./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3264786192

<...>
Warning: Permanently added '10.128.1.88' (ED25519) to the list of known hosts.
execve("./syz-executor3264786192", ["./syz-executor3264786192"], 0x7ffe463c1c50 /* 10 vars */) = 0
brk(NULL)                               = 0x5555555ce000
brk(0x5555555ced40)                     = 0x5555555ced40
arch_prctl(ARCH_SET_FS, 0x5555555ce3c0) = 0
set_tid_address(0x5555555ce690)         = 294
set_robust_list(0x5555555ce6a0, 24)     = 0
rseq(0x5555555cece0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented)
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor3264786192", 4096) = 28
getrandom("\xd1\x62\x25\xde\xc3\xe4\xd1\xed", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x5555555ced40
brk(0x5555555efd40)                     = 0x5555555efd40
brk(0x5555555f0000)                     = 0x5555555f0000
mprotect(0x7fb97f164000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555555ce690) = 295
./strace-static-x86_64: Process 295 attached
[pid   295] set_robust_list(0x5555555ce6a0, 24) = 0
[pid   295] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid   295] setpgid(0, 0)               = 0
[pid   295] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid   295] write(3, "1000", 4)         = 4
[pid   295] close(3)                    = 0
[pid   295] futex(0x7fb97f16a40c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   295] rt_sigaction(SIGRT_1, {sa_handler=0x7fb97f106a40, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb97f0f80c0}, NULL, 8) = 0
[pid   295] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid   295] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb97f07e000
[pid   295] mprotect(0x7fb97f07f000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   295] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   295] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb97f09e990, parent_tid=0x7fb97f09e990, exit_signal=0, stack=0x7fb97f07e000, stack_size=0x20300, tls=0x7fb97f09e6c0} => {parent_tid=[296]}, 88) = 296
[pid   295] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   295] futex(0x7fb97f16a408, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   295] futex(0x7fb97f16a40c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 296 attached
 <unfinished ...>
[pid   296] set_robust_list(0x7fb97f09e9a0, 24) = 0
[pid   296] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   296] openat(AT_FDCWD, "/dev/fuse", O_RDWR) = 3
[pid   296] futex(0x7fb97f16a40c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   295] <... futex resumed>)        = 0
[pid   295] futex(0x7fb97f16a408, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   295] futex(0x7fb97f16a40c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   296] <... futex resumed>)        = 1
[pid   296] mkdir("./file0", 0777)      = 0
[pid   296] mount(NULL, "./file0", "fuse", 0, "fd=0x0000000000000003,rootmode=00000000000000000040000,user_id=00000000000000000000,group_id=0000000"...) = 0
[   22.150469][   T30] audit: type=1400 audit(1693946129.377:66): avc:  denied  { execmem } for  pid=294 comm="syz-executor326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   22.156887][   T30] audit: type=1400 audit(1693946129.377:67): avc:  denied  { read write } for  pid=294 comm="syz-executor326" name="loop0" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   22.164748][   T30] audit: type=1400 audit(1693946129.377:68): avc:  denied  { open } for  pid=294 comm="syz-executor326" path="/dev/loop0" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[pid   296] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid   295] <... futex resumed>)        = -1 ETIMEDOUT (Connection timed out)
[pid   295] futex(0x7fb97f16a41c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   295] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb97f05d000
[pid   295] mprotect(0x7fb97f05e000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   295] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   295] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb97f07d990, parent_tid=0x7fb97f07d990, exit_signal=0, stack=0x7fb97f05d000, stack_size=0x20300, tls=0x7fb97f07d6c0} => {parent_tid=[299]}, 88) = 299
[pid   295] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   295] futex(0x7fb97f16a418, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   295] futex(0x7fb97f16a41c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 299 attached
 <unfinished ...>
[pid   299] set_robust_list(0x7fb97f07d9a0, 24) = 0
[pid   299] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[   22.175951][   T30] audit: type=1400 audit(1693946129.377:69): avc:  denied  { ioctl } for  pid=294 comm="syz-executor326" path="/dev/loop0" dev="devtmpfs" ino=112 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   22.201494][   T30] audit: type=1400 audit(1693946129.377:70): avc:  denied  { read write } for  pid=295 comm="syz-executor326" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   22.224977][   T30] audit: type=1400 audit(1693946129.377:71): avc:  denied  { open } for  pid=295 comm="syz-executor326" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[pid   299] setxattr("./file0/file0", NULL, NULL, 0, 0x4 /* XATTR_??? */ <unfinished ...>
[pid   295] <... futex resumed>)        = -1 ETIMEDOUT (Connection timed out)
[pid   295] futex(0x7fb97f16a42c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   295] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb97f03c000
[pid   295] mprotect(0x7fb97f03d000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   295] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   295] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb97f05c990, parent_tid=0x7fb97f05c990, exit_signal=0, stack=0x7fb97f03c000, stack_size=0x20300, tls=0x7fb97f05c6c0} => {parent_tid=[300]}, 88) = 300
[pid   295] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   295] futex(0x7fb97f16a428, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   295] futex(0x7fb97f16a42c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 300 attached
 <unfinished ...>
[pid   300] set_robust_list(0x7fb97f05c9a0, 24) = 0
[pid   300] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   300] read(3, "\x68\x00\x00\x00\x1a\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x07\x00\x00\x00\x24\x00\x00\x00\x00\x00\x02\x00\xfb\xff\xff\xf3\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8224) = 104
[pid   300] futex(0x7fb97f16a42c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   295] <... futex resumed>)        = 0
[pid   295] futex(0x7fb97f16a428, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   295] futex(0x7fb97f16a42c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   300] <... futex resumed>)        = 1
[pid   300] write(3, "\x18\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x07\x00\x00\x00\x00\x00\x00\x00", 24) = 24
[pid   300] futex(0x7fb97f16a42c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   295] <... futex resumed>)        = 0
[pid   295] futex(0x7fb97f16a428, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   295] futex(0x7fb97f16a42c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   300] <... futex resumed>)        = 1
[pid   300] read(3, "\x2e\x00\x00\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2b\x01\x00\x00\x00\x00\x00\x00\x66\x69\x6c\x65\x30\x00", 8192) = 46
[   22.248402][   T30] audit: type=1400 audit(1693946129.377:72): avc:  denied  { mounton } for  pid=295 comm="syz-executor326" path="/root/file0" dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   22.270941][  T299] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN
[pid   300] write(3, "\x90\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00\xdb\xc0\x00\x00\x00\x00\x00\x00\x01\x76\x00\x00\xf9\xff\xff\xff\x05\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x07\x00\x00\x00"..., 144) = 144
[pid   300] futex(0x7fb97f16a42c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid   300] futex(0x7fb97f16a428, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   295] <... futex resumed>)        = 0
[   22.271494][   T30] audit: type=1400 audit(1693946129.387:73): avc:  denied  { mount } for  pid=295 comm="syz-executor326" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   22.282498][  T299] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]
[   22.282514][  T299] CPU: 1 PID: 299 Comm: syz-executor326 Not tainted 5.15.130-syzkaller-00623-g1317bd27a72f #0
[   22.282535][  T299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023
[   22.282545][  T299] RIP: 0010:step_into+0x1b6/0xe70
[   22.337444][  T299] Code: 20 0f 85 99 0a 00 00 44 8b 3b 43 80 3c 2c 00 74 0a 48 8b 7c 24 18 e8 09 cc f3 ff 48 8b 9c 24 b8 00 00 00 48 89 d8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 86 0a 00 00 8b 1b 89 de 81 e6 00 00 07
[   22.356975][  T299] RSP: 0018:ffffc90000a27920 EFLAGS: 00010202
[   22.362870][  T299] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff88811eb113c0
[   22.370683][  T299] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   22.378494][  T299] RBP: ffffc90000a27a50 R08: ffffffff81be1480 R09: ffffed1021fd8235
[   22.386303][  T299] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000144f3b
[   22.394117][  T299] R13: dffffc0000000000 R14: ffffc90000a27c40 R15: 0000000000000001
[   22.401929][  T299] FS:  00007fb97f07d6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[   22.410695][  T299] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   22.417114][  T299] CR2: 0000000020009000 CR3: 000000011ea9a000 CR4: 00000000003506a0
[   22.424930][  T299] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   22.432737][  T299] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   22.440550][  T299] Call Trace:
[   22.443676][  T299]  <TASK>
[   22.446453][  T299]  ? __die_body+0x62/0xb0
[   22.450619][  T299]  ? die_addr+0x9f/0xd0
[   22.454611][  T299]  ? exc_general_protection+0x311/0x4b0
[   22.459996][  T299]  ? asm_exc_general_protection+0x27/0x30
[   22.465665][  T299]  ? step_into+0x160/0xe70
[   22.469893][  T299]  ? step_into+0x1b6/0xe70
[   22.474145][  T299]  ? set_root+0x400/0x400
[   22.478310][  T299]  walk_component+0x359/0x610
[   22.482824][  T299]  ? nd_alloc_stack+0xf0/0xf0
[   22.487461][  T299]  ? handle_lookup_down+0x130/0x130
[   22.492494][  T299]  path_lookupat+0x16d/0x450
[   22.497092][  T299]  filename_lookup+0x230/0x5c0
[   22.501779][  T299]  ? hashlen_string+0x120/0x120
[   22.506483][  T299]  ? getname_flags+0x1fd/0x520
[   22.511065][  T299]  user_path_at_empty+0x43/0x1a0
[   22.515839][  T299]  path_setxattr+0xae/0x2a0
[   22.520180][  T299]  ? simple_xattr_list_add+0x120/0x120
[   22.525565][  T299]  ? __kasan_check_read+0x11/0x20
[   22.530427][  T299]  __x64_sys_setxattr+0xc5/0xe0
[   22.535106][  T299]  do_syscall_64+0x3d/0xb0
[   22.539359][  T299]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   22.545088][  T299] RIP: 0033:0x7fb97f0e0ad9
[   22.549342][  T299] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 81 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[   22.568782][  T299] RSP: 002b:00007fb97f07d218 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[   22.577027][  T299] RAX: ffffffffffffffda RBX: 00007fb97f16a418 RCX: 00007fb97f0e0ad9
[   22.584840][  T299] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020002740
[   22.592653][  T299] RBP: 00007fb97f16a410 R08: 0000000000000004 R09: 0000000000000000
[   22.600554][  T299] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb97f1370bc
[   22.608537][  T299] R13: 000000000000006e R14: 00007fb97f1370d4 R15: 2f30656c69662f2e
[   22.616356][  T299]  </TASK>
[   22.619229][  T299] Modules linked in:
[   22.623260][  T299] ---[ end trace 33bdd84c1a865571 ]---
[   22.628679][  T299] RIP: 0010:step_into+0x1b6/0xe70
[   22.633573][  T299] Code: 20 0f 85 99 0a 00 00 44 8b 3b 43 80 3c 2c 00 74 0a 48 8b 7c 24 18 e8 09 cc f3 ff 48 8b 9c 24 b8 00 00 00 48 89 d8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 86 0a 00 00 8b 1b 89 de 81 e6 00 00 07
[   22.653306][  T299] RSP: 0018:ffffc90000a27920 EFLAGS: 00010202
[   22.659367][  T299] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff88811eb113c0
[   22.667077][  T299] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   22.675072][  T299] RBP: ffffc90000a27a50 R08: ffffffff81be1480 R09: ffffed1021fd8235
[   22.682965][  T299] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000144f3b
[   22.690908][  T299] R13: dffffc0000000000 R14: ffffc90000a27c40 R15: 0000000000000001
[pid   295] exit_group(0 <unfinished ...>
[pid   300] <... futex resumed>)        = ?
[pid   296] <... openat resumed>)       = ?
[pid   295] <... exit_group resumed>)   = ?
[pid   300] +++ exited with 0 +++
[pid   296] +++ exited with 0 +++
[   22.698738][  T299] FS:  00007fb97f07d6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[   22.707461][  T299] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   22.713899][  T299] CR2: 0000000020009000 CR3: 000000011ea9a000 CR4: 00000000003506a0
[   22.721721][  T299] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   22.729531][  T299] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   22.737341][  T299] Kernel panic - not syncing: Fatal exception
[   22.743459][  T299] Kernel Offset: disabled
[   22.747588][  T299] Rebooting in 86400 seconds..