./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor491040567 <...> [ 3.714606][ T24] audit: type=1400 audit(1686215895.720:9): avc: denied { append open } for pid=75 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 3.721068][ T24] audit: type=1400 audit(1686215895.720:10): avc: denied { getattr } for pid=75 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 4.124293][ T92] udevd[92]: starting version 3.2.11 [ 4.162519][ T93] udevd[93]: starting eudev-3.2.11 [ 11.456256][ T24] kauditd_printk_skb: 50 callbacks suppressed [ 11.456265][ T24] audit: type=1400 audit(1686215903.500:61): avc: denied { transition } for pid=214 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 11.464337][ T24] audit: type=1400 audit(1686215903.500:62): avc: denied { noatsecure } for pid=214 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 11.471420][ T24] audit: type=1400 audit(1686215903.500:63): avc: denied { write } for pid=214 comm="sh" path="pipe:[1438]" dev="pipefs" ino=1438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 11.478817][ T24] audit: type=1400 audit(1686215903.500:64): avc: denied { rlimitinh } for pid=214 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 11.482429][ T24] audit: type=1400 audit(1686215903.500:65): avc: denied { siginh } for pid=214 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.7' (ECDSA) to the list of known hosts. execve("./syz-executor491040567", ["./syz-executor491040567"], 0x7ffe99fb71e0 /* 10 vars */) = 0 brk(NULL) = 0x5555558ca000 brk(0x5555558cac40) = 0x5555558cac40 arch_prctl(ARCH_SET_FS, 0x5555558ca300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor491040567", 4096) = 27 brk(0x5555558ebc40) = 0x5555558ebc40 brk(0x5555558ec000) = 0x5555558ec000 mprotect(0x7f0466cf8000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f045e83f000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 munmap(0x7f045e83f000, 262144) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("\xe9\x1f\x71\x89\x59\x1e\x92\x33\x61\x4b", 0777) = 0 [ 20.476188][ T24] audit: type=1400 audit(1686215912.520:66): avc: denied { execmem } for pid=285 comm="syz-executor491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 20.483221][ T24] audit: type=1400 audit(1686215912.520:67): avc: denied { read write } for pid=285 comm="syz-executor491" name="loop0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 20.491592][ T24] audit: type=1400 audit(1686215912.520:68): avc: denied { open } for pid=285 comm="syz-executor491" path="/dev/loop0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 20.491611][ T285] EXT4-fs (loop0): 1 truncate cleaned up mount("/dev/loop0", "\xe9\x1f\x71\x89\x59\x1e\x92\x33\x61\x4b", "ext4", 0, ",errors=continue") = 0 openat(AT_FDCWD, "\xe9\x1f\x71\x89\x59\x1e\x92\x33\x61\x4b", O_RDONLY|O_DIRECTORY) = 3 chdir("\xe9\x1f\x71\x89\x59\x1e\x92\x33\x61\x4b") = 0 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 [ 20.500029][ T24] audit: type=1400 audit(1686215912.520:69): avc: denied { ioctl } for pid=285 comm="syz-executor491" path="/dev/loop0" dev="devtmpfs" ino=111 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 20.505634][ T285] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 20.530668][ T24] audit: type=1400 audit(1686215912.520:70): avc: denied { mounton } for pid=285 comm="syz-executor491" path=2F726F6F742FE91F7189591E9233614B dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 20.549038][ T285] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 20.563516][ T24] audit: type=1400 audit(1686215912.580:71): avc: denied { mount } for pid=285 comm="syz-executor491" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 20.574949][ T285] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 20.574961][ T285] CPU: 0 PID: 285 Comm: syz-executor491 Not tainted 5.10.178-syzkaller-00127-g43c801dc3325 #0 [ 20.574968][ T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 20.574995][ T285] RIP: 0010:ext4_xattr_set_entry+0x498/0x3960 [ 20.575013][ T285] Code: 24 78 48 89 d8 48 c1 e8 03 48 89 84 24 28 01 00 00 42 80 3c 38 00 74 08 48 89 df e8 12 b3 ba ff 4c 8b 23 4c 89 e0 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 d1 2e 00 00 4c 89 e8 48 2b 44 24 20 48 [ 20.596871][ T24] audit: type=1400 audit(1686215912.580:72): avc: denied { write } for pid=285 comm="syz-executor491" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 20.604806][ T285] RSP: 0018:ffffc90000ae6f20 EFLAGS: 00010246 [ 20.614970][ T24] audit: type=1400 audit(1686215912.580:73): avc: denied { add_name } for pid=285 comm="syz-executor491" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 20.624759][ T285] [ 20.624769][ T285] RAX: 0000000000000000 RBX: ffffc90000ae7320 RCX: ffff88811eb862c0 [ 20.624776][ T285] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000001c [ 20.624785][ T285] RBP: ffffc90000ae71c0 R08: ffffffff81eccc44 R09: ffffed10220b7536 [ 20.624799][ T285] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 20.630844][ T24] audit: type=1400 audit(1686215912.580:74): avc: denied { create } for pid=285 comm="syz-executor491" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 20.650114][ T285] R13: 0000000000000000 R14: 000000000000001c R15: dffffc0000000000 [ 20.650130][ T285] FS: 00005555558ca300(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 20.650147][ T285] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 20.777346][ T285] CR2: 000055b87bbcf588 CR3: 000000011ea44000 CR4: 00000000003506b0 [ 20.785156][ T285] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 20.792967][ T285] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 20.800773][ T285] Call Trace: [ 20.803911][ T285] ? __wait_on_buffer+0x80/0x80 [ 20.808593][ T285] ? __kasan_check_read+0x11/0x20 [ 20.813454][ T285] ? errseq_check+0x41/0x70 [ 20.817789][ T285] ? ext4_xattr_ibody_inline_set+0x390/0x390 [ 20.823609][ T285] ? __ext4_journal_ensure_credits+0x470/0x470 [ 20.829602][ T285] ? __kasan_check_write+0x14/0x20 [ 20.834546][ T285] ? ext4_reserve_inode_write+0x2d0/0x380 [ 20.840105][ T285] ? ext4_mark_iloc_dirty+0x3e60/0x3e60 [ 20.845480][ T285] ext4_xattr_ibody_set+0x7c/0x2b0 [ 20.850430][ T285] ext4_xattr_set_handle+0xc26/0x14e0 [ 20.855635][ T285] ? ext4_xattr_set_entry+0x3960/0x3960 [ 20.861021][ T285] ? selinux_inode_free_security+0x200/0x200 [ 20.866833][ T285] ext4_initxattrs+0xa7/0x120 [ 20.871346][ T285] security_inode_init_security+0x252/0x390 [ 20.877073][ T285] ? ext4_init_security+0x40/0x40 [ 20.881934][ T285] ? security_dentry_create_files_as+0xc0/0xc0 [ 20.887925][ T285] ? __ext4_set_acl+0x5e0/0x5e0 [ 20.892611][ T285] ? prandom_u32+0x24c/0x290 [ 20.897038][ T285] ext4_init_security+0x34/0x40 [ 20.901720][ T285] __ext4_new_inode+0x3159/0x3f70 [ 20.906588][ T285] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 20.912141][ T285] ? dquot_initialize+0x20/0x20 [ 20.916825][ T285] ? ext4_lookup+0x549/0xaa0 [ 20.921252][ T285] ? ext4_add_entry+0x1280/0x1280 [ 20.926122][ T285] ext4_create+0x267/0x530 [ 20.930365][ T285] ? ext4_lookup+0xaa0/0xaa0 [ 20.934790][ T285] ? selinux_inode_create+0x22/0x30 [ 20.939839][ T285] ? security_inode_create+0xbc/0x100 [ 20.945035][ T285] ? ext4_lookup+0xaa0/0xaa0 [ 20.949462][ T285] path_openat+0x1377/0x3000 [ 20.953892][ T285] ? do_filp_open+0x460/0x460 [ 20.958402][ T285] do_filp_open+0x21c/0x460 [ 20.962743][ T285] ? vfs_tmpfile+0x2b0/0x2b0 [ 20.967170][ T285] ? get_unused_fd_flags+0x94/0xa0 [ 20.972116][ T285] do_sys_openat2+0x13f/0x6e0 [ 20.976625][ T285] ? ptrace_stop+0x6dc/0xa30 [ 20.981055][ T285] ? do_sys_open+0x220/0x220 [ 20.985480][ T285] ? ptrace_notify+0x24c/0x350 [ 20.990078][ T285] ? do_notify_parent+0xa10/0xa10 [ 20.994937][ T285] __x64_sys_creat+0x11f/0x160 [ 20.999664][ T285] ? __x32_compat_sys_openat+0x290/0x290 [ 21.005121][ T285] ? syscall_enter_from_user_mode+0x57/0x1a0 [ 21.010935][ T285] do_syscall_64+0x34/0x70 [ 21.015275][ T285] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 21.020995][ T285] RIP: 0033:0x7f0466c8b799 [ 21.025250][ T285] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 21.044696][ T285] RSP: 002b:00007ffddacd2a58 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 21.052935][ T285] RAX: ffffffffffffffda RBX: 33921e5989711fe9 RCX: 00007f0466c8b799 [ 21.060741][ T285] RDX: 00007f0466c49e13 RSI: 0000000000000000 RDI: 00000000200000c0 [ 21.068565][ T285] RBP: 00007f0466c4b030 R08: 0000000000000486 R09: 0000000000000000 [ 21.076367][ T285] R10: 00007ffddacd2920 R11: 0000000000000246 R12: 00007f0466c4b0c0 [ 21.084186][ T285] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 21.091991][ T285] Modules linked in: [ 21.096053][ T285] ---[ end trace ca57c76f9facbc9e ]--- [ 21.101324][ T285] RIP: 0010:ext4_xattr_set_entry+0x498/0x3960 [ 21.107261][ T285] Code: 24 78 48 89 d8 48 c1 e8 03 48 89 84 24 28 01 00 00 42 80 3c 38 00 74 08 48 89 df e8 12 b3 ba ff 4c 8b 23 4c 89 e0 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 d1 2e 00 00 4c 89 e8 48 2b 44 24 20 48 [ 21.126733][ T285] RSP: 0018:ffffc90000ae6f20 EFLAGS: 00010246 [ 21.132556][ T285] RAX: 0000000000000000 RBX: ffffc90000ae7320 RCX: ffff88811eb862c0 [ 21.140751][ T285] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000001c [ 21.148552][ T285] RBP: ffffc90000ae71c0 R08: ffffffff81eccc44 R09: ffffed10220b7536 [ 21.156346][ T285] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 21.164147][ T285] R13: 0000000000000000 R14: 000000000000001c R15: dffffc0000000000 [ 21.171986][ T285] FS: 00005555558ca300(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 21.180735][ T285] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 21.187177][ T285] CR2: 000055b87bbcf588 CR3: 000000011ea44000 CR4: 00000000003506b0 [ 21.194956][ T285] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 21.202792][ T285] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 21.210591][ T285] Kernel panic - not syncing: Fatal exception [ 21.216774][ T285] Kernel Offset: disabled [ 21.220898][ T285] Rebooting in 86400 seconds..