./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3723120252 <...> Warning: Permanently added '10.128.1.97' (ED25519) to the list of known hosts. execve("./syz-executor3723120252", ["./syz-executor3723120252"], 0x7ffe4085ef90 /* 10 vars */) = 0 brk(NULL) = 0x555556b5c000 brk(0x555556b5cd00) = 0x555556b5cd00 arch_prctl(ARCH_SET_FS, 0x555556b5c380) = 0 set_tid_address(0x555556b5c650) = 5066 set_robust_list(0x555556b5c660, 24) = 0 rseq(0x555556b5cca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3723120252", 4096) = 28 getrandom("\xe8\xaf\x5b\x52\x86\xa1\x4f\x2d", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556b5cd00 brk(0x555556b7dd00) = 0x555556b7dd00 brk(0x555556b7e000) = 0x555556b7e000 mprotect(0x7fbb85d5b000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b5c650) = 5067 ./strace-static-x86_64: Process 5067 attached [pid 5067] set_robust_list(0x555556b5c660, 24) = 0 [pid 5067] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5067] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5067] setsid() = 1 [ 74.390225][ T27] audit: type=1400 audit(1703438966.540:83): avc: denied { execmem } for pid=5066 comm="syz-executor372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [pid 5067] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5067] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5067] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5067] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5067] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5067] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5067] unshare(CLONE_NEWNS) = 0 [ 74.426442][ T27] audit: type=1400 audit(1703438966.580:84): avc: denied { mounton } for pid=5067 comm="syz-executor372" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 74.450937][ T27] audit: type=1400 audit(1703438966.580:85): avc: denied { mount } for pid=5067 comm="syz-executor372" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [pid 5067] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5067] unshare(CLONE_NEWIPC) = 0 [pid 5067] unshare(CLONE_NEWCGROUP) = 0 [pid 5067] unshare(CLONE_NEWUTS) = 0 [pid 5067] unshare(CLONE_SYSVSEM) = 0 [pid 5067] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [ 74.506507][ T27] audit: type=1400 audit(1703438966.660:86): avc: denied { mounton } for pid=5067 comm="syz-executor372" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [pid 5067] write(3, "16777216", 8) = 8 [pid 5067] close(3) = 0 [pid 5067] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5067] write(3, "536870912", 9) = 9 [pid 5067] close(3) = 0 [pid 5067] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5067] write(3, "1024", 4) = 4 [pid 5067] close(3) = 0 [pid 5067] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5067] write(3, "8192", 4) = 4 [pid 5067] close(3) = 0 [pid 5067] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5067] write(3, "1024", 4) = 4 [pid 5067] close(3) = 0 [pid 5067] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5067] write(3, "1024", 4) = 4 [pid 5067] close(3) = 0 [pid 5067] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5067] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5067] close(3) = 0 [pid 5067] getpid() = 1 [pid 5067] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< 0b e8 f6 af 2b ff 48 8d 7d 28 48 b8 00 00 00 00 00 fc ff df 48 [ 75.133138][ T1057] RSP: 0018:ffffc90005427650 EFLAGS: 00010293 [ 75.139205][ T1057] RAX: 0000000000000000 RBX: 1ffff92000a84ecc RCX: ffffffff825ab463 [ 75.147192][ T1057] RDX: ffff88801f6ae140 RSI: ffffffff825ab482 RDI: 0000000000000007 [ 75.155249][ T1057] RBP: ffff88807416c1d8 R08: 0000000000000007 R09: 0000000000000004 [ 75.163291][ T1057] R10: 0000000000000005 R11: 0000000000000002 R12: 0000000000000000 [ 75.171509][ T1057] R13: ffffc90005427690 R14: 0000000000000005 R15: ffffc900054276f0 [ 75.179493][ T1057] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 75.188677][ T1057] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.195247][ T1057] CR2: 00007f2416595ed8 CR3: 000000007cf45000 CR4: 00000000003506f0 [ 75.203382][ T1057] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 75.211357][ T1057] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 75.219426][ T1057] Call Trace: [ 75.222809][ T1057] [ 75.225830][ T1057] ? show_regs+0x8f/0xa0 [ 75.230169][ T1057] ? die+0x36/0xa0 [ 75.233969][ T1057] ? do_trap+0x22b/0x420 [ 75.238218][ T1057] ? hfs_write_inode+0x363/0x9f0 [ 75.243281][ T1057] ? hfs_write_inode+0x363/0x9f0 [ 75.248271][ T1057] ? do_error_trap+0xf4/0x230 [ 75.253080][ T1057] ? hfs_write_inode+0x363/0x9f0 [ 75.258013][ T1057] ? handle_invalid_op+0x34/0x40 [ 75.263030][ T1057] ? hfs_write_inode+0x363/0x9f0 [ 75.268135][ T1057] ? exc_invalid_op+0x2e/0x40 [ 75.272835][ T1057] ? asm_exc_invalid_op+0x1a/0x20 [ 75.277862][ T1057] ? hfs_write_inode+0x343/0x9f0 [ 75.282831][ T1057] ? hfs_write_inode+0x362/0x9f0 [ 75.287883][ T1057] ? hfs_write_inode+0x363/0x9f0 [ 75.292816][ T1057] ? hfs_inode_write_fork+0x1c0/0x1c0 [ 75.298201][ T1057] ? spin_bug+0x1d0/0x1d0 [ 75.302563][ T1057] ? reacquire_held_locks+0x4c0/0x4c0 [ 75.308124][ T1057] __writeback_single_inode+0xa91/0xe90 [ 75.313666][ T1057] ? __mark_inode_dirty+0xd60/0xd60 [ 75.318855][ T1057] ? _raw_spin_unlock+0x28/0x40 [ 75.323709][ T1057] ? wbc_attach_and_unlock_inode+0x561/0x910 [ 75.329767][ T1057] writeback_sb_inodes+0x599/0x1080 [ 75.334961][ T1057] ? sync_inode_metadata+0xe0/0xe0 [ 75.340076][ T1057] ? rcu_is_watching+0x12/0xb0 [ 75.344832][ T1057] ? queue_io+0x3ed/0x4e0 [ 75.349163][ T1057] wb_writeback+0x2a5/0xaa0 [ 75.353654][ T1057] ? __writeback_inodes_wb+0x2d0/0x2d0 [ 75.359104][ T1057] ? reacquire_held_locks+0x4c0/0x4c0 [ 75.364467][ T1057] ? mark_held_locks+0x9f/0xe0 [ 75.369318][ T1057] wb_workfn+0x29c/0xfe0 [ 75.374766][ T1057] ? lockdep_hardirqs_on_prepare+0x341/0x420 [ 75.381091][ T1057] ? inode_wait_for_writeback+0x30/0x30 [ 75.387077][ T1057] ? lock_sync+0x190/0x190 [ 75.391587][ T1057] ? lock_sync+0x190/0x190 [ 75.396087][ T1057] ? reacquire_held_locks+0x4c0/0x4c0 [ 75.401553][ T1057] process_one_work+0x886/0x15d0 [ 75.407362][ T1057] ? lock_sync+0x190/0x190 [ 75.411786][ T1057] ? workqueue_congested+0x300/0x300 [ 75.417166][ T1057] ? assign_work+0x1a0/0x250 [ 75.421769][ T1057] worker_thread+0x8b9/0x1290 [ 75.426446][ T1057] ? process_one_work+0x15d0/0x15d0 [ 75.431779][ T1057] kthread+0x2c6/0x3a0 [ 75.435853][ T1057] ? _raw_spin_unlock_irq+0x23/0x50 [ 75.441056][ T1057] ? kthread_complete_and_exit+0x40/0x40 [ 75.446884][ T1057] ret_from_fork+0x45/0x80 [ 75.451471][ T1057] ? kthread_complete_and_exit+0x40/0x40 [ 75.457177][ T1057] ret_from_fork_asm+0x11/0x20 [ 75.462041][ T1057] [ 75.465176][ T1057] Modules linked in: [ 75.470629][ T1057] ---[ end trace 0000000000000000 ]--- [ 75.476262][ T1057] RIP: 0010:hfs_write_inode+0x363/0x9f0 [ 75.481836][ T1057] Code: e7 8a 4c 89 f7 e8 cd ab 2b ff 49 83 fe 03 0f 84 cb 02 00 00 49 83 fe 04 74 12 49 83 fe 02 0f 84 b2 fd ff ff e8 fe af 2b ff 90 <0f> 0b e8 f6 af 2b ff 48 8d 7d 28 48 b8 00 00 00 00 00 fc ff df 48 [ 75.501558][ T1057] RSP: 0018:ffffc90005427650 EFLAGS: 00010293 [ 75.507661][ T1057] RAX: 0000000000000000 RBX: 1ffff92000a84ecc RCX: ffffffff825ab463 [ 75.515741][ T1057] RDX: ffff88801f6ae140 RSI: ffffffff825ab482 RDI: 0000000000000007 [ 75.523790][ T1057] RBP: ffff88807416c1d8 R08: 0000000000000007 R09: 0000000000000004 [ 75.531802][ T1057] R10: 0000000000000005 R11: 0000000000000002 R12: 0000000000000000 [ 75.539834][ T1057] R13: ffffc90005427690 R14: 0000000000000005 R15: ffffc900054276f0 [ 75.547921][ T1057] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 75.556877][ T1057] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.563537][ T1057] CR2: 00007f2416595ed8 CR3: 000000007cf45000 CR4: 00000000003506f0 [ 75.571884][ T1057] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 75.579913][ T1057] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 75.588014][ T1057] Kernel panic - not syncing: Fatal exception [ 75.594289][ T1057] Kernel Offset: disabled [ 75.598601][ T1057] Rebooting in 86400 seconds..