ci2-android-5-10/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci2-android-5-10/syz-executor2275674127 <...> syzkaller syzkaller login: [ 15.275191][ T24] kauditd_printk_skb: 48 callbacks suppressed [ 15.275200][ T24] audit: type=1400 audit(1789500013.470:59): avc: denied { transition } for pid=231 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.279790][ T24] audit: type=1400 audit(1789500013.470:60): avc: denied { noatsecure } for pid=231 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.282785][ T24] audit: type=1400 audit(1789500013.470:61): avc: denied { write } for pid=231 comm="sh" path="pipe:[14510]" dev="pipefs" ino=14510 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 15.286365][ T24] audit: type=1400 audit(1789500013.470:62): avc: denied { rlimitinh } for pid=231 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.289685][ T24] audit: type=1400 audit(1789500013.470:63): avc: denied { siginh } for pid=231 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.172' (ED25519) to the list of known hosts. execve("ci2-android-5-10/syz-executor2275674127", ["ci2-android-5-10/syz-executor2275674127"], 0x7ffd3d76ab90 /* 10 vars */) = 0 brk(NULL) = 0x555585de1000 brk(0x555585de1e00) = 0x555585de1e00 arch_prctl(ARCH_SET_FS, 0x555585de1480) = 0 set_tid_address(0x555585de1750) = 297 set_robust_list(0x555585de1760, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 32, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci2-android-5-10/syz-executor2275674127", 4096) = 45 getrandom("\x3f\xad\x18\xf8\x6f\x0d\xec\x06", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555585de1e00 brk(0x555585e02e00) = 0x555585e02e00 brk(0x555585e03000) = 0x555585e03000 mprotect(0x7fa649ed9000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 mount(NULL, "/proc/sys/fs/binfmt_misc", "binfmt_misc", 0, NULL) = -1 EBUSY (Device or resource busy) openat(AT_FDCWD, "/proc/sys/fs/binfmt_misc/register", O_WRONLY|O_CLOEXEC) = 3 write(3, "\x3a\x73\x79\x7a\x30\x3a\x4d\x3a\x30\x3a\x01\x3a\x3a\x2e\x2f\x66\x69\x6c\x65\x30\x3a", 21) = 21 close(3) = 0 openat(AT_FDCWD, "/proc/sys/fs/binfmt_misc/register", O_WRONLY|O_CLOEXEC) = 3 write(3, "\x3a\x73\x79\x7a\x31\x3a\x4d\x3a\x31\x3a\x02\x3a\x3a\x2f\x70\x72\x6f\x63\x2f\x74\x68\x72\x65\x61\x64\x2d\x73\x65\x6c\x66\x2f\x63\x77\x64\x2f\x66\x69\x6c\x65\x30\x3a\x50\x4f\x43", 44) = 44 close(3) = 0 swapoff("./swap-file") = -1 ENOENT (No such file or directory) unlink("./swap-file") = -1 ENOENT (No such file or directory) openat(AT_FDCWD, "./swap-file", O_WRONLY|O_CREAT|O_CLOEXEC, 0600) = 3 fallocate(3, FALLOC_FL_ZERO_RANGE, 0, 128000000) = 0 close(3) = 0 rt_sigaction(SIGINT, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa649e33b90}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 rt_sigaction(SIGQUIT, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa649e33b90}, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, 8) = 0 rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0 mmap(NULL, 36864, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa649e1e000 rt_sigprocmask(SIG_BLOCK, ~[], [CHLD], 8) = 0 clone3({flags=CLONE_VM|CLONE_VFORK|CLONE_CLEAR_SIGHAND, exit_signal=SIGCHLD, stack=0x7fa649e1e000, stack_size=0x9000}, 88ci2-android-5-10/strace-static-x86_64: Process 298 attached [pid 298] rt_sigprocmask(SIG_BLOCK, NULL, ~[KILL STOP], 8) = 0 [pid 298] rt_sigaction(SIGINT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa649e33b90}, NULL, 8) = 0 [pid 298] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 298] execve("/bin/sh", ["sh", "-c", "--", "mkswap ./swap-file"], 0x7ffefc5d9628 /* 10 vars */ [pid 297] <... clone3 resumed>) = 298 [pid 297] munmap(0x7fa649e1e000, 36864) = 0 [pid 297] rt_sigprocmask(SIG_SETMASK, [CHLD], NULL, 8) = 0 [pid 298] <... execve resumed>) = 0 [pid 298] brk(NULL) = 0x557d20921000 [pid 298] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f211709a000 [pid 298] access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) [pid 298] openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 298] openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v3/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 298] newfstatat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v3/", 0x7ffdc3e14820, 0) = -1 ENOENT (No such file or directory) [pid 298] openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v2/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 298] newfstatat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v2/", 0x7ffdc3e14820, 0) = -1 ENOENT (No such file or directory) [pid 298] openat(AT_FDCWD, "/lib64/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = 3 [pid 298] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x38\x13\x0c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x09\x00\x40\x00\x19\x00\x18\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8\xf4\x00\x00"..., 832) = 832 [pid 298] fstat(3, {st_mode=S_IFREG|0644, st_size=792952, ...}) = 0 [pid 298] mmap(NULL, 792856, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f2116fd8000 [pid 298] mmap(0x7f2116fe8000, 548864, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x10000) = 0x7f2116fe8000 [pid 298] mmap(0x7f211706e000, 163840, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x96000) = 0x7f211706e000 [pid 298] mmap(0x7f2117096000, 16384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xbe000) = 0x7f2117096000 [pid 298] close(3) = 0 [pid 298] openat(AT_FDCWD, "/lib64/libc.so.6", O_RDONLY|O_CLOEXEC) = 3 [pid 298] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\xf0\xab\x02\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x38\x22\x1d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0e\x00\x40\x00\x3b\x00\x3a\x00\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00"..., 832) = 832 [pid 298] pread64(3, "\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x1c\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00"..., 784, 64) = 784 [pid 298] fstat(3, {st_mode=S_IFREG|0755, st_size=1913080, ...}) = 0 [pid 298] pread64(3, "\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x1c\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00"..., 784, 64) = 784 [pid 298] mmap(NULL, 1965720, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f2116df8000 [pid 298] mmap(0x7f2116e20000, 1368064, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x28000) = 0x7f2116e20000 [pid 298] mmap(0x7f2116f6e000, 356352, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x176000) = 0x7f2116f6e000 [pid 298] mmap(0x7f2116fc5000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1cc000) = 0x7f2116fc5000 [pid 298] mmap(0x7f2116fcb000, 52888, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f2116fcb000 [pid 298] close(3) = 0 [pid 298] openat(AT_FDCWD, "/lib64/libpam.so.0", O_RDONLY|O_CLOEXEC) = 3 [pid 298] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xf8\xf0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1b\x00\x1a\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe0\x29\x00\x00"..., 832) = 832 [pid 298] fstat(3, {st_mode=S_IFREG|0755, st_size=63416, ...}) = 0 [pid 298] mmap(NULL, 65552, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f2116de7000 [pid 298] mmap(0x7f2116dea000, 32768, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f2116dea000 [pid 298] mmap(0x7f2116df2000, 16384, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7f2116df2000 [pid 298] mmap(0x7f2116df6000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xe000) = 0x7f2116df6000 [pid 298] close(3) = 0 [pid 298] openat(AT_FDCWD, "/lib64/libpam_misc.so.0", O_RDONLY|O_CLOEXEC) = 3 [pid 298] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x00\x51\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1a\x00\x19\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd8\x12\x00\x00"..., 832) = 832 [pid 298] fstat(3, {st_mode=S_IFREG|0755, st_size=22400, ...}) = 0 [pid 298] mmap(NULL, 24656, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f2116de0000 [pid 298] mmap(0x7f2116de2000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f2116de2000 [pid 298] mmap(0x7f2116de4000, 4096, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7f2116de4000 [pid 298] mmap(0x7f2116de5000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7f2116de5000 [pid 298] close(3) = 0 [pid 298] openat(AT_FDCWD, "/lib64/libresolv.so.2", O_RDONLY|O_CLOEXEC) = 3 [pid 298] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xa8\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0b\x00\x40\x00\x1d\x00\x1c\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x08\x27\x00\x00"..., 832) = 832 [pid 298] fstat(3, {st_mode=S_IFREG|0755, st_size=59624, ...}) = 0 [pid 298] mmap(NULL, 67720, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f2116dcf000 [pid 298] mmap(0x7f2116dd2000, 32768, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f2116dd2000 [pid 298] mmap(0x7f2116dda000, 8192, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7f2116dda000 [pid 298] mmap(0x7f2116ddc000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xd000) = 0x7f2116ddc000 [pid 298] mmap(0x7f2116dde000, 6280, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f2116dde000 [pid 298] close(3) = 0 [pid 298] openat(AT_FDCWD, "/lib64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 298] openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v3/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 298] newfstatat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v3/", 0x7ffdc3e14780, 0) = -1 ENOENT (No such file or directory) [pid 298] openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v2/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 298] newfstatat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v2/", 0x7ffdc3e14780, 0) = -1 ENOENT (No such file or directory) [pid 298] openat(AT_FDCWD, "/usr/lib64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = 3 [pid 298] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x60\xd1\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0b\x00\x40\x00\x1d\x00\x1c\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x28\x74\x00\x00"..., 832) = 832 [pid 298] fstat(3, {st_mode=S_IFREG|0755, st_size=186528, ...}) = 0 [pid 298] mmap(NULL, 194256, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f2116d9f000 [pid 298] mmap(0x7f2116da7000, 114688, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x8000) = 0x7f2116da7000 [pid 298] mmap(0x7f2116dc3000, 32768, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x24000) = 0x7f2116dc3000 [pid 298] mmap(0x7f2116dcb000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2c000) = 0x7f2116dcb000 [pid 298] mmap(0x7f2116dcd000, 5840, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f2116dcd000 [pid 298] close(3) = 0 [pid 298] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2116d9d000 [pid 298] openat(AT_FDCWD, "/lib64/libatomic.so.1", O_RDONLY|O_CLOEXEC) = 3 [pid 298] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x30\x71\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1b\x00\x1a\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x78\x1f\x00\x00"..., 832) = 832 [pid 298] fstat(3, {st_mode=S_IFREG|0755, st_size=30704, ...}) = 0 [pid 298] mmap(NULL, 37000, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f2116d93000 [pid 298] mmap(0x7f2116d95000, 12288, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f2116d95000 [pid 298] mmap(0x7f2116d98000, 8192, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5000) = 0x7f2116d98000 [pid 298] mmap(0x7f2116d9a000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6000) = 0x7f2116d9a000 [pid 298] mmap(0x7f2116d9c000, 136, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f2116d9c000 [pid 298] close(3) = 0 [pid 298] openat(AT_FDCWD, "/lib64/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 298] openat(AT_FDCWD, "/usr/lib64/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = 3 [pid 298] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xf0\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1a\x00\x19\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8\x20\x00\x00"..., 832) = 832 [pid 298] fstat(3, {st_mode=S_IFREG|0755, st_size=395120, ...}) = 0 [pid 298] mmap(NULL, 397336, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f2116d31000 [pid 298] mmap(0x7f2116d34000, 225280, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f2116d34000 [pid 298] mmap(0x7f2116d6b000, 155648, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3a000) = 0x7f2116d6b000 [pid 298] mmap(0x7f2116d91000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5f000) = 0x7f2116d91000 [pid 298] close(3) = 0 [pid 298] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2116d2f000 [pid 298] arch_prctl(ARCH_SET_FS, 0x7f2116d2fc80) = 0 [pid 298] set_tid_address(0x7f2116d2ff50) = 298 [pid 298] set_robust_list(0x7f2116d2ff60, 24) = 0 [pid 298] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 32, 0, 0x53053053) = -1 ENOSYS (Function not implemented) [pid 298] mprotect(0x7f2116fc5000, 16384, PROT_READ) = 0 [pid 298] mprotect(0x7f2116d91000, 4096, PROT_READ) = 0 [pid 298] mprotect(0x7f2116d9a000, 4096, PROT_READ) = 0 [pid 298] mprotect(0x7f2116dcb000, 4096, PROT_READ) = 0 [ 25.216126][ T24] audit: type=1400 audit(1789500023.410:64): avc: denied { execmem } for pid=297 comm="syz-executor227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 25.236332][ T24] audit: type=1400 audit(1789500023.430:65): avc: denied { mounton } for pid=297 comm="syz-executor227" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [pid 298] mprotect(0x7f2116ddc000, 4096, PROT_READ) = 0 [pid 298] mprotect(0x7f2116df6000, 4096, PROT_READ) = 0 [pid 298] mprotect(0x7f2116de5000, 4096, PROT_READ) = 0 [pid 298] mprotect(0x7f2117096000, 12288, PROT_READ) = 0 [pid 298] mprotect(0x557d10635000, 4096, PROT_READ) = 0 [pid 298] mprotect(0x7f21170cf000, 8192, PROT_READ) = 0 [pid 298] prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 [pid 298] statfs("/sys/fs/selinux", {f_type=SELINUX_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOSUID|ST_NOEXEC|ST_RELATIME}) = 0 [pid 298] statfs("/sys/fs/selinux", {f_type=SELINUX_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOSUID|ST_NOEXEC|ST_RELATIME}) = 0 [pid 298] getrandom("\xc7\x16\x70\x84\x69\x73\xc5\x11", 8, GRND_NONBLOCK) = 8 [pid 298] brk(NULL) = 0x557d20921000 [pid 298] brk(0x557d20942000) = 0x557d20942000 [pid 298] access("/etc/selinux/config", F_OK) = 0 [pid 298] getpid() = 298 [pid 298] rt_sigaction(SIGCHLD, {sa_handler=0x7f211701b287, sa_mask=~[RTMIN RT_1], sa_flags=SA_RESTORER, sa_restorer=0x7f2116e37180}, NULL, 8) = 0 [pid 298] getppid() = 297 [pid 298] uname({sysname="Linux", nodename="syzkaller", ...}) = 0 [pid 298] newfstatat(AT_FDCWD, "/root", {st_mode=S_IFDIR|0700, st_size=4096, ...}, 0) = 0 [pid 298] newfstatat(AT_FDCWD, ".", {st_mode=S_IFDIR|0700, st_size=4096, ...}, 0) = 0 [pid 298] rt_sigaction(SIGINT, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 298] rt_sigaction(SIGINT, {sa_handler=0x7f211701b287, sa_mask=~[RTMIN RT_1], sa_flags=SA_RESTORER, sa_restorer=0x7f2116e37180}, NULL, 8) = 0 [pid 298] rt_sigaction(SIGQUIT, NULL, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, 8) = 0 [pid 298] rt_sigaction(SIGTERM, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 298] newfstatat(AT_FDCWD, "/bin/mkswap", 0x7ffdc3e15118, 0) = -1 ENOENT (No such file or directory) [pid 298] newfstatat(AT_FDCWD, "/sbin/mkswap", {st_mode=S_IFREG|0755, st_size=14256, ...}, 0) = 0 [pid 298] execve("/sbin/mkswap", ["mkswap", "./swap-file"], 0x557d209216f0 /* 10 vars */) = 0 [pid 298] brk(NULL) = 0x558d61a6e000 [pid 298] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc79e032000 [pid 298] access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) [pid 298] openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 298] openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v3/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 298] newfstatat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v3/", 0x7ffd24afd660, 0) = -1 ENOENT (No such file or directory) [pid 298] openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v2/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 298] newfstatat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v2/", 0x7ffd24afd660, 0) = -1 ENOENT (No such file or directory) [pid 298] openat(AT_FDCWD, "/lib64/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = 3 [pid 298] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x38\x13\x0c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x09\x00\x40\x00\x19\x00\x18\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8\xf4\x00\x00"..., 832) = 832 [pid 298] fstat(3, {st_mode=S_IFREG|0644, st_size=792952, ...}) = 0 [pid 298] mmap(NULL, 792856, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fc79df70000 [pid 298] mmap(0x7fc79df80000, 548864, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x10000) = 0x7fc79df80000 [pid 298] mmap(0x7fc79e006000, 163840, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x96000) = 0x7fc79e006000 [pid 298] mmap(0x7fc79e02e000, 16384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xbe000) = 0x7fc79e02e000 [pid 298] close(3) = 0 [pid 298] openat(AT_FDCWD, "/lib64/libc.so.6", O_RDONLY|O_CLOEXEC) = 3 [pid 298] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\xf0\xab\x02\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x38\x22\x1d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0e\x00\x40\x00\x3b\x00\x3a\x00\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00"..., 832) = 832 [pid 298] pread64(3, "\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x1c\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00"..., 784, 64) = 784 [pid 298] fstat(3, {st_mode=S_IFREG|0755, st_size=1913080, ...}) = 0 [pid 298] pread64(3, "\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x1c\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00"..., 784, 64) = 784 [pid 298] mmap(NULL, 1965720, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fc79dd90000 [pid 298] mmap(0x7fc79ddb8000, 1368064, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x28000) = 0x7fc79ddb8000 [pid 298] mmap(0x7fc79df06000, 356352, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x176000) = 0x7fc79df06000 [pid 298] mmap(0x7fc79df5d000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1cc000) = 0x7fc79df5d000 [pid 298] mmap(0x7fc79df63000, 52888, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fc79df63000 [pid 298] close(3) = 0 [pid 298] openat(AT_FDCWD, "/lib64/libpam.so.0", O_RDONLY|O_CLOEXEC) = 3 [pid 298] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xf8\xf0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1b\x00\x1a\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe0\x29\x00\x00"..., 832) = 832 [pid 298] fstat(3, {st_mode=S_IFREG|0755, st_size=63416, ...}) = 0 [pid 298] mmap(NULL, 65552, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fc79dd7f000 [pid 298] mmap(0x7fc79dd82000, 32768, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7fc79dd82000 [pid 298] mmap(0x7fc79dd8a000, 16384, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7fc79dd8a000 [pid 298] mmap(0x7fc79dd8e000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xe000) = 0x7fc79dd8e000 [pid 298] close(3) = 0 [pid 298] openat(AT_FDCWD, "/lib64/libpam_misc.so.0", O_RDONLY|O_CLOEXEC) = 3 [pid 298] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x00\x51\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1a\x00\x19\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd8\x12\x00\x00"..., 832) = 832 [pid 298] fstat(3, {st_mode=S_IFREG|0755, st_size=22400, ...}) = 0 [pid 298] mmap(NULL, 24656, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fc79dd78000 [pid 298] mmap(0x7fc79dd7a000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7fc79dd7a000 [pid 298] mmap(0x7fc79dd7c000, 4096, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7fc79dd7c000 [pid 298] mmap(0x7fc79dd7d000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7fc79dd7d000 [pid 298] close(3) = 0 [pid 298] openat(AT_FDCWD, "/lib64/libresolv.so.2", O_RDONLY|O_CLOEXEC) = 3 [pid 298] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xa8\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0b\x00\x40\x00\x1d\x00\x1c\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x08\x27\x00\x00"..., 832) = 832 [pid 298] fstat(3, {st_mode=S_IFREG|0755, st_size=59624, ...}) = 0 [pid 298] mmap(NULL, 67720, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fc79dd67000 [pid 298] mmap(0x7fc79dd6a000, 32768, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7fc79dd6a000 [pid 298] mmap(0x7fc79dd72000, 8192, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7fc79dd72000 [pid 298] mmap(0x7fc79dd74000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xd000) = 0x7fc79dd74000 [pid 298] mmap(0x7fc79dd76000, 6280, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fc79dd76000 [pid 298] close(3) = 0 [pid 298] openat(AT_FDCWD, "/lib64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 298] openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v3/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 298] newfstatat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v3/", 0x7ffd24afd5c0, 0) = -1 ENOENT (No such file or directory) [pid 298] openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v2/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 298] newfstatat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v2/", 0x7ffd24afd5c0, 0) = -1 ENOENT (No such file or directory) [pid 298] openat(AT_FDCWD, "/usr/lib64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = 3 [pid 298] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x60\xd1\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0b\x00\x40\x00\x1d\x00\x1c\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x28\x74\x00\x00"..., 832) = 832 [pid 298] fstat(3, {st_mode=S_IFREG|0755, st_size=186528, ...}) = 0 [pid 298] mmap(NULL, 194256, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fc79dd37000 [pid 298] mmap(0x7fc79dd3f000, 114688, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x8000) = 0x7fc79dd3f000 [pid 298] mmap(0x7fc79dd5b000, 32768, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x24000) = 0x7fc79dd5b000 [pid 298] mmap(0x7fc79dd63000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2c000) = 0x7fc79dd63000 [pid 298] mmap(0x7fc79dd65000, 5840, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fc79dd65000 [pid 298] close(3) = 0 [pid 298] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc79dd35000 [pid 298] openat(AT_FDCWD, "/lib64/libatomic.so.1", O_RDONLY|O_CLOEXEC) = 3 [pid 298] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x30\x71\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1b\x00\x1a\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x78\x1f\x00\x00"..., 832) = 832 [pid 298] fstat(3, {st_mode=S_IFREG|0755, st_size=30704, ...}) = 0 [pid 298] mmap(NULL, 37000, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fc79dd2b000 [pid 298] mmap(0x7fc79dd2d000, 12288, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7fc79dd2d000 [pid 298] mmap(0x7fc79dd30000, 8192, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5000) = 0x7fc79dd30000 [pid 298] mmap(0x7fc79dd32000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6000) = 0x7fc79dd32000 [pid 298] mmap(0x7fc79dd34000, 136, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fc79dd34000 [pid 298] close(3) = 0 [pid 298] openat(AT_FDCWD, "/lib64/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 298] openat(AT_FDCWD, "/usr/lib64/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = 3 [pid 298] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xf0\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1a\x00\x19\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8\x20\x00\x00"..., 832) = 832 [pid 298] fstat(3, {st_mode=S_IFREG|0755, st_size=395120, ...}) = 0 [pid 298] mmap(NULL, 397336, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fc79dcc9000 [pid 298] mmap(0x7fc79dccc000, 225280, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7fc79dccc000 [pid 298] mmap(0x7fc79dd03000, 155648, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3a000) = 0x7fc79dd03000 [pid 298] mmap(0x7fc79dd29000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5f000) = 0x7fc79dd29000 [pid 298] close(3) = 0 [pid 298] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc79dcc7000 [pid 298] arch_prctl(ARCH_SET_FS, 0x7fc79dcc7c80) = 0 [pid 298] set_tid_address(0x7fc79dcc7f50) = 298 [pid 298] set_robust_list(0x7fc79dcc7f60, 24) = 0 [pid 298] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 32, 0, 0x53053053) = -1 ENOSYS (Function not implemented) [pid 298] mprotect(0x7fc79df5d000, 16384, PROT_READ) = 0 [pid 298] mprotect(0x7fc79dd29000, 4096, PROT_READ) = 0 [pid 298] mprotect(0x7fc79dd32000, 4096, PROT_READ) = 0 [pid 298] mprotect(0x7fc79dd63000, 4096, PROT_READ) = 0 [pid 298] mprotect(0x7fc79dd74000, 4096, PROT_READ) = 0 [pid 298] mprotect(0x7fc79dd8e000, 4096, PROT_READ) = 0 [pid 298] mprotect(0x7fc79dd7d000, 4096, PROT_READ) = 0 [pid 298] mprotect(0x7fc79e02e000, 12288, PROT_READ) = 0 [pid 298] mprotect(0x558d26fe4000, 4096, PROT_READ) = 0 [pid 298] mprotect(0x7fc79e067000, 8192, PROT_READ) = 0 [pid 298] prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 [pid 298] statfs("/sys/fs/selinux", {f_type=SELINUX_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOSUID|ST_NOEXEC|ST_RELATIME}) = 0 [pid 298] statfs("/sys/fs/selinux", {f_type=SELINUX_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOSUID|ST_NOEXEC|ST_RELATIME}) = 0 [pid 298] getrandom("\x72\x26\xf8\xa1\xb5\xce\xd9\xf6", 8, GRND_NONBLOCK) = 8 [pid 298] brk(NULL) = 0x558d61a6e000 [pid 298] brk(0x558d61a8f000) = 0x558d61a8f000 [pid 298] access("/etc/selinux/config", F_OK) = 0 [pid 298] openat(AT_FDCWD, "./swap-file", O_WRONLY) = 3 [pid 298] lseek(3, 0, SEEK_END) = 128000000 [pid 298] lseek(3, 0, SEEK_SET) = 0 [pid 298] fstat(1, {st_mode=S_IFIFO|0600, st_size=0, ...}) = 0 [pid 298] fstat(3, {st_mode=S_IFREG|0600, st_size=128000000, ...}) = 0 [pid 298] fgetxattr(3, "security.selinux", "\x72\x6f\x6f\x74\x3a\x6f\x62\x6a\x65\x63\x74\x5f\x72\x3a\x75\x73\x65\x72\x5f\x68\x6f\x6d\x65\x5f\x74\x00", 255) = 26 [pid 298] access("/var/run/setrans/.setrans-unix", F_OK) = -1 ENOENT (No such file or directory) [pid 298] futex(0x7fc79dd666b8, FUTEX_WAKE_PRIVATE, 2147483647) = 0 [pid 298] fsetxattr(3, "security.selinux", "\x72\x6f\x6f\x74\x3a\x6f\x62\x6a\x65\x63\x74\x5f\x72\x3a\x73\x77\x61\x70\x66\x69\x6c\x65\x5f\x74\x00", 25, 0) = 0 [pid 298] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1024) = 1024 [pid 298] write(3, "\x01\x00\x00\x00\x11\x7a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 516) = 516 [pid 298] lseek(3, 4086, SEEK_SET) = 4086 [pid 298] write(3, "SWAPSPACE2", 10) = 10 [ 25.261892][ T24] audit: type=1400 audit(1789500023.430:66): avc: denied { mount } for pid=297 comm="syz-executor227" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.293977][ T298] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [pid 298] fsync(3) = 0 [pid 298] write(1, "Setting up swapspace version 1, size = 127995904 bytes\n", 55) = 55 [pid 298] exit_group(0) = ? Setting up swapspace version 1, size = 127995904 bytes [pid 298] +++ exited with 0 +++ rt_sigaction(SIGINT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa649e33b90}, NULL, 8) = 0 rt_sigaction(SIGQUIT, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fa649e33b90}, NULL, 8) = 0 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=298, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [ 25.302855][ T24] audit: type=1400 audit(1789500023.500:67): avc: denied { relabelto } for pid=298 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.328347][ T24] audit: type=1400 audit(1789500023.500:68): avc: denied { write } for pid=298 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.360813][ T24] audit: type=1400 audit(1789500023.560:69): avc: denied { read } for pid=297 comm="syz-executor227" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.386586][ T24] audit: type=1400 audit(1789500023.560:70): avc: denied { open } for pid=297 comm="syz-executor227" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" swapon("./swap-file", SWAP_FLAG_PREFER|0) = 0 rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGSEGV, {sa_handler=0x7fa649e2f1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7fa649e33b90}, NULL, 8) = 0 rt_sigaction(SIGBUS, {sa_handler=0x7fa649e2f1a0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7fa649e33b90}, NULL, 8) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-5-10/strace-static-x86_64: Process 299 attached , child_tidptr=0x555585de1750) = 299 [pid 297] rt_sigprocmask(SIG_SETMASK, [] [pid 299] set_robust_list(0x555585de1760, 24) = 0 [pid 299] rt_sigprocmask(SIG_SETMASK, [] [pid 297] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 299] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 297] rt_sigprocmask(SIG_BLOCK, ~[] [pid 299] getrandom( [pid 297] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 299] <... getrandom resumed>"\xbe\xcc\x21\x25\x1d\x52\x66\xca", 8, GRND_NONBLOCK) = 8 [pid 299] mkdir("./syzkaller.2uSmaf", 0700 [pid 297] <... clone resumed>, child_tidptr=0x555585de1750) = 300 ci2-android-5-10/strace-static-x86_64: Process 300 attached [pid 297] rt_sigprocmask(SIG_SETMASK, [] [pid 300] set_robust_list(0x555585de1760, 24 [pid 297] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 297] rt_sigprocmask(SIG_BLOCK, ~[] [pid 300] <... set_robust_list resumed>) = 0 [pid 297] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 299] <... mkdir resumed>) = 0 [pid 299] chmod("./syzkaller.2uSmaf", 0777) = 0 [pid 297] <... clone resumed>, child_tidptr=0x555585de1750) = 301 [pid 300] rt_sigprocmask(SIG_SETMASK, []ci2-android-5-10/strace-static-x86_64: Process 301 attached [pid 297] rt_sigprocmask(SIG_SETMASK, [] [pid 301] set_robust_list(0x555585de1760, 24 [pid 300] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 297] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 300] getrandom( [pid 301] <... set_robust_list resumed>) = 0 [pid 299] chdir("./syzkaller.2uSmaf" [pid 297] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 300] <... getrandom resumed>"\x7e\xf6\x29\x6f\x20\xeb\x23\x5c", 8, GRND_NONBLOCK) = 8 [pid 299] <... chdir resumed>) = 0 [pid 297] <... clone resumed>, child_tidptr=0x555585de1750) = 302 [pid 297] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 297] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 300] mkdir("./syzkaller.KN8DOl", 0700 [pid 301] rt_sigprocmask(SIG_SETMASK, [] [pid 299] unshare(CLONE_NEWPID [pid 297] <... clone resumed>, child_tidptr=0x555585de1750) = 303 [pid 297] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-5-10/strace-static-x86_64: Process 303 attached [pid 303] set_robust_list(0x555585de1760, 24) = 0 [pid 303] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 303] getrandom("\x23\xe8\x13\x14\x03\xae\x6e\x67", 8, GRND_NONBLOCK) = 8 [pid 303] mkdir("./syzkaller.XJmVey", 0700) = 0 [pid 303] chmod("./syzkaller.XJmVey", 0777) = 0 [pid 303] chdir("./syzkaller.XJmVey") = 0 [pid 300] <... mkdir resumed>) = 0 [pid 303] unshare(CLONE_NEWPID [pid 300] chmod("./syzkaller.KN8DOl", 0777 [pid 303] <... unshare resumed>) = 0 [pid 299] <... unshare resumed>) = 0 [pid 303] rt_sigprocmask(SIG_BLOCK, ~[] [pid 300] <... chmod resumed>) = 0 [pid 303] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 303] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 300] chdir("./syzkaller.KN8DOl" [pid 301] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 299] rt_sigprocmask(SIG_BLOCK, ~[] [pid 300] <... chdir resumed>) = 0 [pid 303] <... clone resumed>, child_tidptr=0x555585de1750) = 304 [pid 303] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 301] getrandom( [pid 300] unshare(CLONE_NEWPIDci2-android-5-10/strace-static-x86_64: Process 304 attached [pid 304] set_robust_list(0x555585de1760, 24) = 0 [pid 304] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 304] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 304] getppid() = 0 [pid 304] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 304] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 304] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 304] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 304] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 304] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 304] unshare(CLONE_NEWNS) = 0 [pid 304] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 300] <... unshare resumed>) = 0 ci2-android-5-10/strace-static-x86_64: Process 302 attached [pid 304] <... mount resumed>) = 0 [pid 301] <... getrandom resumed>"\xa4\x95\x4b\x0d\x3b\x77\x6e\x4f", 8, GRND_NONBLOCK) = 8 [pid 300] rt_sigprocmask(SIG_BLOCK, ~[] [pid 299] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 300] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 300] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555585de1750) = 305 [pid 300] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 301] mkdir("./syzkaller.M9gIhG", 0700) = 0 [pid 299] <... clone resumed>, child_tidptr=0x555585de1750) = 306 [pid 299] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 301] chmod("./syzkaller.M9gIhG", 0777) = 0 [pid 301] chdir("./syzkaller.M9gIhG") = 0 [pid 301] unshare(CLONE_NEWPID) = 0 [pid 301] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 301] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-5-10/strace-static-x86_64: Process 306 attached ci2-android-5-10/strace-static-x86_64: Process 307 attached ci2-android-5-10/strace-static-x86_64: Process 305 attached , child_tidptr=0x555585de1750) = 307 [pid 301] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 306] set_robust_list(0x555585de1760, 24 [pid 302] set_robust_list(0x555585de1760, 24 [pid 305] set_robust_list(0x555585de1760, 24 [pid 304] unshare(CLONE_NEWIPC) = -1 EINVAL (Invalid argument) [pid 302] <... set_robust_list resumed>) = 0 [pid 302] rt_sigprocmask(SIG_SETMASK, [] [pid 307] set_robust_list(0x555585de1760, 24 [pid 306] <... set_robust_list resumed>) = 0 [pid 305] <... set_robust_list resumed>) = 0 [pid 304] unshare(CLONE_NEWCGROUP [pid 302] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 306] rt_sigprocmask(SIG_SETMASK, [] [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 302] getrandom( [pid 307] <... set_robust_list resumed>) = 0 [pid 306] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 305] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 304] <... unshare resumed>) = 0 [pid 302] <... getrandom resumed>"\x16\xf4\x8b\x1c\x04\x61\xaa\x68", 8, GRND_NONBLOCK) = 8 [pid 306] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 305] <... prctl resumed>) = 0 [pid 306] <... prctl resumed>) = 0 [pid 305] getppid( [pid 306] getppid( [pid 305] <... getppid resumed>) = 0 [pid 306] <... getppid resumed>) = 0 [pid 305] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024} [pid 306] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024} [pid 305] <... prlimit64 resumed>, NULL) = 0 [pid 306] <... prlimit64 resumed>, NULL) = 0 [pid 305] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024} [pid 306] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024} [pid 305] <... prlimit64 resumed>, NULL) = 0 [pid 306] <... prlimit64 resumed>, NULL) = 0 [pid 305] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024} [pid 306] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024} [pid 305] <... prlimit64 resumed>, NULL) = 0 [pid 306] <... prlimit64 resumed>, NULL) = 0 [pid 305] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024} [pid 306] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024} [pid 305] <... prlimit64 resumed>, NULL) = 0 [pid 306] <... prlimit64 resumed>, NULL) = 0 [pid 305] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024} [pid 306] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024} [pid 305] <... prlimit64 resumed>, NULL) = 0 [pid 306] <... prlimit64 resumed>, NULL) = 0 [pid 305] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256} [pid 306] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256} [pid 305] <... prlimit64 resumed>, NULL) = 0 [pid 306] <... prlimit64 resumed>, NULL) = 0 [pid 305] unshare(CLONE_NEWNS [pid 306] unshare(CLONE_NEWNS [pid 305] <... unshare resumed>) = 0 [pid 302] mkdir("./syzkaller.kaP1nW", 0700 [pid 306] <... unshare resumed>) = 0 [pid 306] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 305] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 306] <... mount resumed>) = 0 [pid 305] <... mount resumed>) = 0 [pid 306] unshare(CLONE_NEWIPC [pid 305] unshare(CLONE_NEWIPC [pid 306] <... unshare resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... unshare resumed>) = -1 EINVAL (Invalid argument) [pid 306] unshare(CLONE_NEWCGROUP [pid 305] unshare(CLONE_NEWCGROUP [pid 306] <... unshare resumed>) = 0 [pid 305] <... unshare resumed>) = 0 [pid 306] unshare(CLONE_NEWUTS [pid 305] unshare(CLONE_NEWUTS [pid 306] <... unshare resumed>) = 0 [pid 305] <... unshare resumed>) = 0 [pid 306] unshare(CLONE_SYSVSEM [pid 305] unshare(CLONE_SYSVSEM [pid 306] <... unshare resumed>) = 0 [pid 305] <... unshare resumed>) = 0 [pid 306] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 305] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 306] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 305] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 306] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 305] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 306] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 305] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 306] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 305] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 306] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 305] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 306] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 305] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC [pid 306] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 305] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 306] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 305] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC [pid 306] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 305] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 306] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 305] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 306] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 305] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 306] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 305] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 306] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 305] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 306] getpid( [pid 305] getpid( [pid 306] <... getpid resumed>) = 1 [pid 305] <... getpid resumed>) = 1 [pid 306] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1} [pid 305] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1} [pid 306] <... capget resumed>, {effective=1<, {effective=1< [pid 305] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 306] <... capset resumed>) = 0 [pid 305] <... capset resumed>) = 0 [pid 306] unshare(CLONE_NEWNET [pid 305] unshare(CLONE_NEWNET [pid 307] rt_sigprocmask(SIG_SETMASK, [] [pid 304] unshare(CLONE_NEWUTS [pid 302] <... mkdir resumed>) = 0 [pid 307] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 307] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 304] <... unshare resumed>) = 0 [pid 304] unshare(CLONE_SYSVSEM) = 0 [pid 304] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 307] <... prctl resumed>) = 0 [pid 307] getppid( [pid 302] chmod("./syzkaller.kaP1nW", 0777 [pid 307] <... getppid resumed>) = 0 [pid 302] <... chmod resumed>) = 0 [pid 307] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024} [pid 304] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 307] <... prlimit64 resumed>, NULL) = 0 [pid 307] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 302] chdir("./syzkaller.kaP1nW" [pid 307] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024} [pid 302] <... chdir resumed>) = 0 [pid 307] <... prlimit64 resumed>, NULL) = 0 [pid 304] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC [pid 307] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024} [pid 302] unshare(CLONE_NEWPID [pid 304] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 307] <... prlimit64 resumed>, NULL) = 0 [pid 302] <... unshare resumed>) = 0 [pid 307] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 302] rt_sigprocmask(SIG_BLOCK, ~[] [pid 307] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256} [pid 302] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 307] <... prlimit64 resumed>, NULL) = 0 [pid 302] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] unshare(CLONE_NEWNS [pid 304] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 307] <... unshare resumed>) = 0 [pid 304] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 304] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 304] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 304] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC [pid 307] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 304] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 307] <... mount resumed>) = 0 [pid 307] unshare(CLONE_NEWIPC) = -1 EINVAL (Invalid argument) [pid 304] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC [pid 307] unshare(CLONE_NEWCGROUP [pid 304] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 307] <... unshare resumed>) = 0 [pid 307] unshare(CLONE_NEWUTS [pid 302] <... clone resumed>, child_tidptr=0x555585de1750) = 308 [pid 307] <... unshare resumed>) = 0 [pid 302] rt_sigprocmask(SIG_SETMASK, [] [pid 304] getpid( [pid 307] unshare(CLONE_SYSVSEM [pid 304] <... getpid resumed>) = 1 [pid 307] <... unshare resumed>) = 0 [pid 304] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1} [pid 307] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC [pid 302] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 304] <... capget resumed>, {effective=1< [pid 307] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 307] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXECci2-android-5-10/strace-static-x86_64: Process 308 attached ) = -1 ENOENT (No such file or directory) [pid 307] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC [pid 308] set_robust_list(0x555585de1760, 24 [pid 307] <... openat resumed>) = -1 ENOENT (No such file or directory) [pid 307] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 307] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 307] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 307] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 308] <... set_robust_list resumed>) = 0 [pid 307] getpid() = 1 [pid 307] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1} [pid 308] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 307] <... capget resumed>, {effective=1< [pid 308] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 307] <... capset resumed>) = 0 [pid 308] <... prctl resumed>) = 0 [pid 308] getppid( [pid 307] unshare(CLONE_NEWNET [pid 308] <... getppid resumed>) = 0 [pid 308] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024} [pid 306] <... unshare resumed>) = 0 [pid 308] <... prlimit64 resumed>, NULL) = 0 [pid 306] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3 [pid 308] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 306] write(3, "0 65535", 7 [pid 308] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024} [pid 306] <... write resumed>) = 7 [pid 308] <... prlimit64 resumed>, NULL) = 0 [pid 308] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024} [pid 306] close(3 [pid 308] <... prlimit64 resumed>, NULL) = 0 [pid 308] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024} [pid 306] <... close resumed>) = 0 [pid 308] <... prlimit64 resumed>, NULL) = 0 [pid 306] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC [pid 308] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256} [pid 306] <... openat resumed>) = 3 [pid 308] <... prlimit64 resumed>, NULL) = 0 [pid 308] unshare(CLONE_NEWNS [pid 306] write(3, "100000", 6 [pid 308] <... unshare resumed>) = 0 [pid 306] <... write resumed>) = 6 [pid 308] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL [pid 306] close(3 [pid 308] <... mount resumed>) = 0 [pid 306] <... close resumed>) = 0 [pid 308] unshare(CLONE_NEWIPC [pid 306] mkdir("./syz-tmp", 0777 [pid 308] <... unshare resumed>) = -1 EINVAL (Invalid argument) [pid 306] <... mkdir resumed>) = 0 [pid 308] unshare(CLONE_NEWCGROUP) = 0 [ 25.412942][ T297] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.430496][ T24] audit: type=1400 audit(1789500023.630:71): avc: denied { mounton } for pid=304 comm="syz-executor227" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [pid 306] mount("", "./syz-tmp", "tmpfs", 0, NULL [pid 308] unshare(CLONE_NEWUTS [pid 306] <... mount resumed>) = 0 [pid 304] <... unshare resumed>) = 0 [pid 307] <... unshare resumed>) = 0 [pid 305] <... unshare resumed>) = 0 [pid 305] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3 [pid 305] write(3, "0 65535", 7) = 7 [pid 305] close(3) = 0 [pid 305] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3 [pid 305] write(3, "100000", 6) = 6 [pid 305] close(3) = 0 [pid 305] mkdir("./syz-tmp", 0777) = 0 [pid 305] mount("", "./syz-tmp", "tmpfs", 0, NULL) = 0 [pid 305] mkdir("./syz-tmp/newroot", 0777) = 0 [pid 305] mkdir("./syz-tmp/newroot/dev", 0700) = 0 [pid 305] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 305] mkdir("./syz-tmp/newroot/proc", 0700) = 0 [pid 305] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL) = 0 [pid 305] mkdir("./syz-tmp/newroot/selinux", 0700) = 0 [pid 305] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 305] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 305] mkdir("./syz-tmp/newroot/sys", 0700) = 0 [pid 305] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 305] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 305] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 305] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 304] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3 [pid 304] write(3, "0 65535", 7) = 7 [pid 305] mkdir("./syz-tmp/newroot/syz-inputs", 0700) = 0 [pid 304] close(3) = 0 [pid 304] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3 [pid 305] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 304] write(3, "100000", 6) = 6 [pid 304] close(3) = 0 [pid 305] mkdir("./syz-tmp/pivot", 0777) = 0 [pid 304] mkdir("./syz-tmp", 0777) = 0 [pid 305] pivot_root("./syz-tmp", "./syz-tmp/pivot") = 0 [pid 305] chdir("/") = 0 [pid 305] umount2("./pivot", MNT_DETACH [pid 304] mount("", "./syz-tmp", "tmpfs", 0, NULL) = 0 [pid 304] mkdir("./syz-tmp/newroot", 0777) = 0 [pid 304] mkdir("./syz-tmp/newroot/dev", 0700) = 0 [pid 304] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 304] mkdir("./syz-tmp/newroot/proc", 0700) = 0 [pid 304] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL) = 0 [pid 304] mkdir("./syz-tmp/newroot/selinux", 0700) = 0 [pid 304] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 304] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 304] mkdir("./syz-tmp/newroot/sys", 0700) = 0 [pid 304] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 304] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 304] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 304] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 304] mkdir("./syz-tmp/newroot/syz-inputs", 0700) = 0 [pid 304] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 304] mkdir("./syz-tmp/pivot", 0777) = 0 [pid 304] pivot_root("./syz-tmp", "./syz-tmp/pivot") = 0 [pid 304] chdir("/") = 0 [pid 304] umount2("./pivot", MNT_DETACH [pid 307] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3 [pid 307] write(3, "0 65535", 7) = 7 [pid 307] close(3) = 0 [pid 307] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3 [pid 307] write(3, "100000", 6) = 6 [pid 307] close(3) = 0 [pid 307] mkdir("./syz-tmp", 0777) = 0 [pid 307] mount("", "./syz-tmp", "tmpfs", 0, NULL) = 0 [pid 307] mkdir("./syz-tmp/newroot", 0777) = 0 [pid 307] mkdir("./syz-tmp/newroot/dev", 0700) = 0 [pid 307] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 307] mkdir("./syz-tmp/newroot/proc", 0700) = 0 [pid 307] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL) = 0 [pid 307] mkdir("./syz-tmp/newroot/selinux", 0700) = 0 [pid 307] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 307] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 307] mkdir("./syz-tmp/newroot/sys", 0700) = 0 [pid 307] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 307] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 307] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 307] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0 [pid 307] mkdir("./syz-tmp/newroot/syz-inputs", 0700) = 0 [pid 307] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 307] mkdir("./syz-tmp/pivot", 0777) = 0 [pid 307] pivot_root("./syz-tmp", "./syz-tmp/pivot") = 0 [pid 307] chdir("/") = 0 [pid 307] umount2("./pivot", MNT_DETACH [pid 308] <... unshare resumed>) = 0 [pid 308] unshare(CLONE_SYSVSEM) = 0 [pid 308] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 308] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 308] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 308] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 308] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 308] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 308] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 308] getpid() = 1 [pid 308] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 306] mkdir("./syz-tmp/newroot", 0777 [pid 305] <... umount2 resumed>) = 0 [pid 305] chroot("./newroot") = 0 [pid 305] chdir("/") = 0 [pid 305] mkdir("/dev/gadgetfs", 0777) = 0 [ 25.493035][ T24] audit: type=1400 audit(1789500023.690:72): avc: denied { mounton } for pid=306 comm="syz-executor227" path="/root/syzkaller.2uSmaf/syz-tmp" dev="sda1" ino=2031 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 25.517616][ T24] audit: type=1400 audit(1789500023.690:73): avc: denied { mount } for pid=306 comm="syz-executor227" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [pid 305] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL [pid 306] <... mkdir resumed>) = 0 [pid 306] mkdir("./syz-tmp/newroot/dev", 0700 [pid 305] <... mount resumed>) = -1 ENODEV (No such device) [pid 304] <... umount2 resumed>) = 0 [pid 306] <... mkdir resumed>) = 0 [pid 305] mkdir("/dev/binderfs", 0777 [pid 304] chroot("./newroot" [pid 306] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 305] <... mkdir resumed>) = 0 [pid 304] <... chroot resumed>) = 0 [pid 306] <... mount resumed>) = 0 [pid 305] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 304] chdir("/" [pid 306] mkdir("./syz-tmp/newroot/proc", 0700 [pid 305] <... mount resumed>) = 0 [pid 304] <... chdir resumed>) = 0 [pid 306] <... mkdir resumed>) = 0 [pid 305] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 304] mkdir("/dev/gadgetfs", 0777 [pid 306] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL [pid 305] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 304] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 306] <... mount resumed>) = 0 [pid 305] mkdir("./0", 0777 [pid 304] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL [pid 306] mkdir("./syz-tmp/newroot/selinux", 0700 [pid 305] <... mkdir resumed>) = 0 [pid 304] <... mount resumed>) = -1 ENODEV (No such device) [pid 306] <... mkdir resumed>) = 0 [pid 305] rt_sigprocmask(SIG_BLOCK, ~[] [pid 304] mkdir("/dev/binderfs", 0777 [pid 306] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 305] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 304] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 306] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 304] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 306] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 304] <... mount resumed>) = 0 [pid 306] <... mount resumed>) = 0 [pid 305] <... clone resumed>, child_tidptr=0x555585de1750) = 2 [pid 304] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 306] mkdir("./syz-tmp/newroot/sys", 0700 [pid 305] rt_sigprocmask(SIG_SETMASK, [] [pid 304] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 306] <... mkdir resumed>) = 0 [pid 305] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 304] mkdir("./0", 0777 [pid 306] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 304] <... mkdir resumed>) = 0 ci2-android-5-10/strace-static-x86_64: Process 309 attached [pid 307] <... umount2 resumed>) = 0 [pid 306] <... mount resumed>) = 0 [pid 304] rt_sigprocmask(SIG_BLOCK, ~[] [pid 309] set_robust_list(0x555585de1760, 24 [pid 307] chroot("./newroot" [pid 306] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 304] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 309] <... set_robust_list resumed>) = 0 [pid 307] <... chroot resumed>) = 0 [pid 306] <... mount resumed>) = 0 [pid 304] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 309] rt_sigprocmask(SIG_SETMASK, [] [pid 307] chdir("/" [pid 306] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 309] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 307] <... chdir resumed>) = 0 [pid 306] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 304] <... clone resumed>, child_tidptr=0x555585de1750) = 2 [pid 309] chdir("./0" [pid 307] mkdir("/dev/gadgetfs", 0777 [pid 306] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 304] rt_sigprocmask(SIG_SETMASK, [] [pid 309] <... chdir resumed>) = 0 [pid 308] <... unshare resumed>) = 0 [pid 307] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 306] <... mount resumed>) = 0 [pid 304] <... rt_sigprocmask resumed>, NULL, 8) = 0 ci2-android-5-10/strace-static-x86_64: Process 310 attached [pid 309] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 308] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC [pid 307] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL [pid 306] mkdir("./syz-tmp/newroot/syz-inputs", 0700 [pid 310] set_robust_list(0x555585de1760, 24 [pid 309] <... prctl resumed>) = 0 [pid 308] <... openat resumed>) = 3 [pid 307] <... mount resumed>) = -1 ENODEV (No such device) [pid 306] <... mkdir resumed>) = 0 [pid 309] setpgid(0, 0 [pid 306] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 309] <... setpgid resumed>) = 0 [pid 308] write(3, "0 65535", 7 [pid 307] mkdir("/dev/binderfs", 0777 [pid 306] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 306] mkdir("./syz-tmp/pivot", 0777 [pid 309] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 308] <... write resumed>) = 7 [pid 307] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 306] <... mkdir resumed>) = 0 [pid 306] pivot_root("./syz-tmp", "./syz-tmp/pivot") = 0 [pid 306] chdir("/") = 0 [pid 306] umount2("./pivot", MNT_DETACH [pid 309] <... openat resumed>) = 3 [pid 308] close(3 [pid 307] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 306] <... umount2 resumed>) = 0 [pid 309] write(3, "1000", 4 [pid 306] chroot("./newroot") = 0 [pid 306] chdir("/") = 0 [pid 306] mkdir("/dev/gadgetfs", 0777) = -1 EEXIST (File exists) [pid 306] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL) = -1 ENODEV (No such device) [pid 306] mkdir("/dev/binderfs", 0777 [pid 309] <... write resumed>) = 4 [pid 308] <... close resumed>) = 0 [pid 307] <... mount resumed>) = 0 [pid 306] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 309] close(3 [pid 308] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC [pid 307] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL [pid 306] mount("binder", "/dev/binderfs", "binder", 0, NULL [pid 309] <... close resumed>) = 0 [pid 308] <... openat resumed>) = 3 [pid 307] <... mount resumed>) = -1 EBUSY (Device or resource busy) [pid 306] <... mount resumed>) = 0 [pid 309] symlink("/dev/binderfs", "./binderfs" [pid 308] write(3, "100000", 6 [pid 307] mkdir("./0", 0777 [pid 306] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 306] mkdir("./0", 0777) = 0 [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 309] <... symlink resumed>) = 0 [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 309] write(1, "executing program\n", 18 [pid 308] <... write resumed>) = 6 [pid 307] <... mkdir resumed>) = 0 executing program [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 310] <... set_robust_list resumed>) = 0 [pid 309] <... write resumed>) = 18 [pid 308] close(3 [pid 307] rt_sigprocmask(SIG_BLOCK, ~[]ci2-android-5-10/strace-static-x86_64: Process 311 attached [pid 309] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 308] <... close resumed>) = 0 [pid 307] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 311] set_robust_list(0x555585de1760, 24 [pid 306] <... clone resumed>, child_tidptr=0x555585de1750) = 2 [pid 311] <... set_robust_list resumed>) = 0 [pid 306] rt_sigprocmask(SIG_SETMASK, [] [pid 311] rt_sigprocmask(SIG_SETMASK, [] [pid 306] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 311] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 311] chdir("./0" [pid 309] <... openat resumed>) = 3 [pid 308] mkdir("./syz-tmp", 0777 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 311] <... chdir resumed>) = 0 [pid 309] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffefc5d81e0 [pid 311] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 311] setpgid(0, 0) = 0 [pid 311] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 311] write(3, "1000", 4) = 4 [pid 309] <... ioctl resumed>) = 0 [pid 307] <... clone resumed>, child_tidptr=0x555585de1750) = 2 [pid 309] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 311] close(3 [pid 307] rt_sigprocmask(SIG_SETMASK, [] [pid 311] <... close resumed>) = 0 [pid 311] symlink("/dev/binderfs", "./binderfs"ci2-android-5-10/strace-static-x86_64: Process 312 attached [pid 310] rt_sigprocmask(SIG_SETMASK, [] [pid 309] <... ioctl resumed>) = 0 [pid 308] <... mkdir resumed>) = 0 [pid 307] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 312] set_robust_list(0x555585de1760, 24 [pid 311] <... symlink resumed>) = 0 [pid 310] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 309] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0 [pid 308] mount("", "./syz-tmp", "tmpfs", 0, NULL [pid 312] <... set_robust_list resumed>) = 0 [pid 311] write(1, "executing program\n", 18 executing program [pid 310] chdir("./0" [pid 309] <... ioctl resumed>) = 0 [pid 308] <... mount resumed>) = 0 [pid 312] rt_sigprocmask(SIG_SETMASK, [] [pid 311] <... write resumed>) = 18 [pid 310] <... chdir resumed>) = 0 [pid 309] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0 [pid 308] mkdir("./syz-tmp/newroot", 0777 [pid 312] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 311] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 310] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 308] <... mkdir resumed>) = 0 [pid 312] chdir("./0" [pid 311] <... openat resumed>) = 3 [pid 310] <... prctl resumed>) = 0 [pid 308] mkdir("./syz-tmp/newroot/dev", 0700 [pid 312] <... chdir resumed>) = 0 [pid 311] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffefc5d81e0 [pid 310] setpgid(0, 0 [pid 308] <... mkdir resumed>) = 0 [pid 312] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 311] <... ioctl resumed>) = 0 [pid 310] <... setpgid resumed>) = 0 [pid 308] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 312] <... prctl resumed>) = 0 [pid 311] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 310] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 308] <... mount resumed>) = 0 [pid 312] setpgid(0, 0 [pid 311] <... ioctl resumed>) = 0 [pid 310] <... openat resumed>) = 3 [pid 308] mkdir("./syz-tmp/newroot/proc", 0700 [pid 312] <... setpgid resumed>) = 0 [pid 310] write(3, "1000", 4 [pid 308] <... mkdir resumed>) = 0 [pid 312] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 310] <... write resumed>) = 4 [pid 308] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL [pid 312] <... openat resumed>) = 3 [pid 310] close(3 [pid 308] <... mount resumed>) = 0 [pid 312] write(3, "1000", 4 [pid 310] <... close resumed>) = 0 [pid 308] mkdir("./syz-tmp/newroot/selinux", 0700 [pid 312] <... write resumed>) = 4 [pid 310] symlink("/dev/binderfs", "./binderfs" [pid 308] <... mkdir resumed>) = 0 [pid 312] close(3 [pid 310] <... symlink resumed>) = 0 [pid 308] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 312] <... close resumed>) = 0 [pid 310] write(1, "executing program\n", 18 [pid 308] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 312] symlink("/dev/binderfs", "./binderfs" [pid 310] <... write resumed>) = 18 [pid 308] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 312] <... symlink resumed>) = 0 [pid 310] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 308] <... mount resumed>) = 0 executing program [pid 312] write(1, "executing program\n", 18 [pid 311] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0 [pid 310] <... openat resumed>) = 3 executing program [pid 308] mkdir("./syz-tmp/newroot/sys", 0700 [pid 312] <... write resumed>) = 18 [pid 311] <... ioctl resumed>) = 0 [pid 310] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffefc5d81e0 [pid 308] <... mkdir resumed>) = 0 [pid 312] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 310] <... ioctl resumed>) = 0 [pid 308] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 312] <... openat resumed>) = 3 [pid 310] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 308] <... mount resumed>) = 0 [pid 312] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffefc5d81e0 [pid 311] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0 [pid 310] <... ioctl resumed>) = 0 [pid 308] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 312] <... ioctl resumed>) = 0 [pid 310] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0 [pid 308] <... mount resumed>) = 0 [pid 312] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0 [pid 310] <... ioctl resumed>) = 0 [pid 308] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 312] <... ioctl resumed>) = 0 [pid 310] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0 [pid 308] <... mount resumed>) = -1 ENOENT (No such file or directory) [pid 312] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0 [pid 308] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL [pid 312] <... ioctl resumed>) = 0 [pid 308] <... mount resumed>) = 0 [pid 312] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0 [pid 308] mkdir("./syz-tmp/newroot/syz-inputs", 0700) = 0 [pid 308] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory) [pid 308] mkdir("./syz-tmp/pivot", 0777) = 0 [pid 308] pivot_root("./syz-tmp", "./syz-tmp/pivot") = 0 [pid 308] chdir("/") = 0 [pid 308] umount2("./pivot", MNT_DETACH) = 0 [pid 308] chroot("./newroot") = 0 [pid 308] chdir("/") = 0 [pid 308] mkdir("/dev/gadgetfs", 0777) = -1 EEXIST (File exists) [pid 308] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL) = -1 ENODEV (No such device) [pid 308] mkdir("/dev/binderfs", 0777) = -1 EEXIST (File exists) [pid 308] mount("binder", "/dev/binderfs", "binder", 0, NULL) = 0 [pid 308] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 308] mkdir("./0", 0777) = 0 [pid 308] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-5-10/strace-static-x86_64: Process 318 attached , child_tidptr=0x555585de1750) = 2 [pid 308] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 318] set_robust_list(0x555585de1760, 24) = 0 [pid 318] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 318] chdir("./0") = 0 [pid 318] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 318] setpgid(0, 0) = 0 [pid 318] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 318] write(3, "1000", 4) = 4 [pid 318] close(3) = 0 [pid 318] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 318] write(1, "executing program\n", 18) = 18 [pid 318] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [ 25.519831][ T305] request_module fs-gadgetfs succeeded, but still no fs? [pid 318] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffefc5d81e0) = 0 [pid 318] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 318] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0) = 0 [pid 318] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0 [pid 311] <... ioctl resumed>) = 0 [pid 311] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffefc5d71d0 [pid 309] <... ioctl resumed>) = 0 [pid 309] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffefc5d71d0 [pid 318] <... ioctl resumed>) = 0 [pid 311] <... ioctl resumed>) = 18 [pid 318] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffefc5d71d0 [pid 311] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0 [pid 312] <... ioctl resumed>) = 0 [pid 310] <... ioctl resumed>) = 0 [pid 309] <... ioctl resumed>) = 18 [pid 310] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffefc5d71d0 [pid 309] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0 [pid 312] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffefc5d71d0 [pid 318] <... ioctl resumed>) = 18 [pid 318] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0 [pid 312] <... ioctl resumed>) = 18 [pid 310] <... ioctl resumed>) = 18 [pid 312] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0 [ 25.838729][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.838736][ T15] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.838782][ T54] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 25.848849][ T20] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.853706][ T5] usb 3-1: new high-speed USB device number 2 using dummy_hcd [pid 310] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0 [pid 311] <... ioctl resumed>) = 0 [pid 311] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffefc5d71d0 [pid 318] <... ioctl resumed>) = 0 [pid 311] <... ioctl resumed>) = 18 [pid 309] <... ioctl resumed>) = 0 [pid 318] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffefc5d71d0 [pid 311] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0 [pid 309] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffefc5d71d0 [pid 312] <... ioctl resumed>) = 0 [pid 310] <... ioctl resumed>) = 0 [pid 310] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffefc5d71d0 [pid 312] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffefc5d71d0 [pid 318] <... ioctl resumed>) = 18 [pid 311] <... ioctl resumed>) = 0 [pid 309] <... ioctl resumed>) = 18 [pid 311] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffefc5d71d0 [pid 318] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0 [pid 309] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0 [pid 312] <... ioctl resumed>) = 18 [pid 310] <... ioctl resumed>) = 18 [pid 312] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0 [pid 310] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0 [pid 318] <... ioctl resumed>) = 0 [pid 311] <... ioctl resumed>) = 9 [pid 309] <... ioctl resumed>) = 0 [pid 318] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffefc5d71d0 [pid 311] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0 [pid 309] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffefc5d71d0 [pid 312] <... ioctl resumed>) = 0 [pid 310] <... ioctl resumed>) = 0 [pid 312] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffefc5d71d0 [pid 310] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffefc5d71d0 [pid 311] <... ioctl resumed>) = 0 [pid 318] <... ioctl resumed>) = 9 [pid 309] <... ioctl resumed>) = 9 [pid 318] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0 [pid 311] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffefc5d71d0 [pid 309] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0 [pid 312] <... ioctl resumed>) = 9 [pid 310] <... ioctl resumed>) = 9 [pid 312] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0 [pid 310] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0 [pid 318] <... ioctl resumed>) = 0 [pid 311] <... ioctl resumed>) = 104 [pid 309] <... ioctl resumed>) = 0 [pid 318] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffefc5d71d0 [pid 311] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0 [pid 309] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffefc5d71d0 [pid 312] <... ioctl resumed>) = 0 [pid 312] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffefc5d71d0 [pid 310] <... ioctl resumed>) = 0 [ 26.198796][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.209740][ T25] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 26.218775][ T15] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.219772][ T20] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [pid 310] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffefc5d71d0 [pid 318] <... ioctl resumed>) = 104 [pid 312] <... ioctl resumed>) = 104 [pid 311] <... ioctl resumed>) = 0 [pid 310] <... ioctl resumed>) = 104 [pid 309] <... ioctl resumed>) = 104 [pid 311] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffefc5d71d0 [pid 318] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0 [pid 312] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0 [pid 310] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0 [pid 309] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0 [pid 318] <... ioctl resumed>) = 0 [pid 311] <... ioctl resumed>) = 4 [pid 318] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffefc5d71d0 [ 26.230816][ T54] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.241504][ T20] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 26.252373][ T5] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.273182][ T15] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 26.283187][ T54] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [pid 311] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0 [pid 318] <... ioctl resumed>) = 4 [pid 311] <... ioctl resumed>) = 0 [pid 309] <... ioctl resumed>) = 0 [pid 311] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffefc5d71d0 [pid 309] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffefc5d71d0 [pid 318] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0 [pid 312] <... ioctl resumed>) = 0 [pid 310] <... ioctl resumed>) = 0 [pid 312] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffefc5d71d0 [pid 310] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffefc5d71d0 [pid 318] <... ioctl resumed>) = 0 [pid 311] <... ioctl resumed>) = 8 [pid 309] <... ioctl resumed>) = 4 [pid 318] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffefc5d71d0 [pid 311] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0 [ 26.293218][ T5] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [pid 309] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0 [pid 312] <... ioctl resumed>) = 4 [pid 310] <... ioctl resumed>) = 4 [pid 312] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0 [pid 310] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0 [pid 311] <... ioctl resumed>) = 0 [pid 318] <... ioctl resumed>) = 8 [pid 309] <... ioctl resumed>) = 0 [pid 311] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffefc5d71d0 [pid 318] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0 [pid 309] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffefc5d71d0 [pid 312] <... ioctl resumed>) = 0 [pid 310] <... ioctl resumed>) = 0 [pid 312] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffefc5d71d0 [pid 310] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffefc5d71d0 [pid 309] <... ioctl resumed>) = 8 [pid 309] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0 [pid 318] <... ioctl resumed>) = 0 [pid 312] <... ioctl resumed>) = 8 [pid 311] <... ioctl resumed>) = 8 [pid 310] <... ioctl resumed>) = 8 [pid 318] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffefc5d71d0 [pid 312] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0 [pid 311] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0 [pid 310] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0 [pid 309] <... ioctl resumed>) = 0 [pid 309] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffefc5d71d0 [pid 318] <... ioctl resumed>) = 8 [pid 312] <... ioctl resumed>) = 0 [pid 311] <... ioctl resumed>) = 0 [pid 310] <... ioctl resumed>) = 0 [pid 318] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0 [pid 312] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffefc5d71d0 [pid 311] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffefc5d71d0 [pid 310] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffefc5d71d0 [pid 309] <... ioctl resumed>) = 8 [pid 309] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0 [pid 318] <... ioctl resumed>) = 0 [pid 312] <... ioctl resumed>) = 8 [pid 311] <... ioctl resumed>) = 8 [pid 310] <... ioctl resumed>) = 8 [pid 318] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffefc5d71d0 [pid 312] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0 [pid 311] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0 [pid 310] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0 [pid 309] <... ioctl resumed>) = 0 [pid 309] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffefc5d71d0 [pid 312] <... ioctl resumed>) = 0 [pid 310] <... ioctl resumed>) = 0 [pid 312] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffefc5d71d0 [pid 310] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffefc5d71d0 [pid 318] <... ioctl resumed>) = 8 [pid 318] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0 [pid 309] <... ioctl resumed>) = 8 [ 26.418788][ T25] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 26.427818][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.435916][ T25] usb 1-1: Product: syz [ 26.440167][ T20] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 26.448941][ T15] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 26.449193][ T25] usb 1-1: Manufacturer: syz [pid 309] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0 [pid 312] <... ioctl resumed>) = 8 [pid 310] <... ioctl resumed>) = 8 [pid 312] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0 [ 26.458798][ T54] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 26.462892][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.471931][ T5] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 26.479931][ T25] usb 1-1: SerialNumber: syz [ 26.489065][ T15] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.493544][ T20] usb 4-1: Product: syz [ 26.501675][ T54] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.508904][ T20] usb 4-1: Manufacturer: syz [pid 310] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0 [pid 311] <... ioctl resumed>) = 0 [pid 311] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 311] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 311] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7fa649edfb4c) = 0 [pid 311] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffefc5d71d0 [pid 318] <... ioctl resumed>) = 0 [pid 311] <... ioctl resumed>) = 0 [pid 318] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 318] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 318] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7fa649edfb4c) = 0 [pid 318] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffefc5d71d0) = 0 [ 26.513672][ T15] usb 2-1: Product: syz [ 26.518106][ T20] usb 4-1: SerialNumber: syz [ 26.522254][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.522288][ T5] usb 3-1: Product: syz [ 26.539194][ T54] usb 5-1: Product: syz [ 26.543389][ T54] usb 5-1: Manufacturer: syz [ 26.547948][ T54] usb 5-1: SerialNumber: syz [ 26.549135][ T25] cdc_mbim 1-1:1.0: skipping garbage [ 26.552551][ T15] usb 2-1: Manufacturer: syz [ 26.562510][ T5] usb 3-1: Manufacturer: syz [pid 312] <... ioctl resumed>) = 0 [pid 309] <... ioctl resumed>) = 0 [pid 310] <... ioctl resumed>) = 0 [pid 309] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 309] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 309] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7fa649edfb4c) = 0 [pid 309] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffefc5d71d0 [pid 312] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 312] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 312] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7fa649edfb4c) = 0 [pid 312] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffefc5d71d0 [pid 310] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0) = 0 [pid 310] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0 [pid 310] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7fa649edfb4c) = 0 [pid 310] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffefc5d71d0 [pid 312] <... ioctl resumed>) = 0 [pid 310] <... ioctl resumed>) = 0 [pid 309] <... ioctl resumed>) = 0 [ 26.567073][ T5] usb 3-1: SerialNumber: syz [ 26.569845][ T20] cdc_mbim 4-1:1.0: skipping garbage [ 26.571770][ T15] usb 2-1: SerialNumber: syz [ 26.619166][ T54] cdc_mbim 5-1:1.0: skipping garbage [ 26.625032][ T5] cdc_mbim 3-1:1.0: skipping garbage [ 26.630600][ T15] cdc_mbim 2-1:1.0: skipping garbage [pid 311] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d8200) = 0 [pid 311] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 311] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7fa649edff6c) = -1 EINVAL (Invalid argument) [pid 311] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7fa649edff7c) = 11 [pid 311] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffefc5d71f0) = 0 [pid 318] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d8200) = 0 [pid 318] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 318] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7fa649edff6c) = -1 EINVAL (Invalid argument) [pid 318] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7fa649edff7c) = 11 [pid 318] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffefc5d71f0) = 0 [pid 312] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d8200 [pid 309] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d8200 [pid 310] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d8200 [pid 312] <... ioctl resumed>) = 0 [pid 309] <... ioctl resumed>) = 0 [pid 309] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [ 26.758956][ T311] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 26.769478][ T318] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [pid 309] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7fa649edff6c [pid 312] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0 [pid 310] <... ioctl resumed>) = 0 [pid 309] <... ioctl resumed>) = -1 EINVAL (Invalid argument) [pid 309] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7fa649edff7c) = 11 [pid 309] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffefc5d71f0 [pid 312] <... ioctl resumed>) = 0 [pid 312] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7fa649edff6c [pid 310] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = 0 [pid 310] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7fa649edff6c [pid 312] <... ioctl resumed>) = -1 EINVAL (Invalid argument) [pid 312] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7fa649edff7c) = 11 [pid 312] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffefc5d71f0) = 0 [pid 310] <... ioctl resumed>) = -1 EINVAL (Invalid argument) [pid 309] <... ioctl resumed>) = 0 [pid 310] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7fa649edff7c) = 11 [pid 310] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffefc5d71f0) = 0 [ 26.820155][ T309] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 26.827453][ T312] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 26.828469][ T310] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [pid 311] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d8200) = 0 [pid 311] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 311] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 311] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffefc5d71f0) = 0 [pid 318] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d8200) = 0 [pid 318] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 318] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 318] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffefc5d71f0) = 0 [pid 312] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d8200 [pid 309] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d8200) = 0 [pid 309] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 309] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 309] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffefc5d71f0 [pid 312] <... ioctl resumed>) = 0 [pid 312] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 312] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 312] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffefc5d71f0) = 0 [pid 309] <... ioctl resumed>) = 0 [pid 310] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d8200) = 0 [pid 310] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0) = -1 EINVAL (Invalid argument) [pid 310] ioctl(3, USB_RAW_IOCTL_EP_DISABLE, 0xb) = 0 [pid 310] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffefc5d71f0) = 0 [pid 311] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d8200) = 0 [pid 311] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffefc5d71f0) = 28 [pid 318] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d8200) = 0 [pid 318] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffefc5d71f0) = 28 [pid 312] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d8200 [pid 309] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d8200 [pid 312] <... ioctl resumed>) = 0 [pid 312] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffefc5d71f0 [pid 309] <... ioctl resumed>) = 0 [pid 309] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffefc5d71f0 [pid 312] <... ioctl resumed>) = 28 [pid 309] <... ioctl resumed>) = 28 [pid 310] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d8200) = 0 [pid 310] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffefc5d71f0) = 28 [pid 311] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d8200) = 0 [pid 311] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7fa649edff6c) = -1 EINVAL (Invalid argument) [pid 311] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7fa649edff7c) = 11 [pid 311] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffefc5d71f0) = 0 [pid 318] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d8200) = 0 [pid 318] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7fa649edff6c) = -1 EINVAL (Invalid argument) [pid 318] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7fa649edff7c) = 11 [pid 318] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffefc5d71f0) = 0 [ 27.409169][ T311] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 27.428763][ T25] cdc_mbim 1-1:1.0: setting tx_max = 16384 [ 27.429596][ T318] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 27.438459][ T25] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 27.448646][ T25] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, e2:59:c5:39:81:07 [pid 312] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d8200 [pid 309] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d8200 [pid 312] <... ioctl resumed>) = 0 [pid 309] <... ioctl resumed>) = 0 [pid 309] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7fa649edff6c [pid 312] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7fa649edff6c [pid 310] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d8200) = 0 [pid 312] <... ioctl resumed>) = -1 EINVAL (Invalid argument) [pid 310] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7fa649edff6c [pid 312] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7fa649edff7c [pid 309] <... ioctl resumed>) = -1 EINVAL (Invalid argument) [pid 309] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7fa649edff7c) = 11 [ 27.448756][ T20] cdc_mbim 4-1:1.0: setting tx_max = 16384 [ 27.471226][ T20] cdc_mbim 4-1:1.0: cdc-wdm1: USB WDM device [ 27.478604][ T20] cdc_mbim 4-1:1.0 wwan1: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 2e:38:0f:a2:02:fb [ 27.494269][ T312] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 27.499813][ T309] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [pid 309] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffefc5d71f0 [pid 310] <... ioctl resumed>) = -1 EINVAL (Invalid argument) [pid 312] <... ioctl resumed>) = 11 [pid 312] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffefc5d71f0 [pid 310] ioctl(3, USB_RAW_IOCTL_EP_ENABLE, 0x7fa649edff7c) = 11 [pid 310] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffefc5d71f0 [pid 312] <... ioctl resumed>) = 0 [pid 309] <... ioctl resumed>) = 0 [pid 310] <... ioctl resumed>) = 0 [ 27.508872][ T310] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 27.538753][ T5] cdc_mbim 3-1:1.0: setting tx_max = 16384 [ 27.544642][ T15] cdc_mbim 2-1:1.0: setting tx_max = 16384 [ 27.550574][ T54] cdc_mbim 5-1:1.0: setting tx_max = 16384 [ 27.557549][ T54] cdc_mbim 5-1:1.0: cdc-wdm2: USB WDM device [ 27.559381][ T134] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 27.563912][ T5] cdc_mbim 3-1:1.0: cdc-wdm3: USB WDM device [ 27.576762][ T15] cdc_mbim 2-1:1.0: cdc-wdm4: USB WDM device [ 27.584221][ T54] cdc_mbim 5-1:1.0 wwan2: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 02:83:ea:1c:97:7e [ 27.596140][ T15] cdc_mbim 2-1:1.0 wwan3: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 36:d1:47:92:ae:a6 [pid 311] mkdirat(AT_FDCWD, "./sys", 0777) = 0 [pid 311] mount(NULL, "./sys", "sysfs", 0, NULL) = 0 [pid 311] openat(AT_FDCWD, "./sys/bus/usb/drivers_autoprobe", O_WRONLY|O_EXCL|O_APPEND) = 4 [pid 311] write(4, "\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x33\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x31\x30\x30\x30\x30\x31\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x31\x00", 72) = 72 [pid 311] close(3) = 0 [pid 311] close(4) = 0 [pid 311] close(5) = -1 EBADF (Bad file descriptor) [pid 311] close(6) = -1 EBADF (Bad file descriptor) [pid 311] close(7) = -1 EBADF (Bad file descriptor) [pid 311] close(8) = -1 EBADF (Bad file descriptor) [pid 311] close(9) = -1 EBADF (Bad file descriptor) [pid 311] close(10) = -1 EBADF (Bad file descriptor) [pid 311] close(11) = -1 EBADF (Bad file descriptor) [pid 311] close(12) = -1 EBADF (Bad file descriptor) [pid 311] close(13) = -1 EBADF (Bad file descriptor) [pid 311] close(14) = -1 EBADF (Bad file descriptor) [pid 311] close(15) = -1 EBADF (Bad file descriptor) [pid 311] close(16) = -1 EBADF (Bad file descriptor) [pid 311] close(17) = -1 EBADF (Bad file descriptor) [pid 311] close(18) = -1 EBADF (Bad file descriptor) [pid 311] close(19) = -1 EBADF (Bad file descriptor) [pid 311] close(20) = -1 EBADF (Bad file descriptor) [pid 311] close(21) = -1 EBADF (Bad file descriptor) [pid 311] close(22) = -1 EBADF (Bad file descriptor) [pid 311] close(23 [pid 318] mkdirat(AT_FDCWD, "./sys", 0777) = 0 [pid 318] mount(NULL, "./sys", "sysfs", 0, NULL) = 0 [pid 318] openat(AT_FDCWD, "./sys/bus/usb/drivers_autoprobe", O_WRONLY|O_EXCL|O_APPEND) = 4 [pid 318] write(4, "\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x33\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x31\x30\x30\x30\x30\x31\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x31\x00", 72) = 72 [pid 318] close(3) = 0 [pid 318] close(4) = 0 [pid 311] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 311] close(24) = -1 EBADF (Bad file descriptor) [pid 311] close(25) = -1 EBADF (Bad file descriptor) [pid 311] close(26) = -1 EBADF (Bad file descriptor) [pid 311] close(27) = -1 EBADF (Bad file descriptor) [pid 318] close(5) = -1 EBADF (Bad file descriptor) [pid 318] close(6 [pid 311] close(28 [pid 318] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 318] close(7 [pid 311] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 311] close(29) = -1 EBADF (Bad file descriptor) [pid 318] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 318] close(8) = -1 EBADF (Bad file descriptor) [pid 318] close(9) = -1 EBADF (Bad file descriptor) [pid 318] close(10) = -1 EBADF (Bad file descriptor) [pid 318] close(11) = -1 EBADF (Bad file descriptor) [pid 318] close(12) = -1 EBADF (Bad file descriptor) [pid 318] close(13) = -1 EBADF (Bad file descriptor) [pid 318] close(14) = -1 EBADF (Bad file descriptor) [pid 318] close(15) = -1 EBADF (Bad file descriptor) [pid 318] close(16) = -1 EBADF (Bad file descriptor) [pid 318] close(17) = -1 EBADF (Bad file descriptor) [pid 318] close(18) = -1 EBADF (Bad file descriptor) [pid 311] exit_group(0 [pid 318] close(19) = -1 EBADF (Bad file descriptor) [pid 318] close(20) = -1 EBADF (Bad file descriptor) [pid 318] close(21) = -1 EBADF (Bad file descriptor) [pid 318] close(22) = -1 EBADF (Bad file descriptor) [pid 318] close(23) = -1 EBADF (Bad file descriptor) [pid 318] close(24) = -1 EBADF (Bad file descriptor) [pid 318] close(25) = -1 EBADF (Bad file descriptor) [pid 311] <... exit_group resumed>) = ? [pid 318] close(26) = -1 EBADF (Bad file descriptor) [pid 318] close(27) = -1 EBADF (Bad file descriptor) [pid 318] close(28) = -1 EBADF (Bad file descriptor) [pid 318] close(29) = -1 EBADF (Bad file descriptor) [pid 311] +++ exited with 0 +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [ 27.607957][ T5] cdc_mbim 3-1:1.0 wwan4: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, fa:56:45:f7:38:3e [ 27.641646][ T54] usb 1-1: USB disconnect, device number 2 [ 27.652279][ T317] usb 4-1: USB disconnect, device number 2 [pid 306] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 306] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 306] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 306] getdents64(3, 0x555585de2810 /* 4 entries */, 32768) = 104 [pid 306] umount2("./0/sys", MNT_FORCE|UMOUNT_NOFOLLOW [pid 318] exit_group(0) = ? [pid 318] +++ exited with 0 +++ [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 306] <... umount2 resumed>) = 0 [pid 308] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 306] umount2("./0/sys", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] newfstatat(AT_FDCWD, "./0/sys", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 306] umount2("./0/sys", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./0/sys", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 306] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 306] getdents64(4, 0x555585dea850 /* 2 entries */, 32768) = 48 [pid 306] getdents64(4, 0x555585dea850 /* 0 entries */, 32768) = 0 [pid 306] close(4) = 0 [pid 306] rmdir("./0/sys") = 0 [pid 306] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 306] unlink("./0/binderfs") = 0 [pid 306] getdents64(3, 0x555585de2810 /* 0 entries */, 32768) = 0 [pid 306] close(3) = 0 [pid 306] rmdir("./0") = 0 [pid 306] mkdir("./1", 0777) = 0 [pid 306] rt_sigprocmask(SIG_BLOCK, ~[] [pid 308] <... restart_syscall resumed>) = 0 [pid 306] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 306] <... clone resumed>, child_tidptr=0x555585de1750) = 3 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] rt_sigprocmask(SIG_SETMASK, [] [pid 308] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 306] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 308] <... openat resumed>) = 3 [pid 308] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 308] getdents64(3, 0x555585de2810 /* 4 entries */, 32768) = 104 [pid 308] umount2("./0/sys", MNT_FORCE|UMOUNT_NOFOLLOWci2-android-5-10/strace-static-x86_64: Process 354 attached [pid 354] set_robust_list(0x555585de1760, 24) = 0 [pid 354] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 354] chdir("./1") = 0 [pid 354] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 354] setpgid(0, 0) = 0 [pid 354] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 354] write(3, "1000", 4) = 4 [pid 354] close(3) = 0 [pid 354] symlink("/dev/binderfs", "./binderfs") = 0 [pid 354] write(1, "executing program\n", 18) = 18 executing program [pid 354] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 354] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffefc5d81e0) = 0 [pid 354] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 354] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0) = 0 [pid 354] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0 [pid 308] <... umount2 resumed>) = 0 [pid 308] umount2("./0/sys", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] newfstatat(AT_FDCWD, "./0/sys", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 308] umount2("./0/sys", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./0/sys", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 308] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 308] getdents64(4, 0x555585dea850 /* 2 entries */, 32768) = 48 [pid 308] getdents64(4, 0x555585dea850 /* 0 entries */, 32768) = 0 [pid 308] close(4) = 0 [pid 308] rmdir("./0/sys") = 0 [pid 308] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 308] unlink("./0/binderfs") = 0 [pid 308] getdents64(3, 0x555585de2810 /* 0 entries */, 32768) = 0 [pid 308] close(3) = 0 [pid 308] rmdir("./0") = 0 [pid 308] mkdir("./1", 0777) = 0 [pid 308] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555585de1750) = 3 [pid 308] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-android-5-10/strace-static-x86_64: Process 355 attached [pid 355] set_robust_list(0x555585de1760, 24) = 0 [pid 355] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 355] chdir("./1") = 0 [pid 355] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 355] setpgid(0, 0) = 0 [pid 355] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 355] write(3, "1000", 4) = 4 [pid 355] close(3) = 0 [pid 355] symlink("/dev/binderfs", "./binderfs") = 0 [pid 355] write(1, "executing program\n", 18) = 18 executing program [pid 355] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 355] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffefc5d81e0) = 0 [pid 355] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 355] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0) = 0 [pid 355] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0 [pid 312] mkdirat(AT_FDCWD, "./sys", 0777 [pid 310] mkdirat(AT_FDCWD, "./sys", 0777 [pid 309] mkdirat(AT_FDCWD, "./sys", 0777 [pid 312] <... mkdirat resumed>) = 0 [pid 310] <... mkdirat resumed>) = 0 [pid 309] <... mkdirat resumed>) = 0 [pid 312] mount(NULL, "./sys", "sysfs", 0, NULL [pid 310] mount(NULL, "./sys", "sysfs", 0, NULL [pid 309] mount(NULL, "./sys", "sysfs", 0, NULL [pid 312] <... mount resumed>) = 0 [pid 310] <... mount resumed>) = 0 [pid 309] <... mount resumed>) = 0 [pid 312] openat(AT_FDCWD, "./sys/bus/usb/drivers_autoprobe", O_WRONLY|O_EXCL|O_APPEND [pid 310] openat(AT_FDCWD, "./sys/bus/usb/drivers_autoprobe", O_WRONLY|O_EXCL|O_APPEND [pid 309] openat(AT_FDCWD, "./sys/bus/usb/drivers_autoprobe", O_WRONLY|O_EXCL|O_APPEND [pid 312] <... openat resumed>) = 4 [pid 310] <... openat resumed>) = 4 [pid 309] <... openat resumed>) = 4 [pid 312] write(4, "\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x33\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x31\x30\x30\x30\x30\x31\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x31\x00", 72 [pid 310] write(4, "\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x33\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x31\x30\x30\x30\x30\x31\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x31\x00", 72 [pid 309] write(4, "\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x33\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x31\x30\x30\x30\x30\x31\x20\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x30\x31\x00", 72 [pid 312] <... write resumed>) = 72 [pid 310] <... write resumed>) = 72 [pid 309] <... write resumed>) = 72 [pid 312] close(3 [pid 310] close(3 [ 27.662534][ T54] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 27.675716][ T317] cdc_mbim 4-1:1.0 wwan1: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 27.694999][ T134] 8021q: adding VLAN 0 to HW filter on device wwan1 [pid 309] close(3 [pid 312] <... close resumed>) = 0 [pid 310] <... close resumed>) = 0 [pid 309] <... close resumed>) = 0 [pid 312] close(4 [pid 309] close(4 [pid 312] <... close resumed>) = 0 [pid 309] <... close resumed>) = 0 [pid 312] close(5 [pid 309] close(5 [pid 312] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 309] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] close(6 [pid 309] close(6 [pid 312] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 309] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] close(7 [pid 309] close(7 [pid 312] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 309] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] close(8 [pid 309] close(8 [pid 312] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 309] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] close(9 [pid 309] close(9 [pid 312] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 309] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] close(10 [pid 309] close(10 [pid 312] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 309] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] close(11 [pid 309] close(11 [pid 312] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 309] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] close(12 [pid 309] close(12 [pid 312] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 309] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] close(13 [pid 309] close(13 [pid 312] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 309] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] close(14 [pid 309] close(14 [pid 312] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 309] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] close(15 [pid 309] close(15 [pid 312] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 309] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] close(16 [pid 309] close(16 [pid 312] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 309] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] close(17 [pid 309] close(17 [pid 312] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 309] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] close(18 [pid 309] close(18 [pid 312] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 309] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] close(19 [pid 309] close(19 [pid 312] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 309] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] close(20 [pid 309] close(20 [pid 312] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 309] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] close(21 [pid 309] close(21 [pid 312] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 309] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] close(22 [pid 309] close(22 [pid 312] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 309] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] close(23 [pid 309] close(23 [pid 312] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 309] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] close(24 [pid 309] close(24 [pid 312] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 309] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] close(25 [pid 309] close(25 [pid 312] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 309] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] close(26 [pid 309] close(26 [pid 312] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 309] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] close(27 [pid 309] close(27 [pid 312] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 309] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] close(28 [pid 309] close(28 [pid 312] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 309] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] close(29 [pid 309] close(29 [pid 312] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 309] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 312] exit_group(0 [pid 309] exit_group(0 [pid 312] <... exit_group resumed>) = ? [pid 309] <... exit_group resumed>) = ? [pid 312] +++ exited with 0 +++ [pid 309] +++ exited with 0 +++ [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 307] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 305] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 310] close(4 [pid 307] <... restart_syscall resumed>) = 0 [pid 305] <... restart_syscall resumed>) = 0 [pid 307] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 305] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 305] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 307] <... openat resumed>) = 3 [pid 305] <... openat resumed>) = 3 [pid 307] fstat(3 [pid 305] fstat(3 [pid 307] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 305] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 307] getdents64(3 [pid 305] getdents64(3 [pid 307] <... getdents64 resumed>, 0x555585de2810 /* 4 entries */, 32768) = 104 [pid 305] <... getdents64 resumed>, 0x555585de2810 /* 4 entries */, 32768) = 104 [pid 307] umount2("./0/sys", MNT_FORCE|UMOUNT_NOFOLLOW [pid 305] umount2("./0/sys", MNT_FORCE|UMOUNT_NOFOLLOW [pid 310] <... close resumed>) = 0 [pid 310] close(5) = -1 EBADF (Bad file descriptor) [pid 310] close(6) = -1 EBADF (Bad file descriptor) [pid 310] close(7) = -1 EBADF (Bad file descriptor) [pid 310] close(8) = -1 EBADF (Bad file descriptor) [pid 310] close(9) = -1 EBADF (Bad file descriptor) [pid 310] close(10) = -1 EBADF (Bad file descriptor) [pid 310] close(11) = -1 EBADF (Bad file descriptor) [pid 310] close(12) = -1 EBADF (Bad file descriptor) [pid 310] close(13) = -1 EBADF (Bad file descriptor) [pid 310] close(14) = -1 EBADF (Bad file descriptor) [pid 310] close(15) = -1 EBADF (Bad file descriptor) [pid 310] close(16) = -1 EBADF (Bad file descriptor) [pid 310] close(17) = -1 EBADF (Bad file descriptor) [pid 310] close(18) = -1 EBADF (Bad file descriptor) [pid 310] close(19) = -1 EBADF (Bad file descriptor) [pid 310] close(20) = -1 EBADF (Bad file descriptor) [pid 310] close(21) = -1 EBADF (Bad file descriptor) [pid 310] close(22) = -1 EBADF (Bad file descriptor) [pid 310] close(23) = -1 EBADF (Bad file descriptor) [pid 310] close(24) = -1 EBADF (Bad file descriptor) [pid 310] close(25) = -1 EBADF (Bad file descriptor) [pid 310] close(26) = -1 EBADF (Bad file descriptor) [pid 307] <... umount2 resumed>) = 0 [pid 307] umount2("./0/sys", MNT_FORCE|UMOUNT_NOFOLLOW [pid 310] close(27 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] newfstatat(AT_FDCWD, "./0/sys" [pid 310] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 310] close(28 [pid 307] umount2("./0/sys", MNT_FORCE|UMOUNT_NOFOLLOW [pid 310] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] close(29 [pid 307] openat(AT_FDCWD, "./0/sys", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 310] <... close resumed>) = -1 EBADF (Bad file descriptor) [pid 307] <... openat resumed>) = 4 [pid 310] exit_group(0 [pid 307] fstat(4 [pid 310] <... exit_group resumed>) = ? [pid 307] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 310] +++ exited with 0 +++ [pid 307] getdents64(4 [pid 304] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [pid 304] restart_syscall(<... resuming interrupted rt_sigprocmask ...> [pid 307] <... getdents64 resumed>, 0x555585dea850 /* 2 entries */, 32768) = 48 [pid 307] getdents64(4, 0x555585dea850 /* 0 entries */, 32768) = 0 [pid 307] close(4) = 0 [pid 307] rmdir("./0/sys") = 0 [pid 307] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 307] unlink("./0/binderfs" [pid 304] <... restart_syscall resumed>) = 0 [pid 307] <... unlink resumed>) = 0 [pid 307] getdents64(3, 0x555585de2810 /* 0 entries */, 32768) = 0 [pid 304] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 307] close(3 [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] <... close resumed>) = 0 [pid 304] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 307] rmdir("./0" [pid 305] <... umount2 resumed>) = 0 [pid 304] <... openat resumed>) = 3 [pid 305] umount2("./0/sys", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] newfstatat(AT_FDCWD, "./0/sys", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 305] umount2("./0/sys", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./0/sys", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 305] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 305] getdents64(4, 0x555585dea850 /* 2 entries */, 32768) = 48 [pid 305] getdents64(4, 0x555585dea850 /* 0 entries */, 32768) = 0 [pid 305] close(4) = 0 [pid 305] rmdir("./0/sys") = 0 [pid 305] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 305] unlink("./0/binderfs") = 0 [pid 305] getdents64(3, 0x555585de2810 /* 0 entries */, 32768) = 0 [pid 305] close(3) = 0 [pid 305] rmdir("./0") = 0 [pid 305] mkdir("./1", 0777) = 0 [pid 305] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555585de1750) = 3 [pid 305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 304] fstat(3 [pid 307] <... rmdir resumed>) = 0 [pid 304] <... fstat resumed>, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 ci2-android-5-10/strace-static-x86_64: Process 366 attached [pid 366] set_robust_list(0x555585de1760, 24) = 0 [pid 366] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 366] chdir("./1") = 0 [pid 366] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 366] setpgid(0, 0) = 0 [pid 366] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 366] write(3, "1000", 4) = 4 [pid 366] close(3) = 0 [pid 366] symlink("/dev/binderfs", "./binderfs") = 0 [pid 366] write(1, "executing program\n", 18) = 18 [pid 366] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 366] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffefc5d81e0) = 0 [pid 366] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 366] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0) = 0 executing program [pid 366] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0 [pid 307] mkdir("./1", 0777 [pid 304] getdents64(3 [pid 307] <... mkdir resumed>) = 0 [pid 304] <... getdents64 resumed>, 0x555585de2810 /* 4 entries */, 32768) = 104 [pid 304] umount2("./0/sys", MNT_FORCE|UMOUNT_NOFOLLOW [pid 307] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 304] <... umount2 resumed>) = 0 [pid 304] umount2("./0/sys", MNT_FORCE|UMOUNT_NOFOLLOW [pid 307] <... clone resumed>, child_tidptr=0x555585de1750) = 3 [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] rt_sigprocmask(SIG_SETMASK, [] [pid 304] newfstatat(AT_FDCWD, "./0/sys" [pid 307] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 304] <... newfstatat resumed>, {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 304] umount2("./0/sys", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 304] openat(AT_FDCWD, "./0/sys", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 304] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 304] getdents64(4, 0x555585dea850 /* 2 entries */, 32768) = 48 [pid 304] getdents64(4, 0x555585dea850 /* 0 entries */, 32768) = 0 [pid 304] close(4) = 0 [pid 304] rmdir("./0/sys") = 0 ci2-android-5-10/strace-static-x86_64: Process 368 attached [pid 304] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 368] set_robust_list(0x555585de1760, 24 [pid 304] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 368] <... set_robust_list resumed>) = 0 [pid 304] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 304] unlink("./0/binderfs") = 0 [pid 304] getdents64(3 [pid 368] rt_sigprocmask(SIG_SETMASK, [] [pid 304] <... getdents64 resumed>, 0x555585de2810 /* 0 entries */, 32768) = 0 [pid 368] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 304] close(3) = 0 [pid 368] chdir("./1" [pid 304] rmdir("./0") = 0 [pid 368] <... chdir resumed>) = 0 [pid 368] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 304] mkdir("./1", 0777) = 0 [pid 368] <... prctl resumed>) = 0 [pid 304] rt_sigprocmask(SIG_BLOCK, ~[] [pid 368] setpgid(0, 0 [pid 304] <... rt_sigprocmask resumed>, [], 8) = 0 [pid 368] <... setpgid resumed>) = 0 [pid 304] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555585de1750) = 3 ci2-android-5-10/strace-static-x86_64: Process 370 attached [pid 368] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 304] rt_sigprocmask(SIG_SETMASK, [] [pid 368] <... openat resumed>) = 3 [pid 304] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 370] set_robust_list(0x555585de1760, 24 [pid 368] write(3, "1000", 4 [pid 370] <... set_robust_list resumed>) = 0 [pid 368] <... write resumed>) = 4 [pid 368] close(3 [pid 370] rt_sigprocmask(SIG_SETMASK, [] [pid 368] <... close resumed>) = 0 [pid 370] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 368] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 368] write(1, "executing program\n", 18 [pid 370] chdir("./1" [pid 368] <... write resumed>) = 18 [pid 368] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR [pid 370] <... chdir resumed>) = 0 [pid 370] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 368] <... openat resumed>) = 3 [pid 368] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffefc5d81e0) = 0 [pid 370] <... prctl resumed>) = 0 [pid 368] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 368] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0 [pid 370] setpgid(0, 0 [pid 368] <... ioctl resumed>) = 0 [pid 370] <... setpgid resumed>) = 0 [pid 368] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0 [pid 370] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 370] write(3, "1000", 4) = 4 [pid 370] close(3) = 0 [pid 370] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 370] write(1, "executing program\n", 18) = 18 [pid 370] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3 [pid 370] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffefc5d81e0) = 0 [pid 370] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0 [pid 370] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffefc5d81e0) = 0 [ 27.741318][ T20] usb 3-1: USB disconnect, device number 2 [ 27.744229][ T5] usb 5-1: USB disconnect, device number 2 [ 27.751960][ T20] cdc_mbim 3-1:1.0 wwan4: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 27.754326][ T5] cdc_mbim 5-1:1.0 wwan2: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 27.764315][ T25] usb 2-1: USB disconnect, device number 2 [ 27.778685][ T25] cdc_mbim 2-1:1.0 wwan3: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 27.829264][ T20] general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] PREEMPT SMP KASAN [ 27.840988][ T20] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] [ 27.849387][ T20] CPU: 1 PID: 20 Comm: kworker/1:0 Not tainted syzkaller #0 [ 27.856640][ T20] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 27.866687][ T20] Workqueue: usb_hub_wq hub_event [ 27.871690][ T20] RIP: 0010:klist_remove+0x150/0x300 [ 27.876947][ T20] Code: 28 02 49 89 df 49 c1 ef 03 43 80 3c 27 00 74 08 48 89 df e8 a2 5d 45 ff 4c 8b 33 49 83 e6 fe 49 8d 7e 20 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 84 5d 45 ff 49 8b 46 20 48 89 44 24 18 4c [ 27.896541][ T20] RSP: 0018:ffffc90000157480 EFLAGS: 00010202 [ 27.902585][ T20] RAX: 0000000000000004 RBX: ffff88810deeb848 RCX: 0000000000000000 [ 27.910531][ T20] RDX: 0000000000000000 RSI: ffffffff8676fae0 RDI: 0000000000000020 [ 27.918481][ T20] RBP: ffffc90000157570 R08: 0000000000000003 R09: 0000000000000004 [ 27.926427][ T20] R10: dffffc0000000000 R11: fffff5200002ae80 R12: dffffc0000000000 [ 27.934370][ T20] R13: 1ffff9200002ae94 R14: 0000000000000000 R15: 1ffff11021bdd709 [ 27.942340][ T20] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 27.951242][ T20] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.957799][ T20] CR2: 0000559e79618300 CR3: 000000010b1e0000 CR4: 00000000003506a0 [ 27.965746][ T20] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 27.973692][ T20] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 27.981636][ T20] Call Trace: [ 27.984906][ T20] ? klist_del+0x100/0x100 [ 27.989300][ T20] ? __kasan_check_write+0x14/0x20 [ 27.994384][ T20] ? mutex_unlock+0x1c/0x40 [ 27.998862][ T20] ? device_links_driver_cleanup+0x7f2/0x820 [ 28.004815][ T20] ? pm_runtime_reinit+0xd3/0x250 [ 28.009813][ T20] device_release_driver_internal+0x67e/0x7c0 [ 28.015850][ T20] device_release_driver+0x19/0x20 [ 28.020965][ T20] usb_driver_release_interface+0x140/0x1b0 [ 28.026834][ T20] cdc_ncm_unbind+0x2b3/0x440 [ 28.031489][ T20] ? wdm_probe+0x310/0x310 [ 28.035877][ T20] cdc_mbim_unbind+0xec/0x100 [ 28.040526][ T20] ? cdc_mbim_bind+0x590/0x590 [ 28.045264][ T20] usbnet_disconnect+0x1a9/0x3a0 [ 28.050178][ T20] usb_unbind_interface+0x212/0x8a0 [ 28.055352][ T20] ? kernfs_remove_by_name_ns+0x120/0x160 [ 28.061042][ T20] ? usb_driver_release_interface+0x1b0/0x1b0 [ 28.067078][ T20] device_release_driver_internal+0x531/0x7c0 [ 28.073117][ T20] device_release_driver+0x19/0x20 [ 28.078201][ T20] bus_remove_device+0x2df/0x340 [ 28.083111][ T20] device_del+0x62e/0xe60 [ 28.087413][ T20] ? kill_device+0xd0/0xd0 [ 28.091800][ T20] ? device_unregister+0x27/0x40 [ 28.096709][ T20] usb_disable_device+0x3a8/0x750 [ 28.101717][ T20] usb_disconnect+0x32d/0x870 [ 28.106368][ T20] hub_event+0x19c2/0x4220 [ 28.110761][ T20] ? compat_start_thread+0x80/0x80 [ 28.115869][ T20] ? hub_post_resume+0x120/0x120 [ 28.120778][ T20] ? __switch_to_asm+0x3a/0x60 [ 28.125514][ T20] ? __kasan_check_read+0x11/0x20 [ 28.130510][ T20] ? read_word_at_a_time+0x12/0x20 [ 28.135591][ T20] ? strscpy+0x9b/0x290 [ 28.139718][ T20] process_one_work+0x6fd/0xbc0 [ 28.144543][ T20] worker_thread+0xa8e/0x13c0 [ 28.149197][ T20] kthread+0x324/0x3b0 [ 28.153237][ T20] ? worker_clr_flags+0x190/0x190 [ 28.158256][ T20] ? kthread_blkcg+0xd0/0xd0 [ 28.162819][ T20] ret_from_fork+0x1f/0x30 [ 28.167204][ T20] Modules linked in: [ 28.173727][ T20] ---[ end trace 7387eebc842e211d ]--- [ 28.179267][ T20] RIP: 0010:klist_remove+0x150/0x300 [ 28.184627][ T20] Code: 28 02 49 89 df 49 c1 ef 03 43 80 3c 27 00 74 08 48 89 df e8 a2 5d 45 ff 4c 8b 33 49 83 e6 fe 49 8d 7e 20 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 84 5d 45 ff 49 8b 46 20 48 89 44 24 18 4c [ 28.204676][ T20] RSP: 0018:ffffc90000157480 EFLAGS: 00010202 [ 28.213853][ T20] RAX: 0000000000000004 RBX: ffff88810deeb848 RCX: 0000000000000000 [ 28.221986][ T20] RDX: 0000000000000000 RSI: ffffffff8676fae0 RDI: 0000000000000020 [ 28.230178][ T20] RBP: ffffc90000157570 R08: 0000000000000003 R09: 0000000000000004 [ 28.238151][ T20] R10: dffffc0000000000 R11: fffff5200002ae80 R12: dffffc0000000000 [ 28.246338][ T20] R13: 1ffff9200002ae94 R14: 0000000000000000 R15: 1ffff11021bdd709 [ 28.254508][ T20] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 28.263622][ T20] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.270312][ T20] CR2: 00007ffe729dc688 CR3: 000000010d597000 CR4: 00000000003506a0 [ 28.278281][ T20] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 28.286371][ T20] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 28.294448][ T20] Kernel panic - not syncing: Fatal exception [ 28.300746][ T20] Kernel Offset: disabled [ 28.305062][ T20] Rebooting in 86400 seconds..