./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3927023975 <...> Warning: Permanently added '10.128.0.107' (ECDSA) to the list of known hosts. execve("./syz-executor3927023975", ["./syz-executor3927023975"], 0x7ffdbab9d410 /* 10 vars */) = 0 brk(NULL) = 0x5555557bf000 brk(0x5555557bfc40) = 0x5555557bfc40 arch_prctl(ARCH_SET_FS, 0x5555557bf300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor3927023975", 4096) = 28 brk(0x5555557e0c40) = 0x5555557e0c40 brk(0x5555557e1000) = 0x5555557e1000 mprotect(0x7fc08f79f000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x28\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x63\x00\x00\x00\x08\x00\x03\x00\x00\x00\x00\x00\x0c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EBADF (Bad file descriptor) sendmsg(-1, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00", iov_len=20}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EBADF (Bad file descriptor) sendmsg(-1, {msg_name={sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, msg_namelen=12, msg_iov=NULL, msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = -1 EBADF (Bad file descriptor) memfd_create("syzkaller", 0) = 3 ftruncate(3, 539650) = 0 pwrite64(3, "\x20\x00\x00\x00\x01\x02\x00\x00\x19\x00\x00\x00\x60\x01\x00\x00\x0f\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x02\x00\x00\x20\x00\x00\x20\x00\x00\x00\xdd\xf4\x65\x5f\xdd\xf4\x65\x5f\x01\x00\xff\xff\x53\xef\x01\x00\x01\x00\x00\x00\xdd\xf4\x65\x5f\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x0b\x00\x00\x00\x00\x01\x00\x00\x08\x00\x00\x00\xd2\x42\x00\x00"..., 102, 1024) = 102 pwrite64(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x68\x56\xd4\x9a\x00\xcc\x43\x71\xbd\x6a\x7c\x89\x3f\x28\x00\x45\x01\x00\x40", 31, 1248) = 31 pwrite64(3, "\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65201, 1600) = 65201 pwrite64(3, "\x14\x00\x00\x00\x04\x00\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65475, 2048) = 65475 pwrite64(3, "\xed\x41\x00\x00\x00\x04\x00\x00\xdd\xf4\x65\x5f\xdd\xf4\x65\x5f\xdd\xf4\x65\x5f\x00\x00\x00\x00\x00\x00\x04\x00\x20", 29, 5376) = 29 pwrite64(3, "\x80\x81\x00\x00\x00\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x63\x00\x00\x00\x08\x00\x03\x00\x00\x00\x00\x00\x0c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 64571, 5632) = 64571 pwrite64(3, NULL, 0, 0) = 0 pwrite64(3, NULL, 0, 0) = 0 pwrite64(3, NULL, 0, 0) = 0 pwrite64(3, NULL, 0, 0) = 0 pwrite64(3, NULL, 0, 0) = 0 pwrite64(3, NULL, 0, 0) = 0 pwrite64(3, NULL, 0, 0) = 0 pwrite64(3, NULL, 0, 0) = 0 pwrite64(3, NULL, 0, 0) = 0 pwrite64(3, NULL, 0, 0) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 mkdir("./file0", 0777) = 0 [ 18.393326][ T23] audit: type=1400 audit(1656900198.799:73): avc: denied { execmem } for pid=371 comm="syz-executor392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 18.401211][ T23] audit: type=1400 audit(1656900198.809:74): avc: denied { read write } for pid=371 comm="syz-executor392" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 18.404666][ T23] audit: type=1400 audit(1656900198.819:75): avc: denied { open } for pid=371 comm="syz-executor392" path="/dev/loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 18.408131][ T23] audit: type=1400 audit(1656900198.819:76): avc: denied { ioctl } for pid=371 comm="syz-executor392" path="/dev/loop0" dev="devtmpfs" ino=115 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 18.414607][ T23] audit: type=1400 audit(1656900198.829:77): avc: denied { mounton } for pid=371 comm="syz-executor392" path="/root/file0" dev="sda1" ino=1138 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 18.423981][ T371] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (14603!=0) [ 18.447359][ T371] EXT4-fs (loop0): orphan cleanup on readonly fs [ 18.453952][ T371] EXT4-fs error (device loop0): ext4_free_blocks:5434: comm syz-executor392: Freeing blocks in system zone - Block = 16, count = 16 [ 18.467670][ T371] EXT4-fs (loop0): Remounting filesystem read-only [ 18.474295][ T371] ------------[ cut here ]------------ [ 18.479754][ T371] kernel BUG at fs/ext4/ext4.h:3254! [ 18.485164][ T371] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 18.491214][ T371] CPU: 1 PID: 371 Comm: syz-executor392 Not tainted 5.10.118-syzkaller-00163-gfa7f6a5f56d9 #0 [ 18.501771][ T371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 18.511820][ T371] RIP: 0010:ext4_free_blocks+0x29ed/0x2ad0 [ 18.517603][ T371] Code: f6 48 0f a3 05 f4 8e bf 04 0f 92 c3 40 0f 92 c6 31 ff e8 c6 62 8d ff 84 db 75 18 e8 ad 5f 8d ff e9 b8 00 00 00 e8 a3 5f 8d ff <0f> 0b e8 9c 5f 8d ff 0f 0b 65 ff 05 2f 1a 23 7e 48 c7 c0 68 bd 9c [ 18.537192][ T371] RSP: 0018:ffffc900002aef80 EFLAGS: 00010293 [ 18.543245][ T371] RAX: ffffffff81df534d RBX: 0000000000000001 RCX: ffff888106992780 [ 18.551202][ T371] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000001 [ 18.559270][ T371] RBP: ffffc900002af200 R08: ffffffff81df350e R09: ffffc900002af140 [ 18.567226][ T371] R10: fffff52000055e2f R11: 1ffff92000055e28 R12: 0000000000000000 [ 18.575190][ T371] R13: dffffc0000000000 R14: 00000000ffffffff R15: ffff8881065e1000 [ 18.583153][ T371] FS: 00005555557bf300(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 18.592216][ T371] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 18.598788][ T371] CR2: 00007ffe40c84cd8 CR3: 000000011e1bf000 CR4: 00000000003506a0 [ 18.606762][ T371] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 18.614714][ T371] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 18.622673][ T371] Call Trace: [ 18.625987][ T371] ? __find_get_block+0x964/0xbb0 [ 18.630998][ T371] ? ext4_mb_release_context+0x17a0/0x17a0 [ 18.636810][ T371] ? __queue_delayed_work+0x16c/0x1f0 [ 18.642170][ T371] ? __kasan_check_write+0x14/0x20 [ 18.647276][ T371] ? _raw_write_lock+0xa3/0x170 [ 18.652140][ T371] ? _raw_spin_lock+0xa3/0x1b0 [ 18.656889][ T371] ? ext4_ind_truncate_ensure_credits+0x258/0x6c0 [ 18.663473][ T371] ext4_clear_blocks+0x3b5/0x420 [ 18.668405][ T371] ext4_ind_truncate+0x83f/0x1040 [ 18.673408][ T371] ? ext4_ind_trans_blocks+0x80/0x80 [ 18.678675][ T371] ? __kasan_check_read+0x11/0x20 [ 18.683701][ T371] ? __ext4_journal_start_sb+0x2d9/0x480 [ 18.689325][ T371] ext4_truncate+0xae6/0x1270 [ 18.693992][ T371] ? __ext4_mark_inode_dirty+0x780/0x780 [ 18.699630][ T371] ? __kasan_check_read+0x11/0x20 [ 18.704630][ T371] ? __ext4_journal_start_sb+0x2d9/0x480 [ 18.710239][ T371] ext4_evict_inode+0xecf/0x16d0 [ 18.715174][ T371] ? _raw_spin_unlock+0x4d/0x70 [ 18.720016][ T371] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 18.725886][ T371] ? __kasan_check_write+0x14/0x20 [ 18.730972][ T371] ? _raw_spin_lock+0xa3/0x1b0 [ 18.735719][ T371] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 18.741094][ T371] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 18.746981][ T371] evict+0x2a3/0x6c0 [ 18.750868][ T371] iput+0x61f/0x7d0 [ 18.754655][ T371] ext4_enable_quotas+0x5a5/0x960 [ 18.759655][ T371] ? ext4_fill_flex_info+0x5d0/0x5d0 [ 18.764939][ T371] ? __ext4_abort+0x4a0/0x4a0 [ 18.769593][ T371] ? proc_create_seq_private+0x201/0x280 [ 18.775213][ T371] ? ext4_feature_set_ok+0x1fb/0x240 [ 18.780477][ T371] ext4_orphan_cleanup+0x2ee/0xdb0 [ 18.785595][ T371] ext4_fill_super+0x896c/0x9240 [ 18.790522][ T371] ? ext4_mount+0x40/0x40 [ 18.794831][ T371] ? vscnprintf+0x80/0x80 [ 18.799145][ T371] ? set_blocksize+0x208/0x3e0 [ 18.803892][ T371] ? sb_set_blocksize+0xb7/0xf0 [ 18.808739][ T371] mount_bdev+0x25f/0x370 [ 18.813053][ T371] ? ext4_mount+0x40/0x40 [ 18.817381][ T371] ext4_mount+0x34/0x40 [ 18.821512][ T371] legacy_get_tree+0xf0/0x190 [ 18.826171][ T371] ? ext4_chksum+0x210/0x210 [ 18.830735][ T371] vfs_get_tree+0x88/0x290 [ 18.835140][ T371] do_new_mount+0x289/0xad0 [ 18.839619][ T371] ? do_move_mount_old+0x160/0x160 [ 18.844707][ T371] ? security_capable+0xb2/0xd0 [ 18.849533][ T371] ? ns_capable+0x8a/0xf0 [ 18.853840][ T371] path_mount+0x58d/0xce0 [ 18.858170][ T371] ? user_path_at_empty+0x40/0x50 [ 18.863168][ T371] __se_sys_mount+0x2d2/0x3c0 [ 18.867918][ T371] ? __x64_sys_mount+0xd0/0xd0 [ 18.872697][ T371] ? do_mknodat+0x430/0x430 [ 18.877187][ T371] __x64_sys_mount+0xbf/0xd0 [ 18.881752][ T371] do_syscall_64+0x34/0x70 [ 18.886145][ T371] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 18.892034][ T371] RIP: 0033:0x7fc08f7344da [ 18.896436][ T371] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 18.916014][ T371] RSP: 002b:00007ffc5770e458 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 18.924500][ T371] RAX: ffffffffffffffda RBX: 00007ffc5770e4b0 RCX: 00007fc08f7344da [ 18.932462][ T371] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 00007ffc5770e470 [ 18.940412][ T371] RBP: 00007ffc5770e470 R08: 00007ffc5770e4b0 R09: 0000000800000015 [ 18.948370][ T371] R10: 0000000000000081 R11: 0000000000000202 R12: 0000000000000004 [ 18.956319][ T371] R13: 0000000000000003 R14: 0000000000000003 R15: 0000000000000010 [ 18.964267][ T371] Modules linked in: [ 18.968642][ T371] ---[ end trace 8d6b13b82edeee5a ]--- [ 18.974134][ T371] RIP: 0010:ext4_free_blocks+0x29ed/0x2ad0 [ 18.979927][ T371] Code: f6 48 0f a3 05 f4 8e bf 04 0f 92 c3 40 0f 92 c6 31 ff e8 c6 62 8d ff 84 db 75 18 e8 ad 5f 8d ff e9 b8 00 00 00 e8 a3 5f 8d ff <0f> 0b e8 9c 5f 8d ff 0f 0b 65 ff 05 2f 1a 23 7e 48 c7 c0 68 bd 9c [ 18.999568][ T371] RSP: 0018:ffffc900002aef80 EFLAGS: 00010293 [ 19.005631][ T371] RAX: ffffffff81df534d RBX: 0000000000000001 RCX: ffff888106992780 [ 19.013724][ T371] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000001 [ 19.021691][ T371] RBP: ffffc900002af200 R08: ffffffff81df350e R09: ffffc900002af140 [ 19.029700][ T371] R10: fffff52000055e2f R11: 1ffff92000055e28 R12: 0000000000000000 [ 19.037693][ T371] R13: dffffc0000000000 R14: 00000000ffffffff R15: ffff8881065e1000 [ 19.045694][ T371] FS: 00005555557bf300(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 19.054634][ T371] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 19.061551][ T371] CR2: 00007ffe40c84cd8 CR3: 000000011e1bf000 CR4: 00000000003506a0 [ 19.069535][ T371] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 19.077530][ T371] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 19.085530][ T371] Kernel panic - not syncing: Fatal exception [ 19.091649][ T371] Kernel Offset: disabled [ 19.095971][ T371] Rebooting in 86400 seconds..