./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor659711551 <...> Warning: Permanently added '10.128.1.160' (ED25519) to the list of known hosts. execve("./syz-executor659711551", ["./syz-executor659711551"], 0x7ffe4838adf0 /* 10 vars */) = 0 brk(NULL) = 0x555555bba000 brk(0x555555bbad00) = 0x555555bbad00 arch_prctl(ARCH_SET_FS, 0x555555bba380) = 0 set_tid_address(0x555555bba650) = 5011 set_robust_list(0x555555bba660, 24) = 0 rseq(0x555555bbaca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor659711551", 4096) = 27 getrandom("\x38\x49\x4f\x81\xbe\xb6\xd3\x0d", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555555bbad00 brk(0x555555bdbd00) = 0x555555bdbd00 brk(0x555555bdc000) = 0x555555bdc000 mprotect(0x7f0747343000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 [ 62.035312][ T26] audit: type=1400 audit(1689204126.345:83): avc: denied { write } for pid=5008 comm="strace-static-x" path="pipe:[29553]" dev="pipefs" ino=29553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f073ee81000 [ 62.077779][ T26] audit: type=1400 audit(1689204126.385:84): avc: denied { execmem } for pid=5011 comm="syz-executor659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 62.079167][ T5011] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5011 'syz-executor659' write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 munmap(0x7f073ee81000, 16777216) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file0", 0777) = 0 [ 62.282463][ T26] audit: type=1400 audit(1689204126.585:85): avc: denied { read write } for pid=5011 comm="syz-executor659" name="loop0" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.284746][ T5011] loop0: detected capacity change from 0 to 32768 [ 62.307316][ T26] audit: type=1400 audit(1689204126.585:86): avc: denied { open } for pid=5011 comm="syz-executor659" path="/dev/loop0" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.325443][ T5011] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 62.343756][ T26] audit: type=1400 audit(1689204126.585:87): avc: denied { ioctl } for pid=5011 comm="syz-executor659" path="/dev/loop0" dev="devtmpfs" ino=648 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.352480][ T5011] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 62.372139][ T26] audit: type=1400 audit(1689204126.625:88): avc: denied { mounton } for pid=5011 comm="syz-executor659" path="/root/file0" dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 62.408320][ T5011] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 62.418171][ T25] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 62.425172][ T25] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... mount("/dev/loop0", "./file0", "gfs2", MS_RDONLY|MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_REC|MS_RELATIME, "") = 0 openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 chdir("./file0") = 0 ioctl(4, LOOP_CLR_FD) = 0 [ 62.462506][ T25] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 37ms [ 62.472279][ T25] gfs2: fsid=syz:syz.0: jid=0: Done [ 62.478184][ T5011] gfs2: fsid=syz:syz.0: first mount done, others may mount close(4) = 0 open(".", O_RDONLY) = 4 [ 62.491212][ T26] audit: type=1400 audit(1689204126.795:89): avc: denied { mount } for pid=5011 comm="syz-executor659" name="/" dev="loop0" ino=2341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 62.521670][ T5011] ------------[ cut here ]------------ [ 62.527297][ T5011] WARNING: CPU: 0 PID: 5011 at fs/gfs2/rgrp.c:2628 gfs2_check_blk_type+0x28d/0x310 [ 62.536756][ T5011] Modules linked in: [ 62.540666][ T5011] CPU: 0 PID: 5011 Comm: syz-executor659 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 62.551260][ T5011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 62.561396][ T5011] RIP: 0010:gfs2_check_blk_type+0x28d/0x310 [ 62.567412][ T5011] Code: 3f 48 81 c4 c8 00 00 00 44 89 e0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 e8 92 cf e8 fd 4c 89 ff e8 7a 6e f9 ff eb a7 e8 83 cf e8 fd <0f> 0b eb 91 41 bc ea ff ff ff eb 96 e8 92 0f 3b fe e9 18 fe ff ff [ 62.587311][ T5011] RSP: 0018:ffffc900034ef9a8 EFLAGS: 00010293 [ 62.593383][ T5011] RAX: 0000000000000000 RBX: ffff888021cd4e58 RCX: 0000000000000000 [ 62.601416][ T5011] RDX: ffff8880187c6100 RSI: ffffffff839b330d RDI: 0000000000000005 [ 62.609718][ T5011] RBP: 1ffff9200069df36 R08: 0000000000000005 R09: 0000000000000000 [ 62.617760][ T5011] R10: 00000000fffffff9 R11: 0000000000000001 R12: 00000000fffffff9 [ 62.625817][ T5011] R13: 0000000000000012 R14: 0000000000000003 R15: ffffc900034ef9f0 [ 62.634041][ T5011] FS: 0000555555bba380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 62.642992][ T5011] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 62.649653][ T5011] CR2: 00007fcc3e7edae0 CR3: 000000007c8fb000 CR4: 00000000003506f0 [ 62.657690][ T5011] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 62.665766][ T5011] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 62.673764][ T5011] Call Trace: [ 62.677111][ T5011] [ 62.680053][ T5011] ? __warn+0xe6/0x390 [ 62.684260][ T5011] ? gfs2_check_blk_type+0x28d/0x310 [ 62.689576][ T5011] ? report_bug+0x2da/0x500 [ 62.694151][ T5011] ? handle_bug+0x3c/0x70 [ 62.695392][ T26] audit: type=1400 audit(1689204127.005:90): avc: denied { append } for pid=4449 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.698488][ T5011] ? exc_invalid_op+0x18/0x50 [ 62.721066][ T26] audit: type=1400 audit(1689204127.005:91): avc: denied { open } for pid=4449 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.725393][ T5011] ? asm_exc_invalid_op+0x1a/0x20 [ 62.725423][ T5011] ? gfs2_check_blk_type+0x28d/0x310 [ 62.748216][ T26] audit: type=1400 audit(1689204127.005:92): avc: denied { getattr } for pid=4449 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.752782][ T5011] ? gfs2_check_blk_type+0x28d/0x310 [ 62.786189][ T5011] ? gfs2_check_blk_type+0x28d/0x310 [ 62.791475][ T5011] ? gfs2_free_di+0x4b0/0x4b0 [ 62.796201][ T5011] ? gfs2_inode_lookup+0x6f5/0x8a0 [ 62.801349][ T5011] gfs2_inode_lookup+0x6f5/0x8a0 [ 62.806382][ T5011] ? gfs2_create+0x50/0x50 [ 62.810837][ T5011] ? gfs2_lookup_by_inum+0x49/0x100 [ 62.816269][ T5011] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 62.822129][ T5011] gfs2_lookup_by_inum+0x49/0x100 [ 62.827202][ T5011] gfs2_fh_to_dentry+0x1b3/0x230 [ 62.832158][ T5011] exportfs_decode_fh_raw+0x12b/0x7e0 [ 62.837600][ T5011] ? drop_caches_sysctl_handler+0x180/0x180 [ 62.843536][ T5011] ? gfs2_get_name+0x3e0/0x3e0 [ 62.848447][ T5011] ? reconnect_path+0x9b0/0x9b0 [ 62.853330][ T5011] ? find_held_lock+0x2d/0x110 [ 62.858160][ T5011] ? __might_fault+0xe2/0x190 [ 62.862873][ T5011] ? lock_downgrade+0x690/0x690 [ 62.867769][ T5011] ? drop_caches_sysctl_handler+0x180/0x180 [ 62.873709][ T5011] exportfs_decode_fh+0x3c/0x90 [ 62.878665][ T5011] do_handle_open+0x2bc/0x590 [ 62.883487][ T5011] ? do_sys_name_to_handle+0x510/0x510 [ 62.889216][ T5011] ? _raw_spin_unlock_irq+0x23/0x50 [ 62.894579][ T5011] ? lockdep_hardirqs_on+0x7d/0x100 [ 62.899794][ T5011] ? _raw_spin_unlock_irq+0x2e/0x50 [ 62.905061][ T5011] ? ptrace_notify+0xfe/0x140 [ 62.909778][ T5011] do_syscall_64+0x39/0xb0 [ 62.914288][ T5011] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 62.920209][ T5011] RIP: 0033:0x7f07472be5f9 [ 62.924752][ T5011] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 62.944498][ T5011] RSP: 002b:00007fff1b4fde58 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 62.952918][ T5011] RAX: ffffffffffffffda RBX: 00007fff1b4fe028 RCX: 00007f07472be5f9 [ 62.960937][ T5011] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 62.969016][ T5011] RBP: 00007f0747343610 R08: 0000000000000000 R09: 00007fff1b4fe028 [ 62.977036][ T5011] R10: 00000000000124d6 R11: 0000000000000246 R12: 0000000000000001 [ 62.985055][ T5011] R13: 00007fff1b4fe018 R14: 0000000000000001 R15: 0000000000000001 [ 62.993026][ T5011] [ 62.996082][ T5011] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 63.003367][ T5011] CPU: 0 PID: 5011 Comm: syz-executor659 Not tainted 6.5.0-rc1-syzkaller-00006-g3f01e9fed845 #0 [ 63.013773][ T5011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 63.023914][ T5011] Call Trace: [ 63.027294][ T5011] [ 63.030309][ T5011] dump_stack_lvl+0xd9/0x150 [ 63.034933][ T5011] panic+0x686/0x730 [ 63.038837][ T5011] ? panic_smp_self_stop+0xa0/0xa0 [ 63.043958][ T5011] ? show_trace_log_lvl+0x284/0x390 [ 63.049173][ T5011] ? gfs2_check_blk_type+0x28d/0x310 [ 63.054473][ T5011] check_panic_on_warn+0xb1/0xc0 [ 63.059419][ T5011] __warn+0xf2/0x390 [ 63.063357][ T5011] ? gfs2_check_blk_type+0x28d/0x310 [ 63.068663][ T5011] report_bug+0x2da/0x500 [ 63.073008][ T5011] handle_bug+0x3c/0x70 [ 63.077166][ T5011] exc_invalid_op+0x18/0x50 [ 63.081672][ T5011] asm_exc_invalid_op+0x1a/0x20 [ 63.086525][ T5011] RIP: 0010:gfs2_check_blk_type+0x28d/0x310 [ 63.092431][ T5011] Code: 3f 48 81 c4 c8 00 00 00 44 89 e0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 e8 92 cf e8 fd 4c 89 ff e8 7a 6e f9 ff eb a7 e8 83 cf e8 fd <0f> 0b eb 91 41 bc ea ff ff ff eb 96 e8 92 0f 3b fe e9 18 fe ff ff [ 63.112043][ T5011] RSP: 0018:ffffc900034ef9a8 EFLAGS: 00010293 [ 63.118112][ T5011] RAX: 0000000000000000 RBX: ffff888021cd4e58 RCX: 0000000000000000 [ 63.126085][ T5011] RDX: ffff8880187c6100 RSI: ffffffff839b330d RDI: 0000000000000005 [ 63.134057][ T5011] RBP: 1ffff9200069df36 R08: 0000000000000005 R09: 0000000000000000 [ 63.142032][ T5011] R10: 00000000fffffff9 R11: 0000000000000001 R12: 00000000fffffff9 [ 63.150006][ T5011] R13: 0000000000000012 R14: 0000000000000003 R15: ffffc900034ef9f0 [ 63.158074][ T5011] ? gfs2_check_blk_type+0x28d/0x310 [ 63.163381][ T5011] ? gfs2_check_blk_type+0x28d/0x310 [ 63.168684][ T5011] ? gfs2_free_di+0x4b0/0x4b0 [ 63.173377][ T5011] ? gfs2_inode_lookup+0x6f5/0x8a0 [ 63.178495][ T5011] gfs2_inode_lookup+0x6f5/0x8a0 [ 63.183446][ T5011] ? gfs2_create+0x50/0x50 [ 63.187867][ T5011] ? gfs2_lookup_by_inum+0x49/0x100 [ 63.193068][ T5011] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 63.198884][ T5011] gfs2_lookup_by_inum+0x49/0x100 [ 63.204612][ T5011] gfs2_fh_to_dentry+0x1b3/0x230 [ 63.209553][ T5011] exportfs_decode_fh_raw+0x12b/0x7e0 [ 63.215029][ T5011] ? drop_caches_sysctl_handler+0x180/0x180 [ 63.220931][ T5011] ? gfs2_get_name+0x3e0/0x3e0 [ 63.225817][ T5011] ? reconnect_path+0x9b0/0x9b0 [ 63.230674][ T5011] ? find_held_lock+0x2d/0x110 [ 63.235706][ T5011] ? __might_fault+0xe2/0x190 [ 63.240382][ T5011] ? lock_downgrade+0x690/0x690 [ 63.245247][ T5011] ? drop_caches_sysctl_handler+0x180/0x180 [ 63.251146][ T5011] exportfs_decode_fh+0x3c/0x90 [ 63.256011][ T5011] do_handle_open+0x2bc/0x590 [ 63.260695][ T5011] ? do_sys_name_to_handle+0x510/0x510 [ 63.266158][ T5011] ? _raw_spin_unlock_irq+0x23/0x50 [ 63.271364][ T5011] ? lockdep_hardirqs_on+0x7d/0x100 [ 63.276567][ T5011] ? _raw_spin_unlock_irq+0x2e/0x50 [ 63.281772][ T5011] ? ptrace_notify+0xfe/0x140 [ 63.286464][ T5011] do_syscall_64+0x39/0xb0 [ 63.290881][ T5011] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 63.296792][ T5011] RIP: 0033:0x7f07472be5f9 [ 63.301208][ T5011] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 63.321002][ T5011] RSP: 002b:00007fff1b4fde58 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 63.329427][ T5011] RAX: ffffffffffffffda RBX: 00007fff1b4fe028 RCX: 00007f07472be5f9 [ 63.337490][ T5011] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 63.345546][ T5011] RBP: 00007f0747343610 R08: 0000000000000000 R09: 00007fff1b4fe028 [ 63.353514][ T5011] R10: 00000000000124d6 R11: 0000000000000246 R12: 0000000000000001 [ 63.361579][ T5011] R13: 00007fff1b4fe018 R14: 0000000000000001 R15: 0000000000000001 [ 63.369552][ T5011] [ 63.372839][ T5011] Kernel Offset: disabled [ 63.377309][ T5011] Rebooting in 86400 seconds..