./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1898199404 <...> syzkaller login: [ 4.972798][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 12.033985][ T24] kauditd_printk_skb: 60 callbacks suppressed [ 12.033995][ T24] audit: type=1400 audit(1666103217.560:71): avc: denied { transition } for pid=290 comm="sshd" path="/bin/sh" dev="sda1" ino=73 scontext=system_u:system_r:initrc_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 12.038764][ T24] audit: type=1400 audit(1666103217.560:72): avc: denied { write } for pid=290 comm="sh" path="pipe:[10616]" dev="pipefs" ino=10616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:initrc_t tclass=fifo_file permissive=1 [ 12.293247][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 12.295307][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 12.323271][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! [ 12.325543][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 12.814832][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! Warning: Permanently added '10.128.0.54' (ECDSA) to the list of known hosts. execve("./syz-executor1898199404", ["./syz-executor1898199404"], 0x7fff617d73c0 /* 10 vars */) = 0 brk(NULL) = 0x55555621a000 brk(0x55555621ac40) = 0x55555621ac40 arch_prctl(ARCH_SET_FS, 0x55555621a300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1898199404", 4096) = 28 brk(0x55555623bc40) = 0x55555623bc40 brk(0x55555623c000) = 0x55555623c000 mprotect(0x7f2122516000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 ftruncate(3, 262144) = 0 pwrite64(3, "\x20\x00\x00\x00\x40\x00\x00\x00\x03\x00\x00\x00\x30\x00\x00\x00\x0f\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x02\x00\x00\x00\x00\x80\x00\x00\x00\x80\x00\x00\x20\x00\x00\x00\xdc\xf4\x65\x5f\xdc\xf4\x65\x5f\x01\x00\xff\xff\x53\xef\x01\x00\x01\x00\x00\x00\xdb\xf4\x65\x5f\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x0b\x00\x00\x00\x00\x02\x00\x00\x28\x02\x00\x00\x02\x84", 98, 1024) = 98 pwrite64(3, "\x02\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\x30\x00\x0f", 15, 4096) = 15 pwrite64(3, "\xff\xff\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff"..., 4098, 8192) = 4098 pwrite64(3, "\xed\x41\x00\x00\x00\x10\x00\x00\xdb\xf4\x65\x5f\xdc\xf4\x65\x5f\xdc\xf4\x65\x5f\x00\x00\x00\x00\x00\x00\x04\x00\x08", 29, 16896) = 29 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 mkdir("./file0", 0777) = 0 mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 close(3) = 0 chdir("./file0") = 0 open("./file0", O_WRONLY|O_CREAT|O_EXCL|O_DIRECT|0x4, 000) = 3 open("./file0", O_RDONLY) = 4 write(3, "\x3b\x27\xa4\xb4\x6e\xe9\x2b\x4a\x59\x07\x3c\x36\x9a\x5e\x19\xf9\xdb\x15\x3c\x4f\xdb\xc7\x6a\xa2\xa4\xbb\x9f\x3e\x5e\x1a\xa1\x97\xa9\xe9\x7d\x10\x16\xc0\x18\x13\x79\x2e\x50\xc2\x69\x2c\x17\x5a\xad\x71\x5d\x11\x0a\x89\x29\x49\xcc\xc6\xe2\xe5\x4c\x2d\x5c\x8f\x0b\x79\x32\xb6\x97\x97\xf2\x17\x16\x8b\x0c\x1f\xeb\x12\x8a\xe3\x4f\x0d\xaf\x48\x7a\x70\xb5\xc1\x17\xac\xd4\x37\x25\xfe\x17\x99\x36\x34\xf1\x69"..., 1536) = 1536 sendfile(3, 4, NULL, 57347) = 56832 open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000) = 6 [ 19.802967][ T24] audit: type=1400 audit(1666103225.330:73): avc: denied { execmem } for pid=371 comm="syz-executor189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.806363][ T24] audit: type=1400 audit(1666103225.330:74): avc: denied { read write } for pid=371 comm="syz-executor189" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 19.810169][ T24] audit: type=1400 audit(1666103225.330:75): avc: denied { open } for pid=371 comm="syz-executor189" path="/dev/loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 19.813806][ T24] audit: type=1400 audit(1666103225.330:76): avc: denied { ioctl } for pid=371 comm="syz-executor189" path="/dev/loop0" dev="devtmpfs" ino=115 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 19.817224][ T371] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 19.817336][ T24] audit: type=1400 audit(1666103225.330:77): avc: denied { mounton } for pid=371 comm="syz-executor189" path="/root/file0" dev="sda1" ino=1138 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 19.822270][ T24] audit: type=1400 audit(1666103225.340:78): avc: denied { mount } for pid=371 comm="syz-executor189" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 19.832955][ T371] ------------[ cut here ]------------ [ 19.836569][ T24] audit: type=1400 audit(1666103225.340:79): avc: denied { write } for pid=371 comm="syz-executor189" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 19.841439][ T371] kernel BUG at fs/ext4/inode.c:2760! [ 19.841455][ T371] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 19.841466][ T371] CPU: 0 PID: 371 Comm: syz-executor189 Not tainted 5.10.147-syzkaller-01341-gbc7618b4936f #0 [ 19.841471][ T371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 19.841486][ T371] RIP: 0010:ext4_writepages+0x36f6/0x3710 [ 19.841494][ T371] Code: c6 31 ff e8 fc fe 8f ff 84 db 75 2c e8 e3 fb 8f ff 48 bb 00 00 00 00 00 fc ff df 4c 8b 64 24 40 e9 28 f7 ff ff e8 ca fb 8f ff <0f> 0b e8 c3 fb 8f ff e8 fd 92 23 ff eb a0 e8 b7 fb 8f ff e8 f1 92 [ 19.841499][ T371] RSP: 0018:ffffc9000029f300 EFLAGS: 00010293 [ 19.841509][ T371] RAX: ffffffff81dcef46 RBX: 0000008000000000 RCX: ffff8881067a0000 [ 19.841515][ T371] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 19.841520][ T371] RBP: ffffc9000029f6f0 R08: ffffffff81dcbf2a R09: ffffed1021ce5e12 [ 19.841527][ T371] R10: ffffed1021ce5e12 R11: 1ffff11021ce5e11 R12: ffff8881057ef000 [ 19.841534][ T371] R13: ffffc9000029f5c0 R14: 000000c410000000 R15: ffffc9000029f860 [ 19.841541][ T371] FS: 000055555621a300(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 19.841548][ T371] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 19.841554][ T371] CR2: 000055c3207d71c8 CR3: 00000001049b8000 CR4: 00000000003506b0 [ 19.841570][ T371] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 19.864181][ T24] audit: type=1400 audit(1666103225.340:80): avc: denied { add_name } for pid=371 comm="syz-executor189" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 19.868656][ T371] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 19.874829][ T24] audit: type=1400 audit(1666103225.340:81): avc: denied { create } for pid=371 comm="syz-executor189" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 19.884880][ T371] Call Trace: [ 19.884896][ T371] ? __kasan_check_read+0x11/0x20 [ 19.884913][ T371] ? __getblk_gfp+0x3c/0x2a0 [ 19.895169][ T24] audit: type=1400 audit(1666103225.340:82): avc: denied { write open } for pid=371 comm="syz-executor189" path="/root/file0/file0" dev="loop0" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 19.900629][ T371] ? __ext4_get_inode_loc+0x44c/0xd20 [ 20.087825][ T371] ? errseq_check+0x40/0x70 [ 20.092298][ T371] ? __kasan_check_read+0x11/0x20 [ 20.097291][ T371] ? mark_buffer_dirty+0x1eb/0x310 [ 20.102369][ T371] ? __ext4_handle_dirty_metadata+0x2d0/0x800 [ 20.108401][ T371] ? ext4_readpage+0x220/0x220 [ 20.113135][ T371] ? __kasan_check_write+0x14/0x20 [ 20.118213][ T371] ? ext4_mark_iloc_dirty+0x2133/0x3300 [ 20.123727][ T371] ? __ext4_mark_inode_dirty+0x3cf/0x780 [ 20.129327][ T371] ? __mark_inode_dirty+0x12f/0x930 [ 20.134493][ T371] ? ext4_blocks_for_truncate+0x240/0x240 [ 20.140181][ T371] ? __page_pinner_migration_failed+0xe5/0x250 [ 20.146303][ T371] ? ext4_readpage+0x220/0x220 [ 20.151033][ T371] do_writepages+0x13a/0x280 [ 20.155590][ T371] ? __writepage+0x130/0x130 [ 20.160146][ T371] ? __kasan_check_write+0x14/0x20 [ 20.165225][ T371] ? _raw_spin_unlock+0x4d/0x70 [ 20.170043][ T371] __filemap_fdatawrite_range+0x354/0x420 [ 20.175728][ T371] ? filemap_check_errors+0x120/0x120 [ 20.181068][ T371] ? generic_perform_write+0x51c/0x5b0 [ 20.186492][ T371] file_write_and_wait_range+0x89/0x120 [ 20.192008][ T371] ext4_sync_file+0x19e/0x9d0 [ 20.196653][ T371] vfs_fsync_range+0x17b/0x190 [ 20.201382][ T371] ext4_buffered_write_iter+0x565/0x610 [ 20.206895][ T371] ext4_file_write_iter+0x192/0x1cd0 [ 20.212147][ T371] ? native_set_ldt+0x360/0x360 [ 20.216965][ T371] ? compat_start_thread+0x80/0x80 [ 20.222042][ T371] ? avc_policy_seqno+0x1b/0x70 [ 20.226859][ T371] ? selinux_file_permission+0x2a9/0x520 [ 20.232457][ T371] ? fsnotify_perm+0x67/0x4e0 [ 20.237129][ T371] ? ext4_file_read_iter+0x4d0/0x4d0 [ 20.242381][ T371] ? security_file_permission+0xa8/0xc0 [ 20.248021][ T371] ? iov_iter_init+0x3f/0x120 [ 20.252679][ T371] vfs_write+0xc4a/0xf80 [ 20.256909][ T371] ? __kasan_check_write+0x14/0x20 [ 20.261994][ T371] ? kernel_write+0x420/0x420 [ 20.266647][ T371] ? _raw_spin_unlock_irq+0x4e/0x70 [ 20.271815][ T371] ? ptrace_stop+0x6ff/0x9f0 [ 20.276375][ T371] ? __kasan_check_read+0x11/0x20 [ 20.281367][ T371] ? __fdget_pos+0x27e/0x310 [ 20.285926][ T371] ksys_write+0x198/0x2c0 [ 20.290224][ T371] ? do_notify_parent+0xa40/0xa40 [ 20.295213][ T371] ? __ia32_sys_read+0x90/0x90 [ 20.299946][ T371] ? do_sys_openat2+0x470/0x470 [ 20.304764][ T371] __x64_sys_write+0x7b/0x90 [ 20.309321][ T371] do_syscall_64+0x34/0x70 [ 20.313706][ T371] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 20.319564][ T371] RIP: 0033:0x7f21224a8ef9 [ 20.323950][ T371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 20.343521][ T371] RSP: 002b:00007ffe71cb9ee8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 20.351900][ T371] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007f21224a8ef9 [ 20.359841][ T371] RDX: 0000000000000088 RSI: 0000000020000440 RDI: 0000000000000006 [ 20.367779][ T371] RBP: 00007f21224686f0 R08: 0000000000000000 R09: 0000000000000000 [ 20.375719][ T371] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2122468780 [ 20.383657][ T371] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 20.391598][ T371] Modules linked in: [ 20.395632][ T371] ---[ end trace ea75070fa1a2c9e6 ]--- [ 20.401091][ T371] RIP: 0010:ext4_writepages+0x36f6/0x3710 [ 20.406826][ T371] Code: c6 31 ff e8 fc fe 8f ff 84 db 75 2c e8 e3 fb 8f ff 48 bb 00 00 00 00 00 fc ff df 4c 8b 64 24 40 e9 28 f7 ff ff e8 ca fb 8f ff <0f> 0b e8 c3 fb 8f ff e8 fd 92 23 ff eb a0 e8 b7 fb 8f ff e8 f1 92 [ 20.426648][ T371] RSP: 0018:ffffc9000029f300 EFLAGS: 00010293 [ 20.432713][ T371] RAX: ffffffff81dcef46 RBX: 0000008000000000 RCX: ffff8881067a0000 [ 20.440664][ T371] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 20.448635][ T371] RBP: ffffc9000029f6f0 R08: ffffffff81dcbf2a R09: ffffed1021ce5e12 [ 20.456602][ T371] R10: ffffed1021ce5e12 R11: 1ffff11021ce5e11 R12: ffff8881057ef000 [ 20.464572][ T371] R13: ffffc9000029f5c0 R14: 000000c410000000 R15: ffffc9000029f860 [ 20.472521][ T371] FS: 000055555621a300(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 20.481445][ T371] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 20.488021][ T371] CR2: 000055c3207d71c8 CR3: 00000001049b8000 CR4: 00000000003506b0 [ 20.495988][ T371] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 20.503952][ T371] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 20.511894][ T371] Kernel panic - not syncing: Fatal exception [ 20.518093][ T371] Kernel Offset: disabled [ 20.522394][ T371] Rebooting in 86400 seconds..