./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3800425899 <...> Warning: Permanently added '10.128.1.171' (ED25519) to the list of known hosts. execve("./syz-executor3800425899", ["./syz-executor3800425899"], 0x7ffea089ccd0 /* 10 vars */) = 0 brk(NULL) = 0x555556a5e000 brk(0x555556a5ed00) = 0x555556a5ed00 arch_prctl(ARCH_SET_FS, 0x555556a5e380) = 0 set_tid_address(0x555556a5e650) = 358 set_robust_list(0x555556a5e660, 24) = 0 rseq(0x555556a5eca0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3800425899", 4096) = 28 getrandom("\x8d\xea\x14\xfd\xb6\x05\xec\x13", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556a5ed00 brk(0x555556a7fd00) = 0x555556a7fd00 brk(0x555556a80000) = 0x555556a80000 mprotect(0x7f8bc87f0000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8bc033f000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 munmap(0x7f8bc033f000, 262144) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file1", 0777) = 0 [ 26.012368][ T23] audit: type=1400 audit(1689308854.550:66): avc: denied { execmem } for pid=358 comm="syz-executor380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 26.031724][ T23] audit: type=1400 audit(1689308854.550:67): avc: denied { read write } for pid=358 comm="syz-executor380" name="loop0" dev="devtmpfs" ino=9318 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 26.056198][ T23] audit: type=1400 audit(1689308854.550:68): avc: denied { open } for pid=358 comm="syz-executor380" path="/dev/loop0" dev="devtmpfs" ino=9318 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 26.068521][ T358] EXT4-fs (loop0): 1 orphan inode deleted [ 26.080533][ T23] audit: type=1400 audit(1689308854.550:69): avc: denied { ioctl } for pid=358 comm="syz-executor380" path="/dev/loop0" dev="devtmpfs" ino=9318 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 mount("/dev/loop0", "./file1", "ext4", MS_REC, ",errors=continue") = 0 openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 chdir("./file1") = 0 ioctl(4, LOOP_CLR_FD) = 0 [ 26.085994][ T358] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 26.111467][ T23] audit: type=1400 audit(1689308854.550:70): avc: denied { mounton } for pid=358 comm="syz-executor380" path="/root/file1" dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 26.120351][ T358] ext4 filesystem being mounted at /root/file1 supports timestamps until 2038 (0x7fffffff) close(4) = 0 open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< 0b e8 30 0a 9a ff 0f 0b e8 29 0a 9a ff 0f 0b e8 22 0a 9a ff 0f [ 26.321438][ T358] RSP: 0018:ffff8881dc0efa48 EFLAGS: 00010293 [ 26.327341][ T358] RAX: ffffffff81ca2089 RBX: 0000000000000001 RCX: ffff8881dc465e80 [ 26.335154][ T358] RDX: 0000000000000000 RSI: 0000000020457be0 RDI: 0000000000000001 [ 26.342965][ T358] RBP: ffff8881dc175000 R08: ffffffff81ca1232 R09: ffffed103d36145b [ 26.350775][ T358] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff1103b82e87e [ 26.358588][ T358] R13: dffffc0000000000 R14: 0000000020457be0 R15: ffff8881dc1743f0 [ 26.366398][ T358] FS: 0000555556a5e380(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 26.375167][ T358] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.381585][ T358] CR2: 0000559c299deb28 CR3: 00000001e255a000 CR4: 00000000003406a0 [ 26.389400][ T358] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 26.397208][ T358] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 26.405018][ T358] Call Trace: [ 26.408158][ T358] ? locks_remove_posix+0x660/0x660 [ 26.413199][ T358] ? ext4_get_group_number+0xad/0x190 [ 26.418389][ T358] ext4_discard_preallocations+0x603/0xb90 [ 26.424038][ T358] ? debug_smp_processor_id+0x20/0x20 [ 26.429238][ T358] ? ext4_exit_mballoc+0xf0/0xf0 [ 26.434014][ T358] ? __fsnotify_parent+0x310/0x310 [ 26.438961][ T358] ext4_release_file+0x165/0x300 [ 26.443730][ T358] ? ext4_file_open+0x5e0/0x5e0 [ 26.448425][ T358] __fput+0x262/0x680 [ 26.452237][ T358] task_work_run+0x140/0x170 [ 26.456666][ T358] do_exit+0xcaf/0x2bc0 [ 26.460660][ T358] ? put_task_struct+0x80/0x80 [ 26.465258][ T358] ? syscall_trace_enter+0x650/0x940 [ 26.470378][ T358] do_group_exit+0x138/0x300 [ 26.474804][ T358] __x64_sys_exit_group+0x3b/0x40 [ 26.479666][ T358] do_syscall_64+0xca/0x1c0 [ 26.484009][ T358] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 26.489729][ T358] Modules linked in: [ 26.493679][ T358] ---[ end trace 523a12d49d322c50 ]--- [ 26.499052][ T358] RIP: 0010:ext4_mb_load_buddy_gfp+0xf29/0xf40 [ 26.505000][ T358] Code: ff e8 cb c4 c9 ff e9 0a f3 ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 52 f3 ff ff e8 d1 c4 c9 ff e9 48 f3 ff ff e8 37 0a 9a ff <0f> 0b e8 30 0a 9a ff 0f 0b e8 29 0a 9a ff 0f 0b e8 22 0a 9a ff 0f [ 26.524469][ T358] RSP: 0018:ffff8881dc0efa48 EFLAGS: 00010293 [ 26.530356][ T358] RAX: ffffffff81ca2089 RBX: 0000000000000001 RCX: ffff8881dc465e80 [ 26.538172][ T358] RDX: 0000000000000000 RSI: 0000000020457be0 RDI: 0000000000000001 [ 26.545978][ T358] RBP: ffff8881dc175000 R08: ffffffff81ca1232 R09: ffffed103d36145b [ 26.553773][ T358] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff1103b82e87e [ 26.561609][ T358] R13: dffffc0000000000 R14: 0000000020457be0 R15: ffff8881dc1743f0 [ 26.569417][ T358] FS: 0000555556a5e380(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 26.578187][ T358] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.584583][ T358] CR2: 0000559c299deb28 CR3: 00000001e255a000 CR4: 00000000003406a0 [ 26.592518][ T358] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 26.600321][ T358] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 26.608134][ T358] Kernel panic - not syncing: Fatal exception [ 26.614070][ T358] Kernel Offset: disabled [ 26.618172][ T358] Rebooting in 86400 seconds..