execve("/usr/bin/bash", ["bash", "-c", "echo \"Hello world!\" > test.txt"], 0x7ffd5cea6840 /* 73 vars */) = 0 brk(NULL) = 0x55f147652000 arch_prctl(0x3001 /* ARCH_??? */, 0x7ffd88768d30) = -1 EINVAL (Invalid argument) access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3 fstat(3, {st_mode=S_IFREG|0644, st_size=328713, ...}) = 0 mmap(NULL, 328713, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f68bd771000 close(3) = 0 openat(AT_FDCWD, "/usr/lib/libreadline.so.7", O_RDONLY|O_CLOEXEC) = 3 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0pU\1\0\0\0\0\0"..., 832) = 832 fstat(3, {st_mode=S_IFREG|0555, st_size=359664, ...}) = 0 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f68bd76f000 mmap(NULL, 2410728, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f68bd522000 mprotect(0x7f68bd565000, 2097152, PROT_NONE) = 0 mmap(0x7f68bd765000, 36864, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x43000) = 0x7f68bd765000 mmap(0x7f68bd76e000, 2280, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f68bd76e000 close(3) = 0 openat(AT_FDCWD, "/usr/lib/libdl.so.2", O_RDONLY|O_CLOEXEC) = 3 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0 \20\0\0\0\0\0\0"..., 832) = 832 fstat(3, {st_mode=S_IFREG|0755, st_size=14232, ...}) = 0 mmap(NULL, 16528, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f68bd51d000 mmap(0x7f68bd51e000, 4096, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1000) = 0x7f68bd51e000 mmap(0x7f68bd51f000, 4096, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f68bd51f000 mmap(0x7f68bd520000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f68bd520000 close(3) = 0 openat(AT_FDCWD, "/usr/lib/libc.so.6", O_RDONLY|O_CLOEXEC) = 3 read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0000C\2\0\0\0\0\0"..., 832) = 832 lseek(3, 792, SEEK_SET) = 792 read(3, "\4\0\0\0\24\0\0\0\3\0\0\0GNU\0\210o7\21\1\307=\311\366\263\256\202p\3777\335"..., 68) = 68 fstat(3, {st_mode=S_IFREG|0755, st_size=2136840, ...}) = 0 lseek(3, 792, SEEK_SET) = 792 read(3, "\4\0\0\0\24\0\0\0\3\0\0\0GNU\0\210o7\21\1\307=\311\366\263\256\202p\3777\335"..., 68) = 68 lseek(3, 864, SEEK_SET) = 864 read(3, "\4\0\0\0\20\0\0\0\5\0\0\0GNU\0\2\0\0\300\4\0\0\0\3\0\0\0\0\0\0\0", 32) = 32 mmap(NULL, 1848896, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f68bd359000 mprotect(0x7f68bd37b000, 1671168, PROT_NONE) = 0 mmap(0x7f68bd37b000, 1355776, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x22000) = 0x7f68bd37b000 mmap(0x7f68bd4c6000, 311296, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x16d000) = 0x7f68bd4c6000 mmap(0x7f68bd513000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1b9000) = 0x7f68bd513000 mmap(0x7f68bd519000, 13888, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f68bd519000 close(3) = 0 openat(AT_FDCWD, "/usr/lib/libncursesw.so.6", O_RDONLY|O_CLOEXEC) = 3 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\260`\1\0\0\0\0\0"..., 832) = 832 fstat(3, {st_mode=S_IFREG|0755, st_size=457800, ...}) = 0 mmap(NULL, 2542936, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f68bd0ec000 mprotect(0x7f68bd154000, 2093056, PROT_NONE) = 0 mmap(0x7f68bd353000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x67000) = 0x7f68bd353000 close(3) = 0 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f68bd0ea000 arch_prctl(ARCH_SET_FS, 0x7f68bd0eab80) = 0 mprotect(0x7f68bd513000, 16384, PROT_READ) = 0 mprotect(0x7f68bd353000, 20480, PROT_READ) = 0 mprotect(0x7f68bd520000, 4096, PROT_READ) = 0 mprotect(0x7f68bd765000, 12288, PROT_READ) = 0 mprotect(0x55f14582e000, 12288, PROT_READ) = 0 mprotect(0x7f68bd7eb000, 4096, PROT_READ) = 0 munmap(0x7f68bd771000, 328713) = 0 openat(AT_FDCWD, "/dev/tty", O_RDWR|O_NONBLOCK) = 3 close(3) = 0 brk(NULL) = 0x55f147652000 brk(0x55f147673000) = 0x55f147673000 openat(AT_FDCWD, "/usr/lib/locale/locale-archive", O_RDONLY|O_CLOEXEC) = 3 fstat(3, {st_mode=S_IFREG|0644, st_size=3382064, ...}) = 0 mmap(NULL, 3382064, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f68bcdb0000 close(3) = 0 getuid() = 1001 getgid() = 1001 geteuid() = 1001 getegid() = 1001 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0 ioctl(-1, TIOCGPGRP, 0x7ffd88768ba4) = -1 EBADF (Bad file descriptor) sysinfo({uptime=20040, loads=[0, 4832, 4448], totalram=8238919680, freeram=6886989824, sharedram=82219008, bufferram=4341760, totalswap=0, freeswap=0, procs=294, totalhigh=0, freehigh=0, mem_unit=1}) = 0 rt_sigaction(SIGCHLD, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7f68bd390e00}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 rt_sigaction(SIGCHLD, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7f68bd390e00}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7f68bd390e00}, 8) = 0 rt_sigaction(SIGINT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f68bd390e00}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 rt_sigaction(SIGINT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f68bd390e00}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f68bd390e00}, 8) = 0 rt_sigaction(SIGQUIT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f68bd390e00}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 rt_sigaction(SIGQUIT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f68bd390e00}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f68bd390e00}, 8) = 0 rt_sigaction(SIGTSTP, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f68bd390e00}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 rt_sigaction(SIGTSTP, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f68bd390e00}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f68bd390e00}, 8) = 0 rt_sigaction(SIGTTIN, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f68bd390e00}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 rt_sigaction(SIGTTIN, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f68bd390e00}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f68bd390e00}, 8) = 0 rt_sigaction(SIGTTOU, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f68bd390e00}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0 rt_sigaction(SIGTTOU, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f68bd390e00}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f68bd390e00}, 8) = 0 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0 rt_sigaction(SIGQUIT, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f68bd390e00}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f68bd390e00}, 8) = 0 uname({sysname="Linux", nodename="ida", ...}) = 0 stat("/home/test", {st_mode=S_IFDIR|0700, st_size=272, ...}) = 0 stat(".", {st_mode=S_IFDIR|0700, st_size=272, ...}) = 0 stat("/home", {st_mode=S_IFDIR|0755, st_size=56, ...}) = 0 stat("/home/test", {st_mode=S_IFDIR|0700, st_size=272, ...}) = 0 stat("/home/toni", {st_mode=S_IFDIR|0700, st_size=4068, ...}) = 0 getpid() = 3061 openat(AT_FDCWD, "/usr/lib/gconv/gconv-modules.cache", O_RDONLY) = -1 ENOENT (No such file or directory) openat(AT_FDCWD, "/usr/lib/gconv/gconv-modules", O_RDONLY|O_CLOEXEC) = 3 fstat(3, {st_mode=S_IFREG|0644, st_size=56352, ...}) = 0 read(3, "# GNU libc iconv configuration.\n"..., 4096) = 4096 read(3, "1002//\tJUS_I.B1.002//\nmodule\tJUS"..., 4096) = 4096 read(3, "ISO-IR-110//\t\tISO-8859-4//\nalias"..., 4096) = 4096 read(3, "\t\tISO-8859-14//\nalias\tISO_8859-1"..., 4096) = 4096 read(3, "IC-ES//\nalias\tEBCDICES//\t\tEBCDIC"..., 4096) = 4096 read(3, "DIC-CP-ES//\t\tIBM284//\nalias\tCSIB"..., 4096) = 4096 read(3, "\tIBM863//\nalias\tOSF1002035F//\t\tI"..., 4096) = 4096 read(3, "37//\t\tIBM937//\nmodule\tIBM937//\t\t"..., 4096) = 4096 brk(0x55f147694000) = 0x55f147694000 read(3, "JIS//\t\t\tEUC-JP//\nmodule\tEUC-JP//"..., 4096) = 4096 read(3, "ias\tISO2022CN//\t\tISO-2022-CN//\nm"..., 4096) = 4096 read(3, "_5427-EXT//\nalias\tISO_5427EXT//\t"..., 4096) = 4096 read(3, "st\nmodule\tMAC-SAMI//\t\tINTERNAL\t\t"..., 4096) = 4096 read(3, "12//\t\tINTERNAL\t\tIBM1112\t\t1\nmodul"..., 4096) = 4096 read(3, "\tCP9448//\t\tIBM9448//\nalias\tCSIBM"..., 4096) = 3104 read(3, "", 4096) = 0 close(3) = 0 getppid() = 3059 stat(".", {st_mode=S_IFDIR|0700, st_size=272, ...}) = 0 stat("/home/toni/Documents/executables/overlay/bash", 0x7ffd88768820) = -1 EACCES (Permission denied) stat("/usr/local/sbin/bash", 0x7ffd88768820) = -1 ENOENT (No such file or directory) stat("/usr/local/bin/bash", 0x7ffd88768820) = -1 ENOENT (No such file or directory) stat("/usr/bin/bash", {st_mode=S_IFREG|0755, st_size=866600, ...}) = 0 stat("/usr/bin/bash", {st_mode=S_IFREG|0755, st_size=866600, ...}) = 0 geteuid() = 1001 getegid() = 1001 getuid() = 1001 getgid() = 1001 access("/usr/bin/bash", X_OK) = 0 stat("/usr/bin/bash", {st_mode=S_IFREG|0755, st_size=866600, ...}) = 0 geteuid() = 1001 getegid() = 1001 getuid() = 1001 getgid() = 1001 access("/usr/bin/bash", R_OK) = 0 stat("/usr/bin/bash", {st_mode=S_IFREG|0755, st_size=866600, ...}) = 0 stat("/usr/bin/bash", {st_mode=S_IFREG|0755, st_size=866600, ...}) = 0 geteuid() = 1001 getegid() = 1001 getuid() = 1001 getgid() = 1001 access("/usr/bin/bash", X_OK) = 0 stat("/usr/bin/bash", {st_mode=S_IFREG|0755, st_size=866600, ...}) = 0 geteuid() = 1001 getegid() = 1001 getuid() = 1001 getgid() = 1001 access("/usr/bin/bash", R_OK) = 0 getpid() = 3061 getpgrp() = 3059 ioctl(2, TIOCGPGRP, [3059]) = 0 rt_sigaction(SIGCHLD, {sa_handler=0x55f1455aa740, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7f68bd390e00}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7f68bd390e00}, 8) = 0 prlimit64(0, RLIMIT_NPROC, NULL, {rlim_cur=31104, rlim_max=31104}) = 0 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0 getpeername(0, 0x7ffd88768ba0, [16]) = -1 ENOTSOCK (Socket operation on non-socket) rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0 openat(AT_FDCWD, "test.txt", O_WRONLY|O_CREAT|O_TRUNC, 0666) = 3 fcntl(1, F_GETFD) = 0 fcntl(1, F_DUPFD, 10) = 10 fcntl(1, F_GETFD) = 0 fcntl(10, F_SETFD, FD_CLOEXEC) = 0 dup2(3, 1) = 1 close(3) = 0 fstat(1, {st_mode=S_IFREG|0600, st_size=0, ...}) = 0 write(1, "Hello world!\n", 13) = 13 dup2(10, 1) = 1 fcntl(10, F_GETFD) = 0x1 (flags FD_CLOEXEC) close(10) = 0 rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 exit_group(0) = ? +++ exited with 0 +++