./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor428118577

<...>
Warning: Permanently added '10.128.1.199' (ED25519) to the list of known hosts.
execve("./syz-executor428118577", ["./syz-executor428118577"], 0x7ffc40888750 /* 10 vars */) = 0
brk(NULL)                               = 0x5555934cf000
brk(0x5555934cfd40)                     = 0x5555934cfd40
arch_prctl(ARCH_SET_FS, 0x5555934cf3c0) = 0
set_tid_address(0x5555934cf690)         = 295
set_robust_list(0x5555934cf6a0, 24)     = 0
rseq(0x5555934cfce0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented)
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor428118577", 4096) = 27
getrandom("\xc2\x34\x4a\xe0\xda\xe5\x81\xf2", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x5555934cfd40
brk(0x5555934f0d40)                     = 0x5555934f0d40
brk(0x5555934f1000)                     = 0x5555934f1000
mprotect(0x7f8fe84b2000, 16384, PROT_READ) = 0
mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000
mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000
mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000
executing program
write(1, "executing program\n", 18)     = 18
futex(0x7f8fe84b840c, FUTEX_WAKE_PRIVATE, 1000000) = 0
rt_sigaction(SIGRT_1, {sa_handler=0x7f8fe84513a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8fe8442a20}, NULL, 8) = 0
rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8fe83b9000
mprotect(0x7f8fe83ba000, 131072, PROT_READ|PROT_WRITE) = 0
rt_sigprocmask(SIG_BLOCK, ~[], [], 8)   = 0
clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8fe83d9990, parent_tid=0x7f8fe83d9990, exit_signal=0, stack=0x7f8fe83b9000, stack_size=0x20300, tls=0x7f8fe83d96c0} => {parent_tid=[296]}, 88) = 296
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
futex(0x7f8fe84b8408, FUTEX_WAKE_PRIVATE, 1000000) = 0
futex(0x7f8fe84b840c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 296 attached
 <unfinished ...>
[pid   296] set_robust_list(0x7f8fe83d99a0, 24) = 0
[pid   296] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   296] mkdir("./file0", 000)       = 0
[pid   296] futex(0x7f8fe84b840c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   295] <... futex resumed>)        = 0
[pid   295] futex(0x7f8fe84b8408, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   295] futex(0x7f8fe84b840c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   296] <... futex resumed>)        = 1
[pid   296] openat(AT_FDCWD, "/dev/fuse", O_RDWR|O_CREAT, 000) = 3
[pid   296] futex(0x7f8fe84b840c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   295] <... futex resumed>)        = 0
[pid   295] futex(0x7f8fe84b8408, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   295] futex(0x7f8fe84b840c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   296] <... futex resumed>)        = 1
[pid   296] mount(NULL, "./file0", "fuse", 0, "fd=00000000000000000000003,rootmode=0000000000000000040000,user_id=00000000000000000000,group_id=000"...) = 0
[pid   296] futex(0x7f8fe84b840c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid   296] futex(0x7f8fe84b8408, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   295] <... futex resumed>)        = 0
[pid   295] futex(0x7f8fe84b8408, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   296] <... futex resumed>)        = 0
[pid   296] read(3, "\x68\x00\x00\x00\x1a\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x07\x00\x00\x00\x29\x00\x00\x00\x00\x00\x02\x00\xfb\xff\xff\x73\xfd\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8224) = 104
[pid   296] futex(0x7f8fe84b840c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   296] futex(0x7f8fe84b8408, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   295] <... futex resumed>)        = 1
[pid   295] futex(0x7f8fe84b840c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable)
[pid   295] futex(0x7f8fe84b8408, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid   296] <... futex resumed>)        = 0
[pid   295] futex(0x7f8fe84b840c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   296] write(3, "\x18\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x07\x00\x00\x00\x00\x00\x00\x00", 24) = 24
[pid   296] futex(0x7f8fe84b840c, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   295] <... futex resumed>)        = 0
[pid   296] <... futex resumed>)        = 1
[pid   295] futex(0x7f8fe84b8408, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   296] rename("./file0/../file0/file0", "./file0/../file0/file0" <unfinished ...>
[pid   295] <... futex resumed>)        = 0
[   23.510881][   T36] audit: type=1400 audit(1751738653.700:64): avc:  denied  { execmem } for  pid=295 comm="syz-executor428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   23.530654][   T36] audit: type=1400 audit(1751738653.710:65): avc:  denied  { read write } for  pid=295 comm="syz-executor428" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[pid   295] futex(0x7f8fe84b840c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out)
[pid   295] futex(0x7f8fe84b841c, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   295] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8fe8398000
[pid   295] mprotect(0x7f8fe8399000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   295] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   295] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8fe83b8990, parent_tid=0x7f8fe83b8990, exit_signal=0, stack=0x7f8fe8398000, stack_size=0x20300, tls=0x7f8fe83b86c0}./strace-static-x86_64: Process 298 attached
 => {parent_tid=[298]}, 88) = 298
[pid   295] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid   298] set_robust_list(0x7f8fe83b89a0, 24 <unfinished ...>
[pid   295] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid   298] <... set_robust_list resumed>) = 0
[pid   295] futex(0x7f8fe84b8418, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   298] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid   295] <... futex resumed>)        = 0
[pid   298] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid   295] futex(0x7f8fe84b841c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   298] read(3, "\x2e\x00\x00\x00\x01\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x28\x01\x00\x00\x00\x00\x00\x00\x66\x69\x6c\x65\x30\x00", 8192) = 46
[   23.554538][   T36] audit: type=1400 audit(1751738653.710:66): avc:  denied  { open } for  pid=295 comm="syz-executor428" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   23.578039][   T36] audit: type=1400 audit(1751738653.710:67): avc:  denied  { mounton } for  pid=295 comm="syz-executor428" path="/root/file0" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   23.600765][   T36] audit: type=1400 audit(1751738653.720:68): avc:  denied  { mount } for  pid=295 comm="syz-executor428" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   23.605777][  T296] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI
[   23.635607][  T296] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]
[   23.644031][  T296] CPU: 0 UID: 0 PID: 296 Comm: syz-executor428 Not tainted 6.12.30-syzkaller-ge2bf362ee23b #0 e1c904518e9113895a28c59b25a6002cdacb68bf
[   23.657836][  T296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   23.667897][  T296] RIP: 0010:do_renameat2+0x47e/0xc80
[   23.673208][  T296] Code: 74 24 48 44 89 fa e8 81 e3 fe ff 48 3d 01 f0 ff ff 72 0d 49 89 c5 e8 c1 5a 9b ff e9 3d 04 00 00 4c 89 e1 49 89 c4 49 c1 ec 03 <41> 0f b6 14 0c 84 d2 48 89 44 24 20 0f 85 f2 05 00 00 8b 18 be 00
[   23.692819][  T296] RSP: 0018:ffffc900011dfd00 EFLAGS: 00010202
[   23.698905][  T296] RAX: 0000000000000008 RBX: ffff888105314400 RCX: dffffc0000000000
[   23.706878][  T296] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888115ba0190
[   23.714856][  T296] RBP: ffffc900011dfee8 R08: ffff8881f6e509c7 R09: 1ffff1103edca138
[   23.722840][  T296] R10: dffffc0000000000 R11: ffffed103edca139 R12: 0000000000000001
[   23.730819][  T296] R13: 0000000000000000 R14: 1ffff9200023bf01 R15: 0000000000000000
[   23.738800][  T296] FS:  00007f8fe83d96c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[   23.747756][  T296] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   23.754345][  T296] CR2: 0000200000003000 CR3: 000000010532e000 CR4: 00000000003526b0
[   23.762331][  T296] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   23.770299][  T296] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   23.778284][  T296] Call Trace:
[   23.781588][  T296]  <TASK>
[   23.784520][  T296]  ? __cfi_do_renameat2+0x10/0x10
[   23.789550][  T296]  ? __kasan_check_write+0x18/0x20
[   23.794660][  T296]  ? getname_flags+0x209/0x710
[   23.799427][  T296]  __x64_sys_rename+0x86/0xa0
[   23.804108][  T296]  x64_sys_call+0x150b/0x2ee0
[   23.808788][  T296]  do_syscall_64+0x58/0xf0
[   23.813203][  T296]  ? clear_bhb_loop+0x50/0xa0
[   23.817912][  T296]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   23.823809][  T296] RIP: 0033:0x7f8fe842b4f9
[   23.828236][  T296] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[   23.847837][  T296] RSP: 002b:00007f8fe83d9218 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[pid   298] write(3, "\x90\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x80\x07\x00\x00\x00\x00\x00\x00\x00\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x08\x00\x00"..., 144) = 144
[pid   298] futex(0x7f8fe84b841c, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid   298] futex(0x7f8fe84b8418, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   295] <... futex resumed>)        = 0
[pid   295] exit_group(0)               = ?
[pid   298] <... futex resumed>)        = ?
[pid   298] +++ exited with 0 +++
[   23.856246][  T296] RAX: ffffffffffffffda RBX: 00007f8fe84b8408 RCX: 00007f8fe842b4f9
[   23.864216][  T296] RDX: 00007f8fe842b4f9 RSI: 00002000000000c0 RDI: 0000200000000100
[   23.872185][  T296] RBP: 00007f8fe84b8400 R08: 0000000000000000 R09: 0000000000000000
[   23.880148][  T296] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8fe848502c
[   23.888113][  T296] R13: 0000200000002140 R14: 00007f8fe848300c R15: 0000200000000000
[   23.896080][  T296]  </TASK>
[   23.899095][  T296] Modules linked in:
[   23.903301][  T296] ---[ end trace 0000000000000000 ]---
[   23.905413][   T36] audit: type=1400 audit(1751738654.100:69): avc:  denied  { read } for  pid=90 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[   23.908982][  T296] RIP: 0010:do_renameat2+0x47e/0xc80
[   23.931658][   T36] audit: type=1400 audit(1751738654.100:70): avc:  denied  { search } for  pid=90 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   23.935758][  T296] Code: 74 24 48 44 89 fa e8 81 e3 fe ff 48 3d 01 f0 ff ff 72 0d 49 89 c5 e8 c1 5a 9b ff e9 3d 04 00 00 4c 89 e1 49 89 c4 49 c1 ec 03 <41> 0f b6 14 0c 84 d2 48 89 44 24 20 0f 85 f2 05 00 00 8b 18 be 00
[   23.957208][   T36] audit: type=1400 audit(1751738654.100:71): avc:  denied  { write } for  pid=90 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   23.976624][  T296] RSP: 0018:ffffc900011dfd00 EFLAGS: 00010202
[   23.998003][   T36] audit: type=1400 audit(1751738654.100:72): avc:  denied  { add_name } for  pid=90 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   24.003890][  T296] RAX: 0000000000000008 RBX: ffff888105314400 RCX: dffffc0000000000
[   24.024639][   T36] audit: type=1400 audit(1751738654.100:73): avc:  denied  { create } for  pid=90 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   24.032527][  T296] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888115ba0190
[   24.060731][  T296] RBP: ffffc900011dfee8 R08: ffff8881f6e509c7 R09: 1ffff1103edca138
[   24.068799][  T296] R10: dffffc0000000000 R11: ffffed103edca139 R12: 0000000000000001
[   24.076855][  T296] R13: 0000000000000000 R14: 1ffff9200023bf01 R15: 0000000000000000
[   24.084925][  T296] FS:  00007f8fe83d96c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[   24.093928][  T296] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   24.100528][  T296] CR2: 0000200000003000 CR3: 000000010532e000 CR4: 00000000003526b0
[   24.108584][  T296] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   24.116614][  T296] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   24.124663][  T296] Kernel panic - not syncing: Fatal exception
[   24.131111][  T296] Kernel Offset: disabled
[   24.135452][  T296] Rebooting in 86400 seconds..