audit: type=1804 audit(1638905323.993:7): pid=11936 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir253922063/syzkaller.3GXYSt/78/bus/file0" dev="overlay" ino=14186 res=1 ------------[ cut here ]------------ audit: type=1804 audit(1638905323.993:8): pid=11952 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir253922063/syzkaller.3GXYSt/78/bus/file0" dev="overlay" ino=14186 res=1 WARNING: CPU: 0 PID: 11984 at fs/overlayfs/file.c:60 ovl_change_flags fs/overlayfs/file.c:60 [inline] WARNING: CPU: 0 PID: 11984 at fs/overlayfs/file.c:60 ovl_real_fdget_meta.cold+0x11/0x1e fs/overlayfs/file.c:111 Kernel panic - not syncing: panic_on_warn set ... CPU: 0 PID: 11984 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 panic+0x26a/0x50e kernel/panic.c:186 __warn.cold+0x20/0x5a kernel/panic.c:541 report_bug+0x262/0x2b0 lib/bug.c:183 fixup_bug arch/x86/kernel/traps.c:178 [inline] fixup_bug arch/x86/kernel/traps.c:173 [inline] do_error_trap+0x1d7/0x310 arch/x86/kernel/traps.c:296 invalid_op+0x14/0x20 arch/x86/entry/entry_64.S:1038 RIP: 0010:ovl_change_flags fs/overlayfs/file.c:60 [inline] RIP: 0010:ovl_real_fdget_meta.cold+0x11/0x1e fs/overlayfs/file.c:111 Code: e8 42 ff 69 f9 44 89 f6 48 c7 c7 a0 97 99 88 e8 9e 30 fb ff e9 72 e5 71 fa e8 29 ff 69 f9 48 c7 c7 80 9e 99 88 e8 88 30 fb ff <0f> 0b 41 bd fb ff ff ff e9 4a f3 71 fa e8 0b ff 69 f9 48 c7 c7 80 RSP: 0018:ffff8880a220fb50 EFLAGS: 00010286 RAX: 0000000000000024 RBX: 0000000000002000 RCX: 0000000000000000 RDX: 0000000000029f86 RSI: ffffffff814dff01 RDI: ffffed1014441f5c RBP: 0000000004048000 R08: 0000000000000024 R09: 0000000000000000 R10: 0000000000000005 R11: 0000000000000000 R12: ffff88809b912a80 R13: ffff88804f2051f0 R14: 000000000000a000 R15: ffff88809b912af8 ovl_real_fdget fs/overlayfs/file.c:118 [inline] ovl_copyfile+0x12b/0x5b0 fs/overlayfs/file.c:573 ovl_dedupe_file_range+0x93/0xc0 fs/overlayfs/file.c:633 vfs_dedupe_file_range_one.part.0+0x1a9/0x280 fs/read_write.c:2082 vfs_dedupe_file_range_one fs/read_write.c:2150 [inline] vfs_dedupe_file_range+0x488/0x700 fs/read_write.c:2150 ioctl_file_dedupe_range fs/ioctl.c:606 [inline] do_vfs_ioctl+0x86f/0x12e0 fs/ioctl.c:684 ksys_ioctl+0x9b/0xc0 fs/ioctl.c:705 __do_sys_ioctl fs/ioctl.c:712 [inline] __se_sys_ioctl fs/ioctl.c:710 [inline] __x64_sys_ioctl+0x6f/0xb0 fs/ioctl.c:710 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7fb855826af9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fb85479c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fb855939f60 RCX: 00007fb855826af9 RDX: 0000000020000340 RSI: 00000000c0189436 RDI: 0000000000000004 RBP: 00007fb855880ff7 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffe33129c1f R14: 00007fb85479c300 R15: 0000000000022000 Kernel Offset: disabled Rebooting in 86400 seconds..