./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor585593405 <...> d { noatsecure } for pid=216 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 11.377736][ T24] audit: type=1400 audit(1684300439.480:63): avc: denied { write } for pid=216 comm="sh" path="pipe:[13723]" dev="pipefs" ino=13723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 11.382095][ T24] audit: type=1400 audit(1684300439.480:64): avc: denied { rlimitinh } for pid=216 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 11.386530][ T24] audit: type=1400 audit(1684300439.480:65): avc: denied { siginh } for pid=216 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.132' (ECDSA) to the list of known hosts. execve("./syz-executor585593405", ["./syz-executor585593405"], 0x7fff7b029920 /* 10 vars */) = 0 brk(NULL) = 0x555555776000 brk(0x555555776c40) = 0x555555776c40 arch_prctl(ARCH_SET_FS, 0x555555776300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 set_tid_address(0x5555557765d0) = 286 set_robust_list(0x5555557765e0, 24) = 0 rt_sigaction(SIGRTMIN, {sa_handler=0x7f1505d918e0, sa_mask=[], sa_flags=SA_RESTORER|SA_SIGINFO, sa_restorer=0x7f1505d91fb0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=0x7f1505d91980, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f1505d91fb0}, NULL, 8) = 0 rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor585593405", 4096) = 27 brk(0x555555797c40) = 0x555555797c40 brk(0x555555798000) = 0x555555798000 mprotect(0x7f1505e53000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 getpid() = 286 openat(AT_FDCWD, "/sys/kernel/debug/x86/nmi_longest_ns", O_WRONLY|O_CLOEXEC) = 3 write(3, "10000000000", 11) = 11 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/hung_task_check_interval_secs", O_WRONLY|O_CLOEXEC) = 3 write(3, "20", 2) = 2 close(3) = 0 openat(AT_FDCWD, "/proc/sys/net/core/bpf_jit_kallsyms", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/net/core/bpf_jit_harden", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/kptr_restrict", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/softlockup_all_cpu_backtrace", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3 write(3, "100", 3) = 3 close(3) = 0 openat(AT_FDCWD, "/proc/sys/vm/oom_dump_tasks", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/debug/exception-trace", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/printk", O_WRONLY|O_CLOEXEC) = 3 write(3, "7 4 1 3", 7) = 7 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/keys/gc_delay", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/vm/oom_kill_allocating_task", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/ctrl-alt-del", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/cad_pid", O_WRONLY|O_CLOEXEC) = 3 write(3, "286", 3) = 3 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557765d0) = 287 ./strace-static-x86_64: Process 287 attached [pid 286] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 287] set_robust_list(0x5555557765e0, 24 [pid 286] <... clone resumed>, child_tidptr=0x5555557765d0) = 288 [pid 286] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 288 attached [pid 287] <... set_robust_list resumed>) = 0 [pid 286] <... clone resumed>, child_tidptr=0x5555557765d0) = 289 [pid 286] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 288] set_robust_list(0x5555557765e0, 24 [pid 287] openat(AT_FDCWD, "/dev/loop0", O_RDWR./strace-static-x86_64: Process 289 attached [pid 286] <... clone resumed>, child_tidptr=0x5555557765d0) = 290 [pid 286] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 290 attached [pid 289] set_robust_list(0x5555557765e0, 24 [pid 288] <... set_robust_list resumed>) = 0 [pid 287] <... openat resumed>) = 3 [pid 289] <... set_robust_list resumed>) = 0 [pid 288] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 287] ioctl(3, LOOP_CLR_FD [pid 289] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 288] <... openat resumed>) = 3 [pid 287] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 289] <... openat resumed>) = 3 [pid 288] ioctl(3, LOOP_CLR_FD [pid 287] close(3 [pid 289] ioctl(3, LOOP_CLR_FD [pid 288] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 287] <... close resumed>) = 0 [pid 289] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 288] close(3 [pid 287] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 289] close(3 [pid 288] <... close resumed>) = 0 [pid 289] <... close resumed>) = 0 [pid 288] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 287] <... clone resumed>, child_tidptr=0x5555557765d0) = 294 [pid 290] set_robust_list(0x5555557765e0, 24 [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] <... set_robust_list resumed>) = 0 [pid 288] <... clone resumed>, child_tidptr=0x5555557765d0) = 295 [pid 286] <... clone resumed>, child_tidptr=0x5555557765d0) = 291 [pid 290] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 289] <... clone resumed>, child_tidptr=0x5555557765d0) = 296 [pid 286] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] <... openat resumed>) = 3 [pid 290] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 291 attached [pid 286] <... clone resumed>, child_tidptr=0x5555557765d0) = 297 [pid 290] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 291] set_robust_list(0x5555557765e0, 24) = 0 ./strace-static-x86_64: Process 294 attached ./strace-static-x86_64: Process 295 attached [pid 291] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 290] close(3 [pid 295] set_robust_list(0x5555557765e0, 24 [pid 291] <... openat resumed>) = 3 [pid 290] <... close resumed>) = 0 [pid 295] <... set_robust_list resumed>) = 0 [pid 294] set_robust_list(0x5555557765e0, 24 [pid 291] ioctl(3, LOOP_CLR_FD [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 297 attached ./strace-static-x86_64: Process 296 attached [pid 295] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 297] set_robust_list(0x5555557765e0, 24 [pid 296] set_robust_list(0x5555557765e0, 24 [pid 297] <... set_robust_list resumed>) = 0 [pid 296] <... set_robust_list resumed>) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 296] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 290] <... clone resumed>, child_tidptr=0x5555557765d0) = 299 [pid 297] <... openat resumed>) = 3 [pid 296] <... prctl resumed>) = 0 [pid 297] ioctl(3, LOOP_CLR_FD [pid 296] setpgid(0, 0 [pid 297] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 296] <... setpgid resumed>) = 0 [ 20.704290][ T24] audit: type=1400 audit(1684300448.820:66): avc: denied { execmem } for pid=286 comm="syz-executor585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 20.717091][ T24] audit: type=1400 audit(1684300448.830:67): avc: denied { read write } for pid=287 comm="syz-executor585" name="loop0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 20.721955][ T24] audit: type=1400 audit(1684300448.830:68): avc: denied { open } for pid=287 comm="syz-executor585" path="/dev/loop0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [pid 297] close(3 [pid 296] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 297] <... close resumed>) = 0 [pid 296] <... openat resumed>) = 3 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 296] write(3, "1000", 4) = 4 [pid 297] <... clone resumed>, child_tidptr=0x5555557765d0) = 300 [pid 296] close(3) = 0 [pid 296] futex(0x7f1505e5978c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 296] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1505d60000 [pid 296] mprotect(0x7f1505d61000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 296] clone(child_stack=0x7f1505d803f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[301], tls=0x7f1505d80700, child_tidptr=0x7f1505d809d0) = 301 [pid 296] futex(0x7f1505e59788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 296] futex(0x7f1505e5978c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 300 attached [pid 300] set_robust_list(0x5555557765e0, 24) = 0 [pid 300] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 300] setpgid(0, 0) = 0 [pid 300] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 300] write(3, "1000", 4) = 4 [pid 300] close(3) = 0 [pid 300] futex(0x7f1505e5978c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 300] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1505d60000 [pid 300] mprotect(0x7f1505d61000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 300] clone(child_stack=0x7f1505d803f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[302], tls=0x7f1505d80700, child_tidptr=0x7f1505d809d0) = 302 [pid 300] futex(0x7f1505e59788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 300] futex(0x7f1505e5978c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 302 attached [pid 302] set_robust_list(0x7f1505d809e0, 24) = 0 [pid 302] memfd_create("syzkaller", 0) = 3 [pid 302] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f14fd960000 [pid 302] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 294] <... set_robust_list resumed>) = 0 [pid 291] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 295] <... prctl resumed>) = 0 [pid 295] setpgid(0, 0 [pid 294] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 291] close(3 [pid 295] <... setpgid resumed>) = 0 [pid 294] <... prctl resumed>) = 0 [pid 291] <... close resumed>) = 0 [pid 295] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 294] setpgid(0, 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 295] <... openat resumed>) = 3 [pid 294] <... setpgid resumed>) = 0 [pid 295] write(3, "1000", 4 [pid 291] <... clone resumed>, child_tidptr=0x5555557765d0) = 303 [pid 295] <... write resumed>) = 4 [pid 294] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 295] close(3) = 0 [pid 294] <... openat resumed>) = 3 [pid 295] futex(0x7f1505e5978c, FUTEX_WAKE_PRIVATE, 1000000 [pid 294] write(3, "1000", 4 [pid 295] <... futex resumed>) = 0 [pid 295] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 294] <... write resumed>) = 4 [pid 295] <... mmap resumed>) = 0x7f1505d60000 [pid 294] close(3 [pid 295] mprotect(0x7f1505d61000, 131072, PROT_READ|PROT_WRITE [pid 294] <... close resumed>) = 0 [pid 295] <... mprotect resumed>) = 0 [pid 294] futex(0x7f1505e5978c, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] clone(child_stack=0x7f1505d803f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 294] <... futex resumed>) = 0 [pid 294] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 295] <... clone resumed>, parent_tid=[304], tls=0x7f1505d80700, child_tidptr=0x7f1505d809d0) = 304 [pid 294] <... mmap resumed>) = 0x7f1505d60000 [pid 295] futex(0x7f1505e59788, FUTEX_WAKE_PRIVATE, 1000000 [pid 294] mprotect(0x7f1505d61000, 131072, PROT_READ|PROT_WRITE [pid 295] <... futex resumed>) = 0 [pid 295] futex(0x7f1505e5978c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 294] <... mprotect resumed>) = 0 [pid 294] clone(child_stack=0x7f1505d803f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[305], tls=0x7f1505d80700, child_tidptr=0x7f1505d809d0) = 305 [pid 294] futex(0x7f1505e59788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 302] <... write resumed>) = 524288 [pid 302] munmap(0x7f14fd960000, 524288) = 0 [pid 302] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 294] futex(0x7f1505e5978c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 302] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 304 attached ./strace-static-x86_64: Process 301 attached ./strace-static-x86_64: Process 303 attached ./strace-static-x86_64: Process 299 attached ./strace-static-x86_64: Process 305 attached [pid 304] set_robust_list(0x7f1505d809e0, 24 [pid 301] set_robust_list(0x7f1505d809e0, 24 [pid 305] set_robust_list(0x7f1505d809e0, 24 [pid 304] <... set_robust_list resumed>) = 0 [pid 303] set_robust_list(0x5555557765e0, 24 [pid 299] set_robust_list(0x5555557765e0, 24 [pid 304] memfd_create("syzkaller", 0 [pid 301] <... set_robust_list resumed>) = 0 [pid 305] <... set_robust_list resumed>) = 0 [pid 304] <... memfd_create resumed>) = 3 [pid 303] <... set_robust_list resumed>) = 0 [pid 301] memfd_create("syzkaller", 0 [pid 299] <... set_robust_list resumed>) = 0 [pid 302] <... ioctl resumed>) = 0 [pid 302] close(3) = 0 [pid 304] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 301] <... memfd_create resumed>) = 3 [pid 299] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 304] <... mmap resumed>) = 0x7f14fd960000 [pid 301] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 299] <... prctl resumed>) = 0 [pid 304] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 301] <... mmap resumed>) = 0x7f14fd960000 [pid 299] setpgid(0, 0 [pid 304] <... write resumed>) = 524288 [pid 301] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 299] <... setpgid resumed>) = 0 [pid 299] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 305] memfd_create("syzkaller", 0 [pid 304] munmap(0x7f14fd960000, 524288 [pid 303] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 302] mkdir("./file0", 0777 [pid 299] <... openat resumed>) = 3 [pid 299] write(3, "1000", 4) = 4 [pid 299] close(3 [pid 304] <... munmap resumed>) = 0 [pid 299] <... close resumed>) = 0 [pid 299] futex(0x7f1505e5978c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 299] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 304] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 303] <... prctl resumed>) = 0 [pid 299] <... mmap resumed>) = 0x7f1505d60000 [pid 299] mprotect(0x7f1505d61000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 304] <... openat resumed>) = 4 [pid 303] setpgid(0, 0 [pid 299] clone(child_stack=0x7f1505d803f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 301] <... write resumed>) = 524288 [pid 304] ioctl(4, LOOP_SET_FD, 3 [pid 303] <... setpgid resumed>) = 0 [pid 301] munmap(0x7f14fd960000, 524288./strace-static-x86_64: Process 307 attached [pid 305] <... memfd_create resumed>) = 3 [pid 299] <... clone resumed>, parent_tid=[307], tls=0x7f1505d80700, child_tidptr=0x7f1505d809d0) = 307 [pid 299] futex(0x7f1505e59788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 307] set_robust_list(0x7f1505d809e0, 24 [pid 305] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 303] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 301] <... munmap resumed>) = 0 [pid 299] futex(0x7f1505e5978c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 307] <... set_robust_list resumed>) = 0 [pid 305] <... mmap resumed>) = 0x7f14fd960000 [pid 301] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 303] <... openat resumed>) = 3 [pid 303] write(3, "1000", 4) = 4 [pid 303] close(3) = 0 [pid 303] futex(0x7f1505e5978c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 307] memfd_create("syzkaller", 0 [pid 303] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 307] <... memfd_create resumed>) = 3 [pid 305] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 303] <... mmap resumed>) = 0x7f1505d60000 [pid 307] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 303] mprotect(0x7f1505d61000, 131072, PROT_READ|PROT_WRITE [pid 302] <... mkdir resumed>) = 0 [pid 303] <... mprotect resumed>) = 0 [pid 307] <... mmap resumed>) = 0x7f14fd960000 [pid 302] mount("/dev/loop5", "./file0", "ext4", MS_NOSUID|MS_SILENT|MS_STRICTATIME, "grpquota,debug_want_extra_isize=0x0000000000000082,nodiscard,nojournal_checksum,data=ordered,init_it"... [ 20.751117][ T24] audit: type=1400 audit(1684300448.840:69): avc: denied { ioctl } for pid=287 comm="syz-executor585" path="/dev/loop0" dev="devtmpfs" ino=111 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [pid 303] clone(child_stack=0x7f1505d803f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[309], tls=0x7f1505d80700, child_tidptr=0x7f1505d809d0) = 309 ./strace-static-x86_64: Process 309 attached [pid 307] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 305] <... write resumed>) = 524288 [pid 303] futex(0x7f1505e59788, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] set_robust_list(0x7f1505d809e0, 24 [pid 307] <... write resumed>) = 524288 [pid 305] munmap(0x7f14fd960000, 524288 [pid 309] <... set_robust_list resumed>) = 0 [pid 305] <... munmap resumed>) = 0 [pid 309] memfd_create("syzkaller", 0 [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 309] <... memfd_create resumed>) = 3 [pid 307] munmap(0x7f14fd960000, 524288 [pid 309] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 307] <... munmap resumed>) = 0 [pid 309] <... mmap resumed>) = 0x7f14fd960000 [pid 307] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 309] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 307] <... openat resumed>) = 4 [pid 305] <... openat resumed>) = 4 [pid 304] <... ioctl resumed>) = 0 [pid 301] <... openat resumed>) = 4 [pid 307] ioctl(4, LOOP_SET_FD, 3 [pid 305] ioctl(4, LOOP_SET_FD, 3 [pid 304] close(3 [pid 301] ioctl(4, LOOP_SET_FD, 3 [pid 304] <... close resumed>) = 0 [pid 304] mkdir("./file0", 0777) = -1 EEXIST (File exists) [pid 304] mount("/dev/loop1", "./file0", "ext4", MS_NOSUID|MS_SILENT|MS_STRICTATIME, "grpquota,debug_want_extra_isize=0x0000000000000082,nodiscard,nojournal_checksum,data=ordered,init_it"... [pid 309] <... write resumed>) = 524288 [pid 303] <... futex resumed>) = 0 [pid 309] munmap(0x7f14fd960000, 524288 [pid 305] <... ioctl resumed>) = 0 [pid 303] futex(0x7f1505e5978c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 309] <... munmap resumed>) = 0 [pid 305] close(3 [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 305] <... close resumed>) = 0 [pid 305] mkdir("./file0", 0777) = -1 EEXIST (File exists) [pid 305] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID|MS_SILENT|MS_STRICTATIME, "grpquota,debug_want_extra_isize=0x0000000000000082,nodiscard,nojournal_checksum,data=ordered,init_it"... [pid 307] <... ioctl resumed>) = 0 [pid 307] close(3 [pid 301] <... ioctl resumed>) = 0 [pid 309] <... openat resumed>) = 4 [pid 307] <... close resumed>) = 0 [pid 301] close(3 [pid 309] ioctl(4, LOOP_SET_FD, 3 [pid 307] mkdir("./file0", 0777) = -1 EEXIST (File exists) [pid 307] mount("/dev/loop3", "./file0", "ext4", MS_NOSUID|MS_SILENT|MS_STRICTATIME, "grpquota,debug_want_extra_isize=0x0000000000000082,nodiscard,nojournal_checksum,data=ordered,init_it"... [pid 301] <... close resumed>) = 0 [pid 301] mkdir("./file0", 0777) = -1 EEXIST (File exists) [ 20.810445][ T24] audit: type=1400 audit(1684300448.930:70): avc: denied { mounton } for pid=300 comm="syz-executor585" path="/root/file0" dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [pid 301] mount("/dev/loop2", "./file0", "ext4", MS_NOSUID|MS_SILENT|MS_STRICTATIME, "grpquota,debug_want_extra_isize=0x0000000000000082,nodiscard,nojournal_checksum,data=ordered,init_it"... [pid 309] <... ioctl resumed>) = 0 [pid 309] close(3) = 0 [pid 309] mkdir("./file0", 0777) = -1 EEXIST (File exists) [pid 309] mount("/dev/loop4", "./file0", "ext4", MS_NOSUID|MS_SILENT|MS_STRICTATIME, "grpquota,debug_want_extra_isize=0x0000000000000082,nodiscard,nojournal_checksum,data=ordered,init_it"... [pid 302] <... mount resumed>) = 0 [pid 302] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 302] chdir("./file0") = 0 [pid 302] ioctl(4, LOOP_CLR_FD) = 0 [ 20.838546][ T302] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000082,nodiscard,nojournal_checksum,data=ordered,init_itable=0x0000000000000003,usrquota,max_dir_size_kb=0x00000000000040d2,,errors=continue [ 20.866203][ T304] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000082,nodiscard,nojournal_checksum,data=ordered,init_itable=0x0000000000000003,usrquota,max_dir_size_kb=0x00000000000040d2,,errors=continue [pid 302] close(4) = 0 [pid 302] futex(0x7f1505e5978c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 302] futex(0x7f1505e59788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 304] <... mount resumed>) = 0 [pid 300] <... futex resumed>) = 0 [pid 304] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 304] chdir("./file0") = 0 [pid 304] ioctl(4, LOOP_CLR_FD) = 0 [pid 304] close(4) = 0 [pid 304] futex(0x7f1505e5978c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 295] <... futex resumed>) = 0 [pid 304] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 295] futex(0x7f1505e59788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 295] futex(0x7f1505e5978c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 304] <... open resumed>) = 4 [pid 304] futex(0x7f1505e5978c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 295] <... futex resumed>) = 0 [pid 295] futex(0x7f1505e59788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 295] futex(0x7f1505e5978c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 304] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5 [pid 304] futex(0x7f1505e5978c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 295] <... futex resumed>) = 0 [pid 295] futex(0x7f1505e59788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 295] futex(0x7f1505e5978c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 304] ftruncate(5, 33587199) = 0 [pid 304] futex(0x7f1505e5978c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 295] <... futex resumed>) = 0 [pid 295] futex(0x7f1505e59788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 295] futex(0x7f1505e5978c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 20.890094][ T24] audit: type=1400 audit(1684300448.990:71): avc: denied { mount } for pid=300 comm="syz-executor585" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 20.893685][ T301] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000082,nodiscard,nojournal_checksum,data=ordered,init_itable=0x0000000000000003,usrquota,max_dir_size_kb=0x00000000000040d2,,errors=continue [ 20.914067][ T309] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000082,nodiscard,nojournal_checksum,data=ordered,init_itable=0x0000000000000003,usrquota,max_dir_size_kb=0x00000000000040d2,,errors=continue [pid 304] sendfile(4, 5, NULL, 281474978811909 [pid 300] futex(0x7f1505e59788, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 295] futex(0x7f1505e5978c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 295] futex(0x7f1505e5978c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 295] futex(0x7f1505e5979c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 295] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f14fd9bf000 [pid 295] mprotect(0x7f14fd9c0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 295] clone(child_stack=0x7f14fd9df3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[322], tls=0x7f14fd9df700, child_tidptr=0x7f14fd9df9d0) = 322 [pid 295] futex(0x7f1505e59798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 295] futex(0x7f1505e5979c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 304] <... sendfile resumed>) = 376832 [pid 304] futex(0x7f1505e5978c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 304] futex(0x7f1505e59788, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 322 attached [pid 309] <... mount resumed>) = 0 [pid 305] <... mount resumed>) = 0 [pid 301] <... mount resumed>) = 0 [pid 300] <... futex resumed>) = 1 [pid 322] set_robust_list(0x7f14fd9df9e0, 24 [pid 305] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 301] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 300] futex(0x7f1505e5978c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 322] <... set_robust_list resumed>) = 0 [pid 305] <... openat resumed>) = 3 [pid 301] <... openat resumed>) = 3 [pid 322] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 305] chdir("./file0" [pid 301] chdir("./file0" [pid 322] <... mount resumed>) = 0 [pid 305] <... chdir resumed>) = 0 [pid 301] <... chdir resumed>) = 0 [pid 322] futex(0x7f1505e5979c, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] ioctl(4, LOOP_CLR_FD [pid 301] ioctl(4, LOOP_CLR_FD [pid 322] <... futex resumed>) = 1 [pid 305] <... ioctl resumed>) = 0 [pid 301] <... ioctl resumed>) = 0 [pid 295] <... futex resumed>) = 0 [pid 322] futex(0x7f1505e59798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 305] close(4 [pid 301] close(4 [pid 295] futex(0x7f1505e59788, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... close resumed>) = 0 [pid 304] <... futex resumed>) = 0 [pid 302] <... futex resumed>) = 0 [pid 301] <... close resumed>) = 0 [pid 295] <... futex resumed>) = 1 [pid 305] futex(0x7f1505e5978c, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 302] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 301] futex(0x7f1505e5978c, FUTEX_WAKE_PRIVATE, 1000000 [ 20.948405][ T24] audit: type=1400 audit(1684300449.060:72): avc: denied { write } for pid=295 comm="syz-executor585" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 20.969201][ T305] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000082,nodiscard,nojournal_checksum,data=ordered,init_itable=0x0000000000000003,usrquota,max_dir_size_kb=0x00000000000040d2,,errors=continue [pid 295] futex(0x7f1505e5978c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... futex resumed>) = 1 [pid 304] <... open resumed>) = 6 [pid 302] <... open resumed>) = 4 [pid 301] <... futex resumed>) = 1 [pid 296] <... futex resumed>) = 0 [pid 294] <... futex resumed>) = 0 [pid 305] futex(0x7f1505e59788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 304] futex(0x7f1505e5978c, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] futex(0x7f1505e5978c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] futex(0x7f1505e59788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 296] futex(0x7f1505e59788, FUTEX_WAKE_PRIVATE, 1000000 [pid 294] futex(0x7f1505e59788, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 304] <... futex resumed>) = 1 [pid 302] <... futex resumed>) = 1 [pid 301] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 300] <... futex resumed>) = 0 [pid 296] <... futex resumed>) = 0 [pid 295] <... futex resumed>) = 0 [pid 294] <... futex resumed>) = 0 [pid 305] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 304] futex(0x7f1505e59788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 302] futex(0x7f1505e59788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 300] futex(0x7f1505e59788, FUTEX_WAKE_PRIVATE, 1000000 [pid 296] futex(0x7f1505e5978c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 295] futex(0x7f1505e59788, FUTEX_WAKE_PRIVATE, 1000000 [pid 294] futex(0x7f1505e5978c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... open resumed>) = 4 [pid 304] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 302] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 301] <... open resumed>) = 4 [pid 300] <... futex resumed>) = 0 [pid 295] <... futex resumed>) = 0 [pid 305] futex(0x7f1505e5978c, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] writev(6, [{iov_base="\x46\xbd\x26\x2b\x9e\x1b\xd9\xd3\x26\x37\x9b\x13\x50\x4d\xd6\xfd\xac\xc6\xcd\x5c\x17\x5a\xf2\xf8\x3d\x3a\x25\xb3\x2e\xa9\x45\xdb\x18\x66\x51\x15\x58\xa3\x92\x3f\xd7\xe7\x7e\xa6\x78\x86\xda\x01\x84\x34\x97\x0f\x86\x4b\x4c\x1a\x9c\x55\xcc\x54\xda\xf1\x12\x18\xab\x55\x1b\xe9\xde\xac\x81\xf1\x65\x69\xe1\xaa\x70\x43\x8e\xc3\x22\xed\x93\xf4\xc0\x4b\xa6\xe8\xb6\xe2\x84\x79\x03\xf8\x58\x76\xe9\x86\x0c\x5f"..., iov_len=110}, {iov_base="\xc1\x3f\x4e\x2a\xf2\x9b\xb0\x30\x8e\x36\x30\x3a\x7b\x03\x07\xff\x53\x78\x57\xa1\x6d\xd7\x4e\x47\xe6\x96\xf9\xc7\xae\xb7\x27\x65\xad\xba\xd6\x1d\x04\xf9\x3e\x4a\x5e\xb4\x13\x71\x31\x71\xdf\xd3\x73\x1b\x74\xf0\xc9\x3a\xd2\x70\x2a\x1c\x9d\x49\x28\x98\x77\x69\xf2\x25\xe4\xdc\x5d\xd8\xe8\xae\x3c\x31\xc0\x8d\x5d\x1e\x0b\x49\x27\xb0\x26\x15\x35\x2b\x6b\x55\x7b\x48\x9e\x35\x2d\x07\x87\x94\x37\x47\x8d\xc8"..., iov_len=132}, {iov_base="\x34\xee\x3a\x2c\x11\x7e\x44\x32\x79\xe6\x7b\xfc\xba\x85\xae\xb6\xdb\x8c\x5b\x21\x8f\xcc\x1d\xca\xc5\x59\xe0\x50\x48\xcd\x76\xcc\xd8\x54\xd7\x37\xc4\x62\x2b\xc8\xc9\xb8\x2f\x51\x77\xf2\x27\x84\x1f\xe1\xf5\x3f\x0f\x8f\x7c\x3a\x80\x03\x7c\xcb\x36\xb4\x17\x6e\xbe\x9a\xe1\x11\xe8\x40\xd9\xaa\xeb\x99\xb6\xf2\x46\xea\xc6\x9a\x85\xa3\xb5\x2a\xff\x52\x0e\x11\x30\xdd\x72\x1b\xa2\x94\xe5\x5b\xcf\x3b\xdb\xba"..., iov_len=107}, {iov_base="\x6f\x90\x8a\xac\xf0\xcd\x92\x31\x69\xf3\x7d\xc7\x3a\x11\xe2\x5b\x26\x19\xc4\xd9\x1a\x04\xf2\x63\xb3\xae\xa7\xf4\xfd\x5f\x01\xe6\x24\x96\xe4\x4b\x83\x1e\xdd\x5d\x30\x8a\x6c\x79\xe7\xc4\x59\x94\x23\x86\x48\x8a\xd9\x3a\xe3\x73\x40\x83\x57\xbd\x80\x46\xdf\x53\x40\x7d\x3d\x76\x32\x45\x45\x98\x58\x72\x63\x6d\x29\xbb\xf1\x30\xa5\xff\x4b\x4a\x57\x85\x84\xc8\x24\x5c\x5a\x12\x7c\xb3\x6c\x64\x5b\xb3\x4c\x74"..., iov_len=176}, {iov_base="\xd3\x25\xd5\x12\x13\x6e\xfa\xc1\x9c\x33\x47\x09\xcf\x13\xf9\xa9\xac\x3d\x2d\x36\x20\x64\x0a\x56\xdf\x58\xa5\x62\xea\x3d\x18\x2f\xfa\x18\xdc\x34\x7b\xdd\x8f\xcb\x18\xbb\x6f\x22\x3b\x6f\xe0\xc6\x40\xbf\x1b\xd8\xa3\x55\xb0\x41\xab\xa3\x3b\x90\x0c\x45\x25\xff\x33\xe2\x0e\x34\x9f\xd2\xba\x0b\x3e\x61\x10\xfe\x0e\x4e\x57\x8b\x0b\x20\x65\xd2\x91\x95\x3e\x5c\x09\x2a\x9f\x20\x6e\x04\xe8\xe8\x2b\x1a\xc7\x1b"..., iov_len=574}], 5 [pid 302] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 301] futex(0x7f1505e5978c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] futex(0x7f1505e5978c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 295] futex(0x7f1505e5978c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... futex resumed>) = 1 [pid 304] <... writev resumed>) = 1099 [pid 302] <... open resumed>) = 5 [pid 301] <... futex resumed>) = 1 [pid 296] <... futex resumed>) = 0 [pid 294] <... futex resumed>) = 0 [pid 305] futex(0x7f1505e59788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 304] futex(0x7f1505e5978c, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] futex(0x7f1505e5978c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] futex(0x7f1505e59788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 296] futex(0x7f1505e59788, FUTEX_WAKE_PRIVATE, 1000000 [pid 294] futex(0x7f1505e59788, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 304] <... futex resumed>) = 1 [pid 302] <... futex resumed>) = 1 [pid 301] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 300] <... futex resumed>) = 0 [pid 296] <... futex resumed>) = 0 [pid 295] <... futex resumed>) = 0 [pid 294] <... futex resumed>) = 0 [pid 305] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 304] futex(0x7f1505e59788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 302] futex(0x7f1505e59788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 300] futex(0x7f1505e59788, FUTEX_WAKE_PRIVATE, 1000000 [pid 296] futex(0x7f1505e5978c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 295] exit_group(0 [pid 294] futex(0x7f1505e5978c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 322] <... futex resumed>) = ? [pid 305] <... open resumed>) = 5 [pid 304] <... futex resumed>) = ? [pid 302] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 301] <... open resumed>) = 5 [pid 300] <... futex resumed>) = 0 [pid 295] <... exit_group resumed>) = ? [pid 322] +++ exited with 0 +++ [pid 305] futex(0x7f1505e5978c, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] +++ exited with 0 +++ [pid 302] ftruncate(5, 33587199 [pid 301] futex(0x7f1505e5978c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] futex(0x7f1505e5978c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... futex resumed>) = 1 [pid 302] <... ftruncate resumed>) = 0 [pid 301] <... futex resumed>) = 1 [pid 296] <... futex resumed>) = 0 [pid 294] <... futex resumed>) = 0 [pid 309] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 305] futex(0x7f1505e59788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 302] futex(0x7f1505e5978c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] futex(0x7f1505e59788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 296] futex(0x7f1505e59788, FUTEX_WAKE_PRIVATE, 1000000 [pid 294] futex(0x7f1505e59788, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... openat resumed>) = 3 [pid 305] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 302] <... futex resumed>) = 1 [pid 301] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 300] <... futex resumed>) = 0 [pid 296] <... futex resumed>) = 0 [pid 294] <... futex resumed>) = 0 [pid 309] chdir("./file0" [pid 305] ftruncate(5, 33587199 [pid 302] futex(0x7f1505e59788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] ftruncate(5, 33587199 [pid 300] futex(0x7f1505e59788, FUTEX_WAKE_PRIVATE, 1000000 [pid 296] futex(0x7f1505e5978c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 294] futex(0x7f1505e5978c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... chdir resumed>) = 0 [pid 305] <... ftruncate resumed>) = 0 [pid 302] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 301] <... ftruncate resumed>) = 0 [pid 300] <... futex resumed>) = 0 [pid 309] ioctl(4, LOOP_CLR_FD [pid 305] futex(0x7f1505e5978c, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] sendfile(4, 5, NULL, 281474978811909 [pid 301] futex(0x7f1505e5978c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] futex(0x7f1505e5978c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... ioctl resumed>) = 0 [pid 305] <... futex resumed>) = 1 [pid 301] <... futex resumed>) = 1 [pid 296] <... futex resumed>) = 0 [pid 294] <... futex resumed>) = 0 [ 20.995533][ T24] audit: type=1400 audit(1684300449.060:73): avc: denied { add_name } for pid=295 comm="syz-executor585" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 21.024758][ T24] audit: type=1400 audit(1684300449.060:74): avc: denied { create } for pid=295 comm="syz-executor585" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [pid 309] close(4 [pid 305] futex(0x7f1505e59788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] futex(0x7f1505e59788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 296] futex(0x7f1505e59788, FUTEX_WAKE_PRIVATE, 1000000 [pid 294] futex(0x7f1505e59788, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 301] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 296] <... futex resumed>) = 0 [pid 294] <... futex resumed>) = 0 [pid 305] sendfile(4, 5, NULL, 281474978811909 [pid 296] futex(0x7f1505e5978c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 294] futex(0x7f1505e5978c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] sendfile(4, 5, NULL, 281474978811909 [pid 309] <... close resumed>) = 0 [pid 309] futex(0x7f1505e5978c, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] <... futex resumed>) = 0 [pid 303] futex(0x7f1505e59788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 303] futex(0x7f1505e5978c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... futex resumed>) = 1 [pid 309] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 309] futex(0x7f1505e5978c, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] <... futex resumed>) = 0 [pid 303] futex(0x7f1505e59788, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... futex resumed>) = 1 [pid 303] <... futex resumed>) = 0 [pid 309] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 303] futex(0x7f1505e5978c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... open resumed>) = 5 [pid 309] futex(0x7f1505e5978c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 303] <... futex resumed>) = 0 [pid 309] ftruncate(5, 33587199 [pid 303] futex(0x7f1505e59788, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... ftruncate resumed>) = 0 [pid 303] <... futex resumed>) = 0 [pid 303] futex(0x7f1505e5978c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] futex(0x7f1505e5978c, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] <... futex resumed>) = 0 [pid 303] futex(0x7f1505e59788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 303] futex(0x7f1505e5978c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... futex resumed>) = 1 [pid 309] sendfile(4, 5, NULL, 281474978811909 [pid 295] +++ exited with 0 +++ [pid 288] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=295, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 288] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 288] ioctl(3, LOOP_CLR_FD) = 0 [pid 288] close(3) = 0 [pid 288] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557765d0) = 324 ./strace-static-x86_64: Process 324 attached [pid 324] set_robust_list(0x5555557765e0, 24) = 0 [pid 324] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 300] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 300] futex(0x7f1505e5979c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 300] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f14fd9bf000 [pid 300] mprotect(0x7f14fd9c0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 300] clone(child_stack=0x7f14fd9df3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[325], tls=0x7f14fd9df700, child_tidptr=0x7f14fd9df9d0) = 325 [pid 300] futex(0x7f1505e59798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 300] futex(0x7f1505e5979c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 324] <... prctl resumed>) = 0 [pid 324] setpgid(0, 0) = 0 [pid 324] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 324] write(3, "1000", 4) = 4 [pid 324] close(3) = 0 [pid 324] futex(0x7f1505e5978c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 324] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f1505d60000 [pid 324] mprotect(0x7f1505d61000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 324] clone(child_stack=0x7f1505d803f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[326], tls=0x7f1505d80700, child_tidptr=0x7f1505d809d0) = 326 [pid 324] futex(0x7f1505e59788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 324] futex(0x7f1505e5978c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 325 attached [pid 325] set_robust_list(0x7f14fd9df9e0, 24) = 0 [pid 325] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL) = 0 [pid 325] futex(0x7f1505e5979c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... futex resumed>) = 0 [pid 300] futex(0x7f1505e59798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 300] futex(0x7f1505e5979c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 325] <... futex resumed>) = 1 [pid 325] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 325] futex(0x7f1505e5979c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... futex resumed>) = 0 [pid 300] futex(0x7f1505e59798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 300] futex(0x7f1505e5979c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 325] <... futex resumed>) = 1 [pid 325] writev(6, [{iov_base="\x46\xbd\x26\x2b\x9e\x1b\xd9\xd3\x26\x37\x9b\x13\x50\x4d\xd6\xfd\xac\xc6\xcd\x5c\x17\x5a\xf2\xf8\x3d\x3a\x25\xb3\x2e\xa9\x45\xdb\x18\x66\x51\x15\x58\xa3\x92\x3f\xd7\xe7\x7e\xa6\x78\x86\xda\x01\x84\x34\x97\x0f\x86\x4b\x4c\x1a\x9c\x55\xcc\x54\xda\xf1\x12\x18\xab\x55\x1b\xe9\xde\xac\x81\xf1\x65\x69\xe1\xaa\x70\x43\x8e\xc3\x22\xed\x93\xf4\xc0\x4b\xa6\xe8\xb6\xe2\x84\x79\x03\xf8\x58\x76\xe9\x86\x0c\x5f"..., iov_len=110}, {iov_base="\xc1\x3f\x4e\x2a\xf2\x9b\xb0\x30\x8e\x36\x30\x3a\x7b\x03\x07\xff\x53\x78\x57\xa1\x6d\xd7\x4e\x47\xe6\x96\xf9\xc7\xae\xb7\x27\x65\xad\xba\xd6\x1d\x04\xf9\x3e\x4a\x5e\xb4\x13\x71\x31\x71\xdf\xd3\x73\x1b\x74\xf0\xc9\x3a\xd2\x70\x2a\x1c\x9d\x49\x28\x98\x77\x69\xf2\x25\xe4\xdc\x5d\xd8\xe8\xae\x3c\x31\xc0\x8d\x5d\x1e\x0b\x49\x27\xb0\x26\x15\x35\x2b\x6b\x55\x7b\x48\x9e\x35\x2d\x07\x87\x94\x37\x47\x8d\xc8"..., iov_len=132}, {iov_base="\x34\xee\x3a\x2c\x11\x7e\x44\x32\x79\xe6\x7b\xfc\xba\x85\xae\xb6\xdb\x8c\x5b\x21\x8f\xcc\x1d\xca\xc5\x59\xe0\x50\x48\xcd\x76\xcc\xd8\x54\xd7\x37\xc4\x62\x2b\xc8\xc9\xb8\x2f\x51\x77\xf2\x27\x84\x1f\xe1\xf5\x3f\x0f\x8f\x7c\x3a\x80\x03\x7c\xcb\x36\xb4\x17\x6e\xbe\x9a\xe1\x11\xe8\x40\xd9\xaa\xeb\x99\xb6\xf2\x46\xea\xc6\x9a\x85\xa3\xb5\x2a\xff\x52\x0e\x11\x30\xdd\x72\x1b\xa2\x94\xe5\x5b\xcf\x3b\xdb\xba"..., iov_len=107}, {iov_base="\x6f\x90\x8a\xac\xf0\xcd\x92\x31\x69\xf3\x7d\xc7\x3a\x11\xe2\x5b\x26\x19\xc4\xd9\x1a\x04\xf2\x63\xb3\xae\xa7\xf4\xfd\x5f\x01\xe6\x24\x96\xe4\x4b\x83\x1e\xdd\x5d\x30\x8a\x6c\x79\xe7\xc4\x59\x94\x23\x86\x48\x8a\xd9\x3a\xe3\x73\x40\x83\x57\xbd\x80\x46\xdf\x53\x40\x7d\x3d\x76\x32\x45\x45\x98\x58\x72\x63\x6d\x29\xbb\xf1\x30\xa5\xff\x4b\x4a\x57\x85\x84\xc8\x24\x5c\x5a\x12\x7c\xb3\x6c\x64\x5b\xb3\x4c\x74"..., iov_len=176}, {iov_base="\xd3\x25\xd5\x12\x13\x6e\xfa\xc1\x9c\x33\x47\x09\xcf\x13\xf9\xa9\xac\x3d\x2d\x36\x20\x64\x0a\x56\xdf\x58\xa5\x62\xea\x3d\x18\x2f\xfa\x18\xdc\x34\x7b\xdd\x8f\xcb\x18\xbb\x6f\x22\x3b\x6f\xe0\xc6\x40\xbf\x1b\xd8\xa3\x55\xb0\x41\xab\xa3\x3b\x90\x0c\x45\x25\xff\x33\xe2\x0e\x34\x9f\xd2\xba\x0b\x3e\x61\x10\xfe\x0e\x4e\x57\x8b\x0b\x20\x65\xd2\x91\x95\x3e\x5c\x09\x2a\x9f\x20\x6e\x04\xe8\xe8\x2b\x1a\xc7\x1b"..., iov_len=574}], 5) = 1099 [pid 325] futex(0x7f1505e5979c, FUTEX_WAKE_PRIVATE, 1000000 [pid 300] <... futex resumed>) = 0 [pid 325] <... futex resumed>) = 1 [pid 325] futex(0x7f1505e59798, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 326 attached [pid 326] set_robust_list(0x7f1505d809e0, 24) = 0 [pid 326] memfd_create("syzkaller", 0) = 3 [pid 326] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f14fd960000 [ 21.045221][ T24] audit: type=1400 audit(1684300449.060:75): avc: denied { read write open } for pid=295 comm="syz-executor585" path="/root/file0/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 21.083588][ T307] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000082,nodiscard,nojournal_checksum,data=ordered,init_itable=0x0000000000000003,usrquota,max_dir_size_kb=0x00000000000040d2,,errors=continue [pid 296] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 296] futex(0x7f1505e5978c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 296] futex(0x7f1505e5978c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 296] futex(0x7f1505e5978c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 296] futex(0x7f1505e5979c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 296] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f14fd9bf000 [pid 296] mprotect(0x7f14fd9c0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 296] clone(child_stack=0x7f14fd9df3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[327], tls=0x7f14fd9df700, child_tidptr=0x7f14fd9df9d0) = 327 [pid 296] futex(0x7f1505e59798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 296] futex(0x7f1505e5979c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 294] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 294] futex(0x7f1505e5979c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 294] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f14fd9bf000 [pid 294] mprotect(0x7f14fd9c0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 294] clone(child_stack=0x7f14fd9df3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[328], tls=0x7f14fd9df700, child_tidptr=0x7f14fd9df9d0) = 328 [pid 294] futex(0x7f1505e59798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 294] futex(0x7f1505e5979c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 303] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 303] futex(0x7f1505e5979c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 303] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f14fd9bf000 [pid 307] <... mount resumed>) = 0 [pid 303] mprotect(0x7f14fd9c0000, 131072, PROT_READ|PROT_WRITE [pid 302] <... sendfile resumed>) = 262144 [pid 303] <... mprotect resumed>) = 0 [pid 302] futex(0x7f1505e5978c, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] clone(child_stack=0x7f14fd9df3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 302] <... futex resumed>) = 0 [pid 302] futex(0x7f1505e59788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 303] <... clone resumed>, parent_tid=[329], tls=0x7f14fd9df700, child_tidptr=0x7f14fd9df9d0) = 329 [pid 300] exit_group(0) = ? [pid 325] <... futex resumed>) = ? [pid 325] +++ exited with 0 +++ [pid 302] <... futex resumed>) = ? [pid 303] futex(0x7f1505e59798, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... sendfile resumed>) = 376832 [pid 301] futex(0x7f1505e5978c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 301] futex(0x7f1505e59788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 305] <... sendfile resumed>) = 376832 [pid 305] futex(0x7f1505e5978c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 305] futex(0x7f1505e59788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 303] <... futex resumed>) = 0 ./strace-static-x86_64: Process 329 attached [pid 329] set_robust_list(0x7f14fd9df9e0, 24./strace-static-x86_64: Process 328 attached [pid 328] set_robust_list(0x7f14fd9df9e0, 24 [pid 329] <... set_robust_list resumed>) = 0 [pid 329] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 328] <... set_robust_list resumed>) = 0 [pid 329] <... mount resumed>) = 0 [pid 328] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 329] futex(0x7f1505e5979c, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] futex(0x7f1505e5979c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 329] <... futex resumed>) = 0 [pid 329] futex(0x7f1505e59798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 303] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 328] <... mount resumed>) = 0 [pid 303] futex(0x7f1505e59798, FUTEX_WAKE_PRIVATE, 1000000 [pid 328] futex(0x7f1505e5979c, FUTEX_WAKE_PRIVATE, 1000000 [pid 326] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 294] <... futex resumed>) = 0 [pid 307] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 303] <... futex resumed>) = 1 [pid 294] futex(0x7f1505e59788, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... futex resumed>) = 0 [pid 294] <... futex resumed>) = 1 [pid 305] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 294] futex(0x7f1505e5978c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... open resumed>) = 6 [pid 305] futex(0x7f1505e5978c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 294] <... futex resumed>) = 0 [pid 305] writev(6, [{iov_base="\x46\xbd\x26\x2b\x9e\x1b\xd9\xd3\x26\x37\x9b\x13\x50\x4d\xd6\xfd\xac\xc6\xcd\x5c\x17\x5a\xf2\xf8\x3d\x3a\x25\xb3\x2e\xa9\x45\xdb\x18\x66\x51\x15\x58\xa3\x92\x3f\xd7\xe7\x7e\xa6\x78\x86\xda\x01\x84\x34\x97\x0f\x86\x4b\x4c\x1a\x9c\x55\xcc\x54\xda\xf1\x12\x18\xab\x55\x1b\xe9\xde\xac\x81\xf1\x65\x69\xe1\xaa\x70\x43\x8e\xc3\x22\xed\x93\xf4\xc0\x4b\xa6\xe8\xb6\xe2\x84\x79\x03\xf8\x58\x76\xe9\x86\x0c\x5f"..., iov_len=110}, {iov_base="\xc1\x3f\x4e\x2a\xf2\x9b\xb0\x30\x8e\x36\x30\x3a\x7b\x03\x07\xff\x53\x78\x57\xa1\x6d\xd7\x4e\x47\xe6\x96\xf9\xc7\xae\xb7\x27\x65\xad\xba\xd6\x1d\x04\xf9\x3e\x4a\x5e\xb4\x13\x71\x31\x71\xdf\xd3\x73\x1b\x74\xf0\xc9\x3a\xd2\x70\x2a\x1c\x9d\x49\x28\x98\x77\x69\xf2\x25\xe4\xdc\x5d\xd8\xe8\xae\x3c\x31\xc0\x8d\x5d\x1e\x0b\x49\x27\xb0\x26\x15\x35\x2b\x6b\x55\x7b\x48\x9e\x35\x2d\x07\x87\x94\x37\x47\x8d\xc8"..., iov_len=132}, {iov_base="\x34\xee\x3a\x2c\x11\x7e\x44\x32\x79\xe6\x7b\xfc\xba\x85\xae\xb6\xdb\x8c\x5b\x21\x8f\xcc\x1d\xca\xc5\x59\xe0\x50\x48\xcd\x76\xcc\xd8\x54\xd7\x37\xc4\x62\x2b\xc8\xc9\xb8\x2f\x51\x77\xf2\x27\x84\x1f\xe1\xf5\x3f\x0f\x8f\x7c\x3a\x80\x03\x7c\xcb\x36\xb4\x17\x6e\xbe\x9a\xe1\x11\xe8\x40\xd9\xaa\xeb\x99\xb6\xf2\x46\xea\xc6\x9a\x85\xa3\xb5\x2a\xff\x52\x0e\x11\x30\xdd\x72\x1b\xa2\x94\xe5\x5b\xcf\x3b\xdb\xba"..., iov_len=107}, {iov_base="\x6f\x90\x8a\xac\xf0\xcd\x92\x31\x69\xf3\x7d\xc7\x3a\x11\xe2\x5b\x26\x19\xc4\xd9\x1a\x04\xf2\x63\xb3\xae\xa7\xf4\xfd\x5f\x01\xe6\x24\x96\xe4\x4b\x83\x1e\xdd\x5d\x30\x8a\x6c\x79\xe7\xc4\x59\x94\x23\x86\x48\x8a\xd9\x3a\xe3\x73\x40\x83\x57\xbd\x80\x46\xdf\x53\x40\x7d\x3d\x76\x32\x45\x45\x98\x58\x72\x63\x6d\x29\xbb\xf1\x30\xa5\xff\x4b\x4a\x57\x85\x84\xc8\x24\x5c\x5a\x12\x7c\xb3\x6c\x64\x5b\xb3\x4c\x74"..., iov_len=176}, {iov_base="\xd3\x25\xd5\x12\x13\x6e\xfa\xc1\x9c\x33\x47\x09\xcf\x13\xf9\xa9\xac\x3d\x2d\x36\x20\x64\x0a\x56\xdf\x58\xa5\x62\xea\x3d\x18\x2f\xfa\x18\xdc\x34\x7b\xdd\x8f\xcb\x18\xbb\x6f\x22\x3b\x6f\xe0\xc6\x40\xbf\x1b\xd8\xa3\x55\xb0\x41\xab\xa3\x3b\x90\x0c\x45\x25\xff\x33\xe2\x0e\x34\x9f\xd2\xba\x0b\x3e\x61\x10\xfe\x0e\x4e\x57\x8b\x0b\x20\x65\xd2\x91\x95\x3e\x5c\x09\x2a\x9f\x20\x6e\x04\xe8\xe8\x2b\x1a\xc7\x1b"..., iov_len=574}], 5 [pid 294] futex(0x7f1505e59788, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... writev resumed>) = 1099 [pid 294] <... futex resumed>) = 0 [pid 305] futex(0x7f1505e5978c, FUTEX_WAKE_PRIVATE, 1000000 [pid 294] futex(0x7f1505e5978c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... futex resumed>) = 0 [pid 294] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 305] futex(0x7f1505e59788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 294] exit_group(0 [pid 305] <... futex resumed>) = ? [pid 294] <... exit_group resumed>) = ? [pid 305] +++ exited with 0 +++ [pid 329] <... futex resumed>) = 0 [pid 329] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 329] futex(0x7f1505e5979c, FUTEX_WAKE_PRIVATE, 1000000 [pid 328] <... futex resumed>) = ? [pid 329] <... futex resumed>) = 0 [ 21.114657][ T302] EXT4-fs error (device loop5): __ext4_get_inode_loc:4436: comm syz-executor585: Invalid inode table block 5 in block_group 0 [ 21.133899][ T302] ------------[ cut here ]------------ [ 21.139189][ T302] kernel BUG at fs/ext4/ext4.h:3247! [ 21.146930][ T302] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 21.152833][ T302] CPU: 1 PID: 302 Comm: syz-executor585 Not tainted 5.10.178-syzkaller-00127-g43c801dc3325 #0 [pid 309] <... sendfile resumed>) = 376832 [pid 307] <... openat resumed>) = 3 [pid 303] futex(0x7f1505e5979c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] futex(0x7f1505e5978c, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] chdir("./file0" [pid 303] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 309] <... futex resumed>) = 0 [pid 307] <... chdir resumed>) = 0 [pid 303] futex(0x7f1505e59788, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] writev(6, [{iov_base="\x46\xbd\x26\x2b\x9e\x1b\xd9\xd3\x26\x37\x9b\x13\x50\x4d\xd6\xfd\xac\xc6\xcd\x5c\x17\x5a\xf2\xf8\x3d\x3a\x25\xb3\x2e\xa9\x45\xdb\x18\x66\x51\x15\x58\xa3\x92\x3f\xd7\xe7\x7e\xa6\x78\x86\xda\x01\x84\x34\x97\x0f\x86\x4b\x4c\x1a\x9c\x55\xcc\x54\xda\xf1\x12\x18\xab\x55\x1b\xe9\xde\xac\x81\xf1\x65\x69\xe1\xaa\x70\x43\x8e\xc3\x22\xed\x93\xf4\xc0\x4b\xa6\xe8\xb6\xe2\x84\x79\x03\xf8\x58\x76\xe9\x86\x0c\x5f"..., iov_len=110}, {iov_base="\xc1\x3f\x4e\x2a\xf2\x9b\xb0\x30\x8e\x36\x30\x3a\x7b\x03\x07\xff\x53\x78\x57\xa1\x6d\xd7\x4e\x47\xe6\x96\xf9\xc7\xae\xb7\x27\x65\xad\xba\xd6\x1d\x04\xf9\x3e\x4a\x5e\xb4\x13\x71\x31\x71\xdf\xd3\x73\x1b\x74\xf0\xc9\x3a\xd2\x70\x2a\x1c\x9d\x49\x28\x98\x77\x69\xf2\x25\xe4\xdc\x5d\xd8\xe8\xae\x3c\x31\xc0\x8d\x5d\x1e\x0b\x49\x27\xb0\x26\x15\x35\x2b\x6b\x55\x7b\x48\x9e\x35\x2d\x07\x87\x94\x37\x47\x8d\xc8"..., iov_len=132}, {iov_base="\x34\xee\x3a\x2c\x11\x7e\x44\x32\x79\xe6\x7b\xfc\xba\x85\xae\xb6\xdb\x8c\x5b\x21\x8f\xcc\x1d\xca\xc5\x59\xe0\x50\x48\xcd\x76\xcc\xd8\x54\xd7\x37\xc4\x62\x2b\xc8\xc9\xb8\x2f\x51\x77\xf2\x27\x84\x1f\xe1\xf5\x3f\x0f\x8f\x7c\x3a\x80\x03\x7c\xcb\x36\xb4\x17\x6e\xbe\x9a\xe1\x11\xe8\x40\xd9\xaa\xeb\x99\xb6\xf2\x46\xea\xc6\x9a\x85\xa3\xb5\x2a\xff\x52\x0e\x11\x30\xdd\x72\x1b\xa2\x94\xe5\x5b\xcf\x3b\xdb\xba"..., iov_len=107}, {iov_base="\x6f\x90\x8a\xac\xf0\xcd\x92\x31\x69\xf3\x7d\xc7\x3a\x11\xe2\x5b\x26\x19\xc4\xd9\x1a\x04\xf2\x63\xb3\xae\xa7\xf4\xfd\x5f\x01\xe6\x24\x96\xe4\x4b\x83\x1e\xdd\x5d\x30\x8a\x6c\x79\xe7\xc4\x59\x94\x23\x86\x48\x8a\xd9\x3a\xe3\x73\x40\x83\x57\xbd\x80\x46\xdf\x53\x40\x7d\x3d\x76\x32\x45\x45\x98\x58\x72\x63\x6d\x29\xbb\xf1\x30\xa5\xff\x4b\x4a\x57\x85\x84\xc8\x24\x5c\x5a\x12\x7c\xb3\x6c\x64\x5b\xb3\x4c\x74"..., iov_len=176}, {iov_base="\xd3\x25\xd5\x12\x13\x6e\xfa\xc1\x9c\x33\x47\x09\xcf\x13\xf9\xa9\xac\x3d\x2d\x36\x20\x64\x0a\x56\xdf\x58\xa5\x62\xea\x3d\x18\x2f\xfa\x18\xdc\x34\x7b\xdd\x8f\xcb\x18\xbb\x6f\x22\x3b\x6f\xe0\xc6\x40\xbf\x1b\xd8\xa3\x55\xb0\x41\xab\xa3\x3b\x90\x0c\x45\x25\xff\x33\xe2\x0e\x34\x9f\xd2\xba\x0b\x3e\x61\x10\xfe\x0e\x4e\x57\x8b\x0b\x20\x65\xd2\x91\x95\x3e\x5c\x09\x2a\x9f\x20\x6e\x04\xe8\xe8\x2b\x1a\xc7\x1b"..., iov_len=574}], 5 [pid 307] ioctl(4, LOOP_CLR_FD [pid 303] <... futex resumed>) = 0 [pid 309] <... writev resumed>) = 1099 [pid 307] <... ioctl resumed>) = 0 [pid 303] futex(0x7f1505e5978c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] futex(0x7f1505e5978c, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] close(4 [pid 303] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 309] <... futex resumed>) = 0 [pid 307] <... close resumed>) = 0 [pid 303] exit_group(0 [pid 307] futex(0x7f1505e5978c, FUTEX_WAKE_PRIVATE, 1000000 [pid 303] <... exit_group resumed>) = ? [pid 309] +++ exited with 0 +++ [pid 307] <... futex resumed>) = 1 [pid 299] <... futex resumed>) = 0 [pid 296] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 307] futex(0x7f1505e59788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 299] futex(0x7f1505e59788, FUTEX_WAKE_PRIVATE, 1000000 [pid 296] futex(0x7f1505e59788, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 301] <... futex resumed>) = 0 [pid 299] <... futex resumed>) = 0 [pid 296] <... futex resumed>) = 1 [pid 307] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 301] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 299] futex(0x7f1505e5978c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 296] futex(0x7f1505e5978c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] <... open resumed>) = 6 [pid 301] futex(0x7f1505e5978c, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 327 attached [ 21.162899][ T302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 21.172822][ T302] RIP: 0010:ext4_mb_load_buddy_gfp+0xf5d/0x1020 [ 21.178869][ T302] Code: ff e8 77 3b c8 ff e9 f0 f2 ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 52 f3 ff ff e8 7d 3b c8 ff e9 48 f3 ff ff e8 73 2d 8b ff <0f> 0b e9 62 00 00 00 e8 67 2d 8b ff e9 ef fb ff ff e9 65 00 00 00 [ 21.198315][ T302] RSP: 0018:ffffc90000c97710 EFLAGS: 00010293 [ 21.204199][ T302] RAX: ffffffff81df45ad RBX: 00000000ffff821c RCX: ffff888107b83b40 [ 21.212098][ T302] RDX: 0000000000000000 RSI: 00000000ffff821c RDI: 0000000000000001 [ 21.219913][ T302] RBP: ffffc90000c97790 R08: ffffffff81df373c R09: ffffed10239285bb [ 21.227718][ T302] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 21.235554][ T302] R13: ffff88811ef61000 R14: 1ffff11023dece79 R15: ffff88811ef673c8 [ 21.243343][ T302] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 21.252105][ T302] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 21.258530][ T302] CR2: 00007f14fd9df718 CR3: 000000011ef47000 CR4: 00000000003506a0 [ 21.266343][ T302] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 21.274150][ T302] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 21.281959][ T302] Call Trace: [ 21.285101][ T302] ? _raw_spin_trylock_bh+0x190/0x190 [ 21.290302][ T302] ext4_discard_preallocations+0x79c/0xef0 [ 21.295966][ T302] ? mb_test_and_clear_bits+0x240/0x240 [ 21.301324][ T302] ext4_release_file+0x16e/0x310 [ 21.306094][ T302] ? ext4_file_open+0x660/0x660 [ 21.310869][ T302] __fput+0x309/0x760 [ 21.314689][ T302] ____fput+0x15/0x20 [ 21.318511][ T302] task_work_run+0x129/0x190 [ 21.322938][ T302] do_exit+0xc83/0x2a50 [ 21.326938][ T302] ? put_task_struct+0x80/0x80 [ 21.331525][ T302] ? update_curr+0x360/0x6c0 [ 21.335984][ T302] ? __kasan_check_write+0x14/0x20 [ 21.340908][ T302] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 21.345851][ T302] do_group_exit+0x141/0x310 [ 21.350277][ T302] get_signal+0x10a0/0x1410 [ 21.354613][ T302] ? _raw_spin_unlock_irq+0x4e/0x70 [ 21.359648][ T302] arch_do_signal_or_restart+0xbd/0x17c0 [ 21.365118][ T302] ? _raw_spin_lock_irqsave+0x210/0x210 [ 21.370498][ T302] ? _raw_spin_unlock_irq+0x4e/0x70 [ 21.375532][ T302] ? __kasan_check_write+0x14/0x20 [ 21.380479][ T302] ? ptrace_stop+0x6f4/0xa30 [ 21.384936][ T302] ? __do_sys_rt_sigreturn+0x1e0/0x1e0 [ 21.390199][ T302] ? _raw_spin_unlock_irq+0x4e/0x70 [ 21.395230][ T302] ? ptrace_notify+0x24c/0x350 [ 21.399835][ T302] ? fpu__clear_all+0x20/0x20 [ 21.404345][ T302] exit_to_user_mode_loop+0x9b/0xd0 [ 21.409385][ T302] syscall_exit_to_user_mode+0xbc/0x1d0 [ 21.414762][ T302] do_syscall_64+0x40/0x70 [ 21.419016][ T302] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 21.424741][ T302] RIP: 0033:0x7f1505ddc3a9 [ 21.428994][ T302] Code: Unable to access opcode bytes at RIP 0x7f1505ddc37f. [ 21.436200][ T302] RSP: 002b:00007f1505d802f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 21.444450][ T302] RAX: fffffffffffffe00 RBX: 00007f1505e59780 RCX: 00007f1505ddc3a9 [ 21.452253][ T302] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1505e59788 [pid 328] +++ exited with 0 +++ [pid 326] <... write resumed>) = 524288 [pid 301] <... futex resumed>) = 1 [pid 296] <... futex resumed>) = 0 [pid 294] +++ exited with 0 +++ [pid 307] <... open resumed>) = 4 [pid 299] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 299] futex(0x7f1505e5979c, FUTEX_WAKE_PRIVATE, 1000000 [pid 327] set_robust_list(0x7f14fd9df9e0, 24 [pid 326] munmap(0x7f14fd960000, 524288 [pid 307] futex(0x7f1505e5978c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] futex(0x7f1505e59788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 299] <... futex resumed>) = 0 [pid 296] futex(0x7f1505e59788, FUTEX_WAKE_PRIVATE, 1000000 [pid 287] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=294, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 299] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f14fd9bf000 [pid 299] mprotect(0x7f14fd9c0000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 299] clone(child_stack=0x7f14fd9df3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[331], tls=0x7f14fd9df700, child_tidptr=0x7f14fd9df9d0) = 331 [pid 299] futex(0x7f1505e59798, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 299] futex(0x7f1505e5979c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 331 attached [pid 331] set_robust_list(0x7f14fd9df9e0, 24) = 0 [pid 331] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5 [pid 331] futex(0x7f1505e5979c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... futex resumed>) = 0 [pid 299] futex(0x7f1505e59788, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 299] futex(0x7f1505e5978c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 331] <... futex resumed>) = 1 [pid 331] futex(0x7f1505e59798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 327] <... set_robust_list resumed>) = 0 [pid 326] <... munmap resumed>) = 0 [pid 307] <... futex resumed>) = 1 [pid 301] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 327] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 296] <... futex resumed>) = 0 [pid 287] restart_syscall(<... resuming interrupted clone ...> [pid 299] <... futex resumed>) = 0 [pid 327] <... mount resumed>) = 0 [pid 326] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 307] ftruncate(5, 33587199 [pid 301] writev(6, [{iov_base="\x46\xbd\x26\x2b\x9e\x1b\xd9\xd3\x26\x37\x9b\x13\x50\x4d\xd6\xfd\xac\xc6\xcd\x5c\x17\x5a\xf2\xf8\x3d\x3a\x25\xb3\x2e\xa9\x45\xdb\x18\x66\x51\x15\x58\xa3\x92\x3f\xd7\xe7\x7e\xa6\x78\x86\xda\x01\x84\x34\x97\x0f\x86\x4b\x4c\x1a\x9c\x55\xcc\x54\xda\xf1\x12\x18\xab\x55\x1b\xe9\xde\xac\x81\xf1\x65\x69\xe1\xaa\x70\x43\x8e\xc3\x22\xed\x93\xf4\xc0\x4b\xa6\xe8\xb6\xe2\x84\x79\x03\xf8\x58\x76\xe9\x86\x0c\x5f"..., iov_len=110}, {iov_base="\xc1\x3f\x4e\x2a\xf2\x9b\xb0\x30\x8e\x36\x30\x3a\x7b\x03\x07\xff\x53\x78\x57\xa1\x6d\xd7\x4e\x47\xe6\x96\xf9\xc7\xae\xb7\x27\x65\xad\xba\xd6\x1d\x04\xf9\x3e\x4a\x5e\xb4\x13\x71\x31\x71\xdf\xd3\x73\x1b\x74\xf0\xc9\x3a\xd2\x70\x2a\x1c\x9d\x49\x28\x98\x77\x69\xf2\x25\xe4\xdc\x5d\xd8\xe8\xae\x3c\x31\xc0\x8d\x5d\x1e\x0b\x49\x27\xb0\x26\x15\x35\x2b\x6b\x55\x7b\x48\x9e\x35\x2d\x07\x87\x94\x37\x47\x8d\xc8"..., iov_len=132}, {iov_base="\x34\xee\x3a\x2c\x11\x7e\x44\x32\x79\xe6\x7b\xfc\xba\x85\xae\xb6\xdb\x8c\x5b\x21\x8f\xcc\x1d\xca\xc5\x59\xe0\x50\x48\xcd\x76\xcc\xd8\x54\xd7\x37\xc4\x62\x2b\xc8\xc9\xb8\x2f\x51\x77\xf2\x27\x84\x1f\xe1\xf5\x3f\x0f\x8f\x7c\x3a\x80\x03\x7c\xcb\x36\xb4\x17\x6e\xbe\x9a\xe1\x11\xe8\x40\xd9\xaa\xeb\x99\xb6\xf2\x46\xea\xc6\x9a\x85\xa3\xb5\x2a\xff\x52\x0e\x11\x30\xdd\x72\x1b\xa2\x94\xe5\x5b\xcf\x3b\xdb\xba"..., iov_len=107}, {iov_base="\x6f\x90\x8a\xac\xf0\xcd\x92\x31\x69\xf3\x7d\xc7\x3a\x11\xe2\x5b\x26\x19\xc4\xd9\x1a\x04\xf2\x63\xb3\xae\xa7\xf4\xfd\x5f\x01\xe6\x24\x96\xe4\x4b\x83\x1e\xdd\x5d\x30\x8a\x6c\x79\xe7\xc4\x59\x94\x23\x86\x48\x8a\xd9\x3a\xe3\x73\x40\x83\x57\xbd\x80\x46\xdf\x53\x40\x7d\x3d\x76\x32\x45\x45\x98\x58\x72\x63\x6d\x29\xbb\xf1\x30\xa5\xff\x4b\x4a\x57\x85\x84\xc8\x24\x5c\x5a\x12\x7c\xb3\x6c\x64\x5b\xb3\x4c\x74"..., iov_len=176}, {iov_base="\xd3\x25\xd5\x12\x13\x6e\xfa\xc1\x9c\x33\x47\x09\xcf\x13\xf9\xa9\xac\x3d\x2d\x36\x20\x64\x0a\x56\xdf\x58\xa5\x62\xea\x3d\x18\x2f\xfa\x18\xdc\x34\x7b\xdd\x8f\xcb\x18\xbb\x6f\x22\x3b\x6f\xe0\xc6\x40\xbf\x1b\xd8\xa3\x55\xb0\x41\xab\xa3\x3b\x90\x0c\x45\x25\xff\x33\xe2\x0e\x34\x9f\xd2\xba\x0b\x3e\x61\x10\xfe\x0e\x4e\x57\x8b\x0b\x20\x65\xd2\x91\x95\x3e\x5c\x09\x2a\x9f\x20\x6e\x04\xe8\xe8\x2b\x1a\xc7\x1b"..., iov_len=574}], 5 [pid 299] futex(0x7f1505e5978c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=45000000} [pid 296] futex(0x7f1505e5978c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 287] <... restart_syscall resumed>) = 0 [pid 329] +++ exited with 0 +++ [pid 303] +++ exited with 0 +++ [pid 291] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=303, si_uid=0, si_status=0, si_utime=0, si_stime=35} --- [pid 291] restart_syscall(<... resuming interrupted clone ...> [pid 327] futex(0x7f1505e5979c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 291] <... restart_syscall resumed>) = 0 [pid 327] futex(0x7f1505e59798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 291] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 291] ioctl(3, LOOP_CLR_FD) = 0 [pid 291] close(3) = 0 [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555557765d0) = 332 [ 21.460064][ T302] RBP: 00007f1505e26b00 R08: 0000000000000000 R09: 0000000000000000 [ 21.467873][ T302] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1505e268c0 [ 21.475693][ T302] R13: aa0d2915badb3bcf R14: 973f497c5f0c86e9 R15: 00007f1505e59788 [ 21.483496][ T302] Modules linked in: [ 21.488519][ T302] ---[ end trace e6b09af2e41b7795 ]--- [ 21.494831][ T302] RIP: 0010:ext4_mb_load_buddy_gfp+0xf5d/0x1020 ./strace-static-x86_64: Process 332 attached [pid 332] set_robust_list(0x5555557765e0, 24) = 0 [pid 326] <... openat resumed>) = 4 [pid 307] <... ftruncate resumed>) = 0 [pid 326] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 307] futex(0x7f1505e5978c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... writev resumed>) = 1099 [pid 332] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 332] setpgid(0, 0) = 0 [pid 332] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 332] write(3, "1000", 4) = 4 [pid 332] close(3) = 0 [pid 326] ioctl(4, LOOP_CLR_FD [pid 307] <... futex resumed>) = 1 [pid 301] futex(0x7f1505e5978c, FUTEX_WAKE_PRIVATE, 1000000 [pid 299] <... futex resumed>) = 0 [pid 287] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 326] <... ioctl resumed>) = 0 [pid 307] futex(0x7f1505e59788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] <... futex resumed>) = 1 [pid 299] futex(0x7f1505e59788, FUTEX_WAKE_PRIVATE, 1000000 [pid 287] <... openat resumed>) = 3 [pid 307] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 301] futex(0x7f1505e59788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 299] <... futex resumed>) = 0 [pid 287] ioctl(3, LOOP_CLR_FD [pid 307] sendfile(4, 5, NULL, 281474978811909 [pid 299] futex(0x7f1505e5978c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 287] <... ioctl resumed>) = 0 [pid 326] ioctl(4, LOOP_SET_FD, 3 [pid 296] <... futex resumed>) = 0 [pid 287] close(3 [pid 326] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 287] <... close resumed>) = 0 [pid 326] close(4 [pid 287] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 326] <... close resumed>) = 0 [pid 296] exit_group(0 [pid 326] close(3 [pid 287] <... clone resumed>, child_tidptr=0x5555557765d0) = 333 [pid 326] <... close resumed>) = 0 [pid 326] futex(0x7f1505e5978c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 324] <... futex resumed>) = 0 [pid 326] futex(0x7f1505e59788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 324] futex(0x7f1505e59788, FUTEX_WAKE_PRIVATE, 1000000 [pid 326] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 324] <... futex resumed>) = 0 [pid 332] futex(0x7f1505e5978c, FUTEX_WAKE_PRIVATE, 1000000 [pid 326] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 324] futex(0x7f1505e5978c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 333 attached [pid 332] <... futex resumed>) = 0 [pid 327] <... futex resumed>) = ? [pid 326] <... open resumed>) = 3 [pid 301] <... futex resumed>) = ? [pid 296] <... exit_group resumed>) = ? [pid 332] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 327] +++ exited with 0 +++ [pid 326] futex(0x7f1505e5978c, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] +++ exited with 0 +++ [pid 332] <... mmap resumed>) = 0x7f1505d60000 [pid 326] <... futex resumed>) = 1 [pid 324] <... futex resumed>) = 0 [pid 332] mprotect(0x7f1505d61000, 131072, PROT_READ|PROT_WRITE [pid 326] futex(0x7f1505e59788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 324] futex(0x7f1505e59788, FUTEX_WAKE_PRIVATE, 1000000 [pid 332] <... mprotect resumed>) = 0 [pid 326] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 324] <... futex resumed>) = 0 [pid 332] clone(child_stack=0x7f1505d803f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 326] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 324] futex(0x7f1505e5978c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 326] <... open resumed>) = 4 [ 21.501933][ T302] Code: ff e8 77 3b c8 ff e9 f0 f2 ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 52 f3 ff ff e8 7d 3b c8 ff e9 48 f3 ff ff e8 73 2d 8b ff <0f> 0b e9 62 00 00 00 e8 67 2d 8b ff e9 ef fb ff ff e9 65 00 00 00 [ 21.522442][ T302] RSP: 0018:ffffc90000c97710 EFLAGS: 00010293 [ 21.528354][ T302] RAX: ffffffff81df45ad RBX: 00000000ffff821c RCX: ffff888107b83b40 [ 21.536194][ T302] RDX: 0000000000000000 RSI: 00000000ffff821c RDI: 0000000000000001 [ 21.544308][ T302] RBP: ffffc90000c97790 R08: ffffffff81df373c R09: ffffed10239285bb [ 21.552285][ T302] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [pid 332] <... clone resumed>, parent_tid=[334], tls=0x7f1505d80700, child_tidptr=0x7f1505d809d0) = 334 [pid 326] futex(0x7f1505e5978c, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] set_robust_list(0x5555557765e0, 24 [pid 332] futex(0x7f1505e59788, FUTEX_WAKE_PRIVATE, 1000000 [pid 326] <... futex resumed>) = 1 [pid 324] <... futex resumed>) = 0 [pid 332] <... futex resumed>) = 0 [pid 326] futex(0x7f1505e59788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 324] futex(0x7f1505e59788, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] <... set_robust_list resumed>) = 0 [pid 332] futex(0x7f1505e5978c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 326] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 324] <... futex resumed>) = 0 [pid 296] +++ exited with 0 +++ [pid 326] ftruncate(4, 33587199 [pid 324] futex(0x7f1505e5978c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 289] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=296, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 326] <... ftruncate resumed>) = 0 [pid 326] futex(0x7f1505e5978c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 324] <... futex resumed>) = 0 [pid 289] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 333] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 326] futex(0x7f1505e59788, FUTEX_WAIT_PRIVATE, 0, NULL [pid 324] futex(0x7f1505e59788, FUTEX_WAKE_PRIVATE, 1000000 [pid 289] <... openat resumed>) = 3 [pid 333] <... prctl resumed>) = 0 [pid 326] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 324] <... futex resumed>) = 0 [pid 289] ioctl(3, LOOP_CLR_FD [pid 326] sendfile(3, 4, NULL, 281474978811909 [pid 324] futex(0x7f1505e5978c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 289] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 334 attached [pid 333] setpgid(0, 0 [pid 289] close(3 [pid 334] set_robust_list(0x7f1505d809e0, 24 [pid 333] <... setpgid resumed>) = 0 [pid 289] <... close resumed>) = 0 [pid 334] <... set_robust_list resumed>) = 0 [pid 333] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 334] memfd_create("syzkaller", 0 [pid 333] <... openat resumed>) = 3 [pid 334] <... memfd_create resumed>) = 3 [pid 333] write(3, "1000", 4 [pid 299] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 289] <... clone resumed>, child_tidptr=0x5555557765d0) = 335 [pid 334] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 333] <... write resumed>) = 4 [pid 299] futex(0x7f1505e59798, FUTEX_WAKE_PRIVATE, 1000000 [pid 334] <... mmap resumed>) = 0x7f14fd960000 [pid 333] close(3 [pid 331] <... futex resumed>) = 0 [pid 299] <... futex resumed>) = 1 [pid 333] <... close resumed>) = 0 [pid 331] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 299] futex(0x7f1505e5979c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 333] futex(0x7f1505e5978c, FUTEX_WAKE_PRIVATE, 1000000 [pid 331] <... mount resumed>) = 0 [pid 333] <... futex resumed>) = 0 [pid 331] futex(0x7f1505e5979c, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 331] <... futex resumed>) = 1 [pid 299] <... futex resumed>) = 0 [pid 333] <... mmap resumed>) = 0x7f1505d60000 [pid 331] futex(0x7f1505e59798, FUTEX_WAIT_PRIVATE, 0, NULL [pid 299] futex(0x7f1505e59798, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 335 attached [ 21.560241][ T302] R13: ffff88811ef61000 R14: 1ffff11023dece79 R15: ffff88811ef673c8 [ 21.569283][ T302] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 21.578615][ T302] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 21.585294][ T302] CR2: 00007f1505d91ab0 CR3: 00000001049d6000 CR4: 00000000003506b0 [ 21.593373][ T302] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 21.601291][ T302] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 21.609085][ T302] Kernel panic - not syncing: Fatal exception [ 21.615149][ T302] Kernel Offset: disabled [ 21.619811][ T302] Rebooting in 86400 seconds..