ci2-android-5-15-perf/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci2-android-5-15-perf/syz-executor3897023048

<...>
Warning: Permanently added '10.128.1.104' (ED25519) to the list of known hosts.
execve("ci2-android-5-15-perf/syz-executor3897023048", ["ci2-android-5-15-perf/syz-executor3897023048"], 0x7fff429e6970 /* 10 vars */) = 0
brk(NULL)                               = 0x55558dd63000
brk(0x55558dd63d40)                     = 0x55558dd63d40
arch_prctl(ARCH_SET_FS, 0x55558dd633c0) = 0
set_tid_address(0x55558dd63690)         = 303
set_robust_list(0x55558dd636a0, 24)     = 0
rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 32, 0, 0x53053053) = -1 ENOSYS (Function not implemented)
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci2-android-5-15-perf/syz-executor3897023048", 4096) = 50
getrandom("\xec\x93\xd3\xf5\xf0\xc1\xdf\x2b", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x55558dd63d40
brk(0x55558dd84d40)                     = 0x55558dd84d40
brk(0x55558dd85000)                     = 0x55558dd85000
mprotect(0x7fd9ff728000, 20480, PROT_READ) = 0
mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000
mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000
mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000
rt_sigprocmask(SIG_BLOCK, ~[], [], 8)   = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558dd63690) = 304
ci2-android-5-15-perf/strace-static-x86_64: Process 304 attached
[pid   303] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   303] openat(AT_FDCWD, "/sys/kernel/debug/x86/nmi_longest_ns", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   304] set_robust_list(0x55558dd636a0, 24) = 0
[pid   304] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   303] <... openat resumed>)       = 3
[pid   303] write(3, "10000000000", 11) = 11
[pid   303] close(3)                    = 0
[pid   303] openat(AT_FDCWD, "/proc/sys/kernel/hung_task_check_interval_secs", O_WRONLY|O_CLOEXEC) = 3
[pid   303] write(3, "20", 2)           = 2
[pid   303] close(3)                    = 0
[pid   303] openat(AT_FDCWD, "/proc/sys/net/core/bpf_jit_kallsyms", O_WRONLY|O_CLOEXEC) = 3
[pid   303] write(3, "1", 1)            = 1
[pid   303] close(3)                    = 0
[pid   303] openat(AT_FDCWD, "/proc/sys/net/core/bpf_jit_harden", O_WRONLY|O_CLOEXEC) = 3
[pid   303] write(3, "0", 1)            = 1
[pid   303] close(3)                    = 0
[pid   303] openat(AT_FDCWD, "/proc/sys/kernel/kptr_restrict", O_WRONLY|O_CLOEXEC) = 3
[pid   303] write(3, "0", 1)            = 1
[pid   303] close(3)                    = 0
[pid   303] openat(AT_FDCWD, "/proc/sys/kernel/softlockup_all_cpu_backtrace", O_WRONLY|O_CLOEXEC) = 3
[pid   303] write(3, "1", 1)            = 1
[pid   303] close(3)                    = 0
[pid   303] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3
[pid   303] write(3, "100", 3)          = 3
[pid   303] close(3)                    = 0
[pid   303] openat(AT_FDCWD, "/proc/sys/vm/oom_dump_tasks", O_WRONLY|O_CLOEXEC) = 3
[pid   303] write(3, "0", 1)            = 1
[pid   303] close(3)                    = 0
[pid   303] openat(AT_FDCWD, "/proc/sys/debug/exception-trace", O_WRONLY|O_CLOEXEC) = 3
[pid   303] write(3, "0", 1)            = 1
[pid   303] close(3)                    = 0
[pid   303] openat(AT_FDCWD, "/proc/sys/kernel/printk", O_WRONLY|O_CLOEXEC) = 3
[pid   303] write(3, "7 4 1 3", 7)      = 7
[pid   303] close(3)                    = 0
[pid   303] openat(AT_FDCWD, "/proc/sys/kernel/keys/gc_delay", O_WRONLY|O_CLOEXEC) = 3
[pid   303] write(3, "1", 1)            = 1
[pid   303] close(3)                    = 0
[pid   303] openat(AT_FDCWD, "/proc/sys/vm/oom_kill_allocating_task", O_WRONLY|O_CLOEXEC) = 3
[pid   303] write(3, "1", 1)            = 1
[pid   303] close(3)                    = 0
[pid   303] openat(AT_FDCWD, "/sys/kernel/debug/failslab/task-filter", O_WRONLY|O_CLOEXEC) = 3
[pid   303] write(3, "Y", 1)            = 1
[pid   303] close(3)                    = 0
[pid   303] openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/task-filter", O_WRONLY|O_CLOEXEC) = 3
[pid   303] write(3, "Y", 1)            = 1
[pid   303] close(3)                    = 0
[pid   303] openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/task-filter", O_WRONLY|O_CLOEXEC) = 3
[pid   303] write(3, "Y", 1)            = 1
[pid   303] close(3)                    = 0
[pid   303] openat(AT_FDCWD, "/sys/kernel/debug/fail_usercopy/task-filter", O_WRONLY|O_CLOEXEC) = 3
[pid   303] write(3, "Y", 1)            = 1
[pid   303] close(3)                    = 0
[pid   303] openat(AT_FDCWD, "/sys/kernel/debug/fail_make_request/task-filter", O_WRONLY|O_CLOEXEC) = 3
[pid   303] write(3, "Y", 1)            = 1
[pid   303] close(3)                    = 0
[pid   303] openat(AT_FDCWD, "/sys/kernel/debug/fail_io_timeout/task-filter", O_WRONLY|O_CLOEXEC) = 3
[pid   303] write(3, "Y", 1)            = 1
[pid   303] close(3)                    = 0
[pid   303] openat(AT_FDCWD, "/sys/kernel/debug/fail_iommufd/task-filter", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid   303] openat(AT_FDCWD, "/proc/sys/kernel/ctrl-alt-del", O_WRONLY|O_CLOEXEC) = 3
[pid   303] write(3, "0", 1)            = 1
[pid   303] close(3)                    = 0
[pid   303] openat(AT_FDCWD, "/proc/sys/kernel/cad_pid", O_WRONLY|O_CLOEXEC) = 3
[pid   303] write(3, "304", 3)          = 3
[pid   303] close(3)                    = 0
[pid   303] kill(304, SIGKILL)          = 0
[pid   304] +++ killed by SIGKILL +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=304, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} ---
mkdir("/syzcgroup", 0777)               = 0
mkdir("/syzcgroup/unified", 0777)       = 0
[  211.715473][   T30] audit: type=1400 audit(1789782624.672:64): avc:  denied  { execmem } for  pid=303 comm="syz-executor389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
mount("none", "/syzcgroup/unified", "cgroup2", 0, NULL) = 0
chmod("/syzcgroup/unified", 0777)       = 0
openat(AT_FDCWD, "/syzcgroup/unified/cgroup.subtree_control", O_WRONLY) = 3
write(3, "+cpu", 4)                     = 4
write(3, "+io", 3)                      = 3
write(3, "+pids", 5)                    = 5
close(3)                                = 0
mkdir("/syzcgroup/net", 0777)           = 0
mount("none", "/syzcgroup/net", "cgroup", 0, "net") = -1 EINVAL (Invalid argument)
mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio") = 0
umount2("/syzcgroup/net", 0)            = 0
[  211.763036][   T30] audit: type=1400 audit(1789782624.712:65): avc:  denied  { mounton } for  pid=303 comm="syz-executor389" path="/syzcgroup/unified" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[  211.769199][  T303] cgroup: Unknown subsys name 'net'
[  211.786042][   T30] audit: type=1400 audit(1789782624.712:66): avc:  denied  { mount } for  pid=303 comm="syz-executor389" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
mount("none", "/syzcgroup/net", "cgroup", 0, "devices") = -1 EINVAL (Invalid argument)
mount("none", "/syzcgroup/net", "cgroup", 0, "blkio") = 0
umount2("/syzcgroup/net", 0)            = 0
mount("none", "/syzcgroup/net", "cgroup", 0, "freezer") = 0
umount2("/syzcgroup/net", 0)            = 0
mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,blkio,freezer") = ? ERESTARTNOINTR (To be restarted)
mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,blkio,freezer") = ? ERESTARTNOINTR (To be restarted)
[  211.813736][   T30] audit: type=1400 audit(1789782624.742:67): avc:  denied  { unmount } for  pid=303 comm="syz-executor389" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  211.814461][  T303] cgroup: Unknown subsys name 'devices'
mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,blkio,freezer") = ? ERESTARTNOINTR (To be restarted)
mount("none", "/syzcgroup/net", "cgroup", 0, "net_prio,blkio,freezer") = 0
chmod("/syzcgroup/net", 0777)           = 0
mkdir("/syzcgroup/cpu", 0777)           = 0
mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset") = 0
umount2("/syzcgroup/cpu", 0)            = 0
mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuacct") = 0
umount2("/syzcgroup/cpu", 0)            = 0
mount("none", "/syzcgroup/cpu", "cgroup", 0, "hugetlb") = -1 EINVAL (Invalid argument)
mount("none", "/syzcgroup/cpu", "cgroup", 0, "rlimit") = -1 EINVAL (Invalid argument)
mount("none", "/syzcgroup/cpu", "cgroup", 0, "memory") = 0
umount2("/syzcgroup/cpu", 0)            = 0
mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,memory") = ? ERESTARTNOINTR (To be restarted)
[  211.930064][  T303] cgroup: Unknown subsys name 'hugetlb'
[  211.936550][  T303] cgroup: Unknown subsys name 'rlimit'
mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,memory") = ? ERESTARTNOINTR (To be restarted)
mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,memory") = ? ERESTARTNOINTR (To be restarted)
mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,memory") = ? ERESTARTNOINTR (To be restarted)
mount("none", "/syzcgroup/cpu", "cgroup", 0, "cpuset,cpuacct,memory") = 0
chmod("/syzcgroup/cpu", 0777)           = 0
openat(AT_FDCWD, "/syzcgroup/cpu/cgroup.clone_children", O_WRONLY|O_CLOEXEC) = 3
write(3, "1", 1)                        = 1
close(3)                                = 0
openat(AT_FDCWD, "/syzcgroup/cpu/cpuset.memory_pressure_enabled", O_WRONLY|O_CLOEXEC) = 3
write(3, "1", 1)                        = 1
close(3)                                = 0
chmod("/dev/raw-gadget", 0666)          = 0
swapoff("./swap-file")                  = -1 ENOENT (No such file or directory)
unlink("./swap-file")                   = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "./swap-file", O_WRONLY|O_CREAT|O_CLOEXEC, 0600) = 3
fallocate(3, FALLOC_FL_ZERO_RANGE, 0, 128000000) = 0
close(3)                                = 0
rt_sigaction(SIGINT, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fd9ff6b14e0}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGQUIT, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fd9ff6b14e0}, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
mmap(NULL, 36864, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fd9ff66e000
rt_sigprocmask(SIG_BLOCK, ~[], [CHLD], 8) = 0
clone3({flags=CLONE_VM|CLONE_VFORK|CLONE_CLEAR_SIGHAND, exit_signal=SIGCHLD, stack=0x7fd9ff66e000, stack_size=0x9000}, 88ci2-android-5-15-perf/strace-static-x86_64: Process 305 attached
 <unfinished ...>
[pid   305] rt_sigprocmask(SIG_BLOCK, NULL, ~[KILL STOP], 8) = 0
[pid   305] rt_sigaction(SIGINT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fd9ff6b14e0}, NULL, 8) = 0
[pid   305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   305] execve("/bin/sh", ["sh", "-c", "--", "mkswap ./swap-file"], 0x7ffeb6947758 /* 10 vars */ <unfinished ...>
[pid   303] <... clone3 resumed>)       = 305
[pid   303] munmap(0x7fd9ff66e000, 36864) = 0
[pid   303] rt_sigprocmask(SIG_SETMASK, [CHLD], NULL, 8) = 0
[pid   305] <... execve resumed>)       = 0
[pid   305] brk(NULL)                   = 0x55cf9e48b000
[pid   305] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8513f66000
[pid   305] access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
[pid   305] openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid   305] openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v3/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid   305] newfstatat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v3/", 0x7ffd68d91030, 0) = -1 ENOENT (No such file or directory)
[pid   305] openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v2/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid   305] newfstatat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v2/", 0x7ffd68d91030, 0) = -1 ENOENT (No such file or directory)
[pid   305] openat(AT_FDCWD, "/lib64/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = 3
[pid   305] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x38\x13\x0c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x09\x00\x40\x00\x19\x00\x18\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8\xf4\x00\x00"..., 832) = 832
[pid   305] fstat(3, {st_mode=S_IFREG|0644, st_size=792952, ...}) = 0
[pid   305] mmap(NULL, 792856, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f8513ea4000
[pid   305] mmap(0x7f8513eb4000, 548864, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x10000) = 0x7f8513eb4000
[pid   305] mmap(0x7f8513f3a000, 163840, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x96000) = 0x7f8513f3a000
[pid   305] mmap(0x7f8513f62000, 16384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xbe000) = 0x7f8513f62000
[pid   305] close(3)                    = 0
[pid   305] openat(AT_FDCWD, "/lib64/libc.so.6", O_RDONLY|O_CLOEXEC) = 3
[pid   305] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\xf0\xab\x02\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x38\x22\x1d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0e\x00\x40\x00\x3b\x00\x3a\x00\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00"..., 832) = 832
[pid   305] pread64(3, "\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x1c\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00"..., 784, 64) = 784
[pid   305] fstat(3, {st_mode=S_IFREG|0755, st_size=1913080, ...}) = 0
[pid   305] pread64(3, "\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x1c\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00"..., 784, 64) = 784
[pid   305] mmap(NULL, 1965720, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f8513cc4000
[pid   305] mmap(0x7f8513cec000, 1368064, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x28000) = 0x7f8513cec000
[pid   305] mmap(0x7f8513e3a000, 356352, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x176000) = 0x7f8513e3a000
[pid   305] mmap(0x7f8513e91000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1cc000) = 0x7f8513e91000
[pid   305] mmap(0x7f8513e97000, 52888, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f8513e97000
[pid   305] close(3)                    = 0
[pid   305] openat(AT_FDCWD, "/lib64/libpam.so.0", O_RDONLY|O_CLOEXEC) = 3
[pid   305] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xf8\xf0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1b\x00\x1a\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe0\x29\x00\x00"..., 832) = 832
[pid   305] fstat(3, {st_mode=S_IFREG|0755, st_size=63416, ...}) = 0
[pid   305] mmap(NULL, 65552, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f8513cb3000
[pid   305] mmap(0x7f8513cb6000, 32768, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f8513cb6000
[pid   305] mmap(0x7f8513cbe000, 16384, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7f8513cbe000
[pid   305] mmap(0x7f8513cc2000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xe000) = 0x7f8513cc2000
[pid   305] close(3)                    = 0
[pid   305] openat(AT_FDCWD, "/lib64/libpam_misc.so.0", O_RDONLY|O_CLOEXEC) = 3
[pid   305] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x00\x51\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1a\x00\x19\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd8\x12\x00\x00"..., 832) = 832
[pid   305] fstat(3, {st_mode=S_IFREG|0755, st_size=22400, ...}) = 0
[pid   305] mmap(NULL, 24656, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f8513cac000
[pid   305] mmap(0x7f8513cae000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f8513cae000
[pid   305] mmap(0x7f8513cb0000, 4096, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7f8513cb0000
[pid   305] mmap(0x7f8513cb1000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7f8513cb1000
[pid   305] close(3)                    = 0
[pid   305] openat(AT_FDCWD, "/lib64/libresolv.so.2", O_RDONLY|O_CLOEXEC) = 3
[pid   305] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xa8\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0b\x00\x40\x00\x1d\x00\x1c\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x08\x27\x00\x00"..., 832) = 832
[pid   305] fstat(3, {st_mode=S_IFREG|0755, st_size=59624, ...}) = 0
[pid   305] mmap(NULL, 67720, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f8513c9b000
[pid   305] mmap(0x7f8513c9e000, 32768, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f8513c9e000
[pid   305] mmap(0x7f8513ca6000, 8192, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7f8513ca6000
[pid   305] mmap(0x7f8513ca8000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xd000) = 0x7f8513ca8000
[pid   305] mmap(0x7f8513caa000, 6280, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f8513caa000
[pid   305] close(3)                    = 0
[pid   305] openat(AT_FDCWD, "/lib64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid   305] openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v3/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid   305] newfstatat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v3/", 0x7ffd68d90f90, 0) = -1 ENOENT (No such file or directory)
[pid   305] openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v2/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid   305] newfstatat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v2/", 0x7ffd68d90f90, 0) = -1 ENOENT (No such file or directory)
[pid   305] openat(AT_FDCWD, "/usr/lib64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = 3
[pid   305] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x60\xd1\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0b\x00\x40\x00\x1d\x00\x1c\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x28\x74\x00\x00"..., 832) = 832
[pid   305] fstat(3, {st_mode=S_IFREG|0755, st_size=186528, ...}) = 0
[pid   305] mmap(NULL, 194256, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f8513c6b000
[pid   305] mmap(0x7f8513c73000, 114688, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x8000) = 0x7f8513c73000
[pid   305] mmap(0x7f8513c8f000, 32768, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x24000) = 0x7f8513c8f000
[pid   305] mmap(0x7f8513c97000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2c000) = 0x7f8513c97000
[pid   305] mmap(0x7f8513c99000, 5840, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f8513c99000
[pid   305] close(3)                    = 0
[pid   305] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8513c69000
[pid   305] openat(AT_FDCWD, "/lib64/libatomic.so.1", O_RDONLY|O_CLOEXEC) = 3
[pid   305] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x30\x71\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1b\x00\x1a\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x78\x1f\x00\x00"..., 832) = 832
[pid   305] fstat(3, {st_mode=S_IFREG|0755, st_size=30704, ...}) = 0
[pid   305] mmap(NULL, 37000, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f8513c5f000
[pid   305] mmap(0x7f8513c61000, 12288, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f8513c61000
[pid   305] mmap(0x7f8513c64000, 8192, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5000) = 0x7f8513c64000
[pid   305] mmap(0x7f8513c66000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6000) = 0x7f8513c66000
[pid   305] mmap(0x7f8513c68000, 136, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f8513c68000
[pid   305] close(3)                    = 0
[pid   305] openat(AT_FDCWD, "/lib64/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid   305] openat(AT_FDCWD, "/usr/lib64/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = 3
[pid   305] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xf0\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1a\x00\x19\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8\x20\x00\x00"..., 832) = 832
[pid   305] fstat(3, {st_mode=S_IFREG|0755, st_size=395120, ...}) = 0
[pid   305] mmap(NULL, 397336, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f8513bfd000
[pid   305] mmap(0x7f8513c00000, 225280, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f8513c00000
[pid   305] mmap(0x7f8513c37000, 155648, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3a000) = 0x7f8513c37000
[pid   305] mmap(0x7f8513c5d000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5f000) = 0x7f8513c5d000
[pid   305] close(3)                    = 0
[pid   305] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8513bfb000
[pid   305] arch_prctl(ARCH_SET_FS, 0x7f8513bfbc80) = 0
[pid   305] set_tid_address(0x7f8513bfbf50) = 305
[pid   305] set_robust_list(0x7f8513bfbf60, 24) = 0
[pid   305] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 32, 0, 0x53053053) = -1 ENOSYS (Function not implemented)
[pid   305] mprotect(0x7f8513e91000, 16384, PROT_READ) = 0
[pid   305] mprotect(0x7f8513c5d000, 4096, PROT_READ) = 0
[pid   305] mprotect(0x7f8513c66000, 4096, PROT_READ) = 0
[pid   305] mprotect(0x7f8513c97000, 4096, PROT_READ) = 0
[pid   305] mprotect(0x7f8513ca8000, 4096, PROT_READ) = 0
[pid   305] mprotect(0x7f8513cc2000, 4096, PROT_READ) = 0
[pid   305] mprotect(0x7f8513cb1000, 4096, PROT_READ) = 0
[pid   305] mprotect(0x7f8513f62000, 12288, PROT_READ) = 0
[pid   305] mprotect(0x55cf8785e000, 4096, PROT_READ) = 0
[pid   305] mprotect(0x7f8513f9b000, 8192, PROT_READ) = 0
[pid   305] prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
[pid   305] statfs("/sys/fs/selinux", {f_type=SELINUX_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOSUID|ST_NOEXEC|ST_RELATIME}) = 0
[pid   305] statfs("/sys/fs/selinux", {f_type=SELINUX_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOSUID|ST_NOEXEC|ST_RELATIME}) = 0
[pid   305] getrandom("\xc8\xdc\x14\x59\x99\xbf\x71\xea", 8, GRND_NONBLOCK) = 8
[pid   305] brk(NULL)                   = 0x55cf9e48b000
[pid   305] brk(0x55cf9e4ac000)         = 0x55cf9e4ac000
[pid   305] access("/etc/selinux/config", F_OK) = 0
[pid   305] getpid()                    = 305
[pid   305] rt_sigaction(SIGCHLD, {sa_handler=0x7f8513ee7287, sa_mask=~[RTMIN RT_1], sa_flags=SA_RESTORER, sa_restorer=0x7f8513d03180}, NULL, 8) = 0
[pid   305] getppid()                   = 303
[pid   305] uname({sysname="Linux", nodename="syzkaller", ...}) = 0
[pid   305] newfstatat(AT_FDCWD, "/root", {st_mode=S_IFDIR|0700, st_size=4096, ...}, 0) = 0
[pid   305] newfstatat(AT_FDCWD, ".", {st_mode=S_IFDIR|0700, st_size=4096, ...}, 0) = 0
[pid   305] rt_sigaction(SIGINT, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
[pid   305] rt_sigaction(SIGINT, {sa_handler=0x7f8513ee7287, sa_mask=~[RTMIN RT_1], sa_flags=SA_RESTORER, sa_restorer=0x7f8513d03180}, NULL, 8) = 0
[pid   305] rt_sigaction(SIGQUIT, NULL, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, 8) = 0
[pid   305] rt_sigaction(SIGTERM, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
[pid   305] newfstatat(AT_FDCWD, "/bin/mkswap", 0x7ffd68d91928, 0) = -1 ENOENT (No such file or directory)
[pid   305] newfstatat(AT_FDCWD, "/sbin/mkswap", {st_mode=S_IFREG|0755, st_size=14256, ...}, 0) = 0
[  212.059081][   T30] audit: type=1400 audit(1789782625.012:68): avc:  denied  { setattr } for  pid=303 comm="syz-executor389" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[pid   305] execve("/sbin/mkswap", ["mkswap", "./swap-file"], 0x55cf9e48b6f0 /* 10 vars */) = 0
[pid   305] brk(NULL)                   = 0x56547287d000
[pid   305] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6d22798000
[pid   305] access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
[pid   305] openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid   305] openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v3/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid   305] newfstatat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v3/", 0x7fff25b469e0, 0) = -1 ENOENT (No such file or directory)
[pid   305] openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v2/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid   305] newfstatat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v2/", 0x7fff25b469e0, 0) = -1 ENOENT (No such file or directory)
[pid   305] openat(AT_FDCWD, "/lib64/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = 3
[pid   305] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x38\x13\x0c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x09\x00\x40\x00\x19\x00\x18\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8\xf4\x00\x00"..., 832) = 832
[pid   305] fstat(3, {st_mode=S_IFREG|0644, st_size=792952, ...}) = 0
[pid   305] mmap(NULL, 792856, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f6d226d6000
[pid   305] mmap(0x7f6d226e6000, 548864, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x10000) = 0x7f6d226e6000
[pid   305] mmap(0x7f6d2276c000, 163840, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x96000) = 0x7f6d2276c000
[pid   305] mmap(0x7f6d22794000, 16384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xbe000) = 0x7f6d22794000
[pid   305] close(3)                    = 0
[pid   305] openat(AT_FDCWD, "/lib64/libc.so.6", O_RDONLY|O_CLOEXEC) = 3
[pid   305] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\xf0\xab\x02\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x38\x22\x1d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0e\x00\x40\x00\x3b\x00\x3a\x00\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00"..., 832) = 832
[pid   305] pread64(3, "\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x1c\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00"..., 784, 64) = 784
[pid   305] fstat(3, {st_mode=S_IFREG|0755, st_size=1913080, ...}) = 0
[pid   305] pread64(3, "\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x1c\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00"..., 784, 64) = 784
[pid   305] mmap(NULL, 1965720, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f6d224f6000
[pid   305] mmap(0x7f6d2251e000, 1368064, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x28000) = 0x7f6d2251e000
[pid   305] mmap(0x7f6d2266c000, 356352, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x176000) = 0x7f6d2266c000
[pid   305] mmap(0x7f6d226c3000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1cc000) = 0x7f6d226c3000
[pid   305] mmap(0x7f6d226c9000, 52888, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f6d226c9000
[pid   305] close(3)                    = 0
[pid   305] openat(AT_FDCWD, "/lib64/libpam.so.0", O_RDONLY|O_CLOEXEC) = 3
[pid   305] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xf8\xf0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1b\x00\x1a\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe0\x29\x00\x00"..., 832) = 832
[pid   305] fstat(3, {st_mode=S_IFREG|0755, st_size=63416, ...}) = 0
[pid   305] mmap(NULL, 65552, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f6d224e5000
[pid   305] mmap(0x7f6d224e8000, 32768, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f6d224e8000
[pid   305] mmap(0x7f6d224f0000, 16384, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7f6d224f0000
[pid   305] mmap(0x7f6d224f4000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xe000) = 0x7f6d224f4000
[pid   305] close(3)                    = 0
[pid   305] openat(AT_FDCWD, "/lib64/libpam_misc.so.0", O_RDONLY|O_CLOEXEC) = 3
[pid   305] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x00\x51\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1a\x00\x19\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd8\x12\x00\x00"..., 832) = 832
[pid   305] fstat(3, {st_mode=S_IFREG|0755, st_size=22400, ...}) = 0
[pid   305] mmap(NULL, 24656, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f6d224de000
[pid   305] mmap(0x7f6d224e0000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f6d224e0000
[pid   305] mmap(0x7f6d224e2000, 4096, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7f6d224e2000
[pid   305] mmap(0x7f6d224e3000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7f6d224e3000
[pid   305] close(3)                    = 0
[pid   305] openat(AT_FDCWD, "/lib64/libresolv.so.2", O_RDONLY|O_CLOEXEC) = 3
[pid   305] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xa8\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0b\x00\x40\x00\x1d\x00\x1c\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x08\x27\x00\x00"..., 832) = 832
[pid   305] fstat(3, {st_mode=S_IFREG|0755, st_size=59624, ...}) = 0
[pid   305] mmap(NULL, 67720, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f6d224cd000
[pid   305] mmap(0x7f6d224d0000, 32768, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f6d224d0000
[pid   305] mmap(0x7f6d224d8000, 8192, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7f6d224d8000
[pid   305] mmap(0x7f6d224da000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xd000) = 0x7f6d224da000
[pid   305] mmap(0x7f6d224dc000, 6280, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f6d224dc000
[pid   305] close(3)                    = 0
[pid   305] openat(AT_FDCWD, "/lib64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid   305] openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v3/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid   305] newfstatat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v3/", 0x7fff25b46940, 0) = -1 ENOENT (No such file or directory)
[pid   305] openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v2/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid   305] newfstatat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v2/", 0x7fff25b46940, 0) = -1 ENOENT (No such file or directory)
[pid   305] openat(AT_FDCWD, "/usr/lib64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = 3
[pid   305] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x60\xd1\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0b\x00\x40\x00\x1d\x00\x1c\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x28\x74\x00\x00"..., 832) = 832
[pid   305] fstat(3, {st_mode=S_IFREG|0755, st_size=186528, ...}) = 0
[pid   305] mmap(NULL, 194256, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f6d2249d000
[pid   305] mmap(0x7f6d224a5000, 114688, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x8000) = 0x7f6d224a5000
[pid   305] mmap(0x7f6d224c1000, 32768, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x24000) = 0x7f6d224c1000
[pid   305] mmap(0x7f6d224c9000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2c000) = 0x7f6d224c9000
[pid   305] mmap(0x7f6d224cb000, 5840, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f6d224cb000
[pid   305] close(3)                    = 0
[pid   305] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6d2249b000
[pid   305] openat(AT_FDCWD, "/lib64/libatomic.so.1", O_RDONLY|O_CLOEXEC) = 3
[pid   305] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x30\x71\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1b\x00\x1a\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x78\x1f\x00\x00"..., 832) = 832
[pid   305] fstat(3, {st_mode=S_IFREG|0755, st_size=30704, ...}) = 0
[pid   305] mmap(NULL, 37000, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f6d22491000
[pid   305] mmap(0x7f6d22493000, 12288, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f6d22493000
[pid   305] mmap(0x7f6d22496000, 8192, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5000) = 0x7f6d22496000
[pid   305] mmap(0x7f6d22498000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6000) = 0x7f6d22498000
[pid   305] mmap(0x7f6d2249a000, 136, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f6d2249a000
[pid   305] close(3)                    = 0
[pid   305] openat(AT_FDCWD, "/lib64/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid   305] openat(AT_FDCWD, "/usr/lib64/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = 3
[pid   305] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xf0\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1a\x00\x19\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8\x20\x00\x00"..., 832) = 832
[pid   305] fstat(3, {st_mode=S_IFREG|0755, st_size=395120, ...}) = 0
[pid   305] mmap(NULL, 397336, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f6d2242f000
[pid   305] mmap(0x7f6d22432000, 225280, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f6d22432000
[pid   305] mmap(0x7f6d22469000, 155648, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3a000) = 0x7f6d22469000
[pid   305] mmap(0x7f6d2248f000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5f000) = 0x7f6d2248f000
[pid   305] close(3)                    = 0
[pid   305] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6d2242d000
[pid   305] arch_prctl(ARCH_SET_FS, 0x7f6d2242dc80) = 0
[pid   305] set_tid_address(0x7f6d2242df50) = 305
[pid   305] set_robust_list(0x7f6d2242df60, 24) = 0
[pid   305] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 32, 0, 0x53053053) = -1 ENOSYS (Function not implemented)
[pid   305] mprotect(0x7f6d226c3000, 16384, PROT_READ) = 0
[pid   305] mprotect(0x7f6d2248f000, 4096, PROT_READ) = 0
[pid   305] mprotect(0x7f6d22498000, 4096, PROT_READ) = 0
[pid   305] mprotect(0x7f6d224c9000, 4096, PROT_READ) = 0
[pid   305] mprotect(0x7f6d224da000, 4096, PROT_READ) = 0
[pid   305] mprotect(0x7f6d224f4000, 4096, PROT_READ) = 0
[pid   305] mprotect(0x7f6d224e3000, 4096, PROT_READ) = 0
[pid   305] mprotect(0x7f6d22794000, 12288, PROT_READ) = 0
[pid   305] mprotect(0x565434f6a000, 4096, PROT_READ) = 0
[pid   305] mprotect(0x7f6d227cd000, 8192, PROT_READ) = 0
[pid   305] prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
[pid   305] statfs("/sys/fs/selinux", {f_type=SELINUX_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOSUID|ST_NOEXEC|ST_RELATIME}) = 0
[pid   305] statfs("/sys/fs/selinux", {f_type=SELINUX_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOSUID|ST_NOEXEC|ST_RELATIME}) = 0
[pid   305] getrandom("\x66\xdc\xff\xdb\x12\xe6\x26\x72", 8, GRND_NONBLOCK) = 8
[pid   305] brk(NULL)                   = 0x56547287d000
[pid   305] brk(0x56547289e000)         = 0x56547289e000
[pid   305] access("/etc/selinux/config", F_OK) = 0
[pid   305] openat(AT_FDCWD, "./swap-file", O_WRONLY) = 3
[pid   305] lseek(3, 0, SEEK_END)       = 128000000
[pid   305] lseek(3, 0, SEEK_SET)       = 0
[pid   305] fstat(1, {st_mode=S_IFIFO|0600, st_size=0, ...}) = 0
[pid   305] fstat(3, {st_mode=S_IFREG|0600, st_size=128000000, ...}) = 0
[pid   305] fgetxattr(3, "security.selinux", "\x72\x6f\x6f\x74\x3a\x6f\x62\x6a\x65\x63\x74\x5f\x72\x3a\x75\x73\x65\x72\x5f\x68\x6f\x6d\x65\x5f\x74\x00", 255) = 26
[pid   305] access("/var/run/setrans/.setrans-unix", F_OK) = -1 ENOENT (No such file or directory)
[pid   305] futex(0x7f6d224cc6b8, FUTEX_WAKE_PRIVATE, 2147483647) = 0
[pid   305] fsetxattr(3, "security.selinux", "\x72\x6f\x6f\x74\x3a\x6f\x62\x6a\x65\x63\x74\x5f\x72\x3a\x73\x77\x61\x70\x66\x69\x6c\x65\x5f\x74\x00", 25, 0) = 0
[pid   305] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1024) = 1024
[pid   305] write(3, "\x01\x00\x00\x00\x11\x7a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 516) = 516
[pid   305] lseek(3, 4086, SEEK_SET)    = 4086
[pid   305] write(3, "SWAPSPACE2", 10)  = 10
[  212.175605][  T305] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[  212.184868][   T30] audit: type=1400 audit(1789782625.132:69): avc:  denied  { relabelto } for  pid=305 comm="mkswap" name="swap-file" dev="sda1" ino=2028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  212.210770][   T30] audit: type=1400 audit(1789782625.142:70): avc:  denied  { write } for  pid=305 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[pid   305] fsync(3)                    = 0
[pid   305] write(1, "Setting up swapspace version 1, size = 127995904 bytes\n", 55) = 55
Setting up swapspace version 1, size = 127995904 bytes
[pid   305] exit_group(0)               = ?
[pid   305] +++ exited with 0 +++
rt_sigaction(SIGINT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fd9ff6b14e0}, NULL, 8) = 0
rt_sigaction(SIGQUIT, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fd9ff6b14e0}, NULL, 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=305, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
[  212.291981][   T30] audit: type=1400 audit(1789782625.242:71): avc:  denied  { read } for  pid=303 comm="syz-executor389" name="swap-file" dev="sda1" ino=2028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  212.292469][  T303] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
swapon("./swap-file", SWAP_FLAG_PREFER|0) = 0
getrandom("\x83\xc4\x2f\x2b\xa0\xce\x3e\x28", 8, GRND_NONBLOCK) = 8
mkdir("./syzkaller.78aYHw", 0700)       = 0
chmod("./syzkaller.78aYHw", 0777)       = 0
chdir("./syzkaller.78aYHw")             = 0
unshare(CLONE_NEWPID)                   = 0
rt_sigprocmask(SIG_BLOCK, ~[], [], 8)   = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558dd63690) = 306
ci2-android-5-15-perf/strace-static-x86_64: Process 306 attached
[pid   306] set_robust_list(0x55558dd636a0, 24) = 0
[pid   306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   306] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid   306] getppid()                   = 0
[pid   306] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0
[pid   306] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0
[pid   306] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0
[pid   306] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0
[pid   306] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0
[pid   306] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0
[pid   306] unshare(CLONE_NEWNS <unfinished ...>
[pid   303] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   306] <... unshare resumed>)      = 0
[pid   306] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL <unfinished ...>
[pid   303] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   306] <... mount resumed>)        = 0
[pid   306] unshare(CLONE_NEWIPC)       = -1 EINVAL (Invalid argument)
[pid   306] unshare(CLONE_NEWCGROUP)    = 0
[pid   306] unshare(CLONE_NEWUTS)       = 0
[pid   306] unshare(CLONE_SYSVSEM)      = 0
[pid   306] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid   306] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid   306] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid   306] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid   306] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid   306] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid   306] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid   306] getpid()                    = 1
[pid   306] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PTRACE|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_NICE|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, permitted=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PTRACE|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_NICE|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, inheritable=0}) = 0
[pid   306] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, permitted=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, inheritable=0}) = 0
[pid   306] unshare(CLONE_NEWNET)       = 0
[pid   306] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3
[pid   306] write(3, "0 65535", 7)      = 7
[pid   306] close(3)                    = 0
[pid   306] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3
[pid   306] write(3, "100000", 6)       = 6
[pid   306] close(3)                    = 0
[pid   306] mkdir("./syz-tmp", 0777)    = 0
[pid   306] mount("", "./syz-tmp", "tmpfs", 0, NULL) = 0
[pid   306] mkdir("./syz-tmp/newroot", 0777) = 0
[pid   306] mkdir("./syz-tmp/newroot/dev", 0700) = 0
[pid   306] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0
[pid   306] mkdir("./syz-tmp/newroot/proc", 0700) = 0
[pid   306] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL) = 0
[pid   306] mkdir("./syz-tmp/newroot/selinux", 0700) = 0
[pid   306] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory)
[pid   306] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0
[pid   306] mkdir("./syz-tmp/newroot/sys", 0700) = 0
[pid   306] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0
[pid   306] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0
[pid   306] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory)
[pid   306] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0
[pid   306] mkdir("./syz-tmp/newroot/syz-inputs", 0700) = 0
[pid   306] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory)
[pid   306] mkdir("./syz-tmp/newroot/syzcgroup", 0700) = 0
[pid   306] mkdir("./syz-tmp/newroot/syzcgroup/unified", 0700) = 0
[pid   306] mkdir("./syz-tmp/newroot/syzcgroup/cpu", 0700) = 0
[pid   306] mkdir("./syz-tmp/newroot/syzcgroup/net", 0700) = 0
[pid   306] mount("/syzcgroup/unified", "./syz-tmp/newroot/syzcgroup/unified", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0
[pid   306] mount("/syzcgroup/cpu", "./syz-tmp/newroot/syzcgroup/cpu", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0
[pid   306] mount("/syzcgroup/net", "./syz-tmp/newroot/syzcgroup/net", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0
[pid   306] mkdir("./syz-tmp/pivot", 0777) = 0
[pid   306] pivot_root("./syz-tmp", "./syz-tmp/pivot") = 0
[pid   306] chdir("/")                  = 0
[pid   306] umount2("./pivot", MNT_DETACH) = 0
[pid   306] chroot("./newroot")         = 0
[pid   306] chdir("/")                  = 0
[pid   306] mkdir("/dev/gadgetfs", 0777) = 0
[  212.318169][   T30] audit: type=1400 audit(1789782625.242:72): avc:  denied  { open } for  pid=303 comm="syz-executor389" path="/root/swap-file" dev="sda1" ino=2028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[  212.358796][   T30] audit: type=1400 audit(1789782625.312:73): avc:  denied  { mounton } for  pid=306 comm="syz-executor389" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[pid   306] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL) = -1 ENODEV (No such device)
[pid   306] mkdir("/dev/binderfs", 0777) = 0
[pid   306] mount("binder", "/dev/binderfs", "binder", 0, NULL) = 0
[pid   306] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy)
[pid   306] getpid()                    = 1
[pid   306] mkdir("/syzcgroup/unified/syz0", 0777) = 0
[pid   306] openat(AT_FDCWD, "/syzcgroup/unified/syz0/pids.max", O_WRONLY|O_CLOEXEC) = 3
[pid   306] write(3, "32", 2)           = 2
[pid   306] close(3)                    = 0
[pid   306] openat(AT_FDCWD, "/syzcgroup/unified/syz0/cgroup.procs", O_WRONLY|O_CLOEXEC) = 3
[pid   306] write(3, "1", 1)            = 1
[pid   306] close(3)                    = 0
[pid   306] mkdir("/syzcgroup/cpu/syz0", 0777) = 0
[pid   306] openat(AT_FDCWD, "/syzcgroup/cpu/syz0/cgroup.procs", O_WRONLY|O_CLOEXEC) = 3
[pid   306] write(3, "1", 1)            = 1
[pid   306] close(3)                    = 0
[pid   306] openat(AT_FDCWD, "/syzcgroup/cpu/syz0/memory.soft_limit_in_bytes", O_WRONLY|O_CLOEXEC) = 3
[pid   306] write(3, "313524224", 9)    = 9
[pid   306] close(3)                    = 0
[pid   306] openat(AT_FDCWD, "/syzcgroup/cpu/syz0/memory.limit_in_bytes", O_WRONLY|O_CLOEXEC) = 3
[pid   306] write(3, "314572800", 9)    = 9
[pid   306] close(3)                    = 0
[pid   306] mkdir("/syzcgroup/net/syz0", 0777) = 0
[pid   306] openat(AT_FDCWD, "/syzcgroup/net/syz0/cgroup.procs", O_WRONLY|O_CLOEXEC) = 3
[pid   306] write(3, "1", 1)            = 1
[pid   306] close(3)                    = 0
[pid   306] mkdir("./0", 0777)          = 0
[pid   306] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-5-15-perf/strace-static-x86_64: Process 307 attached
 <unfinished ...>
[pid   307] set_robust_list(0x55558dd636a0, 24) = 0
[pid   307] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   306] <... clone resumed>, child_tidptr=0x55558dd63690) = 2
[pid   307] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   307] chdir("./0" <unfinished ...>
[pid   306] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid   307] <... chdir resumed>)        = 0
[pid   307] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid   307] setpgid(0, 0)               = 0
[pid   307] symlink("/syzcgroup/unified/syz0", "./cgroup" <unfinished ...>
[pid   306] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid   307] <... symlink resumed>)      = 0
[pid   307] symlink("/syzcgroup/cpu/syz0", "./cgroup.cpu") = 0
[pid   307] symlink("/syzcgroup/net/syz0", "./cgroup.net") = 0
[pid   307] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid   307] write(3, "1000", 4)         = 4
[pid   307] close(3)                    = 0
[pid   307] symlink("/dev/binderfs", "./binderfs") = 0
[pid   307] write(1, "executing program\n", 18) = 18
executing program
[pid   307] perf_event_open({type=PERF_TYPE_TRACEPOINT, size=PERF_ATTR_SIZE_VER7, config=188, sample_period=7, sample_type=PERF_SAMPLE_IP|PERF_SAMPLE_CALLCHAIN|PERF_SAMPLE_ID|PERF_SAMPLE_PERIOD|PERF_SAMPLE_DATA_SRC|PERF_SAMPLE_IDENTIFIER|PERF_SAMPLE_REGS_INTR|PERF_SAMPLE_PHYS_ADDR, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, -1, 0, -1, 0) = 3
[pid   307] perf_event_open({type=PERF_TYPE_TRACEPOINT, size=PERF_ATTR_SIZE_VER7, config=188, sample_period=7, sample_type=PERF_SAMPLE_IP|PERF_SAMPLE_CALLCHAIN|PERF_SAMPLE_ID|PERF_SAMPLE_PERIOD|PERF_SAMPLE_DATA_SRC|PERF_SAMPLE_IDENTIFIER|PERF_SAMPLE_REGS_INTR|PERF_SAMPLE_PHYS_ADDR, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, -1, 0, -1, 0) = 4
[pid   307] perf_event_open({type=PERF_TYPE_TRACEPOINT, size=PERF_ATTR_SIZE_VER7, config=188, sample_period=7, sample_type=PERF_SAMPLE_IP|PERF_SAMPLE_CALLCHAIN|PERF_SAMPLE_ID|PERF_SAMPLE_PERIOD|PERF_SAMPLE_DATA_SRC|PERF_SAMPLE_IDENTIFIER|PERF_SAMPLE_REGS_INTR|PERF_SAMPLE_PHYS_ADDR, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, -1, 0, -1, 0) = 5
[pid   307] perf_event_open({type=PERF_TYPE_TRACEPOINT, size=PERF_ATTR_SIZE_VER7, config=188, sample_period=7, sample_type=PERF_SAMPLE_IP|PERF_SAMPLE_CALLCHAIN|PERF_SAMPLE_ID|PERF_SAMPLE_PERIOD|PERF_SAMPLE_DATA_SRC|PERF_SAMPLE_IDENTIFIER|PERF_SAMPLE_REGS_INTR|PERF_SAMPLE_PHYS_ADDR, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, -1, 0, -1, 0) = 6
[pid   307] perf_event_open({type=PERF_TYPE_TRACEPOINT, size=PERF_ATTR_SIZE_VER7, config=188, sample_period=7, sample_type=PERF_SAMPLE_IP|PERF_SAMPLE_CALLCHAIN|PERF_SAMPLE_ID|PERF_SAMPLE_PERIOD|PERF_SAMPLE_DATA_SRC|PERF_SAMPLE_IDENTIFIER|PERF_SAMPLE_REGS_INTR|PERF_SAMPLE_PHYS_ADDR, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, -1, 0, -1, 0) = 7
[pid   307] perf_event_open({type=PERF_TYPE_TRACEPOINT, size=PERF_ATTR_SIZE_VER7, config=188, sample_period=7, sample_type=PERF_SAMPLE_IP|PERF_SAMPLE_CALLCHAIN|PERF_SAMPLE_ID|PERF_SAMPLE_PERIOD|PERF_SAMPLE_DATA_SRC|PERF_SAMPLE_IDENTIFIER|PERF_SAMPLE_REGS_INTR|PERF_SAMPLE_PHYS_ADDR, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, -1, 0, -1, 0) = 8
[pid   307] perf_event_open({type=PERF_TYPE_TRACEPOINT, size=PERF_ATTR_SIZE_VER7, config=188, sample_period=7, sample_type=PERF_SAMPLE_IP|PERF_SAMPLE_CALLCHAIN|PERF_SAMPLE_ID|PERF_SAMPLE_PERIOD|PERF_SAMPLE_DATA_SRC|PERF_SAMPLE_IDENTIFIER|PERF_SAMPLE_REGS_INTR|PERF_SAMPLE_PHYS_ADDR, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, -1, 0, -1, 0) = 9
[pid   307] perf_event_open({type=PERF_TYPE_TRACEPOINT, size=PERF_ATTR_SIZE_VER7, config=188, sample_period=7, sample_type=PERF_SAMPLE_IP|PERF_SAMPLE_CALLCHAIN|PERF_SAMPLE_ID|PERF_SAMPLE_PERIOD|PERF_SAMPLE_DATA_SRC|PERF_SAMPLE_IDENTIFIER|PERF_SAMPLE_REGS_INTR|PERF_SAMPLE_PHYS_ADDR, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, -1, 0, -1, 0) = 10
[pid   307] perf_event_open({type=PERF_TYPE_TRACEPOINT, size=PERF_ATTR_SIZE_VER7, config=188, sample_period=7, sample_type=PERF_SAMPLE_IP|PERF_SAMPLE_CALLCHAIN|PERF_SAMPLE_ID|PERF_SAMPLE_PERIOD|PERF_SAMPLE_DATA_SRC|PERF_SAMPLE_IDENTIFIER|PERF_SAMPLE_REGS_INTR|PERF_SAMPLE_PHYS_ADDR, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, -1, 0, -1, 0) = 11
[pid   307] perf_event_open({type=PERF_TYPE_TRACEPOINT, size=PERF_ATTR_SIZE_VER7, config=188, sample_period=7, sample_type=PERF_SAMPLE_IP|PERF_SAMPLE_CALLCHAIN|PERF_SAMPLE_ID|PERF_SAMPLE_PERIOD|PERF_SAMPLE_DATA_SRC|PERF_SAMPLE_IDENTIFIER|PERF_SAMPLE_REGS_INTR|PERF_SAMPLE_PHYS_ADDR, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, -1, 0, -1, 0) = 12
[pid   307] perf_event_open({type=PERF_TYPE_TRACEPOINT, size=PERF_ATTR_SIZE_VER7, config=188, sample_period=7, sample_type=PERF_SAMPLE_IP|PERF_SAMPLE_CALLCHAIN|PERF_SAMPLE_ID|PERF_SAMPLE_PERIOD|PERF_SAMPLE_DATA_SRC|PERF_SAMPLE_IDENTIFIER|PERF_SAMPLE_REGS_INTR|PERF_SAMPLE_PHYS_ADDR, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, -1, 0, -1, 0) = 13
[pid   307] perf_event_open({type=PERF_TYPE_TRACEPOINT, size=PERF_ATTR_SIZE_VER7, config=188, sample_period=7, sample_type=PERF_SAMPLE_IP|PERF_SAMPLE_CALLCHAIN|PERF_SAMPLE_ID|PERF_SAMPLE_PERIOD|PERF_SAMPLE_DATA_SRC|PERF_SAMPLE_IDENTIFIER|PERF_SAMPLE_REGS_INTR|PERF_SAMPLE_PHYS_ADDR, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, -1, 0, -1, 0) = 14
[pid   307] perf_event_open({type=PERF_TYPE_TRACEPOINT, size=PERF_ATTR_SIZE_VER7, config=188, sample_period=7, sample_type=PERF_SAMPLE_IP|PERF_SAMPLE_CALLCHAIN|PERF_SAMPLE_ID|PERF_SAMPLE_PERIOD|PERF_SAMPLE_DATA_SRC|PERF_SAMPLE_IDENTIFIER|PERF_SAMPLE_REGS_INTR|PERF_SAMPLE_PHYS_ADDR, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, -1, 0, -1, 0) = 15
[pid   307] perf_event_open({type=PERF_TYPE_TRACEPOINT, size=PERF_ATTR_SIZE_VER7, config=188, sample_period=7, sample_type=PERF_SAMPLE_IP|PERF_SAMPLE_CALLCHAIN|PERF_SAMPLE_ID|PERF_SAMPLE_PERIOD|PERF_SAMPLE_DATA_SRC|PERF_SAMPLE_IDENTIFIER|PERF_SAMPLE_REGS_INTR|PERF_SAMPLE_PHYS_ADDR, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, -1, 0, -1, 0) = 16
[pid   307] perf_event_open({type=PERF_TYPE_TRACEPOINT, size=PERF_ATTR_SIZE_VER7, config=188, sample_period=7, sample_type=PERF_SAMPLE_IP|PERF_SAMPLE_CALLCHAIN|PERF_SAMPLE_ID|PERF_SAMPLE_PERIOD|PERF_SAMPLE_DATA_SRC|PERF_SAMPLE_IDENTIFIER|PERF_SAMPLE_REGS_INTR|PERF_SAMPLE_PHYS_ADDR, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, -1, 0, -1, 0) = 17
[pid   307] perf_event_open({type=PERF_TYPE_TRACEPOINT, size=PERF_ATTR_SIZE_VER7, config=188, sample_period=7, sample_type=PERF_SAMPLE_IP|PERF_SAMPLE_CALLCHAIN|PERF_SAMPLE_ID|PERF_SAMPLE_PERIOD|PERF_SAMPLE_DATA_SRC|PERF_SAMPLE_IDENTIFIER|PERF_SAMPLE_REGS_INTR|PERF_SAMPLE_PHYS_ADDR, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, -1, 0, -1, 0) = 18
[pid   307] perf_event_open({type=PERF_TYPE_TRACEPOINT, size=PERF_ATTR_SIZE_VER7, config=188, sample_period=7, sample_type=PERF_SAMPLE_IP|PERF_SAMPLE_CALLCHAIN|PERF_SAMPLE_ID|PERF_SAMPLE_PERIOD|PERF_SAMPLE_DATA_SRC|PERF_SAMPLE_IDENTIFIER|PERF_SAMPLE_REGS_INTR|PERF_SAMPLE_PHYS_ADDR, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, -1, 0, -1, 0) = 19
[pid   307] perf_event_open({type=PERF_TYPE_TRACEPOINT, size=PERF_ATTR_SIZE_VER7, config=188, sample_period=7, sample_type=PERF_SAMPLE_IP|PERF_SAMPLE_CALLCHAIN|PERF_SAMPLE_ID|PERF_SAMPLE_PERIOD|PERF_SAMPLE_DATA_SRC|PERF_SAMPLE_IDENTIFIER|PERF_SAMPLE_REGS_INTR|PERF_SAMPLE_PHYS_ADDR, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, -1, 0, -1, 0) = 20
[pid   307] perf_event_open({type=PERF_TYPE_TRACEPOINT, size=PERF_ATTR_SIZE_VER7, config=188, sample_period=7, sample_type=PERF_SAMPLE_IP|PERF_SAMPLE_CALLCHAIN|PERF_SAMPLE_ID|PERF_SAMPLE_PERIOD|PERF_SAMPLE_DATA_SRC|PERF_SAMPLE_IDENTIFIER|PERF_SAMPLE_REGS_INTR|PERF_SAMPLE_PHYS_ADDR, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, -1, 0, -1, 0) = 21
[pid   307] perf_event_open({type=PERF_TYPE_TRACEPOINT, size=PERF_ATTR_SIZE_VER7, config=188, sample_period=7, sample_type=PERF_SAMPLE_IP|PERF_SAMPLE_CALLCHAIN|PERF_SAMPLE_ID|PERF_SAMPLE_PERIOD|PERF_SAMPLE_DATA_SRC|PERF_SAMPLE_IDENTIFIER|PERF_SAMPLE_REGS_INTR|PERF_SAMPLE_PHYS_ADDR, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, -1, 0, -1, 0) = 22
[pid   307] perf_event_open({type=PERF_TYPE_TRACEPOINT, size=PERF_ATTR_SIZE_VER7, config=188, sample_period=7, sample_type=PERF_SAMPLE_IP|PERF_SAMPLE_CALLCHAIN|PERF_SAMPLE_ID|PERF_SAMPLE_PERIOD|PERF_SAMPLE_DATA_SRC|PERF_SAMPLE_IDENTIFIER|PERF_SAMPLE_REGS_INTR|PERF_SAMPLE_PHYS_ADDR, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, -1, 0, -1, 0) = 23
[pid   307] perf_event_open({type=PERF_TYPE_TRACEPOINT, size=PERF_ATTR_SIZE_VER7, config=188, sample_period=7, sample_type=PERF_SAMPLE_IP|PERF_SAMPLE_CALLCHAIN|PERF_SAMPLE_ID|PERF_SAMPLE_PERIOD|PERF_SAMPLE_DATA_SRC|PERF_SAMPLE_IDENTIFIER|PERF_SAMPLE_REGS_INTR|PERF_SAMPLE_PHYS_ADDR, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, -1, 0, -1, 0) = 24
[pid   307] perf_event_open({type=PERF_TYPE_TRACEPOINT, size=PERF_ATTR_SIZE_VER7, config=188, sample_period=7, sample_type=PERF_SAMPLE_IP|PERF_SAMPLE_CALLCHAIN|PERF_SAMPLE_ID|PERF_SAMPLE_PERIOD|PERF_SAMPLE_DATA_SRC|PERF_SAMPLE_IDENTIFIER|PERF_SAMPLE_REGS_INTR|PERF_SAMPLE_PHYS_ADDR, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, -1, 0, -1, 0) = 25
[pid   307] perf_event_open({type=PERF_TYPE_TRACEPOINT, size=PERF_ATTR_SIZE_VER7, config=188, sample_period=7, sample_type=PERF_SAMPLE_IP|PERF_SAMPLE_CALLCHAIN|PERF_SAMPLE_ID|PERF_SAMPLE_PERIOD|PERF_SAMPLE_DATA_SRC|PERF_SAMPLE_IDENTIFIER|PERF_SAMPLE_REGS_INTR|PERF_SAMPLE_PHYS_ADDR, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, -1, 0, -1, 0) = 26
[pid   307] perf_event_open({type=PERF_TYPE_TRACEPOINT, size=PERF_ATTR_SIZE_VER7, config=188, sample_period=7, sample_type=PERF_SAMPLE_IP|PERF_SAMPLE_CALLCHAIN|PERF_SAMPLE_ID|PERF_SAMPLE_PERIOD|PERF_SAMPLE_DATA_SRC|PERF_SAMPLE_IDENTIFIER|PERF_SAMPLE_REGS_INTR|PERF_SAMPLE_PHYS_ADDR, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, -1, 0, -1, 0) = 27
[pid   307] perf_event_open({type=PERF_TYPE_TRACEPOINT, size=PERF_ATTR_SIZE_VER7, config=188, sample_period=7, sample_type=PERF_SAMPLE_IP|PERF_SAMPLE_CALLCHAIN|PERF_SAMPLE_ID|PERF_SAMPLE_PERIOD|PERF_SAMPLE_DATA_SRC|PERF_SAMPLE_IDENTIFIER|PERF_SAMPLE_REGS_INTR|PERF_SAMPLE_PHYS_ADDR, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, -1, 0, -1, 0) = 28
[pid   307] perf_event_open({type=PERF_TYPE_TRACEPOINT, size=PERF_ATTR_SIZE_VER7, config=188, sample_period=7, sample_type=PERF_SAMPLE_IP|PERF_SAMPLE_CALLCHAIN|PERF_SAMPLE_ID|PERF_SAMPLE_PERIOD|PERF_SAMPLE_DATA_SRC|PERF_SAMPLE_IDENTIFIER|PERF_SAMPLE_REGS_INTR|PERF_SAMPLE_PHYS_ADDR, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, -1, 0, -1, 0) = 29
[pid   307] perf_event_open({type=PERF_TYPE_TRACEPOINT, size=PERF_ATTR_SIZE_VER7, config=188, sample_period=7, sample_type=PERF_SAMPLE_IP|PERF_SAMPLE_CALLCHAIN|PERF_SAMPLE_ID|PERF_SAMPLE_PERIOD|PERF_SAMPLE_DATA_SRC|PERF_SAMPLE_IDENTIFIER|PERF_SAMPLE_REGS_INTR|PERF_SAMPLE_PHYS_ADDR, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, -1, 0, -1, 0) = 30
[pid   307] perf_event_open({type=PERF_TYPE_TRACEPOINT, size=PERF_ATTR_SIZE_VER7, config=188, sample_period=7, sample_type=PERF_SAMPLE_IP|PERF_SAMPLE_CALLCHAIN|PERF_SAMPLE_ID|PERF_SAMPLE_PERIOD|PERF_SAMPLE_DATA_SRC|PERF_SAMPLE_IDENTIFIER|PERF_SAMPLE_REGS_INTR|PERF_SAMPLE_PHYS_ADDR, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, -1, 0, -1, 0) = 31
[pid   307] perf_event_open({type=PERF_TYPE_TRACEPOINT, size=PERF_ATTR_SIZE_VER7, config=188, sample_period=7, sample_type=PERF_SAMPLE_IP|PERF_SAMPLE_CALLCHAIN|PERF_SAMPLE_ID|PERF_SAMPLE_PERIOD|PERF_SAMPLE_DATA_SRC|PERF_SAMPLE_IDENTIFIER|PERF_SAMPLE_REGS_INTR|PERF_SAMPLE_PHYS_ADDR, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, -1, 0, -1, 0) = 32
[pid   307] perf_event_open({type=PERF_TYPE_TRACEPOINT, size=PERF_ATTR_SIZE_VER7, config=188, sample_period=7, sample_type=PERF_SAMPLE_IP|PERF_SAMPLE_CALLCHAIN|PERF_SAMPLE_ID|PERF_SAMPLE_PERIOD|PERF_SAMPLE_DATA_SRC|PERF_SAMPLE_IDENTIFIER|PERF_SAMPLE_REGS_INTR|PERF_SAMPLE_PHYS_ADDR, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, -1, 0, -1, 0) = 33
[pid   307] perf_event_open({type=PERF_TYPE_TRACEPOINT, size=PERF_ATTR_SIZE_VER7, config=188, sample_period=7, sample_type=PERF_SAMPLE_IP|PERF_SAMPLE_CALLCHAIN|PERF_SAMPLE_ID|PERF_SAMPLE_PERIOD|PERF_SAMPLE_DATA_SRC|PERF_SAMPLE_IDENTIFIER|PERF_SAMPLE_REGS_INTR|PERF_SAMPLE_PHYS_ADDR, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, -1, 0, -1, 0) = 34
[pid   307] perf_event_open({type=PERF_TYPE_TRACEPOINT, size=PERF_ATTR_SIZE_VER7, config=188, sample_period=7, sample_type=PERF_SAMPLE_IP|PERF_SAMPLE_CALLCHAIN|PERF_SAMPLE_ID|PERF_SAMPLE_PERIOD|PERF_SAMPLE_DATA_SRC|PERF_SAMPLE_IDENTIFIER|PERF_SAMPLE_REGS_INTR|PERF_SAMPLE_PHYS_ADDR, read_format=0, precise_ip=0 /* arbitrary skid */, ...}, -1, 0, -1, 0) = 35
[pid   307] perf_event_open({type=PERF_TYPE_SOFTWARE, size=PERF_ATTR_SIZE_VER7, config=PERF_COUNT_SW_CPU_CLOCK, sample_period=23854, sample_type=0, read_format=PERF_FORMAT_GROUP, precise_ip=0 /* arbitrary skid */, ...}, 0, -1, -1, 0) = 36
[pid   307] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=12, insns=0x200000000440, license=NULL, log_level=4294967294, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=-1, core_relo_cnt=0, fd_array=NULL, core_relos=NULL, core_relo_rec_size=0, log_true_size=0, prog_token_fd=0}, 148) = -1 EFAULT (Bad address)
[pid   307] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_LWT_IN, insn_cnt=4, insns=0x200000000480, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, core_relo_cnt=0, fd_array=NULL, core_relos=NULL, core_relo_rec_size=0, log_true_size=0, prog_token_fd=0}, 148) = -1 EFAULT (Bad address)
[pid   307] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT_WRITABLE, insn_cnt=5, insns=0x200000000480, license=NULL, log_level=64, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_SOCK_CREATE, prog_btf_fd=-1, func_info_rec_size=8, func_info=NULL, func_info_cnt=0, line_info_rec_size=16, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, core_relo_cnt=0, fd_array=NULL, core_relos=NULL, core_relo_rec_size=16, log_true_size=0, prog_token_fd=0}, 148) = -1 E2BIG (Argument list too long)
[  212.412885][  T306] request_module fs-gadgetfs succeeded, but still no fs?
[pid   307] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_PERF_EVENT, insn_cnt=12, insns=0x200000000440, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=BPF_F_TEST_RND_HI32, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_SOCK_CREATE, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, core_relo_cnt=0, fd_array=NULL, core_relos=NULL, core_relo_rec_size=0, log_true_size=0, prog_token_fd=0}, 148) = 37
[pid   307] ioctl(36, PERF_EVENT_IOC_SET_BPF, 37 <unfinished ...>
[pid   306] kill(-2, SIGKILL)           = 0
[pid   306] kill(2, SIGKILL)            = 0
[pid   306] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid   306] fstat(3, {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0
[pid   306] getdents64(3, 0x55558dd64760 /* 2 entries */, 32768) = 48
[pid   306] getdents64(3, 0x55558dd64760 /* 0 entries */, 32768) = 0
[pid   306] close(3)                    = 0
[  235.244839][    C0] hrtimer: interrupt took 37597 ns
[  312.574806][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
[  312.581687][    C0] rcu: 	0-....: (10010 ticks this GP) idle=f9b/1/0x4000000000000000 softirq=2998/3000 fqs=4649 last_accelerate: dd71/0481 dyntick_enabled: 1
[  312.596531][    C0] 	(t=10002 jiffies g=945 q=8)
[  312.601305][    C0] NMI backtrace for cpu 0
[  312.605876][    C0] CPU: 0 PID: 307 Comm: syz-executor389 Not tainted syzkaller #0
[  312.613600][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  312.623664][    C0] Call Trace:
[  312.627001][    C0]  <IRQ>
[  312.629827][    C0]  __dump_stack+0x21/0x30
[  312.634312][    C0]  dump_stack_lvl+0x110/0x170
[  312.638996][    C0]  ? show_regs_print_info+0x20/0x20
[  312.644258][    C0]  ? __wake_up_klogd+0xe3/0x110
[  312.649120][    C0]  ? vprintk_emit+0x175/0x320
[  312.653779][    C0]  dump_stack+0x15/0x20
[  312.657921][    C0]  nmi_cpu_backtrace+0x2af/0x2c0
[  312.662930][    C0]  ? nmi_trigger_cpumask_backtrace+0x240/0x240
[  312.669190][    C0]  ? __kasan_check_write+0x14/0x20
[  312.674385][    C0]  ? _raw_spin_lock_irqsave+0xc2/0x130
[  312.679871][    C0]  ? _raw_spin_lock+0xf0/0xf0
[  312.684549][    C0]  ? _printk+0xda/0x130
[  312.688764][    C0]  ? arch_trigger_cpumask_backtrace+0x20/0x20
[  312.695060][    C0]  ? arch_trigger_cpumask_backtrace+0x20/0x20
[  312.701143][    C0]  nmi_trigger_cpumask_backtrace+0x138/0x240
[  312.707128][    C0]  arch_trigger_cpumask_backtrace+0x10/0x20
[  312.713468][    C0]  rcu_dump_cpu_stacks+0x1c6/0x300
[  312.718652][    C0]  print_cpu_stall+0x320/0x600
[  312.723420][    C0]  rcu_sched_clock_irq+0x75b/0x12d0
[  312.728788][    C0]  ? rcu_boost_kthread_setaffinity+0x310/0x310
[  312.734939][    C0]  ? raise_softirq+0x7d/0xf0
[  312.739610][    C0]  ? __raise_softirq_irqoff+0xd0/0xd0
[  312.744980][    C0]  ? debug_smp_processor_id+0x17/0x20
[  312.750411][    C0]  ? hrtimer_run_queues+0x166/0x420
[  312.755663][    C0]  update_process_times+0x198/0x200
[  312.760892][    C0]  tick_sched_timer+0x17c/0x240
[  312.765746][    C0]  ? tick_setup_sched_timer+0x460/0x460
[  312.771305][    C0]  __hrtimer_run_queues+0x38a/0x890
[  312.776585][    C0]  ? hrtimer_interrupt+0x8c0/0x8c0
[  312.781687][    C0]  ? ktime_get_update_offsets_now+0x2fa/0x310
[  312.787735][    C0]  hrtimer_interrupt+0x3ad/0x8c0
[  312.792655][    C0]  __sysvec_apic_timer_interrupt+0xfa/0x3e0
[  312.798529][    C0]  sysvec_apic_timer_interrupt+0x53/0xc0
[  312.804156][    C0]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[  312.810206][    C0] RIP: 0010:handle_softirqs+0x10d/0x560
[  312.815807][    C0] Code: 08 85 e8 a6 c5 6f 03 65 66 c7 05 9c 40 c4 7e 00 00 48 c7 c7 60 2c 08 85 e8 90 c5 6f 03 65 44 89 35 a0 42 c3 7e fb 44 89 75 a4 <b8> ff ff ff ff 0f bc 45 a4 41 89 c5 41 ff c5 0f 85 c0 00 00 00 48
[  312.835646][    C0] RSP: 0018:ffffc90000007f38 EFLAGS: 00000282
[  312.841794][    C0] RAX: 0000000000000000 RBX: ffff888120f50280 RCX: 2bd5441925afa800
[  312.849768][    C0] RDX: 1ffffffff0e18a00 RSI: ffffffff85082c60 RDI: ffffffff85638d80
[  312.857811][    C0] RBP: ffffc90000007fc0 R08: ffffffff870c5008 R09: ffffffff870c5018
[  312.865771][    C0] R10: ffffffff870c5003 R11: 1ffffffff0e18a00 R12: 0000000000000000
[  312.873729][    C0] R13: 0000000000000000 R14: 0000000000000280 R15: 000000000000000a
[  312.881739][    C0]  ? handle_softirqs+0x100/0x560
[  312.887027][    C0]  __irq_exit_rcu+0x52/0xf0
[  312.891626][    C0]  irq_exit_rcu+0x9/0x10
[  312.896028][    C0]  sysvec_apic_timer_interrupt+0xa9/0xc0
[  312.901697][    C0]  </IRQ>
[  312.904629][    C0]  <TASK>
[  312.907546][    C0]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[  312.913531][    C0] RIP: 0010:perf_ioctl+0x1500/0x1e50
[  312.919014][    C0] Code: 00 65 48 8b 04 25 28 00 00 00 48 3b 84 24 40 02 00 00 0f 85 91 08 00 00 4c 89 f8 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 <e8> bb 0e dc ff 45 31 ff e9 6e ff ff ff e8 ae 0e dc ff 41 bf ea ff
[  312.938790][    C0] RSP: 0018:ffffc90000797be0 EFLAGS: 00010246
[  312.944850][    C0] RAX: ffffffff818dac5c RBX: 0000000000000000 RCX: ffff888120f58000
[  312.952801][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  312.960753][    C0] RBP: ffffc90000797e80 R08: ffff888120e43807 R09: 1ffff110241c8700
[  312.968714][    C0] R10: dffffc0000000000 R11: ffffed10241c8701 R12: 0000000040042408
[  312.976770][    C0] R13: dffffc0000000000 R14: fffff520000f2f8c R15: ffffc900000ab000
[  312.984892][    C0]  ? perf_ioctl+0x87c/0x1e50
[  312.989498][    C0]  ? has_cap_mac_admin+0x370/0x370
[  312.994883][    C0]  ? perf_poll+0x1c0/0x1c0
[  312.999405][    C0]  ? __kasan_check_write+0x14/0x20
[  313.004578][    C0]  ? _raw_spin_lock_irq+0x95/0xf0
[  313.009600][    C0]  ? _raw_spin_lock_irqsave+0x130/0x130
[  313.015138][    C0]  ? selinux_file_ioctl+0x3ad/0x4c0
[  313.020462][    C0]  ? selinux_file_alloc_security+0x120/0x120
[  313.026627][    C0]  ? irqentry_exit+0x37/0x40
[  313.031221][    C0]  ? common_interrupt+0x70/0xe0
[  313.036051][    C0]  ? asm_common_interrupt+0x27/0x40
[  313.041253][    C0]  ? perf_poll+0x1c0/0x1c0
[  313.045650][    C0]  ? __se_sys_ioctl+0x114/0x1a0
[  313.050599][    C0]  ? perf_poll+0x1c0/0x1c0
[  313.055007][    C0]  __se_sys_ioctl+0x121/0x1a0
[  313.059660][    C0]  __x64_sys_ioctl+0x7b/0x90
[  313.064228][    C0]  x64_sys_call+0x2f/0x9a0
[  313.068707][    C0]  do_syscall_64+0x4c/0xa0
[  313.073102][    C0]  ? clear_bhb_loop+0x50/0xa0
[  313.077757][    C0]  ? clear_bhb_loop+0x50/0xa0
[  313.082438][    C0]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  313.088318][    C0] RIP: 0033:0x7fd9ff69c489
[  313.092862][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48
[  313.112488][    C0] RSP: 002b:00007ffeb6947348 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  313.120894][    C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fd9ff69c489
[  313.128957][    C0] RDX: 0000000000000025 RSI: 0000000040042408 RDI: 0000000000000024
[  313.136932][    C0] RBP: 0000000000000000 R08: 000000000000003d R09: 000000000000003d
[  313.144880][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  313.152844][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  313.160818][    C0]  </TASK>
[  463.336232][    C0] watchdog: BUG: soft lockup - CPU#0 stuck for 246s! [syz-executor389:307]
[  463.344977][    C0] Modules linked in:
[  463.348857][    C0] CPU: 0 PID: 307 Comm: syz-executor389 Not tainted syzkaller #0
[  463.356579][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  463.366877][    C0] RIP: 0010:handle_softirqs+0x10d/0x560
[  463.372533][    C0] Code: 08 85 e8 a6 c5 6f 03 65 66 c7 05 9c 40 c4 7e 00 00 48 c7 c7 60 2c 08 85 e8 90 c5 6f 03 65 44 89 35 a0 42 c3 7e fb 44 89 75 a4 <b8> ff ff ff ff 0f bc 45 a4 41 89 c5 41 ff c5 0f 85 c0 00 00 00 48
[  463.392313][    C0] RSP: 0018:ffffc90000007f38 EFLAGS: 00000282
[  463.398377][    C0] RAX: 0000000000000000 RBX: ffff888120f50280 RCX: 2bd5441925afa800
[  463.406520][    C0] RDX: 1ffffffff0e18a00 RSI: ffffffff85082c60 RDI: ffffffff85638d80
[  463.414495][    C0] RBP: ffffc90000007fc0 R08: ffffffff870c5008 R09: ffffffff870c5018
[  463.422546][    C0] R10: ffffffff870c5003 R11: 1ffffffff0e18a00 R12: 0000000000000000
[  463.430501][    C0] R13: 0000000000000000 R14: 0000000000000280 R15: 000000000000000a
[  463.438911][    C0] FS:  000055558dd633c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[  463.447859][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  463.454512][    C0] CR2: 0000000000000000 CR3: 000000012596c000 CR4: 00000000003506b0
[  463.462475][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  463.470433][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  463.478585][    C0] Call Trace:
[  463.482025][    C0]  <IRQ>
[  463.484867][    C0]  __irq_exit_rcu+0x52/0xf0
[  463.489385][    C0]  irq_exit_rcu+0x9/0x10
[  463.493625][    C0]  sysvec_apic_timer_interrupt+0xa9/0xc0
[  463.499350][    C0]  </IRQ>
[  463.502354][    C0]  <TASK>
[  463.505488][    C0]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[  463.511475][    C0] RIP: 0010:perf_ioctl+0x1500/0x1e50
[  463.517039][    C0] Code: 00 65 48 8b 04 25 28 00 00 00 48 3b 84 24 40 02 00 00 0f 85 91 08 00 00 4c 89 f8 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 <e8> bb 0e dc ff 45 31 ff e9 6e ff ff ff e8 ae 0e dc ff 41 bf ea ff
[  463.536660][    C0] RSP: 0018:ffffc90000797be0 EFLAGS: 00010246
[  463.542744][    C0] RAX: ffffffff818dac5c RBX: 0000000000000000 RCX: ffff888120f58000
[  463.550817][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  463.558774][    C0] RBP: ffffc90000797e80 R08: ffff888120e43807 R09: 1ffff110241c8700
[  463.566751][    C0] R10: dffffc0000000000 R11: ffffed10241c8701 R12: 0000000040042408
[  463.574836][    C0] R13: dffffc0000000000 R14: fffff520000f2f8c R15: ffffc900000ab000
[  463.582810][    C0]  ? perf_ioctl+0x87c/0x1e50
[  463.587414][    C0]  ? has_cap_mac_admin+0x370/0x370
[  463.592509][    C0]  ? perf_poll+0x1c0/0x1c0
[  463.597194][    C0]  ? __kasan_check_write+0x14/0x20
[  463.602337][    C0]  ? _raw_spin_lock_irq+0x95/0xf0
[  463.607394][    C0]  ? _raw_spin_lock_irqsave+0x130/0x130
[  463.612949][    C0]  ? selinux_file_ioctl+0x3ad/0x4c0
[  463.618270][    C0]  ? selinux_file_alloc_security+0x120/0x120
[  463.624544][    C0]  ? irqentry_exit+0x37/0x40
[  463.629315][    C0]  ? common_interrupt+0x70/0xe0
[  463.634152][    C0]  ? asm_common_interrupt+0x27/0x40
[  463.639438][    C0]  ? perf_poll+0x1c0/0x1c0
[  463.643973][    C0]  ? __se_sys_ioctl+0x114/0x1a0
[  463.648855][    C0]  ? perf_poll+0x1c0/0x1c0
[  463.653259][    C0]  __se_sys_ioctl+0x121/0x1a0
[  463.658030][    C0]  __x64_sys_ioctl+0x7b/0x90
[  463.662792][    C0]  x64_sys_call+0x2f/0x9a0
[  463.667219][    C0]  do_syscall_64+0x4c/0xa0
[  463.671629][    C0]  ? clear_bhb_loop+0x50/0xa0
[  463.676303][    C0]  ? clear_bhb_loop+0x50/0xa0
[  463.681161][    C0]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  463.687054][    C0] RIP: 0033:0x7fd9ff69c489
[  463.691456][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48
[  463.711251][    C0] RSP: 002b:00007ffeb6947348 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  463.719679][    C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fd9ff69c489
[  463.727670][    C0] RDX: 0000000000000025 RSI: 0000000040042408 RDI: 0000000000000024
[  463.736004][    C0] RBP: 0000000000000000 R08: 000000000000003d R09: 000000000000003d
[  463.743987][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  463.751974][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  463.760086][    C0]  </TASK>
[  463.763201][    C0] Sending NMI from CPU 0 to CPUs 1:
[  463.768420][    C1] NMI backtrace for cpu 1 skipped: idling at default_idle+0xf/0x20
[  463.769401][    C0] Kernel panic - not syncing: softlockup: hung tasks
[  463.783002][    C0] CPU: 0 PID: 307 Comm: syz-executor389 Tainted: G             L    syzkaller #0
[  463.792101][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  463.802257][    C0] Call Trace:
[  463.805526][    C0]  <IRQ>
[  463.808357][    C0]  __dump_stack+0x21/0x30
[  463.812680][    C0]  dump_stack_lvl+0x110/0x170
[  463.817425][    C0]  ? show_regs_print_info+0x20/0x20
[  463.822666][    C0]  dump_stack+0x15/0x20
[  463.826831][    C0]  panic+0x287/0x790
[  463.830721][    C0]  ? bpf_jit_dump+0xe0/0xe0
[  463.835211][    C0]  watchdog_timer_fn+0x5b4/0x5c0
[  463.840261][    C0]  ? proc_watchdog_cpumask+0xd0/0xd0
[  463.845652][    C0]  __hrtimer_run_queues+0x38a/0x890
[  463.850897][    C0]  ? hrtimer_interrupt+0x8c0/0x8c0
[  463.856010][    C0]  ? ktime_get_update_offsets_now+0x2fa/0x310
[  463.862073][    C0]  hrtimer_interrupt+0x3ad/0x8c0
[  463.867013][    C0]  __sysvec_apic_timer_interrupt+0xfa/0x3e0
[  463.873029][    C0]  sysvec_apic_timer_interrupt+0x53/0xc0
[  463.878687][    C0]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[  463.884727][    C0] RIP: 0010:handle_softirqs+0x10d/0x560
[  463.890269][    C0] Code: 08 85 e8 a6 c5 6f 03 65 66 c7 05 9c 40 c4 7e 00 00 48 c7 c7 60 2c 08 85 e8 90 c5 6f 03 65 44 89 35 a0 42 c3 7e fb 44 89 75 a4 <b8> ff ff ff ff 0f bc 45 a4 41 89 c5 41 ff c5 0f 85 c0 00 00 00 48
[  463.910177][    C0] RSP: 0018:ffffc90000007f38 EFLAGS: 00000282
[  463.916248][    C0] RAX: 0000000000000000 RBX: ffff888120f50280 RCX: 2bd5441925afa800
[  463.924312][    C0] RDX: 1ffffffff0e18a00 RSI: ffffffff85082c60 RDI: ffffffff85638d80
[  463.932278][    C0] RBP: ffffc90000007fc0 R08: ffffffff870c5008 R09: ffffffff870c5018
[  463.940244][    C0] R10: ffffffff870c5003 R11: 1ffffffff0e18a00 R12: 0000000000000000
[  463.948307][    C0] R13: 0000000000000000 R14: 0000000000000280 R15: 000000000000000a
[  463.956290][    C0]  ? handle_softirqs+0x100/0x560
[  463.961361][    C0]  __irq_exit_rcu+0x52/0xf0
[  463.965877][    C0]  irq_exit_rcu+0x9/0x10
[  463.970214][    C0]  sysvec_apic_timer_interrupt+0xa9/0xc0
[  463.975835][    C0]  </IRQ>
[  463.979001][    C0]  <TASK>
[  463.982122][    C0]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[  463.988134][    C0] RIP: 0010:perf_ioctl+0x1500/0x1e50
[  463.993429][    C0] Code: 00 65 48 8b 04 25 28 00 00 00 48 3b 84 24 40 02 00 00 0f 85 91 08 00 00 4c 89 f8 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 <e8> bb 0e dc ff 45 31 ff e9 6e ff ff ff e8 ae 0e dc ff 41 bf ea ff
[  464.013133][    C0] RSP: 0018:ffffc90000797be0 EFLAGS: 00010246
[  464.019200][    C0] RAX: ffffffff818dac5c RBX: 0000000000000000 RCX: ffff888120f58000
[  464.027255][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  464.035400][    C0] RBP: ffffc90000797e80 R08: ffff888120e43807 R09: 1ffff110241c8700
[  464.043396][    C0] R10: dffffc0000000000 R11: ffffed10241c8701 R12: 0000000040042408
[  464.051854][    C0] R13: dffffc0000000000 R14: fffff520000f2f8c R15: ffffc900000ab000
[  464.059832][    C0]  ? perf_ioctl+0x87c/0x1e50
[  464.064429][    C0]  ? has_cap_mac_admin+0x370/0x370
[  464.069529][    C0]  ? perf_poll+0x1c0/0x1c0
[  464.073932][    C0]  ? __kasan_check_write+0x14/0x20
[  464.079033][    C0]  ? _raw_spin_lock_irq+0x95/0xf0
[  464.084054][    C0]  ? _raw_spin_lock_irqsave+0x130/0x130
[  464.089615][    C0]  ? selinux_file_ioctl+0x3ad/0x4c0
[  464.094918][    C0]  ? selinux_file_alloc_security+0x120/0x120
[  464.100913][    C0]  ? irqentry_exit+0x37/0x40
[  464.105489][    C0]  ? common_interrupt+0x70/0xe0
[  464.110330][    C0]  ? asm_common_interrupt+0x27/0x40
[  464.115515][    C0]  ? perf_poll+0x1c0/0x1c0
[  464.119919][    C0]  ? __se_sys_ioctl+0x114/0x1a0
[  464.124756][    C0]  ? perf_poll+0x1c0/0x1c0
[  464.129161][    C0]  __se_sys_ioctl+0x121/0x1a0
[  464.133917][    C0]  __x64_sys_ioctl+0x7b/0x90
[  464.138497][    C0]  x64_sys_call+0x2f/0x9a0
[  464.142988][    C0]  do_syscall_64+0x4c/0xa0
[  464.147650][    C0]  ? clear_bhb_loop+0x50/0xa0
[  464.152326][    C0]  ? clear_bhb_loop+0x50/0xa0
[  464.157086][    C0]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  464.162967][    C0] RIP: 0033:0x7fd9ff69c489
[  464.167395][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48
[  464.187168][    C0] RSP: 002b:00007ffeb6947348 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  464.195573][    C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fd9ff69c489
[  464.203533][    C0] RDX: 0000000000000025 RSI: 0000000040042408 RDI: 0000000000000024
[  464.211958][    C0] RBP: 0000000000000000 R08: 000000000000003d R09: 000000000000003d
[  464.221574][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  464.229894][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  464.238046][    C0]  </TASK>
[  464.241503][    C0] Kernel Offset: disabled
[  464.245911][    C0] Rebooting in 86400 seconds..