./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor676239215 <...> Warning: Permanently added '10.128.0.249' (ED25519) to the list of known hosts. execve("./syz-executor676239215", ["./syz-executor676239215"], 0x7fffbf0d91f0 /* 10 vars */) = 0 brk(NULL) = 0x555555f72000 brk(0x555555f72d00) = 0x555555f72d00 arch_prctl(ARCH_SET_FS, 0x555555f72380) = 0 set_tid_address(0x555555f72650) = 5013 set_robust_list(0x555555f72660, 24) = 0 rseq(0x555555f72ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor676239215", 4096) = 27 getrandom("\x40\xb3\x9d\x7e\xad\xf5\x68\xd8", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555555f72d00 brk(0x555555f93d00) = 0x555555f93d00 brk(0x555555f94000) = 0x555555f94000 mprotect(0x7f33d2ab1000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 [ 66.201145][ T26] audit: type=1400 audit(1691480982.761:83): avc: denied { write } for pid=5010 comm="strace-static-x" path="pipe:[30767]" dev="pipefs" ino=30767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f33ca601000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 munmap(0x7f33ca601000, 524288) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 66.229047][ T26] audit: type=1400 audit(1691480982.791:84): avc: denied { execmem } for pid=5013 comm="syz-executor676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 66.230964][ T5013] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5013 'syz-executor676' [ 66.274752][ T26] audit: type=1400 audit(1691480982.831:85): avc: denied { read write } for pid=5013 comm="syz-executor676" name="loop0" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 66.277019][ T5013] loop0: detected capacity change from 0 to 1024 [ 66.306711][ T26] audit: type=1400 audit(1691480982.841:86): avc: denied { open } for pid=5013 comm="syz-executor676" path="/dev/loop0" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./bus", 0777) = 0 [ 66.306760][ T26] audit: type=1400 audit(1691480982.841:87): avc: denied { ioctl } for pid=5013 comm="syz-executor676" path="/dev/loop0" dev="devtmpfs" ino=648 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 66.362656][ T5013] ======================================================= [ 66.362656][ T5013] WARNING: The mand mount option has been deprecated and [ 66.362656][ T5013] and is ignored by this kernel. Remove the mand [ 66.362656][ T5013] option from the mount to silence this warning. mount("/dev/loop0", "./bus", "hfsplus", MS_SYNCHRONOUS|MS_MANDLOCK, "") = 0 openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 chdir("./bus") = 0 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 creat("./bus", 000) = 4 [ 66.362656][ T5013] ======================================================= [ 66.362698][ T26] audit: type=1400 audit(1691480982.921:88): avc: denied { mounton } for pid=5013 comm="syz-executor676" path="/root/bus" dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 66.432989][ T5013] general protection fault, probably for non-canonical address 0x5088000000fff: 0000 [#1] PREEMPT SMP KASAN [ 66.445365][ T5013] CPU: 1 PID: 5013 Comm: syz-executor676 Not tainted 6.5.0-rc5-syzkaller-00021-ga027b2eca0b7 #0 [ 66.445983][ T26] audit: type=1400 audit(1691480982.971:89): avc: denied { mount } for pid=5013 comm="syz-executor676" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 66.456499][ T5013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 66.456519][ T5013] RIP: 0010:memcpy_orig+0x105/0x120 [ 66.456572][ T5013] Code: 00 00 00 00 00 83 fa 04 72 1b 8b 0e 44 8b 44 16 fc 89 0f 44 89 44 17 fc c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 83 ea 01 72 19 <0f> b6 0e 74 12 4c 0f b6 46 01 4c 0f b6 0c 16 44 88 47 01 44 88 0c [ 66.517316][ T5013] RSP: 0018:ffffc900033bf0e8 EFLAGS: 00010246 [ 66.523418][ T5013] RAX: ffffc900033bf1a8 RBX: ffff88802089e680 RCX: 0000000000000000 [ 66.531587][ T5013] RDX: 0000000000000000 RSI: 0005088000000fff RDI: ffffc900033bf1a8 [ 66.539763][ T5013] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000001000 [ 66.547931][ T5013] R10: 0000000000001000 R11: ffffffff81d826e5 R12: 0000000000000fff [ 66.557664][ T5013] R13: 0000000000001000 R14: 0000000000000001 R15: 0000000000000001 [ 66.565769][ T5013] FS: 0000555555f72380(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 66.574912][ T5013] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 66.581985][ T5013] CR2: 00007ffca307d000 CR3: 000000007dab8000 CR4: 00000000003506e0 [ 66.590774][ T5013] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 66.598843][ T5013] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 66.606830][ T5013] Call Trace: [ 66.610211][ T5013] [ 66.613154][ T5013] ? die_addr+0x3b/0xa0 [ 66.617523][ T5013] ? exc_general_protection+0x154/0x230 [ 66.623299][ T5013] ? asm_exc_general_protection+0x26/0x30 [ 66.629295][ T5013] ? kasan_set_track+0x25/0x30 [ 66.634300][ T5013] ? memcpy_orig+0x105/0x120 [ 66.639269][ T5013] hfsplus_bnode_read+0x101/0x250 [ 66.644344][ T5013] hfsplus_bnode_find+0x85c/0xcb0 [ 66.649437][ T5013] ? lockdep_unlock+0x11b/0x290 [ 66.654320][ T5013] ? __lock_acquire+0x250f/0x5de0 [ 66.659997][ T5013] ? hfsplus_bnode_put.part.0+0x440/0x440 [ 66.665912][ T5013] ? hfsplus_bmap_reserve+0x332/0x410 [ 66.671524][ T5013] hfsplus_bmap_alloc+0x10a/0x830 [ 66.677195][ T5013] ? hfsplus_bmap_reserve+0x410/0x410 [ 66.683934][ T5013] ? __lock_acquire+0x41a0/0x5de0 [ 66.689491][ T5013] ? lock_sync+0x190/0x190 [ 66.694521][ T5013] hfs_btree_inc_height.isra.0+0x100/0x8b0 [ 66.701039][ T5013] ? do_syscall_64+0x38/0xb0 [ 66.706031][ T5013] ? hfs_bnode_split+0xdc0/0xdc0 [ 66.712191][ T5013] ? preempt_count_sub+0x150/0x150 [ 66.717861][ T5013] ? trace_contention_end+0xd6/0x100 [ 66.725965][ T5013] hfsplus_brec_insert+0x9fe/0xc50 [ 66.731761][ T5013] ? hfsplus_brec_find+0x3e8/0x520 [ 66.737346][ T5013] ? hfsplus_brec_keylen+0x340/0x340 [ 66.742850][ T5013] ? hfsplus_bmap_reserve+0x332/0x410 [ 66.748259][ T5013] ? kasan_set_track+0x25/0x30 [ 66.753245][ T5013] __hfsplus_ext_write_extent+0x49c/0x5e0 [ 66.759006][ T5013] hfsplus_ext_read_extent+0x84c/0xb00 [ 66.764681][ T5013] ? hfsplus_free_extents+0x510/0x510 [ 66.770293][ T5013] ? hfsplus_get_block+0x3b8/0x9e0 [ 66.776057][ T5013] hfsplus_file_extend+0x699/0xf90 [ 66.781754][ T5013] ? hfsplus_free_fork+0x820/0x820 [ 66.787352][ T5013] ? __lock_buffer+0x70/0x70 [ 66.791976][ T5013] ? spin_bug+0x1d0/0x1d0 [ 66.796600][ T5013] hfsplus_get_block+0x1ae/0x9e0 [ 66.801577][ T5013] ? hfsplus_file_extend+0xf90/0xf90 [ 66.807688][ T5013] __block_write_begin_int+0x3c0/0x1470 [ 66.813372][ T5013] ? hfsplus_file_extend+0xf90/0xf90 [ 66.818688][ T5013] ? invalidate_bh_lrus_cpu+0x170/0x170 [ 66.824249][ T5013] ? __filemap_get_folio+0x1e7/0x990 [ 66.829672][ T5013] block_write_begin+0xb1/0x490 [ 66.834535][ T5013] ? hfsplus_file_extend+0xf90/0xf90 [ 66.839839][ T5013] ? reacquire_held_locks+0x4b0/0x4b0 [ 66.845227][ T5013] cont_write_begin+0x52f/0x730 [ 66.853600][ T5013] ? folio_flags.constprop.0+0x56/0x150 [ 66.860137][ T5013] ? hfsplus_file_extend+0xf90/0xf90 [ 66.866949][ T5013] ? block_write_begin+0x490/0x490 [ 66.872535][ T5013] ? rcu_is_watching+0x12/0xb0 [ 66.877947][ T5013] ? __mark_inode_dirty+0x297/0xd50 [ 66.883216][ T5013] ? folio_flags.constprop.0+0x56/0x150 [ 66.889745][ T5013] hfsplus_write_begin+0x87/0x140 [ 66.895346][ T5013] ? hfsplus_file_extend+0xf90/0xf90 [ 66.900915][ T5013] cont_write_begin+0x336/0x730 [ 66.905799][ T5013] ? hfsplus_file_extend+0xf90/0xf90 [ 66.911242][ T5013] ? block_write_begin+0x490/0x490 [ 66.916810][ T5013] ? avc_has_perm_noaudit+0x3b0/0x3b0 [ 66.922781][ T5013] ? preempt_count_sub+0x150/0x150 [ 66.927951][ T5013] hfsplus_write_begin+0x87/0x140 [ 66.933465][ T5013] ? hfsplus_file_extend+0xf90/0xf90 [ 66.938872][ T5013] generic_cont_expand_simple+0x11f/0x200 [ 66.944637][ T5013] ? end_bio_bh_io_sync+0x130/0x130 [ 66.950307][ T5013] ? inode_newsize_ok+0x13c/0x200 [ 66.955388][ T5013] ? setattr_prepare+0x140/0x9b0 [ 66.960396][ T5013] hfsplus_setattr+0x193/0x310 [ 66.965190][ T5013] ? hfsplus_file_fsync+0x5d0/0x5d0 [ 66.970522][ T5013] notify_change+0x670/0x1160 [ 66.975328][ T5013] do_truncate+0x15c/0x220 [ 66.980586][ T5013] ? file_open_root+0x450/0x450 [ 66.985922][ T5013] do_sys_ftruncate+0x6a2/0x790 [ 66.991175][ T5013] do_syscall_64+0x38/0xb0 [ 66.995702][ T5013] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 67.001653][ T5013] RIP: 0033:0x7f33d2a3e639 [ 67.006333][ T5013] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 67.027468][ T5013] RSP: 002b:00007ffca307c308 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 67.036323][ T5013] RAX: ffffffffffffffda RBX: 00007ffca307c4d8 RCX: 00007f33d2a3e639 [ 67.044580][ T5013] RDX: 0000000000000000 RSI: 0000000000048280 RDI: 0000000000000004 [ 67.052847][ T5013] RBP: 00007f33d2ab1610 R08: 0000000000000000 R09: 00007ffca307c4d8 [ 67.061306][ T5013] R10: 00000000000005f1 R11: 0000000000000246 R12: 0000000000000001 [ 67.069478][ T5013] R13: 00007ffca307c4c8 R14: 0000000000000001 R15: 0000000000000001 [ 67.077572][ T5013] [ 67.081069][ T5013] Modules linked in: [ 67.092619][ T26] audit: type=1400 audit(1691480983.001:90): avc: denied { append } for pid=4451 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 67.116239][ T26] audit: type=1400 audit(1691480983.001:91): avc: denied { open } for pid=4451 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 67.139032][ T26] audit: type=1400 audit(1691480983.001:92): avc: denied { getattr } for pid=4451 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 67.162099][ T5013] ---[ end trace 0000000000000000 ]--- [ 67.167878][ T5013] RIP: 0010:memcpy_orig+0x105/0x120 [ 67.173941][ T5013] Code: 00 00 00 00 00 83 fa 04 72 1b 8b 0e 44 8b 44 16 fc 89 0f 44 89 44 17 fc c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 83 ea 01 72 19 <0f> b6 0e 74 12 4c 0f b6 46 01 4c 0f b6 0c 16 44 88 47 01 44 88 0c [ 67.195844][ T5013] RSP: 0018:ffffc900033bf0e8 EFLAGS: 00010246 [ 67.202409][ T5013] RAX: ffffc900033bf1a8 RBX: ffff88802089e680 RCX: 0000000000000000 [ 67.212461][ T5013] RDX: 0000000000000000 RSI: 0005088000000fff RDI: ffffc900033bf1a8 [ 67.220535][ T5013] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000001000 [ 67.228682][ T5013] R10: 0000000000001000 R11: ffffffff81d826e5 R12: 0000000000000fff [ 67.236920][ T5013] R13: 0000000000001000 R14: 0000000000000001 R15: 0000000000000001 [ 67.245056][ T5013] FS: 0000555555f72380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 67.254299][ T5013] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 67.261020][ T5013] CR2: 0000557e772793c0 CR3: 000000007dab8000 CR4: 00000000003506f0 [ 67.269450][ T5013] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 67.277977][ T5013] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 67.286277][ T5013] Kernel panic - not syncing: Fatal exception [ 67.292697][ T5013] Kernel Offset: disabled [ 67.297554][ T5013] Rebooting in 86400 seconds..