./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1170342739 <...> Warning: Permanently added '10.128.1.161' (ED25519) to the list of known hosts. execve("./syz-executor1170342739", ["./syz-executor1170342739"], 0x7fff3e556c80 /* 10 vars */) = 0 brk(NULL) = 0x555556fa4000 brk(0x555556fa4d00) = 0x555556fa4d00 arch_prctl(ARCH_SET_FS, 0x555556fa4380) = 0 set_tid_address(0x555556fa4650) = 5012 set_robust_list(0x555556fa4660, 24) = 0 rseq(0x555556fa4ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1170342739", 4096) = 28 getrandom("\x87\xd2\x0e\xfb\xd8\x6a\x9d\xb2", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556fa4d00 brk(0x555556fc5d00) = 0x555556fc5d00 brk(0x555556fc6000) = 0x555556fc6000 mprotect(0x7fc17a183000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 [ 65.905062][ T26] audit: type=1400 audit(1692866689.281:83): avc: denied { write } for pid=5009 comm="strace-static-x" path="pipe:[29530]" dev="pipefs" ino=29530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc171ccd000 [ 65.942556][ T26] audit: type=1400 audit(1692866689.321:84): avc: denied { execmem } for pid=5012 comm="syz-executor117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 65.943664][ T5012] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5012 'syz-executor117' write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 munmap(0x7fc171ccd000, 16777216) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file0", 0777) = 0 mount("/dev/loop0", "./file0", "jfs", 0, "discard=0x0000000000000004,noquota,iocharset=koi8-ru,") = 0 openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 chdir("./file0") = 0 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 open(".", O_RDONLY) = 4 [ 66.107215][ T26] audit: type=1400 audit(1692866689.481:85): avc: denied { read write } for pid=5012 comm="syz-executor117" name="loop0" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 66.111419][ T5012] loop0: detected capacity change from 0 to 32768 [ 66.132174][ T26] audit: type=1400 audit(1692866689.481:86): avc: denied { open } for pid=5012 comm="syz-executor117" path="/dev/loop0" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 66.164704][ T5012] ================================================================================ [ 66.174327][ T5012] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_dmap.c:2951:29 [ 66.182113][ T26] audit: type=1400 audit(1692866689.481:87): avc: denied { ioctl } for pid=5012 comm="syz-executor117" path="/dev/loop0" dev="devtmpfs" ino=648 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 66.182359][ T5012] index 1381 is out of range for type 's8 [1365]' [ 66.208237][ T26] audit: type=1400 audit(1692866689.521:88): avc: denied { mounton } for pid=5012 comm="syz-executor117" path="/root/file0" dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 66.224499][ T5012] CPU: 1 PID: 5012 Comm: syz-executor117 Not tainted 6.5.0-rc7-syzkaller-00022-ga5e505a99ca7 #0 [ 66.238162][ T26] audit: type=1400 audit(1692866689.531:89): avc: denied { mount } for pid=5012 comm="syz-executor117" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 66.247472][ T5012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 66.247490][ T5012] Call Trace: [ 66.247498][ T5012] [ 66.247507][ T5012] dump_stack_lvl+0x125/0x1b0 [ 66.247556][ T5012] __ubsan_handle_out_of_bounds+0x111/0x150 [ 66.247596][ T5012] dbFindLeaf+0x23b/0x240 [ 66.247622][ T5012] dbAllocDmapLev+0xaa/0x2f0 [ 66.247647][ T5012] ? folio_flags.constprop.0+0x56/0x150 [ 66.270453][ T26] audit: type=1400 audit(1692866689.531:90): avc: denied { write } for pid=5012 comm="syz-executor117" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.279525][ T5012] ? dbAllocNext+0x410/0x410 [ 66.279555][ T5012] ? folio_unlock+0x7d/0xd0 [ 66.279585][ T5012] ? __get_metapage+0x522/0x1170 [ 66.283315][ T26] audit: type=1400 audit(1692866689.531:91): avc: denied { add_name } for pid=5012 comm="syz-executor117" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.285763][ T5012] dbAllocCtl+0x12c/0x7b0 [ 66.290438][ T26] audit: type=1400 audit(1692866689.531:92): avc: denied { create } for pid=5012 comm="syz-executor117" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 66.296290][ T5012] dbAllocAG+0x8c5/0xd20 [ 66.296313][ T5012] ? preempt_count_sub+0x150/0x150 [ 66.296349][ T5012] ? dbAllocCtl+0x7b0/0x7b0 [ 66.296373][ T5012] dbAlloc+0x415/0xaa0 [ 66.296397][ T5012] ? kasan_set_track+0x25/0x30 [ 66.440096][ T5012] dtSplitUp+0x3f3/0x5850 [ 66.444428][ T5012] ? save_trace+0x4e/0xb30 [ 66.448837][ T5012] ? _find_first_zero_bit+0x94/0xb0 [ 66.454026][ T5012] ? add_lock_to_list+0x17d/0x380 [ 66.459041][ T5012] ? lockdep_unlock+0x11b/0x290 [ 66.464855][ T5012] ? dtSplitRoot+0x1760/0x1760 [ 66.469631][ T5012] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 66.475641][ T5012] ? print_usage_bug.part.0+0x670/0x670 [ 66.481184][ T5012] ? lock_acquire+0x1ae/0x510 [ 66.485851][ T5012] ? find_held_lock+0x2d/0x110 [ 66.490605][ T5012] ? txLock+0x7f5/0x2120 [ 66.494840][ T5012] ? spin_bug+0x1d0/0x1d0 [ 66.499162][ T5012] ? mark_held_locks+0x9f/0xe0 [ 66.503916][ T5012] dtInsert+0x872/0xb00 [ 66.508063][ T5012] ? dtSearch+0x2450/0x2450 [ 66.512554][ T5012] ? dtSearch+0x198b/0x2450 [ 66.517045][ T5012] ? txEnd+0x5a0/0x5a0 [ 66.521107][ T5012] jfs_mkdir+0x665/0xb30 [ 66.525363][ T5012] ? jfs_create+0xb50/0xb50 [ 66.529985][ T5012] ? avc_has_perm_noaudit+0x3b0/0x3b0 [ 66.535372][ T5012] ? security_inode_permission+0xd8/0x100 [ 66.541098][ T5012] vfs_mkdir+0x532/0x7e0 [ 66.545353][ T5012] do_mkdirat+0x2a9/0x330 [ 66.549694][ T5012] ? __ia32_sys_mknod+0xb0/0xb0 [ 66.554550][ T5012] ? getname_flags.part.0+0x1d5/0x4d0 [ 66.559923][ T5012] __x64_sys_mkdirat+0x115/0x170 [ 66.564859][ T5012] do_syscall_64+0x38/0xb0 [ 66.569268][ T5012] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 66.575154][ T5012] RIP: 0033:0x7fc17a10a939 [ 66.579558][ T5012] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 66.599248][ T5012] RSP: 002b:00007ffd1f5cd828 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 66.607651][ T5012] RAX: ffffffffffffffda RBX: 00007ffd1f5cd9f8 RCX: 00007fc17a10a939 [ 66.615611][ T5012] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000004 [ 66.623567][ T5012] RBP: 00007fc17a183610 R08: 0000000000000000 R09: 00007ffd1f5cd9f8 [ 66.631525][ T5012] R10: 0000000000005e39 R11: 0000000000000246 R12: 0000000000000001 [ 66.639482][ T5012] R13: 00007ffd1f5cd9e8 R14: 0000000000000001 R15: 0000000000000001 [ 66.647449][ T5012] [ 66.651754][ T5012] ================================================================================ [ 66.661153][ T5012] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 66.668372][ T5012] CPU: 1 PID: 5012 Comm: syz-executor117 Not tainted 6.5.0-rc7-syzkaller-00022-ga5e505a99ca7 #0 [ 66.678796][ T5012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 66.688869][ T5012] Call Trace: [ 66.692153][ T5012] [ 66.695097][ T5012] dump_stack_lvl+0xd9/0x1b0 [ 66.699705][ T5012] panic+0x6a4/0x750 [ 66.703614][ T5012] ? panic_smp_self_stop+0xa0/0xa0 [ 66.708746][ T5012] ? syslog_print_all+0x3f0/0x3f0 [ 66.713795][ T5012] check_panic_on_warn+0xab/0xb0 [ 66.718763][ T5012] __ubsan_handle_out_of_bounds+0x139/0x150 [ 66.724698][ T5012] dbFindLeaf+0x23b/0x240 [ 66.729063][ T5012] dbAllocDmapLev+0xaa/0x2f0 [ 66.733671][ T5012] ? folio_flags.constprop.0+0x56/0x150 [ 66.739235][ T5012] ? dbAllocNext+0x410/0x410 [ 66.743844][ T5012] ? folio_unlock+0x7d/0xd0 [ 66.748376][ T5012] ? __get_metapage+0x522/0x1170 [ 66.753352][ T5012] dbAllocCtl+0x12c/0x7b0 [ 66.757693][ T5012] dbAllocAG+0x8c5/0xd20 [ 66.761942][ T5012] ? preempt_count_sub+0x150/0x150 [ 66.767073][ T5012] ? dbAllocCtl+0x7b0/0x7b0 [ 66.771592][ T5012] dbAlloc+0x415/0xaa0 [ 66.775668][ T5012] ? kasan_set_track+0x25/0x30 [ 66.780453][ T5012] dtSplitUp+0x3f3/0x5850 [ 66.784791][ T5012] ? save_trace+0x4e/0xb30 [ 66.789220][ T5012] ? _find_first_zero_bit+0x94/0xb0 [ 66.794442][ T5012] ? add_lock_to_list+0x17d/0x380 [ 66.799505][ T5012] ? lockdep_unlock+0x11b/0x290 [ 66.804373][ T5012] ? dtSplitRoot+0x1760/0x1760 [ 66.809152][ T5012] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 66.815156][ T5012] ? print_usage_bug.part.0+0x670/0x670 [ 66.820723][ T5012] ? lock_acquire+0x1ae/0x510 [ 66.825438][ T5012] ? find_held_lock+0x2d/0x110 [ 66.830222][ T5012] ? txLock+0x7f5/0x2120 [ 66.834480][ T5012] ? spin_bug+0x1d0/0x1d0 [ 66.838829][ T5012] ? mark_held_locks+0x9f/0xe0 [ 66.843614][ T5012] dtInsert+0x872/0xb00 [ 66.847784][ T5012] ? dtSearch+0x2450/0x2450 [ 66.852298][ T5012] ? dtSearch+0x198b/0x2450 [ 66.856812][ T5012] ? txEnd+0x5a0/0x5a0 [ 66.860910][ T5012] jfs_mkdir+0x665/0xb30 [ 66.865182][ T5012] ? jfs_create+0xb50/0xb50 [ 66.869706][ T5012] ? avc_has_perm_noaudit+0x3b0/0x3b0 [ 66.875103][ T5012] ? security_inode_permission+0xd8/0x100 [ 66.880831][ T5012] vfs_mkdir+0x532/0x7e0 [ 66.885089][ T5012] do_mkdirat+0x2a9/0x330 [ 66.889441][ T5012] ? __ia32_sys_mknod+0xb0/0xb0 [ 66.894305][ T5012] ? getname_flags.part.0+0x1d5/0x4d0 [ 66.899693][ T5012] __x64_sys_mkdirat+0x115/0x170 [ 66.904654][ T5012] do_syscall_64+0x38/0xb0 [ 66.909081][ T5012] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 66.914985][ T5012] RIP: 0033:0x7fc17a10a939 [ 66.919404][ T5012] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 66.939020][ T5012] RSP: 002b:00007ffd1f5cd828 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 66.947472][ T5012] RAX: ffffffffffffffda RBX: 00007ffd1f5cd9f8 RCX: 00007fc17a10a939 [ 66.955461][ T5012] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000004 [ 66.963467][ T5012] RBP: 00007fc17a183610 R08: 0000000000000000 R09: 00007ffd1f5cd9f8 [ 66.971638][ T5012] R10: 0000000000005e39 R11: 0000000000000246 R12: 0000000000000001 [ 66.979620][ T5012] R13: 00007ffd1f5cd9e8 R14: 0000000000000001 R15: 0000000000000001 [ 66.987605][ T5012] [ 66.990812][ T5012] Kernel Offset: disabled [ 66.995232][ T5012] Rebooting in 86400 seconds..