./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3631976228 <...> Warning: Permanently added '10.128.0.240' (ECDSA) to the list of known hosts. execve("./syz-executor3631976228", ["./syz-executor3631976228"], 0x7ffcc4dfade0 /* 10 vars */) = 0 brk(NULL) = 0x55555576d000 brk(0x55555576dc40) = 0x55555576dc40 arch_prctl(ARCH_SET_FS, 0x55555576d300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor3631976228", 4096) = 28 brk(0x55555578ec40) = 0x55555578ec40 brk(0x55555578f000) = 0x55555578f000 mprotect(0x7f47aad71000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/sg0", O_RDONLY) = 3 [ 81.477407][ T26] audit: type=1400 audit(1678819408.067:75): avc: denied { execmem } for pid=5070 comm="syz-executor363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 81.485362][ T5070] ------------[ cut here ]------------ [ 81.498200][ T26] audit: type=1400 audit(1678819408.067:76): avc: denied { read } for pid=5070 comm="syz-executor363" name="sg0" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 81.503051][ T5070] WARNING: CPU: 1 PID: 5070 at lib/iov_iter.c:623 _copy_from_iter+0x2ad/0x1060 [ 81.527888][ T26] audit: type=1400 audit(1678819408.067:77): avc: denied { open } for pid=5070 comm="syz-executor363" path="/dev/sg0" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 81.535656][ T5070] Modules linked in: [ 81.560356][ T26] audit: type=1400 audit(1678819408.067:78): avc: denied { ioctl } for pid=5070 comm="syz-executor363" path="/dev/sg0" dev="devtmpfs" ino=693 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 81.563794][ T5070] CPU: 1 PID: 5070 Comm: syz-executor363 Not tainted 6.3.0-rc2-syzkaller-00006-gfc89d7fb499b #0 [ 81.600301][ T5070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 81.610462][ T5070] RIP: 0010:_copy_from_iter+0x2ad/0x1060 [ 81.616511][ T5070] Code: 5d 41 5c 41 5d 41 5e 41 5f c3 e8 4e 1a 6e fd be 73 02 00 00 48 c7 c7 40 ab a6 8a e8 1d ec a9 fd e9 56 fe ff ff e8 33 1a 6e fd <0f> 0b 45 31 ff eb 8b e8 27 1a 6e fd 31 ff 89 ee e8 2e 16 6e fd 40 [ 81.636353][ T5070] RSP: 0018:ffffc9000348f688 EFLAGS: 00010293 [ 81.642576][ T5070] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 81.650654][ T5070] RDX: ffff88802ab34100 RSI: ffffffff8414dc0d RDI: 0000000000000001 [ 81.658723][ T5070] RBP: 0000000000000021 R08: 0000000000000001 R09: 0000000000000000 [ 81.666734][ T5070] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 81.674804][ T5070] R13: ffffea0001c9fc00 R14: ffffc9000348f8c0 R15: 0000000000000021 [ 81.682863][ T5070] FS: 000055555576d300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 81.691900][ T5070] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 81.698582][ T5070] CR2: 00000000004561a0 CR3: 000000007980a000 CR4: 00000000003506e0 [ 81.706605][ T5070] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 81.714715][ T5070] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 81.723142][ T5070] Call Trace: [ 81.726464][ T5070] [ 81.729533][ T5070] ? lockdep_unlock+0x11b/0x290 [ 81.734495][ T5070] ? __lock_acquire+0x27b0/0x5d40 [ 81.739637][ T5070] ? iov_iter_get_pages_alloc2+0xf0/0xf0 [ 81.745336][ T5070] ? bio_add_pc_page+0xbc/0x100 [ 81.750326][ T5070] copy_page_from_iter+0x233/0x3f0 [ 81.755510][ T5070] blk_rq_map_user_iov+0xb5d/0x16e0 [ 81.760807][ T5070] ? find_held_lock+0x2d/0x110 [ 81.765649][ T5070] ? bio_map_user_iov+0x8a0/0x8a0 [ 81.770855][ T5070] ? sg_common_write.constprop.0+0xc89/0x1e00 [ 81.777000][ T5070] ? __mutex_lock+0x231/0x1350 [ 81.781890][ T5070] blk_rq_map_user_io+0x1cd/0x200 [ 81.786962][ T5070] ? blk_rq_map_user_io.part.0+0x270/0x270 [ 81.792869][ T5070] ? wait_for_completion_io_timeout+0x20/0x20 [ 81.799052][ T5070] sg_common_write.constprop.0+0xdcd/0x1e00 [ 81.805096][ T5070] ? sg_read+0x1520/0x1520 [ 81.809637][ T5070] ? capable+0xe1/0x120 [ 81.813853][ T5070] sg_new_write.isra.0+0x522/0xa90 [ 81.819098][ T5070] ? sg_common_write.constprop.0+0x1e00/0x1e00 [ 81.825326][ T5070] ? scsi_block_when_processing_errors+0x298/0x350 [ 81.832083][ T5070] ? scsi_check_sense+0x1130/0x1130 [ 81.837374][ T5070] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 81.843423][ T5070] ? do_vfs_ioctl+0x132/0x1670 [ 81.848299][ T5070] sg_ioctl+0x9a8/0x2700 [ 81.852823][ T5070] ? selinux_bprm_creds_for_exec+0xb40/0xb40 [ 81.858933][ T5070] ? sg_write+0xe0/0xe0 [ 81.863212][ T5070] ? ptrace_notify+0xfe/0x140 [ 81.868009][ T5070] ? lock_downgrade+0x690/0x690 [ 81.872908][ T5070] ? selinux_file_ioctl+0xba/0x280 [ 81.878113][ T5070] ? sg_write+0xe0/0xe0 [ 81.882336][ T5070] __x64_sys_ioctl+0x197/0x210 [ 81.887124][ T5070] do_syscall_64+0x39/0xb0 [ 81.891635][ T5070] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 81.897598][ T5070] RIP: 0033:0x7f47aad046c9 [ 81.902087][ T5070] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 81.922162][ T5070] RSP: 002b:00007ffcbf523d68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 81.930749][ T5070] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f47aad046c9 [ 81.938796][ T5070] RDX: 0000000020000180 RSI: 0000000000002285 RDI: 0000000000000003 [ 81.946787][ T5070] RBP: 00007f47aacc41d0 R08: 0000000000000000 R09: 0000000000000000 [ 81.956587][ T5070] R10: 000000000000ffff R11: 0000000000000246 R12: 00007f47aacc4260 [ 81.964675][ T5070] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 81.972854][ T5070] [ 81.976900][ T5070] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 81.985512][ T5070] CPU: 1 PID: 5070 Comm: syz-executor363 Not tainted 6.3.0-rc2-syzkaller-00006-gfc89d7fb499b #0 [ 81.996061][ T5070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 82.006754][ T5070] Call Trace: [ 82.010176][ T5070] [ 82.013247][ T5070] dump_stack_lvl+0xd9/0x150 [ 82.017886][ T5070] panic+0x688/0x730 [ 82.021836][ T5070] ? panic_smp_self_stop+0x90/0x90 [ 82.026984][ T5070] ? show_trace_log_lvl+0x285/0x390 [ 82.032227][ T5070] ? _copy_from_iter+0x2ad/0x1060 [ 82.038771][ T5070] check_panic_on_warn+0xb1/0xc0 [ 82.047515][ T5070] __warn+0xf2/0x460 [ 82.051460][ T5070] ? _copy_from_iter+0x2ad/0x1060 [ 82.056559][ T5070] report_bug+0x2da/0x500 [ 82.060967][ T5070] handle_bug+0x3c/0x70 [ 82.065168][ T5070] exc_invalid_op+0x18/0x50 [ 82.069713][ T5070] asm_exc_invalid_op+0x1a/0x20 [ 82.074625][ T5070] RIP: 0010:_copy_from_iter+0x2ad/0x1060 [ 82.081513][ T5070] Code: 5d 41 5c 41 5d 41 5e 41 5f c3 e8 4e 1a 6e fd be 73 02 00 00 48 c7 c7 40 ab a6 8a e8 1d ec a9 fd e9 56 fe ff ff e8 33 1a 6e fd <0f> 0b 45 31 ff eb 8b e8 27 1a 6e fd 31 ff 89 ee e8 2e 16 6e fd 40 [ 82.101154][ T5070] RSP: 0018:ffffc9000348f688 EFLAGS: 00010293 [ 82.107249][ T5070] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 82.115419][ T5070] RDX: ffff88802ab34100 RSI: ffffffff8414dc0d RDI: 0000000000000001 [ 82.123416][ T5070] RBP: 0000000000000021 R08: 0000000000000001 R09: 0000000000000000 [ 82.133575][ T5070] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 82.142182][ T5070] R13: ffffea0001c9fc00 R14: ffffc9000348f8c0 R15: 0000000000000021 [ 82.150182][ T5070] ? _copy_from_iter+0x2ad/0x1060 [ 82.155451][ T5070] ? _copy_from_iter+0x2ad/0x1060 [ 82.160536][ T5070] ? lockdep_unlock+0x11b/0x290 [ 82.165441][ T5070] ? __lock_acquire+0x27b0/0x5d40 [ 82.170503][ T5070] ? iov_iter_get_pages_alloc2+0xf0/0xf0 [ 82.176275][ T5070] ? bio_add_pc_page+0xbc/0x100 [ 82.181522][ T5070] copy_page_from_iter+0x233/0x3f0 [ 82.186667][ T5070] blk_rq_map_user_iov+0xb5d/0x16e0 [ 82.191901][ T5070] ? find_held_lock+0x2d/0x110 [ 82.196711][ T5070] ? bio_map_user_iov+0x8a0/0x8a0 [ 82.201891][ T5070] ? sg_common_write.constprop.0+0xc89/0x1e00 [ 82.208192][ T5070] ? __mutex_lock+0x231/0x1350 [ 82.212998][ T5070] blk_rq_map_user_io+0x1cd/0x200 [ 82.218051][ T5070] ? blk_rq_map_user_io.part.0+0x270/0x270 [ 82.223901][ T5070] ? wait_for_completion_io_timeout+0x20/0x20 [ 82.230017][ T5070] sg_common_write.constprop.0+0xdcd/0x1e00 [ 82.235960][ T5070] ? sg_read+0x1520/0x1520 [ 82.240418][ T5070] ? capable+0xe1/0x120 [ 82.244615][ T5070] sg_new_write.isra.0+0x522/0xa90 [ 82.249874][ T5070] ? sg_common_write.constprop.0+0x1e00/0x1e00 [ 82.256095][ T5070] ? scsi_block_when_processing_errors+0x298/0x350 [ 82.262644][ T5070] ? scsi_check_sense+0x1130/0x1130 [ 82.267887][ T5070] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 82.273834][ T5070] ? do_vfs_ioctl+0x132/0x1670 [ 82.278646][ T5070] sg_ioctl+0x9a8/0x2700 [ 82.282939][ T5070] ? selinux_bprm_creds_for_exec+0xb40/0xb40 [ 82.288992][ T5070] ? sg_write+0xe0/0xe0 [ 82.293193][ T5070] ? ptrace_notify+0xfe/0x140 [ 82.297899][ T5070] ? lock_downgrade+0x690/0x690 [ 82.302789][ T5070] ? selinux_file_ioctl+0xba/0x280 [ 82.307964][ T5070] ? sg_write+0xe0/0xe0 [ 82.312279][ T5070] __x64_sys_ioctl+0x197/0x210 [ 82.317081][ T5070] do_syscall_64+0x39/0xb0 [ 82.321546][ T5070] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 82.327590][ T5070] RIP: 0033:0x7f47aad046c9 [ 82.332033][ T5070] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 82.351670][ T5070] RSP: 002b:00007ffcbf523d68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 82.360130][ T5070] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f47aad046c9 [ 82.368303][ T5070] RDX: 0000000020000180 RSI: 0000000000002285 RDI: 0000000000000003 [ 82.376309][ T5070] RBP: 00007f47aacc41d0 R08: 0000000000000000 R09: 0000000000000000 [ 82.384307][ T5070] R10: 000000000000ffff R11: 0000000000000246 R12: 00007f47aacc4260 [ 82.392306][ T5070] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 82.400309][ T5070] [ 82.403705][ T5070] Kernel Offset: disabled [ 82.408124][ T5070] Rebooting in 86400 seconds..