ci-upstream-kasan-gce-selinux-root/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci-upstream-kasan-gce-selinux-root/syz-executor3491563635

<...>
Warning: Permanently added '10.128.1.10' (ED25519) to the list of known hosts.
execve("ci-upstream-kasan-gce-selinux-root/syz-executor3491563635", ["ci-upstream-kasan-gce-selinux-root/syz-executor3491563635"], 0x7fff2c6ef1d0 /* 10 vars */) = 0
brk(NULL)                               = 0x55559352e000
brk(0x55559352ee40)                     = 0x55559352ee40
arch_prctl(ARCH_SET_FS, 0x55559352e4c0) = 0
set_tid_address(0x55559352e790)         = 5610
set_robust_list(0x55559352e7a0, 24)     = 0
rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci-upstream-kasan-gce-selinux-root/syz-executor3491563635", 4096) = 63
getrandom("\x27\x60\xd4\x99\x0e\x5e\x7e\x41", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x55559352ee40
brk(0x55559354fe40)                     = 0x55559354fe40
brk(0x555593550000)                     = 0x555593550000
mprotect(0x7f127acc0000, 20480, PROT_READ) = 0
mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000
mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000
mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000
rt_sigprocmask(SIG_BLOCK, ~[], [], 8)   = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-kasan-gce-selinux-root/strace-static-x86_64: Process 5611 attached
, child_tidptr=0x55559352e790) = 5611
[pid  5610] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5610] openat(AT_FDCWD, "/sys/kernel/debug/x86/nmi_longest_ns", O_WRONLY|O_CLOEXEC) = 3
[pid  5611] set_robust_list(0x55559352e7a0, 24 <unfinished ...>
[pid  5610] write(3, "10000000000", 11 <unfinished ...>
[pid  5611] <... set_robust_list resumed>) = 0
[pid  5610] <... write resumed>)        = 11
[pid  5610] close(3)                    = 0
[pid  5610] openat(AT_FDCWD, "/proc/sys/kernel/hung_task_check_interval_secs", O_WRONLY|O_CLOEXEC) = 3
[pid  5610] write(3, "20", 2 <unfinished ...>
[pid  5611] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid  5610] <... write resumed>)        = 2
[pid  5611] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid  5610] close(3)                    = 0
[pid  5610] openat(AT_FDCWD, "/proc/sys/net/core/bpf_jit_kallsyms", O_WRONLY|O_CLOEXEC) = 3
[pid  5610] write(3, "1", 1)            = 1
[pid  5610] close(3)                    = 0
[pid  5610] openat(AT_FDCWD, "/proc/sys/net/core/bpf_jit_harden", O_WRONLY|O_CLOEXEC) = 3
[pid  5610] write(3, "0", 1)            = 1
[pid  5610] close(3)                    = 0
[pid  5610] openat(AT_FDCWD, "/proc/sys/kernel/kptr_restrict", O_WRONLY|O_CLOEXEC) = 3
[pid  5610] write(3, "0", 1)            = 1
[pid  5610] close(3)                    = 0
[pid  5610] openat(AT_FDCWD, "/proc/sys/kernel/softlockup_all_cpu_backtrace", O_WRONLY|O_CLOEXEC) = 3
[pid  5610] write(3, "1", 1)            = 1
[pid  5610] close(3)                    = 0
[pid  5610] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3
[pid  5610] write(3, "100", 3)          = 3
[pid  5610] close(3)                    = 0
[pid  5610] openat(AT_FDCWD, "/proc/sys/vm/oom_dump_tasks", O_WRONLY|O_CLOEXEC) = 3
[pid  5610] write(3, "0", 1)            = 1
[pid  5610] close(3)                    = 0
[pid  5610] openat(AT_FDCWD, "/proc/sys/debug/exception-trace", O_WRONLY|O_CLOEXEC) = 3
[pid  5610] write(3, "0", 1)            = 1
[pid  5610] close(3)                    = 0
[pid  5610] openat(AT_FDCWD, "/proc/sys/kernel/printk", O_WRONLY|O_CLOEXEC) = 3
[pid  5610] write(3, "7 4 1 3", 7)      = 7
[pid  5610] close(3)                    = 0
[pid  5610] openat(AT_FDCWD, "/proc/sys/kernel/keys/gc_delay", O_WRONLY|O_CLOEXEC) = 3
[pid  5610] write(3, "1", 1)            = 1
[pid  5610] close(3)                    = 0
[pid  5610] openat(AT_FDCWD, "/proc/sys/vm/oom_kill_allocating_task", O_WRONLY|O_CLOEXEC) = 3
[pid  5610] write(3, "1", 1)            = 1
[pid  5610] close(3)                    = 0
[pid  5610] openat(AT_FDCWD, "/sys/kernel/debug/failslab/task-filter", O_WRONLY|O_CLOEXEC) = 3
[pid  5610] write(3, "Y", 1)            = 1
[pid  5610] close(3)                    = 0
[pid  5610] openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/task-filter", O_WRONLY|O_CLOEXEC) = 3
[pid  5610] write(3, "Y", 1)            = 1
[pid  5610] close(3)                    = 0
[pid  5610] openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/task-filter", O_WRONLY|O_CLOEXEC) = 3
[pid  5610] write(3, "Y", 1)            = 1
[pid  5610] close(3)                    = 0
[pid  5610] openat(AT_FDCWD, "/sys/kernel/debug/fail_usercopy/task-filter", O_WRONLY|O_CLOEXEC) = 3
[pid  5610] write(3, "Y", 1)            = 1
[pid  5610] close(3)                    = 0
[pid  5610] openat(AT_FDCWD, "/sys/kernel/debug/fail_make_request/task-filter", O_WRONLY|O_CLOEXEC) = 3
[pid  5610] write(3, "Y", 1)            = 1
[pid  5610] close(3)                    = 0
[pid  5610] openat(AT_FDCWD, "/sys/kernel/debug/fail_io_timeout/task-filter", O_WRONLY|O_CLOEXEC) = 3
[pid  5610] write(3, "Y", 1)            = 1
[pid  5610] close(3)                    = 0
[pid  5610] openat(AT_FDCWD, "/sys/kernel/debug/fail_iommufd/task-filter", O_WRONLY|O_CLOEXEC) = 3
[pid  5610] write(3, "Y", 1)            = 1
[pid  5610] close(3)                    = 0
[pid  5610] openat(AT_FDCWD, "/proc/sys/kernel/ctrl-alt-del", O_WRONLY|O_CLOEXEC) = 3
[pid  5610] write(3, "0", 1)            = 1
[pid  5610] close(3)                    = 0
[pid  5610] openat(AT_FDCWD, "/proc/sys/kernel/cad_pid", O_WRONLY|O_CLOEXEC) = 3
[pid  5610] write(3, "5611", 4)         = 4
[pid  5610] close(3)                    = 0
[pid  5610] kill(5611, SIGKILL)         = 0
[pid  5611] +++ killed by SIGKILL +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5611, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=0} ---
mount(NULL, "/proc/sys/fs/binfmt_misc", "binfmt_misc", 0, NULL) = -1 EBUSY (Device or resource busy)
[   63.846712][   T31] kauditd_printk_skb: 5 callbacks suppressed
[   63.846729][   T31] audit: type=1400 audit(1790170187.758:129): avc:  denied  { execmem } for  pid=5610 comm="syz-executor349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
openat(AT_FDCWD, "/proc/sys/fs/binfmt_misc/register", O_WRONLY|O_CLOEXEC) = 3
write(3, "\x3a\x73\x79\x7a\x30\x3a\x4d\x3a\x30\x3a\x01\x3a\x3a\x2e\x2f\x66\x69\x6c\x65\x30\x3a", 21) = 21
close(3)                                = 0
openat(AT_FDCWD, "/proc/sys/fs/binfmt_misc/register", O_WRONLY|O_CLOEXEC) = 3
write(3, "\x3a\x73\x79\x7a\x31\x3a\x4d\x3a\x31\x3a\x02\x3a\x3a\x2f\x70\x72\x6f\x63\x2f\x74\x68\x72\x65\x61\x64\x2d\x73\x65\x6c\x66\x2f\x63\x77\x64\x2f\x66\x69\x6c\x65\x30\x3a\x50\x4f\x43", 44) = 44
close(3)                                = 0
socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3
socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4
sendto(4, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36
recvfrom(4, [{nlmsg_len=864, nlmsg_type=nlctrl, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=5610}, {cmd=CTRL_CMD_NEWFAMILY, version=2}, [[{nla_len=13, nla_type=CTRL_ATTR_FAMILY_NAME}, "\x6e\x6c\x38\x30\x32\x31\x35\x34\x00"...], [{nla_len=6, nla_type=CTRL_ATTR_FAMILY_ID}, 0x1e], [{nla_len=8, nla_type=CTRL_ATTR_VERSION}, 1], [{nla_len=8, nla_type=CTRL_ATTR_HDRSIZE}, 0], [{nla_len=8, nla_type=CTRL_ATTR_MAXATTR}, 48], [{nla_len=744, nla_type=CTRL_ATTR_OPS}, [[{nla_len=20, nla_type=0x1}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, CTRL_CMD_NEWFAMILY], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_CMD_CAP_DO|GENL_CMD_CAP_DUMP|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x2}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, CTRL_CMD_DELOPS], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_CMD_CAP_DO|GENL_CMD_CAP_DUMP|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x3}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, CTRL_CMD_NEWMCAST_GRP], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x4}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, CTRL_CMD_DELMCAST_GRP], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x5}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, CTRL_CMD_GETMCAST_GRP], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x6}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0xd /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x7}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0xe /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x8}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0xc /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x9}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x14 /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0xa}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, CTRL_CMD_GETPOLICY], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0xb}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0xb /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0xc}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x10 /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0xd}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x11 /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0xe}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0xf /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0xf}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x12 /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x10}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x13 /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x11}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x23 /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x12}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x24 /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x13}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x26 /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x14}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x27 /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x15}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x28 /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x16}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x29 /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x17}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x2a /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x18}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x2b /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_CMD_CAP_DUMP|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x19}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x15 /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x1a}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x16 /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DUMP|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x1b}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x17 /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x1c}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x18 /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x1d}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x19 /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DUMP|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x1e}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x1a /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x1f}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x1b /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x20}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x1c /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DUMP|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x21}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x1d /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x22}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x1e /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x23}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x1f /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DUMP|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x24}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x20 /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]], [{nla_len=20, nla_type=0x25}, [[{nla_len=8, nla_type=CTRL_ATTR_OP_ID}, 0x21 /* CTRL_CMD_??? */], [{nla_len=8, nla_type=CTRL_ATTR_OP_FLAGS}, GENL_ADMIN_PERM|GENL_CMD_CAP_DO|GENL_CMD_CAP_HASPOL]]]]], [{nla_len=52, nla_type=CTRL_ATTR_MCAST_GROUPS}, [[{nla_len=24, nla_type=0x1}, [[{nla_len=8, nla_type=CTRL_ATTR_MCAST_GRP_ID}, 0xc], [{nla_len=11, nla_type=CTRL_ATTR_MCAST_GRP_NAME}, "\x63\x6f\x6e\x66\x69\x67\x00"...]]], [{nla_len=24, nla_type=0x2}, [[{nla_len=8, nla_type=CTRL_ATTR_MCAST_GRP_ID}, 0xd], [{nla_len=9, nla_type=CTRL_ATTR_MCAST_GRP_NAME}, "\x73\x63\x61\x6e\x00"...]]]]]]], 4096, 0, NULL, NULL) = 864
[   63.925785][   T31] audit: type=1400 audit(1790170187.828:130): avc:  denied  { mounton } for  pid=5610 comm="syz-executor349" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   63.926689][   T31] audit: type=1400 audit(1790170187.838:131): avc:  denied  { mount } for  pid=5610 comm="syz-executor349" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5610}, {error=0, msg={nlmsg_len=36, nlmsg_type=nlctrl, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36
socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5
ioctl(5, SIOCGIFINDEX, {ifr_name="wpan0", ifr_ifindex=11}) = 0
close(5)                                = 0
sendto(4, [{nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, {cmd=0xb, version=0}, [[{nla_len=8, nla_type=0x3}, "\x0b\x00\x00\x00"], [{nla_len=6, nla_type=0xa}, "\xa0\xaa"]]], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36
[   63.998391][   T31] audit: type=1400 audit(1790170187.908:132): avc:  denied  { create } for  pid=5610 comm="syz-executor349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   64.001122][   T31] audit: type=1400 audit(1790170187.908:133): avc:  denied  { write } for  pid=5610 comm="syz-executor349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5610}, {error=0, msg={nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36
socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5
ioctl(5, SIOCGIFINDEX, {ifr_name="wpan0", ifr_ifindex=11}) = 0
close(5)                                = 0
sendto(3, [{nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x0c\x00\x01\x00\x02\x00\xaa\xaa\xaa\xaa\xaa\xaa"], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 44
recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5610}, {error=0, msg={nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36
sendto(3, [{nlmsg_len=84, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|NLM_F_EXCL|NLM_F_CREATE, nlmsg_seq=0, nlmsg_pid=0}, {ifi_family=AF_UNSPEC, ifi_type=ARPHRD_NETROM, ifi_index=0, ifi_flags=0, ifi_change=0}, [[{nla_len=11, nla_type=IFLA_IFNAME}, "lowpan0"...], [{nla_len=8, nla_type=IFLA_NUM_TX_QUEUES}, 2], [{nla_len=8, nla_type=IFLA_NUM_RX_QUEUES}, 2], [{nla_len=16, nla_type=IFLA_LINKINFO}, [{nla_len=10, nla_type=IFLA_INFO_KIND}, "lowpan"...]], [{nla_len=8, nla_type=IFLA_LINK}, 11]]], 84, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 84
recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5610}, {error=0, msg={nlmsg_len=84, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|NLM_F_EXCL|NLM_F_CREATE, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36
socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5
ioctl(5, SIOCGIFINDEX, {ifr_name="wpan1", ifr_ifindex=12}) = 0
close(5)                                = 0
sendto(4, [{nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, {cmd=0xb, version=0}, [[{nla_len=8, nla_type=0x3}, "\x0c\x00\x00\x00"], [{nla_len=6, nla_type=0xa}, "\xa1\xaa"]]], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36
recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5610}, {error=0, msg={nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36
socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5
ioctl(5, SIOCGIFINDEX, {ifr_name="wpan1", ifr_ifindex=12}) = 0
[   64.001581][   T31] audit: type=1400 audit(1790170187.908:134): avc:  denied  { read } for  pid=5610 comm="syz-executor349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
close(5)                                = 0
sendto(3, [{nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, {ifi_family=AF_UNSPEC, ifi_type=ARPHRD_NETROM, ifi_index=if_nametoindex("wpan1"), ifi_flags=IFF_UP, ifi_change=0x1}, [{nla_len=12, nla_type=IFLA_ADDRESS}, 02:01:aa:aa:aa:aa:aa]], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 44
recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5610}, {error=0, msg={nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36
close(3)                                = 0
close(4)                                = 0
swapoff("./swap-file")                  = -1 ENOENT (No such file or directory)
unlink("./swap-file")                   = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "./swap-file", O_WRONLY|O_CREAT|O_CLOEXEC, 0600) = 3
fallocate(3, FALLOC_FL_ZERO_RANGE, 0, 128000000) = 0
close(3)                                = 0
rt_sigaction(SIGINT, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f127ac00f20}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGQUIT, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f127ac00f20}, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
mmap(NULL, 36864, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f127abe0000
rt_sigprocmask(SIG_BLOCK, ~[], [CHLD], 8) = 0
clone3({flags=CLONE_VM|CLONE_VFORK|CLONE_CLEAR_SIGHAND, exit_signal=SIGCHLD, stack=0x7f127abe0000, stack_size=0x9000}, 88ci-upstream-kasan-gce-selinux-root/strace-static-x86_64: Process 5614 attached
 <unfinished ...>
[pid  5614] rt_sigprocmask(SIG_BLOCK, NULL, ~[KILL STOP], 8) = 0
[pid  5614] rt_sigaction(SIGINT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f127ac00f20}, NULL, 8) = 0
[pid  5614] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5614] execve("/bin/sh", ["sh", "-c", "--", "mkswap ./swap-file"], 0x7ffed708aef8 /* 10 vars */ <unfinished ...>
[pid  5610] <... clone3 resumed>)       = 5614
[pid  5610] munmap(0x7f127abe0000, 36864) = 0
[pid  5614] <... execve resumed>)       = 0
[pid  5610] rt_sigprocmask(SIG_SETMASK, [CHLD] <unfinished ...>
[pid  5614] brk(NULL <unfinished ...>
[pid  5610] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid  5614] <... brk resumed>)          = 0x55f33048b000
[pid  5614] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f876ff53000
[pid  5614] access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
[pid  5614] openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid  5614] openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v4/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid  5614] newfstatat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v4/", 0x7fff75bfdfc0, 0) = -1 ENOENT (No such file or directory)
[pid  5614] openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v3/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid  5614] newfstatat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v3/", 0x7fff75bfdfc0, 0) = -1 ENOENT (No such file or directory)
[pid  5614] openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v2/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid  5614] newfstatat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v2/", 0x7fff75bfdfc0, 0) = -1 ENOENT (No such file or directory)
[pid  5614] openat(AT_FDCWD, "/lib64/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = 3
[pid  5614] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x38\x13\x0c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x09\x00\x40\x00\x19\x00\x18\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8\xf4\x00\x00"..., 832) = 832
[pid  5614] fstat(3, {st_mode=S_IFREG|0644, st_size=792952, ...}) = 0
[pid  5614] mmap(NULL, 792856, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f876fe91000
[pid  5614] mmap(0x7f876fea1000, 548864, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x10000) = 0x7f876fea1000
[pid  5614] mmap(0x7f876ff27000, 163840, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x96000) = 0x7f876ff27000
[pid  5614] mmap(0x7f876ff4f000, 16384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xbe000) = 0x7f876ff4f000
[pid  5614] close(3)                    = 0
[pid  5614] openat(AT_FDCWD, "/lib64/libc.so.6", O_RDONLY|O_CLOEXEC) = 3
[pid  5614] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\xf0\xab\x02\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x38\x22\x1d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0e\x00\x40\x00\x3b\x00\x3a\x00\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00"..., 832) = 832
[pid  5614] pread64(3, "\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x1c\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00"..., 784, 64) = 784
[pid  5614] fstat(3, {st_mode=S_IFREG|0755, st_size=1913080, ...}) = 0
[pid  5614] pread64(3, "\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x1c\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00"..., 784, 64) = 784
[pid  5614] mmap(NULL, 1965720, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f876fcb1000
[pid  5614] mmap(0x7f876fcd9000, 1368064, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x28000) = 0x7f876fcd9000
[pid  5614] mmap(0x7f876fe27000, 356352, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x176000) = 0x7f876fe27000
[pid  5614] mmap(0x7f876fe7e000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1cc000) = 0x7f876fe7e000
[pid  5614] mmap(0x7f876fe84000, 52888, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f876fe84000
[pid  5614] close(3)                    = 0
[pid  5614] openat(AT_FDCWD, "/lib64/libpam.so.0", O_RDONLY|O_CLOEXEC) = 3
[pid  5614] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xf8\xf0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1b\x00\x1a\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe0\x29\x00\x00"..., 832) = 832
[pid  5614] fstat(3, {st_mode=S_IFREG|0755, st_size=63416, ...}) = 0
[pid  5614] mmap(NULL, 65552, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f876fca0000
[pid  5614] mmap(0x7f876fca3000, 32768, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f876fca3000
[pid  5614] mmap(0x7f876fcab000, 16384, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7f876fcab000
[pid  5614] mmap(0x7f876fcaf000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xe000) = 0x7f876fcaf000
[pid  5614] close(3)                    = 0
[pid  5614] openat(AT_FDCWD, "/lib64/libpam_misc.so.0", O_RDONLY|O_CLOEXEC) = 3
[pid  5614] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x00\x51\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1a\x00\x19\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd8\x12\x00\x00"..., 832) = 832
[pid  5614] fstat(3, {st_mode=S_IFREG|0755, st_size=22400, ...}) = 0
[pid  5614] mmap(NULL, 24656, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f876fc99000
[pid  5614] mmap(0x7f876fc9b000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f876fc9b000
[pid  5614] mmap(0x7f876fc9d000, 4096, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7f876fc9d000
[pid  5614] mmap(0x7f876fc9e000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7f876fc9e000
[pid  5614] close(3)                    = 0
[pid  5614] openat(AT_FDCWD, "/lib64/libresolv.so.2", O_RDONLY|O_CLOEXEC) = 3
[pid  5614] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xa8\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0b\x00\x40\x00\x1d\x00\x1c\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x08\x27\x00\x00"..., 832) = 832
[pid  5614] fstat(3, {st_mode=S_IFREG|0755, st_size=59624, ...}) = 0
[pid  5614] mmap(NULL, 67720, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f876fc88000
[pid  5614] mmap(0x7f876fc8b000, 32768, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f876fc8b000
[pid  5614] mmap(0x7f876fc93000, 8192, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7f876fc93000
[pid  5614] mmap(0x7f876fc95000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xd000) = 0x7f876fc95000
[pid  5614] mmap(0x7f876fc97000, 6280, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f876fc97000
[pid  5614] close(3)                    = 0
[pid  5614] openat(AT_FDCWD, "/lib64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid  5614] openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v4/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid  5614] newfstatat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v4/", 0x7fff75bfdf20, 0) = -1 ENOENT (No such file or directory)
[pid  5614] openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v3/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid  5614] newfstatat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v3/", 0x7fff75bfdf20, 0) = -1 ENOENT (No such file or directory)
[pid  5614] openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v2/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid  5614] newfstatat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v2/", 0x7fff75bfdf20, 0) = -1 ENOENT (No such file or directory)
[pid  5614] openat(AT_FDCWD, "/usr/lib64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = 3
[pid  5614] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x60\xd1\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0b\x00\x40\x00\x1d\x00\x1c\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x28\x74\x00\x00"..., 832) = 832
[pid  5614] fstat(3, {st_mode=S_IFREG|0755, st_size=186528, ...}) = 0
[pid  5614] mmap(NULL, 194256, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f876fc58000
[pid  5614] mmap(0x7f876fc60000, 114688, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x8000) = 0x7f876fc60000
[pid  5614] mmap(0x7f876fc7c000, 32768, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x24000) = 0x7f876fc7c000
[pid  5614] mmap(0x7f876fc84000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2c000) = 0x7f876fc84000
[pid  5614] mmap(0x7f876fc86000, 5840, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f876fc86000
[pid  5614] close(3)                    = 0
[pid  5614] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f876fc56000
[pid  5614] openat(AT_FDCWD, "/lib64/libatomic.so.1", O_RDONLY|O_CLOEXEC) = 3
[pid  5614] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x30\x71\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1b\x00\x1a\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x78\x1f\x00\x00"..., 832) = 832
[pid  5614] fstat(3, {st_mode=S_IFREG|0755, st_size=30704, ...}) = 0
[pid  5614] mmap(NULL, 37000, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f876fc4c000
[pid  5614] mmap(0x7f876fc4e000, 12288, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f876fc4e000
[pid  5614] mmap(0x7f876fc51000, 8192, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5000) = 0x7f876fc51000
[pid  5614] mmap(0x7f876fc53000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6000) = 0x7f876fc53000
[pid  5614] mmap(0x7f876fc55000, 136, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f876fc55000
[pid  5614] close(3)                    = 0
[pid  5614] openat(AT_FDCWD, "/lib64/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid  5614] openat(AT_FDCWD, "/usr/lib64/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = 3
[pid  5614] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xf0\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1a\x00\x19\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8\x20\x00\x00"..., 832) = 832
[pid  5614] fstat(3, {st_mode=S_IFREG|0755, st_size=395120, ...}) = 0
[pid  5614] mmap(NULL, 397336, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f876fbea000
[pid  5614] mmap(0x7f876fbed000, 225280, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f876fbed000
[pid  5614] mmap(0x7f876fc24000, 155648, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3a000) = 0x7f876fc24000
[pid  5614] mmap(0x7f876fc4a000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5f000) = 0x7f876fc4a000
[pid  5614] close(3)                    = 0
[pid  5614] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f876fbe8000
[pid  5614] arch_prctl(ARCH_SET_FS, 0x7f876fbe8c80) = 0
[pid  5614] set_tid_address(0x7f876fbe8f50) = 5614
[pid  5614] set_robust_list(0x7f876fbe8f60, 24) = 0
[pid  5614] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0
[pid  5614] mprotect(0x7f876fe7e000, 16384, PROT_READ) = 0
[pid  5614] mprotect(0x7f876fc4a000, 4096, PROT_READ) = 0
[pid  5614] mprotect(0x7f876fc53000, 4096, PROT_READ) = 0
[pid  5614] mprotect(0x7f876fc84000, 4096, PROT_READ) = 0
[pid  5614] mprotect(0x7f876fc95000, 4096, PROT_READ) = 0
[pid  5614] mprotect(0x7f876fcaf000, 4096, PROT_READ) = 0
[pid  5614] mprotect(0x7f876fc9e000, 4096, PROT_READ) = 0
[pid  5614] mprotect(0x7f876ff4f000, 12288, PROT_READ) = 0
[pid  5614] mprotect(0x55f320290000, 4096, PROT_READ) = 0
[pid  5614] mprotect(0x7f876ff90000, 8192, PROT_READ) = 0
[pid  5614] prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
[pid  5614] statfs("/sys/fs/selinux", {f_type=SELINUX_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0x1a, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOSUID|ST_NOEXEC|ST_RELATIME}) = 0
[pid  5614] statfs("/sys/fs/selinux", {f_type=SELINUX_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0x1a, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOSUID|ST_NOEXEC|ST_RELATIME}) = 0
[pid  5614] getrandom("\x27\xa1\xe2\x66\x2e\x60\x66\x8f", 8, GRND_NONBLOCK) = 8
[pid  5614] brk(NULL)                   = 0x55f33048b000
[pid  5614] brk(0x55f3304ac000)         = 0x55f3304ac000
[pid  5614] access("/etc/selinux/config", F_OK) = 0
[pid  5614] getpid()                    = 5614
[pid  5614] rt_sigaction(SIGCHLD, {sa_handler=0x7f876fed4287, sa_mask=~[RTMIN RT_1], sa_flags=SA_RESTORER, sa_restorer=0x7f876fcf0180}, NULL, 8) = 0
[pid  5614] getppid()                   = 5610
[pid  5614] uname({sysname="Linux", nodename="syzkaller", ...}) = 0
[pid  5614] newfstatat(AT_FDCWD, "/root", {st_mode=S_IFDIR|0700, st_size=4096, ...}, 0) = 0
[pid  5614] newfstatat(AT_FDCWD, ".", {st_mode=S_IFDIR|0700, st_size=4096, ...}, 0) = 0
[pid  5614] rt_sigaction(SIGINT, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
[pid  5614] rt_sigaction(SIGINT, {sa_handler=0x7f876fed4287, sa_mask=~[RTMIN RT_1], sa_flags=SA_RESTORER, sa_restorer=0x7f876fcf0180}, NULL, 8) = 0
[pid  5614] rt_sigaction(SIGQUIT, NULL, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, 8) = 0
[pid  5614] rt_sigaction(SIGTERM, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
[pid  5614] newfstatat(AT_FDCWD, "/bin/mkswap", 0x7fff75bfe8b8, 0) = -1 ENOENT (No such file or directory)
[pid  5614] newfstatat(AT_FDCWD, "/sbin/mkswap", {st_mode=S_IFREG|0755, st_size=14256, ...}, 0) = 0
[pid  5614] execve("/sbin/mkswap", ["mkswap", "./swap-file"], 0x55f33048b6f0 /* 10 vars */) = 0
[pid  5614] brk(NULL)                   = 0x55f00f274000
[pid  5614] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f87e2b6c000
[pid  5614] access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
[pid  5614] openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid  5614] openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v4/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid  5614] newfstatat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v4/", 0x7ffd75b19bc0, 0) = -1 ENOENT (No such file or directory)
[pid  5614] openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v3/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid  5614] newfstatat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v3/", 0x7ffd75b19bc0, 0) = -1 ENOENT (No such file or directory)
[pid  5614] openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v2/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid  5614] newfstatat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v2/", 0x7ffd75b19bc0, 0) = -1 ENOENT (No such file or directory)
[pid  5614] openat(AT_FDCWD, "/lib64/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = 3
[pid  5614] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x38\x13\x0c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x09\x00\x40\x00\x19\x00\x18\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8\xf4\x00\x00"..., 832) = 832
[pid  5614] fstat(3, {st_mode=S_IFREG|0644, st_size=792952, ...}) = 0
[pid  5614] mmap(NULL, 792856, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f87e2aaa000
[pid  5614] mmap(0x7f87e2aba000, 548864, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x10000) = 0x7f87e2aba000
[pid  5614] mmap(0x7f87e2b40000, 163840, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x96000) = 0x7f87e2b40000
[pid  5614] mmap(0x7f87e2b68000, 16384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xbe000) = 0x7f87e2b68000
[pid  5614] close(3)                    = 0
[pid  5614] openat(AT_FDCWD, "/lib64/libc.so.6", O_RDONLY|O_CLOEXEC) = 3
[pid  5614] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\xf0\xab\x02\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x38\x22\x1d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0e\x00\x40\x00\x3b\x00\x3a\x00\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00"..., 832) = 832
[pid  5614] pread64(3, "\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x1c\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00"..., 784, 64) = 784
[pid  5614] fstat(3, {st_mode=S_IFREG|0755, st_size=1913080, ...}) = 0
[pid  5614] pread64(3, "\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x1c\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00"..., 784, 64) = 784
[pid  5614] mmap(NULL, 1965720, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f87e28ca000
[pid  5614] mmap(0x7f87e28f2000, 1368064, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x28000) = 0x7f87e28f2000
[pid  5614] mmap(0x7f87e2a40000, 356352, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x176000) = 0x7f87e2a40000
[pid  5614] mmap(0x7f87e2a97000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1cc000) = 0x7f87e2a97000
[pid  5614] mmap(0x7f87e2a9d000, 52888, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f87e2a9d000
[pid  5614] close(3)                    = 0
[pid  5614] openat(AT_FDCWD, "/lib64/libpam.so.0", O_RDONLY|O_CLOEXEC) = 3
[pid  5614] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xf8\xf0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1b\x00\x1a\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe0\x29\x00\x00"..., 832) = 832
[pid  5614] fstat(3, {st_mode=S_IFREG|0755, st_size=63416, ...}) = 0
[pid  5614] mmap(NULL, 65552, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f87e28b9000
[pid  5614] mmap(0x7f87e28bc000, 32768, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f87e28bc000
[pid  5614] mmap(0x7f87e28c4000, 16384, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7f87e28c4000
[pid  5614] mmap(0x7f87e28c8000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xe000) = 0x7f87e28c8000
[pid  5614] close(3)                    = 0
[pid  5614] openat(AT_FDCWD, "/lib64/libpam_misc.so.0", O_RDONLY|O_CLOEXEC) = 3
[pid  5614] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x00\x51\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1a\x00\x19\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd8\x12\x00\x00"..., 832) = 832
[pid  5614] fstat(3, {st_mode=S_IFREG|0755, st_size=22400, ...}) = 0
[pid  5614] mmap(NULL, 24656, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f87e28b2000
[pid  5614] mmap(0x7f87e28b4000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f87e28b4000
[pid  5614] mmap(0x7f87e28b6000, 4096, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7f87e28b6000
[pid  5614] mmap(0x7f87e28b7000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7f87e28b7000
[pid  5614] close(3)                    = 0
[pid  5614] openat(AT_FDCWD, "/lib64/libresolv.so.2", O_RDONLY|O_CLOEXEC) = 3
[pid  5614] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xa8\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0b\x00\x40\x00\x1d\x00\x1c\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x08\x27\x00\x00"..., 832) = 832
[pid  5614] fstat(3, {st_mode=S_IFREG|0755, st_size=59624, ...}) = 0
[pid  5614] mmap(NULL, 67720, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f87e28a1000
[pid  5614] mmap(0x7f87e28a4000, 32768, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f87e28a4000
[pid  5614] mmap(0x7f87e28ac000, 8192, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7f87e28ac000
[pid  5614] mmap(0x7f87e28ae000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xd000) = 0x7f87e28ae000
[pid  5614] mmap(0x7f87e28b0000, 6280, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f87e28b0000
[pid  5614] close(3)                    = 0
[pid  5614] openat(AT_FDCWD, "/lib64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid  5614] openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v4/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid  5614] newfstatat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v4/", 0x7ffd75b19b20, 0) = -1 ENOENT (No such file or directory)
[pid  5614] openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v3/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid  5614] newfstatat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v3/", 0x7ffd75b19b20, 0) = -1 ENOENT (No such file or directory)
[pid  5614] openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v2/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid  5614] newfstatat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v2/", 0x7ffd75b19b20, 0) = -1 ENOENT (No such file or directory)
[pid  5614] openat(AT_FDCWD, "/usr/lib64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = 3
[pid  5614] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x60\xd1\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0b\x00\x40\x00\x1d\x00\x1c\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x28\x74\x00\x00"..., 832) = 832
[pid  5614] fstat(3, {st_mode=S_IFREG|0755, st_size=186528, ...}) = 0
[pid  5614] mmap(NULL, 194256, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f87e2871000
[pid  5614] mmap(0x7f87e2879000, 114688, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x8000) = 0x7f87e2879000
[pid  5614] mmap(0x7f87e2895000, 32768, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x24000) = 0x7f87e2895000
[pid  5614] mmap(0x7f87e289d000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2c000) = 0x7f87e289d000
[pid  5614] mmap(0x7f87e289f000, 5840, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f87e289f000
[pid  5614] close(3)                    = 0
[pid  5614] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f87e286f000
[pid  5614] openat(AT_FDCWD, "/lib64/libatomic.so.1", O_RDONLY|O_CLOEXEC) = 3
[pid  5614] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x30\x71\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1b\x00\x1a\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x78\x1f\x00\x00"..., 832) = 832
[pid  5614] fstat(3, {st_mode=S_IFREG|0755, st_size=30704, ...}) = 0
[pid  5614] mmap(NULL, 37000, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f87e2865000
[pid  5614] mmap(0x7f87e2867000, 12288, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f87e2867000
[pid  5614] mmap(0x7f87e286a000, 8192, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5000) = 0x7f87e286a000
[pid  5614] mmap(0x7f87e286c000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6000) = 0x7f87e286c000
[pid  5614] mmap(0x7f87e286e000, 136, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f87e286e000
[pid  5614] close(3)                    = 0
[pid  5614] openat(AT_FDCWD, "/lib64/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid  5614] openat(AT_FDCWD, "/usr/lib64/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = 3
[pid  5614] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xf0\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1a\x00\x19\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8\x20\x00\x00"..., 832) = 832
[pid  5614] fstat(3, {st_mode=S_IFREG|0755, st_size=395120, ...}) = 0
[pid  5614] mmap(NULL, 397336, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f87e2803000
[pid  5614] mmap(0x7f87e2806000, 225280, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f87e2806000
[pid  5614] mmap(0x7f87e283d000, 155648, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3a000) = 0x7f87e283d000
[pid  5614] mmap(0x7f87e2863000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5f000) = 0x7f87e2863000
[pid  5614] close(3)                    = 0
[pid  5614] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f87e2801000
[pid  5614] arch_prctl(ARCH_SET_FS, 0x7f87e2801c80) = 0
[pid  5614] set_tid_address(0x7f87e2801f50) = 5614
[pid  5614] set_robust_list(0x7f87e2801f60, 24) = 0
[pid  5614] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0
[pid  5614] mprotect(0x7f87e2a97000, 16384, PROT_READ) = 0
[pid  5614] mprotect(0x7f87e2863000, 4096, PROT_READ) = 0
[pid  5614] mprotect(0x7f87e286c000, 4096, PROT_READ) = 0
[pid  5614] mprotect(0x7f87e289d000, 4096, PROT_READ) = 0
[pid  5614] mprotect(0x7f87e28ae000, 4096, PROT_READ) = 0
[pid  5614] mprotect(0x7f87e28c8000, 4096, PROT_READ) = 0
[pid  5614] mprotect(0x7f87e28b7000, 4096, PROT_READ) = 0
[pid  5614] mprotect(0x7f87e2b68000, 12288, PROT_READ) = 0
[pid  5614] mprotect(0x55effc0ab000, 4096, PROT_READ) = 0
[pid  5614] mprotect(0x7f87e2ba9000, 8192, PROT_READ) = 0
[pid  5614] prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
[pid  5614] statfs("/sys/fs/selinux", {f_type=SELINUX_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0x1a, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOSUID|ST_NOEXEC|ST_RELATIME}) = 0
[pid  5614] statfs("/sys/fs/selinux", {f_type=SELINUX_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0x1a, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOSUID|ST_NOEXEC|ST_RELATIME}) = 0
[pid  5614] getrandom("\xab\xbe\x59\x4a\xa5\x8c\xa0\x13", 8, GRND_NONBLOCK) = 8
[pid  5614] brk(NULL)                   = 0x55f00f274000
[pid  5614] brk(0x55f00f295000)         = 0x55f00f295000
[pid  5614] access("/etc/selinux/config", F_OK) = 0
[pid  5614] openat(AT_FDCWD, "./swap-file", O_WRONLY) = 3
[pid  5614] lseek(3, 0, SEEK_END)       = 128000000
[pid  5614] lseek(3, 0, SEEK_SET)       = 0
[pid  5614] fstat(1, {st_mode=S_IFIFO|0600, st_size=0, ...}) = 0
[pid  5614] fstat(3, {st_mode=S_IFREG|0600, st_size=128000000, ...}) = 0
[pid  5614] fgetxattr(3, "security.selinux", "\x72\x6f\x6f\x74\x3a\x6f\x62\x6a\x65\x63\x74\x5f\x72\x3a\x75\x73\x65\x72\x5f\x68\x6f\x6d\x65\x5f\x74\x00", 255) = 26
[pid  5614] access("/var/run/setrans/.setrans-unix", F_OK) = -1 ENOENT (No such file or directory)
[pid  5614] futex(0x7f87e28a06b8, FUTEX_WAKE_PRIVATE, 2147483647) = 0
[pid  5614] fsetxattr(3, "security.selinux", "\x72\x6f\x6f\x74\x3a\x6f\x62\x6a\x65\x63\x74\x5f\x72\x3a\x73\x77\x61\x70\x66\x69\x6c\x65\x5f\x74\x00", 25, 0) = 0
[pid  5614] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1024) = 1024
[pid  5614] write(3, "\x01\x00\x00\x00\x11\x7a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 516) = 516
[pid  5614] lseek(3, 4086, SEEK_SET)    = 4086
[pid  5614] write(3, "SWAPSPACE2", 10)  = 10
[   64.414559][ T5614] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   64.415105][   T31] audit: type=1400 audit(1790170188.318:135): avc:  denied  { relabelto } for  pid=5614 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[pid  5614] fsync(3)                    = 0
Setting up swapspace version 1, size = 127995904 bytes
[pid  5614] write(1, "Setting up swapspace version 1, size = 127995904 bytes\n", 55) = 55
[pid  5614] exit_group(0)               = ?
[pid  5614] +++ exited with 0 +++
rt_sigaction(SIGINT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f127ac00f20}, NULL, 8) = 0
rt_sigaction(SIGQUIT, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f127ac00f20}, NULL, 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5614, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} ---
[   64.427811][   T31] audit: type=1400 audit(1790170188.338:136): avc:  denied  { write } for  pid=5614 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   64.503354][   T31] audit: type=1400 audit(1790170188.408:137): avc:  denied  { read } for  pid=5610 comm="syz-executor349" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   64.503673][   T31] audit: type=1400 audit(1790170188.408:138): avc:  denied  { open } for  pid=5610 comm="syz-executor349" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
swapon("./swap-file", SWAP_FLAG_PREFER|0) = 0
rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGSEGV, {sa_handler=0x7f127abfbbe0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f127ac00f20}, NULL, 8) = 0
rt_sigaction(SIGBUS, {sa_handler=0x7f127abfbbe0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f127ac00f20}, NULL, 8) = 0
getrandom("\x57\x47\x60\x26\x50\x9d\x03\xb6", 8, GRND_NONBLOCK) = 8
mkdir("./syzkaller.5ZxVqV", 0700)       = 0
chmod("./syzkaller.5ZxVqV", 0777)       = 0
chdir("./syzkaller.5ZxVqV")             = 0
unshare(CLONE_NEWPID)                   = 0
rt_sigprocmask(SIG_BLOCK, ~[], [], 8)   = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55559352e790) = 5615
ci-upstream-kasan-gce-selinux-root/strace-static-x86_64: Process 5615 attached
[pid  5610] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5615] set_robust_list(0x55559352e7a0, 24) = 0
[pid  5615] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5615] socket(AF_BLUETOOTH, SOCK_RAW, BTPROTO_HCI) = 3
[pid  5615] openat(AT_FDCWD, "/dev/vhci", O_RDWR) = 4
[pid  5615] dup2(4, 202)                = 202
[pid  5615] close(4)                    = 0
[pid  5615] write(202, "\xff\x00", 2)   = 2
[pid  5615] read(202, "\xff\x00\x00\x00", 4) = 4
[pid  5615] rt_sigaction(SIGRT_1, {sa_handler=0x7f127ac47df0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f127ac00f20}, NULL, 8) = 0
[pid  5615] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid  5615] mmap(NULL, 8392704, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f127a3e8000
[pid  5615] mprotect(0x7f127a3e9000, 8388608, PROT_READ|PROT_WRITE) = 0
[pid  5615] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid  5615] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f127abe8990, parent_tid=0x7f127abe8990, exit_signal=0, stack=0x7f127a3e8000, stack_size=0x800200, tls=0x7f127abe86c0}ci-upstream-kasan-gce-selinux-root/strace-static-x86_64: Process 5618 attached
 <unfinished ...>
[pid  5618] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0
[pid  5615] <... clone3 resumed> => {parent_tid=[2]}, 88) = 2
[pid  5618] set_robust_list(0x7f127abe89a0, 24) = 0
[   65.427559][ T5610] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[pid  5618] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5618] read(202 <unfinished ...>
[pid  5615] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid  5618] <... read resumed>, "\x01\x03\x0c\x00", 1024) = 4
[pid  5615] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid  5618] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x03\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 <unfinished ...>
[pid  5615] ioctl(3, HCIDEVUP, 0 <unfinished ...>
[pid  5618] <... writev resumed>)       = 255
[pid  5618] read(202, "\x01\x03\x10\x00", 1024) = 4
[pid  5618] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x03\x10", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255
[pid  5618] read(202, "\x01\x01\x10\x00", 1024) = 4
[pid  5618] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x01\x10", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255
[pid  5618] read(202, "\x01\x09\x10\x00", 1024) = 4
[pid  5618] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x0a", iov_len=2}, {iov_base="\x01\x09\x10", iov_len=3}, {iov_base="\x00\xaa\xaa\xaa\xaa\xaa\xaa", iov_len=7}], 4) = 13
[pid  5618] read(202, "\x01\x05\x10\x00", 1024) = 4
[pid  5618] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x0b", iov_len=2}, {iov_base="\x01\x05\x10", iov_len=3}, {iov_base="\x00\xfd\x03\x60\x04\x00\x06\x00", iov_len=8}], 4) = 14
[pid  5618] read(202, "\x01\x23\x0c\x00", 1024) = 4
[pid  5618] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x23\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255
[pid  5618] read(202, "\x01\x14\x0c\x00", 1024) = 4
[pid  5618] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x14\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255
[pid  5618] read(202, "\x01\x38\x0c\x00", 1024) = 4
[pid  5618] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x38\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255
[pid  5618] read(202, "\x01\x39\x0c\x00", 1024) = 4
[pid  5618] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x39\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4) = 255
[pid  5618] read(202, "\x01\x16\x0c\x02\x00\x7d", 1024) = 6
[pid  5618] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\xfc", iov_len=2}, {iov_base="\x01\x16\x0c", iov_len=3}, {iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=249}], 4 <unfinished ...>
[pid  5615] <... ioctl resumed>)        = -1 EALREADY (Operation already in progress)
[pid  5618] <... writev resumed>)       = 255
[pid  5615] ioctl(3, HCISETSCAN, 0x7ffed708acc0 <unfinished ...>
[pid  5618] read(202, "\x01\x1a\x0c\x01\x02", 1024) = 5
[pid  5618] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x0e\x04", iov_len=2}, {iov_base="\x01\x1a\x0c", iov_len=3}, {iov_base="\x00", iov_len=1}], 4) = 7
[pid  5618] rt_sigprocmask(SIG_BLOCK, ~[RT_1], NULL, 8) = 0
[pid  5615] <... ioctl resumed>)        = 0
[pid  5618] madvise(0x7f127a3e8000, 8372224, MADV_DONTNEED) = 0
[pid  5615] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x04\x0a", iov_len=2}, {iov_base="\xaa\xaa\xaa\xaa\xaa\x10\x00\x00\x00\x01", iov_len=10}], 3 <unfinished ...>
[pid  5618] exit(0 <unfinished ...>
[pid  5615] <... writev resumed>)       = 13
[pid  5618] <... exit resumed>)         = ?
[pid  5618] +++ exited with 0 +++
[pid  5615] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x03\x0b", iov_len=2}, {iov_base="\x00\xc8\x00\xaa\xaa\xaa\xaa\xaa\x10\x01\x00", iov_len=11}], 3) = 14
[pid  5615] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\v\v", iov_len=2}, {iov_base="\x00\xc8\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=11}], 3) = 14
[pid  5615] writev(202, [{iov_base="\x04", iov_len=1}, {iov_base="\x3e\x13", iov_len=2}, {iov_base="\x01\x00\xc9\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\x11\x00\x00\x00\x00\x00\x00\x00", iov_len=19}], 3) = 22
[pid  5615] close(3)                    = 0
[pid  5615] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5615] getppid()                   = 0
[pid  5615] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0
[pid  5615] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0
[pid  5615] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0
[pid  5615] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0
[pid  5615] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0
[pid  5615] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0
[pid  5615] unshare(CLONE_NEWNS)        = 0
[pid  5615] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0
[pid  5615] unshare(CLONE_NEWIPC)       = 0
[pid  5615] unshare(CLONE_NEWCGROUP)    = 0
[pid  5615] unshare(CLONE_NEWUTS)       = 0
[pid  5615] unshare(CLONE_SYSVSEM)      = 0
[pid  5615] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3
[pid  5615] write(3, "16777216", 8)     = 8
[pid  5615] close(3)                    = 0
[   65.500320][   T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   65.513990][   T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   65.514967][   T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   65.517635][   T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   65.518672][   T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[pid  5615] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3
[pid  5615] write(3, "536870912", 9)    = 9
[pid  5615] close(3)                    = 0
[pid  5615] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3
[pid  5615] write(3, "1024", 4)         = 4
[pid  5615] close(3)                    = 0
[pid  5615] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3
[pid  5615] write(3, "8192", 4)         = 4
[pid  5615] close(3)                    = 0
[pid  5615] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3
[pid  5615] write(3, "1024", 4)         = 4
[pid  5615] close(3)                    = 0
[pid  5615] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3
[pid  5615] write(3, "1024", 4)         = 4
[pid  5615] close(3)                    = 0
[pid  5615] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3
[pid  5615] write(3, "1024 1048576 500 1024", 21) = 21
[pid  5615] close(3)                    = 0
[pid  5615] getpid()                    = 1
[pid  5615] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PTRACE|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_NICE|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, permitted=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PTRACE|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_NICE|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, inheritable=0}) = 0
[pid  5615] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, permitted=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, inheritable=0}) = 0
[pid  5615] unshare(CLONE_NEWNET)       = 0
[pid  5615] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3
[pid  5615] write(3, "0 65535", 7)      = 7
[pid  5615] close(3)                    = 0
[pid  5615] newfstatat(AT_FDCWD, "/dev/net/tun", {st_mode=S_IFCHR|0666, st_rdev=makedev(0xa, 0xc8), ...}, 0) = 0
[pid  5615] openat(AT_FDCWD, "/dev/net/tun", O_RDWR|O_NONBLOCK) = 3
[pid  5615] dup2(3, 200)                = 200
[pid  5615] close(3)                    = 0
[pid  5615] ioctl(200, TUNSETIFF, 0x7ffed708aba0) = 0
[pid  5615] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/accept_dad", O_WRONLY|O_CLOEXEC) = 3
[pid  5615] write(3, "0", 1)            = 1
[pid  5615] close(3)                    = 0
[pid  5615] openat(AT_FDCWD, "/proc/sys/net/ipv6/conf/syz_tun/router_solicitations", O_WRONLY|O_CLOEXEC) = 3
[pid  5615] write(3, "0", 1)            = 1
[pid  5615] close(3)                    = 0
[pid  5615] socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3
[pid  5615] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
[pid  5615] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun", ifr_ifindex=11}) = 0
[pid  5615] close(4)                    = 0
[pid  5615] sendto(3, [{nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x18\x00\x00\x0b\x00\x00\x00\x08\x00\x02\x00\xac\x14\x14\xaa\x08\x00\x01\x00\xac\x14\x14\xaa"], 40, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 40
[pid  5615] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=40, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36
[pid  5615] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
[pid  5615] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun", ifr_ifindex=11}) = 0
[pid  5615] close(4)                    = 0
[pid  5615] sendto(3, [{nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x78\x00\x00\x0b\x00\x00\x00\x14\x00\x02\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaa"], 64, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 64
[pid  5615] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=64, nlmsg_type=0x14 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x500, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36
[pid  5615] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
[pid  5615] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun", ifr_ifindex=11}) = 0
[pid  5615] close(4)                    = 0
[pid  5615] sendto(3, [{nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x02\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x08\x00\x01\x00\xac\x14\x14\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 48, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 48
[pid  5615] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=48, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36
[pid  5615] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
[pid  5615] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun", ifr_ifindex=11}) = 0
[pid  5615] close(4)                    = 0
[pid  5615] sendto(3, [{nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}, "\x0a\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x14\x00\x01\x00\xfe\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbb\x0a\x00\x02\x00\xbb\xaa\xaa\xaa\xaa\xaa\x00\x00"], 60, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 60
[pid  5615] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=60, nlmsg_type=0x1c /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|0x600, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36
[pid  5615] socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
[pid  5615] ioctl(4, SIOCGIFINDEX, {ifr_name="syz_tun", ifr_ifindex=11}) = 0
[pid  5615] close(4)                    = 0
[pid  5615] sendto(3, [{nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x0a\x00\x01\x00\xaa\xaa\xaa\xaa\xaa\xaa\x00\x00"], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 44
[pid  5615] recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=1}, {error=0, msg={nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36
[pid  5615] close(3)                    = 0
[pid  5615] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3
[pid  5615] write(3, "100000", 6)       = 6
[pid  5615] close(3)                    = 0
[pid  5615] mkdir("./syz-tmp", 0777)    = 0
[pid  5615] mount("", "./syz-tmp", "tmpfs", 0, NULL) = 0
[pid  5615] mkdir("./syz-tmp/newroot", 0777) = 0
[pid  5615] mkdir("./syz-tmp/newroot/dev", 0700) = 0
[pid  5615] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0
[pid  5615] mkdir("./syz-tmp/newroot/proc", 0700) = 0
[pid  5615] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL) = 0
[pid  5615] mkdir("./syz-tmp/newroot/selinux", 0700) = 0
[pid  5615] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory)
[pid  5615] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0
[pid  5615] mkdir("./syz-tmp/newroot/sys", 0700) = 0
[pid  5615] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0
[pid  5615] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0
[pid  5615] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory)
[pid  5615] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0
[pid  5615] mkdir("./syz-tmp/newroot/syz-inputs", 0700) = 0
[pid  5615] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory)
[pid  5615] mkdir("./syz-tmp/pivot", 0777) = 0
[pid  5615] pivot_root("./syz-tmp", "./syz-tmp/pivot") = 0
[pid  5615] chdir("/")                  = 0
[pid  5615] umount2("./pivot", MNT_DETACH) = 0
[pid  5615] chroot("./newroot")         = 0
[pid  5615] chdir("/")                  = 0
[pid  5615] mkdir("/dev/gadgetfs", 0777) = 0
[pid  5615] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL) = 0
[pid  5615] mkdir("/dev/binderfs", 0777) = 0
[pid  5615] mount("binder", "/dev/binderfs", "binder", 0, NULL) = 0
[pid  5615] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy)
executing program
[pid  5615] write(1, "executing program\n", 18) = 18
[pid  5615] openat(AT_FDCWD, "/dev/raw-gadget", O_RDWR) = 3
[pid  5615] ioctl(3, USB_RAW_IOCTL_INIT, 0x7ffed7089c30) = 0
[pid  5615] ioctl(3, UI_DEV_CREATE or USB_RAW_IOCTL_RUN, 0) = 0
[pid  5615] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffed7089c30) = 0
[   65.897881][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[   65.897915][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[pid  5615] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffed7089c30) = 0
[pid  5615] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffed7089c30) = 0
[pid  5615] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffed7089c30) = 0
[pid  5615] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffed7088c20) = 18
[pid  5615] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffed7089c30) = 0
[   66.106361][   T30] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[pid  5615] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffed7089c30) = 0
[pid  5615] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffed7089c30) = 0
[pid  5615] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffed7088c20) = 18
[pid  5615] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffed7089c30) = 0
[pid  5615] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffed7088c20) = 0
[pid  5615] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffed7089c30) = 0
[pid  5615] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffed7088c20) = 0
[pid  5615] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffed7089c30) = 0
[pid  5615] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffed7088c20) = 0
[pid  5615] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffed7089c30) = 0
[pid  5615] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffed7088c20) = 9
[pid  5615] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffed7089c30) = 0
[pid  5615] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffed7088c20) = 81
[pid  5615] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffed7089c30) = 0
[pid  5615] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffed7088c20) = 4
[pid  5615] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffed7089c30) = 0
[pid  5615] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffed7088c20) = 8
[pid  5615] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffed7089c30) = 0
[pid  5615] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffed7088c20) = 8
[pid  5615] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffed7089c30) = 0
[pid  5615] ioctl(3, USB_RAW_IOCTL_EP0_WRITE, 0x7ffed7088c20) = 8
[pid  5615] ioctl(3, USB_RAW_IOCTL_EVENT_FETCH, 0x7ffed7089c30) = 0
[pid  5615] ioctl(3, USB_RAW_IOCTL_VBUS_DRAW, 0x5) = 0
[pid  5615] ioctl(3, USB_RAW_IOCTL_CONFIGURE, 0) = 0
[pid  5615] ioctl(3, USB_RAW_IOCTL_EP0_READ, 0x7ffed7088c20) = 0
[   66.266212][   T30] usb 1-1: Using ep0 maxpacket: 32
[   66.282015][   T30] usb 1-1: unable to get BOS descriptor or descriptor too short
[   66.282125][   T30] usb 1-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=2a.c0
[   66.284765][   T30] usb 1-1: config 3 has an invalid interface number: 223 but max is 1
[   66.284786][   T30] usb 1-1: config 3 has an invalid interface number: 25 but max is 1
[   66.284801][   T30] usb 1-1: config 3 has an invalid interface number: 223 but max is 1
[   66.284817][   T30] usb 1-1: config 3 has no interface number 0
[   66.284830][   T30] usb 1-1: config 3 has no interface number 1
[   66.284866][   T30] usb 1-1: config 3 interface 25 altsetting 6 has an invalid descriptor for endpoint zero, skipping
[   66.284882][   T30] usb 1-1: config 3 interface 25 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   66.284904][   T30] usb 1-1: too many endpoints for config 3 interface 223 altsetting 155: 82, using maximum allowed: 30
[   66.284944][   T30] usb 1-1: config 3 interface 223 altsetting 155 endpoint 0xD has invalid maxpacket 512, setting to 64
[   66.284966][   T30] usb 1-1: config 3 interface 223 altsetting 155 endpoint 0x8 has invalid maxpacket 512, setting to 64
[   66.284995][   T30] usb 1-1: config 3 interface 223 altsetting 155 has 4 endpoint descriptors, different from the interface descriptor's value: 82
[   66.285014][   T30] usb 1-1: config 3 interface 223 has no altsetting 1
[   66.285028][   T30] usb 1-1: config 3 interface 25 has no altsetting 0
[   66.322375][   T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.322395][   T30] usb 1-1: Product: syz
[   66.322406][   T30] usb 1-1: Manufacturer: syz
[   66.322416][   T30] usb 1-1: SerialNumber: syz
[pid  5615] close(3)                    = 0
[pid  5615] close(4)                    = -1 EBADF (Bad file descriptor)
[pid  5615] close(5)                    = -1 EBADF (Bad file descriptor)
[pid  5615] close(6)                    = -1 EBADF (Bad file descriptor)
[pid  5615] close(7)                    = -1 EBADF (Bad file descriptor)
[pid  5615] close(8)                    = -1 EBADF (Bad file descriptor)
[pid  5615] close(9)                    = -1 EBADF (Bad file descriptor)
[pid  5615] close(10)                   = -1 EBADF (Bad file descriptor)
[pid  5615] close(11)                   = -1 EBADF (Bad file descriptor)
[pid  5615] close(12)                   = -1 EBADF (Bad file descriptor)
[pid  5615] close(13)                   = -1 EBADF (Bad file descriptor)
[pid  5615] close(14)                   = -1 EBADF (Bad file descriptor)
[pid  5615] close(15)                   = -1 EBADF (Bad file descriptor)
[pid  5615] close(16)                   = -1 EBADF (Bad file descriptor)
[pid  5615] close(17)                   = -1 EBADF (Bad file descriptor)
[pid  5615] close(18)                   = -1 EBADF (Bad file descriptor)
[pid  5615] close(19)                   = -1 EBADF (Bad file descriptor)
[pid  5615] close(20)                   = -1 EBADF (Bad file descriptor)
[pid  5615] close(21)                   = -1 EBADF (Bad file descriptor)
[pid  5615] close(22)                   = -1 EBADF (Bad file descriptor)
[pid  5615] close(23)                   = -1 EBADF (Bad file descriptor)
[pid  5615] close(24)                   = -1 EBADF (Bad file descriptor)
[pid  5615] close(25)                   = -1 EBADF (Bad file descriptor)
[pid  5615] close(26)                   = -1 EBADF (Bad file descriptor)
[pid  5615] close(27)                   = -1 EBADF (Bad file descriptor)
[pid  5615] close(28)                   = -1 EBADF (Bad file descriptor)
[pid  5615] close(29)                   = -1 EBADF (Bad file descriptor)
[pid  5615] exit_group(1)               = ?
[   66.561674][   T30] usbtv 1-1:3.223: Fushicai USBTV007 Audio-Video Grabber
[   66.570106][   T30] usb 1-1: USB disconnect, device number 2
[   66.624717][   T30] 
[   66.627068][   T30] =========================
[   66.631576][   T30] WARNING: held lock freed!
[   66.636050][   T30] syzkaller #0 Not tainted
[   66.640443][   T30] -------------------------
[   66.644923][   T30] kworker/1:1/30 is freeing memory ffff888034f04000-ffff888034f047ff, with a lock still held there!
[   66.655666][   T30] ffff888034f041a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620
[   66.665752][   T30] locks held by kworker/1:1/30: 5, last CPU#1:
[   66.671879][   T30]  #0: ffff888023ee1940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10
[   66.682648][   T30]  #1: ffffc90000a57d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10
[   66.693846][   T30]  #2: ffff88802ac381d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420
[   66.702719][   T30]  #3: ffff888034f051d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9a0
[   66.711920][   T30]  #4: ffff888034f041a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620
[   66.722420][   T30] 
[   66.722420][   T30] stack backtrace:
[   66.728287][   T30] CPU: 1 UID: 0 PID: 30 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) 
[   66.737459][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[   66.747498][   T30] Workqueue: usb_hub_wq hub_event
[   66.752529][   T30] Call Trace:
[   66.755787][   T30]  <TASK>
[   66.758708][   T30]  dump_stack_lvl+0x100/0x190
[   66.763373][   T30]  debug_check_no_locks_freed+0x115/0x120
[   66.769081][   T30]  ? device_release+0xd0/0x270
[   66.773837][   T30]  ? device_release+0xd2/0x270
[   66.778585][   T30]  kfree+0x180/0x6d0
[   66.782471][   T30]  ? put_device+0x24/0x30
[   66.786781][   T30]  ? __pfx_usb_release_interface+0x10/0x10
[   66.792568][   T30]  device_release+0xd2/0x270
[   66.797149][   T30]  kobject_put+0x1f7/0x640
[   66.801644][   T30]  put_device+0x1f/0x30
[   66.805776][   T30]  v4l2_device_disconnect+0x60/0xc0
[   66.810962][   T30]  usbtv_video_free+0x25/0x30
[   66.815635][   T30]  usbtv_disconnect+0x58/0xa0
[   66.820307][   T30]  usb_unbind_interface+0x1dd/0x9e0
[   66.825494][   T30]  ? __pfx_usb_unbind_interface+0x10/0x10
[   66.831201][   T30]  device_remove+0x12a/0x180
[   66.835772][   T30]  device_release_driver_internal+0x44e/0x620
[   66.841826][   T30]  bus_remove_device+0x2bc/0x560
[   66.846751][   T30]  ? __pfx_bus_remove_device+0x10/0x10
[   66.852206][   T30]  ? __pfx_device_remove_attrs+0x10/0x10
[   66.857823][   T30]  device_del+0x376/0x9b0
[   66.862139][   T30]  ? __pfx_device_del+0x10/0x10
[   66.866975][   T30]  ? __pfx___pm_runtime_barrier+0x10/0x10
[   66.872678][   T30]  ? lock_acquire+0x1d1/0x380
[   66.877351][   T30]  usb_disable_device+0x367/0x810
[   66.882370][   T30]  ? mark_held_locks+0x40/0x70
[   66.887115][   T30]  usb_disconnect+0x2e2/0x9a0
[   66.891790][   T30]  hub_event+0x1bb1/0x4420
[   66.896197][   T30]  ? __lock_acquire+0x5c0/0x1f40
[   66.901128][   T30]  ? __pfx_hub_event+0x10/0x10
[   66.905888][   T30]  ? lockdep_count_forward_deps+0x180/0x200
[   66.911767][   T30]  ? lock_acquire+0x1d1/0x380
[   66.916451][   T30]  ? process_one_work+0xa2c/0x1b10
[   66.921557][   T30]  ? process_one_work+0x906/0x1b10
[   66.926665][   T30]  ? process_one_work+0x906/0x1b10
[   66.931765][   T30]  process_one_work+0xac7/0x1b10
[   66.936729][   T30]  ? __pfx_process_one_work+0x10/0x10
[   66.942094][   T30]  ? lock_acquire+0x1d1/0x380
[   66.946754][   T30]  ? __pfx_hub_event+0x10/0x10
[   66.951521][   T30]  worker_thread+0x5ef/0xe50
[   66.956106][   T30]  ? kthread+0x13a/0x450
[   66.960351][   T30]  ? __pfx_worker_thread+0x10/0x10
[   66.965450][   T30]  kthread+0x373/0x450
[   66.969522][   T30]  ? __pfx_kthread+0x10/0x10
[   66.974100][   T30]  ret_from_fork+0x730/0xd60
[   66.978673][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[   66.983789][   T30]  ? __switch_to+0x800/0x10f0
[   66.988453][   T30]  ? __pfx_kthread+0x10/0x10
[   66.993047][   T30]  ret_from_fork_asm+0x1a/0x30
[   66.997816][   T30]  </TASK>
[   67.001405][   T30] ==================================================================
[   67.001415][   T30] BUG: KASAN: slab-use-after-free in usb_unbind_interface+0x935/0x9e0
[   67.001443][   T30] Read of size 8 at addr ffff888034f04008 by task kworker/1:1/30
[   67.001456][   T30] 
[   67.001470][   T30] CPU: 1 UID: 0 PID: 30 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) 
[   67.001489][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[   67.001499][   T30] Workqueue: usb_hub_wq hub_event
[   67.001523][   T30] Call Trace:
[   67.001529][   T30]  <TASK>
[   67.001536][   T30]  dump_stack_lvl+0x100/0x190
[   67.001561][   T30]  print_report+0x13d/0x4b0
[pid  5615] +++ exited with 1 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5615, si_uid=0, si_status=1, si_utime=0, si_stime=11 /* 0.11 s */} ---
exit_group(0)                           = ?
+++ exited with 0 +++
[   67.001585][   T30]  ? _