Warning: Permanently added '10.128.1.166' (ED25519) to the list of known hosts.
2023/08/22 23:31:06 ignoring optional flag "sandboxArg"="0"
2023/08/22 23:31:06 parsed 1 programs
[ 43.707515][ T27] audit: type=1400 audit(1692747066.266:156): avc: denied { mounton } for pid=341 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 43.733892][ T27] audit: type=1400 audit(1692747066.266:157): avc: denied { mount } for pid=341 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[ 43.773135][ T27] audit: type=1400 audit(1692747066.336:158): avc: denied { unlink } for pid=341 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
2023/08/22 23:31:06 executed programs: 0
[ 43.805565][ T341] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 43.856606][ T348] bridge0: port 1(bridge_slave_0) entered blocking state
[ 43.864335][ T348] bridge0: port 1(bridge_slave_0) entered disabled state
[ 43.871718][ T348] device bridge_slave_0 entered promiscuous mode
[ 43.878907][ T348] bridge0: port 2(bridge_slave_1) entered blocking state
[ 43.885792][ T348] bridge0: port 2(bridge_slave_1) entered disabled state
[ 43.893541][ T348] device bridge_slave_1 entered promiscuous mode
[ 43.934339][ T27] audit: type=1400 audit(1692747066.496:159): avc: denied { write } for pid=348 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 43.947708][ T348] bridge0: port 2(bridge_slave_1) entered blocking state
[ 43.954984][ T27] audit: type=1400 audit(1692747066.506:160): avc: denied { read } for pid=348 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 43.962106][ T348] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 43.989981][ T348] bridge0: port 1(bridge_slave_0) entered blocking state
[ 43.997603][ T348] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 44.016292][ T223] bridge0: port 1(bridge_slave_0) entered disabled state
[ 44.023771][ T223] bridge0: port 2(bridge_slave_1) entered disabled state
[ 44.031295][ T223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 44.039253][ T223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 44.047794][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 44.056086][ T57] bridge0: port 1(bridge_slave_0) entered blocking state
[ 44.062922][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 44.073041][ T223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 44.081243][ T223] bridge0: port 2(bridge_slave_1) entered blocking state
[ 44.088035][ T223] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 44.103149][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 44.111736][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 44.120160][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 44.130773][ T223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 44.139071][ T223] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 44.146603][ T223] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 44.154963][ T348] device veth0_vlan entered promiscuous mode
[ 44.165168][ T223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 44.174034][ T348] device veth1_macvtap entered promiscuous mode
[ 44.183240][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 44.192978][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 44.209210][ T27] audit: type=1400 audit(1692747066.766:161): avc: denied { mounton } for pid=348 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[ 44.243297][ T27] audit: type=1400 audit(1692747066.806:162): avc: denied { mounton } for pid=353 comm="syz-executor.0" path="/root/syzkaller-testdir2356241910/syzkaller.1NjQJX/0/file0" dev="sda1" ino=1938 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[ 44.344863][ T356] ==================================================================
[ 44.352944][ T356] BUG: KASAN: null-ptr-deref in ihold+0x19/0x30
[ 44.359017][ T356] Write of size 4 at addr 0000000000000160 by task syz-executor.0/356
[ 44.369571][ T356]
[ 44.371709][ T356] CPU: 0 PID: 356 Comm: syz-executor.0 Not tainted 6.1.25-syzkaller #0
[ 44.379880][ T356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023
[ 44.390287][ T356] Call Trace:
[ 44.393541][ T356]
[ 44.396381][ T356] dump_stack_lvl+0x105/0x148
[ 44.401062][ T356] ? panic+0x3b4/0x3b4
[ 44.404964][ T356] ? nf_tcp_handle_invalid+0x30b/0x30b
[ 44.410264][ T356] ? _printk+0xca/0x10a
[ 44.414334][ T356] print_report+0xe1/0x4e0
[ 44.418909][ T356] ? __kasan_slab_free+0x11/0x20
[ 44.423987][ T356] ? kasan_addr_to_slab+0xd/0x80
[ 44.429283][ T356] ? ihold+0x19/0x30
[ 44.433122][ T356] kasan_report+0x13c/0x170
[ 44.437448][ T356] ? ihold+0x19/0x30
[ 44.441277][ T356] kasan_check_range+0x294/0x2a0
[ 44.446131][ T356] __kasan_check_write+0x14/0x20
[ 44.451089][ T356] ihold+0x19/0x30
[ 44.454689][ T356] backing_data_changed+0x1ce/0x4b0
[ 44.459840][ T356] ? fuse_init_symlink+0x70/0x70
[ 44.464614][ T356] ? kasan_save_alloc_info+0x1f/0x30
[ 44.469920][ T356] ? dput+0x219/0x250
[ 44.473750][ T356] fuse_dentry_revalidate+0x76e/0xbd0
[ 44.479037][ T356] ? fuse_invalidate_entry_cache+0x250/0x250
[ 44.484929][ T356] ? __kasan_check_write+0x14/0x20
[ 44.490048][ T356] ? __d_lookup+0x3b5/0x400
[ 44.494476][ T356] __lookup_hash+0x98/0x1f0
[ 44.499258][ T356] do_renameat2+0x564/0x10d0
[ 44.503770][ T356] ? fsnotify_move+0x400/0x400
[ 44.508451][ T356] ? __kasan_slab_alloc+0x6c/0x80
[ 44.513401][ T356] ? getname_flags+0xe7/0x440
[ 44.517910][ T356] __x64_sys_rename+0x81/0x90
[ 44.522421][ T356] do_syscall_64+0x3d/0xb0
[ 44.526673][ T356] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 44.532408][ T356] RIP: 0033:0x7f1a36a7cae9
[ 44.536851][ T356] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 44.557286][ T356] RSP: 002b:00007f1a3783e0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[ 44.566023][ T356] RAX: ffffffffffffffda RBX: 00007f1a36b9c050 RCX: 00007f1a36a7cae9
[ 44.574378][ T356] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000020000100
[ 44.582515][ T356] RBP: 00007f1a36ac847a R08: 0000000000000000 R09: 0000000000000000
[ 44.591044][ T356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 44.599349][ T356] R13: 000000000000006e R14: 00007f1a36b9c050 R15: 00007ffd3c93dde8
[ 44.607161][ T356]
[ 44.610109][ T356] ==================================================================
[ 44.619446][ T356] Disabling lock debugging due to kernel taint
[ 44.626055][ T356] BUG: kernel NULL pointer dereference, address: 0000000000000160
[ 44.634660][ T356] #PF: supervisor write access in kernel mode
[ 44.640731][ T356] #PF: error_code(0x0002) - not-present page
[ 44.646854][ T356] PGD 1249ad067 P4D 1249ad067 PUD 1249b1067 PMD 0
[ 44.653562][ T356] Oops: 0002 [#1] PREEMPT SMP KASAN
[ 44.659030][ T356] CPU: 1 PID: 356 Comm: syz-executor.0 Tainted: G B 6.1.25-syzkaller #0
[ 44.668666][ T356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023
[ 44.678639][ T356] RIP: 0010:ihold+0x1e/0x30
[ 44.682994][ T356] Code: 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 53 48 89 fb 48 81 c7 60 01 00 00 be 04 00 00 00 e8 07 aa f2 ff b8 01 00 00 00 0f c1 83 60 01 00 00 5b 5d c3 0f 1f 80 00 00 00 00 55 48 89 e5
[ 44.703131][ T356] RSP: 0018:ffffc90000e277e8 EFLAGS: 00010246
[ 44.709201][ T356] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff813b3220
[ 44.717013][ T356] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff85c8c7a0
[ 44.724990][ T356] RBP: ffffc90000e277f0 R08: dffffc0000000000 R09: fffffbfff0b918f5
[ 44.732802][ T356] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[ 44.740891][ T356] R13: ffffc90000e278a0 R14: 1ffff920001c4f0c R15: ffff88810b769600
[ 44.748771][ T356] FS: 00007f1a3783e6c0(0000) GS:ffff8881f7300000(0000) knlGS:0000000000000000
[ 44.757894][ T356] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 44.764649][ T356] CR2: 0000000000000160 CR3: 000000012499e000 CR4: 00000000003506a0
[ 44.772631][ T356] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 44.780532][ T356] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 44.788517][ T356] Call Trace:
[ 44.791635][ T356]
[ 44.794420][ T356] backing_data_changed+0x1ce/0x4b0
[ 44.799624][ T356] ? fuse_init_symlink+0x70/0x70
[ 44.804658][ T356] ? kasan_save_alloc_info+0x1f/0x30
[ 44.810147][ T356] ? dput+0x219/0x250
[ 44.813956][ T356] fuse_dentry_revalidate+0x76e/0xbd0
[ 44.819357][ T356] ? fuse_invalidate_entry_cache+0x250/0x250
[ 44.826238][ T356] ? __kasan_check_write+0x14/0x20
[ 44.831165][ T356] ? __d_lookup+0x3b5/0x400
[ 44.835689][ T356] __lookup_hash+0x98/0x1f0
[ 44.840508][ T356] do_renameat2+0x564/0x10d0
[ 44.844995][ T356] ? fsnotify_move+0x400/0x400
[ 44.849882][ T356] ? __kasan_slab_alloc+0x6c/0x80
[ 44.855163][ T356] ? getname_flags+0xe7/0x440
[ 44.859978][ T356] __x64_sys_rename+0x81/0x90
[ 44.864865][ T356] do_syscall_64+0x3d/0xb0
[ 44.869200][ T356] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 44.875134][ T356] RIP: 0033:0x7f1a36a7cae9
[ 44.879388][ T356] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 44.900812][ T356] RSP: 002b:00007f1a3783e0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[ 44.910011][ T356] RAX: ffffffffffffffda RBX: 00007f1a36b9c050 RCX: 00007f1a36a7cae9
[ 44.917905][ T356] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000020000100
[ 44.926600][ T356] RBP: 00007f1a36ac847a R08: 0000000000000000 R09: 0000000000000000
[ 44.934576][ T356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 44.942890][ T356] R13: 000000000000006e R14: 00007f1a36b9c050 R15: 00007ffd3c93dde8
[ 44.951189][ T356]
[ 44.954650][ T356] Modules linked in:
[ 44.958377][ T356] CR2: 0000000000000160
[ 44.962370][ T356] ---[ end trace 0000000000000000 ]---
[ 44.968036][ T356] RIP: 0010:ihold+0x1e/0x30
[ 44.972562][ T356] Code: 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 53 48 89 fb 48 81 c7 60 01 00 00 be 04 00 00 00 e8 07 aa f2 ff b8 01 00 00 00 0f c1 83 60 01 00 00 5b 5d c3 0f 1f 80 00 00 00 00 55 48 89 e5
[ 44.992610][ T356] RSP: 0018:ffffc90000e277e8 EFLAGS: 00010246
[ 44.999071][ T356] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff813b3220
[ 45.008039][ T356] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffffff85c8c7a0
[ 45.016020][ T356] RBP: ffffc90000e277f0 R08: dffffc0000000000 R09: fffffbfff0b918f5
[ 45.024568][ T356] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[ 45.033918][ T356] R13: ffffc90000e278a0 R14: 1ffff920001c4f0c R15: ffff88810b769600
[ 45.042235][ T356] FS: 00007f1a3783e6c0(0000) GS:ffff8881f7300000(0000) knlGS:0000000000000000
[ 45.051266][ T356] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 45.058411][ T356] CR2: 0000000000000160 CR3: 000000012499e000 CR4: 00000000003506a0
[ 45.066740][ T356] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 45.074840][ T356] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 45.082889][ T356] Kernel panic - not syncing: Fatal exception
[ 45.089061][ T356] Kernel Offset: disabled
[ 45.093200][ T356] Rebooting in 86400 seconds..