./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor33532524 <...> [ 2.822612][ T24] audit: type=1400 audit(1683647097.279:9): avc: denied { append open } for pid=75 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2.825668][ T24] audit: type=1400 audit(1683647097.279:10): avc: denied { getattr } for pid=75 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2.980594][ T92] udevd[92]: starting version 3.2.11 [ 3.002964][ T93] udevd[93]: starting eudev-3.2.11 [ 13.387634][ T24] kauditd_printk_skb: 50 callbacks suppressed [ 13.387643][ T24] audit: type=1400 audit(1683647107.859:61): avc: denied { transition } for pid=220 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.391666][ T24] audit: type=1400 audit(1683647107.859:62): avc: denied { noatsecure } for pid=220 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.394420][ T24] audit: type=1400 audit(1683647107.859:63): avc: denied { write } for pid=220 comm="sh" path="pipe:[229]" dev="pipefs" ino=229 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 13.397713][ T24] audit: type=1400 audit(1683647107.859:64): avc: denied { rlimitinh } for pid=220 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.400323][ T24] audit: type=1400 audit(1683647107.859:65): avc: denied { siginh } for pid=220 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.172' (ECDSA) to the list of known hosts. execve("./syz-executor33532524", ["./syz-executor33532524"], 0x7ffc5678ad60 /* 10 vars */) = 0 brk(NULL) = 0x5555572ea000 brk(0x5555572eac40) = 0x5555572eac40 arch_prctl(ARCH_SET_FS, 0x5555572ea300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor33532524", 4096) = 26 brk(0x55555730bc40) = 0x55555730bc40 brk(0x55555730c000) = 0x55555730c000 mprotect(0x7fa8f0a4b000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa8e8592000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 munmap(0x7fa8e8592000, 262144) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("\xe9\x1f\x71\x89\x59\x1e\x92\x33\x61\x4b", 0777) = 0 [ 22.242402][ T24] audit: type=1400 audit(1683647116.709:66): avc: denied { execmem } for pid=289 comm="syz-executor335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 22.250785][ T289] ====================================================== [ 22.250785][ T289] WARNING: the mand mount option is being deprecated and [ 22.250785][ T289] will be removed in v5.15! [ 22.250785][ T289] ====================================================== [ 22.264396][ T24] audit: type=1400 audit(1683647116.719:67): avc: denied { read write } for pid=289 comm="syz-executor335" name="loop0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 22.292372][ T289] EXT4-fs (loop0): 1 truncate cleaned up [ 22.311920][ T24] audit: type=1400 audit(1683647116.719:68): avc: denied { open } for pid=289 comm="syz-executor335" path="/dev/loop0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 mount("/dev/loop0", "\xe9\x1f\x71\x89\x59\x1e\x92\x33\x61\x4b", "ext4", MS_NOEXEC|MS_MANDLOCK|0x200, ",errors=continue") = 0 openat(AT_FDCWD, "\xe9\x1f\x71\x89\x59\x1e\x92\x33\x61\x4b", O_RDONLY|O_DIRECTORY) = 3 chdir("\xe9\x1f\x71\x89\x59\x1e\x92\x33\x61\x4b") = 0 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 [ 22.317017][ T289] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 22.340946][ T24] audit: type=1400 audit(1683647116.719:69): avc: denied { ioctl } for pid=289 comm="syz-executor335" path="/dev/loop0" dev="devtmpfs" ino=111 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 22.352526][ T289] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 22.380164][ T24] audit: type=1400 audit(1683647116.719:70): avc: denied { mounton } for pid=289 comm="syz-executor335" path=2F726F6F742FE91F7189591E9233614B dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 22.386373][ T289] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 22.386383][ T289] CPU: 1 PID: 289 Comm: syz-executor335 Not tainted 5.10.177-syzkaller #0 [ 22.386388][ T289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 22.386421][ T289] RIP: 0010:ext4_xattr_set_entry+0x498/0x3960 [ 22.410812][ T24] audit: type=1400 audit(1683647116.829:71): avc: denied { mount } for pid=289 comm="syz-executor335" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 22.418751][ T289] Code: 24 78 48 89 d8 48 c1 e8 03 48 89 84 24 28 01 00 00 42 80 3c 38 00 74 08 48 89 df e8 e2 b3 ba ff 4c 8b 23 4c 89 e0 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 d1 2e 00 00 4c 89 e8 48 2b 44 24 20 48 [ 22.418757][ T289] RSP: 0018:ffffc90000af6f20 EFLAGS: 00010246 [ 22.418774][ T289] RAX: 0000000000000000 RBX: ffffc90000af7320 RCX: ffff8881194a4f00 [ 22.427314][ T24] audit: type=1400 audit(1683647116.829:72): avc: denied { write } for pid=289 comm="syz-executor335" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 22.436974][ T289] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000001c [ 22.436980][ T289] RBP: ffffc90000af71c0 R08: ffffffff81ecc504 R09: ffffed102379eb1e [ 22.436986][ T289] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 22.437009][ T289] R13: 0000000000000000 R14: 000000000000001c R15: dffffc0000000000 [ 22.443166][ T24] audit: type=1400 audit(1683647116.829:73): avc: denied { add_name } for pid=289 comm="syz-executor335" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 22.464490][ T289] FS: 00005555572ea300(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 22.464497][ T289] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 22.464509][ T289] CR2: 0000561c115a9280 CR3: 000000011e4ab000 CR4: 00000000003506a0 [ 22.484222][ T24] audit: type=1400 audit(1683647116.829:74): avc: denied { create } for pid=289 comm="syz-executor335" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 22.489832][ T289] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 22.489838][ T289] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 22.489841][ T289] Call Trace: [ 22.489862][ T289] ? __wait_on_buffer+0x80/0x80 [ 22.640090][ T289] ? __kasan_check_read+0x11/0x20 [ 22.644939][ T289] ? errseq_check+0x41/0x70 [ 22.649277][ T289] ? ext4_xattr_ibody_inline_set+0x390/0x390 [ 22.655091][ T289] ? __ext4_journal_ensure_credits+0x470/0x470 [ 22.661079][ T289] ? __kasan_check_write+0x14/0x20 [ 22.666027][ T289] ? ext4_reserve_inode_write+0x2d0/0x380 [ 22.671584][ T289] ? ext4_mark_iloc_dirty+0x3e60/0x3e60 [ 22.676963][ T289] ext4_xattr_ibody_set+0x7c/0x2b0 [ 22.681911][ T289] ext4_xattr_set_handle+0xc26/0x14e0 [ 22.687119][ T289] ? ext4_xattr_set_entry+0x3960/0x3960 [ 22.692502][ T289] ? selinux_inode_free_security+0x200/0x200 [ 22.698314][ T289] ext4_initxattrs+0xa7/0x120 [ 22.702828][ T289] security_inode_init_security+0x252/0x390 [ 22.708555][ T289] ? ext4_init_security+0x40/0x40 [ 22.713416][ T289] ? security_dentry_create_files_as+0xc0/0xc0 [ 22.719405][ T289] ? __ext4_set_acl+0x5e0/0x5e0 [ 22.724093][ T289] ? prandom_u32+0x24c/0x290 [ 22.728518][ T289] ext4_init_security+0x34/0x40 [ 22.733204][ T289] __ext4_new_inode+0x3159/0x3f70 [ 22.738069][ T289] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 22.743639][ T289] ? dquot_initialize+0x20/0x20 [ 22.748330][ T289] ? ext4_lookup+0x549/0xaa0 [ 22.752742][ T289] ? ext4_add_entry+0x1280/0x1280 [ 22.757609][ T289] ext4_create+0x267/0x530 [ 22.761857][ T289] ? ext4_lookup+0xaa0/0xaa0 [ 22.766278][ T289] ? selinux_inode_create+0x22/0x30 [ 22.771312][ T289] ? security_inode_create+0xbc/0x100 [ 22.776521][ T289] ? ext4_lookup+0xaa0/0xaa0 [ 22.780945][ T289] path_openat+0x1377/0x3000 [ 22.785375][ T289] ? do_filp_open+0x460/0x460 [ 22.789883][ T289] do_filp_open+0x21c/0x460 [ 22.794223][ T289] ? vfs_tmpfile+0x2b0/0x2b0 [ 22.798655][ T289] ? get_unused_fd_flags+0x94/0xa0 [ 22.803598][ T289] do_sys_openat2+0x13f/0x6e0 [ 22.808109][ T289] ? ptrace_stop+0x6dc/0xa30 [ 22.812537][ T289] ? do_sys_open+0x220/0x220 [ 22.816962][ T289] ? ptrace_notify+0x24c/0x350 [ 22.821563][ T289] ? do_notify_parent+0xa10/0xa10 [ 22.826422][ T289] __x64_sys_creat+0x11f/0x160 [ 22.831023][ T289] ? __x32_compat_sys_openat+0x290/0x290 [ 22.836493][ T289] ? syscall_enter_from_user_mode+0x57/0x1a0 [ 22.842305][ T289] do_syscall_64+0x34/0x70 [ 22.846561][ T289] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 22.852285][ T289] RIP: 0033:0x7fa8f09de7a9 [ 22.856540][ T289] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 22.875980][ T289] RSP: 002b:00007ffe8fb90f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 22.884228][ T289] RAX: ffffffffffffffda RBX: 33921e5989711fe9 RCX: 00007fa8f09de7a9 [ 22.892040][ T289] RDX: 00007fa8f099ce23 RSI: 0000000000000000 RDI: 0000000020000080 [ 22.899847][ T289] RBP: 00007fa8f099e040 R08: 0000000000000475 R09: 0000000000000000 [ 22.907658][ T289] R10: 00007ffe8fb90de0 R11: 0000000000000246 R12: 00007fa8f099e0d0 [ 22.915477][ T289] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 22.923282][ T289] Modules linked in: [ 22.927329][ T289] ---[ end trace df8f863754cf6a3a ]--- [ 22.932594][ T289] RIP: 0010:ext4_xattr_set_entry+0x498/0x3960 [ 22.938522][ T289] Code: 24 78 48 89 d8 48 c1 e8 03 48 89 84 24 28 01 00 00 42 80 3c 38 00 74 08 48 89 df e8 e2 b3 ba ff 4c 8b 23 4c 89 e0 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 d1 2e 00 00 4c 89 e8 48 2b 44 24 20 48 [ 22.957951][ T289] RSP: 0018:ffffc90000af6f20 EFLAGS: 00010246 [ 22.963944][ T289] RAX: 0000000000000000 RBX: ffffc90000af7320 RCX: ffff8881194a4f00 [ 22.971832][ T289] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000001c [ 22.979574][ T289] RBP: ffffc90000af71c0 R08: ffffffff81ecc504 R09: ffffed102379eb1e [ 22.987391][ T289] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 22.995184][ T289] R13: 0000000000000000 R14: 000000000000001c R15: dffffc0000000000 [ 23.003141][ T289] FS: 00005555572ea300(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 23.011957][ T289] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 23.018350][ T289] CR2: 0000561c115b3de8 CR3: 000000011e4ab000 CR4: 00000000003506b0 [ 23.026237][ T289] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 23.033913][ T289] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 23.041776][ T289] Kernel panic - not syncing: Fatal exception [ 23.047780][ T289] Kernel Offset: disabled [ 23.051899][ T289] Rebooting in 86400 seconds..