./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3853176856 <...> Warning: Permanently added '10.128.0.14' (ECDSA) to the list of known hosts. execve("./syz-executor3853176856", ["./syz-executor3853176856"], 0x7ffff3607620 /* 10 vars */) = 0 brk(NULL) = 0x555555865000 brk(0x555555865c40) = 0x555555865c40 arch_prctl(ARCH_SET_FS, 0x555555865300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor3853176856", 4096) = 28 brk(0x555555886c40) = 0x555555886c40 brk(0x555555887000) = 0x555555887000 mprotect(0x7f23cb1aa000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 ftruncate(3, 12288) = 0 pwrite64(3, "\x40\x00\x20\x06\x01\x00\x01\x00\x06\x00\x22\x00\x00\x1c\x08\x10\x8f\x13", 18, 1024) = 18 pwrite64(3, "\xff\x00\x00\x00\x00\x00\x00\x00\xfe\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff"..., 2062, 2048) = 2062 pwrite64(3, NULL, 0, 6144) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 mkdir("./file0", 0777) = 0 [ 50.948648][ T27] audit: type=1400 audit(1659851086.246:75): avc: denied { execmem } for pid=3602 comm="syz-executor385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 50.958849][ T3602] loop0: detected capacity change from 0 to 24 [ 50.969145][ T27] audit: type=1400 audit(1659851086.246:76): avc: denied { read write } for pid=3602 comm="syz-executor385" name="loop0" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 50.983211][ T3602] loop0: unable to read partition table [ 51.000132][ T27] audit: type=1400 audit(1659851086.246:77): avc: denied { open } for pid=3602 comm="syz-executor385" path="/dev/loop0" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 51.004726][ T3602] loop0: partition table beyond EOD, truncated mount("/dev/loop0", "./file0", "minix", 0, "") = 0 openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 close(3) = 0 [ 51.029336][ T27] audit: type=1400 audit(1659851086.246:78): avc: denied { ioctl } for pid=3602 comm="syz-executor385" path="/dev/loop0" dev="devtmpfs" ino=644 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 51.061626][ T27] audit: type=1400 audit(1659851086.266:79): avc: denied { mounton } for pid=3602 comm="syz-executor385" path="/root/file0" dev="sda1" ino=1138 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 51.063648][ T3602] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 51.093552][ T27] audit: type=1400 audit(1659851086.386:80): avc: denied { mount } for pid=3602 comm="syz-executor385" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 51.099267][ T3602] ================================================================================ [ 51.125760][ T3602] UBSAN: shift-out-of-bounds in fs/minix/bitmap.c:103:3 [ 51.126410][ T27] audit: type=1400 audit(1659851086.386:81): avc: denied { getattr } for pid=3602 comm="syz-executor385" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 51.133133][ T3602] shift exponent 34 is too large for 32-bit type 'unsigned int' [ 51.164076][ T3602] CPU: 1 PID: 3602 Comm: syz-executor385 Not tainted 5.19.0-syzkaller-02972-g200e340f2196 #0 [ 51.174263][ T3602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 51.184331][ T3602] Call Trace: [ 51.187629][ T3602] [ 51.190556][ T3602] dump_stack_lvl+0xcd/0x134 [ 51.195164][ T3602] ubsan_epilogue+0xb/0x50 [ 51.199581][ T3602] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x187 [ 51.206345][ T3602] ? selinux_sb_statfs+0x1c0/0x250 [ 51.211454][ T3602] ? count_free+0x13f/0x170 [ 51.215960][ T3602] minix_count_free_blocks.cold+0x16/0x1b [ 51.221699][ T3602] minix_statfs+0x22a/0x490 [ 51.226467][ T3602] statfs_by_dentry+0x133/0x210 [ 51.231310][ T3602] user_statfs+0xa9/0x160 [ 51.235630][ T3602] ? __do_sys_ustat+0x1c0/0x1c0 [ 51.240478][ T3602] ? find_held_lock+0x2d/0x110 [ 51.245231][ T3602] __do_sys_statfs+0x7a/0xf0 [ 51.249846][ T3602] ? user_statfs+0x160/0x160 [ 51.254422][ T3602] ? _raw_spin_unlock_irq+0x2a/0x40 [ 51.259615][ T3602] ? ptrace_notify+0xfa/0x140 [ 51.264296][ T3602] ? syscall_trace_enter.constprop.0+0xb0/0x240 [ 51.270535][ T3602] do_syscall_64+0x35/0xb0 [ 51.274943][ T3602] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 51.280827][ T3602] RIP: 0033:0x7f23cb13ddc9 [ 51.285247][ T3602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 51.304849][ T3602] RSP: 002b:00007ffc64bc7b38 EFLAGS: 00000246 ORIG_RAX: 0000000000000089 [ 51.313247][ T3602] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007f23cb13ddc9 [ 51.321204][ T3602] RDX: 00007f23cb0fc2f3 RSI: 0000000000000000 RDI: 0000000020000140 [ 51.329173][ T3602] RBP: 00007f23cb0fd5c0 R08: 0000000000000000 R09: 0000000000000000 [ 51.337130][ T3602] R10: 00007ffc64bc7a00 R11: 0000000000000246 R12: 00007f23cb0fd650 [ 51.345107][ T3602] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 51.353075][ T3602] [ 51.356364][ T3602] ================================================================================ [ 51.365656][ T3602] Kernel panic - not syncing: panic_on_warn set ... [ 51.372240][ T3602] CPU: 1 PID: 3602 Comm: syz-executor385 Not tainted 5.19.0-syzkaller-02972-g200e340f2196 #0 [ 51.382407][ T3602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 51.392457][ T3602] Call Trace: [ 51.395734][ T3602] [ 51.398661][ T3602] dump_stack_lvl+0xcd/0x134 [ 51.403259][ T3602] panic+0x2d7/0x636 [ 51.407154][ T3602] ? panic_print_sys_info.part.0+0x10b/0x10b [ 51.413135][ T3602] ? ubsan_epilogue+0x3e/0x50 [ 51.417809][ T3602] ubsan_epilogue+0x4a/0x50 [ 51.422322][ T3602] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x187 [ 51.429085][ T3602] ? selinux_sb_statfs+0x1c0/0x250 [ 51.434199][ T3602] ? count_free+0x13f/0x170 [ 51.438707][ T3602] minix_count_free_blocks.cold+0x16/0x1b [ 51.444431][ T3602] minix_statfs+0x22a/0x490 [ 51.448939][ T3602] statfs_by_dentry+0x133/0x210 [ 51.453792][ T3602] user_statfs+0xa9/0x160 [ 51.458125][ T3602] ? __do_sys_ustat+0x1c0/0x1c0 [ 51.462974][ T3602] ? find_held_lock+0x2d/0x110 [ 51.467742][ T3602] __do_sys_statfs+0x7a/0xf0 [ 51.472337][ T3602] ? user_statfs+0x160/0x160 [ 51.476928][ T3602] ? _raw_spin_unlock_irq+0x2a/0x40 [ 51.482126][ T3602] ? ptrace_notify+0xfa/0x140 [ 51.486800][ T3602] ? syscall_trace_enter.constprop.0+0xb0/0x240 [ 51.493060][ T3602] do_syscall_64+0x35/0xb0 [ 51.497484][ T3602] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 51.503381][ T3602] RIP: 0033:0x7f23cb13ddc9 [ 51.507796][ T3602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 51.527415][ T3602] RSP: 002b:00007ffc64bc7b38 EFLAGS: 00000246 ORIG_RAX: 0000000000000089 [ 51.535829][ T3602] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007f23cb13ddc9 [ 51.543882][ T3602] RDX: 00007f23cb0fc2f3 RSI: 0000000000000000 RDI: 0000000020000140 [ 51.551849][ T3602] RBP: 00007f23cb0fd5c0 R08: 0000000000000000 R09: 0000000000000000 [ 51.559832][ T3602] R10: 00007ffc64bc7a00 R11: 0000000000000246 R12: 00007f23cb0fd650 [ 51.567802][ T3602] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 51.575774][ T3602] [ 51.579064][ T3602] Kernel Offset: disabled [ 51.583444][ T3602] Rebooting in 86400 seconds..