./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1909655011 <...> [ 4.249963][ T99] udevd[99]: starting version 3.2.11 [ 4.307744][ T100] udevd[100]: starting eudev-3.2.11 [ 4.309117][ T99] udevd (99) used greatest stack depth: 23344 bytes left [ 5.229781][ T125] iptables-restor (125) used greatest stack depth: 22096 bytes left [ 13.048326][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 13.048342][ T30] audit: type=1400 audit(1713467204.125:61): avc: denied { transition } for pid=224 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.057918][ T30] audit: type=1400 audit(1713467204.125:62): avc: denied { noatsecure } for pid=224 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.064598][ T30] audit: type=1400 audit(1713467204.125:63): avc: denied { write } for pid=224 comm="sh" path="pipe:[12423]" dev="pipefs" ino=12423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 13.072816][ T30] audit: type=1400 audit(1713467204.125:64): avc: denied { rlimitinh } for pid=224 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.091522][ T30] audit: type=1400 audit(1713467204.125:65): avc: denied { siginh } for pid=224 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.9' (ED25519) to the list of known hosts. execve("./syz-executor1909655011", ["./syz-executor1909655011"], 0x7fff2958e010 /* 10 vars */) = 0 brk(NULL) = 0x555555a7e000 brk(0x555555a7ed00) = 0x555555a7ed00 arch_prctl(ARCH_SET_FS, 0x555555a7e380) = 0 set_tid_address(0x555555a7e650) = 293 set_robust_list(0x555555a7e660, 24) = 0 rseq(0x555555a7eca0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1909655011", 4096) = 28 getrandom("\xd9\xb9\x9b\x03\x90\xc2\x09\x61", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555555a7ed00 brk(0x555555a9fd00) = 0x555555a9fd00 brk(0x555555aa0000) = 0x555555aa0000 mprotect(0x7f982dcef000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 mkdir("/syzcgroup", 0777) = 0 mkdir("/syzcgroup/unified", 0777) = 0 mount("none", "/syzcgroup/unified", "cgroup2", 0, NULL) = 0 chmod("/syzcgroup/unified", 0777) = 0 openat(AT_FDCWD, "/syzcgroup/unified/cgroup.subtree_control", O_WRONLY) = 3 write(3, "+cpu", 4) = 4 write(3, "+io", 3) = 3 write(3, "+pids", 5) = 5 close(3) = 0 mkdir("/syzcgroup/net", 0777) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "net") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio") = 0 [ 21.989894][ T30] audit: type=1400 audit(1713467213.065:66): avc: denied { execmem } for pid=293 comm="syz-executor190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 22.002260][ T293] cgroup: Unknown subsys name 'net' [ 22.009190][ T30] audit: type=1400 audit(1713467213.075:67): avc: denied { mounton } for pid=293 comm="syz-executor190" path="/syzcgroup/unified" dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "devices") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/net", "cgroup", 0, "blkio") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "freezer") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) [ 22.009222][ T30] audit: type=1400 audit(1713467213.075:68): avc: denied { mount } for pid=293 comm="syz-executor190" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.059637][ T30] audit: type=1400 audit(1713467213.095:69): avc: denied { unmount } for pid=293 comm="syz-executor190" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.060129][ T293] cgroup: Unknown subsys name 'devices' mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,blkio,freezer") = 0 chmod("/syzcgroup/net", 0777) = 0 mkdir("/syzcgroup/cpu", 0777) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "hugetlb") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/cpu", "cgroup", 0, "rlimit") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/cpu", "cgroup", 0, "memory") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,memory") = ? ERESTARTNOINTR (To be restarted) [ 22.218384][ T293] cgroup: Unknown subsys name 'hugetlb' [ 22.224432][ T293] cgroup: Unknown subsys name 'rlimit' mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,memory") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,memory") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,memory") = 0 chmod("/syzcgroup/cpu", 0777) = 0 openat(AT_FDCWD, "/syzcgroup/cpu/cgroup.clone_children", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/syzcgroup/cpu/cpuset.memory_pressure_enabled", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a7e650) = 294 ./strace-static-x86_64: Process 294 attached [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a7e650) = 295 [pid 294] set_robust_list(0x555555a7e660, 24./strace-static-x86_64: Process 295 attached [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 294] <... set_robust_list resumed>) = 0 [pid 293] <... clone resumed>, child_tidptr=0x555555a7e650) = 296 ./strace-static-x86_64: Process 296 attached [pid 296] set_robust_list(0x555555a7e660, 24) = 0 [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 294] mkdir("./syzkaller.zT2asD", 0700 [pid 296] mkdir("./syzkaller.8hnKed", 0700 [pid 293] <... clone resumed>, child_tidptr=0x555555a7e650) = 297 [pid 295] set_robust_list(0x555555a7e660, 24./strace-static-x86_64: Process 297 attached [pid 293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 295] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 298 attached [pid 298] set_robust_list(0x555555a7e660, 24) = 0 [pid 293] <... clone resumed>, child_tidptr=0x555555a7e650) = 298 [pid 295] mkdir("./syzkaller.J3Oqxe", 0700 [pid 298] getrandom("\xd9\x30\x68\x28\x24\x9d\xd4\xc2", 8, GRND_NONBLOCK) = 8 [pid 298] mkdir("./syzkaller.viL8iv", 0700 [pid 294] <... mkdir resumed>) = 0 [pid 297] set_robust_list(0x555555a7e660, 24 [pid 296] <... mkdir resumed>) = 0 [pid 298] <... mkdir resumed>) = 0 [pid 297] <... set_robust_list resumed>) = 0 [pid 295] <... mkdir resumed>) = 0 [pid 294] chmod("./syzkaller.zT2asD", 0777 [pid 298] chmod("./syzkaller.viL8iv", 0777) = 0 [pid 298] chdir("./syzkaller.viL8iv") = 0 [pid 298] unshare(CLONE_NEWPID [pid 295] chmod("./syzkaller.J3Oqxe", 0777 [pid 294] <... chmod resumed>) = 0 [pid 295] <... chmod resumed>) = 0 [pid 294] chdir("./syzkaller.zT2asD" [pid 297] getrandom( [pid 296] chmod("./syzkaller.8hnKed", 0777 [pid 295] chdir("./syzkaller.J3Oqxe" [pid 298] <... unshare resumed>) = 0 [pid 297] <... getrandom resumed>"\x1b\xb7\x7e\x7e\xec\xde\xa0\x50", 8, GRND_NONBLOCK) = 8 [pid 296] <... chmod resumed>) = 0 [pid 294] <... chdir resumed>) = 0 [pid 295] <... chdir resumed>) = 0 [pid 295] unshare(CLONE_NEWPID) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 297] mkdir("./syzkaller.PlKtZv", 0700 [pid 296] chdir("./syzkaller.8hnKed" [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 294] unshare(CLONE_NEWPID) = 0 [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a7e650) = 299 [pid 296] <... chdir resumed>) = 0 [pid 296] unshare(CLONE_NEWPID [pid 295] <... clone resumed>, child_tidptr=0x555555a7e650) = 300 [pid 296] <... unshare resumed>) = 0 [pid 296] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 298] <... clone resumed>, child_tidptr=0x555555a7e650) = 301 [pid 296] <... clone resumed>, child_tidptr=0x555555a7e650) = 302 ./strace-static-x86_64: Process 302 attached [pid 302] set_robust_list(0x555555a7e660, 24) = 0 [pid 302] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 297] <... mkdir resumed>) = 0 [pid 297] chmod("./syzkaller.PlKtZv", 0777./strace-static-x86_64: Process 300 attached ./strace-static-x86_64: Process 301 attached ./strace-static-x86_64: Process 299 attached [pid 302] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 300] set_robust_list(0x555555a7e660, 24 [pid 297] <... chmod resumed>) = 0 [pid 297] chdir("./syzkaller.PlKtZv") = 0 [pid 297] unshare(CLONE_NEWPID) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555a7e650) = 303 [pid 300] <... set_robust_list resumed>) = 0 [pid 300] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 300] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 300] setsid() = 1 [pid 300] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 300] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 300] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 300] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 300] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 300] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 300] unshare(CLONE_NEWNS) = 0 [pid 299] set_robust_list(0x555555a7e660, 24) = 0 [pid 299] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 300] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 299] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 299] setsid() = 1 [pid 299] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 301] set_robust_list(0x555555a7e660, 24 [pid 299] <... prlimit64 resumed>NULL) = 0 [pid 299] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 301] <... set_robust_list resumed>) = 0 [pid 299] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 301] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 299] <... prlimit64 resumed>NULL) = 0 [pid 300] unshare(CLONE_NEWIPC [pid 299] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 300] <... unshare resumed>) = -1 EINVAL (Invalid argument) [pid 299] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 300] unshare(CLONE_NEWCGROUP) = 0 [pid 299] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 300] unshare(CLONE_NEWUTS) = 0 [pid 299] unshare(CLONE_NEWNS) = 0 [pid 301] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 300] unshare(CLONE_SYSVSEM) = 0 [pid 300] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 301] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 302] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 301] setsid() = 1 [pid 302] <... prctl resumed>) = 0 [pid 302] setsid( [pid 301] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 302] <... setsid resumed>) = 1 [pid 301] <... prlimit64 resumed>NULL) = 0 [pid 302] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 300] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 301] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 302] <... prlimit64 resumed>NULL) = 0 [pid 301] <... prlimit64 resumed>NULL) = 0 [pid 302] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 301] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 302] <... prlimit64 resumed>NULL) = 0 [pid 301] <... prlimit64 resumed>NULL) = 0 [pid 302] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 301] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 302] <... prlimit64 resumed>NULL) = 0 [pid 301] <... prlimit64 resumed>NULL) = 0 [pid 302] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 301] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 302] <... prlimit64 resumed>NULL) = 0 [pid 300] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 301] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 302] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 301] <... prlimit64 resumed>NULL) = 0 [pid 302] <... prlimit64 resumed>NULL) = 0 [pid 300] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 301] unshare(CLONE_NEWNS [pid 302] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 299] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 301] <... unshare resumed>) = 0 [pid 302] <... prlimit64 resumed>NULL) = 0 [pid 299] <... mount resumed>) = 0 [pid 302] unshare(CLONE_NEWNS) = 0 [pid 299] unshare(CLONE_NEWIPC) = -1 EINVAL (Invalid argument) [pid 300] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 299] unshare(CLONE_NEWCGROUP [pid 300] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 299] <... unshare resumed>) = 0 [pid 299] unshare(CLONE_NEWUTS) = 0 [pid 300] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 299] unshare(CLONE_SYSVSEM) = 0 [pid 299] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 300] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 302] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 300] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 302] <... mount resumed>) = 0 [pid 301] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 302] unshare(CLONE_NEWIPC [pid 301] unshare(CLONE_NEWIPC [pid 302] <... unshare resumed>) = -1 EINVAL (Invalid argument) [pid 301] <... unshare resumed>) = -1 EINVAL (Invalid argument) [pid 299] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 302] unshare(CLONE_NEWCGROUP [pid 300] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 301] unshare(CLONE_NEWCGROUP [pid 302] <... unshare resumed>) = 0 [pid 300] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 301] <... unshare resumed>) = 0 [pid 302] unshare(CLONE_NEWUTS [pid 301] unshare(CLONE_NEWUTS [pid 302] <... unshare resumed>) = 0 [pid 301] <... unshare resumed>) = 0 [pid 300] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 299] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 302] unshare(CLONE_SYSVSEM [pid 301] unshare(CLONE_SYSVSEM [pid 300] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 299] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 302] <... unshare resumed>) = 0 [pid 301] <... unshare resumed>) = 0 [pid 300] getpid( [pid 299] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 303 attached [pid 302] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 301] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 300] <... getpid resumed>) = 1 [pid 299] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 303] set_robust_list(0x555555a7e660, 24) = 0 [pid 303] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 302] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 303] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 301] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 300] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 302] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 299] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 303] <... prctl resumed>) = 0 [pid 303] setsid() = 1 [pid 303] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 303] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 303] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 303] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 303] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 303] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 303] unshare(CLONE_NEWNS) = 0 [pid 303] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 303] unshare(CLONE_NEWIPC) = -1 EINVAL (Invalid argument) [pid 303] unshare(CLONE_NEWCGROUP) = 0 [pid 303] unshare(CLONE_NEWUTS) = 0 [pid 303] unshare(CLONE_SYSVSEM) = 0 [pid 303] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 303] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 300] <... capget resumed>{effective=1< [pid 299] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 300] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 302] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 301] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 302] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 300] <... capset resumed>) = 0 [pid 299] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 303] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 300] unshare(CLONE_NEWNET [pid 303] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 299] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 303] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 303] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 303] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 303] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 303] getpid() = 1 [pid 303] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 302] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 301] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 300] <... unshare resumed>) = 0 [pid 299] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 302] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 301] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 299] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 302] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 301] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 299] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 302] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 301] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 299] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 302] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 301] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 299] getpid( [pid 302] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 301] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 299] <... getpid resumed>) = 1 [pid 302] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 301] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [ 22.337642][ T30] audit: type=1400 audit(1713467213.415:70): avc: denied { mounton } for pid=302 comm="syz-executor190" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [pid 299] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 302] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 301] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 299] <... capget resumed>{effective=1<) = -1 ENOENT (No such file or directory) [pid 301] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 299] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 302] getpid( [pid 301] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 299] <... capset resumed>) = 0 [pid 302] <... getpid resumed>) = 1 [pid 301] getpid( [pid 299] unshare(CLONE_NEWNET [pid 302] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 301] <... getpid resumed>) = 1 [pid 302] <... capget resumed>{effective=1< [pid 302] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 301] <... capget resumed>{effective=1<) = 0 [pid 301] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 302] unshare(CLONE_NEWNET [pid 301] <... capset resumed>) = 0 [pid 303] <... unshare resumed>) = 0 [pid 301] unshare(CLONE_NEWNET [pid 300] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 303] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 300] <... openat resumed>) = 3 [pid 303] <... openat resumed>) = 3 [pid 300] write(3, "0 65535", 7 [pid 303] write(3, "0 65535", 7) = 7 [pid 300] <... write resumed>) = 7 [pid 303] close(3 [pid 300] close(3 [pid 303] <... close resumed>) = 0 [pid 300] <... close resumed>) = 0 [pid 303] mkdir("/dev/binderfs", 0777 [pid 300] mkdir("/dev/binderfs", 0777 [pid 303] <... mkdir resumed>) = 0 [pid 300] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 303] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 300] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 303] <... mount resumed>) = 0 [pid 303] getpid( [pid 300] <... mount resumed>) = 0 [ 22.361544][ T30] audit: type=1400 audit(1713467213.415:71): avc: denied { mount } for pid=302 comm="syz-executor190" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 22.408604][ T30] audit: type=1400 audit(1713467213.415:72): avc: denied { mounton } for pid=300 comm="syz-executor190" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [pid 299] <... unshare resumed>) = 0 [pid 302] <... unshare resumed>) = 0 [pid 299] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3 [pid 302] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3 [pid 299] write(3, "0 65535", 7) = 7 [pid 299] close(3) = 0 [pid 302] write(3, "0 65535", 7 [pid 299] mkdir("/dev/binderfs", 0777 [pid 302] <... write resumed>) = 7 [pid 299] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 302] close(3) = 0 [pid 299] mount("binder", "/dev/binderfs", "binder", 0, NULL) = 0 [pid 302] mkdir("/dev/binderfs", 0777) = -1 EEXIST (File exists) [pid 302] mount("binder", "/dev/binderfs", "binder", 0, NULL) = 0 [pid 299] getpid() = 1 [pid 299] mkdir("/syzcgroup/unified/syz0", 0777 [pid 302] getpid() = 1 [pid 302] mkdir("/syzcgroup/unified/syz2", 0777 [pid 299] <... mkdir resumed>) = 0 [pid 302] <... mkdir resumed>) = 0 [pid 302] openat(AT_FDCWD, "/syzcgroup/unified/syz2/pids.max", O_WRONLY|O_CLOEXEC) = 3 [pid 302] write(3, "32", 2 [pid 299] openat(AT_FDCWD, "/syzcgroup/unified/syz0/pids.max", O_WRONLY|O_CLOEXEC [pid 302] <... write resumed>) = 2 [pid 299] <... openat resumed>) = 3 [pid 302] close(3) = 0 [pid 302] openat(AT_FDCWD, "/syzcgroup/unified/syz2/cgroup.procs", O_WRONLY|O_CLOEXEC) = 3 [pid 303] <... getpid resumed>) = 1 [pid 300] getpid( [pid 303] mkdir("/syzcgroup/unified/syz3", 0777 [pid 300] <... getpid resumed>) = 1 [pid 300] mkdir("/syzcgroup/unified/syz1", 0777 [pid 299] write(3, "32", 2 [pid 303] <... mkdir resumed>) = 0 [pid 299] <... write resumed>) = 2 [pid 300] <... mkdir resumed>) = 0 [pid 303] openat(AT_FDCWD, "/syzcgroup/unified/syz3/pids.max", O_WRONLY|O_CLOEXEC [pid 300] openat(AT_FDCWD, "/syzcgroup/unified/syz1/pids.max", O_WRONLY|O_CLOEXEC) = 3 [pid 303] <... openat resumed>) = 3 [pid 300] write(3, "32", 2 [pid 299] close(3 [pid 300] <... write resumed>) = 2 [pid 303] write(3, "32", 2 [pid 300] close(3) = 0 [pid 303] <... write resumed>) = 2 [pid 300] openat(AT_FDCWD, "/syzcgroup/unified/syz1/cgroup.procs", O_WRONLY|O_CLOEXEC) = 3 [pid 303] close(3 [pid 300] write(3, "1", 1) = 1 [pid 303] <... close resumed>) = 0 [pid 300] close(3) = 0 [pid 303] openat(AT_FDCWD, "/syzcgroup/unified/syz3/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 300] mkdir("/syzcgroup/cpu/syz1", 0777 [pid 303] <... openat resumed>) = 3 [pid 302] write(3, "1", 1 [pid 300] <... mkdir resumed>) = 0 [pid 303] write(3, "1", 1 [pid 300] openat(AT_FDCWD, "/syzcgroup/cpu/syz1/cgroup.procs", O_WRONLY|O_CLOEXEC) = 3 [pid 300] write(3, "1", 1 [pid 299] <... close resumed>) = 0 [pid 299] openat(AT_FDCWD, "/syzcgroup/unified/syz0/cgroup.procs", O_WRONLY|O_CLOEXEC) = 3 [pid 299] write(3, "1", 1 [pid 303] <... write resumed>) = 1 [pid 302] <... write resumed>) = 1 [pid 303] close(3 [pid 300] <... write resumed>) = 1 [pid 303] <... close resumed>) = 0 [pid 302] close(3 [pid 300] close(3 [pid 303] mkdir("/syzcgroup/cpu/syz3", 0777 [pid 300] <... close resumed>) = 0 [pid 302] <... close resumed>) = 0 [pid 302] mkdir("/syzcgroup/cpu/syz2", 0777 [pid 303] <... mkdir resumed>) = 0 [pid 302] <... mkdir resumed>) = 0 [pid 300] openat(AT_FDCWD, "/syzcgroup/cpu/syz1/memory.soft_limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 303] openat(AT_FDCWD, "/syzcgroup/cpu/syz3/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 302] openat(AT_FDCWD, "/syzcgroup/cpu/syz2/cgroup.procs", O_WRONLY|O_CLOEXEC) = 3 [pid 303] <... openat resumed>) = 3 [pid 300] <... openat resumed>) = 3 [pid 303] write(3, "1", 1 [pid 300] write(3, "313524224", 9 [pid 302] write(3, "1", 1 [pid 303] <... write resumed>) = 1 [pid 300] <... write resumed>) = 9 [pid 303] close(3 [pid 300] close(3 [pid 303] <... close resumed>) = 0 [pid 302] <... write resumed>) = 1 [pid 300] <... close resumed>) = 0 [pid 303] openat(AT_FDCWD, "/syzcgroup/cpu/syz3/memory.soft_limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 300] openat(AT_FDCWD, "/syzcgroup/cpu/syz1/memory.limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 302] close(3 [pid 303] <... openat resumed>) = 3 [pid 302] <... close resumed>) = 0 [pid 302] openat(AT_FDCWD, "/syzcgroup/cpu/syz2/memory.soft_limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 303] write(3, "313524224", 9 [pid 300] <... openat resumed>) = 3 [pid 303] <... write resumed>) = 9 [pid 300] write(3, "314572800", 9 [pid 303] close(3 [pid 300] <... write resumed>) = 9 [pid 303] <... close resumed>) = 0 [pid 300] close(3 [pid 303] openat(AT_FDCWD, "/syzcgroup/cpu/syz3/memory.limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 300] <... close resumed>) = 0 [pid 303] <... openat resumed>) = 3 [pid 302] <... openat resumed>) = 3 [pid 300] mkdir("/syzcgroup/net/syz1", 0777 [pid 303] write(3, "314572800", 9 [pid 302] write(3, "313524224", 9) = 9 [pid 302] close(3) = 0 [pid 302] openat(AT_FDCWD, "/syzcgroup/cpu/syz2/memory.limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 303] <... write resumed>) = 9 [pid 302] <... openat resumed>) = 3 [pid 303] close(3 [pid 302] write(3, "314572800", 9 [pid 303] <... close resumed>) = 0 [pid 303] mkdir("/syzcgroup/net/syz3", 0777 [pid 302] <... write resumed>) = 9 [pid 302] close(3) = 0 [pid 302] mkdir("/syzcgroup/net/syz2", 0777 [pid 300] <... mkdir resumed>) = 0 [pid 303] <... mkdir resumed>) = 0 [pid 300] openat(AT_FDCWD, "/syzcgroup/net/syz1/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 303] openat(AT_FDCWD, "/syzcgroup/net/syz3/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 302] <... mkdir resumed>) = 0 [pid 299] <... write resumed>) = 1 [pid 302] openat(AT_FDCWD, "/syzcgroup/net/syz2/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 300] <... openat resumed>) = 3 [pid 299] close(3 [pid 303] <... openat resumed>) = 3 [pid 302] <... openat resumed>) = 3 [pid 300] write(3, "1", 1 [pid 299] <... close resumed>) = 0 [pid 303] write(3, "1", 1 [pid 302] write(3, "1", 1 [pid 299] mkdir("/syzcgroup/cpu/syz0", 0777 [pid 303] <... write resumed>) = 1 [pid 302] <... write resumed>) = 1 [pid 300] <... write resumed>) = 1 [pid 299] <... mkdir resumed>) = 0 [pid 303] close(3 [pid 302] close(3 [pid 300] close(3 [pid 299] openat(AT_FDCWD, "/syzcgroup/cpu/syz0/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 303] <... close resumed>) = 0 [pid 302] <... close resumed>) = 0 [pid 300] <... close resumed>) = 0 [pid 299] <... openat resumed>) = 3 [pid 303] mkdir("./0", 0777 [pid 302] mkdir("./0", 0777 [pid 300] mkdir("./0", 0777 [pid 299] write(3, "1", 1 [pid 303] <... mkdir resumed>) = 0 [pid 302] <... mkdir resumed>) = 0 [pid 299] <... write resumed>) = 1 [pid 303] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 300] <... mkdir resumed>) = 0 [pid 299] close(3./strace-static-x86_64: Process 304 attached ./strace-static-x86_64: Process 305 attached [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 299] <... close resumed>) = 0 [pid 305] set_robust_list(0x555555a7e660, 24 [pid 304] set_robust_list(0x555555a7e660, 24 [pid 303] <... clone resumed>, child_tidptr=0x555555a7e650) = 2 [pid 302] <... clone resumed>, child_tidptr=0x555555a7e650) = 2 [pid 299] openat(AT_FDCWD, "/syzcgroup/cpu/syz0/memory.soft_limit_in_bytes", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 306 attached [pid 305] <... set_robust_list resumed>) = 0 [pid 304] <... set_robust_list resumed>) = 0 [pid 299] <... openat resumed>) = 3 [pid 306] set_robust_list(0x555555a7e660, 24 [pid 305] chdir("./0" [pid 304] chdir("./0" [pid 301] <... unshare resumed>) = 0 [pid 299] write(3, "313524224", 9 [pid 306] <... set_robust_list resumed>) = 0 [pid 304] <... chdir resumed>) = 0 [pid 299] <... write resumed>) = 9 [pid 306] chdir("./0" [pid 304] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 299] close(3 [pid 306] <... chdir resumed>) = 0 [pid 304] <... prctl resumed>) = 0 [pid 299] <... close resumed>) = 0 [pid 306] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 304] setpgid(0, 0 [pid 299] openat(AT_FDCWD, "/syzcgroup/cpu/syz0/memory.limit_in_bytes", O_WRONLY|O_CLOEXEC [pid 306] <... prctl resumed>) = 0 [pid 304] <... setpgid resumed>) = 0 [pid 299] <... openat resumed>) = 3 [pid 306] setpgid(0, 0 [pid 304] symlink("/syzcgroup/unified/syz3", "./cgroup" [pid 299] write(3, "314572800", 9 [pid 306] <... setpgid resumed>) = 0 [pid 304] <... symlink resumed>) = 0 [pid 299] <... write resumed>) = 9 [pid 306] symlink("/syzcgroup/unified/syz1", "./cgroup" [pid 304] symlink("/syzcgroup/cpu/syz3", "./cgroup.cpu" [pid 299] close(3 [pid 306] <... symlink resumed>) = 0 [pid 304] <... symlink resumed>) = 0 [pid 299] <... close resumed>) = 0 [pid 306] symlink("/syzcgroup/cpu/syz1", "./cgroup.cpu" [pid 304] symlink("/syzcgroup/net/syz3", "./cgroup.net" [pid 299] mkdir("/syzcgroup/net/syz0", 0777 [pid 306] <... symlink resumed>) = 0 [pid 304] <... symlink resumed>) = 0 [pid 299] <... mkdir resumed>) = 0 [pid 306] symlink("/syzcgroup/net/syz1", "./cgroup.net" [pid 304] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 299] openat(AT_FDCWD, "/syzcgroup/net/syz0/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 306] <... symlink resumed>) = 0 [pid 304] <... openat resumed>) = 3 [pid 299] <... openat resumed>) = 3 [pid 306] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 304] write(3, "1000", 4 [pid 299] write(3, "1", 1 [pid 306] <... openat resumed>) = 3 [pid 304] <... write resumed>) = 4 [pid 299] <... write resumed>) = 1 [pid 306] write(3, "1000", 4 [pid 304] close(3 [pid 299] close(3 [pid 306] <... write resumed>) = 4 [pid 304] <... close resumed>) = 0 [pid 299] <... close resumed>) = 0 [pid 306] close(3 [pid 304] symlink("/dev/binderfs", "./binderfs" [pid 299] mkdir("./0", 0777 [pid 306] <... close resumed>) = 0 [pid 304] <... symlink resumed>) = 0 [pid 299] <... mkdir resumed>) = 0 [pid 306] symlink("/dev/binderfs", "./binderfs" [pid 304] mkdirat(AT_FDCWD, "./cgroup.net/syz0", 0777 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 307 attached [pid 306] <... symlink resumed>) = 0 [pid 304] <... mkdirat resumed>) = 0 [pid 307] set_robust_list(0x555555a7e660, 24 [ 22.433065][ T30] audit: type=1400 audit(1713467213.515:73): avc: denied { mounton } for pid=303 comm="syz-executor190" path="/dev/binderfs" dev="devtmpfs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [pid 306] mkdirat(AT_FDCWD, "./cgroup.net/syz0", 0777 [pid 304] openat(AT_FDCWD, "./cgroup.net/syz0", O_RDWR|O_PATH [pid 299] <... clone resumed>, child_tidptr=0x555555a7e650) = 2 [pid 307] <... set_robust_list resumed>) = 0 [pid 306] <... mkdirat resumed>) = 0 [pid 304] <... openat resumed>) = 3 [pid 307] chdir("./0" [pid 306] openat(AT_FDCWD, "./cgroup.net/syz0", O_RDWR|O_PATH [pid 304] openat(3, "freezer.state", O_RDWR [pid 307] <... chdir resumed>) = 0 [pid 306] <... openat resumed>) = 3 [pid 304] <... openat resumed>) = 4 [pid 307] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 306] openat(3, "freezer.state", O_RDWR [pid 304] openat(3, "tasks", O_RDWR [pid 307] <... prctl resumed>) = 0 [pid 306] <... openat resumed>) = 4 [pid 304] <... openat resumed>) = 5 [pid 307] setpgid(0, 0 [pid 306] openat(3, "tasks", O_RDWR [pid 304] write(5, "0x0000000000000000", 18 [pid 307] <... setpgid resumed>) = 0 [pid 306] <... openat resumed>) = 5 [pid 304] <... write resumed>) = 18 [pid 307] symlink("/syzcgroup/unified/syz0", "./cgroup" [pid 306] write(5, "0x0000000000000000", 18 [pid 304] write(5, "0x0000000000000000", 18 [pid 307] <... symlink resumed>) = 0 [pid 306] <... write resumed>) = 18 [pid 304] <... write resumed>) = 18 [pid 307] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu" [pid 306] write(5, "0x0000000000000000", 18 [pid 304] write(4, "\x46\x52\x4f\x5a\x45\x4e\x00", 7 [pid 307] <... symlink resumed>) = 0 [pid 306] <... write resumed>) = 18 [pid 304] <... write resumed>) = 7 [pid 307] symlink("/syzcgroup/net/syz0", "./cgroup.net" [pid 306] write(4, "\x46\x52\x4f\x5a\x45\x4e\x00", 7 [pid 307] <... symlink resumed>) = 0 [pid 306] <... write resumed>) = 7 [pid 307] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 305] <... chdir resumed>) = 0 [pid 301] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 300] <... clone resumed>, child_tidptr=0x555555a7e650) = 2 [pid 307] <... openat resumed>) = 3 [pid 305] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 301] <... openat resumed>) = 3 [pid 307] write(3, "1000", 4 [pid 305] <... prctl resumed>) = 0 [pid 301] write(3, "0 65535", 7 [pid 307] <... write resumed>) = 4 [pid 305] setpgid(0, 0 [pid 301] <... write resumed>) = 7 [pid 307] close(3 [pid 305] <... setpgid resumed>) = 0 [pid 301] close(3 [pid 307] <... close resumed>) = 0 [pid 305] symlink("/syzcgroup/unified/syz2", "./cgroup" [pid 301] <... close resumed>) = 0 [pid 307] symlink("/dev/binderfs", "./binderfs") = 0 [pid 305] <... symlink resumed>) = 0 [pid 301] mkdir("/dev/binderfs", 0777 [pid 307] mkdirat(AT_FDCWD, "./cgroup.net/syz0", 0777 [pid 305] symlink("/syzcgroup/cpu/syz2", "./cgroup.cpu") = 0 [pid 301] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 307] <... mkdirat resumed>) = 0 [pid 305] symlink("/syzcgroup/net/syz2", "./cgroup.net" [pid 301] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 307] openat(AT_FDCWD, "./cgroup.net/syz0", O_RDWR|O_PATH) = 3 [pid 307] openat(3, "freezer.state", O_RDWR) = 4 [pid 307] openat(3, "tasks", O_RDWR) = 5 [pid 301] <... mount resumed>) = 0 [pid 307] write(5, "0x0000000000000000", 18) = 18 [pid 305] <... symlink resumed>) = 0 [pid 301] getpid( [pid 307] write(5, "0x0000000000000000", 18 [pid 305] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 301] <... getpid resumed>) = 1 [pid 307] <... write resumed>) = 18 [pid 307] write(4, "\x46\x52\x4f\x5a\x45\x4e\x00", 7 [pid 305] <... openat resumed>) = 3 [pid 307] <... write resumed>) = 7 [pid 301] mkdir("/syzcgroup/unified/syz4", 0777 [pid 305] write(3, "1000", 4) = 4 [pid 301] <... mkdir resumed>) = 0 [pid 305] close(3 [pid 301] openat(AT_FDCWD, "/syzcgroup/unified/syz4/pids.max", O_WRONLY|O_CLOEXEC [pid 305] <... close resumed>) = 0 [pid 301] <... openat resumed>) = 3 [pid 305] symlink("/dev/binderfs", "./binderfs" [pid 301] write(3, "32", 2 [pid 305] <... symlink resumed>) = 0 [pid 301] <... write resumed>) = 2 [pid 305] mkdirat(AT_FDCWD, "./cgroup.net/syz0", 0777 [pid 301] close(3 [pid 305] <... mkdirat resumed>) = 0 [pid 301] <... close resumed>) = 0 [pid 305] openat(AT_FDCWD, "./cgroup.net/syz0", O_RDWR|O_PATH [pid 301] openat(AT_FDCWD, "/syzcgroup/unified/syz4/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 305] <... openat resumed>) = 3 [pid 301] <... openat resumed>) = 3 [pid 305] openat(3, "freezer.state", O_RDWR [pid 301] write(3, "1", 1 [pid 305] <... openat resumed>) = 4 [pid 301] <... write resumed>) = 1 [pid 305] openat(3, "tasks", O_RDWR [pid 301] close(3 [pid 305] <... openat resumed>) = 5 [pid 301] <... close resumed>) = 0 [pid 305] write(5, "0x0000000000000000", 18 [pid 301] mkdir("/syzcgroup/cpu/syz4", 0777 [pid 305] <... write resumed>) = 18 [pid 305] write(5, "0x0000000000000000", 18) = 18 [pid 301] <... mkdir resumed>) = 0 [pid 305] write(4, "\x46\x52\x4f\x5a\x45\x4e\x00", 7 [pid 301] openat(AT_FDCWD, "/syzcgroup/cpu/syz4/cgroup.procs", O_WRONLY|O_CLOEXEC [pid 305] <... write resumed>) = 7 [pid 301] <... openat resumed>) = 3 [pid 301] write(3, "1", 1) = 1 [pid 301] close(3) = 0 [pid 301] openat(AT_FDCWD, "/syzcgroup/cpu/syz4/memory.soft_limit_in_bytes", O_WRONLY|O_CLOEXEC) = 3 [pid 301] write(3, "313524224", 9) = 9 [pid 301] close(3) = 0 [pid 301] openat(AT_FDCWD, "/syzcgroup/cpu/syz4/memory.limit_in_bytes", O_WRONLY|O_CLOEXEC) = 3 [pid 301] write(3, "314572800", 9) = 9 [pid 301] close(3) = 0 [pid 301] mkdir("/syzcgroup/net/syz4", 0777) = 0 [pid 301] openat(AT_FDCWD, "/syzcgroup/net/syz4/cgroup.procs", O_WRONLY|O_CLOEXEC) = 3 [pid 301] write(3, "1", 1) = 1 [pid 301] close(3) = 0 [pid 301] mkdir("./0", 0777) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 308 attached , child_tidptr=0x555555a7e650) = 2 [pid 308] set_robust_list(0x555555a7e660, 24) = 0 [pid 308] chdir("./0") = 0 [pid 308] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 308] setpgid(0, 0) = 0 [pid 308] symlink("/syzcgroup/unified/syz4", "./cgroup") = 0 [pid 308] symlink("/syzcgroup/cpu/syz4", "./cgroup.cpu") = 0 [pid 308] symlink("/syzcgroup/net/syz4", "./cgroup.net") = 0 [pid 308] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 308] write(3, "1000", 4) = 4 [pid 308] close(3) = 0 [pid 308] symlink("/dev/binderfs", "./binderfs") = 0 [pid 308] mkdirat(AT_FDCWD, "./cgroup.net/syz0", 0777) = 0 [pid 308] openat(AT_FDCWD, "./cgroup.net/syz0", O_RDWR|O_PATH) = 3 [pid 308] openat(3, "freezer.state", O_RDWR) = 4 [pid 308] openat(3, "tasks", O_RDWR) = 5 [pid 308] write(5, "0x0000000000000000", 18) = 18 [pid 308] write(5, "0x0000000000000000", 18) = 18 [pid 308] write(4, "\x46\x52\x4f\x5a\x45\x4e\x00", 7) = 7 [ 22.473508][ T30] audit: type=1400 audit(1713467213.515:74): avc: denied { mount } for pid=303 comm="syz-executor190" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [pid 303] kill(-2, SIGKILL [pid 302] kill(-2, SIGKILL [pid 303] <... kill resumed>) = 0 [pid 303] kill(2, SIGKILL) = 0 [pid 302] <... kill resumed>) = 0 [pid 302] kill(2, SIGKILL) = 0 [pid 299] kill(-2, SIGKILL) = 0 [pid 299] kill(2, SIGKILL) = 0 [pid 300] kill(-2, SIGKILL) = 0 [pid 300] kill(2, SIGKILL) = 0 [pid 301] kill(-2, SIGKILL) = 0 [pid 301] kill(2, SIGKILL) = 0 [pid 302] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 302] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 302] getdents64(3, 0x555555a7f6f0 /* 2 entries */, 32768) = 48 [pid 302] getdents64(3, 0x555555a7f6f0 /* 0 entries */, 32768) = 0 [pid 302] close(3) = 0 [pid 303] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 303] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 303] getdents64(3, 0x555555a7f6f0 /* 2 entries */, 32768) = 48 [pid 303] getdents64(3, 0x555555a7f6f0 /* 0 entries */, 32768) = 0 [pid 303] close(3) = 0 [pid 299] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 299] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 299] getdents64(3, 0x555555a7f6f0 /* 2 entries */, 32768) = 48 [pid 299] getdents64(3, 0x555555a7f6f0 /* 0 entries */, 32768) = 0 [pid 299] close(3) = 0 [pid 300] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 300] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 300] getdents64(3, 0x555555a7f6f0 /* 2 entries */, 32768) = 48 [pid 300] getdents64(3, 0x555555a7f6f0 /* 0 entries */, 32768) = 0 [pid 300] close(3) = 0 [pid 301] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 301] newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 301] getdents64(3, 0x555555a7f6f0 /* 2 entries */, 32768) = 48 [pid 301] getdents64(3, 0x555555a7f6f0 /* 0 entries */, 32768) = 0 [pid 301] close(3) = 0