Warning: Permanently added '10.128.0.88' (ED25519) to the list of known hosts.
2025/01/11 04:09:43 ignoring optional flag "sandboxArg"="0"
2025/01/11 04:09:43 ignoring optional flag "type"="gce"
2025/01/11 04:09:43 parsed 1 programs
[   37.879846][   T29] kauditd_printk_skb: 20 callbacks suppressed
[   37.879851][   T29] audit: type=1400 audit(1736568583.885:96): avc:  denied  { mounton } for  pid=336 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   37.910597][   T29] audit: type=1400 audit(1736568583.885:97): avc:  denied  { read write } for  pid=336 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   37.936388][   T29] audit: type=1400 audit(1736568583.885:98): avc:  denied  { open } for  pid=336 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
2025/01/11 04:09:44 executed programs: 0
[   37.962137][   T29] audit: type=1400 audit(1736568583.945:99): avc:  denied  { unlink } for  pid=336 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   37.987755][   T29] audit: type=1400 audit(1736568583.945:100): avc:  denied  { relabelto } for  pid=337 comm="mkswap" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   38.016353][  T336] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   38.053233][  T345] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.060059][  T345] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.067084][  T345] device bridge_slave_0 entered promiscuous mode
[   38.073648][  T345] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.080502][  T345] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.087527][  T345] device bridge_slave_1 entered promiscuous mode
[   38.093722][  T349] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.100499][  T349] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.107561][  T349] device bridge_slave_0 entered promiscuous mode
[   38.115254][  T350] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.122100][  T350] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.129010][  T350] device bridge_slave_0 entered promiscuous mode
[   38.135750][  T349] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.142643][  T349] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.149495][  T349] device bridge_slave_1 entered promiscuous mode
[   38.156934][  T350] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.163761][  T350] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.170684][  T350] device bridge_slave_1 entered promiscuous mode
[   38.191626][  T347] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.198454][  T347] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.205417][  T347] device bridge_slave_0 entered promiscuous mode
[   38.211863][  T347] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.218703][  T347] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.225732][  T347] device bridge_slave_1 entered promiscuous mode
[   38.238793][  T352] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.245696][  T352] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.252707][  T352] device bridge_slave_0 entered promiscuous mode
[   38.258861][  T352] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.265609][  T352] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.272550][  T352] device bridge_slave_1 entered promiscuous mode
[   38.282149][  T349] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.288978][  T349] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.296041][  T349] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.302877][  T349] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.317106][  T347] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.323941][  T347] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.331062][  T347] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.337919][  T347] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.347938][  T345] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.354775][  T345] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.361980][  T345] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.368911][  T345] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.381414][  T350] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.388245][  T350] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.395293][  T350] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.402226][  T350] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.410755][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.417905][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.425220][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.432273][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.439478][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.446497][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.453658][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.460708][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.467923][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   38.475073][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   38.484888][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   38.492008][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   38.499724][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.506567][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.513839][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   38.521735][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.528629][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.535764][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   38.543659][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.550472][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.562949][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   38.570275][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   38.577415][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   38.584508][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   38.592421][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.599242][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.606481][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   38.614327][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.621105][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.628211][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   38.635809][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   38.643300][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   38.651085][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.657921][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.665105][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   38.673009][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.679784][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.686887][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   38.694789][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.701579][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.708664][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   38.716369][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   38.724880][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   38.732489][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   38.741234][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   38.751291][  T352] device veth0_vlan entered promiscuous mode
[   38.757768][  T347] device veth0_vlan entered promiscuous mode
[   38.764000][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   38.772113][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   38.779626][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   38.786718][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   38.793909][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   38.801959][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   38.809458][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   38.816735][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   38.823822][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   38.831310][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   38.839078][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   38.846665][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   38.854926][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   38.862748][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.869553][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.877502][  T349] device veth0_vlan entered promiscuous mode
[   38.884635][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   38.892210][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   38.899238][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   38.906481][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   38.914391][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.921206][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.929145][  T352] device veth1_macvtap entered promiscuous mode
[   38.937488][  T345] device veth0_vlan entered promiscuous mode
[   38.943783][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   38.951755][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   38.959336][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   38.966679][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   38.974113][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   38.981949][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   38.989779][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   38.997384][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   39.005346][  T347] device veth1_macvtap entered promiscuous mode
[   39.013492][  T350] device veth0_vlan entered promiscuous mode
[   39.019554][  T345] device veth1_macvtap entered promiscuous mode
[   39.026375][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   39.034322][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   39.042468][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   39.049983][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   39.057168][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   39.064411][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   39.072501][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   39.080668][  T349] device veth1_macvtap entered promiscuous mode
[   39.088167][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   39.096045][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   39.104028][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   39.111935][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   39.119854][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   39.127773][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   39.136436][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   39.144409][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   39.154943][  T350] device veth1_macvtap entered promiscuous mode
[   39.162533][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   39.170459][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   39.178471][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   39.186398][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   39.194293][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   39.201721][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   39.209558][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   39.217531][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   39.225790][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   39.237997][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   39.245910][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   39.253902][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   39.261888][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   39.277029][   T29] audit: type=1400 audit(1736568585.285:101): avc:  denied  { read write } for  pid=372 comm="syz-executor.0" name="fuse" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   39.305724][   T29] audit: type=1400 audit(1736568585.285:102): avc:  denied  { open } for  pid=372 comm="syz-executor.0" path="/dev/fuse" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   39.329593][   T29] audit: type=1400 audit(1736568585.285:103): avc:  denied  { mounton } for  pid=372 comm="syz-executor.0" path="/root/syzkaller-testdir3860104831/syzkaller.Mkonxw/0/file0" dev="sda1" ino=1954 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   39.406915][  T393] BUG: kernel NULL pointer dereference, address: 0000000000000038
[   39.414612][  T393] #PF: supervisor read access in kernel mode
[   39.420536][  T393] #PF: error_code(0x0000) - not-present page
[   39.426562][  T393] PGD 10d85b067 P4D 10d85b067 PUD 10e18d067 PMD 0 
[   39.433075][  T393] Oops: 0000 [#1] PREEMPT SMP
[   39.437583][  T393] CPU: 0 PID: 393 Comm: syz-executor.4 Not tainted 5.15.175-syzkaller #0
[   39.445826][  T393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   39.455735][  T393] RIP: 0010:open_or_create_special_dir+0x27/0xd0
[   39.461967][  T393] Code: 00 00 00 55 48 89 e5 41 56 41 55 41 54 53 48 89 d3 4c 8b 6f 30 e8 09 98 ff ff 48 85 c0 74 76 48 3d 00 f0 ff ff 49 89 c4 77 0a <48> 83 78 30 00 74 0f c6 03 00 5b 4c 89 e0 41 5c 41 5d 41 5e 5d c3
[   39.481525][  T393] RSP: 0018:ffffc90000553da8 EFLAGS: 00010203
[   39.487425][  T393] RAX: 0000000000000008 RBX: ffffc90000553ddf RCX: 0000000000000000
[   39.495233][  T393] RDX: 0000000000000001 RSI: ffff8881113f8000 RDI: 00000000ffffffff
[   39.503047][  T393] RBP: ffffc90000553dc8 R08: 0000000000000008 R09: 0000000000000064
[   39.510962][  T393] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000008
[   39.518749][  T393] R13: ffff88810ad8a000 R14: ffff88810d5a2000 R15: ffff88810d406180
[   39.526564][  T393] FS:  00007f353c7936c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000
[   39.535448][  T393] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   39.541864][  T393] CR2: 0000000000000038 CR3: 000000010e17a000 CR4: 00000000003506b0
[   39.549675][  T393] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   39.557485][  T393] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   39.565295][  T393] Call Trace:
[   39.568421][  T393]  <TASK>
[   39.571200][  T393]  ? show_regs.part.0+0x1e/0x20
[   39.575886][  T393]  ? __die+0x5d/0x9e
[   39.579624][  T393]  ? page_fault_oops+0x12d/0x280
[   39.584406][  T393]  ? do_user_addr_fault+0x43d/0x6e0
[   39.589427][  T393]  ? preempt_count_add+0x77/0xa0
[   39.594208][  T393]  ? debug_smp_processor_id+0x17/0x20
[   39.599409][  T393]  ? __call_rcu_common.constprop.0+0x19b/0x540
[   39.605398][  T393]  ? call_rcu+0x9/0x10
[   39.609303][  T393]  ? dentry_free+0x3d/0x60
[   39.613664][  T393]  ? __dentry_kill+0x148/0x1c0
[   39.618263][  T393]  ? exc_page_fault+0x67/0x160
[   39.622844][  T393]  ? asm_exc_page_fault+0x27/0x30
[   39.627705][  T393]  ? open_or_create_special_dir+0x27/0xd0
[   39.633331][  T393]  ? open_or_create_special_dir+0x17/0xd0
[   39.638816][  T393]  incfs_mount_fs+0x1ad/0x2f0
[   39.643415][  T393]  legacy_get_tree+0x26/0x50
[   39.647851][  T393]  vfs_get_tree+0x1a/0x70
[   39.652004][  T393]  path_mount+0x307/0xba0
[   39.656256][  T393]  ? putname+0x50/0x60
[   39.660164][  T393]  __x64_sys_mount+0x103/0x140
[   39.664770][  T393]  x64_sys_call+0x50d/0x990
[   39.669108][  T393]  do_syscall_64+0x33/0xb0
[   39.673356][  T393]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   39.679084][  T393] RIP: 0033:0x7f353cc32da9
[   39.683426][  T393] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[   39.703246][  T393] RSP: 002b:00007f353c7930c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   39.711466][  T393] RAX: ffffffffffffffda RBX: 00007f353cd61050 RCX: 00007f353cc32da9
[   39.719273][  T393] RDX: 0000000020000180 RSI: 00000000200000c0 RDI: 0000000020000080
[   39.727195][  T393] RBP: 00007f353cc7f47a R08: 0000000000000000 R09: 0000000000000000
[   39.735002][  T393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   39.742810][  T393] R13: 000000000000006e R14: 00007f353cd61050 R15: 00007ffd9fa05a08
[   39.750623][  T393]  </TASK>
[   39.753484][  T393] Modules linked in:
[   39.757232][  T393] CR2: 0000000000000038
[   39.761218][  T393] ---[ end trace cf8d820e0d0ef545 ]---
[   39.761262][  T392] BUG: kernel NULL pointer dereference, address: 0000000000000038
[   39.766506][  T393] RIP: 0010:open_or_create_special_dir+0x27/0xd0
[   39.774234][  T392] #PF: supervisor read access in kernel mode
[   39.780394][  T393] Code: 00 00 00 55 48 89 e5 41 56 41 55 41 54 53 48 89 d3 4c 8b 6f 30 e8 09 98 ff ff 48 85 c0 74 76 48 3d 00 f0 ff ff 49 89 c4 77 0a <48> 83 78 30 00 74 0f c6 03 00 5b 4c 89 e0 41 5c 41 5d 41 5e 5d c3
[   39.786208][  T392] #PF: error_code(0x0000) - not-present page
[   39.805734][  T393] RSP: 0018:ffffc90000553da8 EFLAGS: 00010203
[   39.811553][  T392] PGD 10e14b067 P4D 10e14b067 PUD 10e14e067 PMD 0 
[   39.817555][  T393] RAX: 0000000000000008 RBX: ffffc90000553ddf RCX: 0000000000000000
[   39.817557][  T392] 
[   39.817558][  T393] RDX: 0000000000000001 RSI: ffff8881113f8000 RDI: 00000000ffffffff
[   39.823910][  T392] Oops: 0000 [#2] PREEMPT SMP
[   39.831724][  T393] RBP: ffffc90000553dc8 R08: 0000000000000008 R09: 0000000000000064
[   39.833874][  T392] CPU: 1 PID: 392 Comm: syz-executor.3 Tainted: G      D           5.15.175-syzkaller #0
[   39.841849][  T393] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000008
[   39.846356][  T392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   39.854182][  T393] R13: ffff88810ad8a000 R14: ffff88810d5a2000 R15: ffff88810d406180
[   39.863794][  T392] RIP: 0010:open_or_create_special_dir+0x27/0xd0
[   39.871629][  T393] FS:  00007f353c7936c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000
[   39.881499][  T392] Code: 00 00 00 55 48 89 e5 41 56 41 55 41 54 53 48 89 d3 4c 8b 6f 30 e8 09 98 ff ff 48 85 c0 74 76 48 3d 00 f0 ff ff 49 89 c4 77 0a <48> 83 78 30 00 74 0f c6 03 00 5b 4c 89 e0 41 5c 41 5d 41 5e 5d c3
[   39.889312][  T393] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   39.895473][  T392] RSP: 0018:ffffc9000054bda8 EFLAGS: 00010203
[   39.904244][  T393] CR2: 0000000000000038 CR3: 000000010e17a000 CR4: 00000000003506b0
[   39.923693][  T392] 
[   39.930118][  T393] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   39.936006][  T392] RAX: 0000000000000008 RBX: ffffc9000054bddf RCX: 0000000000000000
[   39.943816][  T393] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   39.946001][  T392] RDX: 0000000000000007 RSI: ffff88810be1a500 RDI: 00000000ffffffff
[   39.953810][  T393] Kernel panic - not syncing: Fatal exception
[   39.961608][  T392] RBP: ffffc9000054bdc8 R08: 0000000000000008 R09: 0000000000000064
[   39.991031][  T392] R10: ffff88810cffc6c0 R11: 0000000000000001 R12: 0000000000000008
[   39.998851][  T392] R13: ffff88810ad88800 R14: ffff88810d5a2400 R15: ffff88810d4060c0
[   40.006656][  T392] FS:  00007f05c28ab6c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000
[   40.015424][  T392] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   40.021847][  T392] CR2: 0000000000000038 CR3: 000000010d601000 CR4: 00000000003506a0
[   40.029866][  T392] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   40.037680][  T392] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   40.045486][  T392] Call Trace:
[   40.048608][  T392]  <TASK>
[   40.051388][  T392]  ? show_regs.part.0+0x1e/0x20
[   40.056070][  T392]  ? __die+0x5d/0x9e
[   40.059805][  T392]  ? page_fault_oops+0x12d/0x280
[   40.064592][  T392]  ? do_user_addr_fault+0x43d/0x6e0
[   40.069609][  T392]  ? preempt_count_add+0x77/0xa0
[   40.074394][  T392]  ? debug_smp_processor_id+0x17/0x20
[   40.079599][  T392]  ? __call_rcu_common.constprop.0+0x19b/0x540
[   40.085579][  T392]  ? call_rcu+0x9/0x10
[   40.089486][  T392]  ? dentry_free+0x3d/0x60
[   40.093741][  T392]  ? __dentry_kill+0x148/0x1c0
[   40.098435][  T392]  ? exc_page_fault+0x67/0x160
[   40.103113][  T392]  ? asm_exc_page_fault+0x27/0x30
[   40.108061][  T392]  ? open_or_create_special_dir+0x27/0xd0
[   40.113616][  T392]  ? open_or_create_special_dir+0x17/0xd0
[   40.119169][  T392]  incfs_mount_fs+0x1ad/0x2f0
[   40.123683][  T392]  legacy_get_tree+0x26/0x50
[   40.128113][  T392]  vfs_get_tree+0x1a/0x70
[   40.132282][  T392]  path_mount+0x307/0xba0
[   40.136440][  T392]  ? putname+0x50/0x60
[   40.140347][  T392]  __x64_sys_mount+0x103/0x140
[   40.145034][  T392]  x64_sys_call+0x50d/0x990
[   40.149374][  T392]  do_syscall_64+0x33/0xb0
[   40.153626][  T392]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   40.159353][  T392] RIP: 0033:0x7f05c2d4ada9
[   40.163609][  T392] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[   40.183249][  T392] RSP: 002b:00007f05c28ab0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   40.191518][  T392] RAX: ffffffffffffffda RBX: 00007f05c2e79050 RCX: 00007f05c2d4ada9
[   40.199306][  T392] RDX: 0000000020000180 RSI: 00000000200000c0 RDI: 0000000020000080
[   40.207218][  T392] RBP: 00007f05c2d9747a R08: 0000000000000000 R09: 0000000000000000
[   40.215012][  T392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   40.222826][  T392] R13: 000000000000006e R14: 00007f05c2e79050 R15: 00007ffd09cb2c78
[   40.230641][  T392]  </TASK>
[   40.233501][  T392] Modules linked in:
[   40.237238][  T392] CR2: 0000000000000038
[   40.241231][  T392] ---[ end trace cf8d820e0d0ef546 ]---
[   40.246518][  T392] RIP: 0010:open_or_create_special_dir+0x27/0xd0
[   40.252684][  T392] Code: 00 00 00 55 48 89 e5 41 56 41 55 41 54 53 48 89 d3 4c 8b 6f 30 e8 09 98 ff ff 48 85 c0 74 76 48 3d 00 f0 ff ff 49 89 c4 77 0a <48> 83 78 30 00 74 0f c6 03 00 5b 4c 89 e0 41 5c 41 5d 41 5e 5d c3
[   40.272126][  T392] RSP: 0018:ffffc90000553da8 EFLAGS: 00010203
[   40.278027][  T392] RAX: 0000000000000008 RBX: ffffc90000553ddf RCX: 0000000000000000
[   40.285926][  T392] RDX: 0000000000000001 RSI: ffff8881113f8000 RDI: 00000000ffffffff
[   40.293741][  T392] RBP: ffffc90000553dc8 R08: 0000000000000008 R09: 0000000000000064
[   40.301550][  T392] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000008
[   40.309358][  T392] R13: ffff88810ad8a000 R14: ffff88810d5a2000 R15: ffff88810d406180
[   40.317272][  T392] FS:  00007f05c28ab6c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000
[   40.326249][  T392] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   40.332630][  T392] CR2: 0000000000000038 CR3: 000000010d601000 CR4: 00000000003506a0
[   40.340447][  T392] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   40.348252][  T392] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   41.081668][  T393] Shutting down cpus with NMI
[   41.086385][  T393] Kernel Offset: disabled
[   41.090496][  T393] Rebooting in 86400 seconds..