ci2-android-6-1-perf/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci2-android-6-1-perf/syz-executor3641708288 <...> Warning: Permanently added '10.128.1.38' (ED25519) to the list of known hosts. execve("ci2-android-6-1-perf/syz-executor3641708288", ["ci2-android-6-1-perf/syz-executor3641708288"], 0x7ffe638675e0 /* 10 vars */) = 0 brk(NULL) = 0x55558f1c8000 brk(0x55558f1c8e00) = 0x55558f1c8e00 arch_prctl(ARCH_SET_FS, 0x55558f1c8480) = 0 set_tid_address(0x55558f1c8750) = 305 set_robust_list(0x55558f1c8760, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 32, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci2-android-6-1-perf/syz-executor3641708288", 4096) = 49 getrandom("\x76\x81\x00\xdc\xb5\x70\xd7\x6c", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55558f1c8e00 brk(0x55558f1e9e00) = 0x55558f1e9e00 brk(0x55558f1ea000) = 0x55558f1ea000 mprotect(0x7f85ac764000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 mount(NULL, "/proc/sys/fs/binfmt_misc", "binfmt_misc", 0, NULL) = -1 EBUSY (Device or resource busy) openat(AT_FDCWD, "/proc/sys/fs/binfmt_misc/register", O_WRONLY|O_CLOEXEC) = 3 write(3, "\x3a\x73\x79\x7a\x30\x3a\x4d\x3a\x30\x3a\x01\x3a\x3a\x2e\x2f\x66\x69\x6c\x65\x30\x3a", 21) = 21 close(3) = 0 openat(AT_FDCWD, "/proc/sys/fs/binfmt_misc/register", O_WRONLY|O_CLOEXEC) = 3 write(3, "\x3a\x73\x79\x7a\x31\x3a\x4d\x3a\x31\x3a\x02\x3a\x3a\x2f\x70\x72\x6f\x63\x2f\x74\x68\x72\x65\x61\x64\x2d\x73\x65\x6c\x66\x2f\x63\x77\x64\x2f\x66\x69\x6c\x65\x30\x3a\x50\x4f\x43", 44) = 44 close(3) = 0 chmod("/dev/raw-gadget", 0666) = 0 swapoff("./swap-file") = -1 ENOENT (No such file or directory) unlink("./swap-file") = -1 ENOENT (No such file or directory) openat(AT_FDCWD, "./swap-file", O_WRONLY|O_CREAT|O_CLOEXEC, 0600) = 3 fallocate(3, FALLOC_FL_ZERO_RANGE, 0, 128000000) = 0 close(3) = 0 rt_sigaction(SIGINT, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f85ac6bbba0}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 rt_sigaction(SIGQUIT, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f85ac6bbba0}, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, 8) = 0 rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0 mmap(NULL, 36864, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f85ac6a2000 rt_sigprocmask(SIG_BLOCK, ~[], [CHLD], 8) = 0 clone3({flags=CLONE_VM|CLONE_VFORK|CLONE_CLEAR_SIGHAND, exit_signal=SIGCHLD, stack=0x7f85ac6a2000, stack_size=0x9000}, 88ci2-android-6-1-perf/strace-static-x86_64: Process 306 attached [pid 306] rt_sigprocmask(SIG_BLOCK, NULL, ~[KILL STOP], 8) = 0 [pid 306] rt_sigaction(SIGINT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f85ac6bbba0}, NULL, 8) = 0 [pid 306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 306] execve("/bin/sh", ["sh", "-c", "--", "mkswap ./swap-file"], 0x7ffd73670b18 /* 10 vars */ [pid 305] <... clone3 resumed>) = 306 [pid 305] munmap(0x7f85ac6a2000, 36864) = 0 [pid 305] rt_sigprocmask(SIG_SETMASK, [CHLD], NULL, 8) = 0 [pid 306] <... execve resumed>) = 0 [pid 306] brk(NULL) = 0x5642adbbd000 [ 25.859617][ T28] audit: type=1400 audit(1789056792.973:64): avc: denied { execmem } for pid=305 comm="syz-executor364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 25.879109][ T28] audit: type=1400 audit(1789056792.973:65): avc: denied { mounton } for pid=305 comm="syz-executor364" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [pid 306] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7c3b265000 [pid 306] access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) [pid 306] openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 306] openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v3/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 306] newfstatat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v3/", 0x7fff15fbd470, 0) = -1 ENOENT (No such file or directory) [pid 306] openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v2/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 306] newfstatat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v2/", 0x7fff15fbd470, 0) = -1 ENOENT (No such file or directory) [pid 306] openat(AT_FDCWD, "/lib64/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = 3 [pid 306] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x38\x13\x0c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x09\x00\x40\x00\x19\x00\x18\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8\xf4\x00\x00"..., 832) = 832 [pid 306] fstat(3, {st_mode=S_IFREG|0644, st_size=792952, ...}) = 0 [pid 306] mmap(NULL, 792856, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f7c3b1a3000 [pid 306] mmap(0x7f7c3b1b3000, 548864, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x10000) = 0x7f7c3b1b3000 [pid 306] mmap(0x7f7c3b239000, 163840, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x96000) = 0x7f7c3b239000 [pid 306] mmap(0x7f7c3b261000, 16384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xbe000) = 0x7f7c3b261000 [pid 306] close(3) = 0 [pid 306] openat(AT_FDCWD, "/lib64/libc.so.6", O_RDONLY|O_CLOEXEC) = 3 [pid 306] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\xf0\xab\x02\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x38\x22\x1d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0e\x00\x40\x00\x3b\x00\x3a\x00\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00"..., 832) = 832 [pid 306] pread64(3, "\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x1c\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00"..., 784, 64) = 784 [pid 306] fstat(3, {st_mode=S_IFREG|0755, st_size=1913080, ...}) = 0 [pid 306] pread64(3, "\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x1c\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00"..., 784, 64) = 784 [pid 306] mmap(NULL, 1965720, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f7c3afc3000 [pid 306] mmap(0x7f7c3afeb000, 1368064, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x28000) = 0x7f7c3afeb000 [pid 306] mmap(0x7f7c3b139000, 356352, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x176000) = 0x7f7c3b139000 [pid 306] mmap(0x7f7c3b190000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1cc000) = 0x7f7c3b190000 [pid 306] mmap(0x7f7c3b196000, 52888, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f7c3b196000 [pid 306] close(3) = 0 [pid 306] openat(AT_FDCWD, "/lib64/libpam.so.0", O_RDONLY|O_CLOEXEC) = 3 [pid 306] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xf8\xf0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1b\x00\x1a\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe0\x29\x00\x00"..., 832) = 832 [pid 306] fstat(3, {st_mode=S_IFREG|0755, st_size=63416, ...}) = 0 [pid 306] mmap(NULL, 65552, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f7c3afb2000 [pid 306] mmap(0x7f7c3afb5000, 32768, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f7c3afb5000 [pid 306] mmap(0x7f7c3afbd000, 16384, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7f7c3afbd000 [pid 306] mmap(0x7f7c3afc1000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xe000) = 0x7f7c3afc1000 [pid 306] close(3) = 0 [pid 306] openat(AT_FDCWD, "/lib64/libpam_misc.so.0", O_RDONLY|O_CLOEXEC) = 3 [pid 306] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x00\x51\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1a\x00\x19\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd8\x12\x00\x00"..., 832) = 832 [pid 306] fstat(3, {st_mode=S_IFREG|0755, st_size=22400, ...}) = 0 [pid 306] mmap(NULL, 24656, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f7c3afab000 [pid 306] mmap(0x7f7c3afad000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f7c3afad000 [pid 306] mmap(0x7f7c3afaf000, 4096, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7f7c3afaf000 [pid 306] mmap(0x7f7c3afb0000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7f7c3afb0000 [pid 306] close(3) = 0 [pid 306] openat(AT_FDCWD, "/lib64/libresolv.so.2", O_RDONLY|O_CLOEXEC) = 3 [pid 306] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xa8\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0b\x00\x40\x00\x1d\x00\x1c\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x08\x27\x00\x00"..., 832) = 832 [pid 306] fstat(3, {st_mode=S_IFREG|0755, st_size=59624, ...}) = 0 [pid 306] mmap(NULL, 67720, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f7c3af9a000 [pid 306] mmap(0x7f7c3af9d000, 32768, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f7c3af9d000 [pid 306] mmap(0x7f7c3afa5000, 8192, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7f7c3afa5000 [pid 306] mmap(0x7f7c3afa7000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xd000) = 0x7f7c3afa7000 [pid 306] mmap(0x7f7c3afa9000, 6280, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f7c3afa9000 [pid 306] close(3) = 0 [pid 306] openat(AT_FDCWD, "/lib64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 306] openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v3/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 306] newfstatat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v3/", 0x7fff15fbd3d0, 0) = -1 ENOENT (No such file or directory) [pid 306] openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v2/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 306] newfstatat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v2/", 0x7fff15fbd3d0, 0) = -1 ENOENT (No such file or directory) [pid 306] openat(AT_FDCWD, "/usr/lib64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = 3 [pid 306] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x60\xd1\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0b\x00\x40\x00\x1d\x00\x1c\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x28\x74\x00\x00"..., 832) = 832 [pid 306] fstat(3, {st_mode=S_IFREG|0755, st_size=186528, ...}) = 0 [pid 306] mmap(NULL, 194256, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f7c3af6a000 [pid 306] mmap(0x7f7c3af72000, 114688, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x8000) = 0x7f7c3af72000 [pid 306] mmap(0x7f7c3af8e000, 32768, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x24000) = 0x7f7c3af8e000 [pid 306] mmap(0x7f7c3af96000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2c000) = 0x7f7c3af96000 [pid 306] mmap(0x7f7c3af98000, 5840, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f7c3af98000 [pid 306] close(3) = 0 [pid 306] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7c3af68000 [pid 306] openat(AT_FDCWD, "/lib64/libatomic.so.1", O_RDONLY|O_CLOEXEC) = 3 [pid 306] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x30\x71\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1b\x00\x1a\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x78\x1f\x00\x00"..., 832) = 832 [pid 306] fstat(3, {st_mode=S_IFREG|0755, st_size=30704, ...}) = 0 [pid 306] mmap(NULL, 37000, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f7c3af5e000 [pid 306] mmap(0x7f7c3af60000, 12288, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f7c3af60000 [pid 306] mmap(0x7f7c3af63000, 8192, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5000) = 0x7f7c3af63000 [pid 306] mmap(0x7f7c3af65000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6000) = 0x7f7c3af65000 [pid 306] mmap(0x7f7c3af67000, 136, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f7c3af67000 [pid 306] close(3) = 0 [pid 306] openat(AT_FDCWD, "/lib64/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 306] openat(AT_FDCWD, "/usr/lib64/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = 3 [pid 306] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xf0\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1a\x00\x19\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8\x20\x00\x00"..., 832) = 832 [pid 306] fstat(3, {st_mode=S_IFREG|0755, st_size=395120, ...}) = 0 [pid 306] mmap(NULL, 397336, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f7c3aefc000 [pid 306] mmap(0x7f7c3aeff000, 225280, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f7c3aeff000 [pid 306] mmap(0x7f7c3af36000, 155648, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3a000) = 0x7f7c3af36000 [pid 306] mmap(0x7f7c3af5c000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5f000) = 0x7f7c3af5c000 [pid 306] close(3) = 0 [pid 306] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7c3aefa000 [pid 306] arch_prctl(ARCH_SET_FS, 0x7f7c3aefac80) = 0 [pid 306] set_tid_address(0x7f7c3aefaf50) = 306 [pid 306] set_robust_list(0x7f7c3aefaf60, 24) = 0 [pid 306] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 32, 0, 0x53053053) = -1 ENOSYS (Function not implemented) [pid 306] mprotect(0x7f7c3b190000, 16384, PROT_READ) = 0 [pid 306] mprotect(0x7f7c3af5c000, 4096, PROT_READ) = 0 [pid 306] mprotect(0x7f7c3af65000, 4096, PROT_READ) = 0 [pid 306] mprotect(0x7f7c3af96000, 4096, PROT_READ) = 0 [pid 306] mprotect(0x7f7c3afa7000, 4096, PROT_READ) = 0 [pid 306] mprotect(0x7f7c3afc1000, 4096, PROT_READ) = 0 [pid 306] mprotect(0x7f7c3afb0000, 4096, PROT_READ) = 0 [pid 306] mprotect(0x7f7c3b261000, 12288, PROT_READ) = 0 [pid 306] mprotect(0x5642a1093000, 4096, PROT_READ) = 0 [pid 306] mprotect(0x7f7c3b29a000, 8192, PROT_READ) = 0 [pid 306] prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 [pid 306] statfs("/sys/fs/selinux", {f_type=SELINUX_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOSUID|ST_NOEXEC|ST_RELATIME}) = 0 [pid 306] statfs("/sys/fs/selinux", {f_type=SELINUX_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOSUID|ST_NOEXEC|ST_RELATIME}) = 0 [pid 306] getrandom("\xd1\xbf\x3c\xbc\xe4\xb3\x1f\xe8", 8, GRND_NONBLOCK) = 8 [pid 306] brk(NULL) = 0x5642adbbd000 [pid 306] brk(0x5642adbde000) = 0x5642adbde000 [pid 306] access("/etc/selinux/config", F_OK) = 0 [pid 306] getpid() = 306 [pid 306] rt_sigaction(SIGCHLD, {sa_handler=0x7f7c3b1e6287, sa_mask=~[RTMIN RT_1], sa_flags=SA_RESTORER, sa_restorer=0x7f7c3b002180}, NULL, 8) = 0 [pid 306] getppid() = 305 [pid 306] uname({sysname="Linux", nodename="syzkaller", ...}) = 0 [pid 306] newfstatat(AT_FDCWD, "/root", {st_mode=S_IFDIR|0700, st_size=4096, ...}, 0) = 0 [pid 306] newfstatat(AT_FDCWD, ".", {st_mode=S_IFDIR|0700, st_size=4096, ...}, 0) = 0 [pid 306] rt_sigaction(SIGINT, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 306] rt_sigaction(SIGINT, {sa_handler=0x7f7c3b1e6287, sa_mask=~[RTMIN RT_1], sa_flags=SA_RESTORER, sa_restorer=0x7f7c3b002180}, NULL, 8) = 0 [pid 306] rt_sigaction(SIGQUIT, NULL, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, 8) = 0 [pid 306] rt_sigaction(SIGTERM, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 306] newfstatat(AT_FDCWD, "/bin/mkswap", 0x7fff15fbdd68, 0) = -1 ENOENT (No such file or directory) [pid 306] newfstatat(AT_FDCWD, "/sbin/mkswap", {st_mode=S_IFREG|0755, st_size=14256, ...}, 0) = 0 [ 25.905200][ T28] audit: type=1400 audit(1789056792.973:66): avc: denied { mount } for pid=305 comm="syz-executor364" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.928849][ T28] audit: type=1400 audit(1789056792.973:67): avc: denied { setattr } for pid=305 comm="syz-executor364" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [pid 306] execve("/sbin/mkswap", ["mkswap", "./swap-file"], 0x5642adbbd6f0 /* 10 vars */) = 0 [pid 306] brk(NULL) = 0x558b600b0000 [pid 306] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3ff6dd3000 [pid 306] access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) [pid 306] openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 306] openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v3/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 306] newfstatat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v3/", 0x7fffa91fdb70, 0) = -1 ENOENT (No such file or directory) [pid 306] openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v2/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 306] newfstatat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v2/", 0x7fffa91fdb70, 0) = -1 ENOENT (No such file or directory) [pid 306] openat(AT_FDCWD, "/lib64/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = 3 [pid 306] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x38\x13\x0c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x09\x00\x40\x00\x19\x00\x18\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8\xf4\x00\x00"..., 832) = 832 [pid 306] fstat(3, {st_mode=S_IFREG|0644, st_size=792952, ...}) = 0 [pid 306] mmap(NULL, 792856, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f3ff6d11000 [pid 306] mmap(0x7f3ff6d21000, 548864, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x10000) = 0x7f3ff6d21000 [pid 306] mmap(0x7f3ff6da7000, 163840, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x96000) = 0x7f3ff6da7000 [pid 306] mmap(0x7f3ff6dcf000, 16384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xbe000) = 0x7f3ff6dcf000 [pid 306] close(3) = 0 [pid 306] openat(AT_FDCWD, "/lib64/libc.so.6", O_RDONLY|O_CLOEXEC) = 3 [pid 306] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\xf0\xab\x02\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x38\x22\x1d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0e\x00\x40\x00\x3b\x00\x3a\x00\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00"..., 832) = 832 [pid 306] pread64(3, "\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x1c\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00"..., 784, 64) = 784 [pid 306] fstat(3, {st_mode=S_IFREG|0755, st_size=1913080, ...}) = 0 [pid 306] pread64(3, "\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x1c\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00"..., 784, 64) = 784 [pid 306] mmap(NULL, 1965720, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f3ff6b31000 [pid 306] mmap(0x7f3ff6b59000, 1368064, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x28000) = 0x7f3ff6b59000 [pid 306] mmap(0x7f3ff6ca7000, 356352, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x176000) = 0x7f3ff6ca7000 [pid 306] mmap(0x7f3ff6cfe000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1cc000) = 0x7f3ff6cfe000 [pid 306] mmap(0x7f3ff6d04000, 52888, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f3ff6d04000 [pid 306] close(3) = 0 [pid 306] openat(AT_FDCWD, "/lib64/libpam.so.0", O_RDONLY|O_CLOEXEC) = 3 [pid 306] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xf8\xf0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1b\x00\x1a\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe0\x29\x00\x00"..., 832) = 832 [pid 306] fstat(3, {st_mode=S_IFREG|0755, st_size=63416, ...}) = 0 [pid 306] mmap(NULL, 65552, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f3ff6b20000 [pid 306] mmap(0x7f3ff6b23000, 32768, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f3ff6b23000 [pid 306] mmap(0x7f3ff6b2b000, 16384, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7f3ff6b2b000 [pid 306] mmap(0x7f3ff6b2f000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xe000) = 0x7f3ff6b2f000 [pid 306] close(3) = 0 [pid 306] openat(AT_FDCWD, "/lib64/libpam_misc.so.0", O_RDONLY|O_CLOEXEC) = 3 [pid 306] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x00\x51\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1a\x00\x19\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd8\x12\x00\x00"..., 832) = 832 [pid 306] fstat(3, {st_mode=S_IFREG|0755, st_size=22400, ...}) = 0 [pid 306] mmap(NULL, 24656, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f3ff6b19000 [pid 306] mmap(0x7f3ff6b1b000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f3ff6b1b000 [pid 306] mmap(0x7f3ff6b1d000, 4096, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7f3ff6b1d000 [pid 306] mmap(0x7f3ff6b1e000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7f3ff6b1e000 [pid 306] close(3) = 0 [pid 306] openat(AT_FDCWD, "/lib64/libresolv.so.2", O_RDONLY|O_CLOEXEC) = 3 [pid 306] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xa8\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0b\x00\x40\x00\x1d\x00\x1c\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x08\x27\x00\x00"..., 832) = 832 [pid 306] fstat(3, {st_mode=S_IFREG|0755, st_size=59624, ...}) = 0 [pid 306] mmap(NULL, 67720, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f3ff6b08000 [pid 306] mmap(0x7f3ff6b0b000, 32768, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f3ff6b0b000 [pid 306] mmap(0x7f3ff6b13000, 8192, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7f3ff6b13000 [pid 306] mmap(0x7f3ff6b15000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xd000) = 0x7f3ff6b15000 [pid 306] mmap(0x7f3ff6b17000, 6280, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f3ff6b17000 [pid 306] close(3) = 0 [pid 306] openat(AT_FDCWD, "/lib64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 306] openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v3/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 306] newfstatat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v3/", 0x7fffa91fdad0, 0) = -1 ENOENT (No such file or directory) [pid 306] openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v2/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 306] newfstatat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v2/", 0x7fffa91fdad0, 0) = -1 ENOENT (No such file or directory) [pid 306] openat(AT_FDCWD, "/usr/lib64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = 3 [pid 306] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x60\xd1\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0b\x00\x40\x00\x1d\x00\x1c\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x28\x74\x00\x00"..., 832) = 832 [pid 306] fstat(3, {st_mode=S_IFREG|0755, st_size=186528, ...}) = 0 [pid 306] mmap(NULL, 194256, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f3ff6ad8000 [pid 306] mmap(0x7f3ff6ae0000, 114688, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x8000) = 0x7f3ff6ae0000 [pid 306] mmap(0x7f3ff6afc000, 32768, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x24000) = 0x7f3ff6afc000 [pid 306] mmap(0x7f3ff6b04000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2c000) = 0x7f3ff6b04000 [pid 306] mmap(0x7f3ff6b06000, 5840, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f3ff6b06000 [pid 306] close(3) = 0 [pid 306] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3ff6ad6000 [pid 306] openat(AT_FDCWD, "/lib64/libatomic.so.1", O_RDONLY|O_CLOEXEC) = 3 [pid 306] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x30\x71\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1b\x00\x1a\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x78\x1f\x00\x00"..., 832) = 832 [pid 306] fstat(3, {st_mode=S_IFREG|0755, st_size=30704, ...}) = 0 [pid 306] mmap(NULL, 37000, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f3ff6acc000 [pid 306] mmap(0x7f3ff6ace000, 12288, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f3ff6ace000 [pid 306] mmap(0x7f3ff6ad1000, 8192, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5000) = 0x7f3ff6ad1000 [pid 306] mmap(0x7f3ff6ad3000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6000) = 0x7f3ff6ad3000 [pid 306] mmap(0x7f3ff6ad5000, 136, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f3ff6ad5000 [pid 306] close(3) = 0 [pid 306] openat(AT_FDCWD, "/lib64/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 306] openat(AT_FDCWD, "/usr/lib64/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = 3 [pid 306] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xf0\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1a\x00\x19\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8\x20\x00\x00"..., 832) = 832 [pid 306] fstat(3, {st_mode=S_IFREG|0755, st_size=395120, ...}) = 0 [pid 306] mmap(NULL, 397336, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f3ff6a6a000 [pid 306] mmap(0x7f3ff6a6d000, 225280, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f3ff6a6d000 [pid 306] mmap(0x7f3ff6aa4000, 155648, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3a000) = 0x7f3ff6aa4000 [pid 306] mmap(0x7f3ff6aca000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5f000) = 0x7f3ff6aca000 [pid 306] close(3) = 0 [pid 306] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3ff6a68000 [pid 306] arch_prctl(ARCH_SET_FS, 0x7f3ff6a68c80) = 0 [pid 306] set_tid_address(0x7f3ff6a68f50) = 306 [pid 306] set_robust_list(0x7f3ff6a68f60, 24) = 0 [pid 306] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 32, 0, 0x53053053) = -1 ENOSYS (Function not implemented) [pid 306] mprotect(0x7f3ff6cfe000, 16384, PROT_READ) = 0 [pid 306] mprotect(0x7f3ff6aca000, 4096, PROT_READ) = 0 [pid 306] mprotect(0x7f3ff6ad3000, 4096, PROT_READ) = 0 [pid 306] mprotect(0x7f3ff6b04000, 4096, PROT_READ) = 0 [pid 306] mprotect(0x7f3ff6b15000, 4096, PROT_READ) = 0 [pid 306] mprotect(0x7f3ff6b2f000, 4096, PROT_READ) = 0 [pid 306] mprotect(0x7f3ff6b1e000, 4096, PROT_READ) = 0 [pid 306] mprotect(0x7f3ff6dcf000, 12288, PROT_READ) = 0 [pid 306] mprotect(0x558b427cd000, 4096, PROT_READ) = 0 [pid 306] mprotect(0x7f3ff6e08000, 8192, PROT_READ) = 0 [pid 306] prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 [pid 306] statfs("/sys/fs/selinux", {f_type=SELINUX_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOSUID|ST_NOEXEC|ST_RELATIME}) = 0 [pid 306] statfs("/sys/fs/selinux", {f_type=SELINUX_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOSUID|ST_NOEXEC|ST_RELATIME}) = 0 [pid 306] getrandom("\x85\xca\x55\x8b\x34\x90\x8a\x3e", 8, GRND_NONBLOCK) = 8 [pid 306] brk(NULL) = 0x558b600b0000 [pid 306] brk(0x558b600d1000) = 0x558b600d1000 [pid 306] access("/etc/selinux/config", F_OK) = 0 [pid 306] openat(AT_FDCWD, "./swap-file", O_WRONLY) = 3 [pid 306] lseek(3, 0, SEEK_END) = 128000000 [pid 306] lseek(3, 0, SEEK_SET) = 0 [pid 306] fstat(1, {st_mode=S_IFIFO|0600, st_size=0, ...}) = 0 [pid 306] fstat(3, {st_mode=S_IFREG|0600, st_size=128000000, ...}) = 0 [pid 306] fgetxattr(3, "security.selinux", "\x72\x6f\x6f\x74\x3a\x6f\x62\x6a\x65\x63\x74\x5f\x72\x3a\x75\x73\x65\x72\x5f\x68\x6f\x6d\x65\x5f\x74\x00", 255) = 26 [pid 306] access("/var/run/setrans/.setrans-unix", F_OK) = -1 ENOENT (No such file or directory) [pid 306] futex(0x7f3ff6b076b8, FUTEX_WAKE_PRIVATE, 2147483647) = 0 [pid 306] fsetxattr(3, "security.selinux", "\x72\x6f\x6f\x74\x3a\x6f\x62\x6a\x65\x63\x74\x5f\x72\x3a\x73\x77\x61\x70\x66\x69\x6c\x65\x5f\x74\x00", 25, 0) = 0 [pid 306] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1024) = 1024 [pid 306] write(3, "\x01\x00\x00\x00\x11\x7a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 516) = 516 [pid 306] lseek(3, 4086, SEEK_SET) = 4086 [pid 306] write(3, "SWAPSPACE2", 10) = 10 [ 26.012995][ T306] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.021880][ T28] audit: type=1400 audit(1789056793.133:68): avc: denied { relabelto } for pid=306 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [pid 306] fsync(3) = 0 [pid 306] write(1, "Setting up swapspace version 1, size = 127995904 bytes\n", 55) = 55 [pid 306] exit_group(0) = ? Setting up swapspace version 1, size = 127995904 bytes [pid 306] +++ exited with 0 +++ rt_sigaction(SIGINT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f85ac6bbba0}, NULL, 8) = 0 rt_sigaction(SIGQUIT, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f85ac6bbba0}, NULL, 8) = 0 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=306, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- [ 26.048065][ T28] audit: type=1400 audit(1789056793.173:69): avc: denied { write } for pid=306 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.077285][ T28] audit: type=1400 audit(1789056793.193:70): avc: denied { read } for pid=305 comm="syz-executor364" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" swapon("./swap-file", SWAP_FLAG_PREFER|0) = 0 rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGSEGV, {sa_handler=0x7f85ac6b3360, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f85ac6bbba0}, NULL, 8) = 0 rt_sigaction(SIGBUS, {sa_handler=0x7f85ac6b3360, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f85ac6bbba0}, NULL, 8) = 0 getrandom("\xb0\xa4\xf2\x01\x76\xac\x56\x7f", 8, GRND_NONBLOCK) = 8 mkdir("./syzkaller.Oiqp1m", 0700) = 0 chmod("./syzkaller.Oiqp1m", 0777) = 0 chdir("./syzkaller.Oiqp1m") = 0 unshare(CLONE_NEWPID) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55558f1c8750) = 307 ci2-android-6-1-perf/strace-static-x86_64: Process 307 attached [pid 305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 307] set_robust_list(0x55558f1c8760, 24) = 0 [pid 307] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 307] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 307] getppid() = 0 [pid 307] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 307] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 307] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 307] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 307] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 307] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 307] unshare(CLONE_NEWNS) = 0 [ 26.103192][ T28] audit: type=1400 audit(1789056793.193:71): avc: denied { open } for pid=305 comm="syz-executor364" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.103482][ T305] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [pid 307] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 307] unshare(CLONE_NEWIPC) = -1 EINVAL (Invalid argument) [pid 307] unshare(CLONE_NEWCGROUP) = 0 [pid 307] unshare(CLONE_NEWUTS) = 0 [pid 307] unshare(CLONE_SYSVSEM) = 0 [pid 307] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 307] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 307] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 307] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 307] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 307] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 307] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 307] getpid() = 1 [pid 307] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [ 26.989274][ T307] __dump_stack+0x21/0x24 [ 26.993657][ T307] dump_stack_lvl+0x110/0x170 [ 26.998365][ T307] ? __cfi_dump_stack_lvl+0x8/0x8 [ 27.003392][ T307] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 27.008872][ T307] ? debug_smp_processor_id+0x17/0x20 [ 27.014425][ T307] ? kasan_quarantine_put+0x34/0x190 [ 27.019715][ T307] ? stack_map_get_build_id_offset+0x833/0x9b0 [ 27.025873][ T307] print_address_description+0x71/0x200 [ 27.031447][ T307] print_report+0x4a/0x60 [ 27.035800][ T307] kasan_report+0x122/0x150 [ 27.040626][ T307] ? stack_map_get_build_id_offset+0x833/0x9b0 [ 27.046851][ T307] __asan_report_store4_noabort+0x17/0x20 [ 27.052683][ T307] stack_map_get_build_id_offset+0x833/0x9b0 [ 27.058786][ T307] ? _raw_spin_unlock+0x4c/0x70 [ 27.063674][ T307] ? __bpf_get_stackid+0x960/0x960 [ 27.068798][ T307] ? pcpu_freelist_pop+0xac/0xf0 [ 27.073754][ T307] ? __cfi_pcpu_freelist_pop+0x10/0x10 [ 27.079256][ T307] __bpf_get_stackid+0x5ac/0x960 [ 27.084211][ T307] bpf_get_stackid_pe+0x2ee/0x400 [ 27.089270][ T307] bpf_prog_2414a5d5030ea31b+0x21/0x25 [ 27.094756][ T307] bpf_overflow_handler+0x3c7/0x5e0 [ 27.099966][ T307] ? __cfi_bpf_overflow_handler+0x10/0x10 [ 27.105696][ T307] ? __this_cpu_preempt_check+0x13/0x20 [ 27.111254][ T307] ? __perf_event_account_interrupt+0x1a4/0x2c0 [ 27.117530][ T307] __perf_event_overflow+0x458/0x640 [ 27.122849][ T307] perf_swevent_event+0x243/0x440 [ 27.127889][ T307] ? perf_tp_event+0xa20/0xa20 [ 27.132659][ T307] ? __set_page_owner_handle+0x3c7/0x410 [ 27.138289][ T307] ___perf_sw_event+0x3bf/0x500 [ 27.143147][ T307] ? __cfi____perf_sw_event+0x10/0x10 [ 27.148550][ T307] ? stack_trace_save+0xa6/0xf0 [ 27.153411][ T307] __perf_sw_event+0x134/0x270 [ 27.158186][ T307] do_user_addr_fault+0xfe9/0x1030 [ 27.163304][ T307] exc_page_fault+0x51/0xb0 [ 27.167809][ T307] asm_exc_page_fault+0x27/0x30 [ 27.172655][ T307] RIP: 0010:copy_user_short_string+0x24/0x40 [ 27.178639][ T307] Code: 90 90 90 90 90 90 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a 06 <88> 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 01 ca c3 8d 14 ca eb [ 27.199116][ T307] RSP: 0018:ffffc90000e76e98 EFLAGS: 00050206 [ 27.205188][ T307] RAX: ffffffff82692d30 RBX: 0000000000000003 RCX: 0000000000000003 [ 27.213198][ T307] RDX: 0000000000000003 RSI: ffff8881262a066c RDI: 000020000000cf3d [ 27.221181][ T307] RBP: ffffc90000e76ec0 R08: ffff8881262a066e R09: 1ffff11024c540cd [ 27.229182][ T307] R10: dffffc0000000000 R11: ffffed1024c540ce R12: 00007fffffffeffd [ 27.237162][ T307] R13: 0000000000000003 R14: 000020000000cf3d R15: ffff8881262a066c [ 27.245180][ T307] ? _copy_from_user+0x90/0xc0 [ 27.249990][ T307] ? _copy_to_user+0x72/0x90 [ 27.255027][ T307] bpf_verifier_vlog+0x179/0x390 [ 27.259988][ T307] verbose+0x1f0/0x2b0 [ 27.264076][ T307] ? __cfi_verbose+0x10/0x10 [ 27.268672][ T307] ? stack_trace_save+0xa6/0xf0 [ 27.273628][ T307] print_insn_state+0x132/0x1c0 [ 27.278488][ T307] do_check+0x4127/0xf140 [ 27.282848][ T307] ? kasan_set_track+0x4b/0x70 [ 27.287633][ T307] ? kasan_save_alloc_info+0x1f/0x30 [ 27.292922][ T307] ? kmalloc_trace+0x40/0xb0 [ 27.297560][ T307] ? do_check_common+0x17d/0x1970 [ 27.302604][ T307] ? bpf_check+0xa04e/0x10e90 [ 27.307286][ T307] ? __x64_sys_bpf+0x7c/0x90 [ 27.311872][ T307] ? do_syscall_64+0x4c/0xa0 [ 27.316474][ T307] ? init_func_state+0x640/0x640 [ 27.321434][ T307] ? __cfi_verbose+0x10/0x10 [ 27.326286][ T307] ? __cfi_disasm_kfunc_name+0x10/0x10 [ 27.331765][ T307] ? kasan_save_alloc_info+0x1f/0x30 [ 27.337048][ T307] do_check_common+0x11c3/0x1970 [ 27.342002][ T307] bpf_check+0xa04e/0x10e90 [ 27.346525][ T307] ? __cfi_gfp_zone+0x10/0x10 [ 27.351410][ T307] ? __cfi_bpf_check+0x10/0x10 [ 27.356538][ T307] ? 0xffffffffa0000954 [ 27.360712][ T307] ? is_bpf_text_address+0x177/0x190 [ 27.366027][ T307] ? kernel_text_address+0xa0/0xd0 [ 27.371147][ T307] ? __kernel_text_address+0xd/0x30 [ 27.376434][ T307] ? unwind_get_return_address+0x4d/0x90 [ 27.382068][ T307] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 27.388229][ T307] ? arch_stack_walk+0xfc/0x150 [ 27.393357][ T307] ? stack_trace_save+0xa6/0xf0 [ 27.398233][ T307] ? __stack_depot_save+0x36/0x490 [ 27.403378][ T307] ? kasan_set_track+0x60/0x70 [ 27.408146][ T307] ? kasan_set_track+0x4b/0x70 [ 27.412913][ T307] ? kasan_save_alloc_info+0x1f/0x30 [ 27.418228][ T307] ? __kasan_kmalloc+0x95/0xb0 [ 27.423016][ T307] ? kmalloc_trace+0x40/0xb0 [ 27.427617][ T307] ? selinux_bpf_prog_alloc+0x51/0x140 [ 27.433110][ T307] ? security_bpf_prog_alloc+0x73/0xa0 [ 27.438589][ T307] ? bpf_prog_load+0xa03/0x1670 [ 27.443475][ T307] ? __sys_bpf+0x57b/0x850 [ 27.447916][ T307] ? __x64_sys_bpf+0x7c/0x90 [ 27.452538][ T307] ? x64_sys_call+0x488/0x9a0 [ 27.457230][ T307] ? do_syscall_64+0x4c/0xa0 [ 27.461852][ T307] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 27.467957][ T307] ? __kasan_check_write+0x14/0x20 [ 27.473085][ T307] ? _raw_spin_lock+0x94/0xf0 [ 27.477775][ T307] ? __cfi__raw_spin_lock+0x10/0x10 [ 27.482981][ T307] ? _raw_spin_unlock+0x4c/0x70 [ 27.487841][ T307] ? memset+0x35/0x40 [ 27.491820][ T307] ? bpf_obj_name_cpy+0x193/0x1e0 [ 27.496873][ T307] bpf_prog_load+0x10f4/0x1670 [ 27.501663][ T307] ? map_freeze+0x3a0/0x3a0 [ 27.506170][ T307] ? selinux_bpf+0xc7/0xf0 [ 27.510597][ T307] ? security_bpf+0x93/0xb0 [ 27.515115][ T307] __sys_bpf+0x57b/0x850 [ 27.519376][ T307] ? bpf_link_show_fdinfo+0x330/0x330 [ 27.524759][ T307] ? fpregs_restore_userregs+0x128/0x260 [ 27.530414][ T307] __x64_sys_bpf+0x7c/0x90 [ 27.534865][ T307] x64_sys_call+0x488/0x9a0 [ 27.539459][ T307] do_syscall_64+0x4c/0xa0 [ 27.543888][ T307] ? clear_bhb_loop+0x30/0x80 [ 27.548583][ T307] ? clear_bhb_loop+0x30/0x80 [ 27.553530][ T307] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 27.559427][ T307] RIP: 0033:0x7f85ac6da2f9 [ 27.563842][ T307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 27.583456][ T307] RSP: 002b:00007ffd736708a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 27.591884][ T307] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f85ac6da2f9 [ 27.599866][ T307] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 0000000000000005 [ 27.607865][ T307] RBP: 00007f85ac737556 R08: 0000000000000000 R09: 00007f85ac737586 [ 27.615859][ T307] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f85ac7373df [ 27.623831][ T307] R13: 00007f85ac7374d7 R14: 0000000000000001 R15: 0000000000000003 [ 27.631802][ T307] [ 27.634822][ T307] [ 27.637138][ T307] Allocated by task 307: [ 27.641368][ T307] kasan_set_track+0x4b/0x70 [ 27.645994][ T307] kasan_save_alloc_info+0x1f/0x30 [ 27.651109][ T307] __kasan_kmalloc+0x95/0xb0 [ 27.655703][ T307] __kmalloc_node+0xb2/0x1e0 [ 27.660317][ T307] bpf_map_area_alloc+0x4b/0xe0 [ 27.665167][ T307] prealloc_elems_and_freelist+0x8a/0x1e0 [ 27.670883][ T307] stack_map_alloc+0x398/0x520 [ 27.675645][ T307] map_create+0x467/0xcf0 [ 27.679968][ T307] __sys_bpf+0x34e/0x850 [ 27.684220][ T307] __x64_sys_bpf+0x7c/0x90 [ 27.688633][ T307] x64_sys_call+0x488/0x9a0 [ 27.693138][ T307] do_syscall_64+0x4c/0xa0 [ 27.697579][ T307] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 27.703480][ T307] [ 27.705817][ T307] The buggy address belongs to the object at ffff888113904000 [ 27.705817][ T307] which belongs to the cache kmalloc-1k of size 1024 [ 27.719972][ T307] The buggy address is located 816 bytes inside of [ 27.719972][ T307] 1024-byte region [ffff888113904000, ffff888113904400) [ 27.733335][ T307] [ 27.735754][ T307] The buggy address belongs to the physical page: [ 27.742161][ T307] page:ffffea00044e4000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x113900 [ 27.752437][ T307] head:ffffea00044e4000 order:3 compound_mapcount:0 compound_pincount:0 [ 27.760764][ T307] flags: 0x4000000000010200(slab|head|zone=1) [ 27.766931][ T307] raw: 4000000000010200 0000000000000000 dead000000000001 ffff888100043080 [ 27.775527][ T307] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 27.784127][ T307] page dumped because: kasan: bad access detected [ 27.790548][ T307] page_owner tracks the page as allocated [ 27.796292][ T307] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 103, tgid 103 (udevd), ts 5650150438, free_ts 0 [ 27.815923][ T307] post_alloc_hook+0x1f5/0x210 [ 27.820704][ T307] prep_new_page+0x1c/0x110 [ 27.825213][ T307] get_page_from_freelist+0x2ca9/0x2d20 [ 27.830765][ T307] __alloc_pages+0x1fa/0x610 [ 27.835362][ T307] alloc_slab_page+0x6e/0xf0 [ 27.839953][ T307] new_slab+0x98/0x3e0 [ 27.844021][ T307] ___slab_alloc+0x70f/0xb70 [ 27.848623][ T307] __slab_alloc+0x5e/0xa0 [ 27.852959][ T307] __kmem_cache_alloc_node+0x204/0x2d0 [ 27.858438][ T307] __kmalloc_node_track_caller+0xa1/0x1e0 [ 27.864152][ T307] __alloc_skb+0x226/0x4a0 [ 27.868588][ T307] netlink_sendmsg+0x635/0xbd0 [ 27.873559][ T307] ____sys_sendmsg+0x5fb/0x9c0 [ 27.878327][ T307] ___sys_sendmsg+0x2a2/0x360 [ 27.883177][ T307] __x64_sys_sendmsg+0x20d/0x2e0 [ 27.888117][ T307] x64_sys_call+0x171/0x9a0 [ 27.893012][ T307] page_owner free stack trace missing [ 27.898402][ T307] [ 27.900728][ T307] Memory state around the buggy address: [ 27.906353][ T307] ffff888113904200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 27.914506][ T307] ffff888113904280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [pid 307] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_TRACEPOINT, insn_cnt=3, insns=0x200000000b00, license="GPL", log_level=5, log_size=594, log_buf="", kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72) = 6 [pid 307] close(3) = 0 [pid 307] close(4) = 0 [pid 307] close(5) = 0 [pid 307] close(6) = 0 [pid 307] close(7) = -1 EBADF (Bad file descriptor) [pid 307] close(8) = -1 EBADF (Bad file descriptor) [pid 307] close(9) = -1 EBADF (Bad file descriptor) [pid 307] close(10) = -1 EBADF (Bad file descriptor) [pid 307] close(11) = -1 EBADF (Bad file descriptor) [pid 307] close(12) = -1 EBADF (Bad file descriptor) [pid 307] close(13) = -1 EBADF (Bad file descriptor) [pid 307] close(14) = -1 EBADF (Bad file descriptor) [pid 307] close(15) = -1 EBADF (Bad file descriptor) [pid 307] close(16) = -1 EBADF (Bad file descriptor) [pid 307] close(17) = -1 EBADF (Bad file descriptor) [pid 307] close(18) = -1 EBADF (Bad file descriptor) [pid 307] close(19) = -1 EBADF (Bad file descriptor) [pid 307] close(20) = -1 EBADF (Bad file descriptor) [pid 307] close(21) = -1 EBADF (Bad file descriptor) [pid 307] close(22) = -1 EBADF (Bad file descriptor) [pid 307] close(23) = -1 EBADF (Bad file descriptor) [pid 307] close(24) = -1 EBADF (Bad file descriptor) [pid 307] close(25) = -1 EBADF (Bad file descriptor) [pid 307] close(26) = -1 EBADF (Bad file descriptor) [pid 307] close(27) = -1 EBADF (Bad file descriptor) [pid 307] close(28) = -1 EBADF (Bad file descriptor) [pid 307] close(29) = -1 EBADF (Bad file descriptor) [pid 307] exit_group(1) = ? [ 27.922658][ T307] >ffff888113904300: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 27.930797][ T307] ^ [ 27.936425][ T307] ffff888113904380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 27.944489][ T307] ffff888113904400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 27.952561][ T307] ================================================================== [ 27.960885][ T307] Disabling lock debugging due to kernel taint [pid 307] +++ exited with 1 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=307, si_uid=0, si_status=1, si_utime=0, si_stime=39 /* 0.39 s */} --- exit_group(0) = ? +++ exited with 0 +++