./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2618745525
<...>
[ 29.097722][ T3187] 8021q: adding VLAN 0 to HW filter on device bond0
[ 29.107795][ T3187] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
syzkaller login: [ 38.980272][ T27] kauditd_printk_skb: 37 callbacks suppressed
[ 38.980282][ T27] audit: type=1400 audit(1660546039.116:73): avc: denied { transition } for pid=3394 comm="sshd" path="/bin/sh" dev="sda1" ino=73 scontext=system_u:system_r:initrc_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 39.010619][ T27] audit: type=1400 audit(1660546039.146:74): avc: denied { write } for pid=3394 comm="sh" path="pipe:[27527]" dev="pipefs" ino=27527 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:initrc_t tclass=fifo_file permissive=1
Warning: Permanently added '10.128.1.95' (ECDSA) to the list of known hosts.
execve("./syz-executor2618745525", ["./syz-executor2618745525"], 0x7ffe764cb610 /* 10 vars */) = 0
brk(NULL) = 0x555555a54000
brk(0x555555a54d00) = 0x555555a54d00
arch_prctl(ARCH_SET_FS, 0x555555a543c0) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor2618745525", 4096) = 28
brk(0x555555a75d00) = 0x555555a75d00
brk(0x555555a76000) = 0x555555a76000
mprotect(0x7fb29c5b9000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGSEGV, {sa_handler=0x7fb29c50aae0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7fb29c50add0}, NULL, 8) = 0
rt_sigaction(SIGBUS, {sa_handler=0x7fb29c50aae0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7fb29c50add0}, NULL, 8) = 0
mkdir("./file0", 0777) = 0
--- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} ---
pipe2([3, 4], 0) = 0
write(4, "\x15\x00\x00\x00\x65\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 21) = 21
dup(4) = 5
mount(NULL, "./file0", "9p", 0, "trans=fd,rfdno=0x0000000000000003,wfdno=0x0000000000000005,") = -1 EREMOTEIO (Remote I/O error)
write(5, "\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 24) = 24
write(5, "\xb0\x00\x00\x00\x00\x00\x00\x6b\x2e\x7f\xb3\xf3\x73\x25\xda\x31\x44\x1d\xb4\x8c\xe3\x66\xa2\x33\xa6\x5b\x0f\xf5\x73\x17\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 176) = 176
write(5, "\x4c\x01\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 311) = 311
mount(NULL, "./file0", "9p", 0, "trans=fd,rfdno=0x0000000000000003,wfdno=0x0000000000000004,") = 0
[ 48.799194][ T27] audit: type=1400 audit(1660546048.926:75): avc: denied { execmem } for pid=3607 comm="syz-executor261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 48.826230][ T27] audit: type=1400 audit(1660546048.956:76): avc: denied { mounton } for pid=3607 comm="syz-executor261" path="/root/file0" dev="sda1" ino=1138 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[ 48.854901][ T3607] ------------[ cut here ]------------
[ 48.858339][ T27] audit: type=1400 audit(1660546048.976:77): avc: denied { mount } for pid=3607 comm="syz-executor261" name="/" dev="9p" ino=17658433433331984101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 48.861118][ T3607] WARNING: CPU: 1 PID: 3607 at fs/inode.c:388 inc_nlink+0x144/0x160
[ 48.885161][ T27] audit: type=1400 audit(1660546048.986:78): avc: denied { write } for pid=3607 comm="syz-executor261" name="/" dev="9p" ino=17658433433331984101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 48.915821][ T3607] Modules linked in:
[ 48.915840][ T3607] CPU: 1 PID: 3607 Comm: syz-executor261 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0
[ 48.920389][ T27] audit: type=1400 audit(1660546048.986:79): avc: denied { add_name } for pid=3607 comm="syz-executor261" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 48.951042][ T3607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022
[ 48.951061][ T3607] RIP: 0010:inc_nlink+0x144/0x160
[ 48.961638][ T27] audit: type=1400 audit(1660546048.986:80): avc: denied { create } for pid=3607 comm="syz-executor261" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[ 48.986562][ T3607] Code: ff 4c 89 e7 e8 9d f1 ea ff e9 42 ff ff ff 4c 89 e7 e8 20 f1 ea ff e9 fc fe ff ff 4c 89 e7 e8 13 f1 ea ff eb d4 e8 2c 5b 9f ff <0f> 0b e9 6e ff ff ff e8 10 f1 ea ff e9 44 ff ff ff e8 06 f1 ea ff
[ 48.986589][ T3607] RSP: 0018:ffffc900030c7ca0 EFLAGS: 00010293
[ 48.986610][ T3607] RAX: 0000000000000000 RBX: ffff88806b09c618 RCX: 0000000000000000
[ 48.986625][ T3607] RDX: ffff888073d8a100 RSI: ffffffff81dbda94 RDI: 0000000000000007
[ 48.987299][ T27] audit: type=1400 audit(1660546048.986:81): avc: denied { associate } for pid=3607 comm="syz-executor261" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 49.012447][ T3607] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000
[ 49.058282][ T3607] R10: 0000000000000000 R11: 000000000000001d R12: ffff88806b09c660
[ 49.066307][ T3607] R13: ffff888070fa7c40 R14: 1ffff92000618f9c R15: ffff88801c12dc00
[ 49.074320][ T3607] FS: 0000555555a543c0(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
[ 49.083285][ T3607] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 49.089923][ T3607] CR2: 0000561766573908 CR3: 0000000021437000 CR4: 00000000003506e0
[ 49.097885][ T3607] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 49.105886][ T3607] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 49.113972][ T3607] Call Trace:
[ 49.117246][ T3607]
[ 49.120559][ T3607] v9fs_vfs_mkdir_dotl+0x5c5/0x900
[ 49.125692][ T3607] ? v9fs_vfs_create_dotl+0x30/0x30
[ 49.130945][ T3607] ? __inode_security_revalidate+0x140/0x140
[ 49.136961][ T3607] ? selinux_inode_init_security+0x6b0/0x6b0
[ 49.143036][ T3607] ? capable_wrt_inode_uidgid+0xe6/0x170
[ 49.148721][ T3607] vfs_mkdir+0x489/0x740
[ 49.153003][ T3607] do_mkdirat+0x28c/0x310
[ 49.157345][ T3607] ? __ia32_sys_mknod+0xa0/0xa0
[ 49.162231][ T3607] ? getname_flags.part.0+0x1dd/0x4f0
[ 49.167614][ T3607] __x64_sys_mkdir+0xf2/0x140
[ 49.172336][ T3607] do_syscall_64+0x35/0xb0
[ 49.176765][ T3607] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 49.182697][ T3607] RIP: 0033:0x7fb29c54c819
[ 49.187120][ T3607] Code: 28 c3 e8 5a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 49.206769][ T3607] RSP: 002b:00007ffc002e27d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[ 49.215284][ T3607] RAX: ffffffffffffffda RBX: 00007ffc002e27e8 RCX: 00007fb29c54c819
[ 49.223316][ T3607] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200002c0
[ 49.231556][ T3607] RBP: 00007ffc002e27e0 R08: 00007fb29c50aae0 R09: 00007fb29c50aae0
[ 49.239586][ T3607] R10: 0000000020000340 R11: 0000000000000246 R12: 0000000000000000
[ 49.247586][ T3607] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 49.255629][ T3607]
[ 49.258653][ T3607] Kernel panic - not syncing: panic_on_warn set ...
[ 49.265222][ T3607] CPU: 1 PID: 3607 Comm: syz-executor261 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0
[ 49.275358][ T3607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022
[ 49.285403][ T3607] Call Trace:
[ 49.288684][ T3607]
[ 49.291603][ T3607] dump_stack_lvl+0xcd/0x134
[ 49.296199][ T3607] panic+0x2c8/0x627
[ 49.300094][ T3607] ? panic_print_sys_info.part.0+0x10b/0x10b
[ 49.306073][ T3607] ? __warn.cold+0x248/0x2c4
[ 49.310687][ T3607] ? inc_nlink+0x144/0x160
[ 49.315092][ T3607] __warn.cold+0x259/0x2c4
[ 49.319496][ T3607] ? inc_nlink+0x144/0x160
[ 49.323897][ T3607] report_bug+0x1bc/0x210
[ 49.328214][ T3607] handle_bug+0x3c/0x60
[ 49.332359][ T3607] exc_invalid_op+0x14/0x40
[ 49.336848][ T3607] asm_exc_invalid_op+0x16/0x20
[ 49.341685][ T3607] RIP: 0010:inc_nlink+0x144/0x160
[ 49.346699][ T3607] Code: ff 4c 89 e7 e8 9d f1 ea ff e9 42 ff ff ff 4c 89 e7 e8 20 f1 ea ff e9 fc fe ff ff 4c 89 e7 e8 13 f1 ea ff eb d4 e8 2c 5b 9f ff <0f> 0b e9 6e ff ff ff e8 10 f1 ea ff e9 44 ff ff ff e8 06 f1 ea ff
[ 49.366299][ T3607] RSP: 0018:ffffc900030c7ca0 EFLAGS: 00010293
[ 49.372367][ T3607] RAX: 0000000000000000 RBX: ffff88806b09c618 RCX: 0000000000000000
[ 49.380335][ T3607] RDX: ffff888073d8a100 RSI: ffffffff81dbda94 RDI: 0000000000000007
[ 49.388310][ T3607] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000
[ 49.396278][ T3607] R10: 0000000000000000 R11: 000000000000001d R12: ffff88806b09c660
[ 49.404251][ T3607] R13: ffff888070fa7c40 R14: 1ffff92000618f9c R15: ffff88801c12dc00
[ 49.412241][ T3607] ? inc_nlink+0x144/0x160
[ 49.416660][ T3607] v9fs_vfs_mkdir_dotl+0x5c5/0x900
[ 49.421774][ T3607] ? v9fs_vfs_create_dotl+0x30/0x30
[ 49.426972][ T3607] ? __inode_security_revalidate+0x140/0x140
[ 49.432958][ T3607] ? selinux_inode_init_security+0x6b0/0x6b0
[ 49.438943][ T3607] ? capable_wrt_inode_uidgid+0xe6/0x170
[ 49.444591][ T3607] vfs_mkdir+0x489/0x740
[ 49.448832][ T3607] do_mkdirat+0x28c/0x310
[ 49.453171][ T3607] ? __ia32_sys_mknod+0xa0/0xa0
[ 49.458031][ T3607] ? getname_flags.part.0+0x1dd/0x4f0
[ 49.463411][ T3607] __x64_sys_mkdir+0xf2/0x140
[ 49.468088][ T3607] do_syscall_64+0x35/0xb0
[ 49.472507][ T3607] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 49.478401][ T3607] RIP: 0033:0x7fb29c54c819
[ 49.482814][ T3607] Code: 28 c3 e8 5a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 49.502421][ T3607] RSP: 002b:00007ffc002e27d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[ 49.510849][ T3607] RAX: ffffffffffffffda RBX: 00007ffc002e27e8 RCX: 00007fb29c54c819
[ 49.518823][ T3607] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200002c0
[ 49.526793][ T3607] RBP: 00007ffc002e27e0 R08: 00007fb29c50aae0 R09: 00007fb29c50aae0
[ 49.534762][ T3607] R10: 0000000020000340 R11: 0000000000000246 R12: 0000000000000000
[ 49.542728][ T3607] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 49.550699][ T3607]
[ 49.553979][ T3607] Kernel Offset: disabled
[ 49.558387][ T3607] Rebooting in 86400 seconds..