./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor375063108 <...> 0 audit(1705979148.880:63): avc: denied { write } for pid=224 comm="sh" path="pipe:[13281]" dev="pipefs" ino=13281 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 11.698440][ T30] audit: type=1400 audit(1705979148.880:64): avc: denied { rlimitinh } for pid=224 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 11.702342][ T30] audit: type=1400 audit(1705979148.880:65): avc: denied { siginh } for pid=224 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.48' (ED25519) to the list of known hosts. execve("./syz-executor375063108", ["./syz-executor375063108"], 0x7ffcf9f0cdb0 /* 10 vars */) = 0 brk(NULL) = 0x555556449000 brk(0x555556449d00) = 0x555556449d00 arch_prctl(ARCH_SET_FS, 0x555556449380) = 0 set_tid_address(0x555556449650) = 292 set_robust_list(0x555556449660, 24) = 0 rseq(0x555556449ca0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor375063108", 4096) = 27 getrandom("\x69\x0e\x70\x91\xc7\x5e\xc6\x7e", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556449d00 brk(0x55555646ad00) = 0x55555646ad00 brk(0x55555646b000) = 0x55555646b000 mprotect(0x7f98217e6000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556449650) = 293 ./strace-static-x86_64: Process 293 attached [pid 293] set_robust_list(0x555556449660, 24) = 0 [pid 293] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 293] setpgid(0, 0) = 0 [pid 293] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 293] write(3, "1000", 4) = 4 [pid 293] close(3) = 0 [ 19.844406][ T30] audit: type=1400 audit(1705979157.030:66): avc: denied { execmem } for pid=292 comm="syz-executor375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.849288][ T30] audit: type=1400 audit(1705979157.040:67): avc: denied { prog_load } for pid=293 comm="syz-executor375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 19.853692][ T30] audit: type=1400 audit(1705979157.040:68): avc: denied { bpf } for pid=293 comm="syz-executor375" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 19.858947][ T30] audit: type=1400 audit(1705979157.040:69): avc: denied { perfmon } for pid=293 comm="syz-executor375" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 19.981730][ T30] audit: type=1400 audit(1705979157.170:70): avc: denied { confidentiality } for pid=293 comm="syz-executor375" lockdown_reason="use of bpf to read kernel RAM" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 20.006173][ T30] audit: type=1400 audit(1705979157.190:71): avc: denied { prog_run } for pid=293 comm="syz-executor375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 20.025183][ T14] BUG: unable to handle page fault for address: ffffffffff600000 [ 20.032618][ T14] #PF: supervisor read access in kernel mode [ 20.038433][ T14] #PF: error_code(0x0001) - permissions violation [ 20.044684][ T14] PGD 6812067 P4D 6812067 PUD 6814067 PMD 6816067 PTE 8000000006809165 [ 20.052755][ T14] Oops: 0001 [#1] PREEMPT SMP KASAN [ 20.057786][ T14] CPU: 0 PID: 14 Comm: rcu_preempt Not tainted 5.15.147-syzkaller-00327-g1c3a1f32bcbd #0 [ 20.067422][ T14] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 20.077315][ T14] RIP: 0010:strncpy_from_kernel_nofault+0x92/0x1e0 [ 20.083649][ T14] Code: d0 48 c1 e8 03 48 89 45 c0 42 0f b6 04 30 84 c0 48 89 55 c8 0f 85 eb 00 00 00 ff 02 45 31 e4 48 8b 55 d0 4c 8b 7d b8 49 89 dd <42> 8a 1c 23 4a 8d 3c 22 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 20.103092][ T14] RSP: 0018:ffffc900000e78c8 EFLAGS: 00010046 [ 20.108994][ T14] RAX: 0000000000000000 RBX: ffffffffff600000 RCX: ffff8881002693c0 [ 20.116806][ T14] RDX: ffffc900000e7968 RSI: ffffffffff600000 RDI: ffffffffff600000 [ 20.124615][ T14] RBP: ffffc900000e7910 R08: ffffffff8135f40d R09: ffffed102004d279 [ 20.132427][ T14] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 20.140237][ T14] R13: ffffffffff600000 R14: dffffc0000000000 R15: 0000000000000008 [ 20.148052][ T14] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 20.156815][ T14] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 20.163239][ T14] CR2: ffffffffff600000 CR3: 000000011e4ce000 CR4: 00000000003506b0 [ 20.171052][ T14] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 20.178861][ T14] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 20.186671][ T14] Call Trace: [ 20.189798][ T14] [ 20.192577][ T14] ? __die_body+0x62/0xb0 [ 20.196747][ T14] ? __die+0x7e/0x90 [ 20.200472][ T14] ? page_fault_oops+0x7f9/0xa90 [ 20.205247][ T14] ? kernelmode_fixup_or_oops+0x270/0x270 [ 20.210802][ T14] ? exc_page_fault+0x521/0x830 [ 20.215491][ T14] ? asm_exc_page_fault+0x27/0x30 [ 20.220348][ T14] ? copy_from_kernel_nofault_allowed+0x8d/0x100 [ 20.226513][ T14] ? strncpy_from_kernel_nofault+0x92/0x1e0 [ 20.232240][ T14] ? strncpy_from_kernel_nofault+0x41/0x1e0 [ 20.237982][ T14] bpf_probe_read_compat_str+0x112/0x180 [ 20.243440][ T14] bpf_prog_f17ebaf3f5f7baf8+0x3a/0xa00 [ 20.248815][ T14] bpf_trace_run3+0x11e/0x250 [ 20.253326][ T14] ? exc_int3+0xf/0x70 [ 20.257236][ T14] ? bpf_trace_run2+0x210/0x210 [ 20.261921][ T14] ? __schedule+0x12bc/0x1580 [ 20.266435][ T14] __bpf_trace_sched_switch+0xb/0x10 [ 20.271554][ T14] __schedule+0x133d/0x1580 [ 20.275895][ T14] ? __sched_text_start+0x8/0x8 [ 20.280583][ T14] ? __kasan_check_write+0x14/0x20 [ 20.285530][ T14] schedule+0x11f/0x1e0 [ 20.289523][ T14] schedule_timeout+0x18c/0x370 [ 20.294206][ T14] ? _raw_spin_unlock_irq+0x4e/0x70 [ 20.299244][ T14] ? console_conditional_schedule+0x30/0x30 [ 20.304980][ T14] ? update_process_times+0x200/0x200 [ 20.310181][ T14] ? prepare_to_swait_event+0x308/0x320 [ 20.315573][ T14] rcu_gp_fqs_loop+0x2af/0xf80 [ 20.320161][ T14] ? debug_smp_processor_id+0x17/0x20 [ 20.325367][ T14] ? __note_gp_changes+0x4ab/0x920 [ 20.330313][ T14] ? rcu_gp_init+0xc30/0xc30 [ 20.334739][ T14] ? _raw_spin_unlock_irq+0x4e/0x70 [ 20.339782][ T14] ? rcu_gp_init+0x9cf/0xc30 [ 20.344208][ T14] rcu_gp_kthread+0xa4/0x350 [ 20.348635][ T14] ? _raw_spin_lock+0x1b0/0x1b0 [ 20.353313][ T14] ? rcu_barrier_callback+0x50/0x50 [ 20.358355][ T14] ? __kasan_check_read+0x11/0x20 [ 20.363206][ T14] ? __kthread_parkme+0xb2/0x200 [ 20.367980][ T14] kthread+0x421/0x510 [ 20.371885][ T14] ? rcu_barrier_callback+0x50/0x50 [ 20.376920][ T14] ? kthread_blkcg+0xd0/0xd0 [ 20.381346][ T14] ret_from_fork+0x1f/0x30 [ 20.385600][ T14] [ 20.388462][ T14] Modules linked in: [ 20.392196][ T14] CR2: ffffffffff600000 [ 20.396190][ T14] ---[ end trace b275ba0c1aeea0e0 ]--- [ 20.401481][ T14] RIP: 0010:strncpy_from_kernel_nofault+0x92/0x1e0 [ 20.407819][ T14] Code: d0 48 c1 e8 03 48 89 45 c0 42 0f b6 04 30 84 c0 48 89 55 c8 0f 85 eb 00 00 00 ff 02 45 31 e4 48 8b 55 d0 4c 8b 7d b8 49 89 dd <42> 8a 1c 23 4a 8d 3c 22 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 20.427260][ T14] RSP: 0018:ffffc900000e78c8 EFLAGS: 00010046 [ 20.433161][ T14] RAX: 0000000000000000 RBX: ffffffffff600000 RCX: ffff8881002693c0 [ 20.440972][ T14] RDX: ffffc900000e7968 RSI: ffffffffff600000 RDI: ffffffffff600000 [ 20.448783][ T14] RBP: ffffc900000e7910 R08: ffffffff8135f40d R09: ffffed102004d279 [ 20.456594][ T14] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 20.464405][ T14] R13: ffffffffff600000 R14: dffffc0000000000 R15: 0000000000000008 [ 20.472217][ T14] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 20.480980][ T14] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 20.487405][ T14] CR2: ffffffffff600000 CR3: 000000011e4ce000 CR4: 00000000003506b0 [ 20.495332][ T14] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 20.503129][ T14] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 20.510942][ T14] Kernel panic - not syncing: Fatal exception [ 20.517017][ T14] Kernel Offset: disabled [ 20.521133][ T14] Rebooting in 86400 seconds..