./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor634209990 <...> Warning: Permanently added '10.128.1.88' (ED25519) to the list of known hosts. execve("./syz-executor634209990", ["./syz-executor634209990"], 0x7ffd3a7aef10 /* 10 vars */) = 0 brk(NULL) = 0x5555932d8000 brk(0x5555932d8d00) = 0x5555932d8d00 arch_prctl(ARCH_SET_FS, 0x5555932d8380) = 0 set_tid_address(0x5555932d8650) = 5835 set_robust_list(0x5555932d8660, 24) = 0 rseq(0x5555932d8ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor634209990", 4096) = 27 getrandom("\xaf\x83\x60\x0f\x7f\xa4\xea\x5a", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555932d8d00 brk(0x5555932f9d00) = 0x5555932f9d00 brk(0x5555932fa000) = 0x5555932fa000 mprotect(0x7f38330be000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 [ 71.968747][ T30] audit: type=1400 audit(1752226269.889:62): avc: denied { write } for pid=5832 comm="strace-static-x" path="pipe:[3838]" dev="pipefs" ino=3838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 write(1, "executing program\n", 18executing program ) = 18 openat(AT_FDCWD, "/dev/udmabuf", O_RDWR) = 3 memfd_create("\x79\x10\x35\xfb\xf7\x75\x83\x25\x3a\x72\xc2\xb9\x78\xa4\x71\xc1\xea\x5f\x8c\x5a\x37\xe7\x61\x9b\x11\x78\x0e\xa1\xcf\x1a\x98\x53\x37\xc9", MFD_CLOEXEC|MFD_ALLOW_SEALING) = 4 [ 72.006130][ T30] audit: type=1400 audit(1752226269.929:63): avc: denied { execmem } for pid=5835 comm="syz-executor634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 72.028130][ T30] audit: type=1400 audit(1752226269.959:64): avc: denied { read write } for pid=5835 comm="syz-executor634" name="udmabuf" dev="devtmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 ftruncate(4, 65535) = 0 fcntl(4, F_ADD_SEALS, F_SEAL_SEAL|F_SEAL_SHRINK|F_SEAL_GROW) = 0 ioctl(3, UDMABUF_CREATE, 0x200000000100) = 5 [ 72.051914][ T30] audit: type=1400 audit(1752226269.959:65): avc: denied { open } for pid=5835 comm="syz-executor634" path="/dev/udmabuf" dev="devtmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.076077][ T30] audit: type=1400 audit(1752226269.999:66): avc: denied { ioctl } for pid=5835 comm="syz-executor634" path="/dev/udmabuf" dev="devtmpfs" ino=701 ioctlcmd=0x7542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.085071][ T5835] ------------[ cut here ]------------ [ 72.106550][ T5835] WARNING: CPU: 1 PID: 5835 at fs/exec.c:118 path_noexec+0x1ca/0x230 [ 72.114817][ T5835] Modules linked in: [ 72.118808][ T5835] CPU: 1 UID: 0 PID: 5835 Comm: syz-executor634 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 72.131237][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 72.141306][ T5835] RIP: 0010:path_noexec+0x1ca/0x230 [ 72.146511][ T5835] Code: ff 83 e3 02 48 89 de e8 b4 47 85 ff 48 85 db 41 0f 95 c4 e8 38 4c 85 ff 44 89 e0 5b 5d 41 5c e9 7c 78 54 09 e8 27 4c 85 ff 90 <0f> 0b 90 e9 47 ff ff ff e8 b9 27 ec ff e9 a8 fe ff ff e8 af 27 ec [ 72.166144][ T5835] RSP: 0018:ffffc90003097c70 EFLAGS: 00010293 [ 72.172234][ T5835] RAX: 0000000000000000 RBX: ffff8881412da720 RCX: ffffffff8236aa30 [ 72.180224][ T5835] RDX: ffff888023770000 RSI: ffffffff8236aae9 RDI: 0000000000000007 [ 72.188187][ T5835] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 72.196177][ T5835] R10: 0000000000000000 R11: 0000000000000001 R12: 0000200000ffe000 [ 72.204172][ T5835] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000000000000 [ 72.212155][ T5835] FS: 00005555932d8380(0000) GS:ffff888124815000(0000) knlGS:0000000000000000 [ 72.221115][ T5835] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.227683][ T5835] CR2: 00000000005fdeb8 CR3: 0000000073770000 CR4: 00000000003526f0 [ 72.235687][ T5835] Call Trace: [ 72.238966][ T5835] [ 72.241925][ T5835] do_mmap+0xd23/0x1210 [ 72.246105][ T5835] ? __pfx_do_mmap+0x10/0x10 [ 72.250714][ T5835] ? __pfx_down_write_killable+0x10/0x10 [ 72.256361][ T5835] vm_mmap_pgoff+0x281/0x450 [ 72.260981][ T5835] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 72.266104][ T5835] ? __fget_files+0x20e/0x3c0 [ 72.270797][ T5835] ksys_mmap_pgoff+0x32c/0x5c0 [ 72.275567][ T5835] ? _raw_spin_unlock_irq+0x23/0x50 [ 72.280788][ T5835] __x64_sys_mmap+0x125/0x190 [ 72.285470][ T5835] do_syscall_64+0xcd/0x4c0 [ 72.289960][ T5835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.295869][ T5835] RIP: 0033:0x7f383304b3a9 [ 72.300332][ T5835] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 72.319957][ T5835] RSP: 002b:00007ffeda5c4738 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 72.328397][ T5835] RAX: ffffffffffffffda RBX: 00007ffeda5c4918 RCX: 00007f383304b3a9 [ 72.336385][ T5835] RDX: 00000000027ffff3 RSI: 0000000000001000 RDI: 0000200000ffe000 [ 72.344381][ T5835] RBP: 00007f38330be610 R08: 0000000000000005 R09: 0000000000000000 [ 72.352363][ T5835] R10: 0000000004012011 R11: 0000000000000246 R12: 0000000000000001 [ 72.360370][ T5835] R13: 00007ffeda5c4908 R14: 0000000000000001 R15: 0000000000000001 [ 72.368343][ T5835] [ 72.371373][ T5835] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 72.378648][ T5835] CPU: 1 UID: 0 PID: 5835 Comm: syz-executor634 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 72.391045][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 72.401089][ T5835] Call Trace: [ 72.404355][ T5835] [ 72.407271][ T5835] dump_stack_lvl+0x3d/0x1f0 [ 72.411857][ T5835] panic+0x71c/0x800 [ 72.415747][ T5835] ? __pfx_panic+0x10/0x10 [ 72.420157][ T5835] ? show_trace_log_lvl+0x29b/0x3e0 [ 72.425355][ T5835] ? check_panic_on_warn+0x1f/0xb0 [ 72.430461][ T5835] ? path_noexec+0x1ca/0x230 [ 72.435044][ T5835] check_panic_on_warn+0xab/0xb0 [ 72.439982][ T5835] __warn+0xf6/0x3c0 [ 72.443865][ T5835] ? path_noexec+0x1ca/0x230 [ 72.448444][ T5835] report_bug+0x3c3/0x580 [ 72.452775][ T5835] ? path_noexec+0x1ca/0x230 [ 72.457355][ T5835] handle_bug+0x184/0x210 [ 72.461678][ T5835] exc_invalid_op+0x17/0x50 [ 72.466168][ T5835] asm_exc_invalid_op+0x1a/0x20 [ 72.471016][ T5835] RIP: 0010:path_noexec+0x1ca/0x230 [ 72.476216][ T5835] Code: ff 83 e3 02 48 89 de e8 b4 47 85 ff 48 85 db 41 0f 95 c4 e8 38 4c 85 ff 44 89 e0 5b 5d 41 5c e9 7c 78 54 09 e8 27 4c 85 ff 90 <0f> 0b 90 e9 47 ff ff ff e8 b9 27 ec ff e9 a8 fe ff ff e8 af 27 ec [ 72.495816][ T5835] RSP: 0018:ffffc90003097c70 EFLAGS: 00010293 [ 72.501877][ T5835] RAX: 0000000000000000 RBX: ffff8881412da720 RCX: ffffffff8236aa30 [ 72.509834][ T5835] RDX: ffff888023770000 RSI: ffffffff8236aae9 RDI: 0000000000000007 [ 72.517793][ T5835] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 72.525749][ T5835] R10: 0000000000000000 R11: 0000000000000001 R12: 0000200000ffe000 [ 72.533709][ T5835] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000000000000 [ 72.541677][ T5835] ? path_noexec+0x110/0x230 [ 72.546258][ T5835] ? path_noexec+0x1c9/0x230 [ 72.550840][ T5835] do_mmap+0xd23/0x1210 [ 72.554984][ T5835] ? __pfx_do_mmap+0x10/0x10 [ 72.559556][ T5835] ? __pfx_down_write_killable+0x10/0x10 [ 72.565278][ T5835] vm_mmap_pgoff+0x281/0x450 [ 72.569876][ T5835] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 72.574987][ T5835] ? __fget_files+0x20e/0x3c0 [ 72.579664][ T5835] ksys_mmap_pgoff+0x32c/0x5c0 [ 72.584424][ T5835] ? _raw_spin_unlock_irq+0x23/0x50 [ 72.589614][ T5835] __x64_sys_mmap+0x125/0x190 [ 72.594311][ T5835] do_syscall_64+0xcd/0x4c0 [ 72.598829][ T5835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.604718][ T5835] RIP: 0033:0x7f383304b3a9 [ 72.609126][ T5835] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 72.628729][ T5835] RSP: 002b:00007ffeda5c4738 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 72.637138][ T5835] RAX: ffffffffffffffda RBX: 00007ffeda5c4918 RCX: 00007f383304b3a9 [ 72.645098][ T5835] RDX: 00000000027ffff3 RSI: 0000000000001000 RDI: 0000200000ffe000 [ 72.653055][ T5835] RBP: 00007f38330be610 R08: 0000000000000005 R09: 0000000000000000 [ 72.661019][ T5835] R10: 0000000004012011 R11: 0000000000000246 R12: 0000000000000001 [ 72.668984][ T5835] R13: 00007ffeda5c4908 R14: 0000000000000001 R15: 0000000000000001 [ 72.676959][ T5835] [ 72.680173][ T5835] Kernel Offset: disabled [ 72.684481][ T5835] Rebooting in 86400 seconds..