./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3332934913 <...> Warning: Permanently added '10.128.1.16' (ED25519) to the list of known hosts. execve("./syz-executor3332934913", ["./syz-executor3332934913"], 0x7fff321aadf0 /* 10 vars */) = 0 brk(NULL) = 0x555556233000 brk(0x555556233d00) = 0x555556233d00 arch_prctl(ARCH_SET_FS, 0x555556233380) = 0 set_tid_address(0x555556233650) = 295 set_robust_list(0x555556233660, 24) = 0 rseq(0x555556233ca0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3332934913", 4096) = 28 getrandom("\x3a\xf5\x99\xbf\xc8\xd8\x2b\xda", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556233d00 brk(0x555556254d00) = 0x555556254d00 brk(0x555556255000) = 0x555556255000 mprotect(0x7f9ef1192000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9ee8ce2000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 munmap(0x7f9ee8ce2000, 262144) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file1", 0777) = 0 mount("/dev/loop0", "./file1", "ext4", 0, ",errors=continue") = 0 openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 chdir("./file1") = 0 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 creat("./bus", 000) = 4 mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [ 20.914694][ T28] audit: type=1400 audit(1690406047.842:66): avc: denied { execmem } for pid=295 comm="syz-executor333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 20.919523][ T28] audit: type=1400 audit(1690406047.852:67): avc: denied { read write } for pid=295 comm="syz-executor333" name="loop0" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 20.920012][ T295] loop0: detected capacity change from 0 to 512 [ 20.923063][ T28] audit: type=1400 audit(1690406047.852:68): avc: denied { open } for pid=295 comm="syz-executor333" path="/dev/loop0" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 20.926583][ T295] EXT4-fs error (device loop0): __ext4_fill_super:5382: inode #2: comm syz-executor333: casefold flag without casefold feature [ 20.927473][ T28] audit: type=1400 audit(1690406047.852:69): avc: denied { ioctl } for pid=295 comm="syz-executor333" path="/dev/loop0" dev="devtmpfs" ino=114 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 20.929186][ T295] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 20.932546][ T28] audit: type=1400 audit(1690406047.852:70): avc: denied { mounton } for pid=295 comm="syz-executor333" path="/root/file1" dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 20.934766][ T295] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 262144 open(".", O_RDONLY) = 6 [ 20.957984][ T28] audit: type=1400 audit(1690406047.892:71): avc: denied { mount } for pid=295 comm="syz-executor333" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 20.977619][ T295] ------------[ cut here ]------------ [ 20.984876][ T295] kernel BUG at fs/ext4/ext4.h:3331! [ 20.985073][ T28] audit: type=1400 audit(1690406047.892:72): avc: denied { write } for pid=295 comm="syz-executor333" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 20.990064][ T295] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 21.012063][ T28] audit: type=1400 audit(1690406047.892:73): avc: denied { add_name } for pid=295 comm="syz-executor333" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 21.017511][ T295] CPU: 1 PID: 295 Comm: syz-executor333 Not tainted 6.1.25-syzkaller-00078-g1e114e6efac1 #0 [ 21.017536][ T295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 21.017544][ T295] RIP: 0010:ext4_trim_fs+0x1787/0x17d0 [ 21.017579][ T295] Code: 7f a7 00 e9 95 ee ff ff e8 96 cc 7e ff 8b 74 24 38 48 c7 c7 00 fb cb 86 48 89 da e8 63 7f a7 00 e9 01 ef ff ff e8 79 cc 7e ff <0f> 0b e8 f2 be f8 02 48 8b 4c 24 48 80 e1 07 38 c1 0f 8c 86 fe ff [ 21.038438][ T28] audit: type=1400 audit(1690406047.892:74): avc: denied { create } for pid=295 comm="syz-executor333" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 21.047884][ T295] RSP: 0018:ffffc90000e676e0 EFLAGS: 00010293 [ 21.047911][ T295] RAX: ffffffff81f61f47 RBX: 0000000000000001 RCX: ffff888121640000 [ 21.047921][ T295] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000003f596bdf [ 21.047930][ T295] RBP: ffffc90000e678d0 R08: ffffffff81f610a6 R09: fffff520001ccfc7 [ 21.047941][ T295] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88810952a040 [ 21.047951][ T295] R13: ffff88810952a000 R14: dffffc0000000000 R15: 000000003f596bdf [ 21.058312][ T28] audit: type=1400 audit(1690406047.892:75): avc: denied { write open } for pid=295 comm="syz-executor333" path=2F726F6F742F66696C65312F627573202864656C6574656429 dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 21.063071][ T295] FS: 0000555556233380(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 21.182599][ T295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 21.189012][ T295] CR2: 0000000020040000 CR3: 0000000108ffe000 CR4: 00000000003506a0 [ 21.196828][ T295] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 21.204635][ T295] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 21.212447][ T295] Call Trace: [ 21.215575][ T295] [ 21.218352][ T295] ? mb_free_blocks+0x1330/0x1330 [ 21.223208][ T295] ? cap_capable+0x1d2/0x270 [ 21.227642][ T295] ? __kasan_check_write+0x14/0x20 [ 21.232583][ T295] ext4_ioctl+0x271c/0x58c0 [ 21.236923][ T295] ? memcpy+0x56/0x70 [ 21.240742][ T295] ? avc_has_extended_perms+0xad7/0x10f0 [ 21.246325][ T295] ? ext4_fileattr_set+0x16e0/0x16e0 [ 21.251440][ T295] ? __this_cpu_preempt_check+0x13/0x20 [ 21.256852][ T295] ? avc_flush+0x290/0x290 [ 21.261090][ T295] ? save_fpregs_to_fpstate+0x18f/0x220 [ 21.266459][ T295] ? do_vfs_ioctl+0xba7/0x29a0 [ 21.271058][ T295] ? __x64_compat_sys_ioctl+0x90/0x90 [ 21.276263][ T295] ? compat_start_thread+0x20/0x20 [ 21.281221][ T295] ? native_set_ldt+0x130/0x130 [ 21.285900][ T295] ? ioctl_has_perm+0x1f8/0x560 [ 21.290582][ T295] ? ioctl_has_perm+0x3f0/0x560 [ 21.295270][ T295] ? has_cap_mac_admin+0x3c0/0x3c0 [ 21.300220][ T295] ? __kasan_check_write+0x14/0x20 [ 21.305166][ T295] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 21.310112][ T295] ? cgroup_update_frozen+0x15f/0x980 [ 21.315320][ T295] ? selinux_file_ioctl+0x3cc/0x540 [ 21.320442][ T295] ? ptrace_stop+0x709/0x930 [ 21.324962][ T295] ? selinux_file_alloc_security+0x120/0x120 [ 21.330772][ T295] ? _raw_spin_unlock_irq+0x4d/0x70 [ 21.335805][ T295] ? ptrace_notify+0x249/0x350 [ 21.340405][ T295] ? security_file_ioctl+0x84/0xb0 [ 21.345351][ T295] ? ext4_fileattr_set+0x16e0/0x16e0 [ 21.350473][ T295] __se_sys_ioctl+0x114/0x190 [ 21.354992][ T295] __x64_sys_ioctl+0x7b/0x90 [ 21.359412][ T295] do_syscall_64+0x3d/0xb0 [ 21.363662][ T295] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 21.369392][ T295] RIP: 0033:0x7f9ef111f739 [ 21.373648][ T295] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 21.393087][ T295] RSP: 002b:00007ffc89cd8058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 21.401334][ T295] RAX: ffffffffffffffda RBX: 00007ffc89cd8228 RCX: 00007f9ef111f739 [ 21.409145][ T295] RDX: 0000000020000680 RSI: 00000000c0185879 RDI: 0000000000000006 [ 21.416955][ T295] RBP: 00007f9ef1192610 R08: 00007ffc89cd8228 R09: 00007ffc89cd8228 [ 21.424765][ T295] R10: 00007ffc89cd8228 R11: 0000000000000246 R12: 0000000000000001 [ 21.432578][ T295] R13: 00007ffc89cd8218 R14: 0000000000000001 R15: 0000000000000001 [ 21.440393][ T295] [ 21.443252][ T295] Modules linked in: [ 21.447158][ T295] ---[ end trace 0000000000000000 ]--- [ 21.452414][ T295] RIP: 0010:ext4_trim_fs+0x1787/0x17d0 [ 21.457862][ T295] Code: 7f a7 00 e9 95 ee ff ff e8 96 cc 7e ff 8b 74 24 38 48 c7 c7 00 fb cb 86 48 89 da e8 63 7f a7 00 e9 01 ef ff ff e8 79 cc 7e ff <0f> 0b e8 f2 be f8 02 48 8b 4c 24 48 80 e1 07 38 c1 0f 8c 86 fe ff [ 21.477308][ T295] RSP: 0018:ffffc90000e676e0 EFLAGS: 00010293 [ 21.483162][ T295] RAX: ffffffff81f61f47 RBX: 0000000000000001 RCX: ffff888121640000 [ 21.490996][ T295] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000003f596bdf [ 21.498813][ T295] RBP: ffffc90000e678d0 R08: ffffffff81f610a6 R09: fffff520001ccfc7 [ 21.506622][ T295] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88810952a040 [ 21.514407][ T295] R13: ffff88810952a000 R14: dffffc0000000000 R15: 000000003f596bdf [ 21.522256][ T295] FS: 0000555556233380(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 21.530995][ T295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 21.537445][ T295] CR2: 0000000020040000 CR3: 0000000108ffe000 CR4: 00000000003506a0 [ 21.545221][ T295] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 21.553061][ T295] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 21.560867][ T295] Kernel panic - not syncing: Fatal exception [ 21.566946][ T295] Kernel Offset: disabled [ 21.571061][ T295] Rebooting in 86400 seconds..