Jul[  154.036704][ T2666] Write-error on swap-device (8:0:796182)
 25 07:33:07 syzkaller kern.alert kernel: [  154.001470][ T2666] Write-error on swap-device (8:0:796118)
Jul 25 07:33:07 syzkaller kern.alert kernel: [  154.007596][ T2666] Write-error on swap-device (8:0:796126)
Jul 25 07:33:07 syzkaller kern.alert kernel: [  154.01484[  154.087158][  T300] ------------[ cut here ]------------
7][ T2666] Write[  154.093193][  T300] WARNING: CPU: 0 PID: 300 at fs/inode.c:340 drop_nlink+0xce/0x110 fs/inode.c:340
-error on swap-d[  154.102440][  T300] Modules linked in:
evice (8:0:79613[  154.107622][  T300] CPU: 0 UID: 0 PID: 300 Comm: syz-executor Not tainted syzkaller #0 a4a563d0c71b2f3eba821a1af94cbf4bdc8174ca
4)
Jul 25 07:33[  154.120803][  T300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
:07 syzkaller ke[  154.132306][  T300] RIP: 0010:drop_nlink+0xce/0x110 fs/inode.c:340
rn.alert kernel:[  154.138631][  T300] Code: 04 00 00 be 08 00 00 00 e8 4f 14 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 58 ee b3 03 cc e8 32 51 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c
 [  154.022259][[  154.159843][  T300] RSP: 0018:ffffc9000b68fc88 EFLAGS: 00010293
 T2666] Write-er[  154.167405][  T300] RAX: ffffffff81f2208e RBX: ffff888119a330c8 RCX: ffff88812abfcc00
ror on swap-devi[  154.176738][  T300] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
ce (8:0:796142)[  154.186424][  T300] RBP: ffffc9000b68fcb0 R08: 0000000000000003 R09: 0000000000000004

Jul 25 07:33:07[  154.195821][  T300] R10: dffffc0000000000 R11: fffff520016d1f80 R12: dffffc0000000000
 syzkaller kern.[  154.205198][  T300] R13: 1ffff11023346622 R14: ffff888119a33110 R15: 0000000000000000
alert kernel: [ [  154.214626][  T300] FS:  0000555579de1500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
 154.029200][ T2[  154.224924][  T300] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
666] Write-error[  154.233085][  T300] CR2: 0000001b2f31fff8 CR3: 0000000130706000 CR4: 00000000003526b0
 on swap-device [  154.242522][  T300] Call Trace:
(8:0:796150)
Ju[  154.247064][  T300]  <TASK>
l 25 07:33:07 sy[  154.251550][  T300]  shmem_rmdir+0x5f/0x90 mm/shmem.c:3826
zkaller kern.ale[  154.257101][  T300]  vfs_rmdir+0x3db/0x560 fs/namei.c:4348
rt kernel: [  15[  154.262882][  T300]  incfs_kill_sb+0x102/0x220 fs/incfs/vfs.c:1968
4.036360][ T2666[  154.268799][  T300]  deactivate_locked_super+0xd2/0x270 fs/super.c:478
] Write-error on[  154.275739][  T300]  deactivate_super+0xb8/0xe0 fs/super.c:511
 swap-device (8:[  154.281825][  T300]  cleanup_mnt+0x438/0x4d0 fs/namespace.c:1380
0:796158)
Jul 2[  154.287565][  T300]  __cleanup_mnt+0x1d/0x40 fs/namespace.c:1387
5 07:33:07 syzka[  154.293524][  T300]  task_work_run+0x1e8/0x260 kernel/task_work.c:246
ller kern.alert [  154.299461][  T300]  ? __cfi_task_work_run+0x10/0x10 kernel/task_work.c:-1
kernel: [  154.0[  154.306125][  T300]  ? ksys_umount fs/namespace.c:2053 [inline]
kernel: [  154.0[  154.306125][  T300]  ? __do_sys_umount fs/namespace.c:2058 [inline]
kernel: [  154.0[  154.306125][  T300]  ? __se_sys_umount fs/namespace.c:2056 [inline]
kernel: [  154.0[  154.306125][  T300]  ? __x64_sys_umount+0x12e/0x180 fs/namespace.c:2056
36430][ T2666] W[  154.310472][   T45] usb 4-1: new high-speed USB device number 54 using dummy_hcd
rite-error on sw[  154.312621][  T300]  ? __kasan_check_read+0x15/0x20 mm/kasan/shadow.c:31
ap-device (8:0:7[  154.312681][  T300]  resume_user_mode_work+0x35/0x50 include/linux/resume_user_mode.h:50
96166)
Jul 25 0[  154.339777][  T300]  exit_to_user_mode_loop kernel/entry/common.c:114 [inline]
Jul 25 0[  154.339777][  T300]  exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline]
Jul 25 0[  154.339777][  T300]  __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
Jul 25 0[  154.339777][  T300]  syscall_exit_to_user_mode+0x63/0xb0 kernel/entry/common.c:218
7:33:07 syzkalle[  154.346915][  T300]  do_syscall_64+0x63/0xf0 arch/x86/entry/common.c:84
r kern.alert ker[  154.352665][  T300]  ? clear_bhb_loop+0x50/0xa0 arch/x86/entry/entry_64.S:1545
nel: [  154.0365[  154.358669][  T300]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
10][ T2666] Writ[  154.366106][  T300] RIP: 0033:0x7f182699f0d7
e-error on swap-[  154.371909][  T300] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
device (8:0:7961[  154.393024][  T300] RSP: 002b:00007ffd4d8421d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
74)
Jul 25 07:3[  154.402872][  T300] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f182699f0d7
3:07 syzkaller k[  154.412239][  T300] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd4d842290
ern.alert kernel[  154.421645][  T300] RBP: 00007ffd4d842290 R08: 00007ffd4d843290 R09: 00000000ffffffff
: [  154.036704][  154.431080][  T300] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd4d843320
[ T2666] Write-e[  154.440502][  T300] R13: 00007f1826a3330a R14: 00000000000257ce R15: 00007ffd4d843360
rror on swap-dev[  154.449831][  T300]  </TASK>
ice (8:0:796182)[  154.454507][  T300] ---[ end trace 0000000000000000 ]---

Jul 25 07:33:07 [  154.921288][  T300]  d_delete_notify include/linux/fsnotify.h:357 [inline]
Jul 25 07:33:07 [  154.921288][  T300]  vfs_rmdir+0x25c/0x560 fs/namei.c:4361
syzkaller kern.a[  154.926977][  T300]  incfs_kill_sb+0x102/0x220 fs/incfs/vfs.c:1968
lert kernel: [  [  154.947933][  T300]  __cleanup_mnt+0x1d/0x40 fs/namespace.c:1387
154.737576][  T3[  154.953841][  T300]  task_work_run+0x1e8/0x260 kernel/task_work.c:246
00] BUG: kernel [  154.975828][  T300]  ? __kasan_check_read+0x15/0x20 mm/kasan/shadow.c:31
NULL pointer der[  154.982525][  T300]  resume_user_mode_work+0x35/0x50 include/linux/resume_user_mode.h:50
eference, addres[  154.989132][  T300]  exit_to_user_mode_loop kernel/entry/common.c:114 [inline]
eference, addres[  154.989132][  T300]  exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline]
eference, addres[  154.989132][  T300]  __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline]
eference, addres[  154.989132][  T300]  syscall_exit_to_user_mode+0x63/0xb0 kernel/entry/common.c:218
s: 0000000000000[  154.996031][  T300]  do_syscall_64+0x63/0xf0 arch/x86/entry/common.c:84
168
Jul 25 07:3[  155.001878][  T300]  ? clear_bhb_loop+0x50/0xa0 arch/x86/entry/entry_64.S:1545
3:07 syzkaller k[  155.008087][  T300]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
ern.alert kernel[  155.015379][  T300] RIP: 0033:0x7f182699f0d7
: [  154.745400][  155.021224][  T300] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  T300] #PF: su[  155.042260][  T300] RSP: 002b:00007ffd4d8421d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
pervisor write a[  155.052082][  T300] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f182699f0d7
ccess in kernel [  155.061467][  T300] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd4d842290
mode
Jul 25 07:[  155.070889][  T300] RBP: 00007ffd4d842290 R08: 00007ffd4d843290 R09: 00000000ffffffff
33:07 syzkaller [  155.080534][  T300] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd4d843320
kern.alert kerne[  155.089947][  T300] R13: 00007f1826a3330a R14: 00000000000257ce R15: 00007ffd4d843360
l: [  154.751477[  155.099630][  T300]  </TASK>
][  T300] #PF: e[  155.104244][  T300] Modules linked in:
rror_code(0x0002[  155.109573][  T300] CR2: 0000000000000168
) - not-present [  155.115127][  T300] ---[ end trace 0000000000000000 ]---
page