./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3792639301 <...> [ 4.787760][ T162] udevd[162]: starting eudev-3.2.11 [ 5.560781][ T194] ip (194) used greatest stack depth: 23832 bytes left [ 5.981469][ T140] rcS (140) used greatest stack depth: 22552 bytes left [ 14.288021][ T23] kauditd_printk_skb: 50 callbacks suppressed [ 14.288030][ T23] audit: type=1400 audit(1716248760.989:61): avc: denied { transition } for pid=288 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.293519][ T23] audit: type=1400 audit(1716248760.989:62): avc: denied { noatsecure } for pid=288 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.296661][ T23] audit: type=1400 audit(1716248760.989:63): avc: denied { write } for pid=288 comm="sh" path="pipe:[10423]" dev="pipefs" ino=10423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 14.300180][ T23] audit: type=1400 audit(1716248760.989:64): avc: denied { rlimitinh } for pid=288 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.302878][ T23] audit: type=1400 audit(1716248760.989:65): avc: denied { siginh } for pid=288 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.702561][ T289] sshd (289) used greatest stack depth: 22008 bytes left Warning: Permanently added '10.128.1.131' (ED25519) to the list of known hosts. execve("./syz-executor3792639301", ["./syz-executor3792639301"], 0x7ffd310aa370 /* 10 vars */) = 0 brk(NULL) = 0x555555b0d000 brk(0x555555b0dd40) = 0x555555b0dd40 arch_prctl(ARCH_SET_FS, 0x555555b0d3c0) = 0 set_tid_address(0x555555b0d690) = 357 set_robust_list(0x555555b0d6a0, 24) = 0 rseq(0x555555b0dce0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3792639301", 4096) = 28 getrandom("\xf9\x26\x07\xcf\x26\x1a\x5e\xf6", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555555b0dd40 brk(0x555555b2ed40) = 0x555555b2ed40 brk(0x555555b2f000) = 0x555555b2f000 mprotect(0x7f19cd462000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555b0d690) = 359 ./strace-static-x86_64: Process 359 attached [pid 359] set_robust_list(0x555555b0d6a0, 24) = 0 [pid 359] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 359] setpgid(0, 0) = 0 [pid 359] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 359] write(3, "1000", 4) = 4 [pid 359] close(3) = 0 [pid 359] write(1, "executing program\n", 18executing program ) = 18 [pid 359] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 359] rt_sigaction(SIGRT_1, {sa_handler=0x7f19cd4066f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f19cd3f7d70}, NULL, 8) = 0 [pid 359] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 359] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19cd37e000 [pid 359] mprotect(0x7f19cd37f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 359] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 359] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f19cd39e990, parent_tid=0x7f19cd39e990, exit_signal=0, stack=0x7f19cd37e000, stack_size=0x20300, tls=0x7f19cd39e6c0} => {parent_tid=[360]}, 88) = 360 [pid 359] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 359] futex(0x7f19cd4683c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 359] futex(0x7f19cd4683cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 360 attached [pid 360] set_robust_list(0x7f19cd39e9a0, 24) = 0 [pid 360] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 23.220172][ T23] audit: type=1400 audit(1716248769.919:66): avc: denied { execmem } for pid=357 comm="syz-executor379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 23.239375][ T23] audit: type=1400 audit(1716248769.929:67): avc: denied { read write } for pid=357 comm="syz-executor379" name="loop0" dev="devtmpfs" ino=9196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [pid 360] mkdirat(AT_FDCWD, "./file0", 000) = 0 [pid 360] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 359] <... futex resumed>) = 0 [pid 359] futex(0x7f19cd4683c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 359] futex(0x7f19cd4683cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 360] <... futex resumed>) = 1 [pid 360] mount("./file0", "./file0", "incremental-fs", 0, NULL) = 0 [pid 360] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 359] <... futex resumed>) = 0 [pid 359] futex(0x7f19cd4683c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 359] futex(0x7f19cd4683cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 360] <... futex resumed>) = 1 [pid 360] mkdir("./file0", 0777) = -1 EEXIST (File exists) [pid 360] mount(NULL, "./file0", 0x20000140, MS_PRIVATE, 0x7f19cd39e100) = 0 [pid 360] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 360] chdir("./file0") = 0 [pid 360] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 359] <... futex resumed>) = 0 [pid 359] futex(0x7f19cd4683c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 359] futex(0x7f19cd4683cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 360] <... futex resumed>) = 1 [pid 360] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 360] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 359] <... futex resumed>) = 0 [pid 359] futex(0x7f19cd4683c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 359] futex(0x7f19cd4683cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 360] <... futex resumed>) = 1 [pid 360] mkdirat(AT_FDCWD, "./file1", 000) = 0 [pid 360] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 359] <... futex resumed>) = 0 [pid 359] futex(0x7f19cd4683c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 359] futex(0x7f19cd4683dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 359] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19cd35d000 [pid 359] mprotect(0x7f19cd35e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 359] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 359] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f19cd37d990, parent_tid=0x7f19cd37d990, exit_signal=0, stack=0x7f19cd35d000, stack_size=0x20300, tls=0x7f19cd37d6c0} => {parent_tid=[361]}, 88) = 361 [pid 359] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 359] futex(0x7f19cd4683d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 359] futex(0x7f19cd4683dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 360] <... futex resumed>) = 1 [pid 360] renameat2(4, "./file1", 4, "./bus", RENAME_EXCHANGE) = -1 ENOENT (No such file or directory) [pid 360] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 360] futex(0x7f19cd4683c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 361 attached [pid 361] set_robust_list(0x7f19cd37d9a0, 24) = 0 [pid 361] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 361] openat(-1, ".pending_reads", O_RDONLY) = -1 EBADF (Bad file descriptor) [pid 361] futex(0x7f19cd4683dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 359] <... futex resumed>) = 0 [pid 359] exit_group(0) = ? [pid 360] <... futex resumed>) = ? [pid 360] +++ exited with 0 +++ [pid 361] <... futex resumed>) = ? [pid 361] +++ exited with 0 +++ [pid 359] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=359, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [ 23.263425][ T23] audit: type=1400 audit(1716248769.929:68): avc: denied { open } for pid=357 comm="syz-executor379" path="/dev/loop0" dev="devtmpfs" ino=9196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 23.287673][ T23] audit: type=1400 audit(1716248769.929:69): avc: denied { ioctl } for pid=357 comm="syz-executor379" path="/dev/loop0" dev="devtmpfs" ino=9196 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 restart_syscall(<... resuming interrupted clone ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555b0d690) = 362 ./strace-static-x86_64: Process 362 attached [pid 362] set_robust_list(0x555555b0d6a0, 24) = 0 [pid 362] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 362] setpgid(0, 0) = 0 [pid 362] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 362] write(3, "1000", 4) = 4 [pid 362] close(3) = 0 [pid 362] write(1, "executing program\n", 18executing program ) = 18 [pid 362] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 362] rt_sigaction(SIGRT_1, {sa_handler=0x7f19cd4066f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f19cd3f7d70}, NULL, 8) = 0 [pid 362] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 362] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19cd37e000 [pid 362] mprotect(0x7f19cd37f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 362] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 362] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f19cd39e990, parent_tid=0x7f19cd39e990, exit_signal=0, stack=0x7f19cd37e000, stack_size=0x20300, tls=0x7f19cd39e6c0} => {parent_tid=[363]}, 88) = 363 [pid 362] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 362] futex(0x7f19cd4683c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 362] futex(0x7f19cd4683cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 363 attached [pid 363] set_robust_list(0x7f19cd39e9a0, 24) = 0 [pid 363] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 363] mkdirat(AT_FDCWD, "./file0", 000) = -1 EEXIST (File exists) [pid 363] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 362] <... futex resumed>) = 0 [pid 362] futex(0x7f19cd4683c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 362] futex(0x7f19cd4683cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 363] <... futex resumed>) = 1 [pid 363] mount("./file0", "./file0", "incremental-fs", 0, NULL) = 0 [pid 363] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 362] <... futex resumed>) = 0 [pid 362] futex(0x7f19cd4683c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 362] futex(0x7f19cd4683cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 363] <... futex resumed>) = 1 [pid 363] mkdir("./file0", 0777) = -1 EEXIST (File exists) [pid 363] mount(NULL, "./file0", 0x20000140, MS_PRIVATE, 0x7f19cd39e100) = 0 [pid 363] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 363] chdir("./file0") = 0 [pid 363] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 362] <... futex resumed>) = 0 [pid 362] futex(0x7f19cd4683c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 362] futex(0x7f19cd4683cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 363] <... futex resumed>) = 1 [pid 363] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 363] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 362] <... futex resumed>) = 0 [pid 362] futex(0x7f19cd4683c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 362] futex(0x7f19cd4683cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 363] <... futex resumed>) = 1 [pid 363] mkdirat(AT_FDCWD, "./file1", 000) = -1 EEXIST (File exists) [pid 363] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 362] <... futex resumed>) = 0 [pid 362] futex(0x7f19cd4683c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 362] futex(0x7f19cd4683dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 362] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19cd35d000 [pid 362] mprotect(0x7f19cd35e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 362] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 362] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f19cd37d990, parent_tid=0x7f19cd37d990, exit_signal=0, stack=0x7f19cd35d000, stack_size=0x20300, tls=0x7f19cd37d6c0} => {parent_tid=[364]}, 88) = 364 [pid 362] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 362] futex(0x7f19cd4683d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 362] futex(0x7f19cd4683dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 363] <... futex resumed>) = 1 [pid 363] renameat2(4, "./file1", 4, "./bus", RENAME_EXCHANGE) = -1 ENOENT (No such file or directory) [pid 363] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 363] futex(0x7f19cd4683c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 364 attached [pid 364] set_robust_list(0x7f19cd37d9a0, 24) = 0 [pid 364] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 364] openat(-1, ".pending_reads", O_RDONLY) = -1 EBADF (Bad file descriptor) [pid 364] futex(0x7f19cd4683dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 362] <... futex resumed>) = 0 [pid 362] exit_group(0) = ? [pid 363] <... futex resumed>) = ? [pid 363] +++ exited with 0 +++ [pid 364] <... futex resumed>) = ? [pid 364] +++ exited with 0 +++ [pid 362] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=362, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555b0d690) = 365 ./strace-static-x86_64: Process 365 attached [pid 365] set_robust_list(0x555555b0d6a0, 24) = 0 [pid 365] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 365] setpgid(0, 0) = 0 [pid 365] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 365] write(3, "1000", 4) = 4 [pid 365] close(3) = 0 [pid 365] write(1, "executing program\n", 18executing program ) = 18 [pid 365] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 365] rt_sigaction(SIGRT_1, {sa_handler=0x7f19cd4066f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f19cd3f7d70}, NULL, 8) = 0 [pid 365] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 365] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19cd37e000 [pid 365] mprotect(0x7f19cd37f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 365] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 365] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f19cd39e990, parent_tid=0x7f19cd39e990, exit_signal=0, stack=0x7f19cd37e000, stack_size=0x20300, tls=0x7f19cd39e6c0} => {parent_tid=[366]}, 88) = 366 [pid 365] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 365] futex(0x7f19cd4683c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 365] futex(0x7f19cd4683cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 366 attached [pid 366] set_robust_list(0x7f19cd39e9a0, 24) = 0 [pid 366] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 366] mkdirat(AT_FDCWD, "./file0", 000) = -1 EEXIST (File exists) [pid 366] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] <... futex resumed>) = 0 [pid 365] futex(0x7f19cd4683c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 365] futex(0x7f19cd4683cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 366] <... futex resumed>) = 1 [ 23.313137][ T23] audit: type=1400 audit(1716248769.979:70): avc: denied { mounton } for pid=359 comm="syz-executor379" path="/root/file0" dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 23.335599][ T23] audit: type=1400 audit(1716248769.979:71): avc: denied { mount } for pid=359 comm="syz-executor379" name="/" dev="incremental-fs" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [pid 366] mount("./file0", "./file0", "incremental-fs", 0, NULL) = -1 EINVAL (Invalid argument) [pid 366] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] <... futex resumed>) = 0 [pid 365] futex(0x7f19cd4683c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 365] futex(0x7f19cd4683cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 366] <... futex resumed>) = 1 [pid 366] mkdir("./file0", 0777) = -1 EEXIST (File exists) [pid 366] mount(NULL, "./file0", 0x20000140, MS_PRIVATE, 0x7f19cd39e100) = 0 [pid 366] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 366] chdir("./file0") = 0 [pid 366] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] <... futex resumed>) = 0 [pid 365] futex(0x7f19cd4683c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 365] futex(0x7f19cd4683cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 366] <... futex resumed>) = 1 [pid 366] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 366] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] <... futex resumed>) = 0 [pid 365] futex(0x7f19cd4683c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 365] futex(0x7f19cd4683cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 366] <... futex resumed>) = 1 [pid 366] mkdirat(AT_FDCWD, "./file1", 000) = -1 EEXIST (File exists) [pid 366] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] <... futex resumed>) = 0 [pid 365] futex(0x7f19cd4683c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 365] futex(0x7f19cd4683dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 365] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19cd35d000 [pid 365] mprotect(0x7f19cd35e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 365] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 365] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f19cd37d990, parent_tid=0x7f19cd37d990, exit_signal=0, stack=0x7f19cd35d000, stack_size=0x20300, tls=0x7f19cd37d6c0} => {parent_tid=[367]}, 88) = 367 [pid 365] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 365] futex(0x7f19cd4683d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 365] futex(0x7f19cd4683dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 366] <... futex resumed>) = 1 [pid 366] renameat2(4, "./file1", 4, "./bus", RENAME_EXCHANGE) = -1 ENOENT (No such file or directory) [pid 366] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 366] futex(0x7f19cd4683c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 367 attached [pid 367] set_robust_list(0x7f19cd37d9a0, 24) = 0 [pid 367] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 367] openat(-1, ".pending_reads", O_RDONLY) = -1 EBADF (Bad file descriptor) [pid 367] futex(0x7f19cd4683dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] <... futex resumed>) = 0 [pid 365] exit_group(0) = ? [pid 366] <... futex resumed>) = ? [pid 366] +++ exited with 0 +++ [pid 367] <... futex resumed>) = ? [pid 367] +++ exited with 0 +++ [pid 365] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=365, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- restart_syscall(<... resuming interrupted clone ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555b0d690) = 368 ./strace-static-x86_64: Process 368 attached [pid 368] set_robust_list(0x555555b0d6a0, 24) = 0 [pid 368] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 368] setpgid(0, 0) = 0 [pid 368] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 368] write(3, "1000", 4) = 4 [pid 368] close(3) = 0 [pid 368] write(1, "executing program\n", 18executing program ) = 18 [pid 368] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 368] rt_sigaction(SIGRT_1, {sa_handler=0x7f19cd4066f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f19cd3f7d70}, NULL, 8) = 0 [pid 368] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 368] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19cd37e000 [pid 368] mprotect(0x7f19cd37f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 368] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 368] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f19cd39e990, parent_tid=0x7f19cd39e990, exit_signal=0, stack=0x7f19cd37e000, stack_size=0x20300, tls=0x7f19cd39e6c0} => {parent_tid=[369]}, 88) = 369 [pid 368] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 368] futex(0x7f19cd4683c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 368] futex(0x7f19cd4683cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 369 attached [pid 369] set_robust_list(0x7f19cd39e9a0, 24) = 0 [pid 369] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 369] mkdirat(AT_FDCWD, "./file0", 000) = -1 EEXIST (File exists) [ 23.358986][ T23] audit: type=1400 audit(1716248769.999:72): avc: denied { mounton } for pid=359 comm="syz-executor379" path="/root/file0" dev="incremental-fs" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 23.367718][ T366] incfs: mount failed -22 [ 23.382882][ T23] audit: type=1400 audit(1716248769.999:73): avc: denied { write } for pid=359 comm="syz-executor379" name="/" dev="incremental-fs" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [pid 369] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 368] <... futex resumed>) = 0 [pid 368] futex(0x7f19cd4683c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 368] futex(0x7f19cd4683cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 369] <... futex resumed>) = 1 [pid 369] mount("./file0", "./file0", "incremental-fs", 0, NULL) = -1 EINVAL (Invalid argument) [pid 369] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 368] <... futex resumed>) = 0 [pid 368] futex(0x7f19cd4683c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 368] futex(0x7f19cd4683cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 369] <... futex resumed>) = 1 [pid 369] mkdir("./file0", 0777) = -1 EEXIST (File exists) [pid 369] mount(NULL, "./file0", 0x20000140, MS_PRIVATE, 0x7f19cd39e100) = 0 [pid 369] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 369] chdir("./file0") = 0 [pid 369] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 368] <... futex resumed>) = 0 [pid 368] futex(0x7f19cd4683c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 368] futex(0x7f19cd4683cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 369] <... futex resumed>) = 1 [pid 369] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 369] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 368] <... futex resumed>) = 0 [pid 368] futex(0x7f19cd4683c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 368] futex(0x7f19cd4683cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 369] <... futex resumed>) = 1 [pid 369] mkdirat(AT_FDCWD, "./file1", 000) = -1 EEXIST (File exists) [pid 369] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 368] <... futex resumed>) = 0 [pid 368] futex(0x7f19cd4683c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 368] futex(0x7f19cd4683dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 368] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19cd35d000 [pid 368] mprotect(0x7f19cd35e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 368] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 368] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f19cd37d990, parent_tid=0x7f19cd37d990, exit_signal=0, stack=0x7f19cd35d000, stack_size=0x20300, tls=0x7f19cd37d6c0} => {parent_tid=[370]}, 88) = 370 [pid 368] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 368] futex(0x7f19cd4683d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 368] futex(0x7f19cd4683dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 369] <... futex resumed>) = 1 [pid 369] renameat2(4, "./file1", 4, "./bus", RENAME_EXCHANGE) = -1 ENOENT (No such file or directory) [pid 369] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 369] futex(0x7f19cd4683c8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 370 attached [pid 370] set_robust_list(0x7f19cd37d9a0, 24) = 0 [pid 370] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 370] openat(-1, ".pending_reads", O_RDONLY) = -1 EBADF (Bad file descriptor) [pid 370] futex(0x7f19cd4683dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 368] <... futex resumed>) = 0 [pid 368] exit_group(0) = ? [pid 369] <... futex resumed>) = ? [pid 369] +++ exited with 0 +++ [pid 370] <... futex resumed>) = ? [pid 370] +++ exited with 0 +++ [pid 368] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=368, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555b0d690) = 371 ./strace-static-x86_64: Process 371 attached [pid 371] set_robust_list(0x555555b0d6a0, 24) = 0 [pid 371] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 371] setpgid(0, 0) = 0 [pid 371] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 371] write(3, "1000", 4) = 4 [pid 371] close(3) = 0 executing program [pid 371] write(1, "executing program\n", 18) = 18 [pid 371] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 371] rt_sigaction(SIGRT_1, {sa_handler=0x7f19cd4066f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f19cd3f7d70}, NULL, 8) = 0 [pid 371] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 371] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19cd37e000 [pid 371] mprotect(0x7f19cd37f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 371] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 371] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f19cd39e990, parent_tid=0x7f19cd39e990, exit_signal=0, stack=0x7f19cd37e000, stack_size=0x20300, tls=0x7f19cd39e6c0}./strace-static-x86_64: Process 372 attached => {parent_tid=[372]}, 88) = 372 [pid 372] set_robust_list(0x7f19cd39e9a0, 24) = 0 [pid 372] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 372] futex(0x7f19cd4683c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 371] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 371] futex(0x7f19cd4683c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 372] <... futex resumed>) = 0 [pid 371] futex(0x7f19cd4683cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] mkdirat(AT_FDCWD, "./file0", 000) = -1 EEXIST (File exists) [pid 372] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 372] futex(0x7f19cd4683c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 371] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 371] futex(0x7f19cd4683c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 372] <... futex resumed>) = 0 [pid 372] mount("./file0", "./file0", "incremental-fs", 0, NULL [pid 371] futex(0x7f19cd4683cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 372] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 371] <... futex resumed>) = 0 [pid 371] futex(0x7f19cd4683c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 371] futex(0x7f19cd4683cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] mkdir("./file0", 0777) = -1 EEXIST (File exists) [pid 372] mount(NULL, "./file0", 0x20000140, MS_PRIVATE, 0x7f19cd39e100) = 0 [pid 372] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 372] chdir("./file0") = 0 [pid 372] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 372] futex(0x7f19cd4683c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 371] <... futex resumed>) = 0 [pid 371] futex(0x7f19cd4683c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 371] futex(0x7f19cd4683cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 372] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 372] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 371] <... futex resumed>) = 0 [pid 372] <... futex resumed>) = 1 [pid 371] futex(0x7f19cd4683c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 371] futex(0x7f19cd4683cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] mkdirat(AT_FDCWD, "./file1", 000) = -1 EEXIST (File exists) [pid 372] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 371] <... futex resumed>) = 0 [pid 371] futex(0x7f19cd4683c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 371] futex(0x7f19cd4683dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 371] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19cd35d000 [pid 371] mprotect(0x7f19cd35e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 372] renameat2(4, "./file1", 4, "./bus", RENAME_EXCHANGE [pid 371] rt_sigprocmask(SIG_BLOCK, ~[], [pid 372] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 371] <... rt_sigprocmask resumed>[], 8) = 0 [pid 371] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f19cd37d990, parent_tid=0x7f19cd37d990, exit_signal=0, stack=0x7f19cd35d000, stack_size=0x20300, tls=0x7f19cd37d6c0} [pid 372] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 371] <... clone3 resumed> => {parent_tid=[373]}, 88) = 373 [pid 372] <... futex resumed>) = 0 [pid 372] futex(0x7f19cd4683c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 371] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 371] futex(0x7f19cd4683d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 371] futex(0x7f19cd4683dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 373 attached [pid 373] set_robust_list(0x7f19cd37d9a0, 24) = 0 [pid 373] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 373] openat(-1, ".pending_reads", O_RDONLY) = -1 EBADF (Bad file descriptor) [pid 373] futex(0x7f19cd4683dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 371] <... futex resumed>) = 0 [pid 371] exit_group(0) = ? [pid 372] <... futex resumed>) = ? [pid 372] +++ exited with 0 +++ [pid 373] <... futex resumed>) = ? [pid 373] +++ exited with 0 +++ [pid 371] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=371, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555b0d690) = 374 ./strace-static-x86_64: Process 374 attached [pid 374] set_robust_list(0x555555b0d6a0, 24) = 0 [pid 374] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 374] setpgid(0, 0) = 0 [pid 374] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 374] write(3, "1000", 4) = 4 [pid 374] close(3) = 0 executing program [pid 374] write(1, "executing program\n", 18) = 18 [pid 374] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 374] rt_sigaction(SIGRT_1, {sa_handler=0x7f19cd4066f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f19cd3f7d70}, NULL, 8) = 0 [pid 374] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 374] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19cd37e000 [pid 374] mprotect(0x7f19cd37f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 374] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 374] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f19cd39e990, parent_tid=0x7f19cd39e990, exit_signal=0, stack=0x7f19cd37e000, stack_size=0x20300, tls=0x7f19cd39e6c0}./strace-static-x86_64: Process 375 attached => {parent_tid=[375]}, 88) = 375 [pid 375] set_robust_list(0x7f19cd39e9a0, 24) = 0 [pid 375] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 375] futex(0x7f19cd4683c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 374] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 374] futex(0x7f19cd4683c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 375] <... futex resumed>) = 0 [pid 374] futex(0x7f19cd4683cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] mkdirat(AT_FDCWD, "./file0", 000) = -1 EEXIST (File exists) [pid 375] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 375] futex(0x7f19cd4683c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 374] <... futex resumed>) = 0 [pid 374] futex(0x7f19cd4683c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 375] <... futex resumed>) = 0 [pid 375] mount("./file0", "./file0", "incremental-fs", 0, NULL [ 23.409578][ T23] audit: type=1400 audit(1716248769.999:74): avc: denied { add_name } for pid=359 comm="syz-executor379" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 23.423617][ T369] incfs: mount failed -22 [ 23.430327][ T23] audit: type=1400 audit(1716248769.999:75): avc: denied { create } for pid=359 comm="syz-executor379" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 23.464072][ T372] incfs: mount failed -22 [pid 374] futex(0x7f19cd4683cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... mount resumed>) = -1 EINVAL (Invalid argument) [pid 375] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 375] futex(0x7f19cd4683c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 374] <... futex resumed>) = 0 [pid 374] futex(0x7f19cd4683c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 374] futex(0x7f19cd4683cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 375] mkdir("./file0", 0777) = -1 EEXIST (File exists) [pid 375] mount(NULL, "./file0", 0x20000140, MS_PRIVATE, 0x7f19cd39e100) = 0 [pid 375] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 375] chdir("./file0") = 0 [pid 375] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 374] <... futex resumed>) = 0 [pid 374] futex(0x7f19cd4683c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 374] futex(0x7f19cd4683cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 375] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 374] <... futex resumed>) = 0 [pid 374] futex(0x7f19cd4683c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 374] futex(0x7f19cd4683cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] mkdirat(AT_FDCWD, "./file1", 000) = -1 EEXIST (File exists) [pid 375] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 374] <... futex resumed>) = 0 [pid 374] futex(0x7f19cd4683c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] renameat2(4, "./file1", 4, "./bus", RENAME_EXCHANGE [pid 374] <... futex resumed>) = 0 [pid 374] futex(0x7f19cd4683dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... renameat2 resumed>) = -1 ENOENT (No such file or directory) [pid 374] <... futex resumed>) = 0 [pid 374] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19cd35d000 [pid 374] mprotect(0x7f19cd35e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 374] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 374] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f19cd37d990, parent_tid=0x7f19cd37d990, exit_signal=0, stack=0x7f19cd35d000, stack_size=0x20300, tls=0x7f19cd37d6c0} => {parent_tid=[376]}, 88) = 376 [pid 374] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 374] futex(0x7f19cd4683d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 374] futex(0x7f19cd4683dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 376 attached [pid 376] set_robust_list(0x7f19cd37d9a0, 24) = 0 [pid 376] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 376] openat(-1, ".pending_reads", O_RDONLY) = -1 EBADF (Bad file descriptor) [pid 376] futex(0x7f19cd4683dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... futex resumed>) = 0 [pid 375] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 375] futex(0x7f19cd4683c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 374] exit_group(0 [pid 375] <... futex resumed>) = ? [pid 374] <... exit_group resumed>) = ? [pid 375] +++ exited with 0 +++ [pid 376] <... futex resumed>) = ? [pid 376] +++ exited with 0 +++ [pid 374] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=374, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) executing program close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555b0d690) = 377 ./strace-static-x86_64: Process 377 attached [pid 377] set_robust_list(0x555555b0d6a0, 24) = 0 [pid 377] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 377] setpgid(0, 0) = 0 [pid 377] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 377] write(3, "1000", 4) = 4 [pid 377] close(3) = 0 [pid 377] write(1, "executing program\n", 18) = 18 [pid 377] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 377] rt_sigaction(SIGRT_1, {sa_handler=0x7f19cd4066f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f19cd3f7d70}, NULL, 8) = 0 [pid 377] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 377] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19cd37e000 [pid 377] mprotect(0x7f19cd37f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 377] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 377] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f19cd39e990, parent_tid=0x7f19cd39e990, exit_signal=0, stack=0x7f19cd37e000, stack_size=0x20300, tls=0x7f19cd39e6c0} => {parent_tid=[378]}, 88) = 378 [pid 377] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 378 attached NULL, 8) = 0 [pid 378] set_robust_list(0x7f19cd39e9a0, 24 [pid 377] futex(0x7f19cd4683c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 377] futex(0x7f19cd4683cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 378] <... set_robust_list resumed>) = 0 [pid 378] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 378] mkdirat(AT_FDCWD, "./file0", 000) = -1 EEXIST (File exists) [pid 378] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 377] <... futex resumed>) = 0 [pid 377] futex(0x7f19cd4683c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 377] futex(0x7f19cd4683cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 378] mount("./file0", "./file0", "incremental-fs", 0, NULL) = -1 EINVAL (Invalid argument) [pid 378] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 377] <... futex resumed>) = 0 [pid 377] futex(0x7f19cd4683c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 377] futex(0x7f19cd4683cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 378] mkdir("./file0", 0777) = -1 EEXIST (File exists) [pid 378] mount(NULL, "./file0", 0x20000140, MS_PRIVATE, 0x7f19cd39e100) = 0 [pid 378] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 378] chdir("./file0") = 0 [pid 378] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 377] <... futex resumed>) = 0 [pid 377] futex(0x7f19cd4683c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 377] futex(0x7f19cd4683cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 378] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 378] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 377] <... futex resumed>) = 0 [pid 377] futex(0x7f19cd4683c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 377] futex(0x7f19cd4683cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 378] mkdirat(AT_FDCWD, "./file1", 000) = -1 EEXIST (File exists) [pid 378] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... futex resumed>) = 0 [pid 377] futex(0x7f19cd4683c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 377] futex(0x7f19cd4683dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 377] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19cd35d000 [pid 377] mprotect(0x7f19cd35e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 377] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 377] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f19cd37d990, parent_tid=0x7f19cd37d990, exit_signal=0, stack=0x7f19cd35d000, stack_size=0x20300, tls=0x7f19cd37d6c0} => {parent_tid=[379]}, 88) = 379 [pid 377] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 377] futex(0x7f19cd4683d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 377] futex(0x7f19cd4683dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 379 attached [pid 379] set_robust_list(0x7f19cd37d9a0, 24) = 0 [pid 379] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 379] openat(-1, ".pending_reads", O_RDONLY) = -1 EBADF (Bad file descriptor) [pid 379] futex(0x7f19cd4683dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... futex resumed>) = 0 [pid 379] <... futex resumed>) = 1 [pid 379] futex(0x7f19cd4683d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 378] <... futex resumed>) = 1 [pid 378] renameat2(4, "./file1", 4, "./bus", RENAME_EXCHANGE) = -1 ENOENT (No such file or directory) [pid 378] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] exit_group(0) = ? [pid 379] <... futex resumed>) = ? [pid 379] +++ exited with 0 +++ [pid 378] <... futex resumed>) = ? [pid 378] +++ exited with 0 +++ [pid 377] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=377, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555b0d690) = 380 ./strace-static-x86_64: Process 380 attached [pid 380] set_robust_list(0x555555b0d6a0, 24) = 0 [pid 380] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 380] setpgid(0, 0) = 0 [pid 380] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECexecuting program ) = 3 [pid 380] write(3, "1000", 4) = 4 [pid 380] close(3) = 0 [pid 380] write(1, "executing program\n", 18) = 18 [pid 380] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 380] rt_sigaction(SIGRT_1, {sa_handler=0x7f19cd4066f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f19cd3f7d70}, NULL, 8) = 0 [pid 380] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 380] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19cd37e000 [pid 380] mprotect(0x7f19cd37f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 380] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 380] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f19cd39e990, parent_tid=0x7f19cd39e990, exit_signal=0, stack=0x7f19cd37e000, stack_size=0x20300, tls=0x7f19cd39e6c0} => {parent_tid=[381]}, 88) = 381 [pid 380] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 380] futex(0x7f19cd4683c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 380] futex(0x7f19cd4683cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 381 attached [pid 381] set_robust_list(0x7f19cd39e9a0, 24) = 0 [pid 381] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 381] mkdirat(AT_FDCWD, "./file0", 000) = -1 EEXIST (File exists) [pid 381] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 380] <... futex resumed>) = 0 [pid 380] futex(0x7f19cd4683c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 380] futex(0x7f19cd4683cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 23.486185][ T375] incfs: mount failed -22 [ 23.505332][ T378] incfs: mount failed -22 [pid 381] mount("./file0", "./file0", "incremental-fs", 0, NULL) = -1 EINVAL (Invalid argument) [pid 381] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 380] <... futex resumed>) = 0 [pid 380] futex(0x7f19cd4683c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 380] futex(0x7f19cd4683cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 381] mkdir("./file0", 0777) = -1 EEXIST (File exists) [pid 381] mount(NULL, "./file0", 0x20000140, MS_PRIVATE, 0x7f19cd39e100) = 0 [pid 381] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 381] chdir("./file0") = 0 [pid 381] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 380] <... futex resumed>) = 0 [pid 380] futex(0x7f19cd4683c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 380] futex(0x7f19cd4683cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 381] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 381] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 380] <... futex resumed>) = 0 [pid 380] futex(0x7f19cd4683c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 380] futex(0x7f19cd4683cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 381] mkdirat(AT_FDCWD, "./file1", 000) = -1 EEXIST (File exists) [pid 381] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 380] <... futex resumed>) = 0 [pid 380] futex(0x7f19cd4683c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 380] futex(0x7f19cd4683dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 380] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19cd35d000 [pid 380] mprotect(0x7f19cd35e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 380] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 380] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f19cd37d990, parent_tid=0x7f19cd37d990, exit_signal=0, stack=0x7f19cd35d000, stack_size=0x20300, tls=0x7f19cd37d6c0} => {parent_tid=[382]}, 88) = 382 [pid 380] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 380] futex(0x7f19cd4683d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 380] futex(0x7f19cd4683dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 382 attached [pid 382] set_robust_list(0x7f19cd37d9a0, 24) = 0 [pid 382] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 382] openat(-1, ".pending_reads", O_RDONLY) = -1 EBADF (Bad file descriptor) [pid 382] futex(0x7f19cd4683dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] <... futex resumed>) = 0 [pid 382] <... futex resumed>) = 1 [pid 382] futex(0x7f19cd4683d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 381] renameat2(4, "./file1", 4, "./bus", RENAME_EXCHANGE) = -1 ENOENT (No such file or directory) [pid 381] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] exit_group(0 [pid 381] <... futex resumed>) = 0 [pid 380] <... exit_group resumed>) = ? [pid 382] <... futex resumed>) = ? [pid 382] +++ exited with 0 +++ [pid 381] +++ exited with 0 +++ [pid 380] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=380, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555b0d690) = 383 ./strace-static-x86_64: Process 383 attached [pid 383] set_robust_list(0x555555b0d6a0, 24) = 0 [pid 383] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 383] setpgid(0, 0) = 0 [pid 383] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 383] write(3, "1000", 4) = 4 [pid 383] close(3) = 0 executing program [pid 383] write(1, "executing program\n", 18) = 18 [pid 383] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 383] rt_sigaction(SIGRT_1, {sa_handler=0x7f19cd4066f0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f19cd3f7d70}, NULL, 8) = 0 [pid 383] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 383] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19cd37e000 [pid 383] mprotect(0x7f19cd37f000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 383] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 383] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f19cd39e990, parent_tid=0x7f19cd39e990, exit_signal=0, stack=0x7f19cd37e000, stack_size=0x20300, tls=0x7f19cd39e6c0} => {parent_tid=[384]}, 88) = 384 [pid 383] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 383] futex(0x7f19cd4683c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 383] futex(0x7f19cd4683cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 384 attached [pid 384] set_robust_list(0x7f19cd39e9a0, 24) = 0 [pid 384] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 384] mkdirat(AT_FDCWD, "./file0", 000) = -1 EEXIST (File exists) [pid 384] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 383] <... futex resumed>) = 0 [pid 383] futex(0x7f19cd4683c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 383] futex(0x7f19cd4683cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 23.528196][ T381] incfs: mount failed -22 [pid 384] mount("./file0", "./file0", "incremental-fs", 0, NULL) = -1 EINVAL (Invalid argument) [pid 384] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 383] <... futex resumed>) = 0 [pid 383] futex(0x7f19cd4683c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 383] futex(0x7f19cd4683cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 384] mkdir("./file0", 0777) = -1 EEXIST (File exists) [pid 384] mount(NULL, "./file0", 0x20000140, MS_PRIVATE, 0x7f19cd39e100) = 0 [pid 384] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 384] chdir("./file0") = 0 [pid 384] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 383] <... futex resumed>) = 0 [pid 383] futex(0x7f19cd4683c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 383] futex(0x7f19cd4683cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 384] openat(AT_FDCWD, ".", O_RDONLY) = 4 [pid 384] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 383] <... futex resumed>) = 0 [pid 383] futex(0x7f19cd4683c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 383] futex(0x7f19cd4683cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 384] mkdirat(AT_FDCWD, "./file1", 000) = -1 EEXIST (File exists) [pid 384] futex(0x7f19cd4683cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 383] <... futex resumed>) = 0 [pid 383] futex(0x7f19cd4683c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 383] futex(0x7f19cd4683dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 383] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19cd35d000 [pid 383] mprotect(0x7f19cd35e000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 383] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 383] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f19cd37d990, parent_tid=0x7f19cd37d990, exit_signal=0, stack=0x7f19cd35d000, stack_size=0x20300, tls=0x7f19cd37d6c0} => {parent_tid=[385]}, 88) = 385 [pid 383] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 383] futex(0x7f19cd4683d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 383] futex(0x7f19cd4683dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 384] renameat2(4, "./file1", 4, "./bus", RENAME_EXCHANGE./strace-static-x86_64: Process 385 attached [pid 385] set_robust_list(0x7f19cd37d9a0, 24) = 0 [pid 385] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 385] openat(-1, ".pending_reads", O_RDONLY) = -1 EBADF (Bad file descriptor) [pid 385] futex(0x7f19cd4683dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 383] <... futex resumed>) = 0 [pid 385] <... futex resumed>) = 1 [ 23.553441][ T384] incfs: mount failed -22 [ 23.565565][ T384] kasan: CONFIG_KASAN_INLINE enabled [ 23.570701][ T384] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 23.578853][ T384] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 23.585588][ T384] CPU: 1 PID: 384 Comm: syz-executor379 Not tainted 5.4.268-syzkaller-00012-g51cf29fc2bfc #0 [ 23.595564][ T384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 23.605482][ T384] RIP: 0010:dir_rename_wrap+0x1a5/0x4f0 [ 23.610842][ T384] Code: 7a ff eb 05 e8 4c 85 7a ff bb f0 ff ff ff 48 8b 6c 24 18 e9 02 03 00 00 e8 38 85 7a ff 31 db 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 2c 68 aa ff 48 8b 1b 48 8b 44 24 [ 23.630285][ T384] RSP: 0018:ffff8881e2c1fac0 EFLAGS: 00010202 [ 23.636183][ T384] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff8881db22de80 [ 23.643996][ T384] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 23.651806][ T384] RBP: ffff8881db671018 R08: ffffffff81e9c0e1 R09: ffffed103c583f49 [ 23.659620][ T384] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 23.667428][ T384] R13: ffff8881db671028 R14: ffff8881dc000000 R15: 1ffff1103b6ce203 [ 23.675243][ T384] FS: 00007f19cd39e6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 23.684007][ T384] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 23.690430][ T384] CR2: 00007f19cd41c450 CR3: 00000001db038000 CR4: 00000000003406a0 [ 23.698241][ T384] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 23.706051][ T384] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 23.713861][ T384] Call Trace: [ 23.716997][ T384] ? __die+0xb4/0x100 [ 23.720811][ T384] ? die+0x26/0x50 [ 23.724365][ T384] ? do_general_protection+0x266/0x3c0 [ 23.729675][ T384] ? do_trap+0x340/0x340 [ 23.733852][ T384] ? selinux_inode_rename+0x8e1/0xb70 [ 23.739042][ T384] ? general_protection+0x28/0x30 [ 23.743895][ T384] ? dir_rename_wrap+0x91/0x4f0 [ 23.748582][ T384] ? dir_rename_wrap+0x1a5/0x4f0 [ 23.753358][ T384] vfs_rename+0x90e/0xda0 [ 23.757523][ T384] ? __ia32_sys_link+0x70/0x70 [ 23.762123][ T384] ? d_alloc+0x18b/0x1c0 [ 23.766198][ T384] ? __lookup_hash+0x125/0x240 [ 23.770800][ T384] do_renameat2+0x889/0x1110 [ 23.775231][ T384] ? may_open+0x340/0x340 [ 23.779397][ T384] ? syscall_trace_enter+0x650/0x940 [ 23.784515][ T384] ? switch_fpu_return+0x1d4/0x410 [ 23.789461][ T384] ? fpu__clear+0x3c0/0x3c0 [ 23.793800][ T384] __x64_sys_renameat2+0xb1/0xc0 [ 23.798581][ T384] do_syscall_64+0xca/0x1c0 [ 23.802915][ T384] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 23.808640][ T384] Modules linked in: [ 23.813554][ T384] ---[ end trace 3c95681bd66b3bfe ]--- [ 23.818879][ T384] RIP: 0010:dir_rename_wrap+0x1a5/0x4f0 [ 23.824198][ T384] Code: 7a ff eb 05 e8 4c 85 7a ff bb f0 ff ff ff 48 8b 6c 24 18 e9 02 03 00 00 e8 38 85 7a ff 31 db 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 2c 68 aa ff 48 8b 1b 48 8b 44 24 [ 23.843681][ T384] RSP: 0018:ffff8881e2c1fac0 EFLAGS: 00010202 [ 23.849556][ T384] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff8881db22de80 [ 23.857356][ T384] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 23.865189][ T384] RBP: ffff8881db671018 R08: ffffffff81e9c0e1 R09: ffffed103c583f49 [ 23.873197][ T384] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 23.881019][ T384] R13: ffff8881db671028 R14: ffff8881dc000000 R15: 1ffff1103b6ce203 [ 23.888810][ T384] FS: 00007f19cd39e6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 23.897562][ T384] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [pid 385] futex(0x7f19cd4683d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 383] exit_group(0) = ? [pid 385] <... futex resumed>) = ? [pid 385] +++ exited with 0 +++ [ 23.904020][ T384] CR2: 0000555a9bf9b068 CR3: 00000001db038000 CR4: 00000000003406a0 [ 23.911816][ T384] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 23.919640][ T384] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 23.927417][ T384] Kernel panic - not syncing: Fatal exception [ 23.933561][ T384] Kernel Offset: disabled [ 23.937682][ T384] Rebooting in 86400 seconds..