./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2248054756 <...> Warning: Permanently added '10.128.0.205' (ECDSA) to the list of known hosts. execve("./syz-executor2248054756", ["./syz-executor2248054756"], 0x7ffc4daad180 /* 10 vars */) = 0 brk(NULL) = 0x555555f30000 brk(0x555555f30c40) = 0x555555f30c40 arch_prctl(ARCH_SET_FS, 0x555555f30300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2248054756", 4096) = 28 brk(0x555555f51c40) = 0x555555f51c40 brk(0x555555f52000) = 0x555555f52000 mprotect(0x7f5d0d420000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 ftruncate(3, 139264) = 0 pwrite64(3, "\x00\x04\x00\x00\x00\x00\x01\x00\x01\x00\x44\x00\xe6\xff\x00\x00\xff\xff\xff\x7f\x80\x00\x00\x00\x5a\x4d", 26, 1024) = 26 pwrite64(3, "\xfe\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff"..., 1923, 2176) = 1923 pwrite64(3, NULL, 0, 69632) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 mkdir("./file0", 0777) = 0 mount("/dev/loop0", "./file0", "minix", 0, "") = 0 openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 ioctl(4, LOOP_CLR_FD) = 0 [ 50.703586][ T28] audit: type=1400 audit(1656091014.082:75): avc: denied { execmem } for pid=3619 comm="syz-executor224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 50.709089][ T28] audit: type=1400 audit(1656091014.082:76): avc: denied { read write } for pid=3619 comm="syz-executor224" name="loop0" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 close(4) = 0 close(3) = 0 [ 50.709467][ T28] audit: type=1400 audit(1656091014.082:77): avc: denied { open } for pid=3619 comm="syz-executor224" path="/dev/loop0" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 50.710484][ T28] audit: type=1400 audit(1656091014.082:78): avc: denied { ioctl } for pid=3619 comm="syz-executor224" path="/dev/loop0" dev="devtmpfs" ino=644 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 50.711234][ T3619] loop0: detected capacity change from 0 to 272 [ 50.716802][ T28] audit: type=1400 audit(1656091014.092:79): avc: denied { mounton } for pid=3619 comm="syz-executor224" path="/root/file0" dev="sda1" ino=1138 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 50.759771][ T28] audit: type=1400 audit(1656091014.142:80): avc: denied { mount } for pid=3619 comm="syz-executor224" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 50.775086][ T28] audit: type=1400 audit(1656091014.142:81): avc: denied { getattr } for pid=3619 comm="syz-executor224" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 50.775172][ T3619] ================================================================================ [ 50.775180][ T3619] UBSAN: shift-out-of-bounds in fs/minix/inode.c:380:57 [ 50.775197][ T3619] shift exponent 65510 is too large for 64-bit type 'long unsigned int' [ 50.775211][ T3619] CPU: 1 PID: 3619 Comm: syz-executor224 Not tainted 5.19.0-rc3-syzkaller-00146-g92f20ff72066 #0 [ 50.775233][ T3619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.775244][ T3619] Call Trace: [ 50.775249][ T3619] [ 50.775255][ T3619] dump_stack_lvl+0xcd/0x134 [ 50.775294][ T3619] ubsan_epilogue+0xb/0x50 [ 50.775315][ T3619] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x187 [ 50.775340][ T3619] ? selinux_sb_kern_mount+0x220/0x220 [ 50.775364][ T3619] ? do_raw_spin_lock+0x120/0x2a0 [ 50.775383][ T3619] ? _raw_spin_lock_irq+0x41/0x50 [ 50.775406][ T3619] minix_statfs.cold+0x17/0x1c [ 50.775428][ T3619] statfs_by_dentry+0x133/0x210 [ 50.775452][ T3619] fd_statfs+0x66/0x100 [ 50.775473][ T3619] __do_sys_fstatfs+0x7a/0xf0 [ 50.775495][ T3619] ? fd_statfs+0x100/0x100 [ 50.775517][ T3619] ? _raw_spin_unlock_irq+0x2a/0x40 [ 50.775538][ T3619] ? ptrace_notify+0xfa/0x140 [ 50.775556][ T3619] ? syscall_trace_enter.constprop.0+0xb0/0x240 [ 50.775583][ T3619] do_syscall_64+0x35/0xb0 [ 50.775601][ T3619] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 50.775630][ T3619] RIP: 0033:0x7f5d0d3b3df9 [ 50.775645][ T3619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 50.775664][ T3619] RSP: 002b:00007ffe86ed26f8 EFLAGS: 00000246 ORIG_RAX: 000000000000008a [ 50.775684][ T3619] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5d0d3b3df9 [ 50.775697][ T3619] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 50.775709][ T3619] RBP: 00007f5d0d3735f0 R08: 0000000000000000 R09: 0000000000000000 [ 50.775722][ T3619] R10: 00007ffe86ed25b0 R11: 0000000000000246 R12: 00007f5d0d373680 [ 50.775735][ T3619] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 50.775750][ T3619] [ 50.775756][ T3619] ================================================================================ [ 50.775764][ T3619] Kernel panic - not syncing: panic_on_warn set ... [ 50.775775][ T3619] CPU: 1 PID: 3619 Comm: syz-executor224 Not tainted 5.19.0-rc3-syzkaller-00146-g92f20ff72066 #0 [ 50.775798][ T3619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.775811][ T3619] Call Trace: [ 50.775817][ T3619] [ 50.775825][ T3619] dump_stack_lvl+0xcd/0x134 [ 50.775848][ T3619] panic+0x2d7/0x64a [ 50.775868][ T3619] ? panic_print_sys_info.part.0+0x10b/0x10b [ 50.775893][ T3619] ? dump_stack_lvl+0xeb/0x134 [ 50.775915][ T3619] ? ubsan_epilogue+0x3e/0x50 [ 50.775938][ T3619] ubsan_epilogue+0x4a/0x50 [ 50.775960][ T3619] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x187 [ 50.775987][ T3619] ? selinux_sb_kern_mount+0x220/0x220 [ 50.776013][ T3619] ? do_raw_spin_lock+0x120/0x2a0 [ 50.776033][ T3619] ? _raw_spin_lock_irq+0x41/0x50 [ 50.776056][ T3619] minix_statfs.cold+0x17/0x1c [ 50.776079][ T3619] statfs_by_dentry+0x133/0x210 [ 50.776103][ T3619] fd_statfs+0x66/0x100 [ 50.776126][ T3619] __do_sys_fstatfs+0x7a/0xf0 [ 50.776150][ T3619] ? fd_statfs+0x100/0x100 [ 50.776174][ T3619] ? _raw_spin_unlock_irq+0x2a/0x40 [ 50.776197][ T3619] ? ptrace_notify+0xfa/0x140 [ 50.776216][ T3619] ? syscall_trace_enter.constprop.0+0xb0/0x240 [ 50.776245][ T3619] do_syscall_64+0x35/0xb0 [ 50.776264][ T3619] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 50.776290][ T3619] RIP: 0033:0x7f5d0d3b3df9 [ 50.776305][ T3619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 50.776325][ T3619] RSP: 002b:00007ffe86ed26f8 EFLAGS: 00000246 ORIG_RAX: 000000000000008a [ 50.776348][ T3619] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5d0d3b3df9 [ 50.776363][ T3619] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 50.776377][ T3619] RBP: 00007f5d0d3735f0 R08: 0000000000000000 R09: 0000000000000000 [ 50.776391][ T3619] R10: 00007ffe86ed25b0 R11: 0000000000000246 R12: 00007f5d0d373680 [ 50.776407][ T3619] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 50.776424][ T3619] [ 51.305425][ T3619] Kernel Offset: disabled [ 51.309767][ T3619] Rebooting in 86400 seconds..