last executing test programs: 590.149285ms ago: executing program 3 (id=4): io_setup(0x2007, &(0x7f0000000440)=0x0) io_pgetevents(r0, 0x2, 0x2, &(0x7f0000000480)=[{}, {}], 0x0, 0x0) io_getevents(r0, 0x4, 0x0, &(0x7f0000000000), 0x0) io_destroy(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x12, 0xb, 0x4, 0x2, 0x0, 0x1}, 0x50) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000aca000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, &(0x7f0000000a00)="66baf80cb8044fdc87ef0fc7689e660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x54}], 0x1, 0x11, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r3, 0xffffffffffffffff}, 0x0, &(0x7f0000000980)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000009c0)={r4, &(0x7f0000000a00), 0x0}, 0x20) 468.418078ms ago: executing program 0 (id=1): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="abddd1b7", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4) (async, rerun: 64) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async, rerun: 64) recvmmsg(r0, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/180}, {&(0x7f0000000280)=""/122}, {&(0x7f0000000400)=""/165}, {&(0x7f00000004c0)=""/142}, {&(0x7f0000000640)=""/70}, {&(0x7f00000006c0)=""/179}], 0x0, &(0x7f0000000580)=""/70, 0x11}}], 0x40000000000029d, 0x2, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000900)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@grpquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2000000000000005}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@block_validity}, {@resgid}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x499, &(0x7f00000009c0)="$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") (async, rerun: 64) unshare(0x22020600) (rerun: 64) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6, 0xfc, 0x1}]}, 0x10) getsockopt$sock_buf(r1, 0x1, 0x1a, 0x0, &(0x7f00000010c0)=0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000e80)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000ec0)='./dev\x00', &(0x7f0000000f00)='devtmpfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000f40)='./mnt\x00', 0x1ff) (async, rerun: 64) mount(&(0x7f0000000f80)=@filename='./dev/sda1\x00', &(0x7f0000000fc0)='./mnt\x00', &(0x7f0000001000)='ext4\x00', 0x0, 0x0) (rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000001040)='./mnt\x00', 0x149000, 0x19a) (async, rerun: 32) pipe2(0x0, 0x0) (async, rerun: 32) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24}, 0x4800) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async, rerun: 64) setuid(0xee01) 413.68054ms ago: executing program 2 (id=3): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0xfff0) (async) sendmmsg$sock(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="b5", 0x1}], 0x1}}], 0x1, 0x4000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r2, 0x80, 0xba, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x4040000) 272.626503ms ago: executing program 2 (id=6): socket(0x28, 0x5, 0x0) socket(0x28, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x8800) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r2, &(0x7f00000004c0)={0x0, 0x400042cc, 0x10, 0x1, 0x80, 0x0, r3}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf132, 0x4000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8870, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x8}}], 0x1, 0x0, 0x0) 250.517813ms ago: executing program 1 (id=2): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000073"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r0}, 0xc) syz_usb_connect(0x3, 0x3a, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002020000402505a1a400010102030109022800010100c0320904000001020900000524001001052406000105240100000705810310"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xb0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = eventfd2(0x7, 0x801) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000340)={0x0, r2}) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f00000007c0)={0x0, r2}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./dev\x00', &(0x7f0000000640)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./dev/kmsg\x00', 0x1, 0x0) write$binfmt_script(r3, &(0x7f00000006c0)={'#! ', './file0/file0'}, 0x11) write(0xffffffffffffffff, &(0x7f0000000180)='8', 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2200000, &(0x7f0000000440)={[{@discard}, {}, {@quota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@lazytime}]}, 0xb, 0x572, &(0x7f0000000c40)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r4, 0x800448d3, &(0x7f0000000700)={@none, 0x5, 0x185, 0x3eb2, 0x533d, 0xc170, "29e48afc9856f110e37a4dae662c5217be2c26b4a3141b6a6a9f2034d41aa9fcc67fe2b691ba3fbf7914fa647516dd45235437913f260f7edba4e1b47b14e16f98b09d9f104a4f9753cecc61f48050826a4170de294fb05048848fb8534cbc0ef4b67807c78153dc5b8f58381906ce0dce3e9e3f548ec6d06fe815592d10bf6a"}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x9000) r5 = openat(r0, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) writev(r5, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x3fe00}], 0x1) 234.040424ms ago: executing program 3 (id=7): lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:usbmon_device_t:s0\x00', 0x25, 0x0) 162.753216ms ago: executing program 3 (id=8): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000740)={{0xffffffffffffffff, &(0x7f0000000000)='%\xbf*\'*\x00', 0x531001, &(0x7f0000000040)={@_ha_fsid={[0x80, 0x1]}, {0x1, 0x8000, 0x8001, 0x4}}, 0x0, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x101}, 0x6, &(0x7f0000000680)=[{0x1, 0xf6, &(0x7f0000000100)='\x00', &(0x7f0000000140)="fa37de7faece7afac835d11da42e6e23c2045f3f45dacfaabc59cf442b45a48803f91ecb92ce5fe4238095fd6365464fd1a6db37eed655806cdb91cca4f6bd3e9b0d8f32dd9e06198c03c49ed99e94b8757afb0a5d88fc7698afc41a9c34abf14a006b425f88d29208b1dad250d11d3bae9c7e3e4f97", 0x76, 0x42}, {0x3, 0x1, &(0x7f00000001c0)='^\x00', &(0x7f0000000200)="431a956946d4bf398ef4148d3f54b42419ee8c2438ec8ab1cdb517c15e9de89930cc2484a1ceb631cfe155705b3fcf80d27831cec3c90ac9ceead4dd0556d6543d5a2481c005697778316bcf54498e2c961f02e1c2e77884361b99e0b071fa7dbe624be2240f6f20017c8a5139917739034c08f59980cd0e542595d5dfa608bc97bc5a4cae1fb3a2846f3401e08d7a3250c1fa46dfa80296942d39780cbef7f8be5ae8fecf3033c8979cea602471e8767f5ba2c6eaaf6a168831e479a6ca8cfdbfe0", 0xc2, 0x10}, {0x2, 0x70, &(0x7f0000000300)='\x00', &(0x7f0000000340)="c86a4b842bcaaf9a57e7dd413a0438ee5f4a3ab3b5b551748982a6b0d046b1a05af52cdd7aae4d8dd5979386a5d4dd8648ea9ac4d096d667f15cd28e9f09ffb9246ab62bfe05cd2461b2602c92e30a8de7cdb9d09d51da254128eb53ccb4b1a173e9d0c52d381c7469cfc0bcce8c8cce67d3c6983be2460d4b5209d01ba808400c173d7c16e327f5abfa3809c75c24d109223b215974419321d40d7d2f29690b428a5178e411079ab3f422c2", 0xac, 0x22}, {0x2, 0x401, &(0x7f0000000400)='}\x00', &(0x7f0000000440)="a9aeeced5785da54f02cf93da1f3db5fac5061102401ddbb046d004f0319948a91fe08aa6cad6e4e24b82b98d22403f8f6bea7f1a69052e0a5643d5e82e911aae5b97abf5a7b7226a45370f6f43edfebd7600596074d436eba48b218b7bad8544d8b083487f5db61086e4652444a1433a116d7b17c8c61779d886f6f75fca9d24d89a96787b69b0266ef19a202cf53fd6198d44293607ad66aab6fa1ab427cd687d10b03", 0xa4, 0x28}, {0x2, 0x0, &(0x7f0000000500)=':-\x00', &(0x7f0000000540)="6d9f3a627cc77a9a0c52095637db19c5e8c52dff48ae82d6d752e2b711292c51a03101d1f71f3d126ca6e84050d61a866c53902630a6005d48d09df9e8042ce99401c1e4e6682822368536c891563b22e7a68a71d466dbbbf6edd1dd6a371fb13eaa8f75707f4402594556a791c73c1ce192879789777b0294e3fa97d2a18fbcbf52436cc6a54915c114a644cad8", 0x8e}, {0x3, 0x2, &(0x7f0000000600)='&\\}\x00', &(0x7f0000000640)="cacfe5df581b6d24012d3933f71375b89f9e7d0d45811411df420af45be4eeee0994fbf49657dcea5d5edd040dc80a552ff101202e30", 0x36, 0x18}]}) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000007c0)={0x7, 0x9, 0x7, 0x400, 0x18, "0b57d77a998e7af17aa8378d307b3ca775a4bd"}) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000800)={0x5, 0x7f, 0x7, 0x7, 0x1ed8, 0xac7b}) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000840)={0x4, 0x9, 0x8, 0xbde, 0x8, 0x8}) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000880)) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f00000008c0)) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000900)={0x6, 0xb2}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000940), 0x404800, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000980)) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f00000009c0)=0x8, 0x4) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000a00), 0x4) fstat(r0, &(0x7f0000000a40)) fstat(r1, &(0x7f0000000ac0)) ioctl$int_in(r0, 0x5452, &(0x7f0000000b40)) r3 = ioctl$KVM_GET_STATS_FD_vm(r0, 0xaece) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000b80)=0x6) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000bc0)={0x0, 0x9, 0x1000, 0x3, 0x7, "3497b524f9da4aec8bdb894eeacbeeaa52a752"}) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000c00)={0x8001, 0x6, 0x4, 0x7ff, 0x2, "c2c4d5f41326909e8d8cb7a8a2a13ad8023939", 0x8, 0x4989}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c80), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x48, r4, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x10) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000dc0)={{0xa, 0x4e23, 0x7fff, @empty, 0x4}, {0xa, 0x4e23, 0x3, @local, 0x3ff}, 0x0, {[0x8, 0xfd36, 0x3, 0x6000, 0x0, 0x3, 0x8, 0x6]}}, 0x5c) timer_create(0x7, &(0x7f0000000fc0)={0x0, 0x1a, 0x2, @thr={&(0x7f0000000e40)="d17d2d2fc7c2cf53970f7f1d3ac953f4b4e2903c7bd8025bd60d7de5c78eb4811a44e5b23721cb9c101c693362db370e64928d5fc2449769a2f945879284d223201886eb0c2bac312c5210bd2c1603a236011b354309e241e395e51b509d4e0377cb318157702eb53f279f3630ee0c39ba447698a10bd32b2a45c4ccc296e4ee84bf873e3a25421053e6b6f0f32d6df1c23f074654e79ae310d21ed5f0dfcc9a9cde4177ab6d31df12fedc54a1ce98a46a79070fceaf95c10c56c5ace26766cf9907037b3baeecfb0e852432aa94480e0cf03f15dde1cc7ad001efe6cacb9a", &(0x7f0000000f40)="013d312271f6df4e1dff0368741a40b47f6e04c581dbb2c4d2acc1c4b6feb9eeba7a12b8199867a78ea6d86f4cf36986888def0104f66608bc09596827542f7d03cc5c2a262aa9aebc53e60596b653f8932de21907057ecd96034bfc77d2d4d8ec8a6434056a1ff4305b555f5449a717333f17899a"}}, &(0x7f0000001000)=0x0) timer_settime(r5, 0x1, &(0x7f0000001040)={{0x0, 0x3938700}}, &(0x7f0000001080)) pread64(r3, &(0x7f00000010c0)=""/73, 0x49, 0xf9ef) ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f00000011c0)={&(0x7f0000001140)='^\x00', &(0x7f0000001180)='&\\}\x00', 0x5}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r0) sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x24, r7, 0x420, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x5a}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x240000c2) timer_settime(0x0, 0x0, &(0x7f00000014c0), &(0x7f0000001500)) 162.586566ms ago: executing program 4 (id=5): r0 = socket$packet(0x11, 0x2, 0x300) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000040)=0xfffffffa, 0x4) (async) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000500)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xffffffff, 0x0, 0x4}, 0x1c) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x1c, 0x16, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4}, @nested={0x4, 0x2}]}, 0x1c}}, 0x0) (async) r3 = socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000240)='_', 0x1, 0x0, &(0x7f0000000200)={0x11, 0x88a8, r4, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1e}}, 0x14) 139.400356ms ago: executing program 3 (id=9): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x180c8, &(0x7f00000000c0)=ANY=[], 0x1, 0x242, &(0x7f0000000100)="$eJzs3bFqFFEUBuBjskmWNKYWiwEbq0WtbBeJIA4IK1No5UC0SUSYNKPVPIbP4CP5GKnSjZhZsklcbczm7s58Hyz3wM/Cuc3eLc6d+fDw8/HRl9NP7c/vMR5nMYpo2jbiILZiOzr35uvWRb0bVzUBAGya2aycpu6B1aqqabkTEXt/JMWPJA0BAAAAAAAAAADw35bN/8e5+X8A6DPz//1XVdNyf/7/7Trz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA65217v/3HJ3V/AMDtc/4DwPA4/wFgeJz/ADA8b9+9fz3N88NZlo0jzpq6qItu7fKXr/LDJ9mFg8W3zuq62L7Mn3Z5dj3fif15/mxpvhuPH3X57+zFm/xGvhdHq98+AAAAAAAAAAAAAAAAAAAArIVJdmnp/f7J5G95V115PsCN+/ujeDC6s20AAAAAAAAAAAAAAAAAAADARjv9+u24PDn5WCl6U8TztWjjrouItWijL0XqXyYAAAAAAAAAAAAAAAAAABiexaXf1J0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQDqL9/+vroiIpu2k3i4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQY78CAAD//139ms4=") truncate(&(0x7f0000000380)='./file1\x00', 0x3000000) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x42, 0x0) fadvise64(r0, 0xfe53, 0x0, 0x4) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a000090400000103010100092100080001220100090581"], 0x0) 133.198126ms ago: executing program 4 (id=10): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/block/loop0/make-it-fail\x00', 0x2, 0x101) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40014041) read$FUSE(r0, &(0x7f0000000d80)={0x2020}, 0x2020) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000540)=r3, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000580)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ab0001", 0x14, 0x6, 0x0, @remote, @local, {[], {{0xfff5, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0xa388}}}}}}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000380)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @private2, @local, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "47feb3", 0x0, 0x32, 0x0, @mcast1, @remote, [], "72210d8e282cfc26"}}}}}}}, 0x0) 59.457778ms ago: executing program 4 (id=11): socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f00000001c0)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = inotify_init1(0x80000) capset(&(0x7f0000000680)={0x20080522}, &(0x7f00000006c0)={0x200002, 0x200003, 0x801, 0x4, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a900000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x5100050b) mount(0x0, &(0x7f0000000240)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'lo\x00'}) mount$incfs(&(0x7f0000000300)='.\x00', &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x1804002, 0x0) 0s ago: executing program 4 (id=12): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x408040, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x80a, &(0x7f0000000440)={[{@quota}, {@noauto_da_alloc}, {@grpid}, {@sysvgroups}]}, 0x3, 0x79b, &(0x7f0000000e80)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000001640)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000480)={0xd, 0x4, 0x7, 0x4, 0x4924a4a, 0x0, [{0xfffffffffffffffe, 0x80, 0x9, '\x00', 0x2}, {0x7ffffffffffffffb, 0x5, 0xb, '\x00', 0x801}, {0x4, 0x101, 0x6}, {0x0, 0x7, 0x8, '\x00', 0x2180}, {0xcbe, 0x4, 0x917e, '\x00', 0x3480}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.5' (ED25519) to the list of known hosts. [ 21.569219][ T28] audit: type=1400 audit(1792389534.475:64): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.570276][ T279] cgroup: Unknown subsys name 'net' [ 21.591899][ T28] audit: type=1400 audit(1792389534.475:65): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.619202][ T28] audit: type=1400 audit(1792389534.505:66): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.619377][ T279] cgroup: Unknown subsys name 'devices' [ 21.765730][ T279] cgroup: Unknown subsys name 'hugetlb' [ 21.771377][ T279] cgroup: Unknown subsys name 'rlimit' [ 21.873733][ T28] audit: type=1400 audit(1792389534.775:67): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.896921][ T28] audit: type=1400 audit(1792389534.775:68): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.921716][ T28] audit: type=1400 audit(1792389534.775:69): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.930474][ T281] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.954311][ T28] audit: type=1400 audit(1792389534.855:70): avc: denied { relabelto } for pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.971773][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.979742][ T28] audit: type=1400 audit(1792389534.855:71): avc: denied { write } for pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.014337][ T28] audit: type=1400 audit(1792389534.875:72): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.039858][ T28] audit: type=1400 audit(1792389534.875:73): avc: denied { open } for pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.787080][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.794246][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.801580][ T287] device bridge_slave_0 entered promiscuous mode [ 22.836217][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.843281][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.850722][ T287] device bridge_slave_1 entered promiscuous mode [ 22.879423][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.886530][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.893825][ T288] device bridge_slave_0 entered promiscuous mode [ 22.902244][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.909331][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.916754][ T288] device bridge_slave_1 entered promiscuous mode [ 23.017096][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.024249][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.031683][ T295] device bridge_slave_0 entered promiscuous mode [ 23.039236][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.046370][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.053821][ T295] device bridge_slave_1 entered promiscuous mode [ 23.085842][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.092896][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.100424][ T290] device bridge_slave_0 entered promiscuous mode [ 23.107473][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.114566][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.122041][ T290] device bridge_slave_1 entered promiscuous mode [ 23.211600][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.218675][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.225980][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.232997][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.244367][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.251415][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.258954][ T292] device bridge_slave_0 entered promiscuous mode [ 23.266083][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.273142][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.280689][ T292] device bridge_slave_1 entered promiscuous mode [ 23.333231][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.340302][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.347724][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.354759][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.399836][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.406913][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.414195][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.421214][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.441707][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.449072][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.456472][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.463971][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.471420][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.479048][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.486242][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.517567][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.525950][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.532986][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.540498][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.548659][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.556179][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.564313][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.571324][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.595482][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.602952][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.611259][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.618347][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.625848][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.634290][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.641313][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.648973][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.656912][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.680383][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.687954][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.696150][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.705050][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.713180][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.720221][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.738346][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.746553][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.753565][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.761043][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.769567][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.776680][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.784317][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.792434][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.799483][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.807436][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.828152][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.836572][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.845090][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.853122][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.861512][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.869859][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.880243][ T288] device veth0_vlan entered promiscuous mode [ 23.894745][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.902764][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.911119][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.919353][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.927576][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.936085][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.944056][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.952347][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.960915][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.968444][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.988958][ T288] device veth1_macvtap entered promiscuous mode [ 23.995834][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.003404][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.011041][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.019645][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.028014][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.035083][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.042720][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.051091][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.059467][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.066625][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.074291][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.082425][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.090821][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.098567][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.115685][ T287] device veth0_vlan entered promiscuous mode [ 24.125414][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.134711][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.142999][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.151347][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.159519][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.168076][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.176728][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.185140][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.193411][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.201994][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.210486][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.218598][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.226747][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.234979][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.242958][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.250642][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.261245][ T292] device veth0_vlan entered promiscuous mode [ 24.271029][ T290] device veth0_vlan entered promiscuous mode [ 24.281592][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.289641][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.297798][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.305935][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.313860][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.321483][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.330002][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.337520][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.359105][ T292] device veth1_macvtap entered promiscuous mode [ 24.365966][ T288] request_module fs-gadgetfs succeeded, but still no fs? [ 24.370703][ T290] device veth1_macvtap entered promiscuous mode [ 24.381497][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.389909][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.398613][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.407033][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.415313][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.425658][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.433951][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.442824][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.451208][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.471183][ T287] device veth1_macvtap entered promiscuous mode [ 24.478081][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.485791][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.493950][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.502476][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.510949][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.519407][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.527877][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.546643][ T295] device veth0_vlan entered promiscuous mode [ 24.554502][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.562459][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.579154][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.593126][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.607581][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.613748][ T313] loop0: detected capacity change from 0 to 512 [ 24.622291][ T313] ext4: Bad value for 'max_dir_size_kb' [ 24.640995][ T295] device veth1_macvtap entered promiscuous mode [ 24.655764][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.656563][ T317] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 24.664553][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.682206][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.691382][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.702819][ T324] ./dev/sda1: Can't open blockdev [ 24.740045][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.750439][ T324] ./dev/sda1: Can't open blockdev [ 24.756492][ T324] ./dev/sda1: Can't open blockdev [ 24.761686][ T324] ./dev/sda1: Can't open blockdev [ 24.761746][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.766865][ T324] ./dev/sda1: Can't open blockdev [ 24.781544][ T324] ./dev/sda1: Can't open blockdev [ 24.786795][ T324] ./dev/sda1: Can't open blockdev [ 24.792006][ T324] ./dev/sda1: Can't open blockdev [ 24.804383][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.822622][ T324] ./dev/sda1: Can't open blockdev [ 24.827296][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.834425][ T324] ./dev/sda1: Can't open blockdev [ 24.846134][ T324] ./dev/sda1: Can't open blockdev [ 24.856675][ T324] ./dev/sda1: Can't open blockdev [ 24.870539][ T324] ./dev/sda1: Can't open blockdev [ 24.884611][ T324] ./dev/sda1: Can't open blockdev [ 24.893095][ T338] Zero length message leads to an empty skb [ 24.908145][ T324] ./dev/sda1: Can't open blockdev [ 24.922766][ T324] ./dev/sda1: Can't open blockdev [ 24.926462][ T344] loop3: detected capacity change from 0 to 512 [ 24.928092][ T324] ./dev/sda1: Can't open blockdev [ 24.939543][ T324] ./dev/sda1: Can't open blockdev [ 24.942809][ T344] ======================================================= [ 24.942809][ T344] WARNING: The mand mount option has been deprecated and [ 24.942809][ T344] and is ignored by this kernel. Remove the mand [ 24.942809][ T344] option from the mount to silence this warning. [ 24.942809][ T344] ======================================================= [ 24.961899][ T324] ./dev/sda1: Can't open blockdev [ 24.994608][ T324] ./dev/sda1: Can't open blockdev [ 25.001984][ T324] ./dev/sda1: Can't open blockdev [ 25.008042][ T345] syz.4.10 (345) used greatest stack depth: 21632 bytes left [ 25.016136][ T324] ./dev/sda1: Can't open blockdev [ 25.022780][ T324] ./dev/sda1: Can't open blockdev [ 25.030403][ T324] ./dev/sda1: Can't open blockdev [ 25.036131][ T324] ./dev/sda1: Can't open blockdev [ 25.041481][ T324] ./dev/sda1: Can't open blockdev [ 25.052479][ T295] ------------[ cut here ]------------ [ 25.058135][ T295] WARNING: CPU: 0 PID: 295 at fs/inode.c:335 drop_nlink+0xc5/0x110 [ 25.066240][ T295] Modules linked in: [ 25.070141][ T295] CPU: 0 PID: 295 Comm: syz-executor Not tainted syzkaller #0 [ 25.077682][ T295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 25.087806][ T295] RIP: 0010:drop_nlink+0xc5/0x110 [ 25.092847][ T295] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 03 aa f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 7b 0d ab ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 25.112543][ T295] RSP: 0018:ffffc9000dad7c60 EFLAGS: 00010293 [ 25.118674][ T295] RAX: ffffffff81c660c5 RBX: ffff88811264c080 RCX: ffff88810d973cc0 [ 25.119635][ T60] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.126690][ T295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 25.142156][ T295] RBP: ffffc9000dad7c88 R08: 0000000000000003 R09: 0000000000000004 [ 25.150189][ T295] R10: dffffc0000000000 R11: fffff52001b5af7c R12: dffffc0000000000 [ 25.158227][ T295] R13: 1ffff110224c9819 R14: ffff88811264c0c8 R15: 0000000000000000 [ 25.166247][ T295] FS: 0000555582400500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 25.175241][ T295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 25.181834][ T295] CR2: 0000555582423948 CR3: 0000000131597000 CR4: 00000000003506b0 [ 25.189927][ T295] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 25.197933][ T295] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 25.203042][ T324] ./dev/sda1: Can't open blockdev [ 25.205967][ T295] Call Trace: [ 25.205975][ T295] [ 25.205981][ T295] shmem_rmdir+0x5b/0x90 [ 25.211835][ T324] ./dev/sda1: Can't open blockdev [ 25.214283][ T295] vfs_rmdir+0x381/0x4f0 [ 25.217567][ T324] ./dev/sda1: Can't open blockdev [ 25.221427][ T295] incfs_kill_sb+0xfe/0x210 [ 25.221453][ T295] deactivate_locked_super+0xb5/0x120 [ 25.226853][ T324] ./dev/sda1: Can't open blockdev [ 25.230710][ T295] deactivate_super+0xaf/0xe0 [ 25.236011][ T324] ./dev/sda1: Can't open blockdev [ 25.240233][ T295] cleanup_mnt+0x45e/0x4e0 [ 25.240256][ T295] __cleanup_mnt+0x19/0x20 [ 25.240271][ T295] task_work_run+0x1e1/0x250 [ 25.246191][ T324] ./dev/sda1: Can't open blockdev [ 25.250664][ T295] ? __cfi_task_work_run+0x10/0x10 [ 25.250690][ T295] ? __x64_sys_umount+0x12d/0x170 [ 25.255634][ T324] ./dev/sda1: Can't open blockdev [ 25.260360][ T295] ? __cfi___x64_sys_umount+0x10/0x10 [ 25.260385][ T295] exit_to_user_mode_loop+0x9b/0xb0 [ 25.277550][ T324] ./dev/sda1: Can't open blockdev [ 25.278864][ T295] exit_to_user_mode_prepare+0x87/0xd0 [ 25.292695][ T324] ./dev/sda1: Can't open blockdev [ 25.294026][ T295] syscall_exit_to_user_mode+0x1a/0x30 [ 25.294052][ T295] do_syscall_64+0x58/0xa0 [ 25.294066][ T295] ? clear_bhb_loop+0x30/0x80 [ 25.318154][ T324] ./dev/sda1: Can't open blockdev [ 25.320106][ T295] ? clear_bhb_loop+0x30/0x80 [ 25.326865][ T60] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.330053][ T295] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 25.330081][ T295] RIP: 0033:0x7f9ec1f9f797 [ 25.339777][ T324] ./dev/sda1: Can't open blockdev [ 25.339920][ T295] Code: a2 c7 05 5c 7f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 25.344983][ T60] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 25.355618][ T295] RSP: 002b:00007ffff41efdf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 25.355643][ T295] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f9ec1f9f797 [ 25.355652][ T295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffff41efeb0 [ 25.355662][ T295] RBP: 00007ffff41efeb0 R08: 00007ffff41f0eb0 R09: 00000000ffffffff [ 25.369669][ T324] ./dev/sda1: Can't open blockdev [ 25.371004][ T295] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffff41f0f40 [ 25.371019][ T295] R13: 00007f9ec2034efb R14: 00000000000061be R15: 00007ffff41f0f80 [ 25.394134][ T60] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.399689][ T295] [ 25.422343][ T60] usb 2-1: Product: syz [ 25.424164][ T295] ---[ end trace 0000000000000000 ]--- [ 25.450962][ T60] usb 2-1: Manufacturer: syz [ 25.459850][ T295] ================================================================== [ 25.471494][ T60] usb 2-1: SerialNumber: syz [ 25.473742][ T295] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 25.497175][ T295] Write of size 4 at addr 0000000000000170 by task syz-executor/295 [ 25.499810][ T60] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 25.505156][ T295] [ 25.505164][ T295] CPU: 0 PID: 295 Comm: syz-executor Tainted: G W syzkaller #0 [ 25.505181][ T295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 25.505189][ T295] Call Trace: [ 25.505194][ T295] [ 25.505200][ T295] __dump_stack+0x21/0x24 [ 25.505227][ T295] dump_stack_lvl+0x110/0x170 [ 25.505249][ T295] ? __cfi_dump_stack_lvl+0x8/0x8 [ 25.505271][ T295] ? __cfi_call_rcu+0x10/0x10 [ 25.505291][ T295] ? ihold+0x20/0x60 [ 25.505308][ T295] ? ihold+0x20/0x60 [ 25.505324][ T295] print_report+0x3d/0x60 [ 25.505345][ T295] kasan_report+0x122/0x150 [ 25.505366][ T295] ? ihold+0x20/0x60 [ 25.511380][ T40] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.513546][ T295] kasan_check_range+0x249/0x2a0 [ 25.590188][ T295] __kasan_check_write+0x14/0x20 [ 25.595136][ T295] ihold+0x20/0x60 [ 25.598869][ T295] vfs_rmdir+0x24c/0x4f0 [ 25.603128][ T295] incfs_kill_sb+0xfe/0x210 [ 25.607648][ T295] deactivate_locked_super+0xb5/0x120 [ 25.613036][ T295] deactivate_super+0xaf/0xe0 [ 25.617730][ T295] cleanup_mnt+0x45e/0x4e0 [ 25.622154][ T295] __cleanup_mnt+0x19/0x20 [ 25.626578][ T295] task_work_run+0x1e1/0x250 [ 25.631184][ T295] ? __cfi_task_work_run+0x10/0x10 [ 25.636311][ T295] ? __x64_sys_umount+0x12d/0x170 [ 25.641347][ T295] ? __cfi___x64_sys_umount+0x10/0x10 [ 25.646730][ T295] exit_to_user_mode_loop+0x9b/0xb0 [ 25.651942][ T295] exit_to_user_mode_prepare+0x87/0xd0 [ 25.657408][ T295] syscall_exit_to_user_mode+0x1a/0x30 [ 25.662862][ T295] do_syscall_64+0x58/0xa0 [ 25.667257][ T295] ? clear_bhb_loop+0x30/0x80 [ 25.671922][ T295] ? clear_bhb_loop+0x30/0x80 [ 25.676583][ T295] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 25.682459][ T295] RIP: 0033:0x7f9ec1f9f797 [ 25.686859][ T295] Code: a2 c7 05 5c 7f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 25.706447][ T295] RSP: 002b:00007ffff41efdf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 25.714841][ T295] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f9ec1f9f797 [ 25.722797][ T295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffff41efeb0 [ 25.730749][ T295] RBP: 00007ffff41efeb0 R08: 00007ffff41f0eb0 R09: 00000000ffffffff [ 25.738704][ T295] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffff41f0f40 [ 25.746657][ T295] R13: 00007f9ec2034efb R14: 00000000000061be R15: 00007ffff41f0f80 [ 25.754612][ T295] [ 25.757617][ T295] ================================================================== [ 25.791008][ T333] #! ./file0/file0 [ 25.804135][ T40] usb 4-1: Using ep0 maxpacket: 32 [ 25.810494][ T40] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.820549][ T295] Disabling lock debugging due to kernel taint [ 25.826993][ T333] loop1: detected capacity change from 0 to 1024 [ 25.833447][ T295] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 25.841350][ T295] #PF: supervisor write access in kernel mode [ 25.847413][ T295] #PF: error_code(0x0002) - not-present page [ 25.853387][ T295] PGD 133a59067 P4D 133a59067 PUD 0 [ 25.858688][ T295] Oops: 0002 [#1] PREEMPT SMP KASAN [ 25.863894][ T295] CPU: 1 PID: 295 Comm: syz-executor Tainted: G B W syzkaller #0 [ 25.872829][ T295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 25.882895][ T295] RIP: 0010:ihold+0x26/0x60 [ 25.887417][ T295] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 e1 04 ab ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 40 a1 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 d1 [ 25.907038][ T295] RSP: 0018:ffffc9000dad7ca0 EFLAGS: 00010246 [ 25.913120][ T295] RAX: ffff88810d973c00 RBX: 0000000000000000 RCX: ffff88810d973cc0 [ 25.921101][ T295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 25.929079][ T295] RBP: ffffc9000dad7cb0 R08: ffffffff87b777e7 R09: 1ffffffff0f6eefc [ 25.937062][ T295] R10: dffffc0000000000 R11: fffffbfff0f6eefd R12: ffff88811264c08c [ 25.945056][ T295] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 25.953035][ T295] FS: 0000555582400500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 25.961976][ T295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 25.968571][ T295] CR2: 0000000000000170 CR3: 0000000131597000 CR4: 00000000003506a0 [ 25.976556][ T295] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 25.984539][ T295] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 25.992529][ T295] Call Trace: [ 25.995816][ T295] [ 25.998749][ T295] vfs_rmdir+0x24c/0x4f0 [ 26.003019][ T295] incfs_kill_sb+0xfe/0x210 [ 26.007545][ T295] deactivate_locked_super+0xb5/0x120 [ 26.012954][ T295] deactivate_super+0xaf/0xe0 [ 26.017652][ T295] cleanup_mnt+0x45e/0x4e0 [ 26.022082][ T295] __cleanup_mnt+0x19/0x20 [ 26.026512][ T295] task_work_run+0x1e1/0x250 [ 26.031121][ T295] ? __cfi_task_work_run+0x10/0x10 [ 26.036251][ T295] ? __x64_sys_umount+0x12d/0x170 [ 26.041292][ T295] ? __cfi___x64_sys_umount+0x10/0x10 [ 26.046686][ T295] exit_to_user_mode_loop+0x9b/0xb0 [ 26.051897][ T295] exit_to_user_mode_prepare+0x87/0xd0 [ 26.057352][ T295] syscall_exit_to_user_mode+0x1a/0x30 [ 26.062804][ T295] do_syscall_64+0x58/0xa0 [ 26.067200][ T295] ? clear_bhb_loop+0x30/0x80 [ 26.071891][ T295] ? clear_bhb_loop+0x30/0x80 [ 26.076558][ T295] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 26.083045][ T295] RIP: 0033:0x7f9ec1f9f797 [ 26.087443][ T295] Code: a2 c7 05 5c 7f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 26.107049][ T295] RSP: 002b:00007ffff41efdf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 26.115464][ T295] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f9ec1f9f797 [ 26.123426][ T295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffff41efeb0 [ 26.131381][ T295] RBP: 00007ffff41efeb0 R08: 00007ffff41f0eb0 R09: 00000000ffffffff [ 26.139369][ T295] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffff41f0f40 [ 26.147325][ T295] R13: 00007f9ec2034efb R14: 00000000000061be R15: 00007ffff41f0f80 [ 26.155284][ T295] [ 26.158286][ T295] Modules linked in: [ 26.162196][ T295] CR2: 0000000000000170 [ 26.166328][ T295] ---[ end trace 0000000000000000 ]--- [ 26.171768][ T295] RIP: 0010:ihold+0x26/0x60 [ 26.176281][ T295] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 e1 04 ab ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 40 a1 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 d1 [ 26.195883][ T295] RSP: 0018:ffffc9000dad7ca0 EFLAGS: 00010246 [ 26.201952][ T295] RAX: ffff88810d973c00 RBX: 0000000000000000 RCX: ffff88810d973cc0 [ 26.209908][ T295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 26.217866][ T295] RBP: ffffc9000dad7cb0 R08: ffffffff87b777e7 R09: 1ffffffff0f6eefc [ 26.225913][ T295] R10: dffffc0000000000 R11: fffffbfff0f6eefd R12: ffff88811264c08c [ 26.233904][ T295] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 26.241862][ T295] FS: 0000555582400500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 26.250789][ T295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.257411][ T295] CR2: 0000000000000170 CR3: 0000000131597000 CR4: 00000000003506a0 [ 26.265382][ T295] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 26.273345][ T295] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 26.281303][ T295] Kernel panic - not syncing: Fatal exception [ 26.288107][ T295] Kernel Offset: disabled [ 26.292710][ T295] Rebooting in 86400 seconds..