./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4094698471
<...>
[ 28.667747][ T3188] 8021q: adding VLAN 0 to HW filter on device bond0
[ 28.684344][ T3188] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
syzkaller login: [ 38.504607][ T26] kauditd_printk_skb: 37 callbacks suppressed
[ 38.504623][ T26] audit: type=1400 audit(1660553634.180:73): avc: denied { transition } for pid=3395 comm="sshd" path="/bin/sh" dev="sda1" ino=73 scontext=system_u:system_r:initrc_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 38.533110][ T26] audit: type=1400 audit(1660553634.190:74): avc: denied { write } for pid=3395 comm="sh" path="pipe:[28431]" dev="pipefs" ino=28431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:initrc_t tclass=fifo_file permissive=1
Warning: Permanently added '10.128.0.56' (ECDSA) to the list of known hosts.
execve("./syz-executor4094698471", ["./syz-executor4094698471"], 0x7ffde9039510 /* 10 vars */) = 0
brk(NULL) = 0x55555561d000
brk(0x55555561dd00) = 0x55555561dd00
arch_prctl(ARCH_SET_FS, 0x55555561d3c0) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor4094698471", 4096) = 28
brk(0x55555563ed00) = 0x55555563ed00
brk(0x55555563f000) = 0x55555563f000
mprotect(0x7f4fbda74000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGSEGV, {sa_handler=0x7f4fbd9c5ae0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f4fbd9c5dd0}, NULL, 8) = 0
rt_sigaction(SIGBUS, {sa_handler=0x7f4fbd9c5ae0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f4fbd9c5dd0}, NULL, 8) = 0
mkdir("./file0", 0777) = 0
--- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} ---
pipe2([3, 4], 0) = 0
write(4, "\x15\x00\x00\x00\x65\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 21) = 21
dup(4) = 5
mount(NULL, "./file0", "9p", 0, "trans=fd,rfdno=0x0000000000000003,wfdno=0x0000000000000005,") = -1 EREMOTEIO (Remote I/O error)
write(5, "\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 24) = 24
write(5, "\xb0\x00\x00\x00\x00\x00\x00\x6b\x2e\x7f\xb3\xf3\x73\x25\xda\x31\x44\x1d\xb4\x8c\xe3\x66\xa2\x33\xa6\x5b\x0f\xf5\x73\x17\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 176) = 176
write(5, "\x4c\x01\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 311) = 311
mount(NULL, "./file0", "9p", 0, "trans=fd,rfdno=0x0000000000000003,wfdno=0x0000000000000004,") = 0
[ 49.950989][ T26] audit: type=1400 audit(1660553645.630:75): avc: denied { execmem } for pid=3608 comm="syz-executor409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 49.977133][ T3608] ------------[ cut here ]------------
[ 49.978166][ T26] audit: type=1400 audit(1660553645.630:76): avc: denied { mounton } for pid=3608 comm="syz-executor409" path="/root/file0" dev="sda1" ino=1138 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[ 49.982714][ T3608] WARNING: CPU: 0 PID: 3608 at fs/inode.c:388 inc_nlink+0x144/0x160
[ 50.005576][ T26] audit: type=1400 audit(1660553645.630:77): avc: denied { mount } for pid=3608 comm="syz-executor409" name="/" dev="9p" ino=17658433433331984101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 50.005619][ T26] audit: type=1400 audit(1660553645.650:78): avc: denied { write } for pid=3608 comm="syz-executor409" name="/" dev="9p" ino=17658433433331984101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 50.005659][ T26] audit: type=1400 audit(1660553645.650:79): avc: denied { add_name } for pid=3608 comm="syz-executor409" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 50.005696][ T26] audit: type=1400 audit(1660553645.650:80): avc: denied { create } for pid=3608 comm="syz-executor409" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[ 50.019491][ T3608] Modules linked in:
[ 50.060979][ T26] audit: type=1400 audit(1660553645.650:81): avc: denied { associate } for pid=3608 comm="syz-executor409" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 50.128248][ T3608]
[ 50.130582][ T3608] CPU: 1 PID: 3608 Comm: syz-executor409 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0
[ 50.141308][ T3608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022
[ 50.151479][ T3608] RIP: 0010:inc_nlink+0x144/0x160
[ 50.156689][ T3608] Code: ff 4c 89 e7 e8 9d f1 ea ff e9 42 ff ff ff 4c 89 e7 e8 20 f1 ea ff e9 fc fe ff ff 4c 89 e7 e8 13 f1 ea ff eb d4 e8 2c 5b 9f ff <0f> 0b e9 6e ff ff ff e8 10 f1 ea ff e9 44 ff ff ff e8 06 f1 ea ff
[ 50.176351][ T3608] RSP: 0018:ffffc90002f47ca0 EFLAGS: 00010293
[ 50.182779][ T3608] RAX: 0000000000000000 RBX: ffff88806b882618 RCX: 0000000000000000
[ 50.190781][ T3608] RDX: ffff8880758641c0 RSI: ffffffff81dbda94 RDI: 0000000000000007
[ 50.198789][ T3608] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000
[ 50.206799][ T3608] R10: 0000000000000000 R11: 000000000000001d R12: ffff88806b882660
[ 50.214775][ T3608] R13: ffff88806fc70df8 R14: 1ffff920005e8f9c R15: ffff88807b2a9c00
[ 50.222822][ T3608] FS: 000055555561d3c0(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
[ 50.231868][ T3608] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 50.238528][ T3608] CR2: 000055995000fbf0 CR3: 0000000020966000 CR4: 00000000003506f0
[ 50.246550][ T3608] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 50.254525][ T3608] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 50.262540][ T3608] Call Trace:
[ 50.265819][ T3608]
[ 50.268777][ T3608] v9fs_vfs_mkdir_dotl+0x5c5/0x900
[ 50.273902][ T3608] ? v9fs_vfs_create_dotl+0x30/0x30
[ 50.279198][ T3608] ? __inode_security_revalidate+0x140/0x140
[ 50.285210][ T3608] ? selinux_inode_init_security+0x6b0/0x6b0
[ 50.291220][ T3608] ? capable_wrt_inode_uidgid+0xe6/0x170
[ 50.296921][ T3608] vfs_mkdir+0x489/0x740
[ 50.301154][ T3608] do_mkdirat+0x28c/0x310
[ 50.305470][ T3608] ? __ia32_sys_mknod+0xa0/0xa0
[ 50.310386][ T3608] ? getname_flags.part.0+0x1dd/0x4f0
[ 50.315774][ T3608] __x64_sys_mkdir+0xf2/0x140
[ 50.320628][ T3608] do_syscall_64+0x35/0xb0
[ 50.325075][ T3608] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 50.331014][ T3608] RIP: 0033:0x7f4fbda07819
[ 50.335436][ T3608] Code: 28 c3 e8 5a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 50.355091][ T3608] RSP: 002b:00007ffd3a7725e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[ 50.363576][ T3608] RAX: ffffffffffffffda RBX: 00007ffd3a7725f8 RCX: 00007f4fbda07819
[ 50.371611][ T3608] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200002c0
[ 50.379718][ T3608] RBP: 00007ffd3a7725f0 R08: 00007f4fbd9c5ae0 R09: 00007f4fbd9c5ae0
[ 50.387760][ T3608] R10: 0000000020000340 R11: 0000000000000246 R12: 0000000000000000
[ 50.395733][ T3608] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 50.403737][ T3608]
[ 50.406793][ T3608] Kernel panic - not syncing: panic_on_warn set ...
[ 50.413361][ T3608] CPU: 0 PID: 3608 Comm: syz-executor409 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0
[ 50.423492][ T3608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022
[ 50.433531][ T3608] Call Trace:
[ 50.436803][ T3608]
[ 50.439724][ T3608] dump_stack_lvl+0xcd/0x134
[ 50.444319][ T3608] panic+0x2c8/0x627
[ 50.448215][ T3608] ? panic_print_sys_info.part.0+0x10b/0x10b
[ 50.454184][ T3608] ? __warn.cold+0x248/0x2c4
[ 50.458762][ T3608] ? inc_nlink+0x144/0x160
[ 50.463164][ T3608] __warn.cold+0x259/0x2c4
[ 50.467571][ T3608] ? inc_nlink+0x144/0x160
[ 50.471978][ T3608] report_bug+0x1bc/0x210
[ 50.476297][ T3608] handle_bug+0x3c/0x60
[ 50.480705][ T3608] exc_invalid_op+0x14/0x40
[ 50.485197][ T3608] asm_exc_invalid_op+0x16/0x20
[ 50.490048][ T3608] RIP: 0010:inc_nlink+0x144/0x160
[ 50.495066][ T3608] Code: ff 4c 89 e7 e8 9d f1 ea ff e9 42 ff ff ff 4c 89 e7 e8 20 f1 ea ff e9 fc fe ff ff 4c 89 e7 e8 13 f1 ea ff eb d4 e8 2c 5b 9f ff <0f> 0b e9 6e ff ff ff e8 10 f1 ea ff e9 44 ff ff ff e8 06 f1 ea ff
[ 50.514661][ T3608] RSP: 0018:ffffc90002f47ca0 EFLAGS: 00010293
[ 50.520722][ T3608] RAX: 0000000000000000 RBX: ffff88806b882618 RCX: 0000000000000000
[ 50.528693][ T3608] RDX: ffff8880758641c0 RSI: ffffffff81dbda94 RDI: 0000000000000007
[ 50.536661][ T3608] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000
[ 50.544626][ T3608] R10: 0000000000000000 R11: 000000000000001d R12: ffff88806b882660
[ 50.552594][ T3608] R13: ffff88806fc70df8 R14: 1ffff920005e8f9c R15: ffff88807b2a9c00
[ 50.560568][ T3608] ? inc_nlink+0x144/0x160
[ 50.564989][ T3608] v9fs_vfs_mkdir_dotl+0x5c5/0x900
[ 50.570103][ T3608] ? v9fs_vfs_create_dotl+0x30/0x30
[ 50.575299][ T3608] ? __inode_security_revalidate+0x140/0x140
[ 50.581285][ T3608] ? selinux_inode_init_security+0x6b0/0x6b0
[ 50.587268][ T3608] ? capable_wrt_inode_uidgid+0xe6/0x170
[ 50.592910][ T3608] vfs_mkdir+0x489/0x740
[ 50.597154][ T3608] do_mkdirat+0x28c/0x310
[ 50.601485][ T3608] ? __ia32_sys_mknod+0xa0/0xa0
[ 50.606337][ T3608] ? getname_flags.part.0+0x1dd/0x4f0
[ 50.611710][ T3608] __x64_sys_mkdir+0xf2/0x140
[ 50.616388][ T3608] do_syscall_64+0x35/0xb0
[ 50.620806][ T3608] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 50.626700][ T3608] RIP: 0033:0x7f4fbda07819
[ 50.631113][ T3608] Code: 28 c3 e8 5a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 50.650719][ T3608] RSP: 002b:00007ffd3a7725e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[ 50.659132][ T3608] RAX: ffffffffffffffda RBX: 00007ffd3a7725f8 RCX: 00007f4fbda07819
[ 50.667101][ T3608] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200002c0
[ 50.675072][ T3608] RBP: 00007ffd3a7725f0 R08: 00007f4fbd9c5ae0 R09: 00007f4fbd9c5ae0
[ 50.683300][ T3608] R10: 0000000020000340 R11: 0000000000000246 R12: 0000000000000000
[ 50.691267][ T3608] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 50.699239][ T3608]
[ 50.702519][ T3608] Kernel Offset: disabled
[ 50.706907][ T3608] Rebooting in 86400 seconds..