./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2133666224 <...> Warning: Permanently added '10.128.1.114' (ED25519) to the list of known hosts. execve("./syz-executor2133666224", ["./syz-executor2133666224"], 0x7ffed8c70ce0 /* 10 vars */) = 0 brk(NULL) = 0x5555567ae000 brk(0x5555567aed00) = 0x5555567aed00 arch_prctl(ARCH_SET_FS, 0x5555567ae380) = 0 set_tid_address(0x5555567ae650) = 294 set_robust_list(0x5555567ae660, 24) = 0 rseq(0x5555567aeca0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2133666224", 4096) = 28 getrandom("\x63\xb7\x8a\x31\xba\x7a\x8c\x9b", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555567aed00 brk(0x5555567cfd00) = 0x5555567cfd00 brk(0x5555567d0000) = 0x5555567d0000 mprotect(0x7fd9d21d3000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9c9d23000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 munmap(0x7fd9c9d23000, 138412032) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./mnt", 0777) = 0 [ 20.255701][ T28] audit: type=1400 audit(1698149343.655:66): avc: denied { execmem } for pid=294 comm="syz-executor213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 20.257761][ T294] loop0: detected capacity change from 0 to 128 [ 20.260758][ T28] audit: type=1400 audit(1698149343.655:67): avc: denied { read write } for pid=294 comm="syz-executor213" name="loop0" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 20.268377][ T28] audit: type=1400 audit(1698149343.655:68): avc: denied { open } for pid=294 comm="syz-executor213" path="/dev/loop0" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 20.269005][ T294] EXT4-fs: Ignoring removed bh option [ 20.274311][ T28] audit: type=1400 audit(1698149343.655:69): avc: denied { ioctl } for pid=294 comm="syz-executor213" path="/dev/loop0" dev="devtmpfs" ino=114 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 20.276345][ T294] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 20.300452][ T28] audit: type=1400 audit(1698149343.655:70): avc: denied { mounton } for pid=294 comm="syz-executor213" path="/root/mnt" dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 20.311254][ T294] EXT4-fs (loop0): Test dummy encryption mode enabled [ 20.313608][ T294] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. mount("/dev/loop0", "./mnt", "ext4", MS_SYNCHRONOUS, "test_dummy_encryption,stripe=0x0000000000000005,min_batch_time=0x0000000000000005,bh,dioread_nolock,"...) = 0 openat(AT_FDCWD, "./mnt", O_RDONLY|O_DIRECTORY) = 3 chdir("./mnt") = 0 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 [ 20.334008][ T28] audit: type=1400 audit(1698149343.665:71): avc: denied { module_request } for pid=294 comm="syz-executor213" kmod="crypto-hmac(sha512)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 20.371430][ T294] ext4 filesystem being mounted at /root/mnt supports timestamps until 2038 (0x7fffffff) [ 20.375528][ T28] audit: type=1400 audit(1698149343.765:72): avc: denied { mount } for pid=294 comm="syz-executor213" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 fallocate(4, 0, 0, 1048816) = -1 ENOSPC (No space left on device) open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 write(5, "\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 622629) = 40960 [ 20.383747][ T294] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 20.402958][ T28] audit: type=1400 audit(1698149343.775:73): avc: denied { write } for pid=294 comm="syz-executor213" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 20.425564][ T294] ------------[ cut here ]------------ [ 20.431821][ T28] audit: type=1400 audit(1698149343.775:74): avc: denied { add_name } for pid=294 comm="syz-executor213" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 20.436840][ T294] kernel BUG at fs/buffer.c:2717! [ 20.457292][ T28] audit: type=1400 audit(1698149343.775:75): avc: denied { create } for pid=294 comm="syz-executor213" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 20.462419][ T294] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 20.488877][ T294] CPU: 0 PID: 294 Comm: syz-executor213 Not tainted 6.1.25-syzkaller-00053-g8a67c0609445 #0 [ 20.498935][ T294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 20.508905][ T294] RIP: 0010:submit_bh_wbc+0x4e2/0x4f0 [ 20.514456][ T294] Code: 54 32 e7 ff e9 b0 fe ff ff e8 ea d1 a0 ff 0f 0b e8 e3 d1 a0 ff 0f 0b e8 dc d1 a0 ff 0f 0b e8 d5 d1 a0 ff 0f 0b e8 ce d1 a0 ff <0f> 0b e8 c7 d1 a0 ff 0f 0b 0f 1f 44 00 00 55 48 89 e5 41 57 41 56 [ 20.533988][ T294] RSP: 0018:ffffc90000de6f60 EFLAGS: 00010293 [ 20.539884][ T294] RAX: ffffffff81d40f12 RBX: 0000000000000800 RCX: ffff888108c8bcc0 [ 20.547696][ T294] RDX: 0000000000000000 RSI: 0000000000000800 RDI: 0000000000000000 [ 20.555509][ T294] RBP: ffffc90000de6fb0 R08: ffffffff81d40b90 R09: ffffed10224fd894 [ 20.563344][ T294] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000854 [ 20.571176][ T294] R13: 1ffff110224fd893 R14: ffff8881127ec498 R15: 0000000000000000 [ 20.578942][ T294] FS: 00005555567ae380(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 20.587709][ T294] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 20.594218][ T294] CR2: 00000000004571f0 CR3: 0000000120ea9000 CR4: 00000000003506b0 [ 20.602032][ T294] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 20.610450][ T294] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 20.618396][ T294] Call Trace: [ 20.621471][ T294] [ 20.624258][ T294] block_read_full_folio+0x8dd/0xa10 [ 20.629372][ T294] ? ext4_es_is_delayed+0x40/0x40 [ 20.634226][ T294] ? block_is_partially_uptodate+0x390/0x390 [ 20.640222][ T294] ext4_mpage_readpages+0x16c5/0x1ec0 [ 20.645714][ T294] ? schedule_preempt_disabled+0x20/0x20 [ 20.651292][ T294] ? _raw_spin_unlock_irq+0x60/0x70 [ 20.656310][ T294] ? blk_mq_submit_bio+0x1139/0x1d60 [ 20.661724][ T294] ? ext4_end_bio+0x4d0/0x4d0 [ 20.666228][ T294] ? down_read+0xa5a/0x10c0 [ 20.670563][ T294] ? filemap_get_read_batch+0xa79/0xae0 [ 20.676065][ T294] ext4_read_folio+0x10a/0x240 [ 20.680657][ T294] ? ext4_writepage+0x1390/0x1390 [ 20.685523][ T294] filemap_read_folio+0xfc/0x2a0 [ 20.690291][ T294] ? maybe_unlock_mmap_for_io+0x1e0/0x1e0 [ 20.695850][ T294] filemap_read+0x159d/0x24b0 [ 20.700363][ T294] ? __kernel_text_address+0xd/0x40 [ 20.705403][ T294] ? find_get_pages_range_tag+0x3e0/0x3e0 [ 20.710952][ T294] ? memset+0x35/0x40 [ 20.714770][ T294] ? fscrypt_get_encryption_info+0xe6/0x420 [ 20.720498][ T294] ? fscrypt_hash_inode_number+0x190/0x190 [ 20.726136][ T294] ? down_read+0xa5a/0x10c0 [ 20.730475][ T294] ? alloc_pipe_info+0x204/0x4b0 [ 20.735246][ T294] ? splice_direct_to_actor+0x9d3/0xbb0 [ 20.740630][ T294] ? do_splice_direct+0x27f/0x3c0 [ 20.745497][ T294] ? do_sendfile+0x616/0xfe0 [ 20.749926][ T294] ? do_syscall_64+0x3d/0xb0 [ 20.754340][ T294] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 20.760244][ T294] generic_file_read_iter+0xad/0x4e0 [ 20.765369][ T294] ext4_file_read_iter+0x330/0x470 [ 20.770314][ T294] generic_file_splice_read+0x23c/0x630 [ 20.775694][ T294] ? splice_shrink_spd+0xb0/0xb0 [ 20.780465][ T294] ? __kasan_check_read+0x11/0x20 [ 20.785327][ T294] ? fsnotify_perm+0x470/0x5d0 [ 20.789927][ T294] ? security_file_permission+0x86/0xb0 [ 20.795309][ T294] ? rw_verify_area+0xa7/0x1c0 [ 20.799908][ T294] splice_direct_to_actor+0x3fc/0xbb0 [ 20.805452][ T294] ? do_splice_direct+0x3c0/0x3c0 [ 20.810305][ T294] ? pipe_to_sendpage+0x340/0x340 [ 20.815174][ T294] ? rw_verify_area+0xa7/0x1c0 [ 20.819769][ T294] do_splice_direct+0x27f/0x3c0 [ 20.824455][ T294] ? splice_direct_to_actor+0xbb0/0xbb0 [ 20.830388][ T294] ? fsnotify_perm+0x6a/0x5d0 [ 20.834875][ T294] ? security_file_permission+0x86/0xb0 [ 20.840259][ T294] do_sendfile+0x616/0xfe0 [ 20.844527][ T294] ? do_preadv+0x350/0x350 [ 20.848760][ T294] ? ptrace_notify+0x249/0x350 [ 20.853354][ T294] __x64_sys_sendfile64+0x1ce/0x230 [ 20.858388][ T294] ? __ia32_sys_sendfile+0x240/0x240 [ 20.863610][ T294] ? syscall_enter_from_user_mode+0x6a/0x190 [ 20.869449][ T294] do_syscall_64+0x3d/0xb0 [ 20.873678][ T294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 20.879489][ T294] RIP: 0033:0x7fd9d2160a39 [ 20.883761][ T294] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 20.903722][ T294] RSP: 002b:00007ffff523bd08 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 20.912584][ T294] RAX: ffffffffffffffda RBX: 00007fd9d21a904b RCX: 00007fd9d2160a39 [ 20.920379][ T294] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 20.928286][ T294] RBP: 00007fd9d21d3610 R08: 00007ffff523bed8 R09: 00007ffff523bed8 [ 20.936178][ T294] R10: 0000000008800000 R11: 0000000000000246 R12: 0000000000000001 [ 20.943992][ T294] R13: 00007ffff523bec8 R14: 0000000000000001 R15: 0000000000000001 [ 20.951810][ T294] [ 20.954662][ T294] Modules linked in: [ 20.958583][ T294] ---[ end trace 0000000000000000 ]--- [ 20.963847][ T294] RIP: 0010:submit_bh_wbc+0x4e2/0x4f0 [ 20.969582][ T294] Code: 54 32 e7 ff e9 b0 fe ff ff e8 ea d1 a0 ff 0f 0b e8 e3 d1 a0 ff 0f 0b e8 dc d1 a0 ff 0f 0b e8 d5 d1 a0 ff 0f 0b e8 ce d1 a0 ff <0f> 0b e8 c7 d1 a0 ff 0f 0b 0f 1f 44 00 00 55 48 89 e5 41 57 41 56 [ 20.989149][ T294] RSP: 0018:ffffc90000de6f60 EFLAGS: 00010293 [ 20.995171][ T294] RAX: ffffffff81d40f12 RBX: 0000000000000800 RCX: ffff888108c8bcc0 [ 21.003008][ T294] RDX: 0000000000000000 RSI: 0000000000000800 RDI: 0000000000000000 [ 21.010818][ T294] RBP: ffffc90000de6fb0 R08: ffffffff81d40b90 R09: ffffed10224fd894 [ 21.018630][ T294] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000854 [ 21.026420][ T294] R13: 1ffff110224fd893 R14: ffff8881127ec498 R15: 0000000000000000 [ 21.034360][ T294] FS: 00005555567ae380(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 21.043156][ T294] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 21.049556][ T294] CR2: 00000000004571f0 CR3: 0000000120ea9000 CR4: 00000000003506b0 [ 21.057375][ T294] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 21.065161][ T294] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 21.072998][ T294] Kernel panic - not syncing: Fatal exception [ 21.079062][ T294] Kernel Offset: disabled [ 21.083186][ T294] Rebooting in 86400 seconds..