./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1743622338 <...> Warning: Permanently added '10.128.1.77' (ECDSA) to the list of known hosts. execve("./syz-executor1743622338", ["./syz-executor1743622338"], 0x7ffd510f86c0 /* 10 vars */) = 0 brk(NULL) = 0x5555558f9000 brk(0x5555558f9c40) = 0x5555558f9c40 arch_prctl(ARCH_SET_FS, 0x5555558f9300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1743622338", 4096) = 28 brk(0x55555591ac40) = 0x55555591ac40 brk(0x55555591b000) = 0x55555591b000 mprotect(0x7fd925f8f000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 getpid() = 304 mkdir("./syzkaller.gEUE5a", 0700) = 0 chmod("./syzkaller.gEUE5a", 0777) = 0 chdir("./syzkaller.gEUE5a") = 0 mkdir("./0", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558f95d0) = 305 ./strace-static-x86_64: Process 305 attached [pid 305] chdir("./0") = 0 [pid 305] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 305] setpgid(0, 0) = 0 [pid 305] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 305] write(3, "1000", 4) = 4 [pid 305] close(3) = 0 [pid 305] symlink("/dev/binderfs", "./binderfs") = 0 [pid 305] memfd_create("syzkaller", 0) = 3 [pid 305] ftruncate(3, 2097152) = 0 [pid 305] pwrite64(3, "\x20\x00\x00\x00\x00\x02\x00\x00\x19\x00\x00\x00\x90\x01\x00\x00\x0f\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x06\x00\x00\x00\x00\x00\x08\x00\x00\x80\x00\x00\x20\x00\x00\x00\xdb\xf4\x65\x5f\xdb\xf4\x65\x5f\x01\x00\xff\xff\x53\xef\x01\x00\x01\x00\x00\x00\xda\xf4\x65\x5f\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x0b\x00\x00\x00\x00\x04\x00\x00\x08\x00\x00\x00\xd2\xc2\x00\x00"..., 102, 1024) = 102 [pid 305] pwrite64(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x82\xe3\x67\x24\xc6\xf3\x4c\xaa\x84\x6e\xd2\xe5\x27\x70\x33\x78\x01\x00\x40", 31, 1248) = 31 [pid 305] pwrite64(3, "\x02\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\x19\x00\x0f\x00\x03\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00\x2e\x69", 32, 4096) = 32 [pid 305] pwrite64(3, "\x7f\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff"..., 4098, 8192) = 4098 [pid 305] pwrite64(3, "\xed\x41\x00\x00\x10\x00\x00\x00\xda\xf4\x65\x5f\xdb\xf4\x65\x5f\xdb\xf4\x65\x5f\x00\x00\x00\x00\x00\x00\x04\x00\x80\x00\x00\x00\x00\x00\x08\x00\x05\x00\x00\x00\x0a\xf3\x01\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x09\x00\x00\x00\x10", 61, 17408) = 61 [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 305] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 305] mkdir("./file0", 0777) = 0 [ 23.748481][ T22] audit: type=1400 audit(1656176707.009:73): avc: denied { execmem } for pid=304 comm="syz-executor174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 23.767977][ T22] audit: type=1400 audit(1656176707.019:74): avc: denied { read write } for pid=304 comm="syz-executor174" name="loop0" dev="devtmpfs" ino=9365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [pid 305] mount("/dev/loop0", "./file0", "ext4", MS_SYNCHRONOUS|MS_NODIRATIME|MS_SILENT, ",errors=continue") = 0 [pid 305] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 305] ioctl(4, LOOP_CLR_FD) = 0 [pid 305] close(4) = 0 [pid 305] close(3) = 0 [pid 305] chdir("./file0") = 0 [pid 305] openat(AT_FDCWD, "cgroup.controllers", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 3 [pid 305] write(3, "\x23\x21\x20\xe9\x1f\x71\x89\x59\x1e\x92\x33\x61\x4b\x20\x00\x20\x25\x20\x21\x0a", 20) = 20 [pid 305] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 3, 0) = 0x20000000 [ 23.792673][ T22] audit: type=1400 audit(1656176707.019:75): avc: denied { open } for pid=304 comm="syz-executor174" path="/dev/loop0" dev="devtmpfs" ino=9365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 23.798719][ T305] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 23.817320][ T22] audit: type=1400 audit(1656176707.019:76): avc: denied { ioctl } for pid=304 comm="syz-executor174" path="/dev/loop0" dev="devtmpfs" ino=9365 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 23.853025][ T22] audit: type=1400 audit(1656176707.039:77): avc: denied { mounton } for pid=305 comm="syz-executor174" path="/root/syzkaller.gEUE5a/0/file0" dev="sda1" ino=1141 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 23.878841][ T22] audit: type=1400 audit(1656176707.099:78): avc: denied { mount } for pid=305 comm="syz-executor174" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 23.900647][ T22] audit: type=1400 audit(1656176707.109:79): avc: denied { write } for pid=305 comm="syz-executor174" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 23.922660][ T22] audit: type=1400 audit(1656176707.109:80): avc: denied { add_name } for pid=305 comm="syz-executor174" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 23.944717][ T22] audit: type=1400 audit(1656176707.109:81): avc: denied { create } for pid=305 comm="syz-executor174" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 23.966595][ T22] audit: type=1400 audit(1656176707.109:82): avc: denied { read append open } for pid=305 comm="syz-executor174" path="/root/syzkaller.gEUE5a/0/file0/cgroup.controllers" dev="loop0" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [pid 304] kill(-305, SIGKILL) = 0 [pid 304] kill(305, SIGKILL) = 0 [pid 304] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 304] fstat(3, {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0 [pid 304] getdents64(3, 0x5555558fa620 /* 2 entries */, 32768) = 48 [pid 304] getdents64(3, 0x5555558fa620 /* 0 entries */, 32768) = 0 [pid 304] close(3) = 0 [ 66.830130][ T67] cfg80211: failed to load regulatory.db