./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3438583956 <...> :system_r:sshd_t tclass=fifo_file permissive=1 [ 12.846082][ T23] audit: type=1400 audit(1708161156.620:64): avc: denied { rlimitinh } for pid=286 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 12.848924][ T23] audit: type=1400 audit(1708161156.620:65): avc: denied { siginh } for pid=286 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.179' (ED25519) to the list of known hosts. execve("./syz-executor3438583956", ["./syz-executor3438583956"], 0x7fff56fd0c40 /* 10 vars */) = 0 brk(NULL) = 0x555556b17000 brk(0x555556b17d00) = 0x555556b17d00 arch_prctl(ARCH_SET_FS, 0x555556b17380) = 0 set_tid_address(0x555556b17650) = 355 set_robust_list(0x555556b17660, 24) = 0 rseq(0x555556b17ca0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3438583956", 4096) = 28 getrandom("\x36\x4f\x74\xcb\xf2\x2b\xa4\x96", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556b17d00 brk(0x555556b38d00) = 0x555556b38d00 brk(0x555556b39000) = 0x555556b39000 mprotect(0x7f3b66008000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3b5db58000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 munmap(0x7f3b5db58000, 138412032) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 close(4) = 0 mkdir("./file1", 0777) = 0 [ 21.907928][ T23] audit: type=1400 audit(1708161165.690:66): avc: denied { execmem } for pid=355 comm="syz-executor343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.916416][ T23] audit: type=1400 audit(1708161165.700:67): avc: denied { read write } for pid=355 comm="syz-executor343" name="loop0" dev="devtmpfs" ino=9325 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 21.920744][ T23] audit: type=1400 audit(1708161165.710:68): avc: denied { open } for pid=355 comm="syz-executor343" path="/dev/loop0" dev="devtmpfs" ino=9325 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 21.924847][ T23] audit: type=1400 audit(1708161165.710:69): avc: denied { ioctl } for pid=355 comm="syz-executor343" path="/dev/loop0" dev="devtmpfs" ino=9325 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 21.961784][ T355] ====================================================== [ 21.961784][ T355] WARNING: the mand mount option is being deprecated and [ 21.961784][ T355] will be removed in v5.15! [ 21.961784][ T355] ====================================================== [ 21.961906][ T23] audit: type=1400 audit(1708161165.750:70): avc: denied { mounton } for pid=355 comm="syz-executor343" path="/root/file1" dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 22.012943][ T355] ------------[ cut here ]------------ [ 22.018199][ T355] kernel BUG at fs/ext4/extents_status.c:205! [ 22.024152][ T355] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 22.030008][ T355] CPU: 0 PID: 355 Comm: syz-executor343 Not tainted 5.4.265-syzkaller-00001-g1b3143b9b166 #0 [ 22.039981][ T355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 22.049887][ T355] RIP: 0010:__es_remove_extent+0x1d98/0x1dd0 [ 22.055692][ T355] Code: 07 80 c1 03 38 c1 0f 8c 57 f7 ff ff 48 8d bc 24 30 01 00 00 e8 e9 07 d1 ff e9 45 f7 ff ff e8 3f 35 a1 ff 0f 0b e8 38 35 a1 ff <0f> 0b e8 01 ee 77 ff e8 2c 35 a1 ff 0f 0b e8 25 35 a1 ff 0f 0b e8 [ 22.075219][ T355] RSP: 0018:ffff8881dbef6f00 EFLAGS: 00010293 [ 22.081120][ T355] RAX: ffffffff81c31188 RBX: 00000000ffffffff RCX: ffff8881dbf48fc0 [ 22.088931][ T355] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 22.096742][ T355] RBP: ffff8881dbef7110 R08: ffffffff81c2fe69 R09: 0000000000000003 [ 22.104554][ T355] R10: ffffffffffffffff R11: dffffc0000000001 R12: 1ffff1103d1942dc [ 22.112364][ T355] R13: 0000000000000001 R14: 0000000000000000 R15: dffffc0000000000 [ 22.120181][ T355] FS: 0000555556b17380(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 22.128941][ T355] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 22.135363][ T355] CR2: 0000556ffeb88da0 CR3: 00000001dbee8000 CR4: 00000000003406b0 [ 22.143179][ T355] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 22.150987][ T355] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 22.158797][ T355] Call Trace: [ 22.161936][ T355] ? __die+0xb4/0x100 [ 22.165746][ T355] ? die+0x26/0x50 [ 22.169303][ T355] ? do_trap+0x1e7/0x340 [ 22.173417][ T355] ? __es_remove_extent+0x1d98/0x1dd0 [ 22.178589][ T355] ? __es_remove_extent+0x1d98/0x1dd0 [ 22.183795][ T355] ? do_invalid_op+0xfb/0x110 [ 22.188314][ T355] ? __es_remove_extent+0x1d98/0x1dd0 [ 22.193517][ T355] ? invalid_op+0x1e/0x30 [ 22.197684][ T355] ? __es_remove_extent+0xa79/0x1dd0 [ 22.202803][ T355] ? __es_remove_extent+0x1d98/0x1dd0 [ 22.208016][ T355] ? __es_remove_extent+0x1d98/0x1dd0 [ 22.213222][ T355] ? ext4_es_insert_extent+0x2d70/0x2d70 [ 22.218689][ T355] ? _raw_write_lock+0xa4/0x170 [ 22.223381][ T355] ? _raw_write_trylock+0x1a0/0x1a0 [ 22.228423][ T355] ? deref_stack_reg+0x1f0/0x1f0 [ 22.233197][ T355] ? ext4_ext_release+0x10/0x10 [ 22.237872][ T355] ext4_es_insert_extent+0x465/0x2d70 [ 22.243081][ T355] ? debug_smp_processor_id+0x20/0x20 [ 22.248284][ T355] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 22.253579][ T355] ? ext4_es_scan_clu+0x290/0x290 [ 22.258438][ T355] ? __down_read+0xf0/0x210 [ 22.262780][ T355] ? _raw_read_unlock+0x21/0x40 [ 22.267470][ T355] ? ext4_es_lookup_extent+0x559/0x9d0 [ 22.272761][ T355] ext4_map_blocks+0x641/0x1ba0 [ 22.277448][ T355] ? write_boundary_block+0x150/0x150 [ 22.282652][ T355] ? ext4_issue_zeroout+0x150/0x150 [ 22.287687][ T355] ? do_syscall_64+0xca/0x1c0 [ 22.292200][ T355] ext4_getblk+0x112/0x540 [ 22.296452][ T355] ? ext4_get_block_trans+0x5b0/0x5b0 [ 22.301660][ T355] ? __ext4_ext_check+0xb72/0x1480 [ 22.306607][ T355] ext4_bread+0x89/0x390 [ 22.310689][ T355] ? __wake_up_bit+0x190/0x190 [ 22.315294][ T355] ? lock_buffer+0x70/0x70 [ 22.319540][ T355] ? ext4_ext_check_inode+0x70/0x70 [ 22.324575][ T355] ? from_kgid_munged+0x7a0/0x7a0 [ 22.329436][ T355] ext4_quota_read+0x180/0x280 [ 22.334036][ T355] v2_check_quota_file+0xf7/0x490 [ 22.338895][ T355] ? _raw_spin_lock+0xa4/0x1b0 [ 22.343493][ T355] ? asan.module_dtor+0x20/0x20 [ 22.348185][ T355] ? _raw_spin_lock+0xa4/0x1b0 [ 22.352781][ T355] ? _raw_spin_trylock_bh+0x190/0x190 [ 22.357988][ T355] dquot_load_quota_sb+0x6af/0xc00 [ 22.362937][ T355] vfs_load_quota_inode+0x40b/0x6a0 [ 22.367971][ T355] ? dquot_enable+0x122/0x220 [ 22.372483][ T355] ext4_enable_quotas+0x5a8/0x940 [ 22.377356][ T355] ? ext4_fill_flex_info+0x5e0/0x5e0 [ 22.382474][ T355] ? proc_create+0x230/0x230 [ 22.386889][ T355] ? ext4_fill_flex_info+0x53b/0x5e0 [ 22.392011][ T355] ? ext4_register_sysfs+0x1d9/0x210 [ 22.397129][ T355] ext4_fill_super+0x84f0/0x8d90 [ 22.401909][ T355] ? ext4_mount+0x40/0x40 [ 22.406186][ T355] ? vscnprintf+0x80/0x80 [ 22.410353][ T355] mount_bdev+0x267/0x370 [ 22.414521][ T355] ? ext4_mount+0x40/0x40 [ 22.418685][ T355] legacy_get_tree+0xdf/0x170 [ 22.423195][ T355] ? ext4_lazyinit_thread+0xc60/0xc60 [ 22.428407][ T355] vfs_get_tree+0x85/0x260 [ 22.432657][ T355] do_new_mount+0x292/0x570 [ 22.436997][ T355] ? do_move_mount_old+0x160/0x160 [ 22.441944][ T355] ? security_capable+0x86/0xb0 [ 22.446629][ T355] do_mount+0x688/0xe10 [ 22.450623][ T355] ? copy_mount_string+0x30/0x30 [ 22.455417][ T355] ? copy_mount_options+0x29a/0x300 [ 22.460430][ T355] ksys_mount+0xc2/0xf0 [ 22.464423][ T355] __x64_sys_mount+0xb1/0xc0 [ 22.468853][ T355] do_syscall_64+0xca/0x1c0 [ 22.473189][ T355] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 22.478914][ T355] Modules linked in: [ 22.482740][ T355] ---[ end trace aee00b66e4148675 ]--- [ 22.487974][ T355] RIP: 0010:__es_remove_extent+0x1d98/0x1dd0 [ 22.493787][ T355] Code: 07 80 c1 03 38 c1 0f 8c 57 f7 ff ff 48 8d bc 24 30 01 00 00 e8 e9 07 d1 ff e9 45 f7 ff ff e8 3f 35 a1 ff 0f 0b e8 38 35 a1 ff <0f> 0b e8 01 ee 77 ff e8 2c 35 a1 ff 0f 0b e8 25 35 a1 ff 0f 0b e8 [ 22.513233][ T355] RSP: 0018:ffff8881dbef6f00 EFLAGS: 00010293 [ 22.519124][ T355] RAX: ffffffff81c31188 RBX: 00000000ffffffff RCX: ffff8881dbf48fc0 [ 22.527016][ T355] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 22.534847][ T355] RBP: ffff8881dbef7110 R08: ffffffff81c2fe69 R09: 0000000000000003 [ 22.542642][ T355] R10: ffffffffffffffff R11: dffffc0000000001 R12: 1ffff1103d1942dc [ 22.550454][ T355] R13: 0000000000000001 R14: 0000000000000000 R15: dffffc0000000000 [ 22.558269][ T355] FS: 0000555556b17380(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 22.567128][ T355] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 22.573579][ T355] CR2: 0000556ffeb88da0 CR3: 00000001dbee8000 CR4: 00000000003406b0 [ 22.581390][ T355] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 22.589192][ T355] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 22.596984][ T355] Kernel panic - not syncing: Fatal exception [ 22.603069][ T355] Kernel Offset: disabled [ 22.607187][ T355] Rebooting in 86400 seconds..