./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3345177051
<...>
[ 97.145117][ T920] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.0.238' (ED25519) to the list of known hosts.
execve("./syz-executor3345177051", ["./syz-executor3345177051"], 0x7ffe98fa8720 /* 10 vars */) = 0
brk(NULL) = 0x555556e7b000
brk(0x555556e7bd00) = 0x555556e7bd00
arch_prctl(ARCH_SET_FS, 0x555556e7b380) = 0
set_tid_address(0x555556e7b650) = 5062
set_robust_list(0x555556e7b660, 24) = 0
rseq(0x555556e7bca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor3345177051", 4096) = 28
getrandom("\xd7\x48\x5a\xf8\xe6\xad\xce\xbc", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x555556e7bd00
brk(0x555556e9cd00) = 0x555556e9cd00
brk(0x555556e9d000) = 0x555556e9d000
mprotect(0x7f65bdb94000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
[ 99.161603][ T27] audit: type=1400 audit(1702643916.290:83): avc: denied { execmem } for pid=5062 comm="syz-executor334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 99.181261][ T27] audit: type=1400 audit(1702643916.290:84): avc: denied { read write } for pid=5062 comm="syz-executor334" name="loop0" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556e7b650) = 5063
./strace-static-x86_64: Process 5063 attached
[ 99.207807][ T27] audit: type=1400 audit(1702643916.290:85): avc: denied { open } for pid=5062 comm="syz-executor334" path="/dev/loop0" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 99.232992][ T27] audit: type=1400 audit(1702643916.350:86): avc: denied { append } for pid=4493 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[pid 5063] set_robust_list(0x555556e7b660, 24) = 0
[pid 5063] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5063] setpgid(0, 0) = 0
[ 99.255844][ T27] audit: type=1400 audit(1702643916.350:87): avc: denied { open } for pid=4493 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 99.278880][ T27] audit: type=1400 audit(1702643916.350:88): avc: denied { getattr } for pid=4493 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[pid 5063] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5063] write(3, "1000", 4) = 4
[pid 5063] close(3) = 0
[pid 5063] memfd_create("syzkaller", 0) = 3
[pid 5063] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f65b56df000
[ 99.301965][ T27] audit: type=1400 audit(1702643916.350:89): avc: denied { ioctl } for pid=5062 comm="syz-executor334" path="/dev/loop0" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[pid 5063] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 7629503) = 7629503
[pid 5063] munmap(0x7f65b56df000, 138412032) = 0
[pid 5063] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5063] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5063] close(3) = 0
[pid 5063] mkdir("./file0", 0777) = 0
[ 99.485175][ T5063] loop0: detected capacity change from 0 to 14901
[ 99.511153][ T27] audit: type=1400 audit(1702643916.640:90): avc: denied { mounton } for pid=5063 comm="syz-executor334" path="/root/file0" dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[pid 5063] mount("/dev/loop0", "./file0", "jfs", MS_RDONLY|MS_NOSUID|MS_NODEV, "grpquota,iocharset=cp1251,gid=0x0000000000000000,discard=0x0000000000000000,discard,discard=0x000000"...) = 0
[pid 5063] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 5063] ioctl(4, LOOP_CLR_FD) = 0
[pid 5063] close(4) = 0
[ 99.534047][ T27] audit: type=1400 audit(1702643916.660:91): avc: denied { mount } for pid=5063 comm="syz-executor334" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 99.549872][ T5063] syz-executor334: attempt to access beyond end of device
[ 99.549872][ T5063] loop0: rw=0, sector=30728, nr_sectors = 8 limit=14901
[ 99.570232][ T5063] lbmIODone: I/O error in JFS log
[pid 5063] mount(NULL, "./file0", NULL, MS_REMOUNT, NULL) = -1 EINVAL (Invalid argument)
[ 99.572635][ T27] audit: type=1400 audit(1702643916.680:92): avc: denied { remount } for pid=5063 comm="syz-executor334" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 99.595783][ T5063] *** Log Format Error ! ***
[ 99.601473][ T5063] lmLogInit: exit(-22)
[ 99.606571][ T5063] lmLogOpen: exit(-22)
[ 99.622169][ T5063] =======================================================
[ 99.622169][ T5063] WARNING: The mand mount option has been deprecated and
[pid 5063] mount(NULL, "./file0", NULL, MS_REMOUNT|MS_MANDLOCK|MS_NODIRATIME|MS_UNBINDABLE, NULL) = 0
[ 99.622169][ T5063] and is ignored by this kernel. Remove the mand
[ 99.622169][ T5063] option from the mount to silence this warning.
[ 99.622169][ T5063] =======================================================
[ 99.661962][ T5063] ERROR: (device loop0): txBegin: read-only filesystem
[ 99.661962][ T5063]
[ 99.673665][ T5063] ERROR: (device loop0): remounting filesystem as read-only
[ 99.681249][ T5063] INFO: trying to register non-static key.
[ 99.687047][ T5063] The code is fine but needs lockdep annotation, or maybe
[ 99.694168][ T5063] you didn't initialize this object before use?
[ 99.700394][ T5063] turning off the locking correctness validator.
[ 99.706712][ T5063] CPU: 1 PID: 5063 Comm: syz-executor334 Not tainted 6.7.0-rc5-syzkaller-00125-gc7402612e2e6 #0
[ 99.717126][ T5063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
[ 99.727184][ T5063] Call Trace:
[ 99.730480][ T5063]
[ 99.733413][ T5063] dump_stack_lvl+0xd9/0x1b0
[ 99.738015][ T5063] register_lock_class+0xc1e/0x1220
[ 99.743254][ T5063] ? filter_irq_stacks+0x90/0x90
[ 99.748204][ T5063] ? is_dynamic_key+0x200/0x200
[ 99.753077][ T5063] ? save_trace+0x4e/0xb30
[ 99.757513][ T5063] ? _find_first_zero_bit+0x94/0xb0
[ 99.762740][ T5063] __lock_acquire+0x112/0x3b20
[ 99.767526][ T5063] ? lockdep_unlock+0x11b/0x290
[ 99.772387][ T5063] ? lockdep_hardirqs_on_prepare+0x420/0x420
[ 99.778381][ T5063] ? lockdep_hardirqs_on_prepare+0x420/0x420
[ 99.784406][ T5063] lock_acquire+0x1ae/0x520
[ 99.788951][ T5063] ? __wake_up+0x1c/0x50
[ 99.793217][ T5063] ? lock_sync+0x190/0x190
[ 99.797655][ T5063] ? lock_sync+0x190/0x190
[ 99.802110][ T5063] ? do_raw_spin_lock+0x12e/0x2b0
[ 99.807154][ T5063] _raw_spin_lock_irqsave+0x3a/0x50
[ 99.812366][ T5063] ? __wake_up+0x1c/0x50
[ 99.816624][ T5063] __wake_up+0x1c/0x50
[ 99.820727][ T5063] txEnd+0x98/0x5a0
[ 99.824557][ T5063] __jfs_xattr_set+0xe3/0x150
[ 99.829356][ T5063] ? __jfs_setxattr+0x1060/0x1060
[ 99.834395][ T5063] ? xattr_full_name+0x44/0x90
[ 99.839188][ T5063] ? __jfs_xattr_set+0x150/0x150
[ 99.844146][ T5063] __vfs_setxattr+0x173/0x1d0
[ 99.848838][ T5063] ? __vfs_removexattr+0x1c0/0x1c0
[ 99.853960][ T5063] __vfs_setxattr_noperm+0x127/0x5e0
[ 99.859256][ T5063] __vfs_setxattr_locked+0x17e/0x250
[ 99.864546][ T5063] vfs_setxattr+0x146/0x350
[ 99.869050][ T5063] ? save_trace+0x4e/0xb30
[ 99.873482][ T5063] ? __vfs_setxattr_locked+0x250/0x250
[ 99.878950][ T5063] do_setxattr+0x142/0x170
[ 99.883372][ T5063] setxattr+0x159/0x170
[ 99.887535][ T5063] ? do_setxattr+0x170/0x170
[ 99.892138][ T5063] ? mnt_get_write_access+0x20c/0x300
[ 99.897528][ T5063] path_setxattr+0x175/0x1d0
[ 99.902124][ T5063] ? setxattr+0x170/0x170
[ 99.906459][ T5063] ? _raw_spin_unlock_irq+0x23/0x50
[ 99.911681][ T5063] ? _raw_spin_unlock_irq+0x2e/0x50
[ 99.916898][ T5063] ? ptrace_notify+0xf4/0x130
[ 99.921582][ T5063] __x64_sys_setxattr+0xc4/0x160
[ 99.926530][ T5063] ? syscall_enter_from_user_mode+0x107/0x120
[ 99.932625][ T5063] do_syscall_64+0x40/0x110
[ 99.937150][ T5063] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 99.943088][ T5063] RIP: 0033:0x7f65bdb1de29
[ 99.947504][ T5063] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 99.967118][ T5063] RSP: 002b:00007ffd720669c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[ 99.975548][ T5063] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007f65bdb1de29
[ 99.983532][ T5063] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000020000180
[ 99.991513][ T5063] RBP: 00007f65bdb67082 R08: 0000000000000002 R09: 0000555556e7c4c0
[ 99.999484][ T5063] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd720669f0
[ 100.007454][ T5063] R13: 00007ffd72066c18 R14: 431bde82d7b634db R15: 00007f65bdb6703b
[ 100.015432][ T5063]
[ 100.018477][ T5063] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
[ 100.030192][ T5063] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[ 100.038614][ T5063] CPU: 1 PID: 5063 Comm: syz-executor334 Not tainted 6.7.0-rc5-syzkaller-00125-gc7402612e2e6 #0
[ 100.049033][ T5063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
[ 100.059088][ T5063] RIP: 0010:__wake_up_common+0x9a/0x1d0
[ 100.064657][ T5063] Code: 02 00 0f 85 46 01 00 00 48 8b 5b 40 48 8d 43 e8 4c 39 fb 0f 84 a4 00 00 00 48 ba 00 00 00 00 00 fc ff df 48 89 d9 48 c1 e9 03 <80> 3c 11 00 0f 85 03 01 00 00 49 bc 00 00 00 00 00 fc ff df 4c 8b
[ 100.084283][ T5063] RSP: 0018:ffffc900033c7840 EFLAGS: 00010046
[ 100.090345][ T5063] RAX: ffffffffffffffe8 RBX: 0000000000000000 RCX: 0000000000000000
[ 100.098332][ T5063] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffffc900025b8030
[ 100.106318][ T5063] RBP: 0000000000000000 R08: 0000000000000000 R09: fffff52000678eff
[ 100.114288][ T5063] R10: 0000000000000003 R11: 0000000000000001 R12: 0000000000000003
[ 100.122255][ T5063] R13: 0000000000000246 R14: 0000000000000000 R15: ffffc900025b8070
[ 100.130229][ T5063] FS: 0000555556e7b380(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[ 100.139161][ T5063] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 100.145765][ T5063] CR2: 0000000001c37538 CR3: 000000007ed68000 CR4: 00000000003506f0
[ 100.153743][ T5063] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 100.161720][ T5063] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 100.169722][ T5063] Call Trace:
[ 100.173007][ T5063]
[ 100.175938][ T5063] ? show_regs+0x8f/0xa0
[ 100.180192][ T5063] ? die_addr+0x4f/0xd0
[ 100.184370][ T5063] ? exc_general_protection+0x155/0x230
[ 100.189928][ T5063] ? asm_exc_general_protection+0x26/0x30
[ 100.195665][ T5063] ? __wake_up_common+0x9a/0x1d0
[ 100.200625][ T5063] __wake_up+0x31/0x50
[ 100.204703][ T5063] txEnd+0x98/0x5a0
[ 100.208528][ T5063] __jfs_xattr_set+0xe3/0x150
[ 100.213248][ T5063] ? __jfs_setxattr+0x1060/0x1060
[ 100.218314][ T5063] ? xattr_full_name+0x44/0x90
[ 100.223082][ T5063] ? __jfs_xattr_set+0x150/0x150
[ 100.228037][ T5063] __vfs_setxattr+0x173/0x1d0
[ 100.232726][ T5063] ? __vfs_removexattr+0x1c0/0x1c0
[ 100.237848][ T5063] __vfs_setxattr_noperm+0x127/0x5e0
[ 100.243145][ T5063] __vfs_setxattr_locked+0x17e/0x250
[ 100.248438][ T5063] vfs_setxattr+0x146/0x350
[ 100.252963][ T5063] ? save_trace+0x4e/0xb30
[ 100.257392][ T5063] ? __vfs_setxattr_locked+0x250/0x250
[ 100.262864][ T5063] do_setxattr+0x142/0x170
[ 100.267294][ T5063] setxattr+0x159/0x170
[ 100.271459][ T5063] ? do_setxattr+0x170/0x170
[ 100.276066][ T5063] ? mnt_get_write_access+0x20c/0x300
[ 100.281466][ T5063] path_setxattr+0x175/0x1d0
[ 100.286085][ T5063] ? setxattr+0x170/0x170
[ 100.290421][ T5063] ? _raw_spin_unlock_irq+0x23/0x50
[ 100.295641][ T5063] ? _raw_spin_unlock_irq+0x2e/0x50
[ 100.300858][ T5063] ? ptrace_notify+0xf4/0x130
[ 100.305553][ T5063] __x64_sys_setxattr+0xc4/0x160
[ 100.310500][ T5063] ? syscall_enter_from_user_mode+0x107/0x120
[ 100.316594][ T5063] do_syscall_64+0x40/0x110
[ 100.321113][ T5063] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 100.327035][ T5063] RIP: 0033:0x7f65bdb1de29
[ 100.331483][ T5063] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 100.351116][ T5063] RSP: 002b:00007ffd720669c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[ 100.359531][ T5063] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007f65bdb1de29
[ 100.367506][ T5063] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000020000180
[ 100.375480][ T5063] RBP: 00007f65bdb67082 R08: 0000000000000002 R09: 0000555556e7c4c0
[ 100.383462][ T5063] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd720669f0
[ 100.391448][ T5063] R13: 00007ffd72066c18 R14: 431bde82d7b634db R15: 00007f65bdb6703b
[ 100.399443][ T5063]
[ 100.402455][ T5063] Modules linked in:
[ 100.406370][ T5063] ---[ end trace 0000000000000000 ]---
[ 100.411814][ T5063] RIP: 0010:__wake_up_common+0x9a/0x1d0
[ 100.417387][ T5063] Code: 02 00 0f 85 46 01 00 00 48 8b 5b 40 48 8d 43 e8 4c 39 fb 0f 84 a4 00 00 00 48 ba 00 00 00 00 00 fc ff df 48 89 d9 48 c1 e9 03 <80> 3c 11 00 0f 85 03 01 00 00 49 bc 00 00 00 00 00 fc ff df 4c 8b
[ 100.437040][ T5063] RSP: 0018:ffffc900033c7840 EFLAGS: 00010046
[ 100.443112][ T5063] RAX: ffffffffffffffe8 RBX: 0000000000000000 RCX: 0000000000000000
[ 100.451085][ T5063] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffffc900025b8030
[ 100.459053][ T5063] RBP: 0000000000000000 R08: 0000000000000000 R09: fffff52000678eff
[ 100.467044][ T5063] R10: 0000000000000003 R11: 0000000000000001 R12: 0000000000000003
[ 100.475016][ T5063] R13: 0000000000000246 R14: 0000000000000000 R15: ffffc900025b8070
[ 100.482991][ T5063] FS: 0000555556e7b380(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[ 100.491935][ T5063] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 100.498543][ T5063] CR2: 0000000001c37538 CR3: 000000007ed68000 CR4: 00000000003506f0
[ 100.506520][ T5063] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 100.514495][ T5063] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 100.522484][ T5063] Kernel panic - not syncing: Fatal exception
[ 100.528844][ T5063] Kernel Offset: disabled
[ 100.533168][ T5063] Rebooting in 86400 seconds..