./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor339579509 <...> [ 3.374313][ T181] udevd[181]: starting version 3.2.10 [ 3.415375][ T182] udevd[182]: starting eudev-3.2.10 [ 3.416185][ T181] udevd (181) used greatest stack depth: 22976 bytes left [ 4.424413][ T268] ssh-keygen (268) used greatest stack depth: 22800 bytes left [ 14.270816][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 14.270829][ T30] audit: type=1400 audit(1669531050.689:60): avc: denied { transition } for pid=320 comm="sshd" path="/bin/sh" dev="sda1" ino=73 scontext=system_u:system_r:initrc_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.275004][ T30] audit: type=1400 audit(1669531050.689:61): avc: denied { write } for pid=320 comm="sh" path="pipe:[325]" dev="pipefs" ino=325 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:initrc_t tclass=fifo_file permissive=1 [ 15.041455][ T325] dhcpcd-run-hook (325) used greatest stack depth: 22672 bytes left [ 15.161302][ T321] sshd (321) used greatest stack depth: 22544 bytes left [ 15.657761][ T349] sshd (349) used greatest stack depth: 22528 bytes left Warning: Permanently added '10.128.0.124' (ECDSA) to the list of known hosts. execve("./syz-executor339579509", ["./syz-executor339579509"], 0x7ffdde644870 /* 10 vars */) = 0 brk(NULL) = 0x55555675b000 brk(0x55555675bc40) = 0x55555675bc40 arch_prctl(ARCH_SET_FS, 0x55555675b300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor339579509", 4096) = 27 brk(0x55555677cc40) = 0x55555677cc40 brk(0x55555677d000) = 0x55555677d000 mprotect(0x7f8d2379c000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555675b5d0) = 409 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555675b5d0) = 410 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555675b5d0) = 411 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555675b5d0) = 412 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555675b5d0) = 413 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555675b5d0) = 414 ./strace-static-x86_64: Process 410 attached [pid 410] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 410] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 410] close(3) = 0 [pid 410] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555675b5d0) = 416 ./strace-static-x86_64: Process 409 attached [pid 409] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 409] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 409] close(3) = 0 [pid 409] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555675b5d0) = 418 ./strace-static-x86_64: Process 418 attached [pid 418] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 418] setpgid(0, 0) = 0 [pid 418] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 411 attached ) = 3 [pid 418] write(3, "1000", 4) = 4 [pid 418] close(3) = 0 [pid 418] memfd_create("syzkaller", 0) = 3 ./strace-static-x86_64: Process 414 attached ./strace-static-x86_64: Process 413 attached ./strace-static-x86_64: Process 412 attached [pid 412] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 418] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 414] openat(AT_FDCWD, "/dev/loop5", O_RDWR./strace-static-x86_64: Process 416 attached [pid 418] <... mmap resumed>) = 0x7f8d1b2e1000 [pid 413] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 411] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 416] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 412] <... openat resumed>) = 3 [pid 411] <... openat resumed>) = 3 [pid 414] <... openat resumed>) = 3 [pid 416] setpgid(0, 0 [pid 412] ioctl(3, LOOP_CLR_FD [pid 416] <... setpgid resumed>) = 0 [pid 411] ioctl(3, LOOP_CLR_FD [pid 412] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 416] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 411] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 414] ioctl(3, LOOP_CLR_FD [pid 413] <... openat resumed>) = 3 [pid 412] close(3 [pid 416] <... openat resumed>) = 3 [pid 411] close(3 [pid 414] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 413] ioctl(3, LOOP_CLR_FD [pid 412] <... close resumed>) = 0 [pid 416] write(3, "1000", 4 [pid 411] <... close resumed>) = 0 [pid 413] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 414] close(3 [pid 416] <... write resumed>) = 4 [pid 412] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 411] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 413] close(3 [pid 414] <... close resumed>) = 0 [pid 413] <... close resumed>) = 0 [pid 414] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 416] close(3 [pid 413] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 412] <... clone resumed>, child_tidptr=0x55555675b5d0) = 420 [pid 411] <... clone resumed>, child_tidptr=0x55555675b5d0) = 419 [pid 416] <... close resumed>) = 0 [pid 416] memfd_create("syzkaller", 0 [pid 413] <... clone resumed>, child_tidptr=0x55555675b5d0) = 422 [pid 416] <... memfd_create resumed>) = 3 [pid 416] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 414] <... clone resumed>, child_tidptr=0x55555675b5d0) = 421 [pid 416] <... mmap resumed>) = 0x7f8d1b2e1000 [pid 416] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [ 21.443661][ T30] audit: type=1400 audit(1669531057.859:62): avc: denied { execmem } for pid=408 comm="syz-executor339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [pid 416] munmap(0x7f8d1b2e1000, 262144 [pid 418] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 418] munmap(0x7f8d1b2e1000, 262144) = 0 [pid 418] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 418] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 421 attached ./strace-static-x86_64: Process 419 attached [pid 416] <... munmap resumed>) = 0 ./strace-static-x86_64: Process 420 attached ./strace-static-x86_64: Process 422 attached [pid 422] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 420] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 422] <... prctl resumed>) = 0 [pid 420] <... prctl resumed>) = 0 [pid 422] setpgid(0, 0 [pid 420] setpgid(0, 0 [pid 422] <... setpgid resumed>) = 0 [pid 420] <... setpgid resumed>) = 0 [pid 422] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 420] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 422] <... openat resumed>) = 3 [pid 422] write(3, "1000", 4) = 4 [pid 422] close(3) = 0 [pid 420] write(3, "1000", 4 [pid 422] memfd_create("syzkaller", 0 [pid 420] <... write resumed>) = 4 [pid 420] close(3) = 0 [pid 420] memfd_create("syzkaller", 0 [pid 422] <... memfd_create resumed>) = 3 [pid 420] <... memfd_create resumed>) = 3 [pid 422] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d1b2e1000 [pid 420] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d1b2e1000 [pid 420] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144 [pid 422] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 420] <... write resumed>) = 262144 [pid 420] munmap(0x7f8d1b2e1000, 262144) = 0 [pid 422] munmap(0x7f8d1b2e1000, 262144) = 0 [pid 420] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 422] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 420] <... openat resumed>) = 4 [pid 422] <... openat resumed>) = 4 [pid 422] ioctl(4, LOOP_SET_FD, 3 [pid 420] ioctl(4, LOOP_SET_FD, 3 [pid 421] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 419] prctl(PR_SET_PDEATHSIG, SIGKILL [ 21.473895][ T30] audit: type=1400 audit(1669531057.859:63): avc: denied { read write } for pid=410 comm="syz-executor339" name="loop1" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 21.478436][ T418] loop0: detected capacity change from 0 to 512 [ 21.498427][ T30] audit: type=1400 audit(1669531057.859:64): avc: denied { open } for pid=410 comm="syz-executor339" path="/dev/loop1" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 21.521996][ T422] loop4: detected capacity change from 0 to 512 [pid 416] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 421] <... prctl resumed>) = 0 [pid 419] <... prctl resumed>) = 0 [pid 418] <... ioctl resumed>) = 0 [pid 416] <... openat resumed>) = 4 [pid 421] setpgid(0, 0 [pid 419] setpgid(0, 0 [pid 418] close(3 [pid 416] ioctl(4, LOOP_SET_FD, 3 [pid 422] <... ioctl resumed>) = 0 [pid 421] <... setpgid resumed>) = 0 [pid 419] <... setpgid resumed>) = 0 [pid 418] <... close resumed>) = 0 [pid 421] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 421] write(3, "1000", 4) = 4 [pid 421] close(3) = 0 [pid 421] memfd_create("syzkaller", 0) = 3 [pid 421] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d1b2e1000 [pid 421] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 421] munmap(0x7f8d1b2e1000, 262144 [pid 422] close(3 [pid 421] <... munmap resumed>) = 0 [pid 419] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 418] mkdir("./file0", 0777 [pid 416] <... ioctl resumed>) = 0 [pid 422] <... close resumed>) = 0 [pid 421] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 419] <... openat resumed>) = 3 [pid 421] <... openat resumed>) = 4 [pid 421] ioctl(4, LOOP_SET_FD, 3 [pid 422] mkdir("./file0", 0777 [pid 420] <... ioctl resumed>) = 0 [pid 419] write(3, "1000", 4 [pid 418] <... mkdir resumed>) = 0 [pid 416] close(3 [pid 422] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 420] close(3 [pid 419] <... write resumed>) = 4 [pid 418] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue" [pid 416] <... close resumed>) = 0 [pid 422] mount("/dev/loop4", "./file0", "ext4", 0, ",errors=continue" [pid 420] <... close resumed>) = 0 [pid 419] close(3 [pid 416] mkdir("./file0", 0777 [pid 420] mkdir("./file0", 0777 [pid 419] <... close resumed>) = 0 [pid 421] <... ioctl resumed>) = 0 [pid 421] close(3) = 0 [pid 421] mkdir("./file0", 0777) = -1 EEXIST (File exists) [ 21.528716][ T30] audit: type=1400 audit(1669531057.859:65): avc: denied { ioctl } for pid=410 comm="syz-executor339" path="/dev/loop1" dev="devtmpfs" ino=112 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 21.534743][ T420] loop3: detected capacity change from 0 to 512 [ 21.568552][ T416] loop1: detected capacity change from 0 to 512 [ 21.578478][ T421] loop5: detected capacity change from 0 to 512 [pid 421] mount("/dev/loop5", "./file0", "ext4", 0, ",errors=continue" [pid 420] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 419] memfd_create("syzkaller", 0 [pid 416] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 416] mount("/dev/loop1", "./file0", "ext4", 0, ",errors=continue" [pid 420] mount("/dev/loop3", "./file0", "ext4", 0, ",errors=continue" [pid 419] <... memfd_create resumed>) = 3 [pid 419] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8d1b2e1000 [pid 419] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 419] munmap(0x7f8d1b2e1000, 262144) = 0 [pid 419] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 419] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 419] close(3) = 0 [pid 419] mkdir("./file0", 0777) = -1 EEXIST (File exists) [ 21.589377][ T30] audit: type=1400 audit(1669531058.009:66): avc: denied { mounton } for pid=418 comm="syz-executor339" path="/root/file0" dev="sda1" ino=1138 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 21.626451][ T419] loop2: detected capacity change from 0 to 512 [ 21.633232][ T422] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 21.644171][ T416] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 21.646859][ T421] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 21.654940][ T418] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 419] mount("/dev/loop2", "./file0", "ext4", 0, ",errors=continue" [pid 422] <... mount resumed>) = 0 [pid 421] <... mount resumed>) = 0 [pid 418] <... mount resumed>) = 0 [pid 416] <... mount resumed>) = 0 [pid 422] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 416] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 422] <... openat resumed>) = 3 [pid 416] <... openat resumed>) = 3 [pid 422] chdir("./file0" [pid 416] chdir("./file0" [pid 422] <... chdir resumed>) = 0 [pid 416] <... chdir resumed>) = 0 [pid 422] ioctl(4, LOOP_CLR_FD [pid 416] ioctl(4, LOOP_CLR_FD [pid 422] <... ioctl resumed>) = 0 [pid 416] <... ioctl resumed>) = 0 [pid 422] close(4 [pid 416] close(4 [pid 422] <... close resumed>) = 0 [pid 416] <... close resumed>) = 0 [pid 422] openat(AT_FDCWD, "cgroup.controllers", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 416] openat(AT_FDCWD, "cgroup.controllers", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 422] <... openat resumed>) = 4 [pid 416] <... openat resumed>) = 4 [pid 422] ioctl(4, FS_IOC_GETFSMAP, 0x20000200 [pid 416] ioctl(4, FS_IOC_GETFSMAP, 0x20000200 [pid 418] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 421] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 418] chdir("./file0") = 0 [pid 421] chdir("./file0") = 0 [ 21.665148][ T30] audit: type=1400 audit(1669531058.079:67): avc: denied { mount } for pid=421 comm="syz-executor339" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 21.679704][ T416] ------------[ cut here ]------------ [ 21.697479][ T30] audit: type=1400 audit(1669531058.089:68): avc: denied { write } for pid=422 comm="syz-executor339" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 21.707802][ T422] ------------[ cut here ]------------ [ 21.730581][ T419] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [pid 418] ioctl(4, LOOP_CLR_FD [pid 419] <... mount resumed>) = 0 [pid 418] <... ioctl resumed>) = 0 [pid 421] ioctl(4, LOOP_CLR_FD) = 0 [pid 418] close(4) = 0 [pid 419] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 421] close(4) = 0 [pid 418] openat(AT_FDCWD, "cgroup.controllers", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 421] openat(AT_FDCWD, "cgroup.controllers", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 418] <... openat resumed>) = 4 [pid 421] <... openat resumed>) = 4 [pid 421] ioctl(4, FS_IOC_GETFSMAP, 0x20000200 [ 21.731002][ T30] audit: type=1400 audit(1669531058.089:69): avc: denied { add_name } for pid=422 comm="syz-executor339" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 21.742681][ T422] kernel BUG at fs/ext4/ext4.h:3354! [ 21.768973][ T421] ------------[ cut here ]------------ [ 21.771475][ T420] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 21.774427][ T418] ------------[ cut here ]------------ [ 21.785032][ T422] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 21.795769][ T422] CPU: 0 PID: 422 Comm: syz-executor339 Not tainted 5.15.74-syzkaller-00001-g4ec71a9ec769 #0 [ 21.804080][ T421] kernel BUG at fs/ext4/ext4.h:3354! [ 21.805743][ T422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 21.820760][ T422] RIP: 0010:ext4_mb_load_buddy_gfp+0xe9d/0xeb0 [ 21.826745][ T422] Code: 99 ed c1 ff e9 47 f4 ff ff e8 5f a0 7f ff 48 c7 c7 c0 c3 a9 86 48 89 de 4c 89 ea e8 ad 8e 92 00 e9 a1 f2 ff ff e8 43 a0 7f ff <0f> 0b e8 3c a0 7f ff 0f 0b e8 35 a0 7f ff 0f 0b 0f 1f 00 55 48 89 [ 21.846360][ T422] RSP: 0018:ffffc9000044f320 EFLAGS: 00010293 [ 21.852262][ T422] RAX: ffffffff81f1f14d RBX: 0000000000000001 RCX: ffff888106194f00 [ 21.860073][ T422] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 21.867906][ T422] RBP: ffffc9000044f3b0 R08: ffffffff81f1e3a4 R09: ffffc9000044f440 [ 21.875696][ T422] R10: fffff52000089e8f R11: 1ffff92000089e88 R12: ffff888100a553c8 [ 21.883511][ T422] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff888105f9a000 [ 21.891323][ T422] FS: 000055555675b300(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 21.900086][ T422] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 21.906508][ T422] CR2: 000055c4f7cde3e8 CR3: 000000011c064000 CR4: 00000000003506b0 [ 21.914326][ T422] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 21.922215][ T422] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 21.932234][ T422] Call Trace: [ 21.935505][ T422] [ 21.938439][ T422] ? __lock_text_start+0x8/0x8 [ 21.943656][ T422] ext4_mballoc_query_range+0xb8/0x7b0 [ 21.949119][ T422] ? ext4_getfsmap_dev_compare+0x80/0x80 [ 21.954788][ T422] ? ext4_trim_all_free+0x5a0/0x5a0 [ 21.959867][ T422] ? kmem_cache_alloc_trace+0x1e3/0x310 [ 21.965236][ T422] ext4_getfsmap_datadev+0x1c8a/0x28c0 [ 21.970532][ T422] ? ext4_getfsmap+0x1040/0x1040 [ 21.975312][ T422] ? __kasan_check_read+0x11/0x20 [ 21.980163][ T422] ? free_swap_cache+0x149/0x210 [ 21.984954][ T422] ? ext4_getfsmap+0x1040/0x1040 [ 21.989712][ T422] ? ext4_getfsmap+0xb3b/0x1040 [ 21.994497][ T422] ext4_getfsmap+0xcff/0x1040 [ 21.999008][ T422] ? ext4_getfsmap+0x1040/0x1040 [ 22.003772][ T422] ? ext4_fsmap_to_internal+0x310/0x310 [ 22.009298][ T422] ? ext4_getfsmap+0x1040/0x1040 [ 22.014065][ T422] ? ext4_shutdown+0x4d0/0x4d0 [ 22.018665][ T422] ? avc_has_extended_perms+0x718/0x1210 [ 22.024228][ T422] ? ext4_fsmap_to_internal+0x1c2/0x310 [ 22.029602][ T422] ext4_ioctl+0x3020/0x50e0 [ 22.033940][ T422] ? avc_flush+0x2b0/0x2b0 [ 22.038190][ T422] ? update_load_avg+0x415/0x8e0 [ 22.042965][ T422] ? do_vfs_ioctl+0x1ae4/0x2ac0 [ 22.047658][ T422] ? ext4_fileattr_set+0x17e0/0x17e0 [ 22.052772][ T422] ? __x64_compat_sys_ioctl+0x90/0x90 [ 22.058009][ T422] ? cgroup_update_frozen+0x155/0x320 [ 22.063202][ T422] ? _raw_spin_unlock_irq+0x4e/0x70 [ 22.068228][ T422] ? selinux_file_ioctl+0x3c9/0x530 [ 22.073258][ T422] ? ptrace_stop+0x6eb/0xa30 [ 22.077684][ T422] ? selinux_file_alloc_security+0x120/0x120 [ 22.083505][ T422] ? _raw_spin_unlock_irq+0x4e/0x70 [ 22.088532][ T422] ? ptrace_notify+0x248/0x340 [ 22.093135][ T422] ? do_notify_parent+0xa60/0xa60 [ 22.097993][ T422] ? security_file_ioctl+0xb1/0xd0 [ 22.102951][ T422] ? ext4_fileattr_set+0x17e0/0x17e0 [ 22.108222][ T422] __se_sys_ioctl+0x115/0x190 [ 22.112785][ T422] __x64_sys_ioctl+0x7b/0x90 [ 22.117153][ T422] do_syscall_64+0x44/0xd0 [ 22.121760][ T422] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 22.127571][ T422] RIP: 0033:0x7f8d2372e3e9 [ 22.131822][ T422] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 22.151265][ T422] RSP: 002b:00007ffcae7c2578 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 22.159506][ T422] RAX: ffffffffffffffda RBX: 00000000000f4240 RCX: 00007f8d2372e3e9 [ 22.167442][ T422] RDX: 0000000020000200 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 22.175243][ T422] RBP: 0000000000000000 R08: 000000000000000d R09: 000000000000000d [ 22.183056][ T422] R10: 00000000000003f1 R11: 0000000000000246 R12: 00007f8d236ed5c0 [pid 418] ioctl(4, FS_IOC_GETFSMAP, 0x20000200 [pid 419] <... openat resumed>) = 3 [ 22.190871][ T422] R13: 00007ffcae7c25a0 R14: 00007ffcae7c258c R15: 00007ffcae7c2590 [ 22.198686][ T422] [ 22.201540][ T422] Modules linked in: [ 22.205319][ T421] invalid opcode: 0000 [#2] PREEMPT SMP KASAN [ 22.206161][ T422] ---[ end trace 8787224b2c022cc2 ]--- [ 22.211182][ T421] CPU: 1 PID: 421 Comm: syz-executor339 Tainted: G D 5.15.74-syzkaller-00001-g4ec71a9ec769 #0 [ 22.211202][ T421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 22.211210][ T421] RIP: 0010:ext4_mb_load_buddy_gfp+0xe9d/0xeb0 [ 22.211236][ T421] Code: 99 ed c1 ff e9 47 f4 ff ff e8 5f a0 7f ff 48 c7 c7 c0 c3 a9 86 48 89 de 4c 89 ea e8 ad 8e 92 00 e9 a1 f2 ff ff e8 43 a0 7f ff <0f> 0b e8 3c a0 7f ff 0f 0b e8 35 a0 7f ff 0f 0b 0f 1f 00 55 48 89 [ 22.211248][ T421] RSP: 0018:ffffc9000043f320 EFLAGS: 00010293 [ 22.211264][ T421] RAX: ffffffff81f1f14d RBX: 0000000000000001 RCX: ffff888106190000 [ 22.211276][ T421] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 22.211286][ T421] RBP: ffffc9000043f3b0 R08: ffffffff81f1e3a4 R09: ffffc9000043f440 [ 22.216529][ T422] RIP: 0010:ext4_mb_load_buddy_gfp+0xe9d/0xeb0 [ 22.227926][ T421] R10: fffff52000087e8f R11: 1ffff92000087e88 R12: ffff888100a553c8 [ 22.227939][ T421] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff888105f9a000 [ 22.227950][ T421] FS: 000055555675b300(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 22.237838][ T422] Code: 99 ed c1 ff e9 47 f4 ff ff e8 5f a0 7f ff 48 c7 c7 c0 c3 a9 86 48 89 de 4c 89 ea e8 ad 8e 92 00 e9 a1 f2 ff ff e8 43 a0 7f ff <0f> 0b e8 3c a0 7f ff 0f 0b e8 35 a0 7f ff 0f 0b 0f 1f 00 55 48 89 [ 22.243807][ T421] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 22.263265][ T422] RSP: 0018:ffffc9000044f320 EFLAGS: 00010293 [ 22.269151][ T421] CR2: 00007f8d237a0138 CR3: 000000011c079000 CR4: 00000000003506a0 [ 22.269167][ T421] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 22.276963][ T422] [ 22.276968][ T422] RAX: ffffffff81f1f14d RBX: 0000000000000001 RCX: ffff888106194f00 [ 22.284774][ T421] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 22.284786][ T421] Call Trace: [ 22.284791][ T421] [ 22.292904][ T422] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 22.298886][ T421] ? __lock_text_start+0x8/0x8 [ 22.306696][ T422] RBP: ffffc9000044f3b0 R08: ffffffff81f1e3a4 R09: ffffc9000044f440 [ 22.314507][ T421] ext4_mballoc_query_range+0xb8/0x7b0 [ 22.323283][ T422] R10: fffff52000089e8f R11: 1ffff92000089e88 R12: ffff888100a553c8 [ 22.342719][ T421] ? ext4_getfsmap_dev_compare+0x80/0x80 [ 22.349147][ T422] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff888105f9a000 [ 22.355077][ T421] ? ext4_trim_all_free+0x5a0/0x5a0 [ 22.363014][ T422] FS: 000055555675b300(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 22.370818][ T421] ? kmem_cache_alloc_trace+0x1e3/0x310 [ 22.372984][ T422] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 22.380814][ T421] ext4_getfsmap_datadev+0x1c8a/0x28c0 [ 22.388702][ T422] CR2: 000055c4f7cde3e8 CR3: 000000011c064000 CR4: 00000000003506b0 [ 22.391824][ T421] ? ext4_getfsmap+0x1040/0x1040 [ 22.394600][ T422] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 22.402408][ T421] ? ext4_getfsmap+0x1040/0x1040 [ 22.402427][ T421] ? ext4_getfsmap+0xb3b/0x1040 [ 22.407017][ T422] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 22.414819][ T421] ext4_getfsmap+0xcff/0x1040 [ 22.414838][ T421] ? ext4_getfsmap+0x1040/0x1040 [ 22.420124][ T422] Kernel panic - not syncing: Fatal exception [ 22.427925][ T421] ? ext4_fsmap_to_internal+0x310/0x310 [ 22.531640][ T421] ? __kasan_check_write+0x14/0x20 [ 22.536583][ T421] ? ext4_getfsmap+0x1040/0x1040 [ 22.541354][ T421] ? ext4_shutdown+0x4d0/0x4d0 [ 22.545957][ T421] ? avc_has_extended_perms+0x718/0x1210 [ 22.551422][ T421] ? ext4_fsmap_to_internal+0x1c2/0x310 [ 22.556807][ T421] ext4_ioctl+0x3020/0x50e0 [ 22.561138][ T421] ? avc_flush+0x2b0/0x2b0 [ 22.565395][ T421] ? update_load_avg+0x415/0x8e0 [ 22.572684][ T421] ? do_vfs_ioctl+0x1ae4/0x2ac0 [ 22.577378][ T421] ? ext4_fileattr_set+0x17e0/0x17e0 [ 22.582487][ T421] ? __x64_compat_sys_ioctl+0x90/0x90 [ 22.587701][ T421] ? cgroup_update_frozen+0x155/0x320 [ 22.592908][ T421] ? _raw_spin_unlock_irq+0x4e/0x70 [ 22.597937][ T421] ? selinux_file_ioctl+0x3c9/0x530 [ 22.602982][ T421] ? ptrace_stop+0x6eb/0xa30 [ 22.607399][ T421] ? selinux_file_alloc_security+0x120/0x120 [ 22.614000][ T421] ? _raw_spin_unlock_irq+0x4e/0x70 [ 22.619029][ T421] ? ptrace_notify+0x248/0x340 [ 22.623628][ T421] ? do_notify_parent+0xa60/0xa60 [ 22.628489][ T421] ? security_file_ioctl+0xb1/0xd0 [ 22.633432][ T421] ? ext4_fileattr_set+0x17e0/0x17e0 [ 22.638732][ T421] __se_sys_ioctl+0x115/0x190 [ 22.643242][ T421] __x64_sys_ioctl+0x7b/0x90 [ 22.647677][ T421] do_syscall_64+0x44/0xd0 [ 22.651923][ T421] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 22.657654][ T421] RIP: 0033:0x7f8d2372e3e9 [ 22.661919][ T421] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 22.681343][ T421] RSP: 002b:00007ffcae7c2578 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 22.689592][ T421] RAX: ffffffffffffffda RBX: 00000000000f4240 RCX: 00007f8d2372e3e9 [ 22.697401][ T421] RDX: 0000000020000200 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 22.705214][ T421] RBP: 0000000000000000 R08: 000000000000000d R09: 000000000000000d [ 22.713022][ T421] R10: 00000000000003f1 R11: 0000000000000246 R12: 00007f8d236ed5c0 [ 22.720832][ T421] R13: 00007ffcae7c25a0 R14: 00007ffcae7c258c R15: 00007ffcae7c2590 [ 22.728648][ T421] [ 22.731510][ T421] Modules linked in: [ 22.735457][ T422] Kernel Offset: disabled [ 22.739582][ T422] Rebooting in 86400 seconds..