./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1598575509 <...> Warning: Permanently added '10.128.1.126' (ED25519) to the list of known hosts. execve("./syz-executor1598575509", ["./syz-executor1598575509"], 0x7ffec560ba00 /* 10 vars */) = 0 brk(NULL) = 0x555555847000 brk(0x555555847d40) = 0x555555847d40 arch_prctl(ARCH_SET_FS, 0x5555558473c0) = 0 set_tid_address(0x555555847690) = 5012 set_robust_list(0x5555558476a0, 24) = 0 rseq(0x555555847ce0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1598575509", 4096) = 28 getrandom("\x00\xaf\x7c\x16\xbe\x78\xef\x52", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555555847d40 brk(0x555555868d40) = 0x555555868d40 brk(0x555555869000) = 0x555555869000 mprotect(0x7fbb1d67a000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 [ 62.316002][ T26] audit: type=1400 audit(1692171032.521:83): avc: denied { write } for pid=5009 comm="strace-static-x" path="pipe:[29636]" dev="pipefs" ino=29636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555847690) = 5013 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5013 attached [pid 5013] set_robust_list(0x5555558476a0, 24./strace-static-x86_64: Process 5014 attached ) = 0 [pid 5012] <... clone resumed>, child_tidptr=0x555555847690) = 5014 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555847690) = 5015 [pid 5013] mkdir("./syzkaller.vVKnWn", 0700 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555847690) = 5016 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555847690) = 5017 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555847690) = 5018 [pid 5014] set_robust_list(0x5555558476a0, 24) = 0 [pid 5014] mkdir("./syzkaller.5S2AYb", 0700 [pid 5013] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5015 attached [pid 5013] chmod("./syzkaller.vVKnWn", 0777 [pid 5014] <... mkdir resumed>) = 0 [pid 5014] chmod("./syzkaller.5S2AYb", 0777 [pid 5013] <... chmod resumed>) = 0 [pid 5013] chdir("./syzkaller.vVKnWn" [pid 5015] set_robust_list(0x5555558476a0, 24 [pid 5014] <... chmod resumed>) = 0 [pid 5014] chdir("./syzkaller.5S2AYb") = 0 [pid 5015] <... set_robust_list resumed>) = 0 [pid 5014] mkdir("./0", 0777 [pid 5013] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 5017 attached ./strace-static-x86_64: Process 5016 attached ./strace-static-x86_64: Process 5018 attached [pid 5017] set_robust_list(0x5555558476a0, 24 [pid 5015] mkdir("./syzkaller.uOEFdV", 0700 [pid 5014] <... mkdir resumed>) = 0 [pid 5013] mkdir("./0", 0777 [ 62.349402][ T26] audit: type=1400 audit(1692171032.551:84): avc: denied { execmem } for pid=5012 comm="syz-executor159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [pid 5014] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5018] set_robust_list(0x5555558476a0, 24 [pid 5017] <... set_robust_list resumed>) = 0 [pid 5016] set_robust_list(0x5555558476a0, 24 [pid 5015] <... mkdir resumed>) = 0 [pid 5014] <... openat resumed>) = 3 [pid 5013] <... mkdir resumed>) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] chmod("./syzkaller.uOEFdV", 0777) = 0 [pid 5013] close(3 [pid 5015] chdir("./syzkaller.uOEFdV") = 0 [pid 5015] mkdir("./0", 0777) = 0 [pid 5013] <... close resumed>) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5015] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5018] <... set_robust_list resumed>) = 0 [pid 5015] <... openat resumed>) = 3 [pid 5017] mkdir("./syzkaller.xcFYmT", 0700 [pid 5018] mkdir("./syzkaller.k2uByN", 0700 [pid 5016] <... set_robust_list resumed>) = 0 [pid 5016] mkdir("./syzkaller.6Qleij", 0700 [pid 5017] <... mkdir resumed>) = 0 [pid 5013] <... clone resumed>, child_tidptr=0x555555847690) = 5019 [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5018] <... mkdir resumed>) = 0 [pid 5017] chmod("./syzkaller.xcFYmT", 0777./strace-static-x86_64: Process 5019 attached [pid 5018] chmod("./syzkaller.k2uByN", 0777 [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5016] <... mkdir resumed>) = 0 [pid 5014] close(3) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5016] chmod("./syzkaller.6Qleij", 0777) = 0 [pid 5015] <... clone resumed>, child_tidptr=0x555555847690) = 5020 [pid 5014] <... clone resumed>, child_tidptr=0x555555847690) = 5021 [pid 5016] chdir("./syzkaller.6Qleij") = 0 [pid 5016] mkdir("./0", 0777) = 0 ./strace-static-x86_64: Process 5021 attached [pid 5021] set_robust_list(0x5555558476a0, 24) = 0 [pid 5021] chdir("./0") = 0 [ 62.394539][ T26] audit: type=1400 audit(1692171032.601:85): avc: denied { read write } for pid=5014 comm="syz-executor159" name="loop1" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [pid 5021] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5016] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5021] setpgid(0, 0 [pid 5019] set_robust_list(0x5555558476a0, 24 [pid 5017] <... chmod resumed>) = 0 [pid 5016] <... openat resumed>) = 3 [pid 5021] <... setpgid resumed>) = 0 [pid 5019] <... set_robust_list resumed>) = 0 [pid 5018] <... chmod resumed>) = 0 [pid 5017] chdir("./syzkaller.xcFYmT" [pid 5016] ioctl(3, LOOP_CLR_FD [pid 5021] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5019] chdir("./0" [pid 5018] chdir("./syzkaller.k2uByN" [pid 5017] <... chdir resumed>) = 0 [pid 5016] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 5020 attached [pid 5021] <... openat resumed>) = 3 [pid 5019] <... chdir resumed>) = 0 [pid 5018] <... chdir resumed>) = 0 [pid 5017] mkdir("./0", 0777 [pid 5016] close(3 [pid 5021] write(3, "1000", 4 [pid 5019] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5018] mkdir("./0", 0777 [pid 5016] <... close resumed>) = 0 [pid 5021] <... write resumed>) = 4 [pid 5019] <... prctl resumed>) = 0 [pid 5017] <... mkdir resumed>) = 0 [pid 5016] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5021] close(3 [pid 5020] set_robust_list(0x5555558476a0, 24 [pid 5019] setpgid(0, 0 [pid 5018] <... mkdir resumed>) = 0 [pid 5017] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5021] <... close resumed>) = 0 [pid 5020] <... set_robust_list resumed>) = 0 [pid 5019] <... setpgid resumed>) = 0 [pid 5018] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5017] <... openat resumed>) = 3 [pid 5016] <... clone resumed>, child_tidptr=0x555555847690) = 5022 [pid 5021] symlink("/dev/binderfs", "./binderfs" [pid 5020] chdir("./0" [pid 5019] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5021] <... symlink resumed>) = 0 [pid 5020] <... chdir resumed>) = 0 [pid 5019] <... openat resumed>) = 3 [pid 5018] <... openat resumed>) = 3 [pid 5017] ioctl(3, LOOP_CLR_FD [pid 5021] futex(0x7fbb1d6806cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5020] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5019] write(3, "1000", 4 [pid 5018] ioctl(3, LOOP_CLR_FD [pid 5017] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 5022 attached [pid 5021] <... futex resumed>) = 0 [pid 5020] <... prctl resumed>) = 0 [pid 5019] <... write resumed>) = 4 [pid 5018] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5017] close(3 [pid 5022] set_robust_list(0x5555558476a0, 24 [pid 5021] rt_sigaction(SIGRT_1, {sa_handler=0x7fbb1d61e060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fbb1d60f210}, [pid 5020] setpgid(0, 0 [pid 5019] close(3 [pid 5018] close(3 [pid 5017] <... close resumed>) = 0 [pid 5022] <... set_robust_list resumed>) = 0 [pid 5021] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5020] <... setpgid resumed>) = 0 [pid 5019] <... close resumed>) = 0 [pid 5018] <... close resumed>) = 0 [pid 5017] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5022] chdir("./0" [pid 5021] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5020] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5019] symlink("/dev/binderfs", "./binderfs" [pid 5018] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5022] <... chdir resumed>) = 0 [pid 5021] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5022] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5021] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5022] <... prctl resumed>) = 0 [pid 5021] <... mmap resumed>) = 0x7fbb1d594000 [pid 5020] <... openat resumed>) = 3 [pid 5019] <... symlink resumed>) = 0 [pid 5018] <... clone resumed>, child_tidptr=0x555555847690) = 5025 [pid 5017] <... clone resumed>, child_tidptr=0x555555847690) = 5024 ./strace-static-x86_64: Process 5024 attached [pid 5022] setpgid(0, 0 [pid 5021] mprotect(0x7fbb1d595000, 131072, PROT_READ|PROT_WRITE [pid 5020] write(3, "1000", 4 [pid 5019] futex(0x7fbb1d6806cc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5025 attached [pid 5024] set_robust_list(0x5555558476a0, 24 [pid 5022] <... setpgid resumed>) = 0 [pid 5021] <... mprotect resumed>) = 0 [pid 5020] <... write resumed>) = 4 [pid 5019] <... futex resumed>) = 0 [pid 5025] set_robust_list(0x5555558476a0, 24 [pid 5024] <... set_robust_list resumed>) = 0 [pid 5022] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5021] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5020] close(3 [pid 5019] rt_sigaction(SIGRT_1, {sa_handler=0x7fbb1d61e060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fbb1d60f210}, [pid 5025] <... set_robust_list resumed>) = 0 [pid 5024] chdir("./0" [pid 5022] <... openat resumed>) = 3 [pid 5021] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5020] <... close resumed>) = 0 [pid 5019] <... rt_sigaction resumed>NULL, 8) = 0 [ 62.422610][ T26] audit: type=1400 audit(1692171032.601:86): avc: denied { open } for pid=5014 comm="syz-executor159" path="/dev/loop1" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [pid 5025] chdir("./0" [pid 5024] <... chdir resumed>) = 0 [pid 5022] write(3, "1000", 4 [pid 5021] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fbb1d5b4990, parent_tid=0x7fbb1d5b4990, exit_signal=0, stack=0x7fbb1d594000, stack_size=0x20300, tls=0x7fbb1d5b46c0} [pid 5020] symlink("/dev/binderfs", "./binderfs" [pid 5019] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5025] <... chdir resumed>) = 0 [pid 5024] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5022] <... write resumed>) = 4 [pid 5025] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5024] <... prctl resumed>) = 0 [pid 5022] close(3 [pid 5021] <... clone3 resumed> => {parent_tid=[5026]}, 88) = 5026 [pid 5020] <... symlink resumed>) = 0 [pid 5019] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5025] <... prctl resumed>) = 0 [pid 5024] setpgid(0, 0 [pid 5022] <... close resumed>) = 0 [pid 5021] rt_sigprocmask(SIG_SETMASK, [], [pid 5020] futex(0x7fbb1d6806cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5019] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5025] setpgid(0, 0 [pid 5024] <... setpgid resumed>) = 0 [pid 5022] symlink("/dev/binderfs", "./binderfs" [pid 5021] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5020] <... futex resumed>) = 0 [pid 5025] <... setpgid resumed>) = 0 [pid 5024] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5022] <... symlink resumed>) = 0 [pid 5021] futex(0x7fbb1d6806c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5020] rt_sigaction(SIGRT_1, {sa_handler=0x7fbb1d61e060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fbb1d60f210}, [pid 5019] <... mmap resumed>) = 0x7fbb1d594000 ./strace-static-x86_64: Process 5026 attached [pid 5025] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5024] <... openat resumed>) = 3 [pid 5022] futex(0x7fbb1d6806cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5021] <... futex resumed>) = 0 [pid 5020] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5019] mprotect(0x7fbb1d595000, 131072, PROT_READ|PROT_WRITE [pid 5026] rseq(0x7fbb1d5b4fe0, 0x20, 0, 0x53053053 [pid 5025] <... openat resumed>) = 3 [pid 5024] write(3, "1000", 4 [pid 5022] <... futex resumed>) = 0 [pid 5021] futex(0x7fbb1d6806cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5020] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5019] <... mprotect resumed>) = 0 [pid 5026] <... rseq resumed>) = 0 [pid 5025] write(3, "1000", 4 [pid 5024] <... write resumed>) = 4 [pid 5022] rt_sigaction(SIGRT_1, {sa_handler=0x7fbb1d61e060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fbb1d60f210}, [pid 5026] set_robust_list(0x7fbb1d5b49a0, 24 [pid 5025] <... write resumed>) = 4 [pid 5022] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5026] <... set_robust_list resumed>) = 0 [pid 5025] close(3 [pid 5022] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5026] rt_sigprocmask(SIG_SETMASK, [], [pid 5025] <... close resumed>) = 0 [pid 5022] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5026] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5025] symlink("/dev/binderfs", "./binderfs" [pid 5022] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5026] memfd_create("syzkaller", 0 [pid 5025] <... symlink resumed>) = 0 [pid 5022] <... mmap resumed>) = 0x7fbb1d594000 [pid 5025] futex(0x7fbb1d6806cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5024] close(3 [pid 5022] mprotect(0x7fbb1d595000, 131072, PROT_READ|PROT_WRITE [pid 5020] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5019] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5025] <... futex resumed>) = 0 [pid 5024] <... close resumed>) = 0 [pid 5022] <... mprotect resumed>) = 0 [pid 5020] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5019] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5025] rt_sigaction(SIGRT_1, {sa_handler=0x7fbb1d61e060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fbb1d60f210}, [pid 5024] symlink("/dev/binderfs", "./binderfs" [pid 5022] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5020] <... mmap resumed>) = 0x7fbb1d594000 [pid 5019] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fbb1d5b4990, parent_tid=0x7fbb1d5b4990, exit_signal=0, stack=0x7fbb1d594000, stack_size=0x20300, tls=0x7fbb1d5b46c0} [pid 5025] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5024] <... symlink resumed>) = 0 [pid 5022] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5020] mprotect(0x7fbb1d595000, 131072, PROT_READ|PROT_WRITE [pid 5025] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5024] futex(0x7fbb1d6806cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5022] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fbb1d5b4990, parent_tid=0x7fbb1d5b4990, exit_signal=0, stack=0x7fbb1d594000, stack_size=0x20300, tls=0x7fbb1d5b46c0} [pid 5020] <... mprotect resumed>) = 0 [pid 5019] <... clone3 resumed> => {parent_tid=[5027]}, 88) = 5027 [pid 5025] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5024] <... futex resumed>) = 0 [pid 5020] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5019] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5028 attached ./strace-static-x86_64: Process 5027 attached [pid 5025] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5024] rt_sigaction(SIGRT_1, {sa_handler=0x7fbb1d61e060, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fbb1d60f210}, [pid 5022] <... clone3 resumed> => {parent_tid=[5028]}, 88) = 5028 [pid 5020] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5019] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5028] rseq(0x7fbb1d5b4fe0, 0x20, 0, 0x53053053 [pid 5027] rseq(0x7fbb1d5b4fe0, 0x20, 0, 0x53053053 [pid 5025] <... mmap resumed>) = 0x7fbb1d594000 [pid 5024] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5022] rt_sigprocmask(SIG_SETMASK, [], [pid 5020] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fbb1d5b4990, parent_tid=0x7fbb1d5b4990, exit_signal=0, stack=0x7fbb1d594000, stack_size=0x20300, tls=0x7fbb1d5b46c0} [pid 5019] futex(0x7fbb1d6806c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5028] <... rseq resumed>) = 0 [pid 5027] <... rseq resumed>) = 0 [pid 5025] mprotect(0x7fbb1d595000, 131072, PROT_READ|PROT_WRITE [pid 5024] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5022] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5019] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5029 attached [pid 5028] set_robust_list(0x7fbb1d5b49a0, 24 [pid 5027] set_robust_list(0x7fbb1d5b49a0, 24 [pid 5025] <... mprotect resumed>) = 0 [pid 5024] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5022] futex(0x7fbb1d6806c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5020] <... clone3 resumed> => {parent_tid=[5029]}, 88) = 5029 [pid 5019] futex(0x7fbb1d6806cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5029] rseq(0x7fbb1d5b4fe0, 0x20, 0, 0x53053053 [pid 5028] <... set_robust_list resumed>) = 0 [pid 5027] <... set_robust_list resumed>) = 0 [pid 5025] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5024] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5022] <... futex resumed>) = 0 [pid 5020] rt_sigprocmask(SIG_SETMASK, [], [pid 5029] <... rseq resumed>) = 0 [pid 5028] rt_sigprocmask(SIG_SETMASK, [], [pid 5027] rt_sigprocmask(SIG_SETMASK, [], [pid 5025] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5024] <... mmap resumed>) = 0x7fbb1d594000 [pid 5022] futex(0x7fbb1d6806cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5020] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5029] set_robust_list(0x7fbb1d5b49a0, 24 [pid 5028] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5027] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5025] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fbb1d5b4990, parent_tid=0x7fbb1d5b4990, exit_signal=0, stack=0x7fbb1d594000, stack_size=0x20300, tls=0x7fbb1d5b46c0} [pid 5024] mprotect(0x7fbb1d595000, 131072, PROT_READ|PROT_WRITE [pid 5020] futex(0x7fbb1d6806c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5029] <... set_robust_list resumed>) = 0 [pid 5028] memfd_create("syzkaller", 0 [pid 5027] memfd_create("syzkaller", 0 [pid 5024] <... mprotect resumed>) = 0 [pid 5020] <... futex resumed>) = 0 [pid 5029] rt_sigprocmask(SIG_SETMASK, [], [pid 5028] <... memfd_create resumed>) = 3 [pid 5027] <... memfd_create resumed>) = 3 [pid 5025] <... clone3 resumed> => {parent_tid=[5030]}, 88) = 5030 [pid 5024] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5020] futex(0x7fbb1d6806cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5030 attached [pid 5029] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5028] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5027] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5025] rt_sigprocmask(SIG_SETMASK, [], [pid 5024] <... rt_sigprocmask resumed>[], 8) = 0 [ 62.501958][ T26] audit: type=1400 audit(1692171032.601:87): avc: denied { ioctl } for pid=5013 comm="syz-executor159" path="/dev/loop0" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.512233][ T5026] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5026 'syz-executor159' [pid 5030] rseq(0x7fbb1d5b4fe0, 0x20, 0, 0x53053053 [pid 5029] memfd_create("syzkaller", 0 [pid 5028] <... mmap resumed>) = 0x7fbb15194000 [pid 5027] <... mmap resumed>) = 0x7fbb15194000 [pid 5025] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5024] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fbb1d5b4990, parent_tid=0x7fbb1d5b4990, exit_signal=0, stack=0x7fbb1d594000, stack_size=0x20300, tls=0x7fbb1d5b46c0} [pid 5030] <... rseq resumed>) = 0 [pid 5029] <... memfd_create resumed>) = 3 [pid 5025] futex(0x7fbb1d6806c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5030] set_robust_list(0x7fbb1d5b49a0, 24 [pid 5029] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5025] <... futex resumed>) = 0 [pid 5024] <... clone3 resumed> => {parent_tid=[5031]}, 88) = 5031 [pid 5030] <... set_robust_list resumed>) = 0 [pid 5029] <... mmap resumed>) = 0x7fbb15194000 [pid 5025] futex(0x7fbb1d6806cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5024] rt_sigprocmask(SIG_SETMASK, [], [pid 5030] rt_sigprocmask(SIG_SETMASK, [], [pid 5024] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 5031 attached [pid 5030] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5024] futex(0x7fbb1d6806c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5031] rseq(0x7fbb1d5b4fe0, 0x20, 0, 0x53053053 [pid 5030] memfd_create("syzkaller", 0 [pid 5026] <... memfd_create resumed>) = 3 [pid 5024] <... futex resumed>) = 0 [pid 5031] <... rseq resumed>) = 0 [pid 5030] <... memfd_create resumed>) = 3 [pid 5026] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5024] futex(0x7fbb1d6806cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5031] set_robust_list(0x7fbb1d5b49a0, 24 [pid 5030] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5026] <... mmap resumed>) = 0x7fbb15194000 [pid 5031] <... set_robust_list resumed>) = 0 [pid 5030] <... mmap resumed>) = 0x7fbb15194000 [pid 5031] rt_sigprocmask(SIG_SETMASK, [], [pid 5027] write(3, "\xeb\x3c\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x01\x01\x00\x04\x70\x05\x00\x04\xf8\x20\x00\x20\x00\x02\x00\x03\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x56\xd7\xe1\x1d\x53\x59\x5a\x4b\x41\x4c\x4c\x45\x52\x20\x20\x46\x41\x54\x31\x36\x20\x20\x20\x0e\x1f\xbe\x5b\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00\xcd\x10\x5e\xeb\xf0\x32\xe4\xcd\x16\xcd\x19\xeb\xfe\xab\x00\x69\x73\x20\x69\x73\x20\x6e"..., 4194304 [pid 5031] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5031] memfd_create("syzkaller", 0) = 3 [pid 5031] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbb15194000 [pid 5028] write(3, "\xeb\x3c\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x01\x01\x00\x04\x70\x05\x00\x04\xf8\x20\x00\x20\x00\x02\x00\x03\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x56\xd7\xe1\x1d\x53\x59\x5a\x4b\x41\x4c\x4c\x45\x52\x20\x20\x46\x41\x54\x31\x36\x20\x20\x20\x0e\x1f\xbe\x5b\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00\xcd\x10\x5e\xeb\xf0\x32\xe4\xcd\x16\xcd\x19\xeb\xfe\xab\x00\x69\x73\x20\x69\x73\x20\x6e"..., 4194304 [pid 5029] write(3, "\xeb\x3c\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x01\x01\x00\x04\x70\x05\x00\x04\xf8\x20\x00\x20\x00\x02\x00\x03\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x56\xd7\xe1\x1d\x53\x59\x5a\x4b\x41\x4c\x4c\x45\x52\x20\x20\x46\x41\x54\x31\x36\x20\x20\x20\x0e\x1f\xbe\x5b\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00\xcd\x10\x5e\xeb\xf0\x32\xe4\xcd\x16\xcd\x19\xeb\xfe\xab\x00\x69\x73\x20\x69\x73\x20\x6e"..., 4194304 [pid 5026] write(3, "\xeb\x3c\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x01\x01\x00\x04\x70\x05\x00\x04\xf8\x20\x00\x20\x00\x02\x00\x03\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x56\xd7\xe1\x1d\x53\x59\x5a\x4b\x41\x4c\x4c\x45\x52\x20\x20\x46\x41\x54\x31\x36\x20\x20\x20\x0e\x1f\xbe\x5b\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00\xcd\x10\x5e\xeb\xf0\x32\xe4\xcd\x16\xcd\x19\xeb\xfe\xab\x00\x69\x73\x20\x69\x73\x20\x6e"..., 4194304 [pid 5030] write(3, "\xeb\x3c\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x01\x01\x00\x04\x70\x05\x00\x04\xf8\x20\x00\x20\x00\x02\x00\x03\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x56\xd7\xe1\x1d\x53\x59\x5a\x4b\x41\x4c\x4c\x45\x52\x20\x20\x46\x41\x54\x31\x36\x20\x20\x20\x0e\x1f\xbe\x5b\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00\xcd\x10\x5e\xeb\xf0\x32\xe4\xcd\x16\xcd\x19\xeb\xfe\xab\x00\x69\x73\x20\x69\x73\x20\x6e"..., 4194304 [pid 5031] write(3, "\xeb\x3c\x90\x6d\x6b\x66\x73\x2e\x66\x61\x74\x00\x02\x01\x01\x00\x04\x70\x05\x00\x04\xf8\x20\x00\x20\x00\x02\x00\x03\x00\x00\x00\x00\x00\x00\x00\x80\x00\x29\x56\xd7\xe1\x1d\x53\x59\x5a\x4b\x41\x4c\x4c\x45\x52\x20\x20\x46\x41\x54\x31\x36\x20\x20\x20\x0e\x1f\xbe\x5b\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00\xcd\x10\x5e\xeb\xf0\x32\xe4\xcd\x16\xcd\x19\xeb\xfe\xab\x00\x69\x73\x20\x69\x73\x20\x6e"..., 4194304 [pid 5029] <... write resumed>) = 4194304 [pid 5029] munmap(0x7fbb15194000, 4194304) = 0 [pid 5029] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5027] <... write resumed>) = 4194304 [pid 5029] <... openat resumed>) = 4 [pid 5029] ioctl(4, LOOP_SET_FD, 3 [pid 5027] munmap(0x7fbb15194000, 4194304) = 0 [pid 5029] <... ioctl resumed>) = 0 [pid 5029] close(3 [pid 5027] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5027] ioctl(4, LOOP_SET_FD, 3 [pid 5029] <... close resumed>) = 0 [pid 5029] mkdir("./bus", 0777 [pid 5028] <... write resumed>) = 4194304 [pid 5029] <... mkdir resumed>) = 0 [pid 5028] munmap(0x7fbb15194000, 4194304 [pid 5029] mount("/dev/loop2", "./bus", "vfat", MS_NOATIME|MS_RELATIME|MS_I_VERSION, "" [pid 5028] <... munmap resumed>) = 0 [pid 5028] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5031] <... write resumed>) = 4194304 [pid 5028] <... openat resumed>) = 4 [pid 5026] <... write resumed>) = 4194304 [pid 5031] munmap(0x7fbb15194000, 4194304 [ 62.836100][ T5029] loop2: detected capacity change from 0 to 8192 [ 62.844692][ T26] audit: type=1400 audit(1692171033.051:88): avc: denied { append } for pid=4449 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.850803][ T5027] loop0: detected capacity change from 0 to 8192 [pid 5028] ioctl(4, LOOP_SET_FD, 3 [pid 5030] <... write resumed>) = 4194304 [pid 5030] munmap(0x7fbb15194000, 4194304 [pid 5031] <... munmap resumed>) = 0 [pid 5030] <... munmap resumed>) = 0 [pid 5031] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5028] <... ioctl resumed>) = 0 [pid 5031] ioctl(4, LOOP_SET_FD, 3 [pid 5030] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5028] close(3 [pid 5030] <... openat resumed>) = 4 [pid 5029] <... mount resumed>) = 0 [pid 5030] ioctl(4, LOOP_SET_FD, 3 [pid 5026] munmap(0x7fbb15194000, 4194304) = 0 [pid 5031] <... ioctl resumed>) = 0 [ 62.898059][ T5028] loop3: detected capacity change from 0 to 8192 [ 62.912217][ T26] audit: type=1400 audit(1692171033.051:89): avc: denied { open } for pid=4449 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.917523][ T5030] loop5: detected capacity change from 0 to 8192 [ 62.935422][ T5031] loop4: detected capacity change from 0 to 8192 [pid 5029] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5028] <... close resumed>) = 0 [pid 5026] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5026] ioctl(4, LOOP_SET_FD, 3 [pid 5031] close(3 [pid 5029] <... openat resumed>) = 3 [pid 5028] mkdir("./bus", 0777 [pid 5027] <... ioctl resumed>) = 0 [pid 5027] close(3) = 0 [pid 5027] mkdir("./bus", 0777) = 0 [pid 5027] mount("/dev/loop0", "./bus", "vfat", MS_NOATIME|MS_RELATIME|MS_I_VERSION, "" [pid 5030] <... ioctl resumed>) = 0 [pid 5030] close(3) = 0 [ 62.948129][ T26] audit: type=1400 audit(1692171033.051:90): avc: denied { getattr } for pid=4449 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.952916][ T5026] loop1: detected capacity change from 0 to 8192 [pid 5030] mkdir("./bus", 0777 [pid 5031] <... close resumed>) = 0 [pid 5029] chdir("./bus" [pid 5028] <... mkdir resumed>) = 0 [pid 5031] mkdir("./bus", 0777 [pid 5029] <... chdir resumed>) = 0 [pid 5028] mount("/dev/loop3", "./bus", "vfat", MS_NOATIME|MS_RELATIME|MS_I_VERSION, "" [pid 5027] <... mount resumed>) = 0 [pid 5031] <... mkdir resumed>) = 0 [pid 5030] <... mkdir resumed>) = 0 [pid 5029] ioctl(4, LOOP_CLR_FD [pid 5027] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5026] <... ioctl resumed>) = 0 [pid 5031] mount("/dev/loop4", "./bus", "vfat", MS_NOATIME|MS_RELATIME|MS_I_VERSION, "" [pid 5030] mount("/dev/loop5", "./bus", "vfat", MS_NOATIME|MS_RELATIME|MS_I_VERSION, "" [pid 5029] <... ioctl resumed>) = 0 [pid 5027] <... openat resumed>) = 3 [pid 5029] close(4 [pid 5026] close(3 [pid 5029] <... close resumed>) = 0 [pid 5027] chdir("./bus" [pid 5029] futex(0x7fbb1d6806cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5027] <... chdir resumed>) = 0 [pid 5029] <... futex resumed>) = 1 [pid 5020] <... futex resumed>) = 0 [pid 5029] futex(0x7fbb1d6806c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5020] futex(0x7fbb1d6806c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5029] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5027] ioctl(4, LOOP_CLR_FD [pid 5020] <... futex resumed>) = 0 [pid 5029] openat(AT_FDCWD, ".", O_RDONLY [pid 5027] <... ioctl resumed>) = 0 [pid 5020] futex(0x7fbb1d6806cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5029] <... openat resumed>) = 4 [pid 5027] close(4 [pid 5026] <... close resumed>) = 0 [pid 5029] futex(0x7fbb1d6806cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5027] <... close resumed>) = 0 [pid 5026] mkdir("./bus", 0777 [pid 5029] <... futex resumed>) = 1 [pid 5020] <... futex resumed>) = 0 [pid 5029] futex(0x7fbb1d6806c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5027] futex(0x7fbb1d6806cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5020] futex(0x7fbb1d6806c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5029] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5027] <... futex resumed>) = 1 [pid 5020] <... futex resumed>) = 0 [pid 5019] <... futex resumed>) = 0 [pid 5029] mkdirat(4, "./bus", 000 [pid 5027] futex(0x7fbb1d6806c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5020] futex(0x7fbb1d6806cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5019] futex(0x7fbb1d6806c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5031] <... mount resumed>) = 0 [pid 5029] <... mkdirat resumed>) = 0 [pid 5028] <... mount resumed>) = 0 [pid 5027] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5026] <... mkdir resumed>) = 0 [pid 5019] <... futex resumed>) = 0 [pid 5031] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5028] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5027] openat(AT_FDCWD, ".", O_RDONLY [pid 5026] mount("/dev/loop1", "./bus", "vfat", MS_NOATIME|MS_RELATIME|MS_I_VERSION, "" [pid 5019] futex(0x7fbb1d6806cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5029] futex(0x7fbb1d6806cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5028] <... openat resumed>) = 3 [pid 5027] <... openat resumed>) = 4 [pid 5029] <... futex resumed>) = 1 [pid 5028] chdir("./bus" [pid 5027] futex(0x7fbb1d6806cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5020] <... futex resumed>) = 0 [ 62.972044][ T26] audit: type=1400 audit(1692171033.081:91): avc: denied { mounton } for pid=5020 comm="syz-executor159" path="/root/syzkaller.uOEFdV/0/bus" dev="sda1" ino=1945 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 63.004654][ T26] audit: type=1400 audit(1692171033.111:92): avc: denied { mount } for pid=5020 comm="syz-executor159" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [pid 5031] <... openat resumed>) = 3 [pid 5029] futex(0x7fbb1d6806c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5028] <... chdir resumed>) = 0 [pid 5027] <... futex resumed>) = 1 [pid 5020] futex(0x7fbb1d6806c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5019] <... futex resumed>) = 0 [pid 5031] chdir("./bus" [pid 5029] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5028] ioctl(4, LOOP_CLR_FD [pid 5027] futex(0x7fbb1d6806c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5020] <... futex resumed>) = 0 [pid 5019] futex(0x7fbb1d6806c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5029] mkdirat(4, "./file0/file0", 000 [pid 5028] <... ioctl resumed>) = 0 [pid 5020] futex(0x7fbb1d6806cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5019] <... futex resumed>) = 0 [pid 5031] <... chdir resumed>) = 0 [pid 5029] <... mkdirat resumed>) = 0 [pid 5028] close(4 [pid 5027] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5019] futex(0x7fbb1d6806cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5031] ioctl(4, LOOP_CLR_FD [pid 5029] mkdirat(4, "./file0/file0", 000 [pid 5028] <... close resumed>) = 0 [pid 5027] mkdirat(4, "./bus", 000 [pid 5031] <... ioctl resumed>) = 0 [pid 5029] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5028] futex(0x7fbb1d6806cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5029] mkdirat(4, "./file0/file0", 000 [pid 5028] <... futex resumed>) = 1 [pid 5022] <... futex resumed>) = 0 [pid 5029] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5028] futex(0x7fbb1d6806c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5022] futex(0x7fbb1d6806c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5029] mkdirat(4, "./file0/file0", 000 [pid 5028] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5022] <... futex resumed>) = 0 [pid 5031] close(4 [pid 5029] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5028] openat(AT_FDCWD, ".", O_RDONLY [pid 5027] <... mkdirat resumed>) = 0 [pid 5022] futex(0x7fbb1d6806cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5031] <... close resumed>) = 0 [pid 5029] mkdirat(4, "./file0/file0", 000 [pid 5028] <... openat resumed>) = 4 [pid 5027] futex(0x7fbb1d6806cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5031] futex(0x7fbb1d6806cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5029] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5028] futex(0x7fbb1d6806cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5027] <... futex resumed>) = 1 [pid 5019] <... futex resumed>) = 0 [pid 5031] <... futex resumed>) = 1 [pid 5029] mkdirat(4, "./file0/file0", 000 [pid 5028] <... futex resumed>) = 1 [pid 5027] futex(0x7fbb1d6806c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5024] <... futex resumed>) = 0 [pid 5022] <... futex resumed>) = 0 [pid 5019] futex(0x7fbb1d6806c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5031] futex(0x7fbb1d6806c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5029] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5028] futex(0x7fbb1d6806c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5027] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5024] futex(0x7fbb1d6806c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5022] futex(0x7fbb1d6806c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5019] <... futex resumed>) = 0 [pid 5031] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5029] mkdirat(4, "./file0/file0", 000 [pid 5028] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5027] mkdirat(4, "./file0/file0", 000 [pid 5024] <... futex resumed>) = 0 [pid 5022] <... futex resumed>) = 0 [pid 5019] futex(0x7fbb1d6806cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5031] openat(AT_FDCWD, ".", O_RDONLY [pid 5029] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5028] mkdirat(4, "./bus", 000 [pid 5024] futex(0x7fbb1d6806cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5022] futex(0x7fbb1d6806cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5031] <... openat resumed>) = 4 [pid 5029] mkdirat(4, "./file0/file0", 000 [pid 5028] <... mkdirat resumed>) = 0 [pid 5027] <... mkdirat resumed>) = 0 [pid 5031] futex(0x7fbb1d6806cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5029] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5028] futex(0x7fbb1d6806cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5027] mkdirat(4, "./file0/file0", 000 [pid 5031] <... futex resumed>) = 1 [pid 5030] <... mount resumed>) = 0 [pid 5029] mkdirat(4, "./file0/file0", 000 [pid 5028] <... futex resumed>) = 1 [pid 5024] <... futex resumed>) = 0 [pid 5022] <... futex resumed>) = 0 [pid 5027] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5031] futex(0x7fbb1d6806c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5030] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5029] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5028] futex(0x7fbb1d6806c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5027] mkdirat(4, "./file0/file0", 000 [pid 5024] futex(0x7fbb1d6806c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5022] futex(0x7fbb1d6806c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5031] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5030] <... openat resumed>) = 3 [pid 5029] mkdirat(4, "./file0/file0", 000 [pid 5028] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5027] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5024] <... futex resumed>) = 0 [pid 5022] <... futex resumed>) = 0 [pid 5031] mkdirat(4, "./bus", 000 [pid 5030] chdir("./bus" [pid 5029] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5028] mkdirat(4, "./file0/file0", 000 [pid 5027] mkdirat(4, "./file0/file0", 000 [pid 5024] futex(0x7fbb1d6806cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5022] futex(0x7fbb1d6806cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5030] <... chdir resumed>) = 0 [pid 5029] mkdirat(4, "./file0/file0", 000 [pid 5028] <... mkdirat resumed>) = 0 [pid 5027] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5030] ioctl(4, LOOP_CLR_FD [pid 5029] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5028] mkdirat(4, "./file0/file0", 000 [pid 5027] mkdirat(4, "./file0/file0", 000 [pid 5030] <... ioctl resumed>) = 0 [pid 5029] mkdirat(4, "./file0/file0", 000 [pid 5028] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5031] <... mkdirat resumed>) = 0 [pid 5030] close(4 [pid 5029] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5028] mkdirat(4, "./file0/file0", 000 [pid 5027] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5031] futex(0x7fbb1d6806cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5030] <... close resumed>) = 0 [pid 5029] mkdirat(4, "./file0/file0", 000 [pid 5028] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5027] mkdirat(4, "./file0/file0", 000 [pid 5031] <... futex resumed>) = 1 [pid 5030] futex(0x7fbb1d6806cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5029] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5028] mkdirat(4, "./file0/file0", 000 [pid 5027] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5024] <... futex resumed>) = 0 [pid 5031] futex(0x7fbb1d6806c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5030] <... futex resumed>) = 1 [pid 5029] mkdirat(4, "./file0/file0", 000 [pid 5028] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5027] mkdirat(4, "./file0/file0", 000 [pid 5025] <... futex resumed>) = 0 [pid 5024] futex(0x7fbb1d6806c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5031] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5030] futex(0x7fbb1d6806c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5029] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5028] mkdirat(4, "./file0/file0", 000 [pid 5027] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5025] futex(0x7fbb1d6806c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5024] <... futex resumed>) = 0 [pid 5020] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5031] mkdirat(4, "./file0/file0", 000 [pid 5030] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5029] mkdirat(4, "./file0/file0", 000 [pid 5028] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5027] mkdirat(4, "./file0/file0", 000 [pid 5025] <... futex resumed>) = 0 [pid 5024] futex(0x7fbb1d6806cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5020] futex(0x7fbb1d6806dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5031] <... mkdirat resumed>) = 0 [pid 5030] openat(AT_FDCWD, ".", O_RDONLY [pid 5029] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5028] mkdirat(4, "./file0/file0", 000 [pid 5026] <... mount resumed>) = 0 [pid 5020] <... futex resumed>) = 0 [pid 5030] <... openat resumed>) = 4 [pid 5029] mkdirat(4, "./file0/file0", 000 [pid 5028] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5020] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5031] mkdirat(4, "./file0/file0", 000 [pid 5030] futex(0x7fbb1d6806cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5029] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5028] mkdirat(4, "./file0/file0", 000 [pid 5027] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5026] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5025] futex(0x7fbb1d6806cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5020] <... mmap resumed>) = 0x7fbb15573000 [pid 5031] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5030] <... futex resumed>) = 0 [pid 5029] mkdirat(4, "./file0/file0", 000 [pid 5028] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5027] mkdirat(4, "./file0/file0", 000 [pid 5025] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5020] mprotect(0x7fbb15574000, 131072, PROT_READ|PROT_WRITE [pid 5026] <... openat resumed>) = 3 [pid 5031] mkdirat(4, "./file0/file0", 000 [pid 5030] futex(0x7fbb1d6806c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5029] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5028] mkdirat(4, "./file0/file0", 000 [pid 5027] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5026] chdir("./bus" [pid 5025] futex(0x7fbb1d6806c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5020] <... mprotect resumed>) = 0 [pid 5031] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5030] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5029] mkdirat(4, "./file0/file0", 000 [pid 5028] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5027] mkdirat(4, "./file0/file0", 000 [pid 5026] <... chdir resumed>) = 0 [pid 5025] <... futex resumed>) = 0 [pid 5020] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5031] mkdirat(4, "./file0/file0", 000 [pid 5030] mkdirat(4, "./bus", 000 [pid 5029] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5028] mkdirat(4, "./file0/file0", 000 [pid 5027] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5026] ioctl(4, LOOP_CLR_FD [pid 5025] futex(0x7fbb1d6806cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5020] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5031] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5030] <... mkdirat resumed>) = 0 [pid 5029] mkdirat(4, "./file0/file0", 000 [pid 5028] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5020] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fbb15593990, parent_tid=0x7fbb15593990, exit_signal=0, stack=0x7fbb15573000, stack_size=0x20300, tls=0x7fbb155936c0} [pid 5019] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5030] futex(0x7fbb1d6806cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5029] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5028] mkdirat(4, "./file0/file0", 000 [pid 5019] futex(0x7fbb1d6806dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5030] <... futex resumed>) = 0 [pid 5029] mkdirat(4, "./file0/file0", 000 [pid 5028] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5020] <... clone3 resumed> => {parent_tid=[5033]}, 88) = 5033 [pid 5019] <... futex resumed>) = 0 [pid 5030] futex(0x7fbb1d6806c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5029] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5028] mkdirat(4, "./file0/file0", 000 [pid 5020] rt_sigprocmask(SIG_SETMASK, [], [pid 5019] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5029] mkdirat(4, "./file0/file0", 000 [pid 5028] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5020] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5019] <... mmap resumed>) = 0x7fbb15573000 [pid 5029] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5028] mkdirat(4, "./file0/file0", 000 [pid 5027] mkdirat(4, "./file0/file0", 000 [pid 5026] <... ioctl resumed>) = 0 [pid 5020] futex(0x7fbb1d6806d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5019] mprotect(0x7fbb15574000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 5033 attached [pid 5031] mkdirat(4, "./file0/file0", 000 [pid 5029] mkdirat(4, "./file0/file0", 000 [pid 5028] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5027] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5026] close(4 [pid 5025] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5020] <... futex resumed>) = 0 [pid 5019] <... mprotect resumed>) = 0 [pid 5033] rseq(0x7fbb15593fe0, 0x20, 0, 0x53053053 [pid 5031] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5029] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5028] mkdirat(4, "./file0/file0", 000 [pid 5027] mkdirat(4, "./file0/file0", 000 [pid 5026] <... close resumed>) = 0 [pid 5025] futex(0x7fbb1d6806c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5020] futex(0x7fbb1d6806dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5019] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5033] <... rseq resumed>) = 0 [pid 5031] mkdirat(4, "./file0/file0", 000 [pid 5030] <... futex resumed>) = 0 [pid 5029] mkdirat(4, "./file0/file0", 000 [pid 5028] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5027] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5026] futex(0x7fbb1d6806cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5025] <... futex resumed>) = 1 [pid 5019] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5033] set_robust_list(0x7fbb155939a0, 24 [pid 5031] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5030] mkdirat(4, "./file0/file0", 000 [pid 5029] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5028] mkdirat(4, "./file0/file0", 000 [pid 5027] mkdirat(4, "./file0/file0", 000 [pid 5026] <... futex resumed>) = 1 [pid 5025] futex(0x7fbb1d6806cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5022] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5021] <... futex resumed>) = 0 [pid 5019] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fbb15593990, parent_tid=0x7fbb15593990, exit_signal=0, stack=0x7fbb15573000, stack_size=0x20300, tls=0x7fbb155936c0} [pid 5033] <... set_robust_list resumed>) = 0 [pid 5031] mkdirat(4, "./file0/file0", 000 [pid 5030] <... mkdirat resumed>) = 0 [pid 5029] mkdirat(4, "./file0/file0", 000 [pid 5028] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5027] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5026] futex(0x7fbb1d6806c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5022] futex(0x7fbb1d6806dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5021] futex(0x7fbb1d6806c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5033] rt_sigprocmask(SIG_SETMASK, [], [pid 5031] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5030] mkdirat(4, "./file0/file0", 000 [pid 5029] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5028] mkdirat(4, "./file0/file0", 000 [pid 5027] mkdirat(4, "./file0/file0", 000 [pid 5026] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5022] <... futex resumed>) = 0 [pid 5021] <... futex resumed>) = 0 [pid 5019] <... clone3 resumed> => {parent_tid=[5034]}, 88) = 5034 ./strace-static-x86_64: Process 5034 attached [pid 5033] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5031] mkdirat(4, "./file0/file0", 000 [pid 5030] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5029] mkdirat(4, "./file0/file0", 000 [pid 5028] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5027] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5026] openat(AT_FDCWD, ".", O_RDONLY [pid 5022] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5021] futex(0x7fbb1d6806cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5019] rt_sigprocmask(SIG_SETMASK, [], [pid 5034] rseq(0x7fbb15593fe0, 0x20, 0, 0x53053053 [pid 5033] unlinkat(4, "./bus/file0", AT_REMOVEDIR [pid 5031] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5030] mkdirat(4, "./file0/file0", 000 [pid 5029] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5028] mkdirat(4, "./file0/file0", 000 [pid 5027] mkdirat(4, "./file0/file0", 000 [pid 5026] <... openat resumed>) = 4 [pid 5022] <... mmap resumed>) = 0x7fbb15573000 [pid 5019] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5034] <... rseq resumed>) = 0 [pid 5033] <... unlinkat resumed>) = 0 [pid 5031] mkdirat(4, "./file0/file0", 000 [pid 5030] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5029] mkdirat(4, "./file0/file0", 000 [pid 5028] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5027] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5026] futex(0x7fbb1d6806cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5022] mprotect(0x7fbb15574000, 131072, PROT_READ|PROT_WRITE [pid 5019] futex(0x7fbb1d6806d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5034] set_robust_list(0x7fbb155939a0, 24 [pid 5033] unlinkat(4, "./bus/file0", AT_REMOVEDIR [pid 5031] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5030] mkdirat(4, "./file0/file0", 000 [pid 5029] <... mkdirat resumed>) = 0 [pid 5028] mkdirat(4, "./file0/file0", 000 [pid 5027] mkdirat(4, "./file0/file0", 000 [pid 5026] <... futex resumed>) = 1 [pid 5022] <... mprotect resumed>) = 0 [pid 5021] <... futex resumed>) = 0 [pid 5019] <... futex resumed>) = 0 [pid 5034] <... set_robust_list resumed>) = 0 [pid 5033] <... unlinkat resumed>) = 0 [pid 5031] mkdirat(4, "./file0/file0", 000 [pid 5030] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5029] mkdirat(4, "./file0/file0", 000 [pid 5028] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5027] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5026] futex(0x7fbb1d6806c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5022] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5021] futex(0x7fbb1d6806c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5019] futex(0x7fbb1d6806dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5034] rt_sigprocmask(SIG_SETMASK, [], [pid 5033] unlinkat(4, "./bus/file0", AT_REMOVEDIR [pid 5031] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5030] mkdirat(4, "./file0/file0", 000 [pid 5029] <... mkdirat resumed>) = 0 [pid 5028] mkdirat(4, "./file0/file0", 000 [pid 5027] mkdirat(4, "./file0/file0", 000 [pid 5026] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5024] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5022] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5021] <... futex resumed>) = 0 [pid 5034] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5031] mkdirat(4, "./file0/file0", 000 [pid 5027] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5026] mkdirat(4, "./bus", 000 [pid 5024] futex(0x7fbb1d6806dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5021] futex(0x7fbb1d6806cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5034] unlinkat(4, "./bus/file0", AT_REMOVEDIR [pid 5031] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5027] mkdirat(4, "./file0/file0", 000 [pid 5024] <... futex resumed>) = 0 [pid 5034] <... unlinkat resumed>) = 0 [pid 5031] mkdirat(4, "./file0/file0", 000 [pid 5027] <... mkdirat resumed>) = 0 [pid 5024] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5034] unlinkat(4, "./bus/file0", AT_REMOVEDIR [pid 5031] <... mkdirat resumed>) = -1 EEXIST (File exists) [pid 5027] mkdirat(4, "./file0/file0", 000 [pid 5024] <... mmap resumed>) = 0x7fbb15573000 [pid 5034] <... unlinkat resumed>) = 0 [ 63.199870][ T5033] ------------[ cut here ]------------ [ 63.205814][ T5033] WARNING: CPU: 0 PID: 5033 at fs/inode.c:330 drop_nlink+0xab/0xd0 [ 63.214011][ T5033] Modules linked in: [ 63.214781][ T5034] ------------[ cut here ]------------ [ 63.218189][ T5033] CPU: 0 PID: 5033 Comm: syz-executor159 Not tainted 6.5.0-rc6-syzkaller-00034-g2d7b8c6b90e4 #0 [ 63.223629][ T5034] WARNING: CPU: 1 PID: 5034 at fs/inode.c:330 drop_nlink+0xab/0xd0 [ 63.234267][ T5033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 63.242085][ T5034] Modules linked in: [ 63.252263][ T5033] RIP: 0010:drop_nlink+0xab/0xd0 [ 63.256233][ T5034] CPU: 1 PID: 5034 Comm: syz-executor159 Not tainted 6.5.0-rc6-syzkaller-00034-g2d7b8c6b90e4 #0 [ 63.261122][ T5033] Code: 43 48 8b 5d 28 be 08 00 00 00 48 8d bb 70 07 00 00 e8 89 95 e9 ff f0 48 ff 83 70 07 00 00 5b 5d e9 7a 5e 96 ff e8 75 5e 96 ff <0f> 0b c7 45 48 ff ff ff ff 5b 5d e9 65 5e 96 ff e8 a0 8e e9 ff e9 [ 63.271555][ T5034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 63.291185][ T5033] RSP: 0018:ffffc900035afcd0 EFLAGS: 00010293 [ 63.291214][ T5033] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 63.301315][ T5034] RIP: 0010:drop_nlink+0xab/0xd0 [ 63.307381][ T5033] RDX: ffff888016f30180 RSI: ffffffff81eec24b RDI: 0000000000000005 [ 63.307402][ T5033] RBP: ffff8880727f2300 R08: 0000000000000005 R09: 0000000000000000 [ 63.315384][ T5034] Code: 43 48 8b 5d 28 be 08 00 00 00 48 8d bb 70 07 00 00 e8 89 95 e9 ff f0 48 ff 83 70 07 00 00 5b 5d e9 7a 5e 96 ff e8 75 5e 96 ff <0f> 0b c7 45 48 ff ff ff ff 5b 5d e9 65 5e 96 ff e8 a0 8e e9 ff e9 [ 63.320384][ T5033] R10: 0000000000000000 R11: 0000000000094000 R12: ffffc900035afd48 [ 63.328385][ T5034] RSP: 0018:ffffc900035bfcd0 EFLAGS: 00010293 [ 63.336365][ T5033] R13: 0000000000000004 R14: ffff8880727f2300 R15: ffff888028d94000 [ 63.356067][ T5034] [ 63.356079][ T5034] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 63.364091][ T5033] FS: 00007fbb155936c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 63.370142][ T5034] RDX: ffff8880796c4140 RSI: ffffffff81eec24b RDI: 0000000000000005 [ 63.378215][ T5033] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.378236][ T5033] CR2: 00007ffcea4c9cb8 CR3: 00000000256f5000 CR4: 00000000003506f0 [ 63.380550][ T5034] RBP: ffff8880727ad3c0 R08: 0000000000000005 R09: 0000000000000000 [ 63.388533][ T5033] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 63.397514][ T5034] R10: 0000000000000000 R11: 0000000000094000 R12: ffffc900035bfd48 [ 63.405472][ T5033] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 63.412044][ T5034] R13: 0000000000000004 R14: ffff8880727ad3c0 R15: ffff88801f15a000 [ 63.420066][ T5033] Call Trace: [ 63.420078][ T5033] [ 63.428059][ T5034] FS: 00007fbb155936c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 63.436031][ T5033] ? __warn+0xe6/0x380 [ 63.444034][ T5034] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.451996][ T5033] ? drop_nlink+0xab/0xd0 [ 63.452029][ T5033] ? report_bug+0x3bc/0x580 [ 63.452066][ T5033] ? handle_bug+0x3c/0x70 [ 63.460118][ T5034] CR2: 00007f1493595ed8 CR3: 000000007aeda000 CR4: 00000000003506e0 [ 63.463393][ T5033] ? exc_invalid_op+0x17/0x40 [ 63.466362][ T5034] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 63.475317][ T5033] ? asm_exc_invalid_op+0x1a/0x20 [ 63.479372][ T5034] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 63.486153][ T5033] ? drop_nlink+0xab/0xd0 [ 63.490463][ T5034] Call Trace: [ 63.490476][ T5034] [ 63.494976][ T5033] ? drop_nlink+0xab/0xd0 [ 63.499310][ T5034] ? __warn+0xe6/0x380 [ 63.507297][ T5033] vfat_rmdir+0x328/0x3f0 [ 63.511981][ T5034] ? drop_nlink+0xab/0xd0 [ 63.519992][ T5033] ? vfat_lookup+0x5b0/0x5b0 [ 63.525045][ T5034] ? report_bug+0x3bc/0x580 [ 63.533084][ T5033] ? down_write_killable_nested+0x250/0x250 [ 63.537456][ T5034] ? handle_bug+0x3c/0x70 [ 63.540736][ T5033] vfs_rmdir+0x200/0x650 [ 63.543652][ T5034] ? exc_invalid_op+0x17/0x40 [ 63.547996][ T5033] do_rmdir+0x344/0x400 [ 63.552044][ T5034] ? asm_exc_invalid_op+0x1a/0x20 [ 63.556384][ T5033] ? __ia32_sys_mkdir+0x140/0x140 [ 63.556418][ T5033] ? strncpy_from_user+0x214/0x300 [ 63.556452][ T5033] ? _raw_spin_unlock_irq+0x23/0x50 [ 63.560759][ T5034] ? drop_nlink+0xab/0xd0 [ 63.565357][ T5033] __x64_sys_unlinkat+0xef/0x130 [ 63.569850][ T5034] ? drop_nlink+0xab/0xd0 [ 63.575853][ T5033] do_syscall_64+0x38/0xb0 [ 63.580350][ T5034] vfat_rmdir+0x328/0x3f0 [ 63.584599][ T5033] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 63.589298][ T5034] ? vfat_lookup+0x5b0/0x5b0 [ 63.593432][ T5033] RIP: 0033:0x7fbb1d5f7c49 [ 63.598749][ T5034] ? down_write_killable_nested+0x250/0x250 [ 63.603802][ T5033] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 63.608982][ T5034] vfs_rmdir+0x200/0x650 [ 63.614191][ T5033] RSP: 002b:00007fbb15593218 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 63.614222][ T5033] RAX: ffffffffffffffda RBX: 000000000000003f RCX: 00007fbb1d5f7c49 [ 63.618530][ T5034] do_rmdir+0x344/0x400 [ 63.623454][ T5033] RDX: 0000000000000200 RSI: 00000000200001c0 RDI: 0000000000000004 [ 63.627800][ T5034] ? __ia32_sys_mkdir+0x140/0x140 [ 63.632235][ T5033] RBP: 00007fbb1d6806d8 R08: 0000000000000000 R09: 0000000000000000 [ 63.636780][ T5034] ? strncpy_from_user+0x214/0x300 [ 63.643265][ T5033] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbb1d6806d0 [ 63.647873][ T5034] ? _raw_spin_unlock_irq+0x23/0x50 [ 63.652301][ T5033] R13: 00007fbb1d64d2f4 R14: 2f30656c69662f2e R15: 69662f7375622f2e [ 63.658224][ T5034] __x64_sys_unlinkat+0xef/0x130 [ 63.677838][ T5033] [ 63.677858][ T5033] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 63.677873][ T5033] CPU: 0 PID: 5033 Comm: syz-executor159 Not tainted 6.5.0-rc6-syzkaller-00034-g2d7b8c6b90e4 #0 [ 63.677902][ T5033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 63.677916][ T5033] Call Trace: [ 63.677925][ T5033] [ 63.677933][ T5033] dump_stack_lvl+0xd9/0x1b0 [ 63.677964][ T5033] panic+0x6a4/0x750 [ 63.677991][ T5033] ? panic_smp_self_stop+0xa0/0xa0 [ 63.678020][ T5033] ? show_trace_log_lvl+0x29d/0x3c0 [ 63.678060][ T5033] ? drop_nlink+0xab/0xd0 [ 63.678092][ T5033] check_panic_on_warn+0xab/0xb0 [ 63.678122][ T5033] __warn+0xf2/0x380 [ 63.678149][ T5033] ? drop_nlink+0xab/0xd0 [ 63.678179][ T5033] report_bug+0x3bc/0x580 [ 63.678204][ T5033] handle_bug+0x3c/0x70 [ 63.678235][ T5033] exc_invalid_op+0x17/0x40 [ 63.678261][ T5033] asm_exc_invalid_op+0x1a/0x20 [ 63.678289][ T5033] RIP: 0010:drop_nlink+0xab/0xd0 [ 63.678323][ T5033] Code: 43 48 8b 5d 28 be 08 00 00 00 48 8d bb 70 07 00 00 e8 89 95 e9 ff f0 48 ff 83 70 07 00 00 5b 5d e9 7a 5e 96 ff e8 75 5e 96 ff <0f> 0b c7 45 48 ff ff ff ff 5b 5d e9 65 5e 96 ff e8 a0 8e e9 ff e9 [ 63.678357][ T5033] RSP: 0018:ffffc900035afcd0 EFLAGS: 00010293 [ 63.678380][ T5033] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 63.678396][ T5033] RDX: ffff888016f30180 RSI: ffffffff81eec24b RDI: 0000000000000005 [ 63.678414][ T5033] RBP: ffff8880727f2300 R08: 0000000000000005 R09: 0000000000000000 [ 63.678430][ T5033] R10: 0000000000000000 R11: 0000000000094000 R12: ffffc900035afd48 [ 63.678447][ T5033] R13: 0000000000000004 R14: ffff8880727f2300 R15: ffff888028d94000 [ 63.678467][ T5033] ? drop_nlink+0xab/0xd0 [ 63.678500][ T5033] vfat_rmdir+0x328/0x3f0 [ 63.678531][ T5033] ? vfat_lookup+0x5b0/0x5b0 [ 63.678563][ T5033] ? down_write_killable_nested+0x250/0x250 [ 63.678601][ T5033] vfs_rmdir+0x200/0x650 [ 63.678631][ T5033] do_rmdir+0x344/0x400 [ 63.678668][ T5033] ? __ia32_sys_mkdir+0x140/0x140 [ 63.678702][ T5033] ? strncpy_from_user+0x214/0x300 [ 63.678734][ T5033] ? _raw_spin_unlock_irq+0x23/0x50 [ 63.678779][ T5033] __x64_sys_unlinkat+0xef/0x130 [ 63.678814][ T5033] do_syscall_64+0x38/0xb0 [ 63.678844][ T5033] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 63.678872][ T5033] RIP: 0033:0x7fbb1d5f7c49 [ 63.678891][ T5033] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 63.678915][ T5033] RSP: 002b:00007fbb15593218 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 63.678939][ T5033] RAX: ffffffffffffffda RBX: 000000000000003f RCX: 00007fbb1d5f7c49 [ 63.678957][ T5033] RDX: 0000000000000200 RSI: 00000000200001c0 RDI: 0000000000000004 [ 63.678974][ T5033] RBP: 00007fbb1d6806d8 R08: 0000000000000000 R09: 0000000000000000 [ 63.678991][ T5033] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbb1d6806d0 [ 63.679007][ T5033] R13: 00007fbb1d64d2f4 R14: 2f30656c69662f2e R15: 69662f7375622f2e [ 63.679029][ T5033] [ 63.682345][ T5033] Kernel Offset: disabled [ 64.056027][ T5033] Rebooting in 86400 seconds..