./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor545534377 <...> Warning: Permanently added '10.128.1.178' (ED25519) to the list of known hosts. execve("./syz-executor545534377", ["./syz-executor545534377"], 0x7ffcfce64ec0 /* 10 vars */) = 0 brk(NULL) = 0x555562590000 brk(0x555562590d00) = 0x555562590d00 arch_prctl(ARCH_SET_FS, 0x555562590380) = 0 set_tid_address(0x555562590650) = 288 set_robust_list(0x555562590660, 24) = 0 rseq(0x555562590ca0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor545534377", 4096) = 27 getrandom("\xdf\xc6\x88\xff\xf2\x7b\x21\x0f", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555562590d00 brk(0x5555625b1d00) = 0x5555625b1d00 brk(0x5555625b2000) = 0x5555625b2000 mprotect(0x7f543521e000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555562590650) = 289 ./strace-static-x86_64: Process 289 attached [pid 288] openat(AT_FDCWD, "/sys/kernel/debug/x86/nmi_longest_ns", O_WRONLY|O_CLOEXEC [pid 289] set_robust_list(0x555562590660, 24) = 0 [pid 288] <... openat resumed>) = 3 [pid 288] write(3, "10000000000", 11) = 11 [pid 288] close(3) = 0 [pid 288] openat(AT_FDCWD, "/proc/sys/kernel/hung_task_check_interval_secs", O_WRONLY|O_CLOEXEC) = 3 [pid 288] write(3, "20", 2) = 2 [pid 288] close(3) = 0 [pid 288] openat(AT_FDCWD, "/proc/sys/net/core/bpf_jit_kallsyms", O_WRONLY|O_CLOEXEC) = 3 [pid 288] write(3, "1", 1) = 1 [pid 288] close(3) = 0 [pid 288] openat(AT_FDCWD, "/proc/sys/net/core/bpf_jit_harden", O_WRONLY|O_CLOEXEC) = 3 [pid 288] write(3, "0", 1) = 1 [pid 288] close(3) = 0 [pid 288] openat(AT_FDCWD, "/proc/sys/kernel/kptr_restrict", O_WRONLY|O_CLOEXEC) = 3 [pid 288] write(3, "0", 1) = 1 [pid 288] close(3) = 0 [pid 288] openat(AT_FDCWD, "/proc/sys/kernel/softlockup_all_cpu_backtrace", O_WRONLY|O_CLOEXEC) = 3 [pid 288] write(3, "1", 1) = 1 [pid 288] close(3) = 0 [pid 288] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3 [pid 288] write(3, "100", 3) = 3 [pid 288] close(3) = 0 [pid 288] openat(AT_FDCWD, "/proc/sys/vm/oom_dump_tasks", O_WRONLY|O_CLOEXEC) = 3 [pid 288] write(3, "0", 1) = 1 [pid 288] close(3) = 0 [pid 288] openat(AT_FDCWD, "/proc/sys/debug/exception-trace", O_WRONLY|O_CLOEXEC) = 3 [pid 288] write(3, "0", 1) = 1 [pid 288] close(3) = 0 [pid 288] openat(AT_FDCWD, "/proc/sys/kernel/printk", O_WRONLY|O_CLOEXEC) = 3 [pid 288] write(3, "7 4 1 3", 7) = 7 [pid 288] close(3) = 0 [pid 288] openat(AT_FDCWD, "/proc/sys/kernel/keys/gc_delay", O_WRONLY|O_CLOEXEC) = 3 [pid 288] write(3, "1", 1) = 1 [pid 288] close(3) = 0 [pid 288] openat(AT_FDCWD, "/proc/sys/vm/oom_kill_allocating_task", O_WRONLY|O_CLOEXEC) = 3 [pid 288] write(3, "1", 1) = 1 [pid 288] close(3) = 0 [pid 288] openat(AT_FDCWD, "/proc/sys/kernel/ctrl-alt-del", O_WRONLY|O_CLOEXEC) = 3 [pid 288] write(3, "0", 1) = 1 [pid 288] close(3) = 0 [pid 288] openat(AT_FDCWD, "/proc/sys/kernel/cad_pid", O_WRONLY|O_CLOEXEC) = 3 [pid 288] write(3, "289", 3) = 3 [pid 288] close(3) = 0 [pid 288] kill(289, SIGKILL) = 0 [pid 289] +++ killed by SIGKILL +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=289, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555562590650) = 290 ./strace-static-x86_64: Process 290 attached [pid 288] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] set_robust_list(0x555562590660, 24) = 0 [pid 290] getrandom("\x46\x6a\xae\xe9\x40\xb9\x60\xc6", 8, GRND_NONBLOCK) = 8 [pid 290] mkdir("./syzkaller.6kW0wd", 0700 [pid 288] <... clone resumed>, child_tidptr=0x555562590650) = 291 ./strace-static-x86_64: Process 291 attached [pid 288] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555562590650) = 292 [pid 290] <... mkdir resumed>) = 0 [pid 288] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] chmod("./syzkaller.6kW0wd", 0777) = 0 [pid 290] chdir("./syzkaller.6kW0wd") = 0 [pid 290] unshare(CLONE_NEWPID [pid 288] <... clone resumed>, child_tidptr=0x555562590650) = 293 [pid 288] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 290] <... unshare resumed>) = 0 [pid 290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 288] <... clone resumed>, child_tidptr=0x555562590650) = 294 [pid 291] set_robust_list(0x555562590660, 24 [pid 290] <... clone resumed>, child_tidptr=0x555562590650) = 295 ./strace-static-x86_64: Process 294 attached ./strace-static-x86_64: Process 292 attached [pid 291] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 293 attached [pid 293] set_robust_list(0x555562590660, 24) = 0 [pid 294] set_robust_list(0x555562590660, 24 [pid 293] mkdir("./syzkaller.zVZAl5", 0700 [pid 291] mkdir("./syzkaller.5KByjr", 0700 [pid 292] set_robust_list(0x555562590660, 24 [pid 293] <... mkdir resumed>) = 0 [pid 293] chmod("./syzkaller.zVZAl5", 0777) = 0 [pid 293] chdir("./syzkaller.zVZAl5") = 0 [pid 293] unshare(CLONE_NEWPID) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 291] <... mkdir resumed>) = 0 [pid 294] <... set_robust_list resumed>) = 0 [pid 292] <... set_robust_list resumed>) = 0 [pid 291] chmod("./syzkaller.5KByjr", 0777./strace-static-x86_64: Process 295 attached [pid 295] set_robust_list(0x555562590660, 24) = 0 [pid 291] <... chmod resumed>) = 0 [pid 293] <... clone resumed>, child_tidptr=0x555562590650) = 296 [pid 291] chdir("./syzkaller.5KByjr" [pid 294] mkdir("./syzkaller.YBt479", 0700 [pid 291] <... chdir resumed>) = 0 [pid 295] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 295] getppid() = 0 [pid 295] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 291] unshare(CLONE_NEWPID [pid 295] <... prlimit64 resumed>NULL) = 0 [pid 295] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 295] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 295] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 295] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 291] <... unshare resumed>) = 0 [pid 295] <... prlimit64 resumed>NULL) = 0 [pid 295] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 294] <... mkdir resumed>) = 0 [pid 295] unshare(CLONE_NEWNS [pid 291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 294] chmod("./syzkaller.YBt479", 0777 [pid 292] mkdir("./syzkaller.ruuBYD", 0700 [pid 295] <... unshare resumed>) = 0 [pid 295] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 291] <... clone resumed>, child_tidptr=0x555562590650) = 297 [ 23.849467][ T30] audit: type=1400 audit(1756397402.655:64): avc: denied { execmem } for pid=288 comm="syz-executor545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [pid 294] <... chmod resumed>) = 0 ./strace-static-x86_64: Process 297 attached ./strace-static-x86_64: Process 296 attached [pid 295] <... mount resumed>) = 0 [pid 294] chdir("./syzkaller.YBt479" [pid 292] <... mkdir resumed>) = 0 [pid 294] <... chdir resumed>) = 0 [pid 292] chmod("./syzkaller.ruuBYD", 0777 [pid 297] set_robust_list(0x555562590660, 24 [pid 296] set_robust_list(0x555562590660, 24 [pid 295] unshare(CLONE_NEWIPC [pid 294] unshare(CLONE_NEWPID) = 0 [pid 297] <... set_robust_list resumed>) = 0 [pid 296] <... set_robust_list resumed>) = 0 [pid 295] <... unshare resumed>) = -1 EINVAL (Invalid argument) [pid 292] <... chmod resumed>) = 0 [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 292] chdir("./syzkaller.ruuBYD" [pid 295] unshare(CLONE_NEWCGROUP [pid 294] <... clone resumed>, child_tidptr=0x555562590650) = 298 ./strace-static-x86_64: Process 298 attached [pid 298] set_robust_list(0x555562590660, 24) = 0 [pid 292] <... chdir resumed>) = 0 [pid 292] unshare(CLONE_NEWPID [pid 297] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 295] <... unshare resumed>) = 0 [pid 292] <... unshare resumed>) = 0 [pid 298] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 298] getppid( [pid 297] <... prctl resumed>) = 0 [pid 296] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 295] unshare(CLONE_NEWUTS [pid 292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 295] <... unshare resumed>) = 0 [pid 298] <... getppid resumed>) = 0 [pid 298] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 298] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 298] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 298] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 298] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 298] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 298] unshare(CLONE_NEWNS [pid 292] <... clone resumed>, child_tidptr=0x555562590650) = 299 [pid 295] unshare(CLONE_SYSVSEM [pid 297] getppid( [pid 296] <... prctl resumed>) = 0 [pid 297] <... getppid resumed>) = 0 [pid 296] getppid( [pid 295] <... unshare resumed>) = 0 [pid 295] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 297] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 298] <... unshare resumed>) = 0 [pid 298] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 297] <... prlimit64 resumed>NULL) = 0 [pid 296] <... getppid resumed>) = 0 [pid 295] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 298] unshare(CLONE_NEWIPC) = -1 EINVAL (Invalid argument) [pid 298] unshare(CLONE_NEWCGROUP) = 0 [pid 298] unshare(CLONE_NEWUTS) = 0 [pid 297] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 296] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 295] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 297] <... prlimit64 resumed>NULL) = 0 [pid 298] unshare(CLONE_SYSVSEM) = 0 [pid 298] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 297] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 296] <... prlimit64 resumed>NULL) = 0 [pid 295] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 298] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 298] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 297] <... prlimit64 resumed>NULL) = 0 [pid 296] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 295] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 297] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 298] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 297] <... prlimit64 resumed>NULL) = 0 [pid 296] <... prlimit64 resumed>NULL) = 0 [pid 295] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 298] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 298] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 297] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 295] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 298] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 298] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 297] <... prlimit64 resumed>NULL) = 0 [pid 296] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 295] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 297] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 295] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 297] <... prlimit64 resumed>NULL) = 0 [pid 295] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 297] unshare(CLONE_NEWNS [pid 298] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 298] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 298] getpid() = 1 [pid 298] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 297] <... unshare resumed>) = 0 [pid 295] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 298] <... capget resumed>{effective=1<) = -1 ENOENT (No such file or directory) [pid 297] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 295] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 298] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 295] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 297] <... mount resumed>) = 0 [pid 295] getpid( [pid 297] unshare(CLONE_NEWIPC [pid 295] <... getpid resumed>) = 1 [pid 297] <... unshare resumed>) = -1 EINVAL (Invalid argument) [pid 295] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 297] unshare(CLONE_NEWCGROUP [pid 295] <... capget resumed>{effective=1<) = 0 [pid 295] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 297] unshare(CLONE_NEWUTS [pid 298] <... capset resumed>) = 0 [pid 295] <... capset resumed>) = 0 [pid 297] <... unshare resumed>) = 0 [pid 296] <... prlimit64 resumed>NULL) = 0 [pid 297] unshare(CLONE_SYSVSEM [pid 295] unshare(CLONE_NEWNET [pid 297] <... unshare resumed>) = 0 [pid 296] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 298] unshare(CLONE_NEWNET [pid 297] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 299 attached [pid 299] set_robust_list(0x555562590660, 24) = 0 [pid 299] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 299] getppid() = 0 [pid 299] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 299] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 299] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 299] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 299] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 299] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 299] unshare(CLONE_NEWNS) = 0 [pid 299] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 297] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 296] <... prlimit64 resumed>NULL) = 0 [pid 297] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 296] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 299] <... mount resumed>) = 0 [pid 297] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 296] <... prlimit64 resumed>NULL) = 0 [pid 297] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 296] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 297] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 299] unshare(CLONE_NEWIPC [pid 297] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 296] <... prlimit64 resumed>NULL) = 0 [pid 297] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 299] <... unshare resumed>) = -1 EINVAL (Invalid argument) [pid 299] unshare(CLONE_NEWCGROUP [pid 297] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 296] unshare(CLONE_NEWNS [pid 297] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 299] <... unshare resumed>) = 0 [pid 297] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 299] unshare(CLONE_NEWUTS) = 0 [pid 299] unshare(CLONE_SYSVSEM) = 0 [pid 296] <... unshare resumed>) = 0 [pid 297] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 296] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 297] getpid( [pid 296] <... mount resumed>) = 0 [pid 297] <... getpid resumed>) = 1 [pid 299] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 297] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 296] unshare(CLONE_NEWIPC [pid 299] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 299] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 299] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 297] <... capget resumed>{effective=1<) = -1 EINVAL (Invalid argument) [pid 299] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 297] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 296] unshare(CLONE_NEWCGROUP [pid 297] <... capset resumed>) = 0 [pid 299] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 297] unshare(CLONE_NEWNET [pid 296] <... unshare resumed>) = 0 [ 23.903566][ T30] audit: type=1400 audit(1756397402.705:65): avc: denied { mounton } for pid=295 comm="syz-executor545" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [pid 299] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 299] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 299] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 299] getpid() = 1 [pid 299] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 296] unshare(CLONE_NEWUTS) = 0 [pid 296] unshare(CLONE_SYSVSEM) = 0 [pid 296] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 296] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 296] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 296] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 296] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 296] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 296] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 296] getpid() = 1 [pid 296] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 298] <... unshare resumed>) = 0 [pid 298] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3 [pid 298] write(3, "0 65535", 7) = 7 [pid 298] close(3) = 0 [pid 298] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3 [pid 298] write(3, "100000", 6 [pid 295] <... unshare resumed>) = 0 [pid 295] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 298] <... write resumed>) = 6 [pid 298] close(3) = 0 [pid 295] <... openat resumed>) = 3 [pid 298] mkdir("./syz-tmp", 0777 [pid 295] write(3, "0 65535", 7) = 7 [pid 295] close(3) = 0 [pid 295] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3 [pid 295] write(3, "100000", 6) = 6 [pid 295] close(3) = 0 [pid 295] mkdir("./syz-tmp", 0777 [pid 298] <... mkdir resumed>) = 0 [pid 298] mount("", "./syz-tmp", "tmpfs", 0, NULL) = 0 [pid 295] <... mkdir resumed>) = 0 [pid 299] <... unshare resumed>) = 0 [pid 298] mkdir("./syz-tmp/newroot", 0777 [pid 297] <... unshare resumed>) = 0 [pid 296] <... unshare resumed>) = 0 [pid 295] mount("", "./syz-tmp", "tmpfs", 0, NULL [pid 298] <... mkdir resumed>) = 0 [pid 295] <... mount resumed>) = 0 [pid 299] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 298] mkdir("./syz-tmp/newroot/dev", 0700 [pid 295] mkdir("./syz-tmp/newroot", 0777 [pid 298] <... mkdir resumed>) = 0 [pid 295] <... mkdir resumed>) = 0 [pid 298] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 295] mkdir("./syz-tmp/newroot/dev", 0700 [pid 299] <... openat resumed>) = 3 [pid 298] <... mount resumed>) = 0 [pid 295] <... mkdir resumed>) = 0 [pid 298] mkdir("./syz-tmp/newroot/proc", 0700 [ 23.991289][ T30] audit: type=1400 audit(1756397402.795:66): avc: denied { mounton } for pid=298 comm="syz-executor545" path="/root/syzkaller.YBt479/syz-tmp" dev="sda1" ino=2029 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 24.016381][ T30] audit: type=1400 audit(1756397402.795:67): avc: denied { mount } for pid=298 comm="syz-executor545" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [pid 295] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 298] <... mkdir resumed>) = 0 [pid 295] <... mount resumed>) = 0 [pid 298] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL [pid 295] mkdir("./syz-tmp/newroot/proc", 0700 [pid 298] <... mount resumed>) = 0 [pid 295] <... mkdir resumed>) = 0 [pid 295] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL [pid 298] mkdir("./syz-tmp/newroot/selinux", 0700 [pid 295] <... mount resumed>) = 0 [pid 298] <... mkdir resumed>) = 0 [pid 295] mkdir("./syz-tmp/newroot/selinux", 0700 [pid 298] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 295] <... mkdir resumed>) = 0 [pid 298] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 295] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 298] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 295] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 298] <... mount resumed>) = 0 [pid 295] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 298] mkdir("./syz-tmp/newroot/sys", 0700 [pid 295] <... mount resumed>) = 0 [pid 298] <... mkdir resumed>) = 0 [pid 295] mkdir("./syz-tmp/newroot/sys", 0700 [pid 298] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 295] <... mkdir resumed>) = 0 [pid 298] <... mount resumed>) = 0 [pid 295] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 298] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 295] <... mount resumed>) = 0 [pid 298] <... mount resumed>) = 0 [pid 295] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 298] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 295] <... mount resumed>) = 0 [pid 298] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 295] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 298] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 295] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 298] <... mount resumed>) = 0 [pid 295] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 298] mkdir("./syz-tmp/newroot/syz-inputs", 0700 [pid 295] <... mount resumed>) = 0 [pid 298] <... mkdir resumed>) = 0 [pid 295] mkdir("./syz-tmp/newroot/syz-inputs", 0700 [pid 298] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 295] <... mkdir resumed>) = 0 [pid 298] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 295] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 298] mkdir("./syz-tmp/pivot", 0777 [pid 295] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 298] <... mkdir resumed>) = 0 [pid 297] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 295] mkdir("./syz-tmp/pivot", 0777 [pid 298] pivot_root("./syz-tmp", "./syz-tmp/pivot" [pid 297] <... openat resumed>) = 3 [pid 295] <... mkdir resumed>) = 0 [pid 298] <... pivot_root resumed>) = 0 [pid 297] write(3, "0 65535", 7 [pid 295] pivot_root("./syz-tmp", "./syz-tmp/pivot" [pid 298] chdir("/" [pid 297] <... write resumed>) = 7 [pid 295] <... pivot_root resumed>) = 0 [pid 298] <... chdir resumed>) = 0 [pid 297] close(3 [pid 295] chdir("/" [pid 298] umount2("./pivot", MNT_DETACH [pid 297] <... close resumed>) = 0 [pid 295] <... chdir resumed>) = 0 [pid 297] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC [pid 295] umount2("./pivot", MNT_DETACH [pid 297] <... openat resumed>) = 3 [pid 297] write(3, "100000", 6) = 6 [pid 297] close(3) = 0 [pid 297] mkdir("./syz-tmp", 0777) = 0 [pid 297] mount("", "./syz-tmp", "tmpfs", 0, NULL) = 0 [pid 297] mkdir("./syz-tmp/newroot", 0777) = 0 [pid 297] mkdir("./syz-tmp/newroot/dev", 0700) = 0 [pid 297] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 297] mkdir("./syz-tmp/newroot/proc", 0700) = 0 [pid 297] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL) = 0 [pid 297] mkdir("./syz-tmp/newroot/selinux", 0700) = 0 [pid 297] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 297] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 297] mkdir("./syz-tmp/newroot/sys", 0700) = 0 [pid 297] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 297] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 296] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 297] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 296] <... openat resumed>) = 3 [pid 297] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 297] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 296] write(3, "0 65535", 7) = 7 [pid 296] close(3) = 0 [pid 296] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3 [pid 297] mkdir("./syz-tmp/newroot/syz-inputs", 0700) = 0 [pid 296] write(3, "100000", 6) = 6 [pid 296] close(3 [pid 297] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 296] <... close resumed>) = 0 [pid 297] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 297] mkdir("./syz-tmp/pivot", 0777 [pid 296] mkdir("./syz-tmp", 0777 [pid 297] <... mkdir resumed>) = 0 [pid 296] <... mkdir resumed>) = 0 [pid 297] pivot_root("./syz-tmp", "./syz-tmp/pivot") = 0 [pid 297] chdir("/") = 0 [pid 297] umount2("./pivot", MNT_DETACH [pid 296] mount("", "./syz-tmp", "tmpfs", 0, NULL) = 0 [pid 296] mkdir("./syz-tmp/newroot", 0777) = 0 [pid 296] mkdir("./syz-tmp/newroot/dev", 0700) = 0 [pid 296] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 296] mkdir("./syz-tmp/newroot/proc", 0700) = 0 [pid 296] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL) = 0 [pid 296] mkdir("./syz-tmp/newroot/selinux", 0700) = 0 [ 24.040316][ T30] audit: type=1400 audit(1756397402.845:68): avc: denied { mounton } for pid=298 comm="syz-executor545" path="/root/syzkaller.YBt479/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 24.067105][ T30] audit: type=1400 audit(1756397402.845:69): avc: denied { mount } for pid=298 comm="syz-executor545" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [pid 296] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 298] <... umount2 resumed>) = 0 [pid 298] chroot("./newroot") = 0 [pid 298] chdir("/") = 0 [pid 298] mkdir("/dev/gadgetfs", 0777) = 0 [pid 298] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL [pid 299] write(3, "0 65535", 7 [pid 297] <... umount2 resumed>) = 0 [pid 296] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 295] <... umount2 resumed>) = 0 [pid 297] chroot("./newroot" [pid 295] chroot("./newroot" [pid 297] <... chroot resumed>) = 0 [pid 295] <... chroot resumed>) = 0 [pid 297] chdir("/" [pid 295] chdir("/" [pid 297] <... chdir resumed>) = 0 [pid 295] <... chdir resumed>) = 0 [pid 297] mkdir("/dev/gadgetfs", 0777 [pid 295] mkdir("/dev/gadgetfs", 0777 [pid 297] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 295] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 297] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL [pid 295] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL [pid 297] <... mount resumed>) = -1 ENODEV (No such device) [pid 295] <... mount resumed>) = -1 ENODEV (No such device) [pid 297] mkdir("/dev/binderfs", 0777 [pid 295] mkdir("/dev/binderfs", 0777 [pid 297] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 295] <... mkdir resumed>) = 0 [pid 297] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 295] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 297] <... mount resumed>) = 0 [pid 295] <... mount resumed>) = 0 [pid 297] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 295] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 297] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 295] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 297] mkdir("./0", 0777 [pid 295] mkdir("./0", 0777 [pid 297] <... mkdir resumed>) = 0 [pid 295] <... mkdir resumed>) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 297] <... clone resumed>, child_tidptr=0x555562590650) = 2 [pid 295] <... clone resumed>, child_tidptr=0x555562590650) = 2 ./strace-static-x86_64: Process 301 attached [pid 301] set_robust_list(0x555562590660, 24) = 0 [pid 301] chdir("./0") = 0 [pid 301] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 301] setpgid(0, 0) = 0 [pid 301] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 301] write(3, "1000", 4executing program ) = 4 [pid 301] close(3) = 0 [pid 301] symlink("/dev/binderfs", "./binderfs") = 0 [pid 301] write(1, "executing program\n", 18) = 18 [pid 301] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 301] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcd61ecdc0) = 0 [pid 301] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 301] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcd61ecdc0) = 0 [pid 301] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 298] <... mount resumed>) = -1 ENODEV (No such device) [pid 298] mkdir("/dev/binderfs", 0777) = -1 EEXIST (File exists) [pid 298] mount("binder", "/dev/binderfs", "binder", 0, NULL) = 0 [pid 298] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 298] mkdir("./0", 0777) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555562590650) = 2 executing program ./strace-static-x86_64: Process 303 attached [pid 303] set_robust_list(0x555562590660, 24) = 0 [pid 303] chdir("./0") = 0 [pid 303] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 303] setpgid(0, 0) = 0 [pid 303] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 303] write(3, "1000", 4) = 4 [pid 303] close(3) = 0 [pid 303] symlink("/dev/binderfs", "./binderfs") = 0 [pid 303] write(1, "executing program\n", 18) = 18 [pid 303] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 303] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcd61ecdc0) = 0 [pid 303] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN [pid 299] <... write resumed>) = 7 [ 24.067655][ T298] request_module fs-gadgetfs succeeded, but still no fs? [ 24.089767][ T30] audit: type=1400 audit(1756397402.845:70): avc: denied { mounton } for pid=298 comm="syz-executor545" path="/root/syzkaller.YBt479/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [pid 296] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 303] <... ioctl resumed>, 0) = 0 [pid 296] <... mount resumed>) = 0 [pid 299] close(3./strace-static-x86_64: Process 300 attached ) = 0 [pid 296] mkdir("./syz-tmp/newroot/sys", 0700 [pid 299] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC [pid 296] <... mkdir resumed>) = 0 [pid 303] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH executing program [pid 299] <... openat resumed>) = 3 [pid 296] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 303] <... ioctl resumed>, 0x7ffcd61ecdc0) = 0 [pid 299] write(3, "100000", 6 [pid 296] <... mount resumed>) = 0 [pid 299] <... write resumed>) = 6 [pid 296] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 299] close(3 [pid 296] <... mount resumed>) = 0 [pid 299] <... close resumed>) = 0 [pid 296] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 299] mkdir("./syz-tmp", 0777 [pid 296] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 299] <... mkdir resumed>) = 0 [pid 296] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 299] mount("", "./syz-tmp", "tmpfs", 0, NULL [pid 296] <... mount resumed>) = 0 [pid 299] <... mount resumed>) = 0 [pid 296] mkdir("./syz-tmp/newroot/syz-inputs", 0700 [pid 299] mkdir("./syz-tmp/newroot", 0777 [pid 296] <... mkdir resumed>) = 0 [pid 299] <... mkdir resumed>) = 0 [pid 296] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 299] mkdir("./syz-tmp/newroot/dev", 0700 [pid 296] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 299] <... mkdir resumed>) = 0 [pid 296] mkdir("./syz-tmp/pivot", 0777 [pid 299] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 296] <... mkdir resumed>) = 0 [pid 299] <... mount resumed>) = 0 [pid 296] pivot_root("./syz-tmp", "./syz-tmp/pivot" [pid 299] mkdir("./syz-tmp/newroot/proc", 0700 [pid 296] <... pivot_root resumed>) = 0 [pid 299] <... mkdir resumed>) = 0 [pid 296] chdir("/" [pid 299] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL [pid 296] <... chdir resumed>) = 0 [pid 299] <... mount resumed>) = 0 [pid 296] umount2("./pivot", MNT_DETACH [pid 299] mkdir("./syz-tmp/newroot/selinux", 0700) = 0 [pid 299] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 299] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 299] mkdir("./syz-tmp/newroot/sys", 0700) = 0 [pid 299] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 299] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 300] set_robust_list(0x555562590660, 24 [pid 299] <... mount resumed>) = 0 [pid 300] <... set_robust_list resumed>) = 0 [pid 299] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 300] chdir("./0" [pid 299] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 300] <... chdir resumed>) = 0 [pid 299] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 300] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 299] <... mount resumed>) = 0 [pid 300] <... prctl resumed>) = 0 [pid 299] mkdir("./syz-tmp/newroot/syz-inputs", 0700 [pid 300] setpgid(0, 0 [pid 299] <... mkdir resumed>) = 0 [pid 300] <... setpgid resumed>) = 0 [pid 299] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 300] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 299] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 300] <... openat resumed>) = 3 [pid 299] mkdir("./syz-tmp/pivot", 0777 [pid 300] write(3, "1000", 4 [pid 299] <... mkdir resumed>) = 0 [pid 300] <... write resumed>) = 4 [pid 299] pivot_root("./syz-tmp", "./syz-tmp/pivot" [pid 300] close(3 [pid 299] <... pivot_root resumed>) = 0 [pid 300] <... close resumed>) = 0 [pid 299] chdir("/" [pid 300] symlink("/dev/binderfs", "./binderfs" [pid 299] <... chdir resumed>) = 0 [pid 300] <... symlink resumed>) = 0 [pid 299] umount2("./pivot", MNT_DETACH [pid 300] write(1, "executing program\n", 18) = 18 [pid 300] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 300] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcd61ecdc0) = 0 [pid 300] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 300] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcd61ecdc0) = 0 [pid 300] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 303] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 296] <... umount2 resumed>) = 0 [pid 296] chroot("./newroot") = 0 [pid 296] chdir("/") = 0 [pid 296] mkdir("/dev/gadgetfs", 0777) = -1 EEXIST (File exists) [pid 296] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL) = -1 ENODEV (No such device) [pid 296] mkdir("/dev/binderfs", 0777) = -1 EEXIST (File exists) [pid 296] mount("binder", "/dev/binderfs", "binder", 0, NULL) = 0 [pid 296] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 296] mkdir("./0", 0777) = 0 [pid 296] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555562590650) = 2 ./strace-static-x86_64: Process 306 attached [pid 306] set_robust_list(0x555562590660, 24) = 0 [pid 306] chdir("./0") = 0 [pid 306] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 306] setpgid(0, 0) = 0 [pid 306] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 306] write(3, "1000", 4) = 4 [pid 306] close(3) = 0 [pid 306] symlink("/dev/binderfs", "./binderfs") = 0 [pid 306] write(1, "executing program\n", 18executing program ) = 18 [pid 306] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 306] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcd61ecdc0) = 0 [pid 306] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 306] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcd61ecdc0) = 0 [ 24.125035][ T30] audit: type=1400 audit(1756397402.845:71): avc: denied { mounton } for pid=298 comm="syz-executor545" path="/root/syzkaller.YBt479/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 24.153995][ T30] audit: type=1400 audit(1756397402.845:72): avc: denied { unmount } for pid=298 comm="syz-executor545" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [pid 306] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 299] <... umount2 resumed>) = 0 [pid 299] chroot("./newroot") = 0 [pid 299] chdir("/") = 0 [pid 299] mkdir("/dev/gadgetfs", 0777) = -1 EEXIST (File exists) [pid 299] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL) = -1 ENODEV (No such device) [pid 299] mkdir("/dev/binderfs", 0777) = -1 EEXIST (File exists) [pid 299] mount("binder", "/dev/binderfs", "binder", 0, NULL) = 0 [pid 299] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 299] mkdir("./0", 0777) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 307 attached [pid 307] set_robust_list(0x555562590660, 24) = 0 [pid 299] <... clone resumed>, child_tidptr=0x555562590650) = 2 [pid 307] chdir("./0") = 0 [pid 307] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 307] setpgid(0, 0) = 0 [pid 307] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 307] write(3, "1000", 4) = 4 [pid 307] close(3) = 0 [pid 307] symlink("/dev/binderfs", "./binderfs") = 0 [pid 307] write(1, "executing program\n", 18executing program ) = 18 [pid 307] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 307] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffcd61ecdc0) = 0 [pid 307] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 307] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcd61ecdc0) = 0 [ 24.173977][ T30] audit: type=1400 audit(1756397402.875:73): avc: denied { mounton } for pid=298 comm="syz-executor545" path="/dev/gadgetfs" dev="devtmpfs" ino=556 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [pid 307] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 301] <... ioctl resumed>, 0x7ffcd61ecdc0) = 0 [pid 301] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcd61ebdb0) = 18 [pid 301] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 303] <... ioctl resumed>, 0x7ffcd61ecdc0) = 0 [ 24.358789][ T20] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 24.388784][ T6] usb 5-1: new high-speed USB device number 2 using dummy_hcd [pid 303] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcd61ebdb0) = 18 [pid 300] <... ioctl resumed>, 0x7ffcd61ecdc0) = 0 [pid 303] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 300] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 306] <... ioctl resumed>, 0x7ffcd61ecdc0) = 0 [pid 300] <... ioctl resumed>, 0x7ffcd61ebdb0) = 18 [pid 306] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [ 24.418756][ T39] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 24.438850][ T60] usb 4-1: new high-speed USB device number 2 using dummy_hcd [pid 300] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 306] <... ioctl resumed>, 0x7ffcd61ebdb0) = 18 [pid 306] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 307] <... ioctl resumed>, 0x7ffcd61ecdc0) = 0 [pid 307] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcd61ebdb0) = 18 [ 24.468784][ T304] usb 3-1: new high-speed USB device number 2 using dummy_hcd [pid 307] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 301] <... ioctl resumed>, 0x7ffcd61ecdc0) = 0 [pid 301] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcd61ebdb0) = 18 [pid 301] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 303] <... ioctl resumed>, 0x7ffcd61ecdc0) = 0 [pid 301] <... ioctl resumed>, 0x7ffcd61ecdc0) = 0 [pid 303] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 301] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 303] <... ioctl resumed>, 0x7ffcd61ebdb0) = 18 [pid 301] <... ioctl resumed>, 0x7ffcd61ebdb0) = 9 [pid 300] <... ioctl resumed>, 0x7ffcd61ecdc0) = 0 [pid 301] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 303] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 300] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 306] <... ioctl resumed>, 0x7ffcd61ecdc0) = 0 [pid 303] <... ioctl resumed>, 0x7ffcd61ecdc0) = 0 [pid 301] <... ioctl resumed>, 0x7ffcd61ecdc0) = 0 [pid 300] <... ioctl resumed>, 0x7ffcd61ebdb0) = 18 [pid 306] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 303] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 301] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 300] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 303] <... ioctl resumed>, 0x7ffcd61ebdb0) = 9 [pid 301] <... ioctl resumed>, 0x7ffcd61ebdb0) = 92 [pid 303] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 301] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 300] <... ioctl resumed>, 0x7ffcd61ecdc0) = 0 [pid 300] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 306] <... ioctl resumed>, 0x7ffcd61ebdb0) = 18 [pid 306] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 307] <... ioctl resumed>, 0x7ffcd61ecdc0) = 0 [pid 307] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcd61ebdb0) = 18 [pid 306] <... ioctl resumed>, 0x7ffcd61ecdc0) = 0 [pid 303] <... ioctl resumed>, 0x7ffcd61ecdc0) = 0 [pid 301] <... ioctl resumed>, 0x7ffcd61ecdc0) = 0 [pid 300] <... ioctl resumed>, 0x7ffcd61ebdb0) = 9 [pid 307] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 306] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 303] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 301] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [ 24.718884][ T20] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 300] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 306] <... ioctl resumed>, 0x7ffcd61ebdb0) = 9 [pid 303] <... ioctl resumed>, 0x7ffcd61ebdb0) = 92 [pid 301] <... ioctl resumed>, 0x7ffcd61ebdb0) = 4 [pid 300] <... ioctl resumed>, 0x7ffcd61ecdc0) = 0 [pid 306] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 301] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 300] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 307] <... ioctl resumed>, 0x7ffcd61ecdc0) = 0 [pid 307] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 303] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 307] <... ioctl resumed>, 0x7ffcd61ebdb0) = 9 [pid 307] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 306] <... ioctl resumed>, 0x7ffcd61ecdc0) = 0 [pid 303] <... ioctl resumed>, 0x7ffcd61ecdc0) = 0 [pid 301] <... ioctl resumed>, 0x7ffcd61ecdc0) = 0 [pid 300] <... ioctl resumed>, 0x7ffcd61ebdb0) = 92 [pid 306] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 301] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 303] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 300] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 307] <... ioctl resumed>, 0x7ffcd61ecdc0) = 0 [pid 307] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 306] <... ioctl resumed>, 0x7ffcd61ebdb0) = 92 [pid 303] <... ioctl resumed>, 0x7ffcd61ebdb0) = 4 [pid 301] <... ioctl resumed>, 0x7ffcd61ebdb0) = 8 [ 24.768917][ T6] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.798951][ T39] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 306] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 303] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 301] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 307] <... ioctl resumed>, 0x7ffcd61ebdb0) = 92 [pid 300] <... ioctl resumed>, 0x7ffcd61ecdc0) = 0 [pid 300] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 307] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 303] <... ioctl resumed>, 0x7ffcd61ecdc0) = 0 [pid 303] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 301] <... ioctl resumed>, 0x7ffcd61ecdc0) = 0 [pid 301] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 306] <... ioctl resumed>, 0x7ffcd61ecdc0) = 0 [pid 300] <... ioctl resumed>, 0x7ffcd61ebdb0) = 4 [pid 306] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 300] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 307] <... ioctl resumed>, 0x7ffcd61ecdc0) = 0 [pid 303] <... ioctl resumed>, 0x7ffcd61ebdb0) = 8 [pid 301] <... ioctl resumed>, 0x7ffcd61ebdb0) = 8 [pid 307] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 303] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 301] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 306] <... ioctl resumed>, 0x7ffcd61ebdb0) = 4 [pid 300] <... ioctl resumed>, 0x7ffcd61ecdc0) = 0 [pid 306] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 300] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 307] <... ioctl resumed>, 0x7ffcd61ebdb0) = 4 [pid 303] <... ioctl resumed>, 0x7ffcd61ecdc0) = 0 [pid 301] <... ioctl resumed>, 0x7ffcd61ecdc0) = 0 [pid 307] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 303] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [ 24.819024][ T60] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.828962][ T304] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 301] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 306] <... ioctl resumed>, 0x7ffcd61ecdc0) = 0 [pid 300] <... ioctl resumed>, 0x7ffcd61ebdb0) = 8 [pid 306] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 300] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 307] <... ioctl resumed>, 0x7ffcd61ecdc0) = 0 [pid 303] <... ioctl resumed>, 0x7ffcd61ebdb0) = 8 [pid 301] <... ioctl resumed>, 0x7ffcd61ebdb0) = 8 [pid 307] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 303] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 301] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 306] <... ioctl resumed>, 0x7ffcd61ebdb0) = 8 [pid 300] <... ioctl resumed>, 0x7ffcd61ecdc0) = 0 [pid 306] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 300] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 307] <... ioctl resumed>, 0x7ffcd61ebdb0) = 8 [pid 307] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 303] <... ioctl resumed>, 0x7ffcd61ecdc0) = 0 [pid 303] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 306] <... ioctl resumed>, 0x7ffcd61ecdc0) = 0 [pid 300] <... ioctl resumed>, 0x7ffcd61ebdb0) = 8 [pid 307] <... ioctl resumed>, 0x7ffcd61ecdc0) = 0 [pid 306] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 300] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [ 24.898949][ T20] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 24.908059][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.916302][ T20] usb 2-1: Product: syz [ 24.920583][ T20] usb 2-1: Manufacturer: syz [ 24.925216][ T20] usb 2-1: SerialNumber: syz [pid 307] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 303] <... ioctl resumed>, 0x7ffcd61ebdb0) = 8 [pid 301] <... ioctl resumed>, 0x7ffcd61ecdc0) = 0 [pid 301] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x8) = 0 [pid 301] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 301] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f543522440c) = 0 [pid 301] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 303] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 307] <... ioctl resumed>, 0x7ffcd61ebdb0) = 8 [pid 307] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 300] <... ioctl resumed>, 0x7ffcd61ecdc0) = 0 [pid 300] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 306] <... ioctl resumed>, 0x7ffcd61ebdb0) = 8 [pid 306] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 301] <... ioctl resumed>, 0x7ffcd61ebdb0) = 0 [pid 307] <... ioctl resumed>, 0x7ffcd61ecdc0) = 0 [pid 307] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 306] <... ioctl resumed>, 0x7ffcd61ecdc0) = 0 [pid 300] <... ioctl resumed>, 0x7ffcd61ebdb0) = 8 [pid 306] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [ 24.948875][ T6] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 24.958086][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.966244][ T6] usb 5-1: Product: syz [ 24.971030][ T6] usb 5-1: Manufacturer: syz [ 24.975656][ T6] usb 5-1: SerialNumber: syz [ 24.988855][ T39] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [pid 300] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 307] <... ioctl resumed>, 0x7ffcd61ebdb0) = 8 [pid 303] <... ioctl resumed>, 0x7ffcd61ecdc0) = 0 [pid 307] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 306] <... ioctl resumed>, 0x7ffcd61ebdb0) = 8 [pid 303] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW [pid 306] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 303] <... ioctl resumed>, 0x8) = 0 [ 24.998680][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.998801][ T304] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 25.007708][ T304] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.016367][ T60] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 25.025559][ T304] usb 3-1: Product: syz [ 25.033822][ T39] usb 1-1: Product: syz [ 25.038693][ T304] usb 3-1: Manufacturer: syz [pid 303] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 303] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f543522440c) = 0 [pid 303] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcd61ebdb0) = 0 [pid 307] <... ioctl resumed>, 0x7ffcd61ecdc0) = 0 [pid 307] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x8) = 0 [pid 307] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 307] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f543522440c) = 0 [pid 307] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcd61ebdb0) = 0 [pid 306] <... ioctl resumed>, 0x7ffcd61ecdc0) = 0 [pid 300] <... ioctl resumed>, 0x7ffcd61ecdc0) = 0 [pid 306] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW [pid 300] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x8) = 0 [pid 300] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 300] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f543522440c) = 0 [pid 300] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 306] <... ioctl resumed>, 0x8) = 0 [pid 306] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 306] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f543522440c) = 0 [pid 306] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcd61ebdb0) = 0 [pid 300] <... ioctl resumed>, 0x7ffcd61ebdb0) = 0 [ 25.042102][ T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.046855][ T304] usb 3-1: SerialNumber: syz [ 25.054635][ T39] usb 1-1: Manufacturer: syz [ 25.064088][ T60] usb 4-1: Product: syz [ 25.068295][ T60] usb 4-1: Manufacturer: syz [ 25.073274][ T39] usb 1-1: SerialNumber: syz [ 25.078253][ T60] usb 4-1: SerialNumber: syz [pid 301] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcd61ecde0) = 0 [pid 301] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 301] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f543522482c) = 10 [pid 301] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f543522483c) = 11 [pid 301] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcd61ebdd0) = 0 [pid 303] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcd61ecde0) = 0 [pid 303] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 303] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f543522482c) = 10 [pid 303] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f543522483c) = 11 [pid 303] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcd61ebdd0) = 0 [pid 307] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcd61ecde0) = 0 [pid 307] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 307] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f543522482c) = 10 [pid 307] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f543522483c) = 11 [pid 307] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcd61ebdd0) = 0 [pid 300] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 306] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 300] <... ioctl resumed>, 0x7ffcd61ecde0) = 0 [pid 306] <... ioctl resumed>, 0x7ffcd61ecde0) = 0 [pid 300] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 306] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 300] <... ioctl resumed>, 0) = 0 [pid 306] <... ioctl resumed>, 0) = 0 [pid 300] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 306] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 300] <... ioctl resumed>, 0x7f543522482c) = 10 [pid 306] <... ioctl resumed>, 0x7f543522482c) = 10 [pid 300] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 306] ioctl(3, USB_RAW_IOCTL_EP_ENABLE [pid 300] <... ioctl resumed>, 0x7f543522483c) = 11 [pid 306] <... ioctl resumed>, 0x7f543522483c) = 11 [pid 300] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 306] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcd61ebdd0) = 0 [pid 300] <... ioctl resumed>, 0x7ffcd61ebdd0) = 0 [pid 301] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcd61ecde0) = 0 [pid 301] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xa) = 0 [pid 301] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 301] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcd61ebdd0) = 0 [pid 303] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcd61ecde0) = 0 [pid 303] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xa) = 0 [pid 303] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 303] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcd61ebdd0) = 0 [pid 307] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcd61ecde0) = 0 [pid 307] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xa) = 0 [pid 307] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 307] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcd61ebdd0) = 0 [pid 306] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 300] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 306] <... ioctl resumed>, 0x7ffcd61ecde0) = 0 [pid 300] <... ioctl resumed>, 0x7ffcd61ecde0) = 0 [pid 306] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 300] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 306] <... ioctl resumed>, 0xa) = 0 [pid 300] <... ioctl resumed>, 0xa) = 0 [pid 306] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 300] ioctl(3, USB_RAW_IOCTL_EP_DISABLE [pid 306] <... ioctl resumed>, 0xb) = 0 [pid 300] <... ioctl resumed>, 0xb) = 0 [pid 306] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 300] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 306] <... ioctl resumed>, 0x7ffcd61ebdd0) = 0 [pid 300] <... ioctl resumed>, 0x7ffcd61ebdd0) = 0 [pid 301] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcd61ecde0) = 0 [pid 301] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcd61ebdd0) = 28 [pid 303] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcd61ecde0) = 0 [pid 303] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcd61ebdd0) = 28 [pid 307] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcd61ecde0) = 0 [pid 307] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 306] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 300] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 306] <... ioctl resumed>, 0x7ffcd61ecde0) = 0 [pid 306] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 300] <... ioctl resumed>, 0x7ffcd61ecde0) = 0 [pid 300] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 307] <... ioctl resumed>, 0x7ffcd61ebdd0) = 28 [pid 306] <... ioctl resumed>, 0x7ffcd61ebdd0) = 28 [pid 300] <... ioctl resumed>, 0x7ffcd61ebdd0) = 28 [pid 301] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcd61ecde0) = 0 [pid 301] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f543522482c) = 10 [pid 301] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f543522483c) = 11 [pid 301] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcd61ebdd0) = 0 [pid 303] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcd61ecde0) = 0 [pid 303] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f543522482c) = 10 [pid 303] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f543522483c) = 11 [pid 303] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcd61ebdd0) = 0 [pid 307] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcd61ecde0) = 0 [pid 307] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f543522482c) = 10 [pid 307] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f543522483c) = 11 [pid 307] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffcd61ebdd0) = 0 [pid 306] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcd61ecde0) = 0 [pid 306] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f543522482c) = 10 [pid 306] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f543522483c) = 11 [pid 306] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 300] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcd61ecde0) = 0 [pid 300] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f543522482c) = 10 [pid 300] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7f543522483c) = 11 [pid 300] ioctl(3, USB_RAW_IOCTL_EP0_READ [pid 306] <... ioctl resumed>, 0x7ffcd61ebdd0) = 0 [pid 300] <... ioctl resumed>, 0x7ffcd61ebdd0) = 0 [pid 301] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcd61ecde0) = 0 [pid 301] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcd61ebdd0) = 26 [ 26.068904][ T20] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 26.075698][ T20] cdc_ncm 2-1:1.0: dwNtbInMaxSize=20 is too small. Using 2048 [ 26.083559][ T20] cdc_ncm 2-1:1.0: setting rx_max = 2048 [pid 303] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcd61ecde0) = 0 [pid 303] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffcd61ebdd0) = 26 [pid 307] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffcd61ecde0) = 0 [pid 307] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 306] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 300] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH [pid 306] <... ioctl resumed>, 0x7ffcd61ecde0) = 0 [pid 300] <... ioctl resumed>, 0x7ffcd61ecde0) = 0 [pid 306] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 300] ioctl(3, USB_RAW_IOCTL_EP0_WRITE [pid 307] <... ioctl resumed>, 0x7ffcd61ebdd0) = 26 [pid 306] <... ioctl resumed>, 0x7ffcd61ebdd0) = 26 [pid 300] <... ioctl resumed>, 0x7ffcd61ebdd0) = 26 [ 26.168890][ T6] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 26.175472][ T6] cdc_ncm 5-1:1.0: dwNtbInMaxSize=20 is too small. Using 2048 [ 26.183041][ T6] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 26.188857][ T39] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 26.188875][ T304] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 26.195814][ T60] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 26.202455][ T304] cdc_ncm 3-1:1.0: dwNtbInMaxSize=20 is too small. Using 2048 [pid 301] openat(AT_FDCWD, "/dev/uhid", O_RDWR|O_DSYNC|0x4) = 4 [pid 301] write(4, "\x00\x00\x00\x00\x73\x79\x7a\x31\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 288) = 288 [ 26.210731][ T39] cdc_ncm 1-1:1.0: dwNtbInMaxSize=20 is too small. Using 2048 [ 26.216741][ T304] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 26.224632][ T60] cdc_ncm 4-1:1.0: dwNtbInMaxSize=20 is too small. Using 2048 [ 26.237965][ T39] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 26.243713][ T60] cdc_ncm 4-1:1.0: setting rx_max = 2048 [pid 301] close(3) = 0 [ 26.273092][ T310] hid-generic 0008:0003:0005.0001: unknown main item tag 0x2 [ 26.280954][ T310] hid-generic 0008:0003:0005.0001: unknown main item tag 0x0 [ 26.288475][ T310] hid-generic 0008:0003:0005.0001: unknown main item tag 0x0 [ 26.291221][ T20] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 26.296519][ T310] hid-generic 0008:0003:0005.0001: unknown main item tag 0x0 [ 26.312090][ T20] usb 2-1: USB disconnect, device number 2 [ 26.316260][ T310] hid-generic 0008:0003:0005.0001: unknown main item tag 0x1 [ 26.321207][ T20] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 26.328577][ T310] hid-generic 0008:0003:0005.0001: unknown main item tag 0x0 [ 26.345058][ T310] hid-generic 0008:0003:0005.0001: unknown main item tag 0x1 [ 26.352890][ T310] hid-generic 0008:0003:0005.0001: unknown main item tag 0x0 [ 26.360548][ T310] hid-generic 0008:0003:0005.0001: unknown main item tag 0x0 [pid 301] close(4 [pid 303] openat(AT_FDCWD, "/dev/uhid", O_RDWR|O_DSYNC|0x4) = 4 [pid 303] write(4, "\x00\x00\x00\x00\x73\x79\x7a\x31\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 288) = 288 [pid 303] close(3) = 0 [pid 307] openat(AT_FDCWD, "/dev/uhid", O_RDWR|O_DSYNC|0x4 [pid 306] openat(AT_FDCWD, "/dev/uhid", O_RDWR|O_DSYNC|0x4 [pid 300] openat(AT_FDCWD, "/dev/uhid", O_RDWR|O_DSYNC|0x4 [pid 307] <... openat resumed>) = 4 [pid 306] <... openat resumed>) = 4 [pid 300] <... openat resumed>) = 4 [pid 307] write(4, "\x00\x00\x00\x00\x73\x79\x7a\x31\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 288 [pid 306] write(4, "\x00\x00\x00\x00\x73\x79\x7a\x31\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 288 [pid 307] <... write resumed>) = 288 [pid 306] <... write resumed>) = 288 [pid 307] close(3 [pid 306] close(3 [pid 300] write(4, "\x00\x00\x00\x00\x73\x79\x7a\x31\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 288 [pid 307] <... close resumed>) = 0 [pid 306] <... close resumed>) = 0 [pid 300] <... write resumed>) = 288 [pid 307] close(4 [pid 306] close(4 [pid 300] close(3 [pid 307] <... close resumed>) = 0 [pid 306] <... close resumed>) = 0 [pid 300] <... close resumed>) = 0 [pid 307] close(5 [pid 306] close(5 [pid 300] close(4 [pid 307] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 300] <... close resumed>) = 0 [pid 307] close(6 [pid 306] close(6 [pid 300] close(5 [pid 307] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 300] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] close(7 [pid 306] close(7 [pid 300] close(6 [pid 307] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 300] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] close(8 [pid 306] close(8 [pid 300] close(7 [pid 307] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 300] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] close(9 [pid 306] close(9 [pid 300] close(8 [pid 307] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 300] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] close(10 [pid 303] close(4 [pid 307] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] close(10 [pid 300] close(9 [pid 307] close(11 [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 300] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] close(11 [pid 300] close(10 [pid 307] close(12 [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 300] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] close(12 [pid 307] close(13 [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 300] close(11 [pid 307] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] close(13 [ 26.368228][ T310] hid-generic 0008:0003:0005.0001: unknown main item tag 0x0 [ 26.376105][ T310] hid-generic 0008:0003:0005.0001: unknown main item tag 0x0 [ 26.379484][ T309] hid-generic 0008:0003:0005.0002: unknown main item tag 0x2 [ 26.384044][ T310] hid-generic 0008:0003:0005.0001: unknown main item tag 0x1 [ 26.393948][ T309] hid-generic 0008:0003:0005.0002: unknown main item tag 0x0 [ 26.407373][ T310] hid-generic 0008:0003:0005.0001: unknown main item tag 0x1 [ 26.407630][ T309] hid-generic 0008:0003:0005.0002: unknown main item tag 0x0 [pid 307] close(14 [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 300] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] close(14 [pid 307] close(15 [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 300] close(12 [pid 307] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] close(15 [pid 307] close(16 [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 300] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] close(16 [pid 300] close(13 [pid 307] close(17 [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 300] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] close(17 [pid 300] close(14 [pid 307] close(18 [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 300] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] close(18 [pid 300] close(15 [pid 307] close(19 [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 300] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] close(19 [pid 300] close(16 [pid 307] close(20 [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 300] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] close(20 [pid 300] close(17 [pid 307] close(21 [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 300] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] close(21 [pid 300] close(18 [pid 307] close(22 [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 300] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] close(22 [pid 300] close(19 [pid 307] close(23 [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 300] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] close(23 [pid 300] close(20 [pid 307] close(24 [pid 306] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 300] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 306] close(24