Warning: Permanently added '10.128.1.186' (ED25519) to the list of known hosts.
2023/10/18 18:14:31 ignoring optional flag "sandboxArg"="0"
2023/10/18 18:14:31 parsed 1 programs
[ 38.979887][ T29] kauditd_printk_skb: 78 callbacks suppressed
[ 38.979896][ T29] audit: type=1400 audit(1697652871.363:154): avc: denied { mounton } for pid=336 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 39.011912][ T29] audit: type=1400 audit(1697652871.363:155): avc: denied { mount } for pid=336 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[ 39.035458][ T29] audit: type=1400 audit(1697652871.363:156): avc: denied { setattr } for pid=336 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 39.059295][ T29] audit: type=1400 audit(1697652871.363:157): avc: denied { read write } for pid=336 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 39.086329][ T29] audit: type=1400 audit(1697652871.363:158): avc: denied { open } for pid=336 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 39.137951][ T29] audit: type=1400 audit(1697652871.523:159): avc: denied { unlink } for pid=336 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
2023/10/18 18:14:31 executed programs: 0
[ 39.163843][ T29] audit: type=1400 audit(1697652871.533:160): avc: denied { relabelto } for pid=337 comm="mkswap" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 39.186333][ T336] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 39.233397][ T342] bridge0: port 1(bridge_slave_0) entered blocking state
[ 39.240532][ T342] bridge0: port 1(bridge_slave_0) entered disabled state
[ 39.247751][ T342] device bridge_slave_0 entered promiscuous mode
[ 39.254576][ T342] bridge0: port 2(bridge_slave_1) entered blocking state
[ 39.261706][ T342] bridge0: port 2(bridge_slave_1) entered disabled state
[ 39.269130][ T342] device bridge_slave_1 entered promiscuous mode
[ 39.309078][ T342] bridge0: port 2(bridge_slave_1) entered blocking state
[ 39.316125][ T342] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 39.323541][ T342] bridge0: port 1(bridge_slave_0) entered blocking state
[ 39.330894][ T342] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 39.347125][ T37] bridge0: port 1(bridge_slave_0) entered disabled state
[ 39.354818][ T37] bridge0: port 2(bridge_slave_1) entered disabled state
[ 39.362166][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 39.369532][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 39.378408][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 39.387794][ T38] bridge0: port 1(bridge_slave_0) entered blocking state
[ 39.394805][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 39.408085][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 39.416302][ T37] bridge0: port 2(bridge_slave_1) entered blocking state
[ 39.423436][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 39.430719][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 39.440128][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 39.451511][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 39.462285][ T342] device veth0_vlan entered promiscuous mode
[ 39.468669][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 39.476432][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 39.483871][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 39.494128][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 39.502739][ T342] device veth1_macvtap entered promiscuous mode
[ 39.510919][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 39.522711][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 39.541403][ T29] audit: type=1400 audit(1697652871.923:161): avc: denied { mounton } for pid=347 comm="syz-executor.0" path="/root/syzkaller-testdir2340502081/syzkaller.TSINT2/0/file0" dev="sda1" ino=1939 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[ 39.648499][ T350] ==================================================================
[ 39.656378][ T350] BUG: KASAN: null-ptr-deref in ihold+0x19/0x30
[ 39.662451][ T350] Write of size 4 at addr 0000000000000170 by task syz-executor.0/350
[ 39.670885][ T350]
[ 39.673052][ T350] CPU: 0 PID: 350 Comm: syz-executor.0 Not tainted 5.15.132-syzkaller #0
[ 39.681563][ T350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 39.691543][ T350] Call Trace:
[ 39.694749][ T350]
[ 39.697528][ T350] dump_stack_lvl+0x38/0x49
[ 39.701868][ T350] kasan_report.cold+0x64/0xdb
[ 39.706478][ T350] ? ihold+0x19/0x30
[ 39.710201][ T350] kasan_check_range+0x148/0x190
[ 39.714978][ T350] __kasan_check_write+0x14/0x20
[ 39.720033][ T350] ihold+0x19/0x30
[ 39.723771][ T350] fuse_dentry_revalidate+0x6bb/0xf80
[ 39.729168][ T350] ? fuse_invalid_attr+0xc0/0xc0
[ 39.734026][ T350] ? lockref_put_or_lock+0x1a0/0x1a0
[ 39.739748][ T350] lookup_dcache+0x90/0xd0
[ 39.744098][ T350] __lookup_hash+0x1e/0x150
[ 39.748514][ T350] do_renameat2+0x3c2/0xa50
[ 39.752946][ T350] ? __ia32_sys_link+0xa0/0xa0
[ 39.757542][ T350] ? kmem_cache_alloc+0x1b9/0x480
[ 39.762407][ T350] ? getname_flags.part.0+0x8c/0x480
[ 39.767608][ T350] __x64_sys_rename+0x7d/0xa0
[ 39.772390][ T350] do_syscall_64+0x35/0xb0
[ 39.776635][ T350] entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 39.782363][ T350] RIP: 0033:0x7fdaaf53cae9
[ 39.786617][ T350] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 39.806589][ T350] RSP: 002b:00007fdaaf09e0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[ 39.814912][ T350] RAX: ffffffffffffffda RBX: 00007fdaaf65c050 RCX: 00007fdaaf53cae9
[ 39.822729][ T350] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000020000100
[ 39.830976][ T350] RBP: 00007fdaaf58847a R08: 0000000000000000 R09: 0000000000000000
[ 39.839117][ T350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 39.847090][ T350] R13: 000000000000006e R14: 00007fdaaf65c050 R15: 00007ffc6ae38138
[ 39.855344][ T350]
[ 39.858198][ T350] ==================================================================
[ 39.866541][ T350] Disabling lock debugging due to kernel taint
[ 39.872690][ T350] BUG: kernel NULL pointer dereference, address: 0000000000000170
[ 39.880555][ T350] #PF: supervisor write access in kernel mode
[ 39.886463][ T350] #PF: error_code(0x0002) - not-present page
[ 39.892446][ T350] PGD 1067cc067 P4D 1067cc067 PUD 1069c7067 PMD 0
[ 39.898945][ T350] Oops: 0002 [#1] PREEMPT SMP KASAN
[ 39.904106][ T350] CPU: 1 PID: 350 Comm: syz-executor.0 Tainted: G B 5.15.132-syzkaller #0
[ 39.915366][ T350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
[ 39.925444][ T350] RIP: 0010:ihold+0x1e/0x30
[ 39.929872][ T350] Code: eb 90 66 2e 0f 1f 84 00 00 00 00 00 55 be 04 00 00 00 48 89 e5 53 48 89 fb 48 8d bf 70 01 00 00 e8 b7 c8 f2 ff b8 01 00 00 00 0f c1 83 70 01 00 00 48 8b 5d f8 c9 c3 0f 1f 40 00 48 b8 00 00
[ 39.950264][ T350] RSP: 0018:ffffc900007379a8 EFLAGS: 00010246
[ 39.956907][ T350] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff8134ceb1
[ 39.964807][ T350] RDX: fffffbfff0b1ab40 RSI: 0000000000000004 RDI: ffffffff858d5a00
[ 39.972701][ T350] RBP: ffffc900007379b0 R08: 0000000000000001 R09: 0000000000000003
[ 39.980596][ T350] R10: fffffbfff0b1ab40 R11: 0000000000000001 R12: ffff88811f0f6c28
[ 39.988588][ T350] R13: 0000000000000020 R14: ffff88811f168000 R15: ffff88811f0f6bb0
[ 39.996411][ T350] FS: 00007fdaaf09e6c0(0000) GS:ffff8881f7500000(0000) knlGS:0000000000000000
[ 40.005169][ T350] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 40.011598][ T350] CR2: 0000000000000170 CR3: 000000012110d000 CR4: 00000000003506a0
[ 40.019682][ T350] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 40.027648][ T350] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 40.035556][ T350] Call Trace:
[ 40.038670][ T350]
[ 40.041456][ T350] ? show_regs.part.0+0x1e/0x20
[ 40.046222][ T350] ? __die+0x5d/0x9e
[ 40.049960][ T350] ? page_fault_oops+0x233/0x540
[ 40.055249][ T350] ? __update_load_avg_cfs_rq+0xb8/0x390
[ 40.061330][ T350] ? dump_pagetable+0xb0/0xb0
[ 40.066406][ T350] ? kvm_sched_clock_read+0x18/0x40
[ 40.071554][ T350] ? sched_clock+0x9/0x10
[ 40.075698][ T350] ? sched_clock_cpu+0x18/0x1b0
[ 40.080471][ T350] ? set_next_entity+0x266/0x610
[ 40.085774][ T350] ? put_prev_entity+0xbf/0x240
[ 40.090642][ T350] ? psi_task_switch+0x195/0x4f0
[ 40.095604][ T350] ? do_user_addr_fault+0x8f2/0x1160
[ 40.100874][ T350] ? __kasan_check_write+0x14/0x20
[ 40.106379][ T350] ? trace_page_fault_user+0xb0/0xb0
[ 40.111675][ T350] ? __schedule+0x75f/0x18a0
[ 40.116166][ T350] ? io_schedule_timeout+0x150/0x150
[ 40.121399][ T350] ? irqentry_exit+0x20/0x40
[ 40.125826][ T350] ? __kasan_check_read+0x11/0x20
[ 40.130879][ T350] ? preempt_schedule_common+0x5e/0xe0
[ 40.136341][ T350] ? ihold+0x19/0x30
[ 40.140060][ T350] ? preempt_schedule+0x1f/0x30
[ 40.144741][ T350] ? preempt_schedule_thunk+0x16/0x18
[ 40.149953][ T350] ? exc_page_fault+0x5c/0xc0
[ 40.154475][ T350] ? asm_exc_page_fault+0x27/0x30
[ 40.159419][ T350] ? check_panic_on_warn+0x31/0x60
[ 40.164584][ T350] ? ihold+0x1e/0x30
[ 40.168275][ T350] ? ihold+0x19/0x30
[ 40.172187][ T350] fuse_dentry_revalidate+0x6bb/0xf80
[ 40.177388][ T350] ? fuse_invalid_attr+0xc0/0xc0
[ 40.182166][ T350] ? lockref_put_or_lock+0x1a0/0x1a0
[ 40.187558][ T350] lookup_dcache+0x90/0xd0
[ 40.191791][ T350] __lookup_hash+0x1e/0x150
[ 40.196320][ T350] do_renameat2+0x3c2/0xa50
[ 40.200663][ T350] ? __ia32_sys_link+0xa0/0xa0
[ 40.205826][ T350] ? kmem_cache_alloc+0x1b9/0x480
[ 40.210683][ T350] ? getname_flags.part.0+0x8c/0x480
[ 40.215883][ T350] __x64_sys_rename+0x7d/0xa0
[ 40.220402][ T350] do_syscall_64+0x35/0xb0
[ 40.224662][ T350] entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 40.230893][ T350] RIP: 0033:0x7fdaaf53cae9
[ 40.235146][ T350] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 40.255310][ T350] RSP: 002b:00007fdaaf09e0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[ 40.263788][ T350] RAX: ffffffffffffffda RBX: 00007fdaaf65c050 RCX: 00007fdaaf53cae9
[ 40.271690][ T350] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000020000100
[ 40.279488][ T350] RBP: 00007fdaaf58847a R08: 0000000000000000 R09: 0000000000000000
[ 40.287301][ T350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 40.295117][ T350] R13: 000000000000006e R14: 00007fdaaf65c050 R15: 00007ffc6ae38138
[ 40.303450][ T350]
[ 40.306404][ T350] Modules linked in:
[ 40.310834][ T350] CR2: 0000000000000170
[ 40.315097][ T350] ---[ end trace bcb37ef397d68d7a ]---
[ 40.320379][ T350] RIP: 0010:ihold+0x1e/0x30
[ 40.325067][ T350] Code: eb 90 66 2e 0f 1f 84 00 00 00 00 00 55 be 04 00 00 00 48 89 e5 53 48 89 fb 48 8d bf 70 01 00 00 e8 b7 c8 f2 ff b8 01 00 00 00 0f c1 83 70 01 00 00 48 8b 5d f8 c9 c3 0f 1f 40 00 48 b8 00 00
[ 40.344513][ T350] RSP: 0018:ffffc900007379a8 EFLAGS: 00010246
[ 40.350839][ T350] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff8134ceb1
[ 40.358751][ T350] RDX: fffffbfff0b1ab40 RSI: 0000000000000004 RDI: ffffffff858d5a00
[ 40.366553][ T350] RBP: ffffc900007379b0 R08: 0000000000000001 R09: 0000000000000003
[ 40.374370][ T350] R10: fffffbfff0b1ab40 R11: 0000000000000001 R12: ffff88811f0f6c28
[ 40.382261][ T350] R13: 0000000000000020 R14: ffff88811f168000 R15: ffff88811f0f6bb0
[ 40.391053][ T350] FS: 00007fdaaf09e6c0(0000) GS:ffff8881f7500000(0000) knlGS:0000000000000000
[ 40.399900][ T350] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 40.406838][ T350] CR2: 0000000000000170 CR3: 000000012110d000 CR4: 00000000003506a0
[ 40.418368][ T350] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 40.426335][ T350] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 40.434330][ T350] Kernel panic - not syncing: Fatal exception
[ 40.440971][ T350] Kernel Offset: disabled
[ 40.445266][ T350] Rebooting in 86400 seconds..