./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor684688812 <...> ive=1 [ 54.324503][ T26] audit: type=1400 audit(1686773135.574:81): avc: denied { siginh } for pid=4971 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 54.933893][ T26] audit: type=1400 audit(1686773136.224:82): avc: denied { read } for pid=4429 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.161' (ECDSA) to the list of known hosts. execve("./syz-executor684688812", ["./syz-executor684688812"], 0x7ffefa35ec20 /* 10 vars */) = 0 brk(NULL) = 0x555556ca8000 brk(0x555556ca8c40) = 0x555556ca8c40 arch_prctl(ARCH_SET_FS, 0x555556ca8300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor684688812", 4096) = 27 brk(0x555556cc9c40) = 0x555556cc9c40 brk(0x555556cca000) = 0x555556cca000 mprotect(0x7f6b8f3a2000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556ca85d0) = 4992 ./strace-static-x86_64: Process 4992 attached [pid 4992] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 4992] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4992] setsid() = 1 [pid 4992] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 4992] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 4992] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 4992] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 4992] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 4992] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 4992] unshare(CLONE_NEWNS) = 0 [ 68.979106][ T26] audit: type=1400 audit(1686773150.264:83): avc: denied { write } for pid=4988 comm="strace-static-x" path="pipe:[30220]" dev="pipefs" ino=30220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 69.007069][ T26] audit: type=1400 audit(1686773150.294:84): avc: denied { execmem } for pid=4991 comm="syz-executor684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [pid 4992] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 4992] unshare(CLONE_NEWIPC) = 0 [pid 4992] unshare(CLONE_NEWCGROUP) = 0 [pid 4992] unshare(CLONE_NEWUTS) = 0 [pid 4992] unshare(CLONE_SYSVSEM) = 0 [pid 4992] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 4992] write(3, "16777216", 8) = 8 [pid 4992] close(3) = 0 [pid 4992] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 4992] write(3, "536870912", 9) = 9 [pid 4992] close(3) = 0 [pid 4992] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 4992] write(3, "1024", 4) = 4 [pid 4992] close(3) = 0 [pid 4992] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 4992] write(3, "8192", 4) = 4 [pid 4992] close(3) = 0 [pid 4992] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 4992] write(3, "1024", 4) = 4 [pid 4992] close(3) = 0 [pid 4992] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 4992] write(3, "1024", 4) = 4 [pid 4992] close(3) = 0 [pid 4992] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 4992] write(3, "1024 1048576 500 1024", 21) = 21 [pid 4992] close(3) = 0 [pid 4992] getpid() = 1 [pid 4992] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< 0b e8 70 0f 32 ff 48 8d 7d 28 48 b8 00 00 00 00 00 fc ff df 48 [ 69.349004][ T9] RSP: 0000:ffffc900002ff718 EFLAGS: 00010293 [ 69.355068][ T9] RAX: 0000000000000000 RBX: 1ffff9200005fee4 RCX: 0000000000000000 [ 69.363034][ T9] RDX: ffff888019656200 RSI: ffffffff82515839 RDI: 0000000000000007 [ 69.371000][ T9] RBP: ffff888079c22198 R08: 0000000000000007 R09: 0000000000000004 [ 69.378981][ T9] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 69.387034][ T9] R13: 0000000000000000 R14: ffffc900002ff9b4 R15: ffff888079c221c0 [ 69.395002][ T9] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 69.403931][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.410524][ T9] CR2: 000055d36d7a6e00 CR3: 0000000021d56000 CR4: 00000000003506e0 [ 69.418580][ T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 69.426555][ T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 69.434541][ T9] Call Trace: [ 69.437820][ T9] [ 69.440751][ T9] ? die+0x32/0x90 [ 69.444547][ T9] ? do_trap+0x1b2/0x3f0 [ 69.448815][ T9] ? hfs_write_inode+0x329/0x9d0 [ 69.453757][ T9] ? hfs_write_inode+0x329/0x9d0 [ 69.458698][ T9] ? do_error_trap+0xb1/0x170 [ 69.463379][ T9] ? hfs_write_inode+0x329/0x9d0 [ 69.468413][ T9] ? handle_invalid_op+0x2c/0x30 [ 69.473360][ T9] ? hfs_write_inode+0x329/0x9d0 [ 69.478473][ T9] ? exc_invalid_op+0x2f/0x50 [ 69.483175][ T9] ? asm_exc_invalid_op+0x1a/0x20 [ 69.488208][ T9] ? hfs_write_inode+0x329/0x9d0 [ 69.493320][ T9] ? hfs_write_inode+0x329/0x9d0 [ 69.498260][ T9] ? hfs_write_inode+0x329/0x9d0 [ 69.503195][ T9] ? hfs_inode_write_fork+0x1c0/0x1c0 [ 69.508660][ T9] ? find_held_lock+0x2d/0x110 [ 69.513424][ T9] ? __writeback_single_inode+0x2e4/0xdb0 [ 69.519150][ T9] ? lock_downgrade+0x690/0x690 [ 69.523998][ T9] ? do_raw_spin_lock+0x124/0x2b0 [ 69.529025][ T9] ? spin_bug+0x1c0/0x1c0 [ 69.533443][ T9] __writeback_single_inode+0x9f2/0xdb0 [ 69.539009][ T9] writeback_sb_inodes+0x54d/0xe70 [ 69.544120][ T9] ? sync_inode_metadata+0xe0/0xe0 [ 69.549228][ T9] ? rcu_is_watching+0x12/0xb0 [ 69.554010][ T9] ? queue_io+0x386/0x4e0 [ 69.558440][ T9] wb_writeback+0x294/0xa50 [ 69.562950][ T9] ? __writeback_inodes_wb+0x280/0x280 [ 69.568400][ T9] ? lock_downgrade+0x690/0x690 [ 69.573265][ T9] ? mark_held_locks+0x9f/0xe0 [ 69.578029][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 69.583236][ T9] wb_workfn+0x2a5/0xfc0 [ 69.587476][ T9] ? inode_wait_for_writeback+0x40/0x40 [ 69.593018][ T9] ? lock_sync+0x190/0x190 [ 69.597434][ T9] ? lock_downgrade+0x690/0x690 [ 69.602287][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 69.607488][ T9] process_one_work+0x99a/0x15e0 [ 69.612437][ T9] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 69.617898][ T9] ? spin_bug+0x1c0/0x1c0 [ 69.622228][ T9] ? _raw_spin_lock_irq+0x45/0x50 [ 69.627267][ T9] worker_thread+0x67d/0x10c0 [ 69.631945][ T9] ? process_one_work+0x15e0/0x15e0 [ 69.637147][ T9] kthread+0x344/0x440 [ 69.641213][ T9] ? kthread_complete_and_exit+0x40/0x40 [ 69.646853][ T9] ret_from_fork+0x1f/0x30 [ 69.651281][ T9] [ 69.654290][ T9] Modules linked in: [ 69.662710][ T9] ---[ end trace 0000000000000000 ]--- [ 69.668205][ T9] RIP: 0010:hfs_write_inode+0x329/0x9d0 [ 69.674154][ T9] Code: da 66 8a 4c 89 ef e8 f6 0b 32 ff 49 83 fd 03 0f 84 d8 02 00 00 49 83 fd 04 74 11 49 83 fd 02 0f 84 bc fd ff ff e8 77 0f 32 ff <0f> 0b e8 70 0f 32 ff 48 8d 7d 28 48 b8 00 00 00 00 00 fc ff df 48 [ 69.694435][ T9] RSP: 0000:ffffc900002ff718 EFLAGS: 00010293 [ 69.700772][ T9] RAX: 0000000000000000 RBX: 1ffff9200005fee4 RCX: 0000000000000000 [ 69.708767][ T9] RDX: ffff888019656200 RSI: ffffffff82515839 RDI: 0000000000000007 [ 69.716908][ T9] RBP: ffff888079c22198 R08: 0000000000000007 R09: 0000000000000004 [ 69.724938][ T9] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 69.733008][ T9] R13: 0000000000000000 R14: ffffc900002ff9b4 R15: ffff888079c221c0 [ 69.741265][ T9] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 69.750337][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.756940][ T9] CR2: 00007ffdbe5b6ba8 CR3: 00000000741b8000 CR4: 00000000003506f0 [ 69.765000][ T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 69.773050][ T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 69.781094][ T9] Kernel panic - not syncing: Fatal exception [ 69.787315][ T9] Kernel Offset: disabled [ 69.791638][ T9] Rebooting in 86400 seconds..