./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1526320816 <...> Warning: Permanently added '10.128.0.240' (ED25519) to the list of known hosts. execve("./syz-executor1526320816", ["./syz-executor1526320816"], 0x7ffc59321f60 /* 10 vars */) = 0 brk(NULL) = 0x555556d54000 brk(0x555556d54e00) = 0x555556d54e00 arch_prctl(ARCH_SET_FS, 0x555556d54480) = 0 set_tid_address(0x555556d54750) = 308 set_robust_list(0x555556d54760, 24) = 0 rseq(0x555556d54da0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1526320816", 4096) = 28 getrandom("\xab\x4d\xd6\x12\x01\xc4\x24\x08", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556d54e00 brk(0x555556d75e00) = 0x555556d75e00 brk(0x555556d76000) = 0x555556d76000 mprotect(0x7ffbdd8b1000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 getpid() = 308 openat(AT_FDCWD, "/sys/kernel/debug/x86/nmi_longest_ns", O_WRONLY|O_CLOEXEC) = 3 write(3, "10000000000", 11) = 11 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/hung_task_check_interval_secs", O_WRONLY|O_CLOEXEC) = 3 write(3, "20", 2) = 2 close(3) = 0 openat(AT_FDCWD, "/proc/sys/net/core/bpf_jit_kallsyms", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/net/core/bpf_jit_harden", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/kptr_restrict", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/softlockup_all_cpu_backtrace", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3 write(3, "100", 3) = 3 close(3) = 0 openat(AT_FDCWD, "/proc/sys/vm/oom_dump_tasks", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/debug/exception-trace", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/printk", O_WRONLY|O_CLOEXEC) = 3 write(3, "7 4 1 3", 7) = 7 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/keys/gc_delay", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/vm/oom_kill_allocating_task", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/ctrl-alt-del", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/cad_pid", O_WRONLY|O_CLOEXEC) = 3 write(3, "308", 3) = 3 close(3) = 0 mkdir("/syzcgroup", 0777) = 0 mkdir("/syzcgroup/unified", 0777) = 0 mount("none", "/syzcgroup/unified", "cgroup2", 0, NULL) = 0 chmod("/syzcgroup/unified", 0777) = 0 openat(AT_FDCWD, "/syzcgroup/unified/cgroup.subtree_control", O_WRONLY) = 3 write(3, "+cpu", 4) = 4 write(3, "+io", 3) = 3 write(3, "+pids", 5) = 5 close(3) = 0 mkdir("/syzcgroup/net", 0777) = 0 [ 39.697154][ T28] audit: type=1400 audit(1720427178.972:66): avc: denied { execmem } for pid=308 comm="syz-executor152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 39.717371][ T28] audit: type=1400 audit(1720427178.992:67): avc: denied { mounton } for pid=308 comm="syz-executor152" path="/syzcgroup/unified" dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 39.718155][ T308] cgroup: Unknown subsys name 'net' mount("none", "/syzcgroup/net", "cgroup", 0, "net") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "devices") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/net", "cgroup", 0, "blkio") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "freezer") = 0 umount2("/syzcgroup/net", 0) = 0 mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) [ 39.741120][ T28] audit: type=1400 audit(1720427178.992:68): avc: denied { mount } for pid=308 comm="syz-executor152" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 39.768114][ T28] audit: type=1400 audit(1720427179.032:69): avc: denied { unmount } for pid=308 comm="syz-executor152" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 39.769187][ T308] cgroup: Unknown subsys name 'devices' mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,blkio,freezer") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,blkio,freezer") = 0 chmod("/syzcgroup/net", 0777) = 0 mkdir("/syzcgroup/cpu", 0777) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "hugetlb") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/cpu", "cgroup", 0, "rlimit") = -1 EINVAL (Invalid argument) mount("none", "/syzcgroup/cpu", "cgroup", 0, "memory") = 0 umount2("/syzcgroup/cpu", 0) = 0 mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,memory") = ? ERESTARTNOINTR (To be restarted) [ 39.893518][ T308] cgroup: Unknown subsys name 'hugetlb' [ 39.899909][ T308] cgroup: Unknown subsys name 'rlimit' mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,memory") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,memory") = ? ERESTARTNOINTR (To be restarted) mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,memory") = 0 chmod("/syzcgroup/cpu", 0777) = 0 openat(AT_FDCWD, "/syzcgroup/cpu/cgroup.clone_children", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/syzcgroup/cpu/cpuset.memory_pressure_enabled", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 chmod("/dev/raw-gadget", 0666) = 0 swapoff("./swap-file") = -1 ENOENT (No such file or directory) unlink("./swap-file") = -1 ENOENT (No such file or directory) openat(AT_FDCWD, "./swap-file", O_WRONLY|O_CREAT|O_CLOEXEC, 0600) = 3 fallocate(3, FALLOC_FL_ZERO_RANGE, 0, 128000000) = 0 close(3) = 0 rt_sigaction(SIGINT, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 rt_sigaction(SIGQUIT, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, 8) = 0 rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0 mmap(NULL, 36864, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ffbdd7db000 rt_sigprocmask(SIG_BLOCK, ~[], [CHLD], 8) = 0 clone3({flags=CLONE_VM|CLONE_VFORK, exit_signal=SIGCHLD, stack=0x7ffbdd7db000, stack_size=0x9000}, 88./strace-static-x86_64: Process 309 attached [pid 309] rt_sigprocmask(SIG_BLOCK, NULL, ~[KILL STOP], 8) = 0 [pid 309] rt_sigaction(SIGHUP, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGHUP, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGINT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGQUIT, NULL, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, 8) = 0 [pid 309] rt_sigaction(SIGILL, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGILL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGTRAP, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGTRAP, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGABRT, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGABRT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGBUS, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGBUS, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGFPE, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGFPE, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGUSR1, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGUSR1, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGSEGV, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGSEGV, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGUSR2, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGUSR2, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGPIPE, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGPIPE, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGALRM, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGALRM, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGTERM, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGTERM, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGSTKFLT, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGSTKFLT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGCHLD, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGCHLD, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGCONT, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGCONT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGTSTP, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGTSTP, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGTTIN, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGTTIN, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGTTOU, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGTTOU, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGURG, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGURG, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGXCPU, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGXCPU, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGXFSZ, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGXFSZ, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGVTALRM, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGVTALRM, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGPROF, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGPROF, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGWINCH, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGWINCH, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGIO, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGIO, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGPWR, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGPWR, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGSYS, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGSYS, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGRT_2, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGRT_2, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGRT_3, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGRT_3, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGRT_4, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGRT_4, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGRT_5, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGRT_5, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGRT_6, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGRT_6, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGRT_7, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGRT_7, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGRT_8, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGRT_8, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGRT_9, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGRT_9, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGRT_10, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGRT_10, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGRT_11, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGRT_11, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGRT_12, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGRT_12, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGRT_13, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGRT_13, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGRT_14, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGRT_14, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGRT_15, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGRT_15, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGRT_16, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGRT_16, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGRT_17, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGRT_17, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGRT_18, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGRT_18, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGRT_19, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGRT_19, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGRT_20, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGRT_20, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGRT_21, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGRT_21, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGRT_22, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGRT_22, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGRT_23, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGRT_23, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGRT_24, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGRT_24, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGRT_25, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGRT_25, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGRT_26, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGRT_26, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGRT_27, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGRT_27, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGRT_28, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGRT_28, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGRT_29, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGRT_29, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGRT_30, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGRT_30, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGRT_31, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGRT_31, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGRT_32, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGRT_32, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 [pid 309] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 309] execve("/bin/sh", ["sh", "-c", "mkswap ./swap-file"], 0x7fff0b98b458 /* 10 vars */ [pid 308] <... clone3 resumed>) = 309 [pid 308] munmap(0x7ffbdd7db000, 36864) = 0 [pid 308] rt_sigprocmask(SIG_SETMASK, [CHLD], NULL, 8) = 0 [pid 309] <... execve resumed>) = 0 [pid 309] brk(NULL) = 0x55922b989000 [pid 309] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f171e2be000 [pid 309] access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) [pid 309] openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 309] openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v3/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 309] newfstatat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v3", 0x7ffca8569a80, 0) = -1 ENOENT (No such file or directory) [pid 309] openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v2/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 309] newfstatat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v2", 0x7ffca8569a80, 0) = -1 ENOENT (No such file or directory) [pid 309] openat(AT_FDCWD, "/lib64/tls/haswell/x86_64/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 309] newfstatat(AT_FDCWD, "/lib64/tls/haswell/x86_64", 0x7ffca8569a80, 0) = -1 ENOENT (No such file or directory) [pid 309] openat(AT_FDCWD, "/lib64/tls/haswell/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 309] newfstatat(AT_FDCWD, "/lib64/tls/haswell", 0x7ffca8569a80, 0) = -1 ENOENT (No such file or directory) [pid 309] openat(AT_FDCWD, "/lib64/tls/x86_64/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 309] newfstatat(AT_FDCWD, "/lib64/tls/x86_64", 0x7ffca8569a80, 0) = -1 ENOENT (No such file or directory) [pid 309] openat(AT_FDCWD, "/lib64/tls/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 309] newfstatat(AT_FDCWD, "/lib64/tls", 0x7ffca8569a80, 0) = -1 ENOENT (No such file or directory) [pid 309] openat(AT_FDCWD, "/lib64/haswell/x86_64/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 309] newfstatat(AT_FDCWD, "/lib64/haswell/x86_64", 0x7ffca8569a80, 0) = -1 ENOENT (No such file or directory) [pid 309] openat(AT_FDCWD, "/lib64/haswell/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 309] newfstatat(AT_FDCWD, "/lib64/haswell", 0x7ffca8569a80, 0) = -1 ENOENT (No such file or directory) [pid 309] openat(AT_FDCWD, "/lib64/x86_64/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 309] newfstatat(AT_FDCWD, "/lib64/x86_64", 0x7ffca8569a80, 0) = -1 ENOENT (No such file or directory) [pid 309] openat(AT_FDCWD, "/lib64/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = 3 [pid 309] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x70\x08\x01\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x28\x13\x0c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x09\x00\x40\x00\x19\x00\x18\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\xed\x00\x00"..., 832) = 832 [pid 309] pread64(3, "\x04\x00\x00\x00\x20\x00\x00\x00\x05\x00\x00\x00\x47\x4e\x55\x00\x01\x00\x01\xc0\x04\x00\x00\x00\x09\x00\x00\x00\x00\x00\x00\x00\x02\x00\x01\xc0\x04\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00", 48, 778504) = 48 [pid 309] newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=792936, ...}, AT_EMPTY_PATH) = 0 [pid 309] mmap(NULL, 796968, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f171e1fb000 [pid 309] mmap(0x7f171e20a000, 557056, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xf000) = 0x7f171e20a000 [pid 309] mmap(0x7f171e292000, 163840, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x97000) = 0x7f171e292000 [pid 309] mmap(0x7f171e2ba000, 16384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xbe000) = 0x7f171e2ba000 [pid 309] close(3) = 0 [pid 309] openat(AT_FDCWD, "/lib64/libc.so.6", O_RDONLY|O_CLOEXEC) = 3 [pid 309] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x8c\x87\x02\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x28\x32\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0e\x00\x40\x00\x3c\x00\x3b\x00\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00"..., 832) = 832 [pid 309] pread64(3, "\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\xa0\xf3\x16\x00\x00\x00\x00\x00\xa0\xf3\x16\x00\x00\x00\x00\x00\xa0\xf3\x16\x00\x00\x00\x00\x00\x1c\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00"..., 784, 64) = 784 [pid 309] pread64(3, "\x04\x00\x00\x00\x30\x00\x00\x00\x05\x00\x00\x00\x47\x4e\x55\x00\x02\x80\x00\xc0\x04\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x01\x00\x01\xc0\x04\x00\x00\x00\x3b\x08\x00\x00\x00\x00\x00\x00\x02\x00\x01\xc0\x04\x00\x00\x00\x0f\x00\x00\x00\x00\x00\x00\x00", 64, 848) = 64 [pid 309] pread64(3, "\x04\x00\x00\x00\x10\x00\x00\x00\x01\x00\x00\x00\x47\x4e\x55\x00\x00\x00\x00\x00\x04\x00\x00\x00\x13\x00\x00\x00\x00\x00\x00\x00", 32, 912) = 32 [pid 309] newfstatat(3, "", {st_mode=S_IFREG|0755, st_size=1720616, ...}, AT_EMPTY_PATH) = 0 [pid 309] pread64(3, "\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\xa0\xf3\x16\x00\x00\x00\x00\x00\xa0\xf3\x16\x00\x00\x00\x00\x00\xa0\xf3\x16\x00\x00\x00\x00\x00\x1c\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00"..., 784, 64) = 784 [pid 309] mmap(NULL, 1773008, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f171e04a000 [pid 309] mmap(0x7f171e072000, 1191936, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x28000) = 0x7f171e072000 [pid 309] mmap(0x7f171e195000, 339968, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x14b000) = 0x7f171e195000 [pid 309] mmap(0x7f171e1e8000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x19d000) = 0x7f171e1e8000 [pid 309] mmap(0x7f171e1ee000, 52688, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f171e1ee000 [pid 309] close(3) = 0 [pid 309] openat(AT_FDCWD, "/lib64/libresolv.so.2", O_RDONLY|O_CLOEXEC) = 3 [pid 309] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x58\x33\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x90\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0b\x00\x40\x00\x1c\x00\x1b\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe0\x2e\x00\x00"..., 832) = 832 [pid 309] newfstatat(3, "", {st_mode=S_IFREG|0755, st_size=51344, ...}, AT_EMPTY_PATH) = 0 [pid 309] mmap(NULL, 63624, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f171e03a000 [pid 309] mmap(0x7f171e03d000, 24576, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f171e03d000 [pid 309] mmap(0x7f171e043000, 12288, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x9000) = 0x7f171e043000 [pid 309] mmap(0x7f171e046000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7f171e046000 [pid 309] mmap(0x7f171e048000, 6280, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f171e048000 [pid 309] close(3) = 0 [pid 309] openat(AT_FDCWD, "/lib64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 309] openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v3/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 309] newfstatat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v3", 0x7ffca8569a20, 0) = -1 ENOENT (No such file or directory) [pid 309] openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v2/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 309] newfstatat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v2", 0x7ffca8569a20, 0) = -1 ENOENT (No such file or directory) [ 40.014556][ T28] audit: type=1400 audit(1720427179.292:70): avc: denied { setattr } for pid=308 comm="syz-executor152" name="raw-gadget" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [pid 309] openat(AT_FDCWD, "/usr/lib64/tls/haswell/x86_64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 309] newfstatat(AT_FDCWD, "/usr/lib64/tls/haswell/x86_64", 0x7ffca8569a20, 0) = -1 ENOENT (No such file or directory) [pid 309] openat(AT_FDCWD, "/usr/lib64/tls/haswell/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 309] newfstatat(AT_FDCWD, "/usr/lib64/tls/haswell", 0x7ffca8569a20, 0) = -1 ENOENT (No such file or directory) [pid 309] openat(AT_FDCWD, "/usr/lib64/tls/x86_64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 309] newfstatat(AT_FDCWD, "/usr/lib64/tls/x86_64", 0x7ffca8569a20, 0) = -1 ENOENT (No such file or directory) [pid 309] openat(AT_FDCWD, "/usr/lib64/tls/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 309] newfstatat(AT_FDCWD, "/usr/lib64/tls", 0x7ffca8569a20, 0) = -1 ENOENT (No such file or directory) [pid 309] openat(AT_FDCWD, "/usr/lib64/haswell/x86_64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 309] newfstatat(AT_FDCWD, "/usr/lib64/haswell/x86_64", 0x7ffca8569a20, 0) = -1 ENOENT (No such file or directory) [pid 309] openat(AT_FDCWD, "/usr/lib64/haswell/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 309] newfstatat(AT_FDCWD, "/usr/lib64/haswell", 0x7ffca8569a20, 0) = -1 ENOENT (No such file or directory) [pid 309] openat(AT_FDCWD, "/usr/lib64/x86_64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 309] newfstatat(AT_FDCWD, "/usr/lib64/x86_64", 0x7ffca8569a20, 0) = -1 ENOENT (No such file or directory) [pid 309] openat(AT_FDCWD, "/usr/lib64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = 3 [pid 309] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x88\x7f\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x70\x31\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0b\x00\x40\x00\x1f\x00\x1e\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x68\x6f\x00\x00"..., 832) = 832 [pid 309] pread64(3, "\x04\x00\x00\x00\x20\x00\x00\x00\x05\x00\x00\x00\x47\x4e\x55\x00\x01\x00\x01\xc0\x04\x00\x00\x00\x09\x00\x00\x00\x00\x00\x00\x00\x02\x00\x01\xc0\x04\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00", 48, 138152) = 48 [pid 309] newfstatat(3, "", {st_mode=S_IFREG|0755, st_size=145712, ...}, AT_EMPTY_PATH) = 0 [pid 309] mmap(NULL, 157200, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f171e013000 [pid 309] mprotect(0x7f171e01a000, 114688, PROT_NONE) = 0 [pid 309] mmap(0x7f171e01a000, 81920, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x7000) = 0x7f171e01a000 [pid 309] mmap(0x7f171e02e000, 28672, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1b000) = 0x7f171e02e000 [pid 309] mmap(0x7f171e036000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x22000) = 0x7f171e036000 [pid 309] mmap(0x7f171e038000, 5648, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f171e038000 [pid 309] close(3) = 0 [pid 309] openat(AT_FDCWD, "/lib64/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 309] openat(AT_FDCWD, "/usr/lib64/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = 3 [pid 309] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\xf8\x21\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x50\x32\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1a\x00\x19\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd8\x1f\x00\x00"..., 832) = 832 [pid 309] pread64(3, "\x04\x00\x00\x00\x20\x00\x00\x00\x05\x00\x00\x00\x47\x4e\x55\x00\x01\x00\x01\xc0\x04\x00\x00\x00\x09\x00\x00\x00\x00\x00\x00\x00\x02\x00\x01\xc0\x04\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00", 48, 336112) = 48 [pid 309] newfstatat(3, "", {st_mode=S_IFREG|0755, st_size=342224, ...}, AT_EMPTY_PATH) = 0 [pid 309] mmap(NULL, 344456, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f171dfbe000 [pid 309] mmap(0x7f171dfc0000, 180224, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f171dfc0000 [pid 309] mmap(0x7f171dfec000, 151552, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2e000) = 0x7f171dfec000 [pid 309] mmap(0x7f171e011000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x52000) = 0x7f171e011000 [pid 309] close(3) = 0 [pid 309] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f171dfbc000 [pid 309] arch_prctl(ARCH_SET_FS, 0x7f171dfbd380) = 0 [pid 309] set_tid_address(0x7f171dfbd650) = 309 [pid 309] set_robust_list(0x7f171dfbd660, 24) = 0 [pid 309] rseq(0x7f171dfbdd20, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) [pid 309] mprotect(0x7f171e1e8000, 16384, PROT_READ) = 0 [pid 309] mprotect(0x7f171e011000, 4096, PROT_READ) = 0 [pid 309] mprotect(0x7f171e036000, 4096, PROT_READ) = 0 [pid 309] mprotect(0x7f171e046000, 4096, PROT_READ) = 0 [pid 309] mprotect(0x7f171e2ba000, 12288, PROT_READ) = 0 [pid 309] mprotect(0x55922b0cf000, 4096, PROT_READ) = 0 [pid 309] mprotect(0x7f171e2ed000, 8192, PROT_READ) = 0 [pid 309] prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 [pid 309] statfs("/sys/fs/selinux", {f_type=SELINUX_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOSUID|ST_NOEXEC|ST_RELATIME}) = 0 [pid 309] statfs("/sys/fs/selinux", {f_type=SELINUX_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOSUID|ST_NOEXEC|ST_RELATIME}) = 0 [pid 309] getrandom("\xc0\x14\x45\x3d\x20\xf7\x70\x3f", 8, GRND_NONBLOCK) = 8 [pid 309] brk(NULL) = 0x55922b989000 [pid 309] brk(0x55922b9aa000) = 0x55922b9aa000 [pid 309] access("/etc/selinux/config", F_OK) = 0 [pid 309] getpid() = 309 [pid 309] rt_sigaction(SIGCHLD, {sa_handler=0x7f171e23dc61, sa_mask=~[RTMIN RT_1], sa_flags=SA_RESTORER, sa_restorer=0x7f171e081ad0}, NULL, 8) = 0 [pid 309] getppid() = 308 [pid 309] uname({sysname="Linux", nodename="syzkaller", ...}) = 0 [pid 309] newfstatat(AT_FDCWD, "/root", {st_mode=S_IFDIR|0700, st_size=4096, ...}, 0) = 0 [pid 309] newfstatat(AT_FDCWD, ".", {st_mode=S_IFDIR|0700, st_size=4096, ...}, 0) = 0 [pid 309] rt_sigaction(SIGINT, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGINT, {sa_handler=0x7f171e23dc61, sa_mask=~[RTMIN RT_1], sa_flags=SA_RESTORER, sa_restorer=0x7f171e081ad0}, NULL, 8) = 0 [pid 309] rt_sigaction(SIGQUIT, NULL, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] rt_sigaction(SIGTERM, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 309] newfstatat(AT_FDCWD, "/bin/mkswap", 0x7ffca856a308, 0) = -1 ENOENT (No such file or directory) [pid 309] newfstatat(AT_FDCWD, "/sbin/mkswap", {st_mode=S_IFREG|0755, st_size=14248, ...}, 0) = 0 [pid 309] execve("/sbin/mkswap", ["mkswap", "./swap-file"], 0x55922b9896f0 /* 10 vars */) = 0 [pid 309] brk(NULL) = 0x556e7c042000 [pid 309] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff371796000 [pid 309] access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) [pid 309] openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 309] openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v3/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 309] newfstatat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v3", 0x7fff7fa02df0, 0) = -1 ENOENT (No such file or directory) [pid 309] openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v2/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 309] newfstatat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v2", 0x7fff7fa02df0, 0) = -1 ENOENT (No such file or directory) [pid 309] openat(AT_FDCWD, "/lib64/tls/haswell/x86_64/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 309] newfstatat(AT_FDCWD, "/lib64/tls/haswell/x86_64", 0x7fff7fa02df0, 0) = -1 ENOENT (No such file or directory) [pid 309] openat(AT_FDCWD, "/lib64/tls/haswell/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 309] newfstatat(AT_FDCWD, "/lib64/tls/haswell", 0x7fff7fa02df0, 0) = -1 ENOENT (No such file or directory) [pid 309] openat(AT_FDCWD, "/lib64/tls/x86_64/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 309] newfstatat(AT_FDCWD, "/lib64/tls/x86_64", 0x7fff7fa02df0, 0) = -1 ENOENT (No such file or directory) [pid 309] openat(AT_FDCWD, "/lib64/tls/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 309] newfstatat(AT_FDCWD, "/lib64/tls", 0x7fff7fa02df0, 0) = -1 ENOENT (No such file or directory) [pid 309] openat(AT_FDCWD, "/lib64/haswell/x86_64/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 309] newfstatat(AT_FDCWD, "/lib64/haswell/x86_64", 0x7fff7fa02df0, 0) = -1 ENOENT (No such file or directory) [pid 309] openat(AT_FDCWD, "/lib64/haswell/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 309] newfstatat(AT_FDCWD, "/lib64/haswell", 0x7fff7fa02df0, 0) = -1 ENOENT (No such file or directory) [pid 309] openat(AT_FDCWD, "/lib64/x86_64/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 309] newfstatat(AT_FDCWD, "/lib64/x86_64", 0x7fff7fa02df0, 0) = -1 ENOENT (No such file or directory) [pid 309] openat(AT_FDCWD, "/lib64/libbusybox.so.1.35.0", O_RDONLY|O_CLOEXEC) = 3 [pid 309] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x70\x08\x01\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x28\x13\x0c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x09\x00\x40\x00\x19\x00\x18\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\xed\x00\x00"..., 832) = 832 [pid 309] pread64(3, "\x04\x00\x00\x00\x20\x00\x00\x00\x05\x00\x00\x00\x47\x4e\x55\x00\x01\x00\x01\xc0\x04\x00\x00\x00\x09\x00\x00\x00\x00\x00\x00\x00\x02\x00\x01\xc0\x04\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00", 48, 778504) = 48 [pid 309] newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=792936, ...}, AT_EMPTY_PATH) = 0 [pid 309] mmap(NULL, 796968, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7ff3716d3000 [pid 309] mmap(0x7ff3716e2000, 557056, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xf000) = 0x7ff3716e2000 [pid 309] mmap(0x7ff37176a000, 163840, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x97000) = 0x7ff37176a000 [pid 309] mmap(0x7ff371792000, 16384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xbe000) = 0x7ff371792000 [pid 309] close(3) = 0 [pid 309] openat(AT_FDCWD, "/lib64/libc.so.6", O_RDONLY|O_CLOEXEC) = 3 [pid 309] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x8c\x87\x02\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x28\x32\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0e\x00\x40\x00\x3c\x00\x3b\x00\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00"..., 832) = 832 [pid 309] pread64(3, "\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\xa0\xf3\x16\x00\x00\x00\x00\x00\xa0\xf3\x16\x00\x00\x00\x00\x00\xa0\xf3\x16\x00\x00\x00\x00\x00\x1c\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00"..., 784, 64) = 784 [pid 309] pread64(3, "\x04\x00\x00\x00\x30\x00\x00\x00\x05\x00\x00\x00\x47\x4e\x55\x00\x02\x80\x00\xc0\x04\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x01\x00\x01\xc0\x04\x00\x00\x00\x3b\x08\x00\x00\x00\x00\x00\x00\x02\x00\x01\xc0\x04\x00\x00\x00\x0f\x00\x00\x00\x00\x00\x00\x00", 64, 848) = 64 [pid 309] pread64(3, "\x04\x00\x00\x00\x10\x00\x00\x00\x01\x00\x00\x00\x47\x4e\x55\x00\x00\x00\x00\x00\x04\x00\x00\x00\x13\x00\x00\x00\x00\x00\x00\x00", 32, 912) = 32 [pid 309] newfstatat(3, "", {st_mode=S_IFREG|0755, st_size=1720616, ...}, AT_EMPTY_PATH) = 0 [pid 309] pread64(3, "\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\xa0\xf3\x16\x00\x00\x00\x00\x00\xa0\xf3\x16\x00\x00\x00\x00\x00\xa0\xf3\x16\x00\x00\x00\x00\x00\x1c\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00"..., 784, 64) = 784 [pid 309] mmap(NULL, 1773008, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7ff371522000 [pid 309] mmap(0x7ff37154a000, 1191936, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x28000) = 0x7ff37154a000 [pid 309] mmap(0x7ff37166d000, 339968, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x14b000) = 0x7ff37166d000 [pid 309] mmap(0x7ff3716c0000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x19d000) = 0x7ff3716c0000 [pid 309] mmap(0x7ff3716c6000, 52688, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7ff3716c6000 [pid 309] close(3) = 0 [pid 309] openat(AT_FDCWD, "/lib64/libresolv.so.2", O_RDONLY|O_CLOEXEC) = 3 [pid 309] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x58\x33\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x90\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0b\x00\x40\x00\x1c\x00\x1b\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe0\x2e\x00\x00"..., 832) = 832 [pid 309] newfstatat(3, "", {st_mode=S_IFREG|0755, st_size=51344, ...}, AT_EMPTY_PATH) = 0 [pid 309] mmap(NULL, 63624, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7ff371512000 [pid 309] mmap(0x7ff371515000, 24576, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7ff371515000 [pid 309] mmap(0x7ff37151b000, 12288, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x9000) = 0x7ff37151b000 [pid 309] mmap(0x7ff37151e000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7ff37151e000 [pid 309] mmap(0x7ff371520000, 6280, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7ff371520000 [pid 309] close(3) = 0 [pid 309] openat(AT_FDCWD, "/lib64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 309] openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v3/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 309] newfstatat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v3", 0x7fff7fa02d90, 0) = -1 ENOENT (No such file or directory) [pid 309] openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v2/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 309] newfstatat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v2", 0x7fff7fa02d90, 0) = -1 ENOENT (No such file or directory) [pid 309] openat(AT_FDCWD, "/usr/lib64/tls/haswell/x86_64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 309] newfstatat(AT_FDCWD, "/usr/lib64/tls/haswell/x86_64", 0x7fff7fa02d90, 0) = -1 ENOENT (No such file or directory) [pid 309] openat(AT_FDCWD, "/usr/lib64/tls/haswell/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 309] newfstatat(AT_FDCWD, "/usr/lib64/tls/haswell", 0x7fff7fa02d90, 0) = -1 ENOENT (No such file or directory) [pid 309] openat(AT_FDCWD, "/usr/lib64/tls/x86_64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 309] newfstatat(AT_FDCWD, "/usr/lib64/tls/x86_64", 0x7fff7fa02d90, 0) = -1 ENOENT (No such file or directory) [pid 309] openat(AT_FDCWD, "/usr/lib64/tls/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 309] newfstatat(AT_FDCWD, "/usr/lib64/tls", 0x7fff7fa02d90, 0) = -1 ENOENT (No such file or directory) [pid 309] openat(AT_FDCWD, "/usr/lib64/haswell/x86_64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 309] newfstatat(AT_FDCWD, "/usr/lib64/haswell/x86_64", 0x7fff7fa02d90, 0) = -1 ENOENT (No such file or directory) [pid 309] openat(AT_FDCWD, "/usr/lib64/haswell/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 309] newfstatat(AT_FDCWD, "/usr/lib64/haswell", 0x7fff7fa02d90, 0) = -1 ENOENT (No such file or directory) [pid 309] openat(AT_FDCWD, "/usr/lib64/x86_64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 309] newfstatat(AT_FDCWD, "/usr/lib64/x86_64", 0x7fff7fa02d90, 0) = -1 ENOENT (No such file or directory) [pid 309] openat(AT_FDCWD, "/usr/lib64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = 3 [pid 309] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x88\x7f\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x70\x31\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0b\x00\x40\x00\x1f\x00\x1e\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x68\x6f\x00\x00"..., 832) = 832 [pid 309] pread64(3, "\x04\x00\x00\x00\x20\x00\x00\x00\x05\x00\x00\x00\x47\x4e\x55\x00\x01\x00\x01\xc0\x04\x00\x00\x00\x09\x00\x00\x00\x00\x00\x00\x00\x02\x00\x01\xc0\x04\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00", 48, 138152) = 48 [pid 309] newfstatat(3, "", {st_mode=S_IFREG|0755, st_size=145712, ...}, AT_EMPTY_PATH) = 0 [pid 309] mmap(NULL, 157200, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7ff3714eb000 [pid 309] mprotect(0x7ff3714f2000, 114688, PROT_NONE) = 0 [pid 309] mmap(0x7ff3714f2000, 81920, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x7000) = 0x7ff3714f2000 [pid 309] mmap(0x7ff371506000, 28672, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1b000) = 0x7ff371506000 [pid 309] mmap(0x7ff37150e000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x22000) = 0x7ff37150e000 [pid 309] mmap(0x7ff371510000, 5648, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7ff371510000 [pid 309] close(3) = 0 [pid 309] openat(AT_FDCWD, "/lib64/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 309] openat(AT_FDCWD, "/usr/lib64/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = 3 [pid 309] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\xf8\x21\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x50\x32\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1a\x00\x19\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd8\x1f\x00\x00"..., 832) = 832 [pid 309] pread64(3, "\x04\x00\x00\x00\x20\x00\x00\x00\x05\x00\x00\x00\x47\x4e\x55\x00\x01\x00\x01\xc0\x04\x00\x00\x00\x09\x00\x00\x00\x00\x00\x00\x00\x02\x00\x01\xc0\x04\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00", 48, 336112) = 48 [pid 309] newfstatat(3, "", {st_mode=S_IFREG|0755, st_size=342224, ...}, AT_EMPTY_PATH) = 0 [pid 309] mmap(NULL, 344456, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7ff371496000 [pid 309] mmap(0x7ff371498000, 180224, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7ff371498000 [pid 309] mmap(0x7ff3714c4000, 151552, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2e000) = 0x7ff3714c4000 [pid 309] mmap(0x7ff3714e9000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x52000) = 0x7ff3714e9000 [pid 309] close(3) = 0 [pid 309] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff371494000 [pid 309] arch_prctl(ARCH_SET_FS, 0x7ff371495380) = 0 [pid 309] set_tid_address(0x7ff371495650) = 309 [pid 309] set_robust_list(0x7ff371495660, 24) = 0 [pid 309] rseq(0x7ff371495d20, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) [pid 309] mprotect(0x7ff3716c0000, 16384, PROT_READ) = 0 [pid 309] mprotect(0x7ff3714e9000, 4096, PROT_READ) = 0 [pid 309] mprotect(0x7ff37150e000, 4096, PROT_READ) = 0 [pid 309] mprotect(0x7ff37151e000, 4096, PROT_READ) = 0 [pid 309] mprotect(0x7ff371792000, 12288, PROT_READ) = 0 [pid 309] mprotect(0x556e7bb29000, 4096, PROT_READ) = 0 [pid 309] mprotect(0x7ff3717c5000, 8192, PROT_READ) = 0 [pid 309] prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 [pid 309] statfs("/sys/fs/selinux", {f_type=SELINUX_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOSUID|ST_NOEXEC|ST_RELATIME}) = 0 [pid 309] statfs("/sys/fs/selinux", {f_type=SELINUX_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOSUID|ST_NOEXEC|ST_RELATIME}) = 0 [pid 309] getrandom("\x33\xbb\x2f\xcd\xe6\x9d\xa2\x42", 8, GRND_NONBLOCK) = 8 [pid 309] brk(NULL) = 0x556e7c042000 [pid 309] brk(0x556e7c063000) = 0x556e7c063000 [pid 309] access("/etc/selinux/config", F_OK) = 0 [pid 309] openat(AT_FDCWD, "./swap-file", O_WRONLY) = 3 [pid 309] lseek(3, 0, SEEK_END) = 128000000 [pid 309] lseek(3, 0, SEEK_SET) = 0 [pid 309] newfstatat(1, "", {st_mode=S_IFIFO|0600, st_size=0, ...}, AT_EMPTY_PATH) = 0 [pid 309] newfstatat(3, "", {st_mode=S_IFREG|0600, st_size=128000000, ...}, AT_EMPTY_PATH) = 0 [pid 309] fgetxattr(3, "security.selinux", "\x72\x6f\x6f\x74\x3a\x6f\x62\x6a\x65\x63\x74\x5f\x72\x3a\x75\x73\x65\x72\x5f\x68\x6f\x6d\x65\x5f\x74\x00", 255) = 26 [pid 309] access("/var/run/setrans/.setrans-unix", F_OK) = -1 ENOENT (No such file or directory) [pid 309] futex(0x7ff3715115f8, FUTEX_WAKE_PRIVATE, 2147483647) = 0 [pid 309] fsetxattr(3, "security.selinux", "\x72\x6f\x6f\x74\x3a\x6f\x62\x6a\x65\x63\x74\x5f\x72\x3a\x73\x77\x61\x70\x66\x69\x6c\x65\x5f\x74\x00", 25, 0) = 0 [pid 309] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1024) = 1024 [pid 309] write(3, "\x01\x00\x00\x00\x11\x7a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 516) = 516 [pid 309] lseek(3, 4086, SEEK_SET) = 4086 [pid 309] write(3, "SWAPSPACE2", 10) = 10 [pid 309] fsync(3Setting up swapspace version 1, size = 127995904 bytes ) = 0 [pid 309] write(1, "Setting up swapspace version 1, size = 127995904 bytes\n", 55) = 55 [pid 309] exit_group(0) = ? [pid 309] +++ exited with 0 +++ [ 40.183146][ T309] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 40.192321][ T28] audit: type=1400 audit(1720427179.472:71): avc: denied { relabelto } for pid=309 comm="mkswap" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" rt_sigaction(SIGINT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 rt_sigaction(SIGQUIT, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=309, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- swapon("./swap-file", SWAP_FLAG_PREFER|0) = 0 rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGSEGV, {sa_handler=0x7ffbdd7ee7d0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 rt_sigaction(SIGBUS, {sa_handler=0x7ffbdd7ee7d0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7ffbdd7fb830}, NULL, 8) = 0 mkdir("./syzkaller.9xFxjb", 0700) = 0 [ 40.217802][ T28] audit: type=1400 audit(1720427179.472:72): avc: denied { write } for pid=309 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 40.236795][ T308] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 40.243897][ T28] audit: type=1400 audit(1720427179.512:73): avc: denied { read } for pid=308 comm="syz-executor152" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" chmod("./syzkaller.9xFxjb", 0777) = 0 chdir("./syzkaller.9xFxjb") = 0 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d54750) = 311 ./strace-static-x86_64: Process 311 attached [pid 311] set_robust_list(0x555556d54760, 24) = 0 [pid 311] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 311] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 311] setsid() = 1 [pid 311] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 311] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 311] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 311] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 311] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 311] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 311] unshare(CLONE_NEWNS) = 0 [pid 311] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 311] unshare(CLONE_NEWIPC) = -1 EINVAL (Invalid argument) [pid 311] unshare(CLONE_NEWCGROUP) = 0 [pid 311] unshare(CLONE_NEWUTS) = 0 [pid 311] unshare(CLONE_SYSVSEM) = 0 [pid 311] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 311] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 311] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 311] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 311] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 311] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 311] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 311] getpid() = 1 [pid 311] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 318] set_robust_list(0x7ffbdd7e39a0, 24 [pid 317] <... clone3 resumed> => {parent_tid=[3]}, 88) = 3 [pid 318] <... set_robust_list resumed>) = 0 [pid 318] rt_sigprocmask(SIG_SETMASK, [], [pid 317] rt_sigprocmask(SIG_SETMASK, [], [pid 318] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 317] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 318] futex(0x7ffbdd8bd4a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 317] futex(0x7ffbdd8bd4a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 317] futex(0x7ffbdd8bd4ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 318] memfd_create("syzkaller", 0) = 3 [pid 318] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffbd53c3000 [pid 318] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 318] munmap(0x7ffbd53c3000, 138412032) = 0 [pid 318] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 318] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 318] close(3) = 0 [pid 318] close(4) = 0 [pid 318] mkdir("./file1", 0777) = 0 [ 41.642776][ T318] loop0: detected capacity change from 0 to 512 [ 41.651013][ T318] ======================================================= [ 41.651013][ T318] WARNING: The mand mount option has been deprecated and [ 41.651013][ T318] and is ignored by this kernel. Remove the mand [ 41.651013][ T318] option from the mount to silence this warning. [ 41.651013][ T318] ======================================================= [pid 318] mount("/dev/loop0", "./file1", "ext4", MS_MANDLOCK|MS_LAZYTIME, "errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,"...) = 0 [pid 318] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 318] chdir("./file1") = 0 [pid 318] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 318] ioctl(4, LOOP_CLR_FD) = 0 [pid 318] close(4) = 0 [pid 318] futex(0x7ffbdd8bd4ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 317] <... futex resumed>) = 0 [pid 317] futex(0x7ffbdd8bd4a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 317] futex(0x7ffbdd8bd4ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 318] <... futex resumed>) = 1 [pid 318] creat("./bus", 000) = 4 [pid 318] futex(0x7ffbdd8bd4ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 317] <... futex resumed>) = 0 [pid 317] futex(0x7ffbdd8bd4a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 317] futex(0x7ffbdd8bd4ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 318] <... futex resumed>) = 1 [pid 318] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5 [pid 318] futex(0x7ffbdd8bd4ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 317] <... futex resumed>) = 0 [pid 317] futex(0x7ffbdd8bd4a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 317] futex(0x7ffbdd8bd4ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 318] fallocate(5, 0, 0, 1048820) = -1 ENOSPC (No space left on device) [pid 318] futex(0x7ffbdd8bd4ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 318] futex(0x7ffbdd8bd4a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 317] <... futex resumed>) = 0 [pid 317] futex(0x7ffbdd8bd4a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 317] futex(0x7ffbdd8bd4ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 318] <... futex resumed>) = 0 [pid 318] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 24) = 24 [pid 318] futex(0x7ffbdd8bd4ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 317] <... futex resumed>) = 0 [pid 317] futex(0x7ffbdd8bd4a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 317] futex(0x7ffbdd8bd4ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 318] <... futex resumed>) = 1 [pid 318] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 318] futex(0x7ffbdd8bd4ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 317] <... futex resumed>) = 0 [pid 317] futex(0x7ffbdd8bd4a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 317] futex(0x7ffbdd8bd4ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 318] <... futex resumed>) = 1 [pid 318] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 6 [pid 318] futex(0x7ffbdd8bd4ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 317] <... futex resumed>) = 0 [pid 317] futex(0x7ffbdd8bd4a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 317] futex(0x7ffbdd8bd4bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 317] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ffbdd7a2000 [pid 317] mprotect(0x7ffbdd7a3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 317] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 317] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7ffbdd7c2990, parent_tid=0x7ffbdd7c2990, exit_signal=0, stack=0x7ffbdd7a2000, stack_size=0x20240, tls=0x7ffbdd7c26c0} => {parent_tid=[4]}, 88) = 4 ./strace-static-x86_64: Process 322 attached [pid 317] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 318] <... futex resumed>) = 1 [pid 322] set_robust_list(0x7ffbdd7c29a0, 24 [pid 317] futex(0x7ffbdd8bd4b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 317] futex(0x7ffbdd8bd4bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 318] write(6, "\x23\x21\x20\x0a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 322] <... set_robust_list resumed>) = 0 [ 41.699010][ T318] EXT4-fs (loop0): 1 orphan inode deleted [ 41.704620][ T318] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 41.714078][ T318] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038 (0x7fffffff) [pid 322] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 322] fallocate(4, FALLOC_FL_KEEP_SIZE|FALLOC_FL_PUNCH_HOLE, 0, 6656 [pid 318] <... write resumed>) = 262144 [pid 318] futex(0x7ffbdd8bd4ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 318] futex(0x7ffbdd8bd4a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 317] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 41.753950][ T322] EXT4-fs error (device loop0): ext4_free_blocks:6208: comm syz-executor152: Freeing blocks not in datazone - block = 41, count = 1 [ 41.767790][ T322] EXT4-fs (loop0): Remounting filesystem read-only [ 41.774559][ T322] ================================================================== [ 41.782464][ T322] BUG: KASAN: out-of-bounds in ext4_ext_remove_space+0x1e16/0x4f50 [ 41.790191][ T322] Read of size 18446744073709551604 at addr ffff88811fcf4018 by task syz-executor152/322 [ 41.799949][ T322] [ 41.802121][ T322] CPU: 1 PID: 322 Comm: syz-executor152 Not tainted 6.1.84-syzkaller-00135-gce6f9cab9edc #0 [ 41.812010][ T322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 41.822010][ T322] Call Trace: [ 41.825112][ T322] [ 41.827921][ T322] dump_stack_lvl+0x151/0x1b7 [ 41.832407][ T322] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 41.837816][ T322] ? _printk+0xd1/0x111 [ 41.841797][ T322] ? __virt_addr_valid+0x242/0x2f0 [ 41.846744][ T322] print_report+0x158/0x4e0 [ 41.851082][ T322] ? __virt_addr_valid+0x242/0x2f0 [ 41.856029][ T322] ? kasan_addr_to_slab+0xd/0x80 [ 41.860803][ T322] ? ext4_ext_remove_space+0x1e16/0x4f50 [ 41.866272][ T322] kasan_report+0x13c/0x170 [ 41.870642][ T322] ? ext4_ext_remove_space+0x1e16/0x4f50 [ 41.876108][ T322] kasan_check_range+0x294/0x2a0 [ 41.880985][ T322] ? ext4_ext_remove_space+0x1e16/0x4f50 [ 41.886441][ T322] memmove+0x2d/0x70 [ 41.890169][ T322] ext4_ext_remove_space+0x1e16/0x4f50 [ 41.895481][ T322] ? kasan_save_alloc_info+0x1f/0x30 [pid 317] close(3) = 0 [pid 317] close(4) = 0 [pid 317] close(5) = 0 [pid 317] close(6) = 0 [pid 317] close(7) = -1 EBADF (Bad file descriptor) [pid 317] close(8) = -1 EBADF (Bad file descriptor) [pid 317] close(9) = -1 EBADF (Bad file descriptor) [pid 317] close(10) = -1 EBADF (Bad file descriptor) [pid 317] close(11) = -1 EBADF (Bad file descriptor) [pid 317] close(12) = -1 EBADF (Bad file descriptor) [pid 317] close(13) = -1 EBADF (Bad file descriptor) [pid 317] close(14) = -1 EBADF (Bad file descriptor) [pid 317] close(15) = -1 EBADF (Bad file descriptor) [pid 317] close(16) = -1 EBADF (Bad file descriptor) [pid 317] close(17) = -1 EBADF (Bad file descriptor) [pid 317] close(18) = -1 EBADF (Bad file descriptor) [pid 317] close(19) = -1 EBADF (Bad file descriptor) [ 41.900614][ T322] ? ext4_ext_index_trans_blocks+0x120/0x120 [ 41.906397][ T322] ? ext4_es_remove_extent+0x297/0x460 [ 41.911731][ T322] ext4_punch_hole+0x794/0xc00 [ 41.916303][ T322] ext4_fallocate+0x318/0x1e90 [ 41.920913][ T322] ? avc_policy_seqno+0x1b/0x70 [ 41.925583][ T322] ? ext4_ext_truncate+0x320/0x320 [ 41.930529][ T322] ? fsnotify_perm+0x6a/0x5d0 [ 41.935059][ T322] vfs_fallocate+0x492/0x570 [ 41.939599][ T322] __x64_sys_fallocate+0xc0/0x110 [ 41.944457][ T322] do_syscall_64+0x3d/0xb0 [ 41.948703][ T322] entry_SYSCALL_64_after_hwframe+0x63/0xcd [pid 317] close(20) = -1 EBADF (Bad file descriptor) [pid 317] close(21) = -1 EBADF (Bad file descriptor) [pid 317] close(22) = -1 EBADF (Bad file descriptor) [pid 317] close(23) = -1 EBADF (Bad file descriptor) [pid 317] close(24) = -1 EBADF (Bad file descriptor) [pid 317] close(25) = -1 EBADF (Bad file descriptor) [pid 317] close(26) = -1 EBADF (Bad file descriptor) [pid 317] close(27) = -1 EBADF (Bad file descriptor) [pid 317] close(28) = -1 EBADF (Bad file descriptor) [pid 317] close(29) = -1 EBADF (Bad file descriptor) [pid 317] exit_group(0) = ? [pid 318] <... futex resumed>) = ? [pid 318] +++ exited with 0 +++ [ 41.954432][ T322] RIP: 0033:0x7ffbdd835979 [ 41.958770][ T322] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 1f 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 41.978293][ T322] RSP: 002b:00007ffbdd7c2168 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 41.986541][ T322] RAX: ffffffffffffffda RBX: 00007ffbdd8bd4b8 RCX: 00007ffbdd835979 [ 41.994350][ T322] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 42.002161][ T322] RBP: 00007ffbdd8bd4b0 R08: 00007fff0b98ad27 R09: 0000000000000000 [ 42.009974][ T322] R10: 0000000000001a00 R11: 0000000000000246 R12: 00007ffbdd8bd4bc [ 42.018257][ T322] R13: 0000000000000006 R14: 00007fff0b98ac40 R15: 00007fff0b98ad28 [ 42.026070][ T322] [ 42.028921][ T322] [ 42.031092][ T322] The buggy address belongs to the physical page: [ 42.037358][ T322] page:ffffea00047f3d00 refcount:2 mapcount:0 mapping:ffff88810b7eb2d0 index:0x27 pfn:0x11fcf4 [ 42.047501][ T322] memcg:ffff88810f918000 [ 42.051824][ T322] aops:def_blk_aops ino:700000 [ 42.056383][ T322] flags: 0x5600000000002056(referenced|uptodate|lru|workingset|private|zone=1) [ 42.065184][ T322] raw: 5600000000002056 ffff88810f91c190 ffffea00043f4548 ffff88810b7eb2d0 [ 42.073593][ T322] raw: 0000000000000027 ffff888120589930 00000002ffffffff ffff88810f918000 [ 42.082008][ T322] page dumped because: kasan: bad access detected [ 42.088249][ T322] page_owner tracks the page as allocated [ 42.093792][ T322] page last allocated via order 0, migratetype Movable, gfp_mask 0x148c48(GFP_NOFS|__GFP_NOFAIL|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 318, tgid 317 (syz-executor152), ts 41746345082, free_ts 41641447115 [ 42.114018][ T322] post_alloc_hook+0x213/0x220 [ 42.118615][ T322] prep_new_page+0x1b/0x110 [ 42.122969][ T322] get_page_from_freelist+0x27ea/0x2870 [ 42.128340][ T322] __alloc_pages+0x3a1/0x780 [ 42.132789][ T322] __folio_alloc+0x15/0x40 [ 42.137025][ T322] __filemap_get_folio+0x827/0xae0 [ 42.141976][ T322] pagecache_get_page+0x2f/0x110 [ 42.146748][ T322] __getblk_gfp+0x205/0x7d0 [ 42.151092][ T322] ext4_ext_insert_extent+0xfd2/0x4e00 [ 42.156380][ T322] ext4_split_extent_at+0x863/0x11f0 [ 42.161502][ T322] ext4_split_extent+0x1bd/0x4e0 [ 42.166365][ T322] ext4_ext_map_blocks+0x2201/0x7390 [ 42.171483][ T322] ext4_map_blocks+0xa36/0x1ca0 [ 42.176169][ T322] ext4_writepages+0x17b5/0x3fd0 [ 42.180952][ T322] do_writepages+0x385/0x620 [ 42.185377][ T322] filemap_fdatawrite_wbc+0x153/0x1b0 [ 42.190594][ T322] page last free stack trace: [ 42.195099][ T322] free_unref_page_prepare+0x83d/0x850 [ 42.200386][ T322] free_unref_page_list+0xf1/0x7b0 [ 42.205335][ T322] release_pages+0xf7f/0xfe0 [ 42.209762][ T322] free_pages_and_swap_cache+0x8a/0xa0 [ 42.215052][ T322] tlb_finish_mmu+0x1e0/0x3f0 [ 42.219569][ T322] unmap_region+0x2c1/0x310 [ 42.223920][ T322] do_mas_align_munmap+0xd05/0x1400 [ 42.229137][ T322] do_mas_munmap+0x23e/0x2b0 [ 42.233678][ T322] __vm_munmap+0x263/0x3a0 [ 42.238000][ T322] __x64_sys_munmap+0x6b/0x80 [ 42.242513][ T322] do_syscall_64+0x3d/0xb0 [ 42.246769][ T322] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 42.252501][ T322] [ 42.254672][ T322] Memory state around the buggy address: [ 42.260146][ T322] ffff88811fcf3f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 42.268056][ T322] ffff88811fcf3f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 42.275945][ T322] >ffff88811fcf4000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 42.283830][ T322] ^ [ 42.288532][ T322] ffff88811fcf4080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 42.296427][ T322] ffff88811fcf4100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 42.304315][ T322] ================================================================== [ 42.313368][ T322] Disabling lock debugging due to kernel taint [ 42.321127][ T322] EXT4-fs error (device loop0): __ext4_get_inode_loc:4497: comm syz-executor152: Invalid inode table block 0 in block_group 0 [ 42.334522][ T322] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 42.344272][ T322] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #18: comm syz-executor152: mark_inode_dirty error [pid 322] <... fallocate resumed>) = ? [pid 322] +++ exited with 0 +++ [pid 317] +++ exited with 0 +++ [pid 311] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=16} --- [pid 311] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 311] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 311] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 311] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=140, ...}, AT_EMPTY_PATH) = 0 [pid 311] getdents64(3, 0x555556d557f0 /* 7 entries */, 32768) = 208 [pid 311] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EBUSY (Device or resource busy) [pid 311] newfstatat(AT_FDCWD, "./0/file1", {st_mode=S_IFDIR|0755, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 311] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EBUSY (Device or resource busy) [pid 311] openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 311] newfstatat(4, "", {st_mode=S_IFDIR|0755, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [ 42.356740][ T322] EXT4-fs error (device loop0): __ext4_get_inode_loc:4497: comm syz-executor152: Invalid inode table block 0 in block_group 0 [ 42.370713][ T322] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 42.381157][ T322] EXT4-fs error (device loop0): ext4_punch_hole:4142: inode #18: comm syz-executor152: mark_inode_dirty error [pid 311] getdents64(4, 0x555556d5d830 /* 0 entries */, 32768) = 0 [pid 311] close(4) = 0 [pid 311] rmdir("./0/file1") = -1 EBUSY (Device or resource busy) [pid 311] umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EBUSY (Device or resource busy) [pid 311] exit_group(1) = ? [pid 311] +++ exited with 1 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=311, si_uid=0, si_status=1, si_utime=0, si_stime=61} --- exit_group(0) = ? +++ exited with 0 +++ [ 42.408879][ T311] EXT4-fs error (device loop0): ext4_map_blocks:607: inode #2: block 3: comm syz-executor152: lblock 0 mapped to illegal pblock 3 (length 1) [ 42.429149][ T311] EXT4-fs (loop0): unmounting filesystem. [ 42.444648][ T311] syz-executor152 (311) used greatest stack depth: 21200 bytes left [ 42.944616][ T37] device bridge_slave_1 left promiscuous mode [ 42.950668][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.958805][ T37] device bridge_slave_0 left promiscuous mode [ 42.965001][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.974212][ T37] device veth1_macvtap left promiscuous mode [ 42.980112][ T37] device veth0_vlan left promiscuous mode