./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor993574008
<...>
[ 29.255293][ T3187] 8021q: adding VLAN 0 to HW filter on device bond0
[ 29.268221][ T3187] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
syzkaller login: [ 39.883834][ T27] kauditd_printk_skb: 37 callbacks suppressed
[ 39.883851][ T27] audit: type=1400 audit(1664098326.032:73): avc: denied { transition } for pid=3421 comm="sshd" path="/bin/sh" dev="sda1" ino=73 scontext=system_u:system_r:initrc_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 39.948790][ T27] audit: type=1400 audit(1664098326.042:74): avc: denied { write } for pid=3421 comm="sh" path="pipe:[27941]" dev="pipefs" ino=27941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:initrc_t tclass=fifo_file permissive=1
Warning: Permanently added '10.128.0.67' (ECDSA) to the list of known hosts.
execve("./syz-executor993574008", ["./syz-executor993574008"], 0x7ffeac109f60 /* 10 vars */) = 0
brk(NULL) = 0x555555d0f000
brk(0x555555d0fd00) = 0x555555d0fd00
arch_prctl(ARCH_SET_FS, 0x555555d0f3c0) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor993574008", 4096) = 27
brk(0x555555d30d00) = 0x555555d30d00
brk(0x555555d31000) = 0x555555d31000
mprotect(0x7fd2f8118000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGSEGV, {sa_handler=0x7fd2f8069ae0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7fd2f8069dd0}, NULL, 8) = 0
rt_sigaction(SIGBUS, {sa_handler=0x7fd2f8069ae0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7fd2f8069dd0}, NULL, 8) = 0
mkdir("./file0", 0777) = 0
--- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} ---
pipe2([3, 4], 0) = 0
write(4, "\x15\x00\x00\x00\x61\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 21) = 21
dup(4) = 5
mount(NULL, "./file0", "9p", 0, "trans=fd,rfdno=0x0000000000000003,wfdno=0x0000000000000005,") = -1 EREMOTEIO (Remote I/O error)
write(5, "\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 24) = 24
write(5, "\xb0\x00\x00\x00\x00\x00\x00\x6b\x2e\x7f\xb3\xf3\x73\x25\x7a\x00\xe4\x78\x55\xa6\x04\xc6\x09\x00\x00\x00\xa7\xa3\x5e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 176) = 176
write(5, "\x4c\x01\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 311) = 311
mount(NULL, "./file0", "9p", 0, "trans=fd,rfdno=0x0000000000000003,wfdno=0x0000000000000004,") = 0
[ 49.962443][ T27] audit: type=1400 audit(1664098336.112:75): avc: denied { execmem } for pid=3607 comm="syz-executor993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 49.982515][ T27] audit: type=1400 audit(1664098336.122:76): avc: denied { mounton } for pid=3607 comm="syz-executor993" path="/root/file0" dev="sda1" ino=1138 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[ 50.007898][ T3607] ------------[ cut here ]------------
[ 50.012248][ T27] audit: type=1400 audit(1664098336.142:77): avc: denied { mount } for pid=3607 comm="syz-executor993" name="/" dev="9p" ino=11792394149293573638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 50.013601][ T3607] WARNING: CPU: 0 PID: 3607 at fs/inode.c:388 inc_nlink+0x144/0x160
[ 50.037904][ T27] audit: type=1400 audit(1664098336.152:78): avc: denied { write } for pid=3607 comm="syz-executor993" name="/" dev="9p" ino=11792394149293573638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 50.069831][ T3607] Modules linked in:
[ 50.069852][ T3607] CPU: 0 PID: 3607 Comm: syz-executor993 Not tainted 6.0.0-rc6-syzkaller-00309-g1a61b828566f #0
[ 50.074536][ T27] audit: type=1400 audit(1664098336.152:79): avc: denied { add_name } for pid=3607 comm="syz-executor993" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 50.085342][ T3607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[ 50.106544][ T27] audit: type=1400 audit(1664098336.152:80): avc: denied { create } for pid=3607 comm="syz-executor993" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[ 50.137020][ T3607] RIP: 0010:inc_nlink+0x144/0x160
[ 50.137382][ T27] audit: type=1400 audit(1664098336.152:81): avc: denied { associate } for pid=3607 comm="syz-executor993" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 50.142115][ T3607] Code: ff 4c 89 e7 e8 1d ed ea ff e9 42 ff ff ff 4c 89 e7 e8 a0 ec ea ff e9 fc fe ff ff 4c 89 e7 e8 93 ec ea ff eb d4 e8 3c 4e 9f ff <0f> 0b e9 6e ff ff ff e8 90 ec ea ff e9 44 ff ff ff e8 86 ec ea ff
[ 50.183785][ T3607] RSP: 0018:ffffc90003007ca0 EFLAGS: 00010293
[ 50.189885][ T3607] RAX: 0000000000000000 RBX: ffff88806b47c618 RCX: 0000000000000000
[ 50.197866][ T3607] RDX: ffff88807e3a8000 RSI: ffffffff81dbe9e4 RDI: 0000000000000007
[ 50.205982][ T3607] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000
[ 50.214101][ T3607] R10: 0000000000000000 R11: 000000000000001d R12: ffff88806b47c660
[ 50.222456][ T3607] R13: ffff888071b255e0 R14: 1ffff92000600f9c R15: ffff888076e45e00
[ 50.230568][ T3607] FS: 0000555555d0f3c0(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
[ 50.239618][ T3607] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 50.246223][ T3607] CR2: 00007f36309766a8 CR3: 000000007bb5a000 CR4: 00000000003506f0
[ 50.254587][ T3607] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 50.262661][ T3607] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 50.270681][ T3607] Call Trace:
[ 50.273957][ T3607]
[ 50.276902][ T3607] v9fs_vfs_mkdir_dotl+0x5c5/0x900
[ 50.282082][ T3607] ? v9fs_vfs_create_dotl+0x30/0x30
[ 50.287289][ T3607] ? __inode_security_revalidate+0x140/0x140
[ 50.293328][ T3607] ? selinux_inode_init_security+0x6b0/0x6b0
[ 50.299390][ T3607] ? capable_wrt_inode_uidgid+0xe6/0x170
[ 50.305018][ T3607] vfs_mkdir+0x489/0x740
[ 50.309324][ T3607] do_mkdirat+0x28c/0x310
[ 50.313668][ T3607] ? __ia32_sys_mknod+0xa0/0xa0
[ 50.318513][ T3607] ? getname_flags.part.0+0x1dd/0x4f0
[ 50.323949][ T3607] __x64_sys_mkdir+0xf2/0x140
[ 50.328650][ T3607] do_syscall_64+0x35/0xb0
[ 50.333118][ T3607] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 50.339088][ T3607] RIP: 0033:0x7fd2f80ab819
[ 50.343511][ T3607] Code: 28 c3 e8 5a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 50.363208][ T3607] RSP: 002b:00007ffdcae60a18 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[ 50.371690][ T3607] RAX: ffffffffffffffda RBX: 00007ffdcae60a28 RCX: 00007fd2f80ab819
[ 50.379752][ T3607] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200002c0
[ 50.387748][ T3607] RBP: 00007ffdcae60a20 R08: 00007fd2f8069ae0 R09: 00007fd2f8069ae0
[ 50.395849][ T3607] R10: 0000000020000340 R11: 0000000000000246 R12: 0000000000000000
[ 50.403898][ T3607] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 50.412147][ T3607]
[ 50.415178][ T3607] Kernel panic - not syncing: panic_on_warn set ...
[ 50.421744][ T3607] CPU: 0 PID: 3607 Comm: syz-executor993 Not tainted 6.0.0-rc6-syzkaller-00309-g1a61b828566f #0
[ 50.432138][ T3607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[ 50.442198][ T3607] Call Trace:
[ 50.445477][ T3607]
[ 50.448398][ T3607] dump_stack_lvl+0xcd/0x134
[ 50.452995][ T3607] panic+0x2c8/0x627
[ 50.456886][ T3607] ? panic_print_sys_info.part.0+0x10b/0x10b
[ 50.462870][ T3607] ? __warn.cold+0x248/0x2c4
[ 50.467459][ T3607] ? inc_nlink+0x144/0x160
[ 50.471868][ T3607] __warn.cold+0x259/0x2c4
[ 50.476277][ T3607] ? inc_nlink+0x144/0x160
[ 50.480700][ T3607] report_bug+0x1bc/0x210
[ 50.485028][ T3607] handle_bug+0x3c/0x60
[ 50.489193][ T3607] exc_invalid_op+0x14/0x40
[ 50.493697][ T3607] asm_exc_invalid_op+0x16/0x20
[ 50.498551][ T3607] RIP: 0010:inc_nlink+0x144/0x160
[ 50.503582][ T3607] Code: ff 4c 89 e7 e8 1d ed ea ff e9 42 ff ff ff 4c 89 e7 e8 a0 ec ea ff e9 fc fe ff ff 4c 89 e7 e8 93 ec ea ff eb d4 e8 3c 4e 9f ff <0f> 0b e9 6e ff ff ff e8 90 ec ea ff e9 44 ff ff ff e8 86 ec ea ff
[ 50.523208][ T3607] RSP: 0018:ffffc90003007ca0 EFLAGS: 00010293
[ 50.529280][ T3607] RAX: 0000000000000000 RBX: ffff88806b47c618 RCX: 0000000000000000
[ 50.537261][ T3607] RDX: ffff88807e3a8000 RSI: ffffffff81dbe9e4 RDI: 0000000000000007
[ 50.545234][ T3607] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000
[ 50.553200][ T3607] R10: 0000000000000000 R11: 000000000000001d R12: ffff88806b47c660
[ 50.561179][ T3607] R13: ffff888071b255e0 R14: 1ffff92000600f9c R15: ffff888076e45e00
[ 50.569150][ T3607] ? inc_nlink+0x144/0x160
[ 50.573573][ T3607] v9fs_vfs_mkdir_dotl+0x5c5/0x900
[ 50.578692][ T3607] ? v9fs_vfs_create_dotl+0x30/0x30
[ 50.583890][ T3607] ? __inode_security_revalidate+0x140/0x140
[ 50.589882][ T3607] ? selinux_inode_init_security+0x6b0/0x6b0
[ 50.595880][ T3607] ? capable_wrt_inode_uidgid+0xe6/0x170
[ 50.601523][ T3607] vfs_mkdir+0x489/0x740
[ 50.605776][ T3607] do_mkdirat+0x28c/0x310
[ 50.610128][ T3607] ? __ia32_sys_mknod+0xa0/0xa0
[ 50.614982][ T3607] ? getname_flags.part.0+0x1dd/0x4f0
[ 50.620356][ T3607] __x64_sys_mkdir+0xf2/0x140
[ 50.625060][ T3607] do_syscall_64+0x35/0xb0
[ 50.629478][ T3607] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 50.635381][ T3607] RIP: 0033:0x7fd2f80ab819
[ 50.639793][ T3607] Code: 28 c3 e8 5a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 50.659426][ T3607] RSP: 002b:00007ffdcae60a18 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[ 50.667839][ T3607] RAX: ffffffffffffffda RBX: 00007ffdcae60a28 RCX: 00007fd2f80ab819
[ 50.675807][ T3607] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200002c0
[ 50.683774][ T3607] RBP: 00007ffdcae60a20 R08: 00007fd2f8069ae0 R09: 00007fd2f8069ae0
[ 50.691740][ T3607] R10: 0000000020000340 R11: 0000000000000246 R12: 0000000000000000
[ 50.699709][ T3607] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 50.707680][ T3607]
[ 50.711023][ T3607] Kernel Offset: disabled
[ 50.715412][ T3607] Rebooting in 86400 seconds..