid 6048] close(25) = -1 EBADF (Bad file descriptor)
[pid 6048] close(26) = -1 EBADF (Bad file descriptor)
[pid 6048] close(27) = -1 EBADF (Bad file descriptor)
[pid 6048] close(28) = -1 EBADF (Bad file descriptor)
[pid 6048] close(29) = -1 EBADF (Bad file descriptor)
[pid 6048] close(30) = -1 EBADF (Bad file descriptor)
[pid 6048] close(31) = -1 EBADF (Bad file descriptor)
[pid 6048] close(32) = -1 EBADF (Bad file descriptor)
[pid 6048] close(33) = -1 EBADF (Bad file descriptor)
[pid 6048] close(34) = -1 EBADF (Bad file descriptor)
[pid 6048] close(35) = -1 EBADF (Bad file descriptor)
[pid 6048] close(36) = -1 EBADF (Bad file descriptor)
[pid 6048] close(37) = -1 EBADF (Bad file descriptor)
[pid 6048] close(38) = -1 EBADF (Bad file descriptor)
[pid 6048] close(39) = -1 EBADF (Bad file descriptor)
[pid 6048] close(40) = -1 EBADF (Bad file descriptor)
[pid 6048] close(41) = -1 EBADF (Bad file descriptor)
[pid 6048] close(42) = -1 EBADF (Bad file descriptor)
[pid 6048] close(43) = -1 EBADF (Bad file descriptor)
[pid 6048] close(44) = -1 EBADF (Bad file descriptor)
[pid 6048] close(45) = -1 EBADF (Bad file descriptor)
[pid 6048] close(46) = -1 EBADF (Bad file descriptor)
[pid 6048] close(47) = -1 EBADF (Bad file descriptor)
[pid 6048] close(48) = -1 EBADF (Bad file descriptor)
[pid 6048] close(49) = -1 EBADF (Bad file descriptor)
[pid 6048] close(50) = -1 EBADF (Bad file descriptor)
[pid 6048] close(51) = -1 EBADF (Bad file descriptor)
[pid 6048] close(52) = -1 EBADF (Bad file descriptor)
[pid 6048] close(53) = -1 EBADF (Bad file descriptor)
[pid 6048] close(54) = -1 EBADF (Bad file descriptor)
[pid 6048] close(55) = -1 EBADF (Bad file descriptor)
[pid 6048] close(56) = -1 EBADF (Bad file descriptor)
[pid 6048] close(57) = -1 EBADF (Bad file descriptor)
[pid 6048] close(58) = -1 EBADF (Bad file descriptor)
[pid 6048] close(59) = -1 EBADF (Bad file descriptor)
[pid 6048] close(60) = -1 EBADF (Bad file descriptor)
[pid 6048] close(61) = -1 EBADF (Bad file descriptor)
[pid 6048] close(62) = -1 EBADF (Bad file descriptor)
[pid 6048] close(63) = -1 EBADF (Bad file descriptor)
[pid 6048] close(64) = -1 EBADF (Bad file descriptor)
[pid 6048] close(65) = -1 EBADF (Bad file descriptor)
[pid 6048] close(66) = -1 EBADF (Bad file descriptor)
[pid 6048] close(67) = -1 EBADF (Bad file descriptor)
[pid 6048] close(68) = -1 EBADF (Bad file descriptor)
[pid 6048] close(69) = -1 EBADF (Bad file descriptor)
[pid 6048] close(70) = -1 EBADF (Bad file descriptor)
[pid 6048] close(71) = -1 EBADF (Bad file descriptor)
[pid 6048] close(72) = -1 EBADF (Bad file descriptor)
[pid 6048] close(73) = -1 EBADF (Bad file descriptor)
[pid 6048] close(74) = -1 EBADF (Bad file descriptor)
[pid 6048] close(75) = -1 EBADF (Bad file descriptor)
[pid 6048] close(76) = -1 EBADF (Bad file descriptor)
[pid 6048] close(77) = -1 EBADF (Bad file descriptor)
[pid 6048] close(78) = -1 EBADF (Bad file descriptor)
[pid 6048] close(79) = -1 EBADF (Bad file descriptor)
[pid 6048] close(80) = -1 EBADF (Bad file descriptor)
[pid 6048] close(81) = -1 EBADF (Bad file descriptor)
[pid 6048] close(82) = -1 EBADF (Bad file descriptor)
[pid 6048] close(83) = -1 EBADF (Bad file descriptor)
[pid 6048] close(84) = -1 EBADF (Bad file descriptor)
[pid 6048] close(85) = -1 EBADF (Bad file descriptor)
[pid 6048] close(86) = -1 EBADF (Bad file descriptor)
[pid 6048] close(87) = -1 EBADF (Bad file descriptor)
[pid 6048] close(88) = -1 EBADF (Bad file descriptor)
[pid 6048] close(89) = -1 EBADF (Bad file descriptor)
[pid 6048] close(90) = -1 EBADF (Bad file descriptor)
[pid 6048] close(91) = -1 EBADF (Bad file descriptor)
[pid 6048] close(92) = -1 EBADF (Bad file descriptor)
[pid 6048] close(93 <unfinished ...>
[pid 6009] <... epoll_pwait resumed>, [], 128, 994, NULL, 0) = 0
[pid 6048] <... close resumed>) = -1 EBADF (Bad file descriptor)
[pid 6048] close(94) = -1 EBADF (Bad file descriptor)
[pid 6009] futex(0x33e39b8, FUTEX_WAKE_PRIVATE, 1 <unfinished ...>
[pid 5986] <... futex resumed>) = 0
[pid 6048] close(95 <unfinished ...>
[pid 6009] <... futex resumed>) = 1
[pid 5986] epoll_pwait(4 <unfinished ...>
[pid 6009] epoll_pwait(4 <unfinished ...>
[pid 5986] <... epoll_pwait resumed>, [], 128, 0, NULL, 0) = 0
[pid 6048] <... close resumed>) = -1 EBADF (Bad file descriptor)
[pid 5986] write(5, "\x01\x00\x00\x00\x00\x00\x00\x00", 8 <unfinished ...>
[pid 6048] close(96 <unfinished ...>
[pid 5986] <... write resumed>) = 8
[pid 6048] <... close resumed>) = -1 EBADF (Bad file descriptor)
[pid 5986] futex(0x33e39b8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid 6009] <... epoll_pwait resumed>, [{events=EPOLLIN, data=0x3403e68}], 128, 995, NULL, 0) = 1
[pid 6048] close(97 <unfinished ...>
[pid 6009] read(5 <unfinished ...>
[pid 6048] <... close resumed>) = -1 EBADF (Bad file descriptor)
[pid 6009] <... read resumed>, "\x01\x00\x00\x00\x00\x00\x00\x00", 8) = 8
[pid 6048] close(98) = -1 EBADF (Bad file descriptor)
[pid 6009] epoll_pwait(4 <unfinished ...>
[pid 6048] close(99 <unfinished ...>
[pid 6009] <... epoll_pwait resumed>, [], 128, 0, NULL, 0) = 0
[pid 6048] <... close resumed>) = -1 EBADF (Bad file descriptor)
[pid 6009] epoll_pwait(4 <unfinished ...>
[pid 6048] close(100) = -1 EBADF (Bad file descriptor)
[pid 6048] close(101 <unfinished ...>
[pid 6002] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out)
[pid 6048] <... close resumed>) = -1 EBADF (Bad file descriptor)
[pid 6048] close(102) = -1 EBADF (Bad file descriptor)
[pid 6048] close(103) = -1 EBADF (Bad file descriptor)
[pid 6002] futex(0x33e5300, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=626881285} <unfinished ...>
[pid 6048] close(104) = -1 EBADF (Bad file descriptor)
[pid 6048] close(105) = -1 EBADF (Bad file descriptor)
[pid 6048] close(106) = -1 EBADF (Bad file descriptor)
[pid 6048] close(107) = -1 EBADF (Bad file descriptor)
[pid 6048] close(108) = -1 EBADF (Bad file descriptor)
[pid 6048] close(109) = -1 EBADF (Bad file descriptor)
[pid 6048] close(110) = -1 EBADF (Bad file descriptor)
[pid 6048] close(111) = -1 EBADF (Bad file descriptor)
[pid 6048] close(112) = -1 EBADF (Bad file descriptor)
[pid 6048] close(113) = -1 EBADF (Bad file descriptor)
[pid 6048] close(114) = -1 EBADF (Bad file descriptor)
[pid 6048] close(115) = -1 EBADF (Bad file descriptor)
[pid 6048] close(116) = -1 EBADF (Bad file descriptor)
[pid 6048] close(117) = -1 EBADF (Bad file descriptor)
[pid 6048] close(118) = -1 EBADF (Bad file descriptor)
[pid 6048] close(119) = -1 EBADF (Bad file descriptor)
[pid 6048] close(120) = -1 EBADF (Bad file descriptor)
[pid 6048] close(121) = -1 EBADF (Bad file descriptor)
[pid 6048] close(122) = -1 EBADF (Bad file descriptor)
[pid 6048] close(123) = -1 EBADF (Bad file descriptor)
[pid 6048] close(124) = -1 EBADF (Bad file descriptor)
[pid 6048] close(125) = -1 EBADF (Bad file descriptor)
[pid 6048] close(126) = -1 EBADF (Bad file descriptor)
[pid 6048] close(127) = -1 EBADF (Bad file descriptor)
[pid 6048] close(128) = -1 EBADF (Bad file descriptor)
[pid 6048] close(129) = -1 EBADF (Bad file descriptor)
[pid 6048] close(130) = -1 EBADF (Bad file descriptor)
[pid 6048] close(131) = -1 EBADF (Bad file descriptor)
[pid 6048] close(132) = -1 EBADF (Bad file descriptor)
[pid 6048] close(133) = -1 EBADF (Bad file descriptor)
[pid 6048] close(134) = -1 EBADF (Bad file descriptor)
[pid 6048] close(135) = -1 EBADF (Bad file descriptor)
[pid 6048] close(136) = -1 EBADF (Bad file descriptor)
[pid 6048] close(137) = -1 EBADF (Bad file descriptor)
[pid 6048] close(138) = -1 EBADF (Bad file descriptor)
[pid 6048] close(139) = -1 EBADF (Bad file descriptor)
[pid 6048] close(140) = -1 EBADF (Bad file descriptor)
[pid 6048] close(141) = -1 EBADF (Bad file descriptor)
[pid 6048] close(142) = -1 EBADF (Bad file descriptor)
[pid 6048] close(143) = -1 EBADF (Bad file descriptor)
[pid 6048] close(144) = -1 EBADF (Bad file descriptor)
[pid 6048] close(145) = -1 EBADF (Bad file descriptor)
[pid 6048] close(146) = -1 EBADF (Bad file descriptor)
[pid 6048] close(147) = -1 EBADF (Bad file descriptor)
[pid 6048] close(148) = -1 EBADF (Bad file descriptor)
[pid 6048] close(149) = -1 EBADF (Bad file descriptor)
[pid 6048] close(150) = -1 EBADF (Bad file descriptor)
[pid 6048] close(151) = -1 EBADF (Bad file descriptor)
[pid 6048] close(152) = -1 EBADF (Bad file descriptor)
[pid 6048] close(153) = -1 EBADF (Bad file descriptor)
[pid 6048] close(154) = -1 EBADF (Bad file descriptor)
[pid 6048] close(155) = -1 EBADF (Bad file descriptor)
[pid 6048] close(156) = -1 EBADF (Bad file descriptor)
[pid 6048] close(157) = -1 EBADF (Bad file descriptor)
[pid 6048] close(158) = -1 EBADF (Bad file descriptor)
[pid 6048] close(159) = -1 EBADF (Bad file descriptor)
[pid 6048] close(160) = -1 EBADF (Bad file descriptor)
[pid 6048] close(161) = -1 EBADF (Bad file descriptor)
[pid 6048] close(162) = -1 EBADF (Bad file descriptor)
[pid 6048] close(163) = -1 EBADF (Bad file descriptor)
[pid 6048] close(164) = -1 EBADF (Bad file descriptor)
[pid 6048] close(165) = -1 EBADF (Bad file descriptor)
[pid 6048] close(166) = -1 EBADF (Bad file descriptor)
[pid 6048] close(167) = -1 EBADF (Bad file descriptor)
[pid 6048] close(168) = -1 EBADF (Bad file descriptor)
[pid 6048] close(169) = -1 EBADF (Bad file descriptor)
[pid 6048] close(170) = -1 EBADF (Bad file descriptor)
[pid 6048] close(171) = -1 EBADF (Bad file descriptor)
[pid 6048] close(172) = -1 EBADF (Bad file descriptor)
[pid 6048] close(173) = -1 EBADF (Bad file descriptor)
[pid 6048] close(174) = -1 EBADF (Bad file descriptor)
[pid 6048] close(175) = -1 EBADF (Bad file descriptor)
[pid 6048] close(176) = -1 EBADF (Bad file descriptor)
[pid 6048] close(177) = -1 EBADF (Bad file descriptor)
[pid 6048] close(178) = -1 EBADF (Bad file descriptor)
[pid 6048] close(179) = -1 EBADF (Bad file descriptor)
[pid 6048] close(180) = -1 EBADF (Bad file descriptor)
[pid 6048] close(181) = -1 EBADF (Bad file descriptor)
[pid 6048] close(182) = -1 EBADF (Bad file descriptor)
[pid 6048] close(183) = -1 EBADF (Bad file descriptor)
[pid 6048] close(184) = -1 EBADF (Bad file descriptor)
[pid 6048] close(185) = -1 EBADF (Bad file descriptor)
[pid 6048] close(186) = -1 EBADF (Bad file descriptor)
[pid 6048] close(187) = -1 EBADF (Bad file descriptor)
[pid 6048] close(188) = -1 EBADF (Bad file descriptor)
[pid 6048] close(189) = -1 EBADF (Bad file descriptor)
[pid 6048] close(190) = -1 EBADF (Bad file descriptor)
[pid 6048] close(191) = -1 EBADF (Bad file descriptor)
[pid 6048] close(192) = -1 EBADF (Bad file descriptor)
[pid 6048] close(193) = -1 EBADF (Bad file descriptor)
[pid 6048] close(194) = -1 EBADF (Bad file descriptor)
[pid 6048] close(195) = -1 EBADF (Bad file descriptor)
[pid 6048] close(196) = -1 EBADF (Bad file descriptor)
[pid 6048] close(197) = -1 EBADF (Bad file descriptor)
[pid 6048] close(198) = -1 EBADF (Bad file descriptor)
[pid 6048] close(199) = -1 EBADF (Bad file descriptor)
[pid 6048] close(200) = -1 EBADF (Bad file descriptor)
[pid 6048] close(201) = -1 EBADF (Bad file descriptor)
[pid 6048] close(202) = -1 EBADF (Bad file descriptor)
[pid 6048] close(203) = -1 EBADF (Bad file descriptor)
[pid 6048] close(204) = -1 EBADF (Bad file descriptor)
[pid 6048] close(205) = -1 EBADF (Bad file descriptor)
[pid 6048] close(206) = -1 EBADF (Bad file descriptor)
[pid 6048] close(207) = -1 EBADF (Bad file descriptor)
[pid 6048] close(208) = -1 EBADF (Bad file descriptor)
[pid 6048] close(209) = -1 EBADF (Bad file descriptor)
[pid 6048] close(210) = -1 EBADF (Bad file descriptor)
[pid 6048] close(211) = -1 EBADF (Bad file descriptor)
[pid 6048] close(212) = -1 EBADF (Bad file descriptor)
[pid 6048] close(213) = -1 EBADF (Bad file descriptor)
[pid 6048] close(214) = -1 EBADF (Bad file descriptor)
[pid 6048] close(215) = -1 EBADF (Bad file descriptor)
[pid 6048] close(216) = -1 EBADF (Bad file descriptor)
[pid 6048] close(217) = -1 EBADF (Bad file descriptor)
[pid 6048] close(218) = -1 EBADF (Bad file descriptor)
[pid 6048] close(219) = -1 EBADF (Bad file descriptor)
[pid 6048] close(220) = -1 EBADF (Bad file descriptor)
[pid 6048] close(221) = -1 EBADF (Bad file descriptor)
[pid 6048] close(222) = -1 EBADF (Bad file descriptor)
[pid 6048] close(223) = -1 EBADF (Bad file descriptor)
[pid 6048] close(224) = -1 EBADF (Bad file descriptor)
[pid 6048] close(225) = -1 EBADF (Bad file descriptor)
[pid 6048] close(226) = -1 EBADF (Bad file descriptor)
[pid 6048] close(227) = -1 EBADF (Bad file descriptor)
[pid 6048] close(228) = -1 EBADF (Bad file descriptor)
[pid 6048] close(229) = -1 EBADF (Bad file descriptor)
[pid 6048] close(230) = -1 EBADF (Bad file descriptor)
[pid 6048] close(231) = -1 EBADF (Bad file descriptor)
[pid 6048] close(232) = -1 EBADF (Bad file descriptor)
[pid 6048] close(233) = -1 EBADF (Bad file descriptor)
[pid 6048] close(234) = -1 EBADF (Bad file descriptor)
[pid 6048] close(235) = -1 EBADF (Bad file descriptor)
[pid 6048] close(236) = -1 EBADF (Bad file descriptor)
[pid 6048] close(237) = -1 EBADF (Bad file descriptor)
[pid 6048] close(238) = -1 EBADF (Bad file descriptor)
[pid 6048] close(239) = -1 EBADF (Bad file descriptor)
[pid 6048] close(240 <unfinished ...>
[pid 6009] <... epoll_pwait resumed>, [], 128, 659, NULL, 0) = 0
[pid 6002] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out)
[pid 6048] <... close resumed>) = -1 EBADF (Bad file descriptor)
[pid 6009] futex(0x33e39b8, FUTEX_WAKE_PRIVATE, 1 <unfinished ...>
[pid 6002] sched_getaffinity(0, 8192 <unfinished ...>
[pid 5986] <... futex resumed>) = 0
[pid 6048] close(241 <unfinished ...>
[pid 6002] <... sched_getaffinity resumed>, [0 1]) = 8
[pid 5986] epoll_pwait(4 <unfinished ...>
[pid 6048] <... close resumed>) = -1 EBADF (Bad file descriptor)
[pid 6009] <... futex resumed>) = 1
[pid 5986] <... epoll_pwait resumed>, [], 128, 0, NULL, 0) = 0
[pid 6048] close(242 <unfinished ...>
[pid 6009] epoll_pwait(4 <unfinished ...>
[pid 5986] write(5, "\x01\x00\x00\x00\x00\x00\x00\x00", 8 <unfinished ...>
[pid 6048] <... close resumed>) = -1 EBADF (Bad file descriptor)
[pid 5986] <... write resumed>) = 8
[pid 6048] close(243 <unfinished ...>
[pid 6009] <... epoll_pwait resumed>, [{events=EPOLLIN, data=0x3403e68}], 128, 9993, NULL, 0) = 1
[pid 5986] futex(0x33e39b8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid 6048] <... close resumed>) = -1 EBADF (Bad file descriptor)
[pid 6009] read(5 <unfinished ...>
[pid 6002] futex(0x33e5300, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=325718132} <unfinished ...>
[pid 6048] close(244 <unfinished ...>
[pid 6009] <... read resumed>, "\x01\x00\x00\x00\x00\x00\x00\x00", 8) = 8
[pid 6048] <... close resumed>) = -1 EBADF (Bad file descriptor)
[pid 6009] epoll_pwait(4 <unfinished ...>
[pid 6048] close(245) = -1 EBADF (Bad file descriptor)
[pid 6009] <... epoll_pwait resumed>, [], 128, 0, NULL, 0) = 0
[pid 6048] close(246) = -1 EBADF (Bad file descriptor)
[pid 6009] epoll_pwait(4 <unfinished ...>
[pid 6048] close(247) = -1 EBADF (Bad file descriptor)
[pid 6048] close(248) = -1 EBADF (Bad file descriptor)
[pid 6048] close(249) = -1 EBADF (Bad file descriptor)
[pid 6048] close(250) = -1 EBADF (Bad file descriptor)
[pid 6048] close(251) = -1 EBADF (Bad file descriptor)
[pid 6048] close(252) = -1 EBADF (Bad file descriptor)
[pid 6048] close(253) = -1 EBADF (Bad file descriptor)
[pid 6048] close(254) = -1 EBADF (Bad file descriptor)
[pid 6048] close(255) = -1 EBADF (Bad file descriptor)
[pid 6048] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid 6048] execve("ci2-upstream-fs-test-job-parallel/syz-executor", ["ci2-upstream-fs-test-job-parallel/syz-executor", "exec"], 0x7ffcdd530c00 /* 2 vars */ <unfinished ...>
[pid 6010] <... clone3 resumed>) = 6048
[pid 6010] munmap(0x7f7c6f857000, 36864) = 0
[pid 6010] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid 6010] fcntl(11, F_GETFL) = 0 (flags O_RDONLY)
[pid 6010] fcntl(11, F_SETFL, O_RDONLY|O_NONBLOCK) = 0
[pid 6048] <... execve resumed>) = 0
[pid 6010] fcntl(15, F_GETFL) = 0 (flags O_RDONLY)
[pid 6048] brk(NULL <unfinished ...>
[pid 6010] fcntl(15, F_SETFL, O_RDONLY|O_NONBLOCK <unfinished ...>
[pid 6048] <... brk resumed>) = 0x55556801b000
[pid 6010] <... fcntl resumed>) = 0
[pid 6048] brk(0x55556801be80 <unfinished ...>
[pid 6010] close(9 <unfinished ...>
[pid 6048] <... brk resumed>) = 0x55556801be80
[pid 6010] <... close resumed>) = 0
[pid 6048] arch_prctl(ARCH_SET_FS, 0x55556801b500 <unfinished ...>
[pid 6010] close(14) = 0
[pid 6048] <... arch_prctl resumed>) = 0
[pid 6010] close(17 <unfinished ...>
[pid 6048] set_tid_address(0x55556801b7d0 <unfinished ...>
[pid 6010] <... close resumed>) = 0
[pid 6048] <... set_tid_address resumed>) = 6048
[pid 6010] close(12 <unfinished ...>
[pid 6048] set_robust_list(0x55556801b7e0, 24 <unfinished ...>
[pid 6010] <... close resumed>) = 0
[pid 6048] <... set_robust_list resumed>) = 0
[pid 6048] prlimit64(0, RLIMIT_STACK, NULL <unfinished ...>
[pid 6010] close(13 <unfinished ...>
[pid 6048] <... prlimit64 resumed>, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
[pid 6010] <... close resumed>) = 0
[pid 6048] readlinkat(AT_FDCWD, "/proc/self/exe" <unfinished ...>
[pid 6010] close(16 <unfinished ...>
[pid 6048] <... readlinkat resumed>, "/root/ci2-upstream-fs-test-job-parallel/syz-executor", 4096) = 52
[pid 6010] <... close resumed>) = 0
[pid 6010] write(10, "\xce\xfa\xad\xeb\xfe\x0f\xdc\xba\x01\x01\x00\x00\x00\x00\x00\x00\x10\x38\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x32\x00\x00\x00\x00\x00\x00\x00\x88\x13\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00", 64 <unfinished ...>
[pid 6048] getrandom("\x2c\xa8\x61\xde\xda\xbd\x79\xc0", 8, GRND_NONBLOCK) = 8
[pid 6010] <... write resumed>) = 64
[pid 6048] brk(NULL) = 0x55556801be80
[pid 6010] pselect6(16, [3 11 15], NULL, NULL, {tv_sec=1, tv_nsec=0}, {sigmask=NULL, sigsetsize=8} <unfinished ...>
[pid 6048] brk(0x55556803ce80 <unfinished ...>
[pid 6010] <... pselect6 resumed>) = 1 (in [3], left {tv_sec=0, tv_nsec=999982361})
[pid 6048] <... brk resumed>) = 0x55556803ce80
[pid 6010] read(3 <unfinished ...>
[pid 6048] brk(0x55556803d000 <unfinished ...>
[pid 6010] <... read resumed>, "\xbc\x00\x00\x00", 4) = 4
[pid 6048] <... brk resumed>) = 0x55556803d000
[pid 6048] mprotect(0x7f3c6fdea000, 1245184, PROT_READ <unfinished ...>
[pid 6010] read(3, "\x10\x00\x00\x00\x00\x00\x00\x00\x08\x00\x0a\x00\x09\x00\x04\x00\x08\x00\x00\x00\x18\x00\x00\x00\x00\x01\x12\x00\x3c\x00\x30\x00\x00\x00\x00\x00\x2c\x00\x10\x00\x08\x00\x04\x00\x12\x00\x00\x00\x38\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00\x10\x3c\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00"..., 188) = 188
[pid 6048] <... mprotect resumed>) = 0
[pid 6010] pselect6(16, [3 11 15], NULL, NULL, {tv_sec=1, tv_nsec=0}, {sigmask=NULL, sigsetsize=8} <unfinished ...>
[pid 6048] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 6048] mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED_NOREPLACE, -1, 0) = 0x1ffffffff000
[pid 6048] mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED_NOREPLACE, -1, 0) = 0x200000000000
[pid 6048] mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED_NOREPLACE, -1, 0) = 0x200001000000
[pid 6048] rt_sigaction(SIGCHLD, {sa_handler=0x7f3c6fb81780, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f3c6fc6f210}, NULL, 8) = 0
[pid 6048] pkey_alloc(0, PKEY_UNRESTRICTED) = -1 EINVAL (Invalid argument)
[pid 6048] getrandom("\x1c\xf0\x28\x70\x4a\xee\xd2\xf8", 8, GRND_NONBLOCK) = 8
[pid 6048] getrandom("\xd0\x6c\x5c\xd1\xe5\x58\x33\x31", 8, GRND_NONBLOCK) = 8
[pid 6048] mkdir("./syzkaller.IldPUZ", 0700) = 0
[pid 6048] chmod("./syzkaller.IldPUZ", 0777) = 0
[pid 6048] chdir("./syzkaller.IldPUZ") = 0
[pid 6048] rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
[pid 6048] rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
[pid 6048] rt_sigaction(SIGSEGV, {sa_handler=0x7f3c6fb83b20, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f3c6fc6f210}, NULL, 8) = 0
[pid 6048] rt_sigaction(SIGBUS, {sa_handler=0x7f3c6fb83b20, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f3c6fc6f210}, NULL, 8) = 0
[pid 6048] getpid() = 6048
[pid 6048] mmap(0x1b2dc20000, 4194304, PROT_READ, MAP_SHARED|MAP_FIXED_NOREPLACE, 3, 0) = 0x1b2dc20000
[pid 6048] getpid() = 6048
[pid 6048] mmap(0x1b2ec24000, 262144, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED_NOREPLACE, 4, 0) = 0x1b2ec24000
[pid 6048] close(3) = 0
[pid 6048] fcntl(5, F_GETFD) = -1 EBADF (Bad file descriptor)
[pid 6048] fcntl(6, F_GETFD) = -1 EBADF (Bad file descriptor)
[pid 6048] dup2(0, 249) = 249
[pid 6048] dup2(1, 248) = 248
[pid 6048] dup2(2, 1) = 1
[pid 6048] dup2(2, 0) = 0
[pid 6048] read(249, "\xce\xfa\xad\xeb\xfe\x0f\xdc\xba\x01\x01\x00\x00\x00\x00\x00\x00\x10\x38\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x32\x00\x00\x00\x00\x00\x00\x00\x88\x13\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00", 64) = 64
[pid 6048] unshare(CLONE_NEWPID) = 0
[pid 6048] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid 6048] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs-test-job-parallel/strace-static-x86_64: Process 6049 attached
<unfinished ...>
[pid 6049] set_robust_list(0x55556801b7e0, 24 <unfinished ...>
[pid 6048] <... clone resumed>, child_tidptr=0x55556801b7d0) = 6049
[pid 6049] <... set_robust_list resumed>) = 0
[pid 6049] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid 6048] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid 6049] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid 6048] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid 6049] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 6049] getppid() = 0
[pid 6049] openat(AT_FDCWD, "/proc/self/ns/net", O_RDONLY) = 3
[pid 6049] dup2(3, 201) = 201
[pid 6049] close(3) = 0
[pid 6049] prlimit64(0, RLIMIT_AS, {rlim_cur=344064*1024, rlim_max=344064*1024}, NULL) = 0
[pid 6049] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0
[pid 6049] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0
[pid 6049] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0
[pid 6009] <... epoll_pwait resumed>, [], 128, 325, NULL, 0) = 0
[pid 6002] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out)
[pid 6049] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024} <unfinished ...>
[pid 6009] futex(0x33e39b8, FUTEX_WAKE_PRIVATE, 1 <unfinished ...>
[pid 6049] <... prlimit64 resumed>, NULL) = 0
[pid 6049] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0
[pid 5986] <... futex resumed>) = 0
[pid 6009] <... futex resumed>) = 1
[pid 5986] epoll_pwait(4 <unfinished ...>
[pid 6049] unshare(CLONE_NEWNS <unfinished ...>
[pid 5986] <... epoll_pwait resumed>, [], 128, 0, NULL, 0) = 0
[pid 6049] <... unshare resumed>) = 0
[pid 6009] epoll_pwait(4 <unfinished ...>
[pid 5986] futex(0x33e39b8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid 6049] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL <unfinished ...>
[pid 6002] futex(0x33e5300, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=990172683} <unfinished ...>
[pid 6049] <... mount resumed>) = 0
[pid 6049] unshare(CLONE_NEWIPC) = 0
[pid 6049] unshare(CLONE_NEWCGROUP) = 0
[pid 6049] unshare(CLONE_NEWUTS) = 0
[pid 6049] unshare(CLONE_SYSVSEM) = 0
[pid 6049] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3
[pid 6049] write(3, "16777216", 8) = 8
[pid 6049] close(3) = 0
[pid 6049] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3
[pid 6049] write(3, "536870912", 9) = 9
[pid 6049] close(3) = 0
[pid 6049] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3
[pid 6049] write(3, "1024", 4) = 4
[pid 6049] close(3) = 0
[pid 6049] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3
[pid 6049] write(3, "8192", 4) = 4
[pid 6049] close(3) = 0
[pid 6049] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3
[pid 6049] write(3, "1024", 4) = 4
[pid 6049] close(3) = 0
[pid 6049] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3
[pid 6049] write(3, "1024", 4) = 4
[pid 6049] close(3) = 0
[pid 6049] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3
[pid 6049] write(3, "1024 1048576 500 1024", 21) = 21
[pid 6049] close(3) = 0
[pid 6049] getpid() = 1
[pid 6049] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PTRACE|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_NICE|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, permitted=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PTRACE|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_NICE|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, inheritable=0}) = 0
[pid 6049] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, permitted=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, inheritable=0}) = 0
[pid 6049] unshare(CLONE_NEWNET) = 0
[pid 6049] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3
[pid 6049] write(3, "0 65535", 7) = 7
[pid 6049] close(3) = 0
[pid 6049] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3
[pid 6049] write(3, "100000", 6) = 6
[pid 6049] close(3) = 0
[pid 6049] mkdirat(AT_FDCWD, "./syz-tmp", 0777) = 0
[pid 6049] mount("", "./syz-tmp", "tmpfs", 0, NULL) = 0
[pid 6049] mkdirat(AT_FDCWD, "./syz-tmp/newroot", 0777) = 0
[pid 6049] mkdirat(AT_FDCWD, "./syz-tmp/newroot/dev", 0700) = 0
[pid 6049] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0
[pid 6049] mkdirat(AT_FDCWD, "./syz-tmp/newroot/proc", 0700) = 0
[pid 6049] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL) = 0
[pid 6049] mkdirat(AT_FDCWD, "./syz-tmp/newroot/selinux", 0700) = 0
[pid 6049] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory)
[pid 6049] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory)
[pid 6049] mkdirat(AT_FDCWD, "./syz-tmp/newroot/sys", 0700) = 0
[pid 6049] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0
[pid 6049] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0
[pid 6049] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0
[pid 6049] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0
[pid 6049] mkdirat(AT_FDCWD, "./syz-tmp/newroot/syz-inputs", 0700) = 0
[pid 6049] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory)
[pid 6049] mkdirat(AT_FDCWD, "./syz-tmp/newroot/syzcgroup", 0700) = 0
[pid 6049] mkdirat(AT_FDCWD, "./syz-tmp/newroot/syzcgroup/unified", 0700) = 0
[pid 6049] mkdirat(AT_FDCWD, "./syz-tmp/newroot/syzcgroup/cpu", 0700) = 0
[pid 6049] mkdirat(AT_FDCWD, "./syz-tmp/newroot/syzcgroup/net", 0700) = 0
[pid 6049] mount("/syzcgroup/unified", "./syz-tmp/newroot/syzcgroup/unified", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0
[pid 6049] mount("/syzcgroup/cpu", "./syz-tmp/newroot/syzcgroup/cpu", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0
[pid 6049] mount("/syzcgroup/net", "./syz-tmp/newroot/syzcgroup/net", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0
[pid 6049] mkdirat(AT_FDCWD, "./syz-tmp/pivot", 0777) = 0
[pid 6049] pivot_root("./syz-tmp", "./syz-tmp/pivot") = 0
[pid 6049] chdir("/") = 0
[pid 6049] umount2("./pivot", MNT_DETACH) = 0
[pid 6049] chroot("./newroot") = 0
[pid 6049] chdir("/") = 0
[pid 6049] mkdirat(AT_FDCWD, "/dev/gadgetfs", 0777) = -1 EEXIST (File exists)
[pid 6049] mount("gadgetfs", "/de
Tested on:
commit: 62cc9024 Merge tag 'mm-hotfixes-stable-2026-07-27-14-1..
git tree: upstream
console output: https://syzkaller.appspot.com/x/log.txt?x=14c496b9580000
kernel config: https://syzkaller.appspot.com/x/.config?x=cb17729fb04b1e3a
dashboard link: https://syzkaller.appspot.com/bug?extid=bbb6dad313f4aaa8da6b
compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8
patch: https://syzkaller.appspot.com/x/patch.diff?x=167896b9580000
^ permalink raw reply [flat|nested] 6+ messages in thread
* Forwarded: [PATCH] usb: gadget: f_midi2: Fix null dereference
2026-07-28 13:41 [syzbot] [usb?] general protection fault in f_midi2_stop_eps syzbot
2026-07-28 15:59 ` Forwarded: [PATCH] usb: gadget: f_midi2: Fix null dereference syzbot
2026-07-28 17:25 ` syzbot
@ 2026-07-28 17:25 ` syzbot
2 siblings, 0 replies; 6+ messages in thread
From: syzbot @ 2026-07-28 17:25 UTC (permalink / raw)
To: linux-kernel
For archival purposes, forwarding an incoming command email to
linux-kernel@vger.kernel.org.
***
Subject: [PATCH] usb: gadget: f_midi2: Fix null dereference
Author: michail.tatas@gmail.com
#syz test
f_midi2_bind only binds if
if (... != SNDRV_UMP_DIR_OUTPUT)
...
if (... != SNDRV_UMP_DIR_INPUT)
...
When f_midi2_set_alt gets called, it uncoditionally calls
f_midi2_stop_eps which triggers a null dereference in
f_midi2_free_ep_reqs
Add guard to catch dereference in f_midi2_free_ep_reqs like
f_midi2_drop_reqs already has
Signed-off-by: Michail Tatas <michail.tatas@gmail.com>
---
drivers/usb/gadget/function/f_midi2.c | 6 ++++++
1 file changed, 6 insertions(+)
diff --git a/drivers/usb/gadget/function/f_midi2.c b/drivers/usb/gadget/function/f_midi2.c
index 19fdac024343..b9bb09c4b51a 100644
--- a/drivers/usb/gadget/function/f_midi2.c
+++ b/drivers/usb/gadget/function/f_midi2.c
@@ -1163,6 +1163,9 @@ static void f_midi2_free_ep_reqs(struct f_midi2_usb_ep *usb_ep)
struct f_midi2 *midi2 = usb_ep->card;
int i;
+ if (!usb_ep->usb_ep || !usb_ep->num_reqs)
+ return;
+
for (i = 0; i < midi2->info.num_reqs; i++) {
if (!usb_ep->reqs[i].req)
continue;
@@ -1203,6 +1206,9 @@ static int f_midi2_init_ep(struct f_midi2 *midi2, struct f_midi2_ep *ep,
/* Free EP */
static void f_midi2_free_ep(struct f_midi2_usb_ep *usb_ep)
{
+ if(!usb_ep->usb_ep)
+ return;
+
f_midi2_drop_reqs(usb_ep);
f_midi2_free_ep_reqs(usb_ep);
--
2.43.0
^ permalink raw reply related [flat|nested] 6+ messages in thread
* Forwarded: [PATCH] usb: gadget: f_midi2: Fix null dereference
2026-07-28 13:41 [syzbot] [usb?] general protection fault in f_midi2_stop_eps syzbot
2026-07-28 15:59 ` Forwarded: [PATCH] usb: gadget: f_midi2: Fix null dereference syzbot
@ 2026-07-28 17:25 ` syzbot
2026-07-28 17:25 ` syzbot
2 siblings, 0 replies; 6+ messages in thread
From: syzbot @ 2026-07-28 17:25 UTC (permalink / raw)
To: linux-kernel
For archival purposes, forwarding an incoming command email to
linux-kernel@vger.kernel.org.
***
Subject: [PATCH] usb: gadget: f_midi2: Fix null dereference
Author: michail.tatas@gmail.com
#syz test
f_midi2_bind only binds if
if (... != SNDRV_UMP_DIR_OUTPUT)
...
if (... != SNDRV_UMP_DIR_INPUT)
...
When f_midi2_set_alt gets called, it uncoditionally calls
f_midi2_stop_eps which triggers a null dereference in
f_midi2_free_ep_reqs
Add guard to catch dereference in f_midi2_free_ep_reqs like
f_midi2_drop_reqs already has
Signed-off-by: Michail Tatas <michail.tatas@gmail.com>
---
drivers/usb/gadget/function/f_midi2.c | 6 ++++++
1 file changed, 6 insertions(+)
diff --git a/drivers/usb/gadget/function/f_midi2.c b/drivers/usb/gadget/function/f_midi2.c
index 19fdac024343..b9bb09c4b51a 100644
--- a/drivers/usb/gadget/function/f_midi2.c
+++ b/drivers/usb/gadget/function/f_midi2.c
@@ -1163,6 +1163,9 @@ static void f_midi2_free_ep_reqs(struct f_midi2_usb_ep *usb_ep)
struct f_midi2 *midi2 = usb_ep->card;
int i;
+ if (!usb_ep->usb_ep || !usb_ep->num_reqs)
+ return;
+
for (i = 0; i < midi2->info.num_reqs; i++) {
if (!usb_ep->reqs[i].req)
continue;
@@ -1203,6 +1206,9 @@ static int f_midi2_init_ep(struct f_midi2 *midi2, struct f_midi2_ep *ep,
/* Free EP */
static void f_midi2_free_ep(struct f_midi2_usb_ep *usb_ep)
{
+ if(!usb_ep->usb_ep)
+ return;
+
f_midi2_drop_reqs(usb_ep);
f_midi2_free_ep_reqs(usb_ep);
--
2.43.0
^ permalink raw reply related [flat|nested] 6+ messages in thread
* Re: [syzbot] [usb?] general protection fault in f_midi2_stop_eps
[not found] <amjl_vmUevq_ALae@michalis-linux>
@ 2026-07-28 18:21 ` syzbot
0 siblings, 0 replies; 6+ messages in thread
From: syzbot @ 2026-07-28 18:21 UTC (permalink / raw)
To: linux-kernel, michail.tatas, syzkaller-bugs
Hello,
syzbot has tested the proposed patch but the reproducer is still triggering an issue:
lost connection to test machine
Tested on:
commit: 3b5f4b83 Merge tag 'for-7.2-rc5-tag' of git://git.kern..
git tree: upstream
console output: https://syzkaller.appspot.com/x/log.txt?x=16ff0aea580000
kernel config: https://syzkaller.appspot.com/x/.config?x=cb17729fb04b1e3a
dashboard link: https://syzkaller.appspot.com/bug?extid=bbb6dad313f4aaa8da6b
compiler: Debian clang version 22.1.8 (++20260613092233+e80beda6e255-1~exp1~20260613092250.77), Debian LLD 22.1.8
patch: https://syzkaller.appspot.com/x/patch.diff?x=16e5ffde580000
^ permalink raw reply [flat|nested] 6+ messages in thread
end of thread, other threads:[~2026-07-28 18:21 UTC | newest]
Thread overview: 6+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-07-28 13:41 [syzbot] [usb?] general protection fault in f_midi2_stop_eps syzbot
2026-07-28 15:59 ` Forwarded: [PATCH] usb: gadget: f_midi2: Fix null dereference syzbot
2026-07-28 17:25 ` syzbot
2026-07-28 17:25 ` syzbot
[not found] <amjR0wmv0Ri2tGwD@michalis-linux>
2026-07-28 16:32 ` [syzbot] [usb?] general protection fault in f_midi2_stop_eps syzbot
[not found] <amjl_vmUevq_ALae@michalis-linux>
2026-07-28 18:21 ` syzbot
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.