ci2-android-6-1-perf/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci2-android-6-1-perf/syz-executor1129070357 <...> syzkaller syzkaller login: [ 14.543377][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 14.543392][ T28] audit: type=1400 audit(1788998488.983:59): avc: denied { transition } for pid=224 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.548243][ T28] audit: type=1400 audit(1788998488.983:60): avc: denied { noatsecure } for pid=224 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.551812][ T28] audit: type=1400 audit(1788998488.993:61): avc: denied { write } for pid=224 comm="sh" path="pipe:[14633]" dev="pipefs" ino=14633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 14.555368][ T28] audit: type=1400 audit(1788998488.993:62): avc: denied { rlimitinh } for pid=224 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.558559][ T28] audit: type=1400 audit(1788998488.993:63): avc: denied { siginh } for pid=224 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 16.592878][ T233] scp (233) used greatest stack depth: 22664 bytes left Warning: Permanently added '10.128.0.203' (ED25519) to the list of known hosts. execve("ci2-android-6-1-perf/syz-executor1129070357", ["ci2-android-6-1-perf/syz-executor1129070357"], 0x7fff7a072040 /* 10 vars */) = 0 brk(NULL) = 0x55555b617000 brk(0x55555b617d40) = 0x55555b617d40 arch_prctl(ARCH_SET_FS, 0x55555b6173c0) = 0 set_tid_address(0x55555b617690) = 305 set_robust_list(0x55555b6176a0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 32, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci2-android-6-1-perf/syz-executor1129070357", 4096) = 49 getrandom("\xd5\x41\xd4\x2a\xe8\x2d\x10\x46", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555b617d40 brk(0x55555b638d40) = 0x55555b638d40 brk(0x55555b639000) = 0x55555b639000 mprotect(0x7ff7bb29f000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 chmod("/dev/raw-gadget", 0666) = 0 swapoff("./swap-file") = -1 ENOENT (No such file or directory) unlink("./swap-file") = -1 ENOENT (No such file or directory) openat(AT_FDCWD, "./swap-file", O_WRONLY|O_CREAT|O_CLOEXEC, 0600) = 3 fallocate(3, FALLOC_FL_ZERO_RANGE, 0, 128000000) = 0 close(3) = 0 rt_sigaction(SIGINT, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff7bb22ade0}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 rt_sigaction(SIGQUIT, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff7bb22ade0}, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, 8) = 0 rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0 mmap(NULL, 36864, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7ff7bb1df000 rt_sigprocmask(SIG_BLOCK, ~[], [CHLD], 8) = 0 clone3({flags=CLONE_VM|CLONE_VFORK|CLONE_CLEAR_SIGHAND, exit_signal=SIGCHLD, stack=0x7ff7bb1df000, stack_size=0x9000}, 88ci2-android-6-1-perf/strace-static-x86_64: Process 306 attached [pid 306] rt_sigprocmask(SIG_BLOCK, NULL, ~[KILL STOP], 8) = 0 [pid 306] rt_sigaction(SIGINT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff7bb22ade0}, NULL, 8) = 0 [pid 306] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 306] execve("/bin/sh", ["sh", "-c", "--", "mkswap ./swap-file"], 0x7fff216ddea8 /* 10 vars */ [pid 305] <... clone3 resumed>) = 306 [pid 305] munmap(0x7ff7bb1df000, 36864) = 0 [pid 305] rt_sigprocmask(SIG_SETMASK, [CHLD], NULL, 8) = 0 [pid 306] <... execve resumed>) = 0 [pid 306] brk(NULL) = 0x555a12c96000 [pid 306] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f59a7efe000 [pid 306] access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) [pid 306] openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 306] openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v3/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 306] newfstatat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v3/", 0x7ffc79fd30d0, 0) = -1 ENOENT (No such file or directory) [pid 306] openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v2/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 306] newfstatat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v2/", 0x7ffc79fd30d0, 0) = -1 ENOENT (No such file or directory) [pid 306] openat(AT_FDCWD, "/lib64/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = 3 [pid 306] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x38\x13\x0c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x09\x00\x40\x00\x19\x00\x18\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8\xf4\x00\x00"..., 832) = 832 [pid 306] fstat(3, {st_mode=S_IFREG|0644, st_size=792952, ...}) = 0 [pid 306] mmap(NULL, 792856, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f59a7e3c000 [pid 306] mmap(0x7f59a7e4c000, 548864, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x10000) = 0x7f59a7e4c000 [pid 306] mmap(0x7f59a7ed2000, 163840, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x96000) = 0x7f59a7ed2000 [pid 306] mmap(0x7f59a7efa000, 16384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xbe000) = 0x7f59a7efa000 [pid 306] close(3) = 0 [pid 306] openat(AT_FDCWD, "/lib64/libc.so.6", O_RDONLY|O_CLOEXEC) = 3 [pid 306] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\xf0\xab\x02\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x38\x22\x1d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0e\x00\x40\x00\x3b\x00\x3a\x00\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00"..., 832) = 832 [pid 306] pread64(3, "\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x1c\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00"..., 784, 64) = 784 [pid 306] fstat(3, {st_mode=S_IFREG|0755, st_size=1913080, ...}) = 0 [pid 306] pread64(3, "\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x1c\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00"..., 784, 64) = 784 [pid 306] mmap(NULL, 1965720, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f59a7c5c000 [pid 306] mmap(0x7f59a7c84000, 1368064, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x28000) = 0x7f59a7c84000 [pid 306] mmap(0x7f59a7dd2000, 356352, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x176000) = 0x7f59a7dd2000 [pid 306] mmap(0x7f59a7e29000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1cc000) = 0x7f59a7e29000 [pid 306] mmap(0x7f59a7e2f000, 52888, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f59a7e2f000 [pid 306] close(3) = 0 [pid 306] openat(AT_FDCWD, "/lib64/libpam.so.0", O_RDONLY|O_CLOEXEC) = 3 [pid 306] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xf8\xf0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1b\x00\x1a\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe0\x29\x00\x00"..., 832) = 832 [pid 306] fstat(3, {st_mode=S_IFREG|0755, st_size=63416, ...}) = 0 [pid 306] mmap(NULL, 65552, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f59a7c4b000 [pid 306] mmap(0x7f59a7c4e000, 32768, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f59a7c4e000 [pid 306] mmap(0x7f59a7c56000, 16384, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7f59a7c56000 [pid 306] mmap(0x7f59a7c5a000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xe000) = 0x7f59a7c5a000 [pid 306] close(3) = 0 [pid 306] openat(AT_FDCWD, "/lib64/libpam_misc.so.0", O_RDONLY|O_CLOEXEC) = 3 [pid 306] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x00\x51\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1a\x00\x19\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd8\x12\x00\x00"..., 832) = 832 [pid 306] fstat(3, {st_mode=S_IFREG|0755, st_size=22400, ...}) = 0 [pid 306] mmap(NULL, 24656, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f59a7c44000 [pid 306] mmap(0x7f59a7c46000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f59a7c46000 [pid 306] mmap(0x7f59a7c48000, 4096, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7f59a7c48000 [pid 306] mmap(0x7f59a7c49000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7f59a7c49000 [pid 306] close(3) = 0 [pid 306] openat(AT_FDCWD, "/lib64/libresolv.so.2", O_RDONLY|O_CLOEXEC) = 3 [pid 306] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xa8\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0b\x00\x40\x00\x1d\x00\x1c\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x08\x27\x00\x00"..., 832) = 832 [pid 306] fstat(3, {st_mode=S_IFREG|0755, st_size=59624, ...}) = 0 [pid 306] mmap(NULL, 67720, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f59a7c33000 [pid 306] mmap(0x7f59a7c36000, 32768, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f59a7c36000 [pid 306] mmap(0x7f59a7c3e000, 8192, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7f59a7c3e000 [pid 306] mmap(0x7f59a7c40000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xd000) = 0x7f59a7c40000 [pid 306] mmap(0x7f59a7c42000, 6280, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f59a7c42000 [pid 306] close(3) = 0 [pid 306] openat(AT_FDCWD, "/lib64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 306] openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v3/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 306] newfstatat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v3/", 0x7ffc79fd3030, 0) = -1 ENOENT (No such file or directory) [pid 306] openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v2/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 306] newfstatat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v2/", 0x7ffc79fd3030, 0) = -1 ENOENT (No such file or directory) [pid 306] openat(AT_FDCWD, "/usr/lib64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = 3 [pid 306] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x60\xd1\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0b\x00\x40\x00\x1d\x00\x1c\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x28\x74\x00\x00"..., 832) = 832 [pid 306] fstat(3, {st_mode=S_IFREG|0755, st_size=186528, ...}) = 0 [pid 306] mmap(NULL, 194256, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f59a7c03000 [pid 306] mmap(0x7f59a7c0b000, 114688, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x8000) = 0x7f59a7c0b000 [pid 306] mmap(0x7f59a7c27000, 32768, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x24000) = 0x7f59a7c27000 [pid 306] mmap(0x7f59a7c2f000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2c000) = 0x7f59a7c2f000 [pid 306] mmap(0x7f59a7c31000, 5840, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f59a7c31000 [pid 306] close(3) = 0 [pid 306] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f59a7c01000 [pid 306] openat(AT_FDCWD, "/lib64/libatomic.so.1", O_RDONLY|O_CLOEXEC) = 3 [pid 306] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x30\x71\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1b\x00\x1a\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x78\x1f\x00\x00"..., 832) = 832 [pid 306] fstat(3, {st_mode=S_IFREG|0755, st_size=30704, ...}) = 0 [pid 306] mmap(NULL, 37000, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f59a7bf7000 [pid 306] mmap(0x7f59a7bf9000, 12288, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f59a7bf9000 [pid 306] mmap(0x7f59a7bfc000, 8192, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5000) = 0x7f59a7bfc000 [pid 306] mmap(0x7f59a7bfe000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6000) = 0x7f59a7bfe000 [pid 306] mmap(0x7f59a7c00000, 136, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f59a7c00000 [pid 306] close(3) = 0 [pid 306] openat(AT_FDCWD, "/lib64/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 306] openat(AT_FDCWD, "/usr/lib64/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = 3 [pid 306] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xf0\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1a\x00\x19\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8\x20\x00\x00"..., 832) = 832 [pid 306] fstat(3, {st_mode=S_IFREG|0755, st_size=395120, ...}) = 0 [pid 306] mmap(NULL, 397336, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f59a7b95000 [pid 306] mmap(0x7f59a7b98000, 225280, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f59a7b98000 [pid 306] mmap(0x7f59a7bcf000, 155648, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3a000) = 0x7f59a7bcf000 [pid 306] mmap(0x7f59a7bf5000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5f000) = 0x7f59a7bf5000 [pid 306] close(3) = 0 [pid 306] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f59a7b93000 [pid 306] arch_prctl(ARCH_SET_FS, 0x7f59a7b93c80) = 0 [pid 306] set_tid_address(0x7f59a7b93f50) = 306 [pid 306] set_robust_list(0x7f59a7b93f60, 24) = 0 [pid 306] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 32, 0, 0x53053053) = -1 ENOSYS (Function not implemented) [pid 306] mprotect(0x7f59a7e29000, 16384, PROT_READ) = 0 [pid 306] mprotect(0x7f59a7bf5000, 4096, PROT_READ) = 0 [pid 306] mprotect(0x7f59a7bfe000, 4096, PROT_READ) = 0 [pid 306] mprotect(0x7f59a7c2f000, 4096, PROT_READ) = 0 [pid 306] mprotect(0x7f59a7c40000, 4096, PROT_READ) = 0 [pid 306] mprotect(0x7f59a7c5a000, 4096, PROT_READ) = 0 [pid 306] mprotect(0x7f59a7c49000, 4096, PROT_READ) = 0 [pid 306] mprotect(0x7f59a7efa000, 12288, PROT_READ) = 0 [pid 306] mprotect(0x555a05c1e000, 4096, PROT_READ) = 0 [pid 306] mprotect(0x7f59a7f33000, 8192, PROT_READ) = 0 [pid 306] prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 [pid 306] statfs("/sys/fs/selinux", {f_type=SELINUX_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOSUID|ST_NOEXEC|ST_RELATIME}) = 0 [pid 306] statfs("/sys/fs/selinux", {f_type=SELINUX_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOSUID|ST_NOEXEC|ST_RELATIME}) = 0 [pid 306] getrandom("\x35\x96\x0a\xe1\x7a\xc0\xb8\x12", 8, GRND_NONBLOCK) = 8 [pid 306] brk(NULL) = 0x555a12c96000 [pid 306] brk(0x555a12cb7000) = 0x555a12cb7000 [pid 306] access("/etc/selinux/config", F_OK) = 0 [pid 306] getpid() = 306 [pid 306] rt_sigaction(SIGCHLD, {sa_handler=0x7f59a7e7f287, sa_mask=~[RTMIN RT_1], sa_flags=SA_RESTORER, sa_restorer=0x7f59a7c9b180}, NULL, 8) = 0 [pid 306] getppid() = 305 [pid 306] uname({sysname="Linux", nodename="syzkaller", ...}) = 0 [pid 306] newfstatat(AT_FDCWD, "/root", {st_mode=S_IFDIR|0700, st_size=4096, ...}, 0) = 0 [pid 306] newfstatat(AT_FDCWD, ".", {st_mode=S_IFDIR|0700, st_size=4096, ...}, 0) = 0 [pid 306] rt_sigaction(SIGINT, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 306] rt_sigaction(SIGINT, {sa_handler=0x7f59a7e7f287, sa_mask=~[RTMIN RT_1], sa_flags=SA_RESTORER, sa_restorer=0x7f59a7c9b180}, NULL, 8) = 0 [pid 306] rt_sigaction(SIGQUIT, NULL, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, 8) = 0 [pid 306] rt_sigaction(SIGTERM, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 [pid 306] newfstatat(AT_FDCWD, "/bin/mkswap", 0x7ffc79fd39c8, 0) = -1 ENOENT (No such file or directory) [pid 306] newfstatat(AT_FDCWD, "/sbin/mkswap", {st_mode=S_IFREG|0755, st_size=14256, ...}, 0) = 0 [ 25.466873][ T28] audit: type=1400 audit(1788998499.913:64): avc: denied { execmem } for pid=305 comm="syz-executor112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 25.487138][ T28] audit: type=1400 audit(1788998499.913:65): avc: denied { setattr } for pid=305 comm="syz-executor112" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [pid 306] execve("/sbin/mkswap", ["mkswap", "./swap-file"], 0x555a12c966f0 /* 10 vars */) = 0 [pid 306] brk(NULL) = 0x5605b2652000 [pid 306] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4e5df12000 [pid 306] access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) [pid 306] openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 306] openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v3/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 306] newfstatat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v3/", 0x7ffcfb6a7da0, 0) = -1 ENOENT (No such file or directory) [pid 306] openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v2/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 306] newfstatat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v2/", 0x7ffcfb6a7da0, 0) = -1 ENOENT (No such file or directory) [pid 306] openat(AT_FDCWD, "/lib64/libbusybox.so.1.37.0", O_RDONLY|O_CLOEXEC) = 3 [pid 306] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x38\x13\x0c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x09\x00\x40\x00\x19\x00\x18\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8\xf4\x00\x00"..., 832) = 832 [pid 306] fstat(3, {st_mode=S_IFREG|0644, st_size=792952, ...}) = 0 [pid 306] mmap(NULL, 792856, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f4e5de50000 [pid 306] mmap(0x7f4e5de60000, 548864, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x10000) = 0x7f4e5de60000 [pid 306] mmap(0x7f4e5dee6000, 163840, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x96000) = 0x7f4e5dee6000 [pid 306] mmap(0x7f4e5df0e000, 16384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xbe000) = 0x7f4e5df0e000 [pid 306] close(3) = 0 [pid 306] openat(AT_FDCWD, "/lib64/libc.so.6", O_RDONLY|O_CLOEXEC) = 3 [pid 306] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\xf0\xab\x02\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x38\x22\x1d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0e\x00\x40\x00\x3b\x00\x3a\x00\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00"..., 832) = 832 [pid 306] pread64(3, "\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x1c\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00"..., 784, 64) = 784 [pid 306] fstat(3, {st_mode=S_IFREG|0755, st_size=1913080, ...}) = 0 [pid 306] pread64(3, "\x06\x00\x00\x00\x04\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x60\xc1\x19\x00\x00\x00\x00\x00\x1c\x00\x00\x00\x00\x00\x00\x00\x1c\x00\x00\x00"..., 784, 64) = 784 [pid 306] mmap(NULL, 1965720, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f4e5dc70000 [pid 306] mmap(0x7f4e5dc98000, 1368064, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x28000) = 0x7f4e5dc98000 [pid 306] mmap(0x7f4e5dde6000, 356352, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x176000) = 0x7f4e5dde6000 [pid 306] mmap(0x7f4e5de3d000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1cc000) = 0x7f4e5de3d000 [pid 306] mmap(0x7f4e5de43000, 52888, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f4e5de43000 [pid 306] close(3) = 0 [pid 306] openat(AT_FDCWD, "/lib64/libpam.so.0", O_RDONLY|O_CLOEXEC) = 3 [pid 306] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xf8\xf0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1b\x00\x1a\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe0\x29\x00\x00"..., 832) = 832 [pid 306] fstat(3, {st_mode=S_IFREG|0755, st_size=63416, ...}) = 0 [pid 306] mmap(NULL, 65552, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f4e5dc5f000 [pid 306] mmap(0x7f4e5dc62000, 32768, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f4e5dc62000 [pid 306] mmap(0x7f4e5dc6a000, 16384, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7f4e5dc6a000 [pid 306] mmap(0x7f4e5dc6e000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xe000) = 0x7f4e5dc6e000 [pid 306] close(3) = 0 [pid 306] openat(AT_FDCWD, "/lib64/libpam_misc.so.0", O_RDONLY|O_CLOEXEC) = 3 [pid 306] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x00\x51\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1a\x00\x19\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd8\x12\x00\x00"..., 832) = 832 [pid 306] fstat(3, {st_mode=S_IFREG|0755, st_size=22400, ...}) = 0 [pid 306] mmap(NULL, 24656, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f4e5dc58000 [pid 306] mmap(0x7f4e5dc5a000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f4e5dc5a000 [pid 306] mmap(0x7f4e5dc5c000, 4096, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7f4e5dc5c000 [pid 306] mmap(0x7f4e5dc5d000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7f4e5dc5d000 [pid 306] close(3) = 0 [pid 306] openat(AT_FDCWD, "/lib64/libresolv.so.2", O_RDONLY|O_CLOEXEC) = 3 [pid 306] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xa8\xe1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0b\x00\x40\x00\x1d\x00\x1c\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x08\x27\x00\x00"..., 832) = 832 [pid 306] fstat(3, {st_mode=S_IFREG|0755, st_size=59624, ...}) = 0 [pid 306] mmap(NULL, 67720, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f4e5dc47000 [pid 306] mmap(0x7f4e5dc4a000, 32768, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f4e5dc4a000 [pid 306] mmap(0x7f4e5dc52000, 8192, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7f4e5dc52000 [pid 306] mmap(0x7f4e5dc54000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xd000) = 0x7f4e5dc54000 [pid 306] mmap(0x7f4e5dc56000, 6280, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f4e5dc56000 [pid 306] close(3) = 0 [pid 306] openat(AT_FDCWD, "/lib64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 306] openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v3/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 306] newfstatat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v3/", 0x7ffcfb6a7d00, 0) = -1 ENOENT (No such file or directory) [pid 306] openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v2/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 306] newfstatat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v2/", 0x7ffcfb6a7d00, 0) = -1 ENOENT (No such file or directory) [pid 306] openat(AT_FDCWD, "/usr/lib64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = 3 [pid 306] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x60\xd1\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0b\x00\x40\x00\x1d\x00\x1c\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x28\x74\x00\x00"..., 832) = 832 [pid 306] fstat(3, {st_mode=S_IFREG|0755, st_size=186528, ...}) = 0 [pid 306] mmap(NULL, 194256, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f4e5dc17000 [pid 306] mmap(0x7f4e5dc1f000, 114688, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x8000) = 0x7f4e5dc1f000 [pid 306] mmap(0x7f4e5dc3b000, 32768, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x24000) = 0x7f4e5dc3b000 [pid 306] mmap(0x7f4e5dc43000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2c000) = 0x7f4e5dc43000 [pid 306] mmap(0x7f4e5dc45000, 5840, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f4e5dc45000 [pid 306] close(3) = 0 [pid 306] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4e5dc15000 [pid 306] openat(AT_FDCWD, "/lib64/libatomic.so.1", O_RDONLY|O_CLOEXEC) = 3 [pid 306] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x30\x71\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1b\x00\x1a\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x78\x1f\x00\x00"..., 832) = 832 [pid 306] fstat(3, {st_mode=S_IFREG|0755, st_size=30704, ...}) = 0 [pid 306] mmap(NULL, 37000, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f4e5dc0b000 [pid 306] mmap(0x7f4e5dc0d000, 12288, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f4e5dc0d000 [pid 306] mmap(0x7f4e5dc10000, 8192, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5000) = 0x7f4e5dc10000 [pid 306] mmap(0x7f4e5dc12000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6000) = 0x7f4e5dc12000 [pid 306] mmap(0x7f4e5dc14000, 136, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f4e5dc14000 [pid 306] close(3) = 0 [pid 306] openat(AT_FDCWD, "/lib64/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 306] openat(AT_FDCWD, "/usr/lib64/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = 3 [pid 306] read(3, "\x7f\x45\x4c\x46\x02\x01\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x3e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\xf0\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x38\x00\x0a\x00\x40\x00\x1a\x00\x19\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8\x20\x00\x00"..., 832) = 832 [pid 306] fstat(3, {st_mode=S_IFREG|0755, st_size=395120, ...}) = 0 [pid 306] mmap(NULL, 397336, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f4e5dba9000 [pid 306] mmap(0x7f4e5dbac000, 225280, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f4e5dbac000 [pid 306] mmap(0x7f4e5dbe3000, 155648, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3a000) = 0x7f4e5dbe3000 [pid 306] mmap(0x7f4e5dc09000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5f000) = 0x7f4e5dc09000 [pid 306] close(3) = 0 [pid 306] mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4e5dba7000 [pid 306] arch_prctl(ARCH_SET_FS, 0x7f4e5dba7c80) = 0 [pid 306] set_tid_address(0x7f4e5dba7f50) = 306 [pid 306] set_robust_list(0x7f4e5dba7f60, 24) = 0 [pid 306] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 32, 0, 0x53053053) = -1 ENOSYS (Function not implemented) [pid 306] mprotect(0x7f4e5de3d000, 16384, PROT_READ) = 0 [pid 306] mprotect(0x7f4e5dc09000, 4096, PROT_READ) = 0 [pid 306] mprotect(0x7f4e5dc12000, 4096, PROT_READ) = 0 [pid 306] mprotect(0x7f4e5dc43000, 4096, PROT_READ) = 0 [pid 306] mprotect(0x7f4e5dc54000, 4096, PROT_READ) = 0 [pid 306] mprotect(0x7f4e5dc6e000, 4096, PROT_READ) = 0 [pid 306] mprotect(0x7f4e5dc5d000, 4096, PROT_READ) = 0 [pid 306] mprotect(0x7f4e5df0e000, 12288, PROT_READ) = 0 [pid 306] mprotect(0x56057d2b3000, 4096, PROT_READ) = 0 [pid 306] mprotect(0x7f4e5df47000, 8192, PROT_READ) = 0 [pid 306] prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 [pid 306] statfs("/sys/fs/selinux", {f_type=SELINUX_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOSUID|ST_NOEXEC|ST_RELATIME}) = 0 [pid 306] statfs("/sys/fs/selinux", {f_type=SELINUX_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOSUID|ST_NOEXEC|ST_RELATIME}) = 0 [pid 306] getrandom("\x14\x2b\xe0\x59\x6a\xf4\x46\x87", 8, GRND_NONBLOCK) = 8 [pid 306] brk(NULL) = 0x5605b2652000 [pid 306] brk(0x5605b2673000) = 0x5605b2673000 [pid 306] access("/etc/selinux/config", F_OK) = 0 [pid 306] openat(AT_FDCWD, "./swap-file", O_WRONLY) = 3 [pid 306] lseek(3, 0, SEEK_END) = 128000000 [pid 306] lseek(3, 0, SEEK_SET) = 0 [pid 306] fstat(1, {st_mode=S_IFIFO|0600, st_size=0, ...}) = 0 [pid 306] fstat(3, {st_mode=S_IFREG|0600, st_size=128000000, ...}) = 0 [pid 306] fgetxattr(3, "security.selinux", "\x72\x6f\x6f\x74\x3a\x6f\x62\x6a\x65\x63\x74\x5f\x72\x3a\x75\x73\x65\x72\x5f\x68\x6f\x6d\x65\x5f\x74\x00", 255) = 26 [pid 306] access("/var/run/setrans/.setrans-unix", F_OK) = -1 ENOENT (No such file or directory) [pid 306] futex(0x7f4e5dc466b8, FUTEX_WAKE_PRIVATE, 2147483647) = 0 [pid 306] fsetxattr(3, "security.selinux", "\x72\x6f\x6f\x74\x3a\x6f\x62\x6a\x65\x63\x74\x5f\x72\x3a\x73\x77\x61\x70\x66\x69\x6c\x65\x5f\x74\x00", 25, 0) = 0 [pid 306] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1024) = 1024 [pid 306] write(3, "\x01\x00\x00\x00\x11\x7a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 516) = 516 [pid 306] lseek(3, 4086, SEEK_SET) = 4086 [pid 306] write(3, "SWAPSPACE2", 10) = 10 [pid 306] fsync(3) = 0 [pid 306] write(1, "Setting up swapspace version 1, size = 127995904 bytes\n", 55) = 55 [pid 306] exit_group(0) = ? Setting up swapspace version 1, size = 127995904 bytes [pid 306] +++ exited with 0 +++ rt_sigaction(SIGINT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff7bb22ade0}, NULL, 8) = 0 rt_sigaction(SIGQUIT, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7ff7bb22ade0}, NULL, 8) = 0 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=306, si_uid=0, si_status=0, si_utime=0, si_stime=5 /* 0.05 s */} --- [ 25.572798][ T306] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.581754][ T28] audit: type=1400 audit(1788998500.023:66): avc: denied { relabelto } for pid=306 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.607491][ T28] audit: type=1400 audit(1788998500.023:67): avc: denied { write } for pid=306 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.633366][ T28] audit: type=1400 audit(1788998500.053:68): avc: denied { read } for pid=305 comm="syz-executor112" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.633419][ T305] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k swapon("./swap-file", SWAP_FLAG_PREFER|0) = 0 getrandom("\xe2\xd2\x4f\xce\xea\xaa\x05\xe3", 8, GRND_NONBLOCK) = 8 mkdir("./syzkaller.qBuZL8", 0700) = 0 chmod("./syzkaller.qBuZL8", 0777) = 0 chdir("./syzkaller.qBuZL8") = 0 unshare(CLONE_NEWPID) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-android-6-1-perf/strace-static-x86_64: Process 307 attached , child_tidptr=0x55555b617690) = 307 [pid 305] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 307] set_robust_list(0x55555b6176a0, 24) = 0 [pid 307] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 307] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 307] getppid() = 0 [pid 307] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 307] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 307] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 307] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 307] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 307] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 307] unshare(CLONE_NEWNS) = 0 [pid 307] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 307] unshare(CLONE_NEWIPC) = -1 EINVAL (Invalid argument) [pid 307] unshare(CLONE_NEWCGROUP) = 0 [pid 307] unshare(CLONE_NEWUTS) = 0 [pid 307] unshare(CLONE_SYSVSEM) = 0 [pid 307] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 307] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 307] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 307] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 307] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 307] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 307] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 307] getpid() = 1 [pid 307] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [ 26.568678][ T307] __dump_stack+0x21/0x24 [ 26.573014][ T307] dump_stack_lvl+0x110/0x170 [ 26.577700][ T307] ? __cfi_dump_stack_lvl+0x8/0x8 [ 26.582754][ T307] ? bad_area_nosemaphore+0x2d/0x40 [ 26.587981][ T307] ? stack_map_get_build_id_offset+0x988/0x9b0 [ 26.594153][ T307] print_address_description+0x71/0x200 [ 26.599721][ T307] print_report+0x4a/0x60 [ 26.604075][ T307] kasan_report+0x122/0x150 [ 26.608601][ T307] ? stack_map_get_build_id_offset+0x988/0x9b0 [ 26.614771][ T307] __asan_report_store4_noabort+0x17/0x20 [ 26.620506][ T307] stack_map_get_build_id_offset+0x988/0x9b0 [ 26.626503][ T307] ? _raw_spin_unlock+0x4c/0x70 [ 26.631377][ T307] ? __bpf_get_stackid+0x960/0x960 [ 26.636507][ T307] ? pcpu_freelist_pop+0xac/0xf0 [ 26.641468][ T307] ? __cfi_pcpu_freelist_pop+0x10/0x10 [ 26.646945][ T307] __bpf_get_stackid+0x5ac/0x960 [ 26.651900][ T307] bpf_get_stackid_pe+0x2ee/0x400 [ 26.656939][ T307] bpf_prog_2414a5d5030ea31b+0x21/0x25 [ 26.662433][ T307] bpf_overflow_handler+0x3c7/0x5e0 [ 26.667647][ T307] ? __sys_bpf+0x57b/0x850 [ 26.672082][ T307] ? __cfi_bpf_overflow_handler+0x10/0x10 [ 26.677818][ T307] ? __this_cpu_preempt_check+0x13/0x20 [ 26.683387][ T307] ? __perf_event_account_interrupt+0x1a4/0x2c0 [ 26.689650][ T307] __perf_event_overflow+0x458/0x640 [ 26.694961][ T307] perf_swevent_event+0x243/0x440 [ 26.700009][ T307] ? perf_tp_event+0xa20/0xa20 [ 26.704793][ T307] ? unwind_get_return_address+0x4d/0x90 [ 26.710452][ T307] ___perf_sw_event+0x3bf/0x500 [ 26.715329][ T307] ? __cfi____perf_sw_event+0x10/0x10 [ 26.720742][ T307] ? is_bpf_text_address+0x177/0x190 [ 26.726052][ T307] ? stack_trace_save+0xa6/0xf0 [ 26.730922][ T307] ? __stack_depot_save+0x36/0x490 [ 26.736055][ T307] __perf_sw_event+0x134/0x270 [ 26.740842][ T307] do_user_addr_fault+0xfe9/0x1030 [ 26.745972][ T307] exc_page_fault+0x51/0xb0 [ 26.750493][ T307] asm_exc_page_fault+0x27/0x30 [ 26.755360][ T307] RIP: 0010:copy_user_short_string+0xd/0x40 [ 26.761278][ T307] Code: 74 0a 89 d1 f3 a4 89 c8 0f 01 ca c3 89 d0 0f 01 ca c3 01 ca eb e7 90 90 90 90 90 90 90 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 26.780895][ T307] RSP: 0018:ffffc90000e47298 EFLAGS: 00050202 [ 26.786980][ T307] RAX: ffffffff82692d01 RBX: 000000000000000b RCX: 0000000000000001 [ 26.794967][ T307] RDX: 0000000000000003 RSI: ffff8881223c866c RDI: 000020000000cf3d [ 26.802954][ T307] RBP: ffffc90000e472c0 R08: 40203023636e7566 R09: 1ffff110244790ce [ 26.810938][ T307] R10: dffffc0000000000 R11: ffffed10244790cf R12: 00007fffffffeff5 [ 26.818926][ T307] R13: 000000000000000b R14: 000020000000cf3d R15: ffff8881223c866c [ 26.826913][ T307] ? _copy_to_user+0x41/0x90 [ 26.831529][ T307] ? _copy_to_user+0x72/0x90 [ 26.836140][ T307] bpf_verifier_vlog+0x179/0x390 [ 26.841103][ T307] verbose+0x1f0/0x2b0 [ 26.845212][ T307] ? __cfi_verbose+0x10/0x10 [ 26.849813][ T307] ? security_capable+0x99/0xc0 [ 26.854686][ T307] bpf_check+0x2f1b/0x10e90 [ 26.859209][ T307] ? unwind_get_return_address+0x4d/0x90 [ 26.864863][ T307] ? __cfi_gfp_zone+0x10/0x10 [ 26.869555][ T307] ? __cfi_bpf_check+0x10/0x10 [ 26.874343][ T307] ? 0xffffffffa0000650 [ 26.878533][ T307] ? is_bpf_text_address+0x177/0x190 [ 26.883844][ T307] ? kernel_text_address+0xa0/0xd0 [ 26.888977][ T307] ? __kernel_text_address+0xd/0x30 [ 26.894202][ T307] ? unwind_get_return_address+0x4d/0x90 [ 26.899847][ T307] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 26.906023][ T307] ? arch_stack_walk+0xfc/0x150 [ 26.910896][ T307] ? stack_trace_save+0xa6/0xf0 [ 26.915776][ T307] ? __stack_depot_save+0x36/0x490 [ 26.920915][ T307] ? kasan_set_track+0x60/0x70 [ 26.925702][ T307] ? kasan_set_track+0x4b/0x70 [ 26.930485][ T307] ? kasan_save_alloc_info+0x1f/0x30 [ 26.935782][ T307] ? __kasan_kmalloc+0x95/0xb0 [ 26.940564][ T307] ? kmalloc_trace+0x40/0xb0 [ 26.945171][ T307] ? selinux_bpf_prog_alloc+0x51/0x140 [ 26.950648][ T307] ? security_bpf_prog_alloc+0x73/0xa0 [ 26.956132][ T307] ? bpf_prog_load+0xa03/0x1670 [ 26.960996][ T307] ? __sys_bpf+0x57b/0x850 [ 26.965429][ T307] ? __x64_sys_bpf+0x7c/0x90 [ 26.970030][ T307] ? x64_sys_call+0x488/0x9a0 [ 26.974727][ T307] ? do_syscall_64+0x4c/0xa0 [ 26.979339][ T307] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 26.985447][ T307] ? __kasan_check_write+0x14/0x20 [ 26.990577][ T307] ? _raw_spin_lock+0x94/0xf0 [ 26.995280][ T307] ? __cfi__raw_spin_lock+0x10/0x10 [ 27.000520][ T307] ? _raw_spin_unlock+0x4c/0x70 [ 27.005412][ T307] ? memset+0x35/0x40 [ 27.009412][ T307] ? bpf_obj_name_cpy+0x193/0x1e0 [ 27.014470][ T307] bpf_prog_load+0x10f4/0x1670 [ 27.019288][ T307] ? map_freeze+0x3a0/0x3a0 [ 27.023820][ T307] ? selinux_bpf+0xc7/0xf0 [ 27.028258][ T307] ? security_bpf+0x93/0xb0 [ 27.032794][ T307] __sys_bpf+0x57b/0x850 [ 27.037080][ T307] ? bpf_link_show_fdinfo+0x330/0x330 [ 27.042478][ T307] ? do_user_addr_fault+0x9a5/0x1030 [ 27.047790][ T307] ? debug_smp_processor_id+0x17/0x20 [ 27.053186][ T307] __x64_sys_bpf+0x7c/0x90 [ 27.057619][ T307] x64_sys_call+0x488/0x9a0 [ 27.062143][ T307] do_syscall_64+0x4c/0xa0 [ 27.066607][ T307] ? clear_bhb_loop+0x30/0x80 [ 27.071308][ T307] ? clear_bhb_loop+0x30/0x80 [ 27.075999][ T307] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 27.081908][ T307] RIP: 0033:0x7ff7bb213cf9 [ 27.086429][ T307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 27.106047][ T307] RSP: 002b:00007fff216ddca8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 27.114485][ T307] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007ff7bb213cf9 [ 27.122468][ T307] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 27.130449][ T307] RBP: 0000000000000000 R08: 0000000000000000 R09: 000055555b618010 [ 27.138430][ T307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 27.146412][ T307] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 27.154398][ T307] [ 27.157429][ T307] [ 27.159772][ T307] Allocated by task 307: [ 27.164018][ T307] kasan_set_track+0x4b/0x70 [ 27.168625][ T307] kasan_save_alloc_info+0x1f/0x30 [ 27.173756][ T307] __kasan_kmalloc+0x95/0xb0 [ 27.178362][ T307] __kmalloc_node+0xb2/0x1e0 [ 27.182960][ T307] bpf_map_area_alloc+0x4b/0xe0 [ 27.187825][ T307] prealloc_elems_and_freelist+0x8a/0x1e0 [ 27.193562][ T307] stack_map_alloc+0x398/0x520 [ 27.198332][ T307] map_create+0x467/0xcf0 [ 27.202676][ T307] __sys_bpf+0x34e/0x850 [ 27.206935][ T307] __x64_sys_bpf+0x7c/0x90 [ 27.211362][ T307] x64_sys_call+0x488/0x9a0 [ 27.215884][ T307] do_syscall_64+0x4c/0xa0 [ 27.220347][ T307] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 27.226258][ T307] [ 27.228597][ T307] The buggy address belongs to the object at ffff888113382000 [ 27.228597][ T307] which belongs to the cache kmalloc-1k of size 1024 [ 27.242670][ T307] The buggy address is located 816 bytes inside of [ 27.242670][ T307] 1024-byte region [ffff888113382000, ffff888113382400) [ 27.256045][ T307] [ 27.258383][ T307] The buggy address belongs to the physical page: [ 27.264798][ T307] page:ffffea00044ce000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x113380 [ 27.275062][ T307] head:ffffea00044ce000 order:3 compound_mapcount:0 compound_pincount:0 [ 27.283396][ T307] flags: 0x4000000000010200(slab|head|zone=1) [ 27.289498][ T307] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100043080 [ 27.298089][ T307] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 27.306676][ T307] page dumped because: kasan: bad access detected [ 27.313107][ T307] page_owner tracks the page as allocated [ 27.318827][ T307] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 40, tgid 40 (kworker/1:1), ts 26495132163, free_ts 26492443500 [ 27.339243][ T307] post_alloc_hook+0x1f5/0x210 [ 27.344133][ T307] prep_new_page+0x1c/0x110 [ 27.348677][ T307] get_page_from_freelist+0x2ca9/0x2d20 [ 27.354243][ T307] __alloc_pages+0x1fa/0x610 [ 27.358856][ T307] alloc_slab_page+0x6e/0xf0 [ 27.363467][ T307] new_slab+0x98/0x3e0 [ 27.367549][ T307] ___slab_alloc+0x70f/0xb70 [ 27.372185][ T307] __slab_alloc+0x5e/0xa0 [ 27.376537][ T307] __kmem_cache_alloc_node+0x204/0x2d0 [ 27.382017][ T307] __kmalloc_node_track_caller+0xa1/0x1e0 [ 27.387748][ T307] __alloc_skb+0x226/0x4a0 [ 27.392181][ T307] wg_socket_send_buffer_to_peer+0x37/0x170 [ 27.398082][ T307] wg_packet_send_handshake_response+0x1af/0x230 [ 27.404436][ T307] wg_packet_handshake_receive_worker+0x517/0xa40 [ 27.410874][ T307] process_one_work+0x717/0xc30 [ 27.415736][ T307] worker_thread+0xa4d/0x11d0 [ 27.420423][ T307] page last free stack trace: [ 27.425107][ T307] free_unref_page_prepare+0x81b/0x820 [ 27.430586][ T307] free_unref_page+0x93/0x530 [ 27.435286][ T307] __free_pages+0x67/0x100 [ 27.439713][ T307] __free_slab+0xc7/0x1a0 [ 27.444049][ T307] __unfreeze_partials+0x15a/0x190 [ 27.449179][ T307] put_cpu_partial+0xa9/0x100 [ 27.453875][ T307] __slab_free+0x1c4/0x280 [ 27.458309][ T307] ___cache_free+0xbf/0xd0 [ 27.462743][ T307] qlist_free_all+0xc6/0x140 [ 27.467349][ T307] kasan_quarantine_reduce+0x14a/0x170 [ 27.472819][ T307] __kasan_slab_alloc+0x24/0x80 [ 27.477687][ T307] slab_post_alloc_hook+0x4f/0x2d0 [ 27.482816][ T307] __kmem_cache_alloc_node+0x194/0x2d0 [ 27.488295][ T307] __kmalloc_node+0xa2/0x1e0 [ 27.492897][ T307] kvmalloc_node+0x28a/0x460 [ 27.497502][ T307] do_getxattr+0xde/0x350 [ 27.501853][ T307] [ 27.504197][ T307] Memory state around the buggy address: [ 27.509834][ T307] ffff888113382200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 27.517908][ T307] ffff888113382280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 27.525976][ T307] >ffff888113382300: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 27.534046][ T307] ^ [ 27.539679][ T307] ffff888113382380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 27.547743][ T307] ffff888113382400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [pid 307] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_SK_REUSEPORT, insn_cnt=4, insns=0x2000000000c0, license="GPL", log_level=2, log_size=64912, log_buf="", kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=BPF_F_STRICT_ALIGNMENT|BPF_F_TEST_RND_HI32|BPF_F_XDP_HAS_FRAGS, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS}, 72) = 6 [pid 307] close(3) = 0 [pid 307] close(4) = 0 [pid 307] close(5) = 0 [pid 307] close(6) = 0 [pid 307] close(7) = -1 EBADF (Bad file descriptor) [pid 307] close(8) = -1 EBADF (Bad file descriptor) [pid 307] close(9) = -1 EBADF (Bad file descriptor) [pid 307] close(10) = -1 EBADF (Bad file descriptor) [pid 307] close(11) = -1 EBADF (Bad file descriptor) [pid 307] close(12) = -1 EBADF (Bad file descriptor) [pid 307] close(13) = -1 EBADF (Bad file descriptor) [pid 307] close(14) = -1 EBADF (Bad file descriptor) [pid 307] close(15) = -1 EBADF (Bad file descriptor) [pid 307] close(16) = -1 EBADF (Bad file descriptor) [pid 307] close(17) = -1 EBADF (Bad file descriptor) [pid 307] close(18) = -1 EBADF (Bad file descriptor) [pid 307] close(19) = -1 EBADF (Bad file descriptor) [pid 307] close(20) = -1 EBADF (Bad file descriptor) [pid 307] close(21) = -1 EBADF (Bad file descriptor) [pid 307] close(22) = -1 EBADF (Bad file descriptor) [pid 307] close(23) = -1 EBADF (Bad file descriptor) [pid 307] close(24) = -1 EBADF (Bad file descriptor) [pid 307] close(25) = -1 EBADF (Bad file descriptor) [pid 307] close(26) = -1 EBADF (Bad file descriptor) [pid 307] close(27) = -1 EBADF (Bad file descriptor) [pid 307] close(28) = -1 EBADF (Bad file descriptor) [pid 307] close(29) = -1 EBADF (Bad file descriptor) [pid 307] exit_group(1) = ? [pid 307] +++ exited with 1 +++ [ 27.555804][ T307] ================================================================== [ 27.563863][ T307] Disabling lock debugging due to kernel taint --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=307, si_uid=0, si_status=1, si_utime=0, si_stime=28 /* 0.28 s */} --- exit_group(0) = ? +++ exited with 0 +++ [