./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3705059034
<...>
Warning: Permanently added '10.128.0.141' (ECDSA) to the list of known hosts.
[ 81.711151][ T26] audit: type=1400 audit(1686879206.993:83): avc: denied { write } for pid=4991 comm="strace-static-x" path="pipe:[30061]" dev="pipefs" ino=30061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
execve("./syz-executor3705059034", ["./syz-executor3705059034"], 0x7ffee903ea50 /* 10 vars */) = 0
brk(NULL) = 0x555555c4e000
brk(0x555555c4ec40) = 0x555555c4ec40
arch_prctl(ARCH_SET_FS, 0x555555c4e300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor3705059034", 4096) = 28
brk(0x555555c6fc40) = 0x555555c6fc40
brk(0x555555c70000) = 0x555555c70000
mprotect(0x7f596c935000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
memfd_create("syzkaller", 0) = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5964477000
[ 81.740795][ T26] audit: type=1400 audit(1686879207.023:84): avc: denied { append } for pid=4428 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 81.756704][ T4994] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=4994 'syz-executor370'
[ 81.763611][ T26] audit: type=1400 audit(1686879207.023:85): avc: denied { open } for pid=4428 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 81.796497][ T26] audit: type=1400 audit(1686879207.023:86): avc: denied { getattr } for pid=4428 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 81.819851][ T26] audit: type=1400 audit(1686879207.033:87): avc: denied { execmem } for pid=4994 comm="syz-executor370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
munmap(0x7f5964477000, 16777216) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
close(3) = 0
mkdir("./file0", 0777) = 0
[ 81.987121][ T26] audit: type=1400 audit(1686879207.263:88): avc: denied { read write } for pid=4994 comm="syz-executor370" name="loop0" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 81.990102][ T4994] loop0: detected capacity change from 0 to 32768
[ 82.018328][ T26] audit: type=1400 audit(1686879207.263:89): avc: denied { open } for pid=4994 comm="syz-executor370" path="/dev/loop0" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 82.043029][ T26] audit: type=1400 audit(1686879207.263:90): avc: denied { ioctl } for pid=4994 comm="syz-executor370" path="/dev/loop0" dev="devtmpfs" ino=648 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 82.044901][ T4994] BTRFS: device fsid 5ac8a51e-da3a-4998-8e66-e1df06b87bc8 devid 1 transid 8 /dev/loop0 scanned by syz-executor370 (4994)
[ 82.069417][ T26] audit: type=1400 audit(1686879207.303:91): avc: denied { mounton } for pid=4994 comm="syz-executor370" path="/root/file0" dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[ 82.112235][ T4994] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[ 82.121984][ T4994] BTRFS info (device loop0): using free space tree
mount("/dev/loop0", "./file0", "btrfs", 0, "noflushoncommit,rescan_uuid_tree,noacl,noautodefrag,datacow,") = 0
openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
ioctl(4, LOOP_CLR_FD) = 0
[ 82.146529][ T4994] BTRFS info (device loop0): enabling ssd optimizations
[ 82.153827][ T4994] BTRFS info (device loop0): auto enabling async discard
[ 82.164210][ T4994] BTRFS info (device loop0): checking UUID tree
close(4) = 0
ioctl(3, BTRFS_IOC_SUBVOL_SETFLAGS, BTRFS_SUBVOL_RDONLY) = 0
[ 82.175180][ T26] audit: type=1400 audit(1686879207.453:92): avc: denied { mount } for pid=4994 comm="syz-executor370" name="/" dev="loop0" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 82.224811][ T4994] ------------[ cut here ]------------
[ 82.230989][ T4994] WARNING: CPU: 0 PID: 4994 at fs/read_write.c:504 __kernel_write_iter+0x5f9/0x7a0
[ 82.240462][ T4994] Modules linked in:
[ 82.244402][ T4994] CPU: 0 PID: 4994 Comm: syz-executor370 Not tainted 6.4.0-rc6-syzkaller-00037-gb6dad5178cea #0
[ 82.254971][ T4994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 82.265121][ T4994] RIP: 0010:__kernel_write_iter+0x5f9/0x7a0
[ 82.271161][ T4994] Code: 05 00 00 4c 89 e2 48 c7 c6 40 96 5b 8a 48 c7 c7 e0 95 5b 8a e8 98 38 83 ff 49 c7 c6 ea ff ff ff e9 c0 fe ff ff e8 d7 54 9f ff <0f> 0b 49 c7 c6 f7 ff ff ff e9 ad fe ff ff e8 c4 54 9f ff 4c 89 ea
[ 82.290904][ T4994] RSP: 0018:ffffc9000353f6c0 EFLAGS: 00010293
[ 82.297121][ T4994] RAX: 0000000000000000 RBX: 00000000000a801d RCX: 0000000000000000
[ 82.305380][ T4994] RDX: ffff88807a77e1c0 RSI: ffffffff81e412d9 RDI: 0000000000000005
[ 82.313616][ T4994] RBP: 1ffff920006a7eda R08: 0000000000000005 R09: 0000000000000000
[ 82.321688][ T4994] R10: 0000000000000000 R11: 0000000000000005 R12: ffff88807be74500
[ 82.329779][ T4994] R13: ffff88807be7457c R14: 0000000000000000 R15: ffff88807d622808
[ 82.337824][ T4994] FS: 0000555555c4e300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 82.346901][ T4994] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 82.353611][ T4994] CR2: 00007ffee903cf10 CR3: 000000002b841000 CR4: 00000000003506f0
[ 82.361696][ T4994] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 82.369793][ T4994] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 82.377813][ T4994] Call Trace:
[ 82.381199][ T4994]
[ 82.384174][ T4994] ? __warn+0xe6/0x390
[ 82.388404][ T4994] ? __kernel_write_iter+0x5f9/0x7a0
[ 82.394028][ T4994] ? report_bug+0x2da/0x500
[ 82.398632][ T4994] ? handle_bug+0x3c/0x70
[ 82.403085][ T4994] ? exc_invalid_op+0x18/0x50
[ 82.407915][ T4994] ? asm_exc_invalid_op+0x1a/0x20
[ 82.413732][ T4994] ? __kernel_write_iter+0x5f9/0x7a0
[ 82.419081][ T4994] ? __kernel_write_iter+0x5f9/0x7a0
[ 82.424536][ T4994] ? vfs_read+0x8a0/0x8a0
[ 82.428965][ T4994] ? avc_policy_seqno+0x9/0x10
[ 82.433878][ T4994] ? selinux_file_permission+0x96/0x520
[ 82.439545][ T4994] ? security_file_permission+0xaf/0xd0
[ 82.445168][ T4994] kernel_write+0x1c1/0x670
[ 82.449818][ T4994] ? btrfs_destroy_cachep+0x30/0x30
[ 82.455098][ T4994] ? __kernel_write+0x110/0x110
[ 82.460072][ T4994] btrfs_ioctl_send+0x2317/0x67b0
[ 82.465169][ T4994] ? changed_cb+0x3530/0x3530
[ 82.470011][ T4994] ? __might_fault+0xe2/0x190
[ 82.474751][ T4994] ? lock_downgrade+0x690/0x690
[ 82.479741][ T4994] ? _copy_from_user+0x5c/0xf0
[ 82.484758][ T4994] _btrfs_ioctl_send+0x100/0x2d0
[ 82.489918][ T4994] ? exclop_start_or_cancel_reloc+0x230/0x230
[ 82.496048][ T4994] ? avc_ss_reset+0x140/0x140
[ 82.500825][ T4994] ? tomoyo_path_number_perm+0x245/0x570
[ 82.506519][ T4994] ? lock_downgrade+0x690/0x690
[ 82.511492][ T4994] ? __kmem_cache_free+0x182/0x2c0
[ 82.516742][ T4994] ? tomoyo_path_number_perm+0x43b/0x570
[ 82.522467][ T4994] btrfs_ioctl+0x3c0f/0x5b30
[ 82.527112][ T4994] ? tomoyo_path_number_perm+0x166/0x570
[ 82.532865][ T4994] ? tomoyo_execute_permission+0x4a0/0x4a0
[ 82.538746][ T4994] ? btrfs_ioctl_get_supported_features+0x50/0x50
[ 82.545246][ T4994] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 82.551255][ T4994] ? do_vfs_ioctl+0x132/0x1670
[ 82.556036][ T4994] ? vfs_fileattr_set+0xc40/0xc40
[ 82.561150][ T4994] ? ioctl_has_perm.constprop.0.isra.0+0x28c/0x420
[ 82.567722][ T4994] ? ioctl_has_perm.constprop.0.isra.0+0x295/0x420
[ 82.574303][ T4994] ? selinux_bprm_creds_for_exec+0xb20/0xb20
[ 82.580473][ T4994] ? find_held_lock+0x2d/0x110
[ 82.585279][ T4994] ? name_to_dev_t+0x62/0x9e0
[ 82.590146][ T4994] ? lock_downgrade+0x690/0x690
[ 82.595048][ T4994] ? selinux_file_ioctl+0xba/0x280
[ 82.600220][ T4994] ? btrfs_ioctl_get_supported_features+0x50/0x50
[ 82.606772][ T4994] __x64_sys_ioctl+0x197/0x210
[ 82.611618][ T4994] do_syscall_64+0x39/0xb0
[ 82.616068][ T4994] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 82.622036][ T4994] RIP: 0033:0x7f596c8c3b69
[ 82.626480][ T4994] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 82.646173][ T4994] RSP: 002b:00007ffdfeaf5368 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 82.654664][ T4994] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f596c8c3b69
[ 82.662720][ T4994] RDX: 00000000200003c0 RSI: 0000000040489426 RDI: 0000000000000003
[ 82.670796][ T4994] RBP: 00007f596c883430 R08: 0000000000000000 R09: 0000000000000000
[ 82.678791][ T4994] R10: 00000000000051af R11: 0000000000000246 R12: 00007f596c8834c0
[ 82.686848][ T4994] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 82.694990][ T4994]
[ 82.698047][ T4994] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 82.705382][ T4994] CPU: 0 PID: 4994 Comm: syz-executor370 Not tainted 6.4.0-rc6-syzkaller-00037-gb6dad5178cea #0
[ 82.715818][ T4994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 82.725893][ T4994] Call Trace:
[ 82.729181][ T4994]
[ 82.732119][ T4994] dump_stack_lvl+0xd9/0x150
[ 82.736727][ T4994] panic+0x686/0x730
[ 82.740660][ T4994] ? panic_smp_self_stop+0xa0/0xa0
[ 82.745792][ T4994] ? show_trace_log_lvl+0x284/0x390
[ 82.751019][ T4994] ? __kernel_write_iter+0x5f9/0x7a0
[ 82.756318][ T4994] check_panic_on_warn+0xb1/0xc0
[ 82.761279][ T4994] __warn+0xf2/0x390
[ 82.765196][ T4994] ? __kernel_write_iter+0x5f9/0x7a0
[ 82.770500][ T4994] report_bug+0x2da/0x500
[ 82.774860][ T4994] handle_bug+0x3c/0x70
[ 82.779028][ T4994] exc_invalid_op+0x18/0x50
[ 82.783543][ T4994] asm_exc_invalid_op+0x1a/0x20
[ 82.788419][ T4994] RIP: 0010:__kernel_write_iter+0x5f9/0x7a0
[ 82.794336][ T4994] Code: 05 00 00 4c 89 e2 48 c7 c6 40 96 5b 8a 48 c7 c7 e0 95 5b 8a e8 98 38 83 ff 49 c7 c6 ea ff ff ff e9 c0 fe ff ff e8 d7 54 9f ff <0f> 0b 49 c7 c6 f7 ff ff ff e9 ad fe ff ff e8 c4 54 9f ff 4c 89 ea
[ 82.813966][ T4994] RSP: 0018:ffffc9000353f6c0 EFLAGS: 00010293
[ 82.820058][ T4994] RAX: 0000000000000000 RBX: 00000000000a801d RCX: 0000000000000000
[ 82.828048][ T4994] RDX: ffff88807a77e1c0 RSI: ffffffff81e412d9 RDI: 0000000000000005
[ 82.836039][ T4994] RBP: 1ffff920006a7eda R08: 0000000000000005 R09: 0000000000000000
[ 82.844030][ T4994] R10: 0000000000000000 R11: 0000000000000005 R12: ffff88807be74500
[ 82.852108][ T4994] R13: ffff88807be7457c R14: 0000000000000000 R15: ffff88807d622808
[ 82.860111][ T4994] ? __kernel_write_iter+0x5f9/0x7a0
[ 82.865440][ T4994] ? vfs_read+0x8a0/0x8a0
[ 82.869796][ T4994] ? avc_policy_seqno+0x9/0x10
[ 82.874585][ T4994] ? selinux_file_permission+0x96/0x520
[ 82.880243][ T4994] ? security_file_permission+0xaf/0xd0
[ 82.885854][ T4994] kernel_write+0x1c1/0x670
[ 82.890394][ T4994] ? btrfs_destroy_cachep+0x30/0x30
[ 82.895623][ T4994] ? __kernel_write+0x110/0x110
[ 82.900508][ T4994] btrfs_ioctl_send+0x2317/0x67b0
[ 82.905571][ T4994] ? changed_cb+0x3530/0x3530
[ 82.910293][ T4994] ? __might_fault+0xe2/0x190
[ 82.915001][ T4994] ? lock_downgrade+0x690/0x690
[ 82.919994][ T4994] ? _copy_from_user+0x5c/0xf0
[ 82.924793][ T4994] _btrfs_ioctl_send+0x100/0x2d0
[ 82.929783][ T4994] ? exclop_start_or_cancel_reloc+0x230/0x230
[ 82.935924][ T4994] ? avc_ss_reset+0x140/0x140
[ 82.940626][ T4994] ? tomoyo_path_number_perm+0x245/0x570
[ 82.946297][ T4994] ? lock_downgrade+0x690/0x690
[ 82.951178][ T4994] ? __kmem_cache_free+0x182/0x2c0
[ 82.956314][ T4994] ? tomoyo_path_number_perm+0x43b/0x570
[ 82.961988][ T4994] btrfs_ioctl+0x3c0f/0x5b30
[ 82.966609][ T4994] ? tomoyo_path_number_perm+0x166/0x570
[ 82.972280][ T4994] ? tomoyo_execute_permission+0x4a0/0x4a0
[ 82.978125][ T4994] ? btrfs_ioctl_get_supported_features+0x50/0x50
[ 82.984578][ T4994] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 82.990681][ T4994] ? do_vfs_ioctl+0x132/0x1670
[ 82.995472][ T4994] ? vfs_fileattr_set+0xc40/0xc40
[ 83.000523][ T4994] ? ioctl_has_perm.constprop.0.isra.0+0x28c/0x420
[ 83.007049][ T4994] ? ioctl_has_perm.constprop.0.isra.0+0x295/0x420
[ 83.013576][ T4994] ? selinux_bprm_creds_for_exec+0xb20/0xb20
[ 83.019689][ T4994] ? find_held_lock+0x2d/0x110
[ 83.024497][ T4994] ? name_to_dev_t+0x62/0x9e0
[ 83.029226][ T4994] ? lock_downgrade+0x690/0x690
[ 83.034127][ T4994] ? selinux_file_ioctl+0xba/0x280
[ 83.039360][ T4994] ? btrfs_ioctl_get_supported_features+0x50/0x50
[ 83.046080][ T4994] __x64_sys_ioctl+0x197/0x210
[ 83.050872][ T4994] do_syscall_64+0x39/0xb0
[ 83.055358][ T4994] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 83.061320][ T4994] RIP: 0033:0x7f596c8c3b69
[ 83.065769][ T4994] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 83.085418][ T4994] RSP: 002b:00007ffdfeaf5368 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 83.093862][ T4994] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f596c8c3b69
[ 83.101870][ T4994] RDX: 00000000200003c0 RSI: 0000000040489426 RDI: 0000000000000003
[ 83.109894][ T4994] RBP: 00007f596c883430 R08: 0000000000000000 R09: 0000000000000000
[ 83.117900][ T4994] R10: 00000000000051af R11: 0000000000000246 R12: 00007f596c8834c0
[ 83.125902][ T4994] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 83.133907][ T4994]
[ 83.137178][ T4994] Kernel Offset: disabled
[ 83.141596][ T4994] Rebooting in 86400 seconds..