./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4038188360 <...> Warning: Permanently added '10.128.0.85' (ECDSA) to the list of known hosts. execve("./syz-executor4038188360", ["./syz-executor4038188360"], 0x7ffff3734550 /* 10 vars */) = 0 brk(NULL) = 0x555555ff6000 brk(0x555555ff6c40) = 0x555555ff6c40 arch_prctl(ARCH_SET_FS, 0x555555ff6300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor4038188360", 4096) = 28 brk(0x555556017c40) = 0x555556017c40 brk(0x555556018000) = 0x555556018000 mprotect(0x7fa4c3387000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 ftruncate(3, 2097152) = 0 pwrite64(3, "\x20\x00\x00\x00\x00\x02\x00\x00\x19\x00\x00\x00\x90\x01\x00\x00\x0f\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x06\x00\x00\x00\x00\x00\x08\x00\x00\x80\x00\x00\x20\x00\x00\x00\xdb\xf4\x65\x5f\xdb\xf4\x65\x5f\x01\x00\xff\xff\x53\xef\x01\x00\x01\x00\x00\x00\xda\xf4\x65\x5f\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x0b\x00\x00\x00\x00\x04\x00\x00\x08\x00\x00\x00\xd2\xc2\x00\x00"..., 102, 1024) = 102 pwrite64(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x82\xe3\x67\x24\xc6\xf3\x4c\xaa\x84\x6e\xd2\xe5\x27\x70\x33\x78\x01\x00\x40", 31, 1248) = 31 pwrite64(3, "\x02\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\x19\x00\x0f\x00\x03\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00\x2e\x69", 32, 4096) = 32 pwrite64(3, "\x7f\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff"..., 4098, 8192) = 4098 pwrite64(3, "\xed\x41\x00\x00\x10\x00\x00\x00\xda\xf4\x65\x5f\xdb\xf4\x65\x5f\xdb\xf4\x65\x5f\x00\x00\x00\x00\x00\x00\x04\x00\x80\x00\x00\x00\x00\x00\x08\x00\x05\x00\x00\x00\x0a\xf3\x01\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x09\x00\x00\x00\x10", 61, 17408) = 61 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 mkdir("./file0", 0777) = 0 mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 close(3) = 0 chdir("./file0") = 0 open("./file0", O_RDWR|O_CREAT|O_EXCL|O_DIRECT|FASYNC, 000) = 3 write(3, "\x34\xfd\x98\xaa\x1d\x0e\x7a\xde\xc9\x37\xa5\xf3\x31\xa7\x5f\x48\x79\x34\xf5\x02\x42\xa0\x75\x19\x44\x93\x69\x72\x89\x6c\x29\xa5\x06\x8c\x8e\xcb\xa1\xaa\x0a\x4e\x2a\x63\x1b\x51\x80\xe1\xfb\xde\x79\xf4\x50\x2d\xc4\xc4\xa1\xfb\xa9\xdc\xd9\xed\x83\xe6\x39\xae\xfa\x1b\x87\x63\x1c\x33\xd1\xa8\x2c\xb0\xc0\x03\x56\x76\xdd\xfe\xb0\xfe\x79\x84\xd7\x51\x9b\x0f\x83\x9d\x49\x7f\xc9\xd6\x4e\xf1\x4d\x1d\xe2\x22"..., 512) = 512 open("./file0", O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000) = 4 write(3, "\x28\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 40) = -1 EINVAL (Invalid argument) [ 20.813409][ T22] audit: type=1400 audit(1660738656.180:73): avc: denied { execmem } for pid=304 comm="syz-executor403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 20.836166][ T22] audit: type=1400 audit(1660738656.200:74): avc: denied { read write } for pid=304 comm="syz-executor403" name="loop0" dev="devtmpfs" ino=9371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 20.861913][ T304] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 20.863639][ T22] audit: type=1400 audit(1660738656.200:75): avc: denied { open } for pid=304 comm="syz-executor403" path="/dev/loop0" dev="devtmpfs" ino=9371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 20.877068][ T304] ------------[ cut here ]------------ [ 20.895082][ T22] audit: type=1400 audit(1660738656.200:76): avc: denied { ioctl } for pid=304 comm="syz-executor403" path="/dev/loop0" dev="devtmpfs" ino=9371 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 20.900293][ T304] kernel BUG at fs/ext4/inode.c:2837! [ 20.926022][ T22] audit: type=1400 audit(1660738656.200:77): avc: denied { mounton } for pid=304 comm="syz-executor403" path="/root/file0" dev="sda1" ino=1138 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 20.931782][ T304] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 20.954264][ T22] audit: type=1400 audit(1660738656.230:78): avc: denied { mount } for pid=304 comm="syz-executor403" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 20.959991][ T304] CPU: 1 PID: 304 Comm: syz-executor403 Not tainted 5.4.197-syzkaller-00009-g2bf0b614f0fb #0 [ 20.981992][ T22] audit: type=1400 audit(1660738656.230:79): avc: denied { write } for pid=304 comm="syz-executor403" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 20.991846][ T304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 20.991873][ T304] RIP: 0010:ext4_writepages+0x356c/0x3590 [ 20.991885][ T304] Code: 94 c3 40 0f 94 c6 31 ff e8 51 60 a5 ff 84 db 75 2e e8 b8 5d a5 ff 49 bf 00 00 00 00 00 fc ff df e9 3d cd ff ff e8 a4 5d a5 ff <0f> 0b e8 9d 5d a5 ff 0f 0b e8 96 5d a5 ff e8 c1 4c 45 ff eb 9e e8 [ 21.014029][ T22] audit: type=1400 audit(1660738656.230:80): avc: denied { add_name } for pid=304 comm="syz-executor403" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 21.023758][ T304] RSP: 0018:ffff8881de3ef890 EFLAGS: 00010293 [ 21.023765][ T304] RAX: ffffffff81baf54c RBX: 0000018410000000 RCX: ffff8881de0a8000 [ 21.023770][ T304] RDX: 0000000000000000 RSI: 0000010000000000 RDI: 0000000000000000 [ 21.023775][ T304] RBP: 0000010000000000 R08: ffffffff81bac844 R09: ffffed103cd0fc80 [ 21.023778][ T304] R10: ffffed103cd0fc80 R11: 1ffff1103cd0fc7f R12: ffff8881e687e4a8 [ 21.023788][ T304] R13: ffff8881de369000 R14: 0000000000000001 R15: dffffc0000000000 [ 21.029895][ T22] audit: type=1400 audit(1660738656.230:81): avc: denied { create } for pid=304 comm="syz-executor403" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 21.049054][ T304] FS: 0000555555ff6300(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 21.049058][ T304] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 21.049063][ T304] CR2: 000055e02c0570c8 CR3: 00000001de1c2000 CR4: 00000000003406e0 [ 21.049070][ T304] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 21.049074][ T304] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 21.049077][ T304] Call Trace: [ 21.049097][ T304] ? __ext4_handle_dirty_metadata+0x27d/0x620 [ 21.070332][ T22] audit: type=1400 audit(1660738656.230:82): avc: denied { read write open } for pid=304 comm="syz-executor403" path="/root/file0/file0" dev="loop0" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 21.075924][ T304] ? balance_dirty_pages+0x20bb/0x2380 [ 21.075944][ T304] ? ext4_readpage+0x2c0/0x2c0 [ 21.218718][ T304] do_writepages+0xda/0x1f0 [ 21.223197][ T304] file_write_and_wait_range+0x2cd/0x360 [ 21.228801][ T304] __generic_file_fsync+0x6e/0x190 [ 21.233879][ T304] ext4_sync_file+0x266/0xc70 [ 21.238523][ T304] ext4_file_write_iter+0x963/0x1040 [ 21.243777][ T304] ? iov_iter_init+0x83/0x160 [ 21.248422][ T304] __vfs_write+0x4f9/0x6a0 [ 21.252807][ T304] vfs_write+0x210/0x4f0 [ 21.257019][ T304] ksys_write+0x158/0x260 [ 21.261319][ T304] do_syscall_64+0xcb/0x1c0 [ 21.265788][ T304] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 21.271662][ T304] RIP: 0033:0x7fa4c331a029 [ 21.276059][ T304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 21.295644][ T304] RSP: 002b:00007ffeb3e2d1e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 21.304021][ T304] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007fa4c331a029 [ 21.311974][ T304] RDX: 0000000000000016 RSI: 0000000020000380 RDI: 0000000000000004 [ 21.319926][ T304] RBP: 00007fa4c32d9820 R08: 0000000000000000 R09: 0000000000000000 [ 21.327864][ T304] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa4c32d98b0 [ 21.335803][ T304] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 21.343743][ T304] Modules linked in: [ 21.347749][ T304] ---[ end trace cbf7761ff9781116 ]--- [ 21.353267][ T304] RIP: 0010:ext4_writepages+0x356c/0x3590 [ 21.358952][ T304] Code: 94 c3 40 0f 94 c6 31 ff e8 51 60 a5 ff 84 db 75 2e e8 b8 5d a5 ff 49 bf 00 00 00 00 00 fc ff df e9 3d cd ff ff e8 a4 5d a5 ff <0f> 0b e8 9d 5d a5 ff 0f 0b e8 96 5d a5 ff e8 c1 4c 45 ff eb 9e e8 [ 21.378581][ T304] RSP: 0018:ffff8881de3ef890 EFLAGS: 00010293 [ 21.384648][ T304] RAX: ffffffff81baf54c RBX: 0000018410000000 RCX: ffff8881de0a8000 [ 21.392624][ T304] RDX: 0000000000000000 RSI: 0000010000000000 RDI: 0000000000000000 [ 21.400572][ T304] RBP: 0000010000000000 R08: ffffffff81bac844 R09: ffffed103cd0fc80 [ 21.408543][ T304] R10: ffffed103cd0fc80 R11: 1ffff1103cd0fc7f R12: ffff8881e687e4a8 [ 21.416523][ T304] R13: ffff8881de369000 R14: 0000000000000001 R15: dffffc0000000000 [ 21.424500][ T304] FS: 0000555555ff6300(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 21.433416][ T304] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 21.439970][ T304] CR2: 000055e02c0570c8 CR3: 00000001de1c2000 CR4: 00000000003406e0 [ 21.447938][ T304] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 21.455904][ T304] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 21.463863][ T304] Kernel panic - not syncing: Fatal exception [ 21.470067][ T304] Kernel Offset: disabled [ 21.474367][ T304] Rebooting in 86400 seconds..