ci2-android-5-15/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci2-android-5-15/syz-executor1533138629 <...> Warning: Permanently added '10.128.0.40' (ED25519) to the list of known hosts. execve("ci2-android-5-15/syz-executor1533138629", ["ci2-android-5-15/syz-executor1533138629"], 0x7ffd0befd390 /* 10 vars */) = 0 brk(NULL) = 0x555582f53000 brk(0x555582f53e00) = 0x555582f53e00 arch_prctl(ARCH_SET_FS, 0x555582f53480) = 0 set_tid_address(0x555582f53750) = 303 set_robust_list(0x555582f53760, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 32, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci2-android-5-15/syz-executor1533138629", 4096) = 45 getrandom("\x02\xe8\x5e\x72\x72\x0b\xa0\x51", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555582f53e00 brk(0x555582f74e00) = 0x555582f74e00 brk(0x555582f75000) = 0x555582f75000 mprotect(0x7f71b0104000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGSEGV, {sa_handler=0x7f71b0062190, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f71b0064f60}, NULL, 8) = 0 rt_sigaction(SIGBUS, {sa_handler=0x7f71b0062190, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f71b0064f60}, NULL, 8) = 0 executing program write(1, "executing program\n", 18) = 18 mkdirat(AT_FDCWD, "./file0", 000) = 0 openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT, 0777) = 3 mkdir("./bus", 0777) = 0 --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- mount(NULL, "./file0", "overlay", MS_NOEXEC|MS_LAZYTIME, "upperdir=./file0,lowerdir=.,workdir=./bus,metacopy=on,") = 0 mount("./file0", "./file0", "incremental-fs", 0, NULL) = 0 linkat(AT_FDCWD, "./file0/file1", AT_FDCWD, "./file0/file2", AT_EMPTY_PATH) = 0 [ 24.942403][ T30] audit: type=1400 audit(1786070516.630:64): avc: denied { execmem } for pid=303 comm="syz-executor153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 24.963140][ T30] audit: type=1400 audit(1786070516.650:65): avc: denied { mounton } for pid=303 comm="syz-executor153" path="/root/file0" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 24.986195][ T30] audit: type=1400 audit(1786070516.650:66): avc: denied { unlink } for pid=303 comm="syz-executor153" name="#1" dev="sda1" ino=2030 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 24.990050][ T303] general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] PREEMPT SMP KASAN [ 25.010076][ T30] audit: type=1400 audit(1786070516.650:67): avc: denied { mount } for pid=303 comm="syz-executor153" name="/" dev="overlay" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 25.020187][ T303] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 25.020218][ T303] CPU: 0 PID: 303 Comm: syz-executor153 Not tainted syzkaller #0 [ 25.020238][ T303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 25.045972][ T30] audit: type=1400 audit(1786070516.650:68): avc: denied { mount } for pid=303 comm="syz-executor153" name="/" dev="incremental-fs" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 25.050867][ T303] RIP: 0010:security_inode_getattr+0x47/0x130 [ 25.059212][ T30] audit: type=1400 audit(1786070516.650:69): avc: denied { write } for pid=303 comm="syz-executor153" name="/" dev="incremental-fs" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 25.068649][ T303] Code: 45 ff 4c 8d 73 08 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 37 b3 84 ff 4d 8b 36 49 83 c6 30 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 1a b3 84 ff 4d 8b 36 49 83 c6 0c [ 25.068666][ T303] RSP: 0018:ffffc900007b70a0 EFLAGS: 00010206 [ 25.092872][ T30] audit: type=1400 audit(1786070516.650:70): avc: denied { add_name } for pid=303 comm="syz-executor153" name="file1" dev="incremental-fs" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 25.098195][ T303] RAX: 0000000000000006 RBX: ffffc900007b7490 RCX: ffff88810afa62c0 [ 25.098211][ T303] RDX: 0000000000000000 RSI: ffffc900007b74a0 RDI: ffffc900007b7490 [ 25.098225][ T303] RBP: ffffc900007b70c8 R08: ffffc900007b749f R09: ffffc900007b7490 [ 25.121986][ T30] audit: type=1400 audit(1786070516.650:71): avc: denied { link } for pid=303 comm="syz-executor153" name="file1" dev="incremental-fs" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 25.140781][ T303] R10: dffffc0000000000 R11: fffff520000f6e94 R12: ffffc900007b7490 [ 25.140798][ T303] R13: dffffc0000000000 R14: 0000000000000030 R15: fffff520000f6e44 [ 25.140812][ T303] FS: 0000555582f53480(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 25.140829][ T303] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 25.140842][ T303] CR2: 0000200000002000 CR3: 00000001241bc000 CR4: 00000000003506b0 [ 25.148453][ T30] audit: type=1400 audit(1786070516.680:72): avc: denied { read append } for pid=303 comm="syz-executor153" name="file2" dev="incremental-fs" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 25.171321][ T303] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 25.171335][ T303] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 25.171348][ T303] Call Trace: [ 25.171354][ T303] [ 25.171361][ T303] vfs_getattr+0x29/0x310 [ 25.180357][ T30] audit: type=1400 audit(1786070516.680:73): avc: denied { open } for pid=303 comm="syz-executor153" path="/root/file0/file2" dev="incremental-fs" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 25.187329][ T303] ovl_copy_up_flags+0x487/0x1c90 [ 25.187358][ T303] ? ovl_maybe_copy_up+0x190/0x190 [ 25.342558][ T303] ? is_bpf_text_address+0x177/0x190 [ 25.347854][ T303] ? __kernel_text_address+0xa0/0x100 [ 25.353316][ T303] ? __kasan_check_write+0x14/0x20 [ 25.358427][ T303] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 25.363889][ T303] ? _raw_spin_lock+0xf0/0xf0 [ 25.368560][ T303] ? avc_has_perm_noaudit+0x390/0x490 [ 25.373931][ T303] ? memcpy+0x56/0x70 [ 25.377913][ T303] ? avc_has_perm_noaudit+0x30a/0x490 [ 25.383283][ T303] ? avc_denied+0x1b0/0x1b0 [ 25.387779][ T303] ? slab_post_alloc_hook+0x4f/0x2b0 [ 25.393157][ T303] ? vfs_open+0x73/0x80 [ 25.397318][ T303] ? mnt_want_write+0x20b/0x2e0 [ 25.402189][ T303] ovl_maybe_copy_up+0x160/0x190 [ 25.407144][ T303] ovl_open+0x9d/0x1f0 [ 25.411213][ T303] ? ovl_mmap+0x4c0/0x4c0 [ 25.415542][ T303] do_dentry_open+0x82a/0x1010 [ 25.420305][ T303] dentry_open+0xbb/0x100 [ 25.424634][ T303] file_open+0x2a4/0x680 [ 25.428880][ T303] ? incfs_file_mmap+0x130/0x130 [ 25.433818][ T303] ? __kasan_check_read+0x11/0x20 [ 25.438843][ T303] ? incfs_file_mmap+0x130/0x130 [ 25.443786][ T303] do_dentry_open+0x82a/0x1010 [ 25.448571][ T303] vfs_open+0x73/0x80 [ 25.452567][ T303] path_openat+0x26e6/0x2f80 [ 25.457179][ T303] ? __kasan_slab_alloc+0xc9/0xe0 [ 25.462218][ T303] ? slab_post_alloc_hook+0x4f/0x2b0 [ 25.467506][ T303] ? __x64_sys_openat+0x136/0x160 [ 25.472901][ T303] ? x64_sys_call+0x219/0x9a0 [ 25.477574][ T303] ? do_syscall_64+0x4c/0xa0 [ 25.482338][ T303] ? do_filp_open+0x400/0x400 [ 25.487040][ T303] do_filp_open+0x1df/0x400 [ 25.491560][ T303] ? vfs_tmpfile+0x2d0/0x2d0 [ 25.496277][ T303] do_sys_openat2+0x15e/0x7f0 [ 25.500980][ T303] ? ptrace_notify+0x1ea/0x270 [ 25.505761][ T303] ? do_sys_open+0xe0/0xe0 [ 25.510225][ T303] ? do_notify_parent+0x830/0x830 [ 25.515258][ T303] __x64_sys_openat+0x136/0x160 [ 25.520114][ T303] x64_sys_call+0x219/0x9a0 [ 25.524623][ T303] do_syscall_64+0x4c/0xa0 [ 25.529046][ T303] ? clear_bhb_loop+0x50/0xa0 [ 25.533754][ T303] ? clear_bhb_loop+0x50/0xa0 [ 25.538445][ T303] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 25.544360][ T303] RIP: 0033:0x7f71b007d579 [ 25.548797][ T303] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 25.568568][ T303] RSP: 002b:00007ffc21ce22a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 25.576992][ T303] RAX: ffffffffffffffda RBX: 0032656c69662f30 RCX: 00007f71b007d579 [ 25.584965][ T303] RDX: 0000000000020400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 25.592938][ T303] RBP: 00007ffc21ce22b8 R08: 00007f71b0062190 R09: 00007f71b0062190 [ 25.600995][ T303] R10: 00000000000000b6 R11: 0000000000000246 R12: 0000000000000000 [ 25.608967][ T303] R13: 0000000000000002 R14: 00007f71b0104ca0 R15: 0000000000000002 [ 25.616965][ T303] [ 25.619984][ T303] Modules linked in: [ 25.624161][ T303] ---[ end trace 02560dbcd0749aca ]--- [ 25.629674][ T303] RIP: 0010:security_inode_getattr+0x47/0x130 [ 25.636110][ T303] Code: 45 ff 4c 8d 73 08 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 37 b3 84 ff 4d 8b 36 49 83 c6 30 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 1a b3 84 ff 4d 8b 36 49 83 c6 0c [ 25.655759][ T303] RSP: 0018:ffffc900007b70a0 EFLAGS: 00010206 [ 25.661907][ T303] RAX: 0000000000000006 RBX: ffffc900007b7490 RCX: ffff88810afa62c0 [ 25.669952][ T303] RDX: 0000000000000000 RSI: ffffc900007b74a0 RDI: ffffc900007b7490 [ 25.677968][ T303] RBP: ffffc900007b70c8 R08: ffffc900007b749f R09: ffffc900007b7490 [ 25.685988][ T303] R10: dffffc0000000000 R11: fffff520000f6e94 R12: ffffc900007b7490 [ 25.693981][ T303] R13: dffffc0000000000 R14: 0000000000000030 R15: fffff520000f6e44 [ 25.702009][ T303] FS: 0000555582f53480(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 25.710979][ T303] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 25.717617][ T303] CR2: 0000200000002000 CR3: 00000001241bc000 CR4: 00000000003506b0 [ 25.725632][ T303] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 25.733653][ T303] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 25.741671][ T303] Kernel panic - not syncing: Fatal exception [ 25.748004][ T303] Kernel Offset: disabled [ 25.752377][ T303] Rebooting in 86400 seconds..