./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3146349022 <...> Warning: Permanently added '10.128.0.228' (ECDSA) to the list of known hosts. execve("./syz-executor3146349022", ["./syz-executor3146349022"], 0x7ffd0e0d61e0 /* 10 vars */) = 0 brk(NULL) = 0x555557169000 brk(0x555557169d00) = 0x555557169d00 arch_prctl(ARCH_SET_FS, 0x5555571693c0) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor3146349022", 4096) = 28 brk(0x55555718ad00) = 0x55555718ad00 brk(0x55555718b000) = 0x55555718b000 mprotect(0x7f9e7d6d6000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGSEGV, {sa_handler=0x7f9e7d627ae0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f9e7d627dd0}, NULL, 8) = 0 rt_sigaction(SIGBUS, {sa_handler=0x7f9e7d627ae0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f9e7d627dd0}, NULL, 8) = 0 mkdir("./file0", 0777) = 0 --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- pipe2([3, 4], 0) = 0 write(4, "\x15\x00\x00\x00\x65\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 21) = 21 dup(4) = 5 mount(NULL, "./file0", "9p", 0, "trans=fd,rfdno=0x0000000000000003,wfdno=0x0000000000000005,") = -1 EREMOTEIO (Remote I/O error) write(5, "\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 24) = 24 write(5, "\xb0\x00\x00\x00\x00\x00\x00\x6b\x2e\x7f\xb3\xf3\x73\x25\xda\x31\x44\x1d\xb4\x8c\xe3\x66\xa2\x33\xa6\x5b\x0f\xf5\x73\x17\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 176) = 176 write(5, "\x4c\x01\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 311) = 311 mount(NULL, "./file0", "9p", 0, "trans=fd,rfdno=0x0000000000000003,wfdno=0x0000000000000004,") = 0 [ 50.787628][ T27] audit: type=1400 audit(1660547962.484:75): avc: denied { execmem } for pid=3607 comm="syz-executor314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 50.807719][ T27] audit: type=1400 audit(1660547962.484:76): avc: denied { mounton } for pid=3607 comm="syz-executor314" path="/root/file0" dev="sda1" ino=1138 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 50.826349][ T3607] ------------[ cut here ]------------ [ 50.831572][ T27] audit: type=1400 audit(1660547962.514:77): avc: denied { mount } for pid=3607 comm="syz-executor314" name="/" dev="9p" ino=17658433433331984101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 50.836426][ T3607] WARNING: CPU: 0 PID: 3607 at fs/inode.c:388 inc_nlink+0x144/0x160 [ 50.868226][ T27] audit: type=1400 audit(1660547962.514:78): avc: denied { write } for pid=3607 comm="syz-executor314" name="/" dev="9p" ino=17658433433331984101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.868342][ T3607] Modules linked in: [ 50.895651][ T27] audit: type=1400 audit(1660547962.514:79): avc: denied { add_name } for pid=3607 comm="syz-executor314" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.895723][ T3607] CPU: 0 PID: 3607 Comm: syz-executor314 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 50.916908][ T27] audit: type=1400 audit(1660547962.514:80): avc: denied { create } for pid=3607 comm="syz-executor314" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 50.927043][ T3607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 50.947528][ T27] audit: type=1400 audit(1660547962.514:81): avc: denied { associate } for pid=3607 comm="syz-executor314" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 50.957569][ T3607] RIP: 0010:inc_nlink+0x144/0x160 [ 50.984354][ T3607] Code: ff 4c 89 e7 e8 9d f1 ea ff e9 42 ff ff ff 4c 89 e7 e8 20 f1 ea ff e9 fc fe ff ff 4c 89 e7 e8 13 f1 ea ff eb d4 e8 2c 5b 9f ff <0f> 0b e9 6e ff ff ff e8 10 f1 ea ff e9 44 ff ff ff e8 06 f1 ea ff [ 51.004354][ T3607] RSP: 0018:ffffc90002f47ca0 EFLAGS: 00010293 [ 51.010648][ T3607] RAX: 0000000000000000 RBX: ffff88806c47a618 RCX: 0000000000000000 [ 51.018639][ T3607] RDX: ffff88807e7aa180 RSI: ffffffff81dbda94 RDI: 0000000000000007 [ 51.026698][ T3607] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 51.034698][ T3607] R10: 0000000000000000 R11: 000000000000001d R12: ffff88806c47a660 [ 51.042741][ T3607] R13: ffff888070c8c0c0 R14: 1ffff920005e8f9c R15: ffff88807b701a00 [ 51.050747][ T3607] FS: 00005555571693c0(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 51.059744][ T3607] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.066344][ T3607] CR2: 00005607b0bdc418 CR3: 00000000788d5000 CR4: 00000000003506f0 [ 51.074393][ T3607] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 51.082432][ T3607] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 51.090443][ T3607] Call Trace: [ 51.093738][ T3607] [ 51.096661][ T3607] v9fs_vfs_mkdir_dotl+0x5c5/0x900 [ 51.101827][ T3607] ? v9fs_vfs_create_dotl+0x30/0x30 [ 51.107037][ T3607] ? __inode_security_revalidate+0x140/0x140 [ 51.113174][ T3607] ? selinux_inode_init_security+0x6b0/0x6b0 [ 51.119180][ T3607] ? capable_wrt_inode_uidgid+0xe6/0x170 [ 51.124909][ T3607] vfs_mkdir+0x489/0x740 [ 51.129177][ T3607] do_mkdirat+0x28c/0x310 [ 51.133604][ T3607] ? __ia32_sys_mknod+0xa0/0xa0 [ 51.138488][ T3607] ? getname_flags.part.0+0x1dd/0x4f0 [ 51.143930][ T3607] __x64_sys_mkdir+0xf2/0x140 [ 51.148617][ T3607] do_syscall_64+0x35/0xb0 [ 51.153073][ T3607] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 51.158980][ T3607] RIP: 0033:0x7f9e7d669819 [ 51.163445][ T3607] Code: 28 c3 e8 5a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 51.183121][ T3607] RSP: 002b:00007ffecaf2f078 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 51.191578][ T3607] RAX: ffffffffffffffda RBX: 00007ffecaf2f088 RCX: 00007f9e7d669819 [ 51.199605][ T3607] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200002c0 [ 51.207566][ T3607] RBP: 00007ffecaf2f080 R08: 00007f9e7d627ae0 R09: 00007f9e7d627ae0 [ 51.215639][ T3607] R10: 0000000020000340 R11: 0000000000000246 R12: 0000000000000000 [ 51.223707][ T3607] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 51.231736][ T3607] [ 51.234759][ T3607] Kernel panic - not syncing: panic_on_warn set ... [ 51.241328][ T3607] CPU: 0 PID: 3607 Comm: syz-executor314 Not tainted 5.19.0-syzkaller-13930-g7ebfc85e2cd7 #0 [ 51.251464][ T3607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 51.261525][ T3607] Call Trace: [ 51.264795][ T3607] [ 51.267717][ T3607] dump_stack_lvl+0xcd/0x134 [ 51.272298][ T3607] panic+0x2c8/0x627 [ 51.276183][ T3607] ? panic_print_sys_info.part.0+0x10b/0x10b [ 51.282154][ T3607] ? __warn.cold+0x248/0x2c4 [ 51.286731][ T3607] ? inc_nlink+0x144/0x160 [ 51.291153][ T3607] __warn.cold+0x259/0x2c4 [ 51.295580][ T3607] ? inc_nlink+0x144/0x160 [ 51.299999][ T3607] report_bug+0x1bc/0x210 [ 51.304333][ T3607] handle_bug+0x3c/0x60 [ 51.308496][ T3607] exc_invalid_op+0x14/0x40 [ 51.313002][ T3607] asm_exc_invalid_op+0x16/0x20 [ 51.317863][ T3607] RIP: 0010:inc_nlink+0x144/0x160 [ 51.322893][ T3607] Code: ff 4c 89 e7 e8 9d f1 ea ff e9 42 ff ff ff 4c 89 e7 e8 20 f1 ea ff e9 fc fe ff ff 4c 89 e7 e8 13 f1 ea ff eb d4 e8 2c 5b 9f ff <0f> 0b e9 6e ff ff ff e8 10 f1 ea ff e9 44 ff ff ff e8 06 f1 ea ff [ 51.342506][ T3607] RSP: 0018:ffffc90002f47ca0 EFLAGS: 00010293 [ 51.348578][ T3607] RAX: 0000000000000000 RBX: ffff88806c47a618 RCX: 0000000000000000 [ 51.356550][ T3607] RDX: ffff88807e7aa180 RSI: ffffffff81dbda94 RDI: 0000000000000007 [ 51.364520][ T3607] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 51.372489][ T3607] R10: 0000000000000000 R11: 000000000000001d R12: ffff88806c47a660 [ 51.380459][ T3607] R13: ffff888070c8c0c0 R14: 1ffff920005e8f9c R15: ffff88807b701a00 [ 51.388432][ T3607] ? inc_nlink+0x144/0x160 [ 51.392858][ T3607] v9fs_vfs_mkdir_dotl+0x5c5/0x900 [ 51.397971][ T3607] ? v9fs_vfs_create_dotl+0x30/0x30 [ 51.403174][ T3607] ? __inode_security_revalidate+0x140/0x140 [ 51.409159][ T3607] ? selinux_inode_init_security+0x6b0/0x6b0 [ 51.415146][ T3607] ? capable_wrt_inode_uidgid+0xe6/0x170 [ 51.420799][ T3607] vfs_mkdir+0x489/0x740 [ 51.425047][ T3607] do_mkdirat+0x28c/0x310 [ 51.429380][ T3607] ? __ia32_sys_mknod+0xa0/0xa0 [ 51.434230][ T3607] ? getname_flags.part.0+0x1dd/0x4f0 [ 51.439621][ T3607] __x64_sys_mkdir+0xf2/0x140 [ 51.444301][ T3607] do_syscall_64+0x35/0xb0 [ 51.448721][ T3607] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 51.454634][ T3607] RIP: 0033:0x7f9e7d669819 [ 51.459054][ T3607] Code: 28 c3 e8 5a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 51.478664][ T3607] RSP: 002b:00007ffecaf2f078 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 51.487096][ T3607] RAX: ffffffffffffffda RBX: 00007ffecaf2f088 RCX: 00007f9e7d669819 [ 51.495069][ T3607] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200002c0 [ 51.503046][ T3607] RBP: 00007ffecaf2f080 R08: 00007f9e7d627ae0 R09: 00007f9e7d627ae0 [ 51.511017][ T3607] R10: 0000000020000340 R11: 0000000000000246 R12: 0000000000000000 [ 51.518991][ T3607] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 51.526966][ T3607] [ 51.530247][ T3607] Kernel Offset: disabled [ 51.534655][ T3607] Rebooting in 86400 seconds..