./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1246674202 <...> syzkaller login: [ 4.670590][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 5.220684][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 9.390418][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! [ 11.954780][ T23] kauditd_printk_skb: 60 callbacks suppressed [ 11.954787][ T23] audit: type=1400 audit(1666585993.369:71): avc: denied { transition } for pid=301 comm="sshd" path="/bin/sh" dev="sda1" ino=73 scontext=system_u:system_r:initrc_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 11.961142][ T23] audit: type=1400 audit(1666585993.379:72): avc: denied { write } for pid=301 comm="sh" path="pipe:[11380]" dev="pipefs" ino=11380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:initrc_t tclass=fifo_file permissive=1 [ 13.200396][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #88!!! [ 13.400390][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! [ 13.571248][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 13.581546][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! Warning: Permanently added '10.128.0.154' (ECDSA) to the list of known hosts. execve("./syz-executor1246674202", ["./syz-executor1246674202"], 0x7ffdf9854650 /* 10 vars */) = 0 brk(NULL) = 0x555556eeb000 brk(0x555556eebc40) = 0x555556eebc40 arch_prctl(ARCH_SET_FS, 0x555556eeb300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 set_tid_address(0x555556eeb5d0) = 382 set_robust_list(0x555556eeb5e0, 24) = 0 rt_sigaction(SIGRTMIN, {sa_handler=0x7f122005b530, sa_mask=[], sa_flags=SA_RESTORER|SA_SIGINFO, sa_restorer=0x7f122005bc00}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=0x7f122005b5d0, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f122005bc00}, NULL, 8) = 0 rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1246674202", 4096) = 28 brk(0x555556f0cc40) = 0x555556f0cc40 brk(0x555556f0d000) = 0x555556f0d000 mprotect(0x7f122011c000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556eeb5d0) = 383 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556eeb5d0) = 384 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556eeb5d0) = 385 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556eeb5d0) = 386 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556eeb5d0) = 387 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556eeb5d0) = 388 ./strace-static-x86_64: Process 384 attached [pid 384] set_robust_list(0x555556eeb5e0, 24) = 0 [pid 384] unshare(CLONE_NEWPID) = 0 [pid 384] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556eeb5d0) = 389 ./strace-static-x86_64: Process 383 attached [pid 383] set_robust_list(0x555556eeb5e0, 24) = 0 [pid 383] unshare(CLONE_NEWPID) = 0 [pid 383] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556eeb5d0) = 390 ./strace-static-x86_64: Process 389 attached [pid 389] set_robust_list(0x555556eeb5e0, 24) = 0 [pid 389] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 389] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 389] setsid() = 1 [pid 389] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 389] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 389] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 389] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 389] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 389] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 389] unshare(CLONE_NEWNS) = 0 [pid 389] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 389] unshare(CLONE_NEWIPC) = -1 EINVAL (Invalid argument) [pid 389] unshare(CLONE_NEWCGROUP) = 0 [pid 389] unshare(CLONE_NEWUTS) = 0 [pid 389] unshare(CLONE_SYSVSEM) = 0 [pid 389] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 389] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 389] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 389] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 389] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) ./strace-static-x86_64: Process 390 attached [pid 389] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 390] set_robust_list(0x555556eeb5e0, 24 [pid 389] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 389] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 390] <... set_robust_list resumed>) = 0 [pid 390] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 389] getpid() = 1 [pid 389] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 390] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 389] <... capset resumed>) = 0 [pid 389] unshare(CLONE_NEWNET [pid 390] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 390] setsid() = 1 [pid 390] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 390] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 390] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 390] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 390] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 390] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 390] unshare(CLONE_NEWNS) = 0 [pid 390] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 390] unshare(CLONE_NEWIPC) = -1 EINVAL (Invalid argument) [pid 390] unshare(CLONE_NEWCGROUP) = 0 [pid 390] unshare(CLONE_NEWUTS) = 0 [pid 390] unshare(CLONE_SYSVSEM) = 0 [pid 390] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 390] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 390] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 390] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 390] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 390] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 390] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 390] getpid() = 1 [pid 390] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 386] set_robust_list(0x555556eeb5e0, 24 [pid 385] set_robust_list(0x555556eeb5e0, 24 [pid 387] set_robust_list(0x555556eeb5e0, 24 [pid 386] <... set_robust_list resumed>) = 0 [pid 386] unshare(CLONE_NEWPID [pid 387] <... set_robust_list resumed>) = 0 [pid 385] <... set_robust_list resumed>) = 0 [pid 388] set_robust_list(0x555556eeb5e0, 24 [pid 387] unshare(CLONE_NEWPID [pid 386] <... unshare resumed>) = 0 [pid 385] unshare(CLONE_NEWPID [pid 390] <... unshare resumed>) = 0 [pid 389] <... unshare resumed>) = 0 [pid 389] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3 [pid 389] write(3, "0 65535", 7) = 7 [pid 389] close(3) = 0 [pid 389] mkdir("/dev/binderfs", 0777) = 0 [pid 389] mount("binder", "/dev/binderfs", "binder", 0, NULL) = 0 [pid 389] symlink("/dev/binderfs", "./binderfs") = 0 [pid 389] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556eeb5d0) = 2 [pid 390] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3 [pid 390] write(3, "0 65535", 7) = 7 [pid 390] close(3) = 0 [pid 390] mkdir("/dev/binderfs", 0777) = -1 EEXIST (File exists) [pid 390] mount("binder", "/dev/binderfs", "binder", 0, NULL) = 0 [pid 390] symlink("/dev/binderfs", "./binderfs") = -1 EEXIST (File exists) [pid 390] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556eeb5d0) = 2 ./strace-static-x86_64: Process 391 attached [pid 391] set_robust_list(0x555556eeb5e0, 24) = 0 ./strace-static-x86_64: Process 392 attached [pid 391] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 392] set_robust_list(0x555556eeb5e0, 24 [pid 391] <... prctl resumed>) = 0 [pid 391] setpgid(0, 0 [pid 392] <... set_robust_list resumed>) = 0 [pid 392] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 391] <... setpgid resumed>) = 0 [pid 391] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 392] <... prctl resumed>) = 0 [pid 392] setpgid(0, 0 [pid 391] <... openat resumed>) = 3 [pid 392] <... setpgid resumed>) = 0 [pid 392] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 392] write(3, "1000", 4) = 4 [pid 392] close(3) = 0 [pid 392] futex(0x7f122012240c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 392] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f122002b000 [pid 392] mprotect(0x7f122002c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 392] clone(child_stack=0x7f122004b3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 391] write(3, "1000", 4) = 4 [pid 391] close(3) = 0 [pid 391] futex(0x7f122012240c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 391] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f122002b000 [pid 391] mprotect(0x7f122002c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 391] clone(child_stack=0x7f122004b3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 392] <... clone resumed>, parent_tid=[3], tls=0x7f122004b700, child_tidptr=0x7f122004b9d0) = 3 [pid 392] futex(0x7f1220122408, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 392] futex(0x7f122012240c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 391] <... clone resumed>, parent_tid=[3], tls=0x7f122004b700, child_tidptr=0x7f122004b9d0) = 3 [pid 391] futex(0x7f1220122408, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 391] futex(0x7f122012240c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 394 attached [pid 394] set_robust_list(0x7f122004b9e0, 24) = 0 [pid 394] openat(AT_FDCWD, "memory.events", O_WRONLY|O_CREAT|O_EXCL|O_TRUNC|O_APPEND|FASYNC|0x20, 000) = 3 [pid 394] futex(0x7f122012240c, FUTEX_WAKE_PRIVATE, 1000000 [pid 391] <... futex resumed>) = 0 [pid 391] futex(0x7f1220122408, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 391] futex(0x7f122012240c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 394] <... futex resumed>) = 1 [pid 394] pipe([4, 5]) = 0 [pid 394] futex(0x7f122012240c, FUTEX_WAKE_PRIVATE, 1000000 [pid 391] <... futex resumed>) = 0 [pid 391] futex(0x7f1220122408, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 391] futex(0x7f122012240c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 394] <... futex resumed>) = 1 [pid 394] openat(AT_FDCWD, "memory.events", O_WRONLY|O_TRUNC|O_NONBLOCK|O_DSYNC|O_DIRECT|FASYNC|0x4) = 6 [pid 394] futex(0x7f122012240c, FUTEX_WAKE_PRIVATE, 1000000 [pid 391] <... futex resumed>) = 0 [pid 391] futex(0x7f1220122408, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 391] futex(0x7f122012240c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 394] <... futex resumed>) = 1 [pid 394] splice(4, NULL, 6, NULL, 142606540, 0 [pid 388] <... set_robust_list resumed>) = 0 [pid 388] unshare(CLONE_NEWPID) = 0 [pid 388] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556eeb5d0) = 395 [pid 387] <... unshare resumed>) = 0 [pid 387] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556eeb5d0) = 396 [pid 386] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 385] <... unshare resumed>) = 0 [pid 385] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 386] <... clone resumed>, child_tidptr=0x555556eeb5d0) = 397 ./strace-static-x86_64: Process 398 attached ./strace-static-x86_64: Process 397 attached ./strace-static-x86_64: Process 396 attached ./strace-static-x86_64: Process 395 attached ./strace-static-x86_64: Process 393 attached [pid 385] <... clone resumed>, child_tidptr=0x555556eeb5d0) = 398 [pid 398] set_robust_list(0x555556eeb5e0, 24) = 0 [pid 398] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 398] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 398] setsid() = 1 [pid 398] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 398] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 398] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 398] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [ 20.862380][ T23] audit: type=1400 audit(1666586002.279:73): avc: denied { execmem } for pid=382 comm="syz-executor124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 20.885481][ T23] audit: type=1400 audit(1666586002.279:74): avc: denied { mounton } for pid=389 comm="syz-executor124" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [pid 398] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 398] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 398] unshare(CLONE_NEWNS) = 0 [pid 398] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 398] unshare(CLONE_NEWIPC) = -1 EINVAL (Invalid argument) [pid 398] unshare(CLONE_NEWCGROUP) = 0 [pid 398] unshare(CLONE_NEWUTS) = 0 [pid 398] unshare(CLONE_SYSVSEM) = 0 [pid 398] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 398] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 398] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 398] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 398] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 398] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 398] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 398] getpid() = 1 [pid 398] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 397] set_robust_list(0x555556eeb5e0, 24 [pid 396] set_robust_list(0x555556eeb5e0, 24 [pid 395] set_robust_list(0x555556eeb5e0, 24 [pid 393] set_robust_list(0x7f122004b9e0, 24 [pid 397] <... set_robust_list resumed>) = 0 [pid 396] <... set_robust_list resumed>) = 0 [pid 395] <... set_robust_list resumed>) = 0 [pid 393] <... set_robust_list resumed>) = 0 [pid 398] <... clone resumed>, child_tidptr=0x555556eeb5d0) = 2 ./strace-static-x86_64: Process 399 attached [pid 397] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 396] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 395] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 393] openat(AT_FDCWD, "memory.events", O_WRONLY|O_CREAT|O_EXCL|O_TRUNC|O_APPEND|FASYNC|0x20, 000 [pid 397] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 396] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 395] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 393] <... openat resumed>) = -1 EEXIST (File exists) [pid 397] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 396] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 395] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 393] futex(0x7f122012240c, FUTEX_WAKE_PRIVATE, 1000000 [pid 397] <... prctl resumed>) = 0 [pid 396] <... prctl resumed>) = 0 [pid 395] <... prctl resumed>) = 0 [pid 393] <... futex resumed>) = 1 [pid 392] <... futex resumed>) = 0 [pid 397] setsid( [pid 396] setsid( [pid 395] setsid( [pid 393] pipe( [pid 392] futex(0x7f1220122408, FUTEX_WAKE_PRIVATE, 1000000 [pid 397] <... setsid resumed>) = 1 [pid 396] <... setsid resumed>) = 1 [pid 395] <... setsid resumed>) = 1 [pid 393] <... pipe resumed>[3, 4]) = 0 [pid 392] <... futex resumed>) = 0 [pid 397] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 396] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 395] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, [pid 393] futex(0x7f122012240c, FUTEX_WAKE_PRIVATE, 1000000 [pid 392] futex(0x7f122012240c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 397] <... prlimit64 resumed>NULL) = 0 [pid 396] <... prlimit64 resumed>NULL) = 0 [pid 395] <... prlimit64 resumed>NULL) = 0 [pid 393] <... futex resumed>) = 0 [pid 392] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 397] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 396] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 395] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, [pid 393] openat(AT_FDCWD, "memory.events", O_WRONLY|O_TRUNC|O_NONBLOCK|O_DSYNC|O_DIRECT|FASYNC|0x4 [pid 392] futex(0x7f1220122408, FUTEX_WAKE_PRIVATE, 1000000 [pid 397] <... prlimit64 resumed>NULL) = 0 [pid 396] <... prlimit64 resumed>NULL) = 0 [pid 395] <... prlimit64 resumed>NULL) = 0 [pid 393] <... openat resumed>) = 5 [pid 392] <... futex resumed>) = 0 [pid 397] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 396] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 395] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, [pid 393] futex(0x7f122012240c, FUTEX_WAKE_PRIVATE, 1000000 [pid 392] futex(0x7f122012240c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 397] <... prlimit64 resumed>NULL) = 0 [pid 396] <... prlimit64 resumed>NULL) = 0 [pid 395] <... prlimit64 resumed>NULL) = 0 [pid 393] <... futex resumed>) = 0 [pid 392] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 397] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 396] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 395] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, [pid 393] splice(3, NULL, 5, NULL, 142606540, 0 [pid 392] futex(0x7f1220122408, FUTEX_WAKE_PRIVATE, 1000000 [pid 397] <... prlimit64 resumed>NULL) = 0 [pid 396] <... prlimit64 resumed>NULL) = 0 [pid 395] <... prlimit64 resumed>NULL) = 0 [pid 392] <... futex resumed>) = 0 [pid 397] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 396] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 395] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, [pid 392] futex(0x7f122012240c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 397] <... prlimit64 resumed>NULL) = 0 [pid 396] <... prlimit64 resumed>NULL) = 0 [pid 395] <... prlimit64 resumed>NULL) = 0 [pid 397] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 396] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 395] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, [pid 397] <... prlimit64 resumed>NULL) = 0 [pid 396] <... prlimit64 resumed>NULL) = 0 [pid 395] <... prlimit64 resumed>NULL) = 0 [pid 397] unshare(CLONE_NEWNS [pid 396] unshare(CLONE_NEWNS [pid 395] unshare(CLONE_NEWNS [pid 397] <... unshare resumed>) = 0 [pid 396] <... unshare resumed>) = 0 [pid 395] <... unshare resumed>) = 0 [pid 397] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 396] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 395] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 397] <... mount resumed>) = 0 [pid 396] <... mount resumed>) = 0 [pid 395] <... mount resumed>) = 0 [pid 397] unshare(CLONE_NEWIPC [pid 396] unshare(CLONE_NEWIPC [pid 395] unshare(CLONE_NEWIPC [pid 397] <... unshare resumed>) = -1 EINVAL (Invalid argument) [pid 396] <... unshare resumed>) = -1 EINVAL (Invalid argument) [pid 395] <... unshare resumed>) = -1 EINVAL (Invalid argument) [pid 397] unshare(CLONE_NEWCGROUP [pid 396] unshare(CLONE_NEWCGROUP [pid 395] unshare(CLONE_NEWCGROUP [pid 397] <... unshare resumed>) = 0 [pid 396] <... unshare resumed>) = 0 [pid 395] <... unshare resumed>) = 0 [pid 397] unshare(CLONE_NEWUTS [pid 396] unshare(CLONE_NEWUTS [pid 395] unshare(CLONE_NEWUTS [pid 397] <... unshare resumed>) = 0 [pid 396] <... unshare resumed>) = 0 [pid 395] <... unshare resumed>) = 0 [pid 397] unshare(CLONE_SYSVSEM [pid 396] unshare(CLONE_SYSVSEM [pid 395] unshare(CLONE_SYSVSEM [pid 397] <... unshare resumed>) = 0 [pid 396] <... unshare resumed>) = 0 [pid 395] <... unshare resumed>) = 0 [pid 397] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 396] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 395] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 397] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 396] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 395] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 397] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 396] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 395] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 397] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 396] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 395] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 391] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 397] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 396] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 395] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 391] futex(0x7f122012240c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 399] set_robust_list(0x555556eeb5e0, 24) = 0 [pid 399] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 399] setpgid(0, 0) = 0 [pid 399] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 399] write(3, "1000", 4) = 4 [pid 399] close(3) = 0 [pid 399] futex(0x7f122012240c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 399] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f122002b000 [pid 399] mprotect(0x7f122002c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 399] clone(child_stack=0x7f122004b3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3], tls=0x7f122004b700, child_tidptr=0x7f122004b9d0) = 3 [pid 399] futex(0x7f1220122408, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 399] futex(0x7f122012240c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 400 attached [pid 400] set_robust_list(0x7f122004b9e0, 24) = 0 [pid 400] openat(AT_FDCWD, "memory.events", O_WRONLY|O_CREAT|O_EXCL|O_TRUNC|O_APPEND|FASYNC|0x20, 000) = -1 EEXIST (File exists) [pid 400] futex(0x7f122012240c, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] <... futex resumed>) = 0 [pid 399] futex(0x7f1220122408, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 399] futex(0x7f122012240c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 400] <... futex resumed>) = 1 [pid 400] pipe([3, 4]) = 0 [pid 400] futex(0x7f122012240c, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] <... futex resumed>) = 0 [pid 399] futex(0x7f1220122408, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 399] futex(0x7f122012240c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 400] <... futex resumed>) = 1 [pid 400] openat(AT_FDCWD, "memory.events", O_WRONLY|O_TRUNC|O_NONBLOCK|O_DSYNC|O_DIRECT|FASYNC|0x4) = 5 [pid 400] futex(0x7f122012240c, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] <... futex resumed>) = 0 [pid 399] futex(0x7f1220122408, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 399] futex(0x7f122012240c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 400] <... futex resumed>) = 1 [ 20.910633][ T23] audit: type=1400 audit(1666586002.279:75): avc: denied { mount } for pid=389 comm="syz-executor124" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 20.933457][ T23] audit: type=1400 audit(1666586002.279:76): avc: denied { mounton } for pid=389 comm="syz-executor124" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [pid 400] splice(3, NULL, 5, NULL, 142606540, 0 [pid 397] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 397] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 397] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 397] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 397] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 397] getpid() = 1 [pid 397] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 395] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 396] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 395] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 391] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 401] <... write resumed>) = 4 [pid 401] close(3) = 0 [pid 401] futex(0x7f122012240c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 401] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f122002b000 [pid 401] mprotect(0x7f122002c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 401] clone(child_stack=0x7f122004b3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3], tls=0x7f122004b700, child_tidptr=0x7f122004b9d0) = 3 [pid 401] futex(0x7f1220122408, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 401] futex(0x7f122012240c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 402 attached [pid 402] set_robust_list(0x7f122004b9e0, 24) = 0 [pid 402] openat(AT_FDCWD, "memory.events", O_WRONLY|O_CREAT|O_EXCL|O_TRUNC|O_APPEND|FASYNC|0x20, 000) = -1 EEXIST (File exists) [pid 402] futex(0x7f122012240c, FUTEX_WAKE_PRIVATE, 1000000 [pid 401] <... futex resumed>) = 0 [pid 401] futex(0x7f1220122408, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 401] futex(0x7f122012240c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 402] <... futex resumed>) = 1 [pid 402] pipe([3, 4]) = 0 [pid 402] futex(0x7f122012240c, FUTEX_WAKE_PRIVATE, 1000000 [pid 401] <... futex resumed>) = 0 [pid 401] futex(0x7f1220122408, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 401] futex(0x7f122012240c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 402] <... futex resumed>) = 1 [pid 402] openat(AT_FDCWD, "memory.events", O_WRONLY|O_TRUNC|O_NONBLOCK|O_DSYNC|O_DIRECT|FASYNC|0x4) = 5 [pid 402] futex(0x7f122012240c, FUTEX_WAKE_PRIVATE, 1000000 [pid 401] <... futex resumed>) = 0 [pid 401] futex(0x7f1220122408, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 401] futex(0x7f122012240c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 402] <... futex resumed>) = 1 [pid 402] splice(3, NULL, 5, NULL, 142606540, 0 [pid 396] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 396] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 396] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 396] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 396] getpid() = 1 [pid 396] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 395] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 392] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 391] futex(0x7f122012241c, FUTEX_WAKE_PRIVATE, 1000000 [pid 395] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 392] futex(0x7f122012241c, FUTEX_WAKE_PRIVATE, 1000000 [pid 391] <... futex resumed>) = 0 [pid 395] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 392] <... futex resumed>) = 0 [pid 391] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 395] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 392] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 391] <... mmap resumed>) = 0x7f122000a000 [pid 395] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 392] <... mmap resumed>) = 0x7f122000a000 [pid 391] mprotect(0x7f122000b000, 131072, PROT_READ|PROT_WRITE [pid 395] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 392] mprotect(0x7f122000b000, 131072, PROT_READ|PROT_WRITE [pid 391] <... mprotect resumed>) = 0 [pid 395] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 392] <... mprotect resumed>) = 0 [pid 395] getpid( [pid 392] clone(child_stack=0x7f122002a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 391] clone(child_stack=0x7f122002a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 395] <... getpid resumed>) = 1 [pid 395] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, [pid 392] <... clone resumed>, parent_tid=[4], tls=0x7f122002a700, child_tidptr=0x7f122002a9d0) = 4 [pid 391] <... clone resumed>, parent_tid=[4], tls=0x7f122002a700, child_tidptr=0x7f122002a9d0) = 4 [pid 395] <... capget resumed>{effective=1< [pid 395] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 391] futex(0x7f1220122418, FUTEX_WAKE_PRIVATE, 1000000 [pid 395] <... capset resumed>) = 0 [pid 392] <... futex resumed>) = 0 [pid 391] <... futex resumed>) = 0 [pid 395] unshare(CLONE_NEWNET [pid 392] futex(0x7f122012241c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 391] futex(0x7f122012241c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 404 attached [pid 404] set_robust_list(0x7f122002a9e0, 24) = 0 [pid 404] fcntl(5, F_SETPIPE_SZ, 34603007) = 67108864 [pid 404] futex(0x7f122012241c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 391] <... futex resumed>) = 0 ./strace-static-x86_64: Process 403 attached [pid 399] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 396] <... unshare resumed>) = 0 [pid 395] <... unshare resumed>) = 0 [pid 391] futex(0x7f1220122418, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] futex(0x7f122012241c, FUTEX_WAKE_PRIVATE, 1000000 [pid 404] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4294967060 [pid 403] set_robust_list(0x7f122002a9e0, 24 [pid 396] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 395] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 391] <... futex resumed>) = 0 [pid 399] <... futex resumed>) = 0 [pid 391] futex(0x7f122012241c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 399] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 403] <... set_robust_list resumed>) = 0 [pid 399] <... mmap resumed>) = 0x7f122000a000 [pid 403] fcntl(4, F_SETPIPE_SZ, 34603007 [pid 399] mprotect(0x7f122000b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 399] clone(child_stack=0x7f122002a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4], tls=0x7f122002a700, child_tidptr=0x7f122002a9d0) = 4 [pid 399] futex(0x7f1220122418, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 399] futex(0x7f122012241c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 403] <... fcntl resumed>) = 67108864 [pid 403] futex(0x7f122012241c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 392] <... futex resumed>) = 0 [pid 392] futex(0x7f1220122418, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 392] futex(0x7f122012241c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 403] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4294967060 [pid 396] <... openat resumed>) = 3 [pid 395] <... openat resumed>) = 3 [pid 396] write(3, "0 65535", 7 [pid 395] write(3, "0 65535", 7) = 7 [pid 395] close(3) = 0 [pid 395] mkdir("/dev/binderfs", 0777) = -1 EEXIST (File exists) [pid 395] mount("binder", "/dev/binderfs", "binder", 0, NULL) = 0 [pid 395] symlink("/dev/binderfs", "./binderfs") = -1 EEXIST (File exists) [pid 395] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 396] <... write resumed>) = 7 [pid 396] close(3 [pid 395] <... clone resumed>, child_tidptr=0x555556eeb5d0) = 2 [pid 396] <... close resumed>) = 0 [pid 396] mkdir("/dev/binderfs", 0777) = -1 EEXIST (File exists) [pid 396] mount("binder", "/dev/binderfs", "binder", 0, NULL) = 0 ./strace-static-x86_64: Process 405 attached [pid 405] set_robust_list(0x7f122002a9e0, 24) = 0 [pid 405] fcntl(4, F_SETPIPE_SZ, 34603007 [pid 396] symlink("/dev/binderfs", "./binderfs" [pid 405] <... fcntl resumed>) = 67108864 [pid 396] <... symlink resumed>) = -1 EEXIST (File exists) [pid 405] futex(0x7f122012241c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 405] futex(0x7f1220122418, FUTEX_WAIT_PRIVATE, 0, NULL [pid 399] <... futex resumed>) = 0 [pid 399] futex(0x7f1220122418, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 399] futex(0x7f122012241c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 405] <... futex resumed>) = 0 [pid 405] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4294967060 [pid 396] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556eeb5d0) = 2 ./strace-static-x86_64: Process 407 attached [pid 401] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 401] futex(0x7f122012241c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 407] set_robust_list(0x555556eeb5e0, 24 [pid 401] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f122000a000 [pid 401] mprotect(0x7f122000b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 407] <... set_robust_list resumed>) = 0 [pid 401] clone(child_stack=0x7f122002a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 406 attached [ 20.956164][ T23] audit: type=1400 audit(1666586002.299:77): avc: denied { mounton } for pid=389 comm="syz-executor124" path="/dev/binderfs" dev="devtmpfs" ino=363 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 20.979984][ T23] audit: type=1400 audit(1666586002.299:78): avc: denied { mount } for pid=389 comm="syz-executor124" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [pid 407] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 401] <... clone resumed>, parent_tid=[4], tls=0x7f122002a700, child_tidptr=0x7f122002a9d0) = 4 [pid 407] <... prctl resumed>) = 0 [pid 406] set_robust_list(0x555556eeb5e0, 24) = 0 [pid 406] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 407] setpgid(0, 0 [pid 401] futex(0x7f1220122418, FUTEX_WAKE_PRIVATE, 1000000 [pid 406] setpgid(0, 0) = 0 [pid 406] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 406] write(3, "1000", 4) = 4 [pid 406] close(3) = 0 [pid 406] futex(0x7f122012240c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 406] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f122002b000 [pid 406] mprotect(0x7f122002c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 406] clone(child_stack=0x7f122004b3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 401] <... futex resumed>) = 0 [pid 407] <... setpgid resumed>) = 0 [pid 401] futex(0x7f122012241c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 407] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 407] write(3, "1000", 4 [pid 406] <... clone resumed>, parent_tid=[3], tls=0x7f122004b700, child_tidptr=0x7f122004b9d0) = 3 [pid 407] <... write resumed>) = 4 [pid 407] close(3 [pid 406] futex(0x7f1220122408, FUTEX_WAKE_PRIVATE, 1000000 [pid 407] <... close resumed>) = 0 [pid 407] futex(0x7f122012240c, FUTEX_WAKE_PRIVATE, 1000000 [pid 406] <... futex resumed>) = 0 [pid 407] <... futex resumed>) = 0 [pid 407] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f122002b000 [pid 407] mprotect(0x7f122002c000, 131072, PROT_READ|PROT_WRITE [pid 406] futex(0x7f122012240c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 407] <... mprotect resumed>) = 0 [pid 407] clone(child_stack=0x7f122004b3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3], tls=0x7f122004b700, child_tidptr=0x7f122004b9d0) = 3 [pid 407] futex(0x7f1220122408, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 408 attached [pid 407] futex(0x7f122012240c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 408] set_robust_list(0x7f122002a9e0, 24) = 0 [pid 408] fcntl(4, F_SETPIPE_SZ, 34603007) = 67108864 ./strace-static-x86_64: Process 409 attached [pid 409] set_robust_list(0x7f122004b9e0, 24) = 0 [pid 409] openat(AT_FDCWD, "memory.events", O_WRONLY|O_CREAT|O_EXCL|O_TRUNC|O_APPEND|FASYNC|0x20, 000) = -1 EEXIST (File exists) [pid 409] futex(0x7f122012240c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 406] <... futex resumed>) = 0 [pid 406] futex(0x7f1220122408, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 406] futex(0x7f122012240c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 409] pipe([3, 4]) = 0 [pid 409] futex(0x7f122012240c, FUTEX_WAKE_PRIVATE, 1000000 [pid 406] <... futex resumed>) = 0 [pid 406] futex(0x7f1220122408, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 406] futex(0x7f122012240c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 409] <... futex resumed>) = 1 [pid 409] openat(AT_FDCWD, "memory.events", O_WRONLY|O_TRUNC|O_NONBLOCK|O_DSYNC|O_DIRECT|FASYNC|0x4) = 5 [pid 408] futex(0x7f122012241c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 408] futex(0x7f1220122418, FUTEX_WAIT_PRIVATE, 0, NULL [pid 401] <... futex resumed>) = 0 [pid 401] futex(0x7f1220122418, FUTEX_WAKE_PRIVATE, 1000000 [pid 409] futex(0x7f122012240c, FUTEX_WAKE_PRIVATE, 1000000 [pid 401] <... futex resumed>) = 1 [pid 408] <... futex resumed>) = 0 [pid 401] futex(0x7f122012241c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 408] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4294967060 [pid 409] <... futex resumed>) = 1 [pid 406] <... futex resumed>) = 0 [pid 409] splice(3, NULL, 5, NULL, 142606540, 0 [pid 406] futex(0x7f1220122408, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 406] futex(0x7f122012240c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 410 attached [pid 410] set_robust_list(0x7f122004b9e0, 24) = 0 [pid 410] openat(AT_FDCWD, "memory.events", O_WRONLY|O_CREAT|O_EXCL|O_TRUNC|O_APPEND|FASYNC|0x20, 000) = -1 EEXIST (File exists) [pid 410] futex(0x7f122012240c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 407] <... futex resumed>) = 0 [pid 407] futex(0x7f1220122408, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 407] futex(0x7f122012240c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 410] pipe([3, 4]) = 0 [pid 410] futex(0x7f122012240c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 407] <... futex resumed>) = 0 [pid 410] futex(0x7f1220122408, FUTEX_WAIT_PRIVATE, 0, NULL [pid 407] futex(0x7f1220122408, FUTEX_WAKE_PRIVATE, 1000000 [pid 410] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 410] openat(AT_FDCWD, "memory.events", O_WRONLY|O_TRUNC|O_NONBLOCK|O_DSYNC|O_DIRECT|FASYNC|0x4 [pid 407] <... futex resumed>) = 0 [pid 407] futex(0x7f122012240c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 410] <... openat resumed>) = 5 [pid 410] futex(0x7f122012240c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 407] <... futex resumed>) = 0 [pid 391] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 391] futex(0x7f122012241c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 391] futex(0x7f122012241c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 391] futex(0x7f122012242c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 391] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f121ffe9000 [pid 391] mprotect(0x7f121ffea000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 391] clone(child_stack=0x7f12200093f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5], tls=0x7f1220009700, child_tidptr=0x7f12200099d0) = 5 [pid 391] futex(0x7f1220122428, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 391] futex(0x7f122012242c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 410] futex(0x7f1220122408, FUTEX_WAIT_PRIVATE, 0, NULL [pid 407] futex(0x7f1220122408, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 410] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 410] splice(3, NULL, 5, NULL, 142606540, 0 [pid 407] futex(0x7f122012240c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 392] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 392] futex(0x7f122012241c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 392] futex(0x7f122012241c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 392] futex(0x7f122012242c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 392] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f121ffe9000 [pid 392] mprotect(0x7f121ffea000, 131072, PROT_READ|PROT_WRITE [pid 399] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 392] <... mprotect resumed>) = 0 [pid 399] futex(0x7f122012242c, FUTEX_WAKE_PRIVATE, 1000000 [pid 392] clone(child_stack=0x7f12200093f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 412 attached ./strace-static-x86_64: Process 411 attached [pid 399] <... futex resumed>) = 0 [pid 403] <... write resumed>) = 16773120 [pid 412] set_robust_list(0x7f12200099e0, 24 [pid 411] set_robust_list(0x7f12200099e0, 24 [pid 403] futex(0x7f122012241c, FUTEX_WAKE_PRIVATE, 1000000 [pid 399] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 392] <... clone resumed>, parent_tid=[5], tls=0x7f1220009700, child_tidptr=0x7f12200099d0) = 5 [pid 412] <... set_robust_list resumed>) = 0 [pid 411] <... set_robust_list resumed>) = 0 [pid 403] <... futex resumed>) = 0 [pid 399] <... mmap resumed>) = 0x7f121ffe9000 [pid 392] futex(0x7f1220122428, FUTEX_WAKE_PRIVATE, 1000000 [pid 412] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4294967060 [pid 411] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4294967060 [pid 403] futex(0x7f1220122418, FUTEX_WAIT_PRIVATE, 0, NULL [pid 399] mprotect(0x7f121ffea000, 131072, PROT_READ|PROT_WRITE [pid 392] <... futex resumed>) = 0 [pid 392] futex(0x7f122012242c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 399] <... mprotect resumed>) = 0 [pid 399] clone(child_stack=0x7f12200093f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5], tls=0x7f1220009700, child_tidptr=0x7f12200099d0) = 5 [pid 399] futex(0x7f1220122428, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 399] futex(0x7f122012242c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 405] <... write resumed>) = 16773120 [pid 405] futex(0x7f122012241c, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 413 attached [pid 401] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 413] set_robust_list(0x7f12200099e0, 24 [pid 405] <... futex resumed>) = 0 [pid 401] futex(0x7f122012241c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 405] futex(0x7f1220122418, FUTEX_WAIT_PRIVATE, 0, NULL [pid 413] <... set_robust_list resumed>) = 0 [pid 401] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 413] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4294967060 [pid 401] futex(0x7f122012242c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 401] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f121ffe9000 [pid 401] mprotect(0x7f121ffea000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 401] clone(child_stack=0x7f12200093f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5], tls=0x7f1220009700, child_tidptr=0x7f12200099d0) = 5 [pid 401] futex(0x7f1220122428, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 401] futex(0x7f122012242c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 406] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 406] futex(0x7f122012241c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 406] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f122000a000 [pid 406] mprotect(0x7f122000b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 406] clone(child_stack=0x7f122002a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4], tls=0x7f122002a700, child_tidptr=0x7f122002a9d0) = 4 [pid 406] futex(0x7f1220122418, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 406] futex(0x7f122012241c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 414 attached [pid 414] set_robust_list(0x7f12200099e0, 24) = 0 [pid 414] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4294967060./strace-static-x86_64: Process 415 attached [pid 415] set_robust_list(0x7f122002a9e0, 24) = 0 [pid 415] fcntl(4, F_SETPIPE_SZ, 34603007) = 67108864 [pid 415] futex(0x7f122012241c, FUTEX_WAKE_PRIVATE, 1000000 [pid 406] <... futex resumed>) = 0 [pid 406] futex(0x7f1220122418, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 406] futex(0x7f122012241c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 415] <... futex resumed>) = 1 [pid 415] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4294967060 [pid 407] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 391] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 404] <... write resumed>) = 16773120 [pid 404] futex(0x7f122012241c, FUTEX_WAKE_PRIVATE, 1000000 [pid 407] futex(0x7f122012241c, FUTEX_WAKE_PRIVATE, 1000000 [pid 404] <... futex resumed>) = 0 [pid 404] futex(0x7f1220122418, FUTEX_WAIT_PRIVATE, 0, NULL [pid 407] <... futex resumed>) = 0 [pid 407] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f122000a000 [pid 407] mprotect(0x7f122000b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 407] clone(child_stack=0x7f122002a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4], tls=0x7f122002a700, child_tidptr=0x7f122002a9d0) = 4 [pid 407] futex(0x7f1220122418, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 407] futex(0x7f122012241c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 408] <... write resumed>) = 16773120 [pid 408] futex(0x7f122012241c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 408] futex(0x7f1220122418, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 416 attached [pid 416] set_robust_list(0x7f122002a9e0, 24) = 0 [pid 416] fcntl(4, F_SETPIPE_SZ, 34603007) = 67108864 [pid 411] <... write resumed>) = 16773120 [pid 399] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 392] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 416] futex(0x7f122012241c, FUTEX_WAKE_PRIVATE, 1000000 [pid 411] futex(0x7f122012242c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 416] <... futex resumed>) = 1 [pid 407] <... futex resumed>) = 0 [pid 407] futex(0x7f1220122418, FUTEX_WAKE_PRIVATE, 1000000 [pid 411] futex(0x7f1220122428, FUTEX_WAIT_PRIVATE, 0, NULL [pid 416] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4294967060 [pid 407] <... futex resumed>) = 0 [pid 407] futex(0x7f122012241c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 401] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 406] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 406] futex(0x7f122012241c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 406] futex(0x7f122012242c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 406] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f121ffe9000 [pid 406] mprotect(0x7f121ffea000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 406] clone(child_stack=0x7f12200093f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5], tls=0x7f1220009700, child_tidptr=0x7f12200099d0) = 5 [pid 406] futex(0x7f1220122428, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 406] futex(0x7f122012242c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 417 attached [pid 393] <... splice resumed>) = 16773120 [pid 417] set_robust_list(0x7f12200099e0, 24) = 0 [pid 417] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4294967060 [pid 393] futex(0x7f122012240c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 21.196779][ T78] ------------[ cut here ]------------ [ 21.202502][ T78] WARNING: CPU: 1 PID: 78 at drivers/scsi/scsi_lib.c:1016 scsi_alloc_sgtables+0x766/0x950 [ 21.212662][ T78] Modules linked in: [ 21.216565][ T78] CPU: 1 PID: 78 Comm: kworker/1:1H Not tainted 5.10.149-syzkaller-01404-g69a9a62c66bb #0 [ 21.226491][ T78] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 21.237210][ T78] Workqueue: kblockd blk_mq_requeue_work [ 21.242869][ T78] RIP: 0010:scsi_alloc_sgtables+0x766/0x950 [ 21.248760][ T78] Code: 48 8b 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 f0 01 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 0a f2 91 fe <0f> 0b b0 0a eb be e8 ff f1 91 fe b0 09 4c 8b 6c 24 40 eb b0 44 89 [ 21.269017][ T78] RSP: 0018:ffffc900001ff420 EFLAGS: 00010293 [ 21.275216][ T78] RAX: ffffffff82daf906 RBX: 0000000000000000 RCX: ffff8881065f93c0 [ 21.283380][ T78] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [pid 393] futex(0x7f1220122408, FUTEX_WAIT_PRIVATE, 0, NULL [pid 406] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 406] futex(0x7f122012242c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 406] futex(0x7f122012242c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 415] <... write resumed>) = 16773120 [pid 415] futex(0x7f122012241c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 415] futex(0x7f1220122418, FUTEX_WAIT_PRIVATE, 0, NULL [pid 417] <... write resumed>) = 16773120 [pid 417] futex(0x7f122012242c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 417] futex(0x7f1220122428, FUTEX_WAIT_PRIVATE, 0, NULL [pid 391] close(3) = 0 [pid 391] close(4) = 0 [pid 391] close(5 [pid 416] <... write resumed>) = 16773120 [pid 416] futex(0x7f122012241c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 416] futex(0x7f1220122418, FUTEX_WAIT_PRIVATE, 0, NULL [pid 412] <... write resumed>) = 16773120 [pid 412] futex(0x7f122012242c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 412] futex(0x7f1220122428, FUTEX_WAIT_PRIVATE, 0, NULL [pid 392] close(3) = 0 [pid 392] close(4 [pid 407] <... futex resumed>) = 0 [pid 407] futex(0x7f1220122418, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 407] futex(0x7f122012241c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 416] <... futex resumed>) = 0 [pid 416] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4294967060 [pid 392] <... close resumed>) = 0 [ 21.291369][ T78] RBP: ffffc900001ff518 R08: ffffffff82daf41d R09: ffffffff82e511fb [ 21.299338][ T78] R10: 000000000000000c R11: ffff8881065f93c0 R12: ffff88810a900130 [ 21.307344][ T78] R13: 1ffff9200003fe90 R14: dffffc0000000000 R15: 0000000000000000 [ 21.315682][ T78] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 21.324834][ T78] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 21.331434][ T78] CR2: 0000000020c17000 CR3: 000000011f66a000 CR4: 00000000003506a0 [ 21.339407][ T78] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [pid 392] close(5) = 0 [pid 392] close(6) = -1 EBADF (Bad file descriptor) [pid 392] close(7) = -1 EBADF (Bad file descriptor) [pid 392] close(8) = -1 EBADF (Bad file descriptor) [pid 392] close(9) = -1 EBADF (Bad file descriptor) [pid 392] close(10) = -1 EBADF (Bad file descriptor) [pid 392] close(11) = -1 EBADF (Bad file descriptor) [pid 392] close(12) = -1 EBADF (Bad file descriptor) [pid 392] close(13) = -1 EBADF (Bad file descriptor) [pid 392] close(14) = -1 EBADF (Bad file descriptor) [pid 392] close(15) = -1 EBADF (Bad file descriptor) [pid 392] close(16) = -1 EBADF (Bad file descriptor) [pid 392] close(17) = -1 EBADF (Bad file descriptor) [pid 392] close(18) = -1 EBADF (Bad file descriptor) [pid 407] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 392] close(19 [pid 407] futex(0x7f122012241c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 392] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 407] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 392] close(20) = -1 EBADF (Bad file descriptor) [pid 392] close(21) = -1 EBADF (Bad file descriptor) [pid 392] close(22) = -1 EBADF (Bad file descriptor) [pid 392] close(23) = -1 EBADF (Bad file descriptor) [pid 392] close(24) = -1 EBADF (Bad file descriptor) [pid 392] close(25) = -1 EBADF (Bad file descriptor) [pid 392] close(26) = -1 EBADF (Bad file descriptor) [pid 392] close(27) = -1 EBADF (Bad file descriptor) [pid 392] close(28) = -1 EBADF (Bad file descriptor) [pid 392] close(29) = -1 EBADF (Bad file descriptor) [pid 392] exit_group(0 [pid 412] <... futex resumed>) = ? [pid 403] <... futex resumed>) = ? [pid 393] <... futex resumed>) = ? [pid 392] <... exit_group resumed>) = ? [pid 412] +++ exited with 0 +++ [pid 403] +++ exited with 0 +++ [pid 393] +++ exited with 0 +++ [pid 392] +++ exited with 0 +++ [pid 390] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 390] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556eeb5d0) = 6 [pid 406] close(3) = 0 [pid 406] close(4 [pid 399] close(3) = 0 [pid 399] close(4) = 0 [pid 399] close(5) = 0 [pid 399] close(6) = -1 EBADF (Bad file descriptor) [pid 399] close(7) = -1 EBADF (Bad file descriptor) [pid 399] close(8) = -1 EBADF (Bad file descriptor) [pid 399] close(9) = -1 EBADF (Bad file descriptor) [pid 399] close(10) = -1 EBADF (Bad file descriptor) [pid 399] close(11) = -1 EBADF (Bad file descriptor) [pid 399] close(12) = -1 EBADF (Bad file descriptor) [pid 399] close(13) = -1 EBADF (Bad file descriptor) [pid 399] close(14) = -1 EBADF (Bad file descriptor) [ 21.347576][ T78] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 21.355609][ T78] Call Trace: [ 21.360190][ T78] ? scsi_io_completion_action+0x10a0/0x10a0 [ 21.366480][ T78] ? vp_notify+0x59/0x80 [ 21.371030][ T78] sd_init_command+0xab9/0x2170 [ 21.376188][ T78] ? scsi_init_command+0x44d/0x540 [ 21.381395][ T78] scsi_queue_rq+0x1744/0x2120 [ 21.386158][ T78] blk_mq_dispatch_rq_list+0x9bf/0x1800 [ 21.391763][ T78] ? cpumask_next+0x11/0x30 [pid 399] close(15) = -1 EBADF (Bad file descriptor) [pid 399] close(16) = -1 EBADF (Bad file descriptor) [pid 399] close(17 [pid 401] close(3 [pid 399] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 401] <... close resumed>) = 0 [pid 399] close(18 [pid 401] close(4 [pid 399] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 401] <... close resumed>) = 0 [pid 399] close(19 [pid 401] close(5 [pid 399] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 401] <... close resumed>) = 0 [pid 399] close(20 [pid 401] close(6 [pid 399] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 401] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 399] close(21 [pid 401] close(7 [pid 399] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 401] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 399] close(22 [pid 401] close(8 [pid 399] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 401] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 399] close(23 [pid 401] close(9 [pid 399] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 401] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 399] close(24 [pid 401] close(10 [pid 399] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 401] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 399] close(25 [pid 401] close(11 [pid 399] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 401] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 399] close(26 [pid 401] close(12 [pid 399] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 401] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 399] close(27 [pid 401] close(13 [pid 399] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 401] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 399] close(28 [pid 401] close(14 [pid 399] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 401] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 399] close(29 [pid 401] close(15 [pid 399] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 401] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 399] exit_group(0 [pid 405] <... futex resumed>) = ? [pid 401] close(16 [pid 399] <... exit_group resumed>) = ? [pid 405] +++ exited with 0 +++ [pid 401] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 401] close(17) = -1 EBADF (Bad file descriptor) [pid 401] close(18) = -1 EBADF (Bad file descriptor) [pid 401] close(19) = -1 EBADF (Bad file descriptor) [pid 401] close(20) = -1 EBADF (Bad file descriptor) [pid 401] close(21) = -1 EBADF (Bad file descriptor) [pid 401] close(22) = -1 EBADF (Bad file descriptor) [pid 401] close(23) = -1 EBADF (Bad file descriptor) [pid 401] close(24) = -1 EBADF (Bad file descriptor) [pid 401] close(25) = -1 EBADF (Bad file descriptor) [pid 401] close(26) = -1 EBADF (Bad file descriptor) [pid 401] close(27) = -1 EBADF (Bad file descriptor) [pid 401] close(28) = -1 EBADF (Bad file descriptor) [pid 401] close(29) = -1 EBADF (Bad file descriptor) [pid 401] exit_group(0 [pid 408] <... futex resumed>) = ? [pid 401] <... exit_group resumed>) = ? [pid 408] +++ exited with 0 +++ ./strace-static-x86_64: Process 418 attached [pid 418] set_robust_list(0x555556eeb5e0, 24) = 0 [pid 418] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 418] setpgid(0, 0) = 0 [pid 418] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 418] write(3, "1000", 4) = 4 [pid 418] close(3) = 0 [pid 418] futex(0x7f122012240c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 418] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f122002b000 [pid 418] mprotect(0x7f122002c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 418] clone(child_stack=0x7f122004b3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[7], tls=0x7f122004b700, child_tidptr=0x7f122004b9d0) = 7 [pid 418] futex(0x7f1220122408, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 21.397186][ T78] ? __dd_dispatch_request+0x820/0xa80 [ 21.402968][ T78] ? blk_mq_dequeue_from_ctx+0x920/0x920 [ 21.408804][ T78] blk_mq_do_dispatch_sched+0x63c/0xc60 [ 21.414733][ T78] ? blk_mq_exit_sched+0x410/0x410 [ 21.420230][ T78] ? _raw_spin_lock+0xa3/0x1b0 [ 21.425340][ T78] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 21.431092][ T78] __blk_mq_sched_dispatch_requests+0x3de/0x4d0 [ 21.438015][ T78] ? _raw_spin_lock+0xa3/0x1b0 [ 21.442821][ T78] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [pid 418] futex(0x7f122012240c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 419 attached [pid 419] set_robust_list(0x7f122004b9e0, 24) = 0 [pid 419] openat(AT_FDCWD, "memory.events", O_WRONLY|O_CREAT|O_EXCL|O_TRUNC|O_APPEND|FASYNC|0x20, 000) = -1 EEXIST (File exists) [pid 419] futex(0x7f122012240c, FUTEX_WAKE_PRIVATE, 1000000 [pid 418] <... futex resumed>) = 0 [pid 418] futex(0x7f1220122408, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 418] futex(0x7f122012240c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 419] <... futex resumed>) = 1 [pid 419] pipe([3, 4]) = 0 [pid 419] futex(0x7f122012240c, FUTEX_WAKE_PRIVATE, 1000000 [pid 418] <... futex resumed>) = 0 [pid 418] futex(0x7f1220122408, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 418] futex(0x7f122012240c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 419] <... futex resumed>) = 1 [ 21.448184][ T78] ? blk_mq_sched_dispatch_requests+0x160/0x160 [ 21.454457][ T78] blk_mq_sched_dispatch_requests+0xf0/0x160 [ 21.460682][ T78] __blk_mq_run_hw_queue+0x14d/0x260 [ 21.467022][ T78] __blk_mq_delay_run_hw_queue+0x22a/0x570 [ 21.472855][ T78] blk_mq_run_hw_queue+0x29d/0x3b0 [ 21.477964][ T78] blk_mq_run_hw_queues+0x37c/0x450 [ 21.483328][ T78] blk_mq_requeue_work+0x73b/0x780 [ 21.488423][ T78] ? blk_mq_timeout_work+0x490/0x490 [pid 419] openat(AT_FDCWD, "memory.events", O_WRONLY|O_TRUNC|O_NONBLOCK|O_DSYNC|O_DIRECT|FASYNC|0x4 [pid 407] close(3) = 0 [pid 407] close(4) = 0 [pid 407] close(5) = 0 [pid 407] close(6) = -1 EBADF (Bad file descriptor) [pid 407] close(7) = -1 EBADF (Bad file descriptor) [pid 407] close(8) = -1 EBADF (Bad file descriptor) [pid 407] close(9) = -1 EBADF (Bad file descriptor) [pid 407] close(10) = -1 EBADF (Bad file descriptor) [pid 407] close(11) = -1 EBADF (Bad file descriptor) [pid 407] close(12) = -1 EBADF (Bad file descriptor) [pid 407] close(13) = -1 EBADF (Bad file descriptor) [pid 407] close(14) = -1 EBADF (Bad file descriptor) [pid 407] close(15) = -1 EBADF (Bad file descriptor) [pid 407] close(16) = -1 EBADF (Bad file descriptor) [pid 407] close(17) = -1 EBADF (Bad file descriptor) [pid 407] close(18) = -1 EBADF (Bad file descriptor) [pid 407] close(19) = -1 EBADF (Bad file descriptor) [pid 407] close(20) = -1 EBADF (Bad file descriptor) [pid 407] close(21) = -1 EBADF (Bad file descriptor) [pid 407] close(22) = -1 EBADF (Bad file descriptor) [pid 407] close(23) = -1 EBADF (Bad file descriptor) [pid 407] close(24) = -1 EBADF (Bad file descriptor) [pid 407] close(25) = -1 EBADF (Bad file descriptor) [pid 407] close(26) = -1 EBADF (Bad file descriptor) [pid 407] close(27) = -1 EBADF (Bad file descriptor) [pid 407] close(28) = -1 EBADF (Bad file descriptor) [pid 407] close(29) = -1 EBADF (Bad file descriptor) [pid 407] exit_group(0) = ? [pid 418] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 418] futex(0x7f122012241c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 418] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f122000a000 [pid 418] mprotect(0x7f122000b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 418] clone(child_stack=0x7f122002a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[8], tls=0x7f122002a700, child_tidptr=0x7f122002a9d0) = 8 [pid 418] futex(0x7f1220122418, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 418] futex(0x7f122012241c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 420 attached [pid 420] set_robust_list(0x7f122002a9e0, 24) = 0 [pid 420] splice(3, NULL, -1, NULL, 142606540, 0) = -1 EBADF (Bad file descriptor) [pid 420] futex(0x7f122012241c, FUTEX_WAKE_PRIVATE, 1000000 [pid 418] <... futex resumed>) = 0 [pid 418] futex(0x7f1220122418, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 418] futex(0x7f122012241c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 420] <... futex resumed>) = 1 [pid 420] fcntl(4, F_SETPIPE_SZ, 34603007) = 67108864 [pid 420] futex(0x7f122012241c, FUTEX_WAKE_PRIVATE, 1000000 [pid 418] <... futex resumed>) = 0 [pid 418] futex(0x7f1220122418, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 418] futex(0x7f122012241c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 420] <... futex resumed>) = 1 [ 21.494338][ T78] ? __kasan_check_read+0x11/0x20 [ 21.499454][ T78] ? strscpy+0xa8/0x270 [ 21.503649][ T78] process_one_work+0x726/0xc10 [ 21.509147][ T78] worker_thread+0xb27/0x1550 [ 21.514096][ T78] ? __kthread_parkme+0xba/0x1d0 [ 21.519505][ T78] kthread+0x349/0x3d0 [ 21.523793][ T78] ? worker_clr_flags+0x180/0x180 [ 21.528814][ T78] ? kthread_blkcg+0xd0/0xd0 [ 21.533426][ T78] ret_from_fork+0x1f/0x30 [ 21.537830][ T78] ---[ end trace f7276246772db3d6 ]--- [pid 420] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4294967060) = 16773120 [pid 420] futex(0x7f122012241c, FUTEX_WAKE_PRIVATE, 1000000 [pid 418] <... futex resumed>) = 0 [pid 418] futex(0x7f1220122418, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 418] futex(0x7f122012241c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 420] <... futex resumed>) = 1 [pid 420] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4294967060) = 16773120 [pid 420] futex(0x7f122012241c, FUTEX_WAKE_PRIVATE, 1000000 [pid 418] <... futex resumed>) = 0 [pid 420] <... futex resumed>) = 1 [ 21.543329][ T78] blk_update_request: I/O error, dev sda, sector 589816 op 0x1:(WRITE) flags 0xc800 phys_seg 0 prio class 0 [ 21.554896][ T78] ------------[ cut here ]------------ [ 21.560376][ T78] kernel BUG at block/blk-mq.c:569! [ 21.567446][ T78] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 21.573519][ T78] CPU: 1 PID: 78 Comm: kworker/1:1H Tainted: G W 5.10.149-syzkaller-01404-g69a9a62c66bb #0 [ 21.584796][ T78] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 21.594943][ T78] Workqueue: kblockd blk_mq_requeue_work [ 21.600659][ T78] RIP: 0010:blk_mq_dispatch_rq_list+0x17ef/0x1800 [ 21.607044][ T78] Code: 68 ff e9 63 f5 ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 83 f6 ff ff 4c 89 ef e8 3b 7d 68 ff e9 76 f6 ff ff e8 b1 65 2e ff <0f> 0b e8 4a 5f 54 02 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 [ 21.626793][ T78] RSP: 0018:ffffc900001ff6e0 EFLAGS: 00010293 [ 21.632837][ T78] RAX: ffffffff823e855f RBX: ffff88810a900000 RCX: ffff8881065f93c0 [ 21.640870][ T78] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810a9000ca [ 21.648816][ T78] RBP: ffffc900001ff870 R08: ffffffff823d563f R09: ffffffff823d55d5 [ 21.656760][ T78] R10: 0000000000000004 R11: ffff8881065f93c0 R12: dffffc0000000000 [ 21.664707][ T78] R13: ffffc900001ff960 R14: ffffc900001ff800 R15: ffff8881017cf000 [ 21.672651][ T78] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 21.681559][ T78] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 21.688128][ T78] CR2: 0000000020c17000 CR3: 000000011f66a000 CR4: 00000000003506a0 [pid 420] futex(0x7f1220122418, FUTEX_WAIT_PRIVATE, 0, NULL [pid 418] close(3) = 0 [pid 418] close(4) = 0 [pid 418] close(5) = -1 EBADF (Bad file descriptor) [pid 418] close(6) = -1 EBADF (Bad file descriptor) [pid 418] close(7) = -1 EBADF (Bad file descriptor) [pid 418] close(8) = -1 EBADF (Bad file descriptor) [pid 418] close(9) = -1 EBADF (Bad file descriptor) [ 21.696087][ T78] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 21.704043][ T78] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 21.712002][ T78] Call Trace: [ 21.715282][ T78] ? cpumask_next+0x11/0x30 [ 21.719777][ T78] ? __dd_dispatch_request+0x820/0xa80 [ 21.725230][ T78] ? blk_mq_dequeue_from_ctx+0x920/0x920 [ 21.730853][ T78] blk_mq_do_dispatch_sched+0x63c/0xc60 [ 21.736392][ T78] ? blk_mq_exit_sched+0x410/0x410 [ 21.741487][ T78] ? _raw_spin_lock+0xa3/0x1b0 [pid 418] close(10) = -1 EBADF (Bad file descriptor) [pid 418] close(11) = -1 EBADF (Bad file descriptor) [pid 418] close(12) = -1 EBADF (Bad file descriptor) [pid 418] close(13) = -1 EBADF (Bad file descriptor) [pid 418] close(14) = -1 EBADF (Bad file descriptor) [pid 418] close(15) = -1 EBADF (Bad file descriptor) [pid 418] close(16) = -1 EBADF (Bad file descriptor) [pid 418] close(17) = -1 EBADF (Bad file descriptor) [pid 418] close(18) = -1 EBADF (Bad file descriptor) [pid 418] close(19) = -1 EBADF (Bad file descriptor) [pid 418] close(20) = -1 EBADF (Bad file descriptor) [pid 418] close(21) = -1 EBADF (Bad file descriptor) [pid 418] close(22) = -1 EBADF (Bad file descriptor) [pid 418] close(23) = -1 EBADF (Bad file descriptor) [pid 418] close(24) = -1 EBADF (Bad file descriptor) [pid 418] close(25) = -1 EBADF (Bad file descriptor) [pid 418] close(26) = -1 EBADF (Bad file descriptor) [pid 418] close(27) = -1 EBADF (Bad file descriptor) [pid 418] close(28) = -1 EBADF (Bad file descriptor) [pid 418] close(29) = -1 EBADF (Bad file descriptor) [pid 418] exit_group(0 [pid 420] <... futex resumed>) = ? [pid 420] +++ exited with 0 +++ [pid 418] <... exit_group resumed>) = ? [ 21.746236][ T78] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 21.751601][ T78] __blk_mq_sched_dispatch_requests+0x3de/0x4d0 [ 21.757827][ T78] ? _raw_spin_lock+0xa3/0x1b0 [ 21.762563][ T78] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 21.767913][ T78] ? blk_mq_sched_dispatch_requests+0x160/0x160 [ 21.774142][ T78] blk_mq_sched_dispatch_requests+0xf0/0x160 [ 21.780106][ T78] __blk_mq_run_hw_queue+0x14d/0x260 [ 21.785369][ T78] __blk_mq_delay_run_hw_queue+0x22a/0x570 [ 21.791153][ T78] blk_mq_run_hw_queue+0x29d/0x3b0 [ 21.796243][ T78] blk_mq_run_hw_queues+0x37c/0x450 [ 21.801421][ T78] blk_mq_requeue_work+0x73b/0x780 [ 21.806518][ T78] ? blk_mq_timeout_work+0x490/0x490 [ 21.811775][ T78] ? __kasan_check_read+0x11/0x20 [ 21.816777][ T78] ? strscpy+0xa8/0x270 [ 21.820910][ T78] process_one_work+0x726/0xc10 [ 21.825829][ T78] worker_thread+0xb27/0x1550 [ 21.830582][ T78] ? __kthread_parkme+0xba/0x1d0 [ 21.835503][ T78] kthread+0x349/0x3d0 [ 21.839637][ T78] ? worker_clr_flags+0x180/0x180 [ 21.844649][ T78] ? kthread_blkcg+0xd0/0xd0 [ 21.849224][ T78] ret_from_fork+0x1f/0x30 [ 21.853621][ T78] Modules linked in: [ 21.857658][ T78] ---[ end trace f7276246772db3d7 ]--- [ 21.864109][ T78] RIP: 0010:blk_mq_dispatch_rq_list+0x17ef/0x1800 [ 21.870544][ T78] Code: 68 ff e9 63 f5 ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 83 f6 ff ff 4c 89 ef e8 3b 7d 68 ff e9 76 f6 ff ff e8 b1 65 2e ff <0f> 0b e8 4a 5f 54 02 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 [ 21.890172][ T78] RSP: 0018:ffffc900001ff6e0 EFLAGS: 00010293 [ 21.896265][ T78] RAX: ffffffff823e855f RBX: ffff88810a900000 RCX: ffff8881065f93c0 [ 21.904255][ T78] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810a9000ca [ 21.912258][ T78] RBP: ffffc900001ff870 R08: ffffffff823d563f R09: ffffffff823d55d5 [ 21.920219][ T78] R10: 0000000000000004 R11: ffff8881065f93c0 R12: dffffc0000000000 [ 21.928209][ T78] R13: ffffc900001ff960 R14: ffffc900001ff800 R15: ffff8881017cf000 [ 21.936417][ T78] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 21.945367][ T78] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 21.951963][ T78] CR2: 0000000020c17000 CR3: 000000011f66a000 CR4: 00000000003506a0 [ 21.959939][ T78] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 21.967936][ T78] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 21.975946][ T78] Kernel panic - not syncing: Fatal exception [ 21.982137][ T78] Kernel Offset: disabled [ 21.986444][ T78] Rebooting in 86400 seconds..