./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor866828514 <...> Warning: Permanently added '10.128.1.13' (ED25519) to the list of known hosts. execve("./syz-executor866828514", ["./syz-executor866828514"], 0x7fffe5a15a30 /* 10 vars */) = 0 brk(NULL) = 0x5555557fc000 brk(0x5555557fcd00) = 0x5555557fcd00 arch_prctl(ARCH_SET_FS, 0x5555557fc380) = 0 set_tid_address(0x5555557fc650) = 287 set_robust_list(0x5555557fc660, 24) = 0 rseq(0x5555557fcca0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor866828514", 4096) = 27 getrandom("\x3a\x7a\x6f\xde\xc1\x7a\x1f\x5c", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555557fcd00 brk(0x55555581dd00) = 0x55555581dd00 brk(0x55555581e000) = 0x55555581e000 mprotect(0x7f3bd1eea000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0executing program ) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 write(1, "executing program\n", 18) = 18 mkdir("./file0", 000) = 0 mkdirat(AT_FDCWD, "./file1", 000) = 0 mkdir("./bus", 000) = 0 mount(NULL, "./bus", "overlay", 0, "workdir=./bus,lowerdir=./file0,upperdir=./file1,metacopy=on,") = 0 mount("./bus", "./bus", "incremental-fs", 0, NULL) = 0 open("./file0", O_RDONLY) = 3 mknodat(3, "./file1", 000) = 0 chdir("./bus") = 0 link("./file1", "./bus") = 0 [ 22.225321][ T24] audit: type=1400 audit(1727316594.300:66): avc: denied { execmem } for pid=287 comm="syz-executor866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 22.230804][ T24] audit: type=1400 audit(1727316594.310:67): avc: denied { mounton } for pid=287 comm="syz-executor866" path="/root/bus" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 22.236311][ T24] audit: type=1400 audit(1727316594.310:68): avc: denied { unlink } for pid=287 comm="syz-executor866" name="#1" dev="sda1" ino=1932 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 22.242211][ T24] audit: type=1400 audit(1727316594.310:69): avc: denied { mount } for pid=287 comm="syz-executor866" name="/" dev="overlay" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 22.244179][ T287] general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] PREEMPT SMP KASAN [ 22.254929][ T24] audit: type=1400 audit(1727316594.320:70): avc: denied { mount } for pid=287 comm="syz-executor866" name="/" dev="incremental-fs" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 22.266239][ T287] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 22.266253][ T287] CPU: 0 PID: 287 Comm: syz-executor866 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 22.266259][ T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 22.266291][ T287] RIP: 0010:security_inode_getattr+0x47/0x130 [ 22.266310][ T287] Code: 3f ff 49 8d 5f 08 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 97 a8 7c ff 48 8b 1b 48 83 c3 30 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 7a a8 7c ff 48 8b 1b 48 83 c3 0c [ 22.289821][ T24] audit: type=1400 audit(1727316594.320:71): avc: denied { write } for pid=287 comm="syz-executor866" name="/" dev="incremental-fs" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 22.297767][ T287] RSP: 0018:ffffc90000b96fd0 EFLAGS: 00010206 [ 22.308010][ T24] audit: type=1400 audit(1727316594.320:72): avc: denied { add_name } for pid=287 comm="syz-executor866" name="file1" dev="incremental-fs" ino=1933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 22.317703][ T287] [ 22.317727][ T287] RAX: 0000000000000006 RBX: 0000000000000030 RCX: ffff88811f88cf00 [ 22.323943][ T24] audit: type=1400 audit(1727316594.320:73): avc: denied { link } for pid=287 comm="syz-executor866" name="file1" dev="incremental-fs" ino=1933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 22.343232][ T287] RDX: 0000000000000000 RSI: ffffc90000b97440 RDI: ffffc90000b97430 [ 22.343242][ T287] RBP: ffffc90000b96ff8 R08: dffffc0000000000 R09: ffffc90000b97430 [ 22.343250][ T287] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc90000b97440 [ 22.343257][ T287] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc90000b97430 [ 22.343279][ T287] FS: 00005555557fc380(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 22.366032][ T24] audit: type=1400 audit(1727316594.320:74): avc: denied { write } for pid=287 comm="syz-executor866" name="bus" dev="incremental-fs" ino=1933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 22.371864][ T287] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 22.371872][ T287] CR2: 0000000020001600 CR3: 0000000120197000 CR4: 00000000003506b0 [ 22.371889][ T287] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 22.396392][ T24] audit: type=1400 audit(1727316594.320:75): avc: denied { open } for pid=287 comm="syz-executor866" path="/root/bus/bus" dev="incremental-fs" ino=1933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 22.397382][ T287] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 22.545009][ T287] Call Trace: [ 22.548136][ T287] ? __die_body+0x62/0xb0 [ 22.552298][ T287] ? die_addr+0x9f/0xd0 [ 22.556301][ T287] ? exc_general_protection+0x3ff/0x490 [ 22.561678][ T287] ? asm_exc_general_protection+0x1e/0x30 [ 22.567244][ T287] ? security_inode_getattr+0x47/0x130 [ 22.572526][ T287] vfs_getattr+0x26/0x70 [ 22.576615][ T287] ovl_copy_up_flags+0x5af/0x2700 [ 22.581475][ T287] ? ovl_maybe_copy_up+0x190/0x190 [ 22.586409][ T287] ? __kasan_check_write+0x14/0x20 [ 22.591377][ T287] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 22.596654][ T287] ? _raw_spin_lock+0x1b0/0x1b0 [ 22.601428][ T287] ? stack_trace_save+0x113/0x1c0 [ 22.606388][ T287] ? _raw_spin_lock+0x1b0/0x1b0 [ 22.611074][ T287] ? stack_trace_snprint+0xf0/0xf0 [ 22.616003][ T287] ? stack_trace_save+0x113/0x1c0 [ 22.620866][ T287] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 22.626509][ T287] ? __stack_depot_save+0x468/0x4d0 [ 22.631545][ T287] ? __kasan_slab_alloc+0xc3/0xe0 [ 22.636400][ T287] ? avc_has_perm+0x14d/0x400 [ 22.640919][ T287] ? mnt_want_write+0x1ba/0x290 [ 22.645601][ T287] ovl_maybe_copy_up+0x15a/0x190 [ 22.650374][ T287] ovl_open+0xad/0x210 [ 22.654276][ T287] ? ovl_mmap+0x4f0/0x4f0 [ 22.658448][ T287] do_dentry_open+0x7c1/0x10d0 [ 22.663045][ T287] dentry_open+0xb8/0x100 [ 22.667212][ T287] file_open+0x2a7/0x650 [ 22.671378][ T287] ? incfs_file_mmap+0x120/0x120 [ 22.676152][ T287] ? fsnotify_perm+0x324/0x4e0 [ 22.680755][ T287] ? incfs_file_mmap+0x120/0x120 [ 22.685524][ T287] do_dentry_open+0x7c1/0x10d0 [ 22.690124][ T287] vfs_open+0x73/0x80 [ 22.693943][ T287] path_openat+0x2660/0x3000 [ 22.698380][ T287] ? do_filp_open+0x460/0x460 [ 22.702883][ T287] do_filp_open+0x21c/0x460 [ 22.707225][ T287] ? vfs_tmpfile+0x2b0/0x2b0 [ 22.711653][ T287] ? get_unused_fd_flags+0x94/0xa0 [ 22.716595][ T287] do_sys_openat2+0x13f/0x710 [ 22.721108][ T287] ? do_sys_open+0x220/0x220 [ 22.725552][ T287] ? ptrace_notify+0x24c/0x350 [ 22.730148][ T287] ? do_notify_parent+0xa10/0xa10 [ 22.734999][ T287] __x64_sys_creat+0x11f/0x160 [ 22.739603][ T287] ? __x32_compat_sys_openat+0x290/0x290 [ 22.745068][ T287] ? syscall_enter_from_user_mode+0x57/0x1a0 [ 22.750882][ T287] do_syscall_64+0x34/0x70 [ 22.755134][ T287] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 22.760858][ T287] RIP: 0033:0x7f3bd1e77569 [ 22.765112][ T287] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 22.784550][ T287] RSP: 002b:00007ffdae4308a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 22.792796][ T287] RAX: ffffffffffffffda RBX: 0031656c69662f2e RCX: 00007f3bd1e77569 [ 22.800606][ T287] RDX: 0000000000000073 RSI: 0000000000000000 RDI: 0000000020000100 [ 22.808419][ T287] RBP: 00007f3bd1eea610 R08: 00007ffdae430a78 R09: 00007ffdae430a78 [ 22.816229][ T287] R10: 00007ffdae430a78 R11: 0000000000000246 R12: 0000000000000001 [ 22.824039][ T287] R13: 00007ffdae430a68 R14: 0000000000000001 R15: 0000000000000001 [ 22.831849][ T287] Modules linked in: [ 22.836006][ T287] ---[ end trace 9e406d8e10d33c79 ]--- [ 22.841342][ T287] RIP: 0010:security_inode_getattr+0x47/0x130 [ 22.847174][ T287] Code: 3f ff 49 8d 5f 08 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 97 a8 7c ff 48 8b 1b 48 83 c3 30 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 7a a8 7c ff 48 8b 1b 48 83 c3 0c [ 22.866655][ T287] RSP: 0018:ffffc90000b96fd0 EFLAGS: 00010206 [ 22.872677][ T287] RAX: 0000000000000006 RBX: 0000000000000030 RCX: ffff88811f88cf00 [ 22.880474][ T287] RDX: 0000000000000000 RSI: ffffc90000b97440 RDI: ffffc90000b97430 [ 22.888276][ T287] RBP: ffffc90000b96ff8 R08: dffffc0000000000 R09: ffffc90000b97430 [ 22.896070][ T287] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc90000b97440 [ 22.903904][ T287] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc90000b97430 [ 22.911734][ T287] FS: 00005555557fc380(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 22.920492][ T287] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 22.926880][ T287] CR2: 0000000020001600 CR3: 0000000120197000 CR4: 00000000003506b0 [ 22.934731][ T287] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 22.942545][ T287] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 22.950341][ T287] Kernel panic - not syncing: Fatal exception [ 22.956473][ T287] Kernel Offset: disabled [ 22.960603][ T287] Rebooting in 86400 seconds..