Warning: Permanently added '10.128.0.48' (ECDSA) to the list of known hosts. executing program [ 40.348771] audit: type=1400 audit(1597477114.725:8): avc: denied { execmem } for pid=6471 comm="syz-executor238" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 40.368540] ------------[ cut here ]------------ [ 40.373841] WARNING: CPU: 1 PID: 6471 at fs/overlayfs/file.c:60 ovl_real_fdget_meta.cold+0x11/0x1e [ 40.382931] Kernel panic - not syncing: panic_on_warn set ... [ 40.382931] [ 40.390308] CPU: 1 PID: 6471 Comm: syz-executor238 Not tainted 4.19.139-syzkaller #0 [ 40.398168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 40.407527] Call Trace: [ 40.410106] dump_stack+0x1fc/0x2fe [ 40.413715] panic+0x26a/0x50e [ 40.416909] ? __warn_printk+0xf3/0xf3 [ 40.420777] ? ovl_real_fdget_meta.cold+0x11/0x1e [ 40.425619] ? __probe_kernel_read+0x16c/0x1b0 [ 40.430185] ? __warn.cold+0x5/0x61 [ 40.433786] ? __warn+0xe4/0x200 [ 40.437135] ? ovl_real_fdget_meta.cold+0x11/0x1e [ 40.441956] __warn.cold+0x20/0x61 [ 40.445522] ? ovl_real_fdget_meta.cold+0x11/0x1e [ 40.450367] report_bug+0x262/0x2b0 [ 40.453980] do_error_trap+0x1d7/0x310 [ 40.457848] ? math_error+0x310/0x310 [ 40.461628] ? __irq_work_queue_local+0x101/0x160 [ 40.466464] ? irq_work_queue+0x29/0x80 [ 40.470419] ? wake_up_klogd.part.0+0x8c/0xc0 [ 40.474908] ? vprintk_emit+0x1d0/0x740 [ 40.478947] ? trace_hardirqs_off_caller+0x69/0x210 [ 40.483966] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 40.488796] invalid_op+0x14/0x20 [ 40.492231] RIP: 0010:ovl_real_fdget_meta.cold+0x11/0x1e [ 40.497660] Code: e9 f0 fd ff ff e8 ca 3d 42 ff e9 32 fe ff ff e8 c0 3d 42 ff e9 4b fe ff ff e8 06 1f 0c ff 48 c7 c7 a0 fc b4 87 e8 69 2c f7 fe <0f> 0b 41 bd fb ff ff ff e9 7f c8 ff ff e8 e8 1e 0c ff 48 c7 c7 a0 [ 40.516554] RSP: 0018:ffff888085b1f460 EFLAGS: 00010282 [ 40.521913] RAX: 0000000000000024 RBX: 0000000000002000 RCX: 0000000000000000 [ 40.529212] RDX: 0000000000000000 RSI: ffffffff8154cf41 RDI: ffffed1010b63e7e [ 40.536484] RBP: 0000000004048000 R08: 0000000000000024 R09: 0000000000000000 [ 40.543736] R10: 0000000000000005 R11: 0000000000000000 R12: ffff88808e1cc080 [ 40.550984] R13: 000000000000a000 R14: ffff88808e1cc0f8 R15: ffff888082fbf5f0 [ 40.558272] ? vprintk_func+0x81/0x17e [ 40.562154] ovl_read_iter+0x103/0x315 [ 40.566031] ? fs_reclaim_release+0xd0/0x110 [ 40.570424] ? ovl_open+0x350/0x350 [ 40.574031] ? check_preemption_disabled+0x41/0x280 [ 40.579033] do_iter_readv_writev+0x569/0x790 [ 40.583520] ? clone_verify_area+0x240/0x240 [ 40.587928] ? security_file_permission+0x1c0/0x220 [ 40.592947] do_iter_read+0x26f/0x630 [ 40.596732] ? check_preemption_disabled+0x41/0x280 [ 40.601740] ? __kmalloc_node+0x38/0x70 [ 40.605695] vfs_readv+0xe5/0x150 [ 40.609142] ? compat_rw_copy_check_uvector+0x410/0x410 [ 40.614487] ? push_pipe+0x3fe/0x770 [ 40.618184] ? iov_iter_get_pages_alloc+0x330/0x1070 [ 40.623272] ? iov_iter_bvec+0x130/0x130 [ 40.627317] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 40.631878] ? iov_iter_pipe+0xb4/0x2c0 [ 40.635836] default_file_splice_read+0x457/0xa00 [ 40.640672] ? __kmalloc+0x15a/0x3c0 [ 40.644370] ? alloc_pipe_info+0x193/0x470 [ 40.648585] ? do_splice_direct+0x270/0x270 [ 40.652895] ? __se_sys_sendfile64+0x147/0x160 [ 40.657459] ? do_syscall_64+0xf9/0x620 [ 40.661415] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 40.666777] ? mark_held_locks+0xf0/0xf0 [ 40.670818] ? add_lock_to_list.constprop.0+0x17d/0x330 [ 40.676174] ? __lock_acquire+0x22f9/0x3ff0 [ 40.680483] ? avc_policy_seqno+0x9/0x70 [ 40.684525] ? selinux_file_permission+0x87/0x5f0 [ 40.689350] ? security_file_permission+0x1c0/0x220 [ 40.694348] ? do_splice_direct+0x270/0x270 [ 40.698662] do_splice_to+0x10e/0x160 [ 40.702456] splice_direct_to_actor+0x2b9/0x8d0 [ 40.707109] ? generic_pipe_buf_nosteal+0x10/0x10 [ 40.711949] ? do_splice_to+0x160/0x160 [ 40.715909] do_splice_direct+0x1a7/0x270 [ 40.720038] ? splice_direct_to_actor+0x8d0/0x8d0 [ 40.724866] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 40.729869] ? rcu_sync_lockdep_assert+0x69/0xa0 [ 40.734607] ? __sb_start_write+0x194/0x350 [ 40.738934] do_sendfile+0x550/0xc30 [ 40.742633] ? do_compat_pwritev64+0x1b0/0x1b0 [ 40.747198] ? do_fcntl+0xa3/0x1050 [ 40.750813] ? fasync_free_rcu+0x20/0x20 [ 40.754898] __se_sys_sendfile64+0x147/0x160 [ 40.759287] ? __se_sys_sendfile+0x180/0x180 [ 40.763679] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 40.768424] ? trace_hardirqs_off_caller+0x69/0x210 [ 40.773426] ? do_syscall_64+0x21/0x620 [ 40.777384] do_syscall_64+0xf9/0x620 [ 40.781174] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 40.786625] RIP: 0033:0x4403d9 [ 40.789800] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 40.808689] RSP: 002b:00007ffd54b85638 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 40.816383] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004403d9 [ 40.823676] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 40.830939] RBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8 [ 40.838212] R10: 000000000000bd96 R11: 0000000000000246 R12: 0000000000401be0 [ 40.845737] R13: 0000000000401c70 R14: 0000000000000000 R15: 0000000000000000 [ 40.854223] Kernel Offset: disabled [ 40.857903] Rebooting in 86400 seconds..