./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2366233899 <...> [ 29.588469][ T3187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.609878][ T3187] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller syzkaller login: [ 39.234927][ T27] kauditd_printk_skb: 37 callbacks suppressed [ 39.234942][ T27] audit: type=1400 audit(1664823629.561:73): avc: denied { transition } for pid=3394 comm="sshd" path="/bin/sh" dev="sda1" ino=73 scontext=system_u:system_r:initrc_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 39.263943][ T27] audit: type=1400 audit(1664823629.571:74): avc: denied { write } for pid=3394 comm="sh" path="pipe:[27889]" dev="pipefs" ino=27889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:initrc_t tclass=fifo_file permissive=1 Warning: Permanently added '10.128.1.47' (ECDSA) to the list of known hosts. execve("./syz-executor2366233899", ["./syz-executor2366233899"], 0x7ffd86c20b60 /* 10 vars */) = 0 brk(NULL) = 0x555555c1a000 brk(0x555555c1ac40) = 0x555555c1ac40 arch_prctl(ARCH_SET_FS, 0x555555c1a300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2366233899", 4096) = 28 brk(0x555555c3bc40) = 0x555555c3bc40 brk(0x555555c3c000) = 0x555555c3c000 mprotect(0x7f9f6fc94000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 ftruncate(3, 18771) = 0 pwrite64(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xa3\xb8\xb2\x0f\xcf\x7a\xa8\x36\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 224, 0) = 224 pwrite64(3, "\x46\x49\x4c\x45\x30\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x01\x00\x40\x00\x01\x00\xa0\x01\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x60\x00\x00\x00\x00\x00\x18\x00\x00\x00\x00\x00\x48\x00\x00\x00\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 320, 16384) = 320 pwrite64(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x08", 31, 16864) = 31 pwrite64(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x08", 31, 17376) = 31 pwrite64(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x08", 31, 17888) = 31 pwrite64(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x08\x00\x46\x49\x4c\x45\x30\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x01\x00\x40\x00\x01\x00\x60\x01\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x01\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00"..., 371, 18400) = 371 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 mkdir("./file0", 0777) = 0 [ 49.905860][ T27] audit: type=1400 audit(1664823640.231:75): avc: denied { execmem } for pid=3607 comm="syz-executor236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 49.912730][ T3607] loop0: detected capacity change from 0 to 36 [ 49.926502][ T27] audit: type=1400 audit(1664823640.231:76): avc: denied { read write } for pid=3607 comm="syz-executor236" name="loop0" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 49.940001][ T3607] ntfs: (device loop0): is_boot_sector_ntfs(): Invalid end of sector marker. [ 49.956653][ T27] audit: type=1400 audit(1664823640.231:77): avc: denied { open } for pid=3607 comm="syz-executor236" path="/dev/loop0" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 49.989794][ T27] audit: type=1400 audit(1664823640.231:78): avc: denied { ioctl } for pid=3607 comm="syz-executor236" path="/dev/loop0" dev="devtmpfs" ino=644 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 49.990106][ T3607] ------------[ cut here ]------------ [ 50.015778][ T27] audit: type=1400 audit(1664823640.261:79): avc: denied { mounton } for pid=3607 comm="syz-executor236" path="/root/file0" dev="sda1" ino=1138 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 50.021088][ T3607] kernel BUG at fs/ntfs/aops.c:186! [ 50.049411][ T3607] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 50.055466][ T3607] CPU: 0 PID: 3607 Comm: syz-executor236 Not tainted 6.0.0-syzkaller #0 [ 50.063788][ T3607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 50.073835][ T3607] RIP: 0010:ntfs_read_folio+0x2346/0x2e10 [ 50.079546][ T3607] Code: 00 48 8b 44 24 50 31 ff 48 8b 98 30 fd ff ff 48 c1 eb 03 83 e3 01 89 de e8 27 b1 e1 fe 84 db 0f 85 59 eb ff ff e8 9a b4 e1 fe <0f> 0b e8 93 b4 e1 fe 48 c7 c6 e0 e8 20 8a 4c 89 f7 e8 f4 82 17 ff [ 50.099142][ T3607] RSP: 0018:ffffc90002f8f728 EFLAGS: 00010293 [ 50.105208][ T3607] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 50.113173][ T3607] RDX: ffff88807ebe6040 RSI: ffffffff82998286 RDI: 0000000000000001 [ 50.121144][ T3607] RBP: ffff8880710cd090 R08: 0000000000000001 R09: 0000000000000000 [ 50.129141][ T3607] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880710cd090 [ 50.137119][ T3607] R13: ffffea0001b86518 R14: ffffea0001b86500 R15: ffffea0001b86520 [ 50.145087][ T3607] FS: 0000555555c1a300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 50.154010][ T3607] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.160589][ T3607] CR2: 000055ec49a870e8 CR3: 000000001cf0f000 CR4: 00000000003506f0 [ 50.168556][ T3607] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.176519][ T3607] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 50.184483][ T3607] Call Trace: [ 50.187752][ T3607] [ 50.190698][ T3607] ? folio_flags.constprop.0+0x53/0x150 [ 50.196248][ T3607] ? ntfs_end_buffer_async_read+0x1720/0x1720 [ 50.202311][ T3607] ? folio_add_lru+0x377/0x680 [ 50.207089][ T3607] ? filemap_add_folio+0x138/0x1d0 [ 50.212202][ T3607] ? __filemap_add_folio+0x1620/0x1620 [ 50.217673][ T3607] ? folio_alloc+0x3f/0x70 [ 50.222086][ T3607] ? ntfs_end_buffer_async_read+0x1720/0x1720 [ 50.228147][ T3607] filemap_read_folio+0x3c/0x1d0 [ 50.233092][ T3607] do_read_cache_folio+0x1df/0x510 [ 50.238221][ T3607] ? ntfs_end_buffer_async_read+0x1720/0x1720 [ 50.244284][ T3607] read_cache_page+0x59/0x2b0 [ 50.248959][ T3607] map_mft_record+0x1db/0x6b0 [ 50.253633][ T3607] ntfs_read_locked_inode+0x19c/0x5ae0 [ 50.259089][ T3607] ntfs_read_inode_mount+0xd72/0x2580 [ 50.264460][ T3607] ntfs_fill_super+0x17c7/0x92d0 [ 50.269396][ T3607] ? lock_downgrade+0x6e0/0x6e0 [ 50.274247][ T3607] ? parse_options+0x1d70/0x1d70 [ 50.279189][ T3607] ? snprintf+0xbb/0xf0 [ 50.283356][ T3607] ? vsprintf+0x30/0x30 [ 50.287507][ T3607] ? wait_for_completion_io_timeout+0x20/0x20 [ 50.293579][ T3607] ? up_write+0x148/0x470 [ 50.297907][ T3607] ? set_blocksize+0x2e5/0x370 [ 50.302669][ T3607] mount_bdev+0x34d/0x410 [ 50.306995][ T3607] ? parse_options+0x1d70/0x1d70 [ 50.311929][ T3607] ? ntfs_rl_punch_nolock+0x15b0/0x15b0 [ 50.317470][ T3607] legacy_get_tree+0x105/0x220 [ 50.322228][ T3607] vfs_get_tree+0x89/0x2f0 [ 50.326660][ T3607] path_mount+0x1326/0x1e20 [ 50.331946][ T3607] ? kmem_cache_free.part.0+0x1d3/0x2e0 [ 50.337490][ T3607] ? putname+0xfe/0x140 [ 50.341649][ T3607] ? finish_automount+0x960/0x960 [ 50.346668][ T3607] ? putname+0xfe/0x140 [ 50.350820][ T3607] __x64_sys_mount+0x27f/0x300 [ 50.355585][ T3607] ? copy_mnt_ns+0xae0/0xae0 [ 50.360172][ T3607] ? lockdep_hardirqs_on+0x79/0x100 [ 50.365364][ T3607] ? _raw_spin_unlock_irq+0x2a/0x40 [ 50.370556][ T3607] ? ptrace_notify+0xfa/0x140 [ 50.375228][ T3607] do_syscall_64+0x35/0xb0 [ 50.379640][ T3607] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 50.385536][ T3607] RIP: 0033:0x7f9f6fc292aa [ 50.389944][ T3607] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 50.409805][ T3607] RSP: 002b:00007ffd450cc8d8 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 50.418213][ T3607] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f9f6fc292aa [ 50.426177][ T3607] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ffd450cc8f0 [ 50.434143][ T3607] RBP: 00007ffd450cc8f0 R08: 00007ffd450cc930 R09: 0000555555c1a2c0 [ 50.442110][ T3607] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000004 [ 50.450071][ T3607] R13: 00007ffd450cc930 R14: 0000000000000006 R15: 0000000020000290 [ 50.458041][ T3607] [ 50.461048][ T3607] Modules linked in: [ 50.465116][ T3607] ---[ end trace 0000000000000000 ]--- [ 50.470611][ T3607] RIP: 0010:ntfs_read_folio+0x2346/0x2e10 [ 50.476568][ T3607] Code: 00 48 8b 44 24 50 31 ff 48 8b 98 30 fd ff ff 48 c1 eb 03 83 e3 01 89 de e8 27 b1 e1 fe 84 db 0f 85 59 eb ff ff e8 9a b4 e1 fe <0f> 0b e8 93 b4 e1 fe 48 c7 c6 e0 e8 20 8a 4c 89 f7 e8 f4 82 17 ff [ 50.496244][ T3607] RSP: 0018:ffffc90002f8f728 EFLAGS: 00010293 [ 50.503690][ T3607] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 50.511676][ T3607] RDX: ffff88807ebe6040 RSI: ffffffff82998286 RDI: 0000000000000001 [ 50.520290][ T3607] RBP: ffff8880710cd090 R08: 0000000000000001 R09: 0000000000000000 [ 50.528396][ T3607] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880710cd090 [ 50.536492][ T3607] R13: ffffea0001b86518 R14: ffffea0001b86500 R15: ffffea0001b86520 [ 50.544561][ T3607] FS: 0000555555c1a300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 50.553523][ T3607] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.560183][ T3607] CR2: 000055ec49a870e8 CR3: 000000001cf0f000 CR4: 00000000003506f0 [ 50.568196][ T3607] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.576203][ T3607] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 50.584253][ T3607] Kernel panic - not syncing: Fatal exception [ 50.590454][ T3607] Kernel Offset: disabled [ 50.594768][ T3607] Rebooting in 86400 seconds..