Warning: Permanently added '10.128.0.147' (ED25519) to the list of known hosts. 2024/04/21 18:59:10 ignoring optional flag "sandboxArg"="0" 2024/04/21 18:59:10 parsed 1 programs [ 42.254221][ T24] audit: type=1400 audit(1713725950.440:154): avc: denied { mounton } for pid=337 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 42.279119][ T24] audit: type=1400 audit(1713725950.440:155): avc: denied { mount } for pid=337 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 2024/04/21 18:59:10 executed programs: 0 [ 42.302600][ T24] audit: type=1400 audit(1713725950.470:156): avc: denied { unlink } for pid=337 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 42.328814][ T337] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 42.495121][ T350] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.502669][ T350] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.510783][ T350] device bridge_slave_0 entered promiscuous mode [ 42.518012][ T350] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.524912][ T350] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.533248][ T350] device bridge_slave_1 entered promiscuous mode [ 42.539847][ T349] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.546896][ T349] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.554499][ T349] device bridge_slave_0 entered promiscuous mode [ 42.561541][ T349] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.568557][ T349] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.575759][ T349] device bridge_slave_1 entered promiscuous mode [ 42.589398][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.596447][ T352] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.603665][ T352] device bridge_slave_0 entered promiscuous mode [ 42.624427][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.631268][ T352] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.638540][ T352] device bridge_slave_1 entered promiscuous mode [ 42.695983][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.703217][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.710714][ T353] device bridge_slave_0 entered promiscuous mode [ 42.719764][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.726858][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.734517][ T353] device bridge_slave_1 entered promiscuous mode [ 42.748679][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.755749][ T354] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.763039][ T354] device bridge_slave_0 entered promiscuous mode [ 42.778914][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.786100][ T354] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.793436][ T354] device bridge_slave_1 entered promiscuous mode [ 42.848842][ T24] audit: type=1400 audit(1713725951.030:157): avc: denied { write } for pid=352 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.873137][ T24] audit: type=1400 audit(1713725951.030:158): avc: denied { read } for pid=352 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.929631][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.936511][ T352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.943613][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.950371][ T352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.961511][ T349] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.968632][ T349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.975689][ T349] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.982567][ T349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.996805][ T350] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.003672][ T350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.010832][ T350] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.017844][ T350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.028828][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.036226][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.043403][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.050416][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.059369][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.066334][ T353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.073409][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.080272][ T353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.124491][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.132678][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.139770][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.147164][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.154289][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.161725][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.169129][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.176513][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.183989][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.191437][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.198781][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.216510][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.225084][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.232152][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.239708][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.248237][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.255267][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.274988][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.282801][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.290644][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.299118][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.307168][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.314236][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.322311][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.330251][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.337117][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.344503][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.373197][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.381372][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.388387][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.395922][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.404530][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.411450][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.418890][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.426686][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.434696][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.442032][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.449409][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.458055][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.465017][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.486996][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.495293][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.504460][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.513054][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.520964][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.527847][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.535088][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.543148][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.550924][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.559066][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.567029][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.575140][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.583293][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.591477][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.600149][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.608545][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.624388][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.631968][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.639227][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.648322][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.656630][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.663493][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.670826][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.679141][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.687324][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.694181][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.701489][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.709981][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.718445][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.726217][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.734358][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.742022][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.754855][ T354] device veth0_vlan entered promiscuous mode [ 43.766635][ T349] device veth0_vlan entered promiscuous mode [ 43.773962][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.782540][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.791019][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.799246][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.807400][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.815041][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.822367][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.829709][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.837752][ T352] device veth0_vlan entered promiscuous mode [ 43.855820][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.864758][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.873274][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.881302][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.890177][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.898232][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.906592][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.914888][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.922523][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.931531][ T354] device veth1_macvtap entered promiscuous mode [ 43.938631][ T350] device veth0_vlan entered promiscuous mode [ 43.947866][ T352] device veth1_macvtap entered promiscuous mode [ 43.958637][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 43.966447][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.975242][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.987698][ T349] device veth1_macvtap entered promiscuous mode [ 43.996409][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.004823][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.012790][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.020739][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.028995][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.050240][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.058628][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.067740][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.076314][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.084675][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.093172][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.101413][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.109925][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.118683][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.127096][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.143530][ T24] audit: type=1400 audit(1713725952.330:159): avc: denied { mounton } for pid=349 comm="syz-executor.2" path="/dev/binderfs" dev="devtmpfs" ino=357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 44.168252][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.177420][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.185795][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.194189][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.202560][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.210696][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.237379][ T353] device veth0_vlan entered promiscuous mode [ 44.244213][ T24] audit: type=1400 audit(1713725952.430:160): avc: denied { mounton } for pid=373 comm="syz-executor.2" path="/root/syzkaller-testdir1965724595/syzkaller.CBvV0U/0/file0" dev="sda1" ino=1947 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 44.249297][ T350] device veth1_macvtap entered promiscuous mode [ 44.283435][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.293619][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.301459][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.311184][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.318762][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.340408][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.348907][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.358103][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.366696][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.386822][ T353] device veth1_macvtap entered promiscuous mode [ 44.395973][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.404447][ T380] general protection fault, probably for non-canonical address 0xdffffc0000000007: 0000 [#1] PREEMPT SMP KASAN [ 44.415974][ T380] KASAN: null-ptr-deref in range [0x0000000000000038-0x000000000000003f] [ 44.424310][ T380] CPU: 0 PID: 380 Comm: syz-executor.1 Not tainted 5.10.209-syzkaller-999896-g8d3bb9cb3b7d #0 [ 44.434719][ T380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 44.444634][ T380] RIP: 0010:open_or_create_special_dir+0x89/0x1d0 [ 44.450905][ T380] Code: e8 4c 29 60 ff e9 00 01 00 00 e8 42 29 60 ff 48 c7 c3 ea ff ff ff e9 ef 00 00 00 4c 89 6d d0 4c 8d 6b 30 4d 89 ef 49 c1 ef 03 <43> 80 3c 37 00 74 08 4c 89 ef e8 f8 a2 9d ff 49 83 7d 00 00 74 26 [ 44.470890][ T380] RSP: 0018:ffffc900010d7ab8 EFLAGS: 00010202 [ 44.477010][ T380] RAX: 0000000000000008 RBX: 0000000000000008 RCX: ffff88810d2fbb40 [ 44.485379][ T380] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888123949ba0 [ 44.493399][ T380] RBP: ffffc900010d7af0 R08: dffffc0000000000 R09: ffffed1024729375 [ 44.501600][ T380] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888123949b00 [ 44.510122][ T380] R13: 0000000000000038 R14: dffffc0000000000 R15: 0000000000000007 [ 44.519780][ T380] FS: 00007f8c62f1f6c0(0000) GS:ffff8881f7200000(0000) knlGS:0000000000000000 [ 44.529964][ T380] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.537156][ T380] CR2: 00007f8c62efdfa8 CR3: 000000010f601000 CR4: 00000000003506b0 [ 44.545331][ T380] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 44.554550][ T380] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 44.563004][ T380] Call Trace: [ 44.566309][ T380] ? __die_body+0x62/0xb0 [ 44.570642][ T380] ? die_addr+0x9f/0xd0 [ 44.574658][ T380] ? exc_general_protection+0x3ff/0x490 [ 44.580154][ T380] ? __kasan_check_write+0x14/0x20 [ 44.585115][ T380] ? asm_exc_general_protection+0x1e/0x30 [ 44.590753][ T380] ? open_or_create_special_dir+0x89/0x1d0 [ 44.596398][ T380] ? open_or_create_special_dir+0x4f/0x1d0 [ 44.602331][ T380] incfs_mount_fs+0x48d/0xa10 [ 44.606944][ T380] ? incfs_unlink+0x80/0x80 [ 44.611253][ T380] ? vfs_parse_fs_string+0x18c/0x220 [ 44.616929][ T380] ? cap_capable+0x1ce/0x270 [ 44.621867][ T380] legacy_get_tree+0xf1/0x190 [ 44.626612][ T380] ? incfs_unlink+0x80/0x80 [ 44.631050][ T380] vfs_get_tree+0x88/0x290 [ 44.635304][ T380] do_new_mount+0x2ba/0xb30 [ 44.639762][ T380] ? do_move_mount_old+0x160/0x160 [ 44.645161][ T380] ? security_capable+0x87/0xb0 [ 44.649951][ T380] ? ns_capable+0x89/0xe0 [ 44.654122][ T380] path_mount+0x56f/0xcb0 [ 44.658528][ T380] __se_sys_mount+0x2c4/0x3b0 [ 44.663240][ T380] ? __x64_sys_mount+0xd0/0xd0 [ 44.667798][ T380] ? fpu__clear_all+0x20/0x20 [ 44.672417][ T380] __x64_sys_mount+0xbf/0xd0 [ 44.677498][ T380] do_syscall_64+0x34/0x70 [ 44.681688][ T380] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 44.687914][ T380] RIP: 0033:0x7f8c633beda9 [ 44.692199][ T380] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 44.712299][ T380] RSP: 002b:00007f8c62f1f0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 44.720634][ T380] RAX: ffffffffffffffda RBX: 00007f8c634ed050 RCX: 00007f8c633beda9 [ 44.728840][ T380] RDX: 0000000020000180 RSI: 00000000200000c0 RDI: 0000000020000080 [ 44.737216][ T380] RBP: 00007f8c6340b47a R08: 0000000000000000 R09: 0000000000000000 [ 44.744997][ T380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 44.753028][ T380] R13: 000000000000006e R14: 00007f8c634ed050 R15: 00007ffe2d981778 [ 44.760809][ T380] Modules linked in: [ 44.785649][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.799710][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.809381][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.818732][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.835012][ T380] ---[ end trace 501d9eb6cfe78355 ]--- [ 44.840763][ T380] RIP: 0010:open_or_create_special_dir+0x89/0x1d0 [ 44.847642][ T380] Code: e8 4c 29 60 ff e9 00 01 00 00 e8 42 29 60 ff 48 c7 c3 ea ff ff ff e9 ef 00 00 00 4c 89 6d d0 4c 8d 6b 30 4d 89 ef 49 c1 ef 03 <43> 80 3c 37 00 74 08 4c 89 ef e8 f8 a2 9d ff 49 83 7d 00 00 74 26 [ 44.871619][ T380] RSP: 0018:ffffc900010d7ab8 EFLAGS: 00010202 [ 44.877914][ T380] RAX: 0000000000000008 RBX: 0000000000000008 RCX: ffff88810d2fbb40 [ 44.886592][ T380] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888123949ba0 [ 44.895139][ T380] RBP: ffffc900010d7af0 R08: dffffc0000000000 R09: ffffed1024729375 [ 44.903351][ T380] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888123949b00 [ 44.911140][ T380] R13: 0000000000000038 R14: dffffc0000000000 R15: 0000000000000007 [ 44.919750][ T380] FS: 00007f8c62f1f6c0(0000) GS:ffff8881f7300000(0000) knlGS:0000000000000000 [ 44.929672][ T394] general protection fault, probably for non-canonical address 0xdffffc0000000007: 0000 [#2] PREEMPT SMP KASAN [ 44.941618][ T394] KASAN: null-ptr-deref in range [0x0000000000000038-0x000000000000003f] [ 44.950119][ T394] CPU: 1 PID: 394 Comm: syz-executor.3 Tainted: G D 5.10.209-syzkaller-999896-g8d3bb9cb3b7d #0 [ 44.953580][ T380] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.961662][ T394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 44.961687][ T394] RIP: 0010:open_or_create_special_dir+0x89/0x1d0 [ 44.961699][ T394] Code: e8 4c 29 60 ff e9 00 01 00 00 e8 42 29 60 ff 48 c7 c3 ea ff ff ff e9 ef 00 00 00 4c 89 6d d0 4c 8d 6b 30 4d 89 ef 49 c1 ef 03 <43> 80 3c 37 00 74 08 4c 89 ef e8 f8 a2 9d ff 49 83 7d 00 00 74 26 [ 44.961707][ T394] RSP: 0018:ffffc900011b7ab8 EFLAGS: 00010202 [ 44.961720][ T394] RAX: 0000000000000008 RBX: 0000000000000008 RCX: ffff88810fb73b40 [ 44.961728][ T394] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888123949720 [ 44.961736][ T394] RBP: ffffc900011b7af0 R08: dffffc0000000000 R09: ffffed10247292e5 [ 44.961759][ T394] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888123949680 [ 44.969331][ T380] CR2: 00007f43ea174d58 CR3: 000000010f601000 CR4: 00000000003506a0 [ 44.978633][ T394] R13: 0000000000000038 R14: dffffc0000000000 R15: 0000000000000007 [ 44.978645][ T394] FS: 00007f43ea1746c0(0000) GS:ffff8881f7300000(0000) knlGS:0000000000000000 [ 44.978653][ T394] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.978662][ T394] CR2: 00007f43ea153d58 CR3: 000000012451e000 CR4: 00000000003506a0 [ 44.978673][ T394] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 44.978680][ T394] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 44.978685][ T394] Call Trace: [ 44.978711][ T394] ? __die_body+0x62/0xb0 [ 44.978722][ T394] ? die_addr+0x9f/0xd0 [ 44.978750][ T394] ? exc_general_protection+0x3ff/0x490 [ 44.978774][ T394] ? __kasan_check_write+0x14/0x20 [ 44.986422][ T380] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 45.005087][ T394] ? asm_exc_general_protection+0x1e/0x30 [ 45.005105][ T394] ? open_or_create_special_dir+0x89/0x1d0 [ 45.005118][ T394] ? open_or_create_special_dir+0x4f/0x1d0 [ 45.005131][ T394] incfs_mount_fs+0x48d/0xa10 [ 45.005144][ T394] ? incfs_unlink+0x80/0x80 [ 45.005157][ T394] ? vfs_parse_fs_string+0x18c/0x220 [ 45.005169][ T394] ? cap_capable+0x1ce/0x270 [ 45.005181][ T394] legacy_get_tree+0xf1/0x190 [ 45.005202][ T394] ? incfs_unlink+0x80/0x80 [ 45.012025][ T380] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 45.018788][ T394] vfs_get_tree+0x88/0x290 [ 45.018802][ T394] do_new_mount+0x2ba/0xb30 [ 45.018816][ T394] ? do_move_mount_old+0x160/0x160 [ 45.018827][ T394] ? security_capable+0x87/0xb0 [ 45.018847][ T394] ? ns_capable+0x89/0xe0 [ 45.029221][ T380] Kernel panic - not syncing: Fatal exception [ 45.034771][ T394] path_mount+0x56f/0xcb0 [ 45.215074][ T394] __se_sys_mount+0x2c4/0x3b0 [ 45.219668][ T394] ? __x64_sys_mount+0xd0/0xd0 [ 45.224255][ T394] ? fpu__clear_all+0x20/0x20 [ 45.228865][ T394] __x64_sys_mount+0xbf/0xd0 [ 45.233541][ T394] do_syscall_64+0x34/0x70 [ 45.237793][ T394] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 45.243676][ T394] RIP: 0033:0x7f43ea613da9 [ 45.247990][ T394] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 45.267691][ T394] RSP: 002b:00007f43ea1740c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 45.276067][ T394] RAX: ffffffffffffffda RBX: 00007f43ea742050 RCX: 00007f43ea613da9 [ 45.283859][ T394] RDX: 0000000020000180 RSI: 00000000200000c0 RDI: 0000000020000080 [ 45.291756][ T394] RBP: 00007f43ea66047a R08: 0000000000000000 R09: 0000000000000000 [ 45.299662][ T394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 45.307478][ T394] R13: 000000000000006e R14: 00007f43ea742050 R15: 00007fff93dae998 [ 45.315385][ T394] Modules linked in: [ 45.319602][ T380] Kernel Offset: disabled [ 45.323765][ T380] Rebooting in 86400 seconds..