./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor174857190 <...> Warning: Permanently added '10.128.0.56' (ED25519) to the list of known hosts. execve("./syz-executor174857190", ["./syz-executor174857190"], 0x7fffdf5fcc20 /* 10 vars */) = 0 brk(NULL) = 0x555555e8b000 brk(0x555555e8bd00) = 0x555555e8bd00 arch_prctl(ARCH_SET_FS, 0x555555e8b380) = 0 set_tid_address(0x555555e8b650) = 5016 set_robust_list(0x555555e8b660, 24) = 0 rseq(0x555555e8bca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor174857190", 4096) = 27 getrandom("\x7b\x5f\x31\x41\x21\xf2\xf3\x71", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555555e8bd00 brk(0x555555eacd00) = 0x555555eacd00 brk(0x555555ead000) = 0x555555ead000 mprotect(0x7f6aa11fa000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 [ 79.495940][ T26] audit: type=1400 audit(1689869166.829:83): avc: denied { write } for pid=5013 comm="strace-static-x" path="pipe:[30224]" dev="pipefs" ino=30224 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6a98d2b000 write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x01\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x80\xff\xff\xff\x01\x00\x00\x00\x78\x5f\xaa\x3b\xd7\x0e\xce\x68\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 munmap(0x7f6a98d2b000, 2097152) = 0 [ 79.527282][ T26] audit: type=1400 audit(1689869166.869:84): avc: denied { execmem } for pid=5016 comm="syz-executor174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 79.541451][ T5016] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5016 'syz-executor174' openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file0", 0777) = 0 [ 79.591723][ T26] audit: type=1400 audit(1689869166.929:85): avc: denied { read write } for pid=5016 comm="syz-executor174" name="loop0" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 79.595718][ T5016] loop0: detected capacity change from 0 to 4096 [ 79.616553][ T26] audit: type=1400 audit(1689869166.929:86): avc: denied { open } for pid=5016 comm="syz-executor174" path="/dev/loop0" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 79.634178][ T5016] ================================================================================ [ 79.648280][ T26] audit: type=1400 audit(1689869166.929:87): avc: denied { ioctl } for pid=5016 comm="syz-executor174" path="/dev/loop0" dev="devtmpfs" ino=648 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 79.656466][ T5016] UBSAN: shift-out-of-bounds in fs/ntfs3/super.c:905:29 [ 79.656495][ T5016] shift exponent 128 is too large for 32-bit type 'int' [ 79.683953][ T26] audit: type=1400 audit(1689869166.969:88): avc: denied { mounton } for pid=5016 comm="syz-executor174" path="/root/file0" dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 79.689328][ T5016] CPU: 1 PID: 5016 Comm: syz-executor174 Not tainted 6.5.0-rc2-syzkaller-00052-gbfa3037d8280 #0 [ 79.696709][ T26] audit: type=1400 audit(1689869167.029:89): avc: denied { append } for pid=4450 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 79.718981][ T5016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 79.719002][ T5016] Call Trace: [ 79.719012][ T5016] [ 79.719022][ T5016] dump_stack_lvl+0x125/0x1b0 [ 79.730215][ T26] audit: type=1400 audit(1689869167.029:90): avc: denied { open } for pid=4450 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 79.751501][ T5016] __ubsan_handle_shift_out_of_bounds+0x27a/0x600 [ 79.751559][ T5016] ntfs_fill_super.cold+0x1c2/0x437 [ 79.762712][ T26] audit: type=1400 audit(1689869167.029:91): avc: denied { getattr } for pid=4450 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 79.765311][ T5016] ? put_ntfs+0x330/0x330 [ 79.833812][ T5016] ? vsprintf+0x30/0x30 [ 79.837999][ T5016] ? set_blocksize+0x2bd/0x360 [ 79.842867][ T5016] get_tree_bdev+0x43e/0x7d0 [ 79.847504][ T5016] ? put_ntfs+0x330/0x330 [ 79.851863][ T5016] vfs_get_tree+0x88/0x350 [ 79.856295][ T5016] path_mount+0x1492/0x1ed0 [ 79.860815][ T5016] ? lockdep_hardirqs_on+0x7d/0x100 [ 79.866032][ T5016] ? finish_automount+0xa50/0xa50 [ 79.871079][ T5016] ? putname+0x101/0x140 [ 79.875357][ T5016] __x64_sys_mount+0x293/0x310 [ 79.880141][ T5016] ? copy_mnt_ns+0xb60/0xb60 [ 79.884758][ T5016] ? lockdep_hardirqs_on+0x7d/0x100 [ 79.890150][ T5016] ? _raw_spin_unlock_irq+0x2e/0x50 [ 79.895378][ T5016] ? ptrace_notify+0xf4/0x130 [ 79.900070][ T5016] do_syscall_64+0x38/0xb0 [ 79.904514][ T5016] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 79.910449][ T5016] RIP: 0033:0x7f6aa11698ba [ 79.914874][ T5016] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 79.934508][ T5016] RSP: 002b:00007ffda7e93de8 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 79.942943][ T5016] RAX: ffffffffffffffda RBX: 00007ffda7e93e00 RCX: 00007f6aa11698ba [ 79.950926][ T5016] RDX: 000000002001f180 RSI: 000000002001f1c0 RDI: 00007ffda7e93e00 [ 79.958911][ T5016] RBP: 0000000000000004 R08: 00007ffda7e93e40 R09: 000000000001f191 [ 79.966915][ T5016] R10: 000000000000000e R11: 0000000000000286 R12: 000000000000000e [ 79.974899][ T5016] R13: 00007ffda7e93e40 R14: 0000000000000003 R15: 0000000000200000 [ 79.982887][ T5016] [ 79.986201][ T5016] ================================================================================ [ 79.995532][ T5016] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 80.002750][ T5016] CPU: 1 PID: 5016 Comm: syz-executor174 Not tainted 6.5.0-rc2-syzkaller-00052-gbfa3037d8280 #0 [ 80.013278][ T5016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 80.023349][ T5016] Call Trace: [ 80.026644][ T5016] [ 80.029592][ T5016] dump_stack_lvl+0xd9/0x1b0 [ 80.034213][ T5016] panic+0x6a4/0x750 [ 80.038138][ T5016] ? panic_smp_self_stop+0xa0/0xa0 [ 80.043397][ T5016] ? syslog_print_all+0x3f0/0x3f0 [ 80.048460][ T5016] check_panic_on_warn+0xab/0xb0 [ 80.053427][ T5016] __ubsan_handle_shift_out_of_bounds+0x2a2/0x600 [ 80.059881][ T5016] ntfs_fill_super.cold+0x1c2/0x437 [ 80.065123][ T5016] ? put_ntfs+0x330/0x330 [ 80.069487][ T5016] ? vsprintf+0x30/0x30 [ 80.073675][ T5016] ? set_blocksize+0x2bd/0x360 [ 80.078468][ T5016] get_tree_bdev+0x43e/0x7d0 [ 80.083093][ T5016] ? put_ntfs+0x330/0x330 [ 80.087476][ T5016] vfs_get_tree+0x88/0x350 [ 80.091920][ T5016] path_mount+0x1492/0x1ed0 [ 80.096454][ T5016] ? lockdep_hardirqs_on+0x7d/0x100 [ 80.101682][ T5016] ? finish_automount+0xa50/0xa50 [ 80.106740][ T5016] ? putname+0x101/0x140 [ 80.111008][ T5016] __x64_sys_mount+0x293/0x310 [ 80.115801][ T5016] ? copy_mnt_ns+0xb60/0xb60 [ 80.120424][ T5016] ? lockdep_hardirqs_on+0x7d/0x100 [ 80.125653][ T5016] ? _raw_spin_unlock_irq+0x2e/0x50 [ 80.130890][ T5016] ? ptrace_notify+0xf4/0x130 [ 80.135589][ T5016] do_syscall_64+0x38/0xb0 [ 80.140029][ T5016] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 80.145966][ T5016] RIP: 0033:0x7f6aa11698ba [ 80.150402][ T5016] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 80.170038][ T5016] RSP: 002b:00007ffda7e93de8 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 80.178480][ T5016] RAX: ffffffffffffffda RBX: 00007ffda7e93e00 RCX: 00007f6aa11698ba [ 80.186677][ T5016] RDX: 000000002001f180 RSI: 000000002001f1c0 RDI: 00007ffda7e93e00 [ 80.194669][ T5016] RBP: 0000000000000004 R08: 00007ffda7e93e40 R09: 000000000001f191 [ 80.202661][ T5016] R10: 000000000000000e R11: 0000000000000286 R12: 000000000000000e [ 80.210654][ T5016] R13: 00007ffda7e93e40 R14: 0000000000000003 R15: 0000000000200000 [ 80.218649][ T5016] [ 80.221940][ T5016] Kernel Offset: disabled [ 80.226457][ T5016] Rebooting in 86400 seconds..