./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor333100577 <...> [ 6.176403][ T24] audit: type=1400 audit(1743909629.840:56): avc: denied { read } for pid=146 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6.184628][ T24] audit: type=1400 audit(1743909629.840:57): avc: denied { open } for pid=146 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=411 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6.387664][ T24] audit: type=1400 audit(1743909630.050:58): avc: denied { use } for pid=175 comm="ssh-keygen" path="/dev/null" dev="devtmpfs" ino=4 scontext=system_u:system_r:ssh_keygen_t tcontext=system_u:system_r:kernel_t tclass=fd permissive=1 [ 6.548906][ T24] audit: type=1400 audit(1743909630.220:59): avc: denied { search } for pid=175 comm="ssh-keygen" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:ssh_keygen_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 6.575233][ T24] audit: type=1400 audit(1743909630.240:60): avc: denied { use } for pid=180 comm="sshd" path="/dev/null" dev="devtmpfs" ino=4 scontext=system_u:system_r:sshd_t tcontext=system_u:system_r:kernel_t tclass=fd permissive=1 [ 12.334959][ T24] audit: type=1400 audit(1743909636.000:61): avc: denied { transition } for pid=215 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 12.342779][ T24] audit: type=1400 audit(1743909636.000:62): avc: denied { noatsecure } for pid=215 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 12.347775][ T24] audit: type=1400 audit(1743909636.000:63): avc: denied { write } for pid=215 comm="sh" path="pipe:[13894]" dev="pipefs" ino=13894 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 12.355316][ T24] audit: type=1400 audit(1743909636.000:64): avc: denied { rlimitinh } for pid=215 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 12.361302][ T24] audit: type=1400 audit(1743909636.000:65): avc: denied { siginh } for pid=215 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.20' (ED25519) to the list of known hosts. execve("./syz-executor333100577", ["./syz-executor333100577"], 0x7fff5a566350 /* 10 vars */) = 0 brk(NULL) = 0x55556c02d000 brk(0x55556c02dd00) = 0x55556c02dd00 arch_prctl(ARCH_SET_FS, 0x55556c02d380) = 0 set_tid_address(0x55556c02d650) = 287 set_robust_list(0x55556c02d660, 24) = 0 rseq(0x55556c02dca0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor333100577", 4096) = 27 getrandom("\x04\x46\xc1\x61\xf6\x9f\xa3\x39", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55556c02dd00 brk(0x55556c04ed00) = 0x55556c04ed00 brk(0x55556c04f000) = 0x55556c04f000 mprotect(0x7fd164a4f000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 write(1, "executing program\n", 18executing program ) = 18 mkdir("./file0", 000) = 0 mkdirat(AT_FDCWD, "./file1", 000) = 0 mkdir("./bus", 0222) = 0 mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,metacopy=on,") = 0 mount("./bus", "./bus", "incremental-fs", 0, NULL) = 0 open("./file0", O_RDONLY) = 3 mknodat(3, "./file1", 000) = 0 chdir("./bus") = 0 link("./file1", "./bus") = 0 [ 22.064705][ T24] audit: type=1400 audit(1743909645.730:66): avc: denied { execmem } for pid=287 comm="syz-executor333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 22.073161][ T24] audit: type=1400 audit(1743909645.740:67): avc: denied { mounton } for pid=287 comm="syz-executor333" path="/root/bus" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 22.079066][ T24] audit: type=1400 audit(1743909645.740:68): avc: denied { unlink } for pid=287 comm="syz-executor333" name="#1" dev="sda1" ino=1932 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 22.086378][ T287] general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] PREEMPT SMP KASAN [ 22.088805][ T24] audit: type=1400 audit(1743909645.740:69): avc: denied { mount } for pid=287 comm="syz-executor333" name="/" dev="overlay" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 22.099717][ T287] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 22.099729][ T287] CPU: 0 PID: 287 Comm: syz-executor333 Not tainted 5.10.234-syzkaller-00033-g094fc3778d6b #0 [ 22.099735][ T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 22.099772][ T287] RIP: 0010:security_inode_getattr+0x47/0x130 [ 22.099790][ T287] Code: 3e ff 49 8d 5f 08 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 37 71 7c ff 48 8b 1b 48 83 c3 30 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 1a 71 7c ff 48 8b 1b 48 83 c3 0c [ 22.122161][ T24] audit: type=1400 audit(1743909645.740:70): avc: denied { mount } for pid=287 comm="syz-executor333" name="/" dev="incremental-fs" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 22.130028][ T287] RSP: 0018:ffffc90000af6fd0 EFLAGS: 00010206 [ 22.140254][ T24] audit: type=1400 audit(1743909645.740:71): avc: denied { write } for pid=287 comm="syz-executor333" name="/" dev="incremental-fs" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 22.149970][ T287] [ 22.156031][ T24] audit: type=1400 audit(1743909645.740:72): avc: denied { add_name } for pid=287 comm="syz-executor333" name="file1" dev="incremental-fs" ino=1933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 22.175315][ T287] RAX: 0000000000000006 RBX: 0000000000000030 RCX: ffff88810d1a0000 [ 22.175324][ T287] RDX: 0000000000000000 RSI: ffffc90000af7440 RDI: ffffc90000af7430 [ 22.175332][ T287] RBP: ffffc90000af6ff8 R08: dffffc0000000000 R09: ffffc90000af7430 [ 22.175339][ T287] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc90000af7440 [ 22.175355][ T287] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc90000af7430 [ 22.198642][ T24] audit: type=1400 audit(1743909645.740:73): avc: denied { link } for pid=287 comm="syz-executor333" name="file1" dev="incremental-fs" ino=1933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 22.204475][ T287] FS: 000055556c02d380(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 22.204483][ T287] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 22.204499][ T287] CR2: 0000200000001600 CR3: 000000010cb5e000 CR4: 00000000003506b0 [ 22.227380][ T24] audit: type=1400 audit(1743909645.740:74): avc: denied { write } for pid=287 comm="syz-executor333" name="bus" dev="incremental-fs" ino=1933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 22.229486][ T287] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 22.252993][ T24] audit: type=1400 audit(1743909645.740:75): avc: denied { open } for pid=287 comm="syz-executor333" path="/root/bus/bus" dev="incremental-fs" ino=1933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 22.260662][ T287] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 22.260666][ T287] Call Trace: [ 22.260685][ T287] ? __die_body+0x62/0xb0 [ 22.260705][ T287] ? die_addr+0x9f/0xd0 [ 22.411434][ T287] ? exc_general_protection+0x3ff/0x490 [ 22.416806][ T287] ? asm_exc_general_protection+0x1e/0x30 [ 22.422357][ T287] ? security_inode_getattr+0x47/0x130 [ 22.427652][ T287] vfs_getattr+0x26/0x70 [ 22.431731][ T287] ovl_copy_up_flags+0x5af/0x2700 [ 22.436596][ T287] ? ovl_maybe_copy_up+0x190/0x190 [ 22.441539][ T287] ? __kasan_check_write+0x14/0x20 [ 22.446485][ T287] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 22.451778][ T287] ? _raw_spin_lock+0x1b0/0x1b0 [ 22.456467][ T287] ? stack_trace_save+0x113/0x1c0 [ 22.461325][ T287] ? _raw_spin_lock+0x1b0/0x1b0 [ 22.466015][ T287] ? stack_trace_snprint+0xf0/0xf0 [ 22.470961][ T287] ? stack_trace_save+0x113/0x1c0 [ 22.475820][ T287] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 22.481463][ T287] ? __stack_depot_save+0x468/0x4d0 [ 22.486499][ T287] ? __kasan_slab_alloc+0xc3/0xe0 [ 22.491357][ T287] ? avc_has_perm+0x14d/0x400 [ 22.495876][ T287] ? mnt_want_write+0x1ba/0x290 [ 22.500559][ T287] ovl_maybe_copy_up+0x15a/0x190 [ 22.505330][ T287] ovl_open+0xad/0x210 [ 22.509234][ T287] ? ovl_mmap+0x4f0/0x4f0 [ 22.513401][ T287] do_dentry_open+0x7c1/0x10d0 [ 22.518002][ T287] dentry_open+0xb8/0x100 [ 22.522175][ T287] file_open+0x2a7/0x650 [ 22.526246][ T287] ? incfs_file_mmap+0x120/0x120 [ 22.531021][ T287] ? fsnotify_perm+0x324/0x4e0 [ 22.535639][ T287] ? incfs_file_mmap+0x120/0x120 [ 22.540393][ T287] do_dentry_open+0x7c1/0x10d0 [ 22.544994][ T287] vfs_open+0x73/0x80 [ 22.548812][ T287] path_openat+0x2660/0x3000 [ 22.553247][ T287] ? do_filp_open+0x460/0x460 [ 22.557759][ T287] do_filp_open+0x21c/0x460 [ 22.562094][ T287] ? vfs_tmpfile+0x2b0/0x2b0 [ 22.566522][ T287] ? get_unused_fd_flags+0x94/0xa0 [ 22.571468][ T287] do_sys_openat2+0x13f/0x710 [ 22.575977][ T287] ? do_sys_open+0x220/0x220 [ 22.580408][ T287] ? ptrace_notify+0x24c/0x350 [ 22.585006][ T287] ? do_notify_parent+0xa10/0xa10 [ 22.589867][ T287] __x64_sys_creat+0x11f/0x160 [ 22.594470][ T287] ? __x32_compat_sys_openat+0x290/0x290 [ 22.599940][ T287] ? syscall_enter_from_user_mode+0x57/0x1a0 [ 22.605750][ T287] do_syscall_64+0x34/0x70 [ 22.610001][ T287] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 22.615730][ T287] RIP: 0033:0x7fd1649dc569 [ 22.619983][ T287] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 22.639422][ T287] RSP: 002b:00007ffc13b312f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 22.647756][ T287] RAX: ffffffffffffffda RBX: 0031656c69662f2e RCX: 00007fd1649dc569 [ 22.655568][ T287] RDX: 00007fd1649dc569 RSI: 0000000000000000 RDI: 0000200000000100 [ 22.663375][ T287] RBP: 00002000000000c0 R08: 00007ffc13b314d8 R09: 00007ffc13b314d8 [ 22.671188][ T287] R10: 00007ffc13b314d8 R11: 0000000000000246 R12: 0030656c69662f2e [ 22.678998][ T287] R13: 00007ffc13b314c8 R14: 0000000000000001 R15: 0000000000000001 [ 22.686810][ T287] Modules linked in: [ 22.691005][ T287] ---[ end trace 765f20f6766f7936 ]--- [ 22.696300][ T287] RIP: 0010:security_inode_getattr+0x47/0x130 [ 22.702274][ T287] Code: 3e ff 49 8d 5f 08 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 37 71 7c ff 48 8b 1b 48 83 c3 30 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 1a 71 7c ff 48 8b 1b 48 83 c3 0c [ 22.721650][ T287] RSP: 0018:ffffc90000af6fd0 EFLAGS: 00010206 [ 22.727520][ T287] RAX: 0000000000000006 RBX: 0000000000000030 RCX: ffff88810d1a0000 [ 22.735359][ T287] RDX: 0000000000000000 RSI: ffffc90000af7440 RDI: ffffc90000af7430 [ 22.743159][ T287] RBP: ffffc90000af6ff8 R08: dffffc0000000000 R09: ffffc90000af7430 [ 22.750986][ T287] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc90000af7440 [ 22.758767][ T287] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc90000af7430 [ 22.766608][ T287] FS: 000055556c02d380(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 22.775357][ T287] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 22.781786][ T287] CR2: 0000200000001600 CR3: 000000010cb5e000 CR4: 00000000003506b0 [ 22.789576][ T287] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 22.797415][ T287] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 22.805225][ T287] Kernel panic - not syncing: Fatal exception [ 22.811279][ T287] Kernel Offset: disabled [ 22.815411][ T287] Rebooting in 86400 seconds..