last executing test programs: 516.528724ms ago: executing program 3 (id=4): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x20, 0x0, 0xfffffffc}}, 0x10) syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101"], 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) 380.296688ms ago: executing program 0 (id=1): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000180)={[{}, {@noquota}, {@noquota}, {@nodioread_nolock}, {@auto_da_alloc}, {@grpid}]}, 0x5, 0x5a7, &(0x7f0000000200)="$eJzs3U9oHPUeAPDvzGab/sl76YP34L1HD6XvQYXSTdI/Wj21V7FQ6EHwomGzDSWbbMkm2oSA6b2IPYhKL/WmB4+KBw/ixaNXL4pnodig0PRQVzY7m27TTd3EbLZmPx+Y5Pebmd3v7zez3x8zwwwTQN86Wv+TRvwnIi4lEcMtywYiW3i0sd7qylLxwcpSMYla7fLPSSQRcX9lqdhcP8n+H4qI5Yj4d0R8nY84ka5/5b5mobqwODVeLpdms/rI3PS1kerC4smr0+OTpcnSzOkXXjx77szZsVNjrc19UGut5bfW15s/3Hrn5rcv37n1yadHlovvjSdxPoayZa392EmNbZKP8xvmn+lGsB5Ket0AtiWX5Xk9lf4Vw5HLsr6dWuvgMLgrzQO6qDYYUVvXUgT6QCLpoU81jwPq57/NaTePP+5eaJyA1OOuriwV345m/IHGtYnYv3ZucvCX5LEzk/r55uHdbCh70vKNiBgdGHjy959kv7/tG92JBtJVX11o7Kgn93+6Pv5Em/FnqHnt9E9qjn+r2fi32iZ+bpPx71KHMR6+9uOH7ZccG44YjP+2jZ+sx0/axE8j4o0O499+9Ytzmy2rfRRxPNrHb0qefn145MrVcmm08bdtjC+PH3lps/h3b0Qc3CR+45rt/rWGtPZ/X9amtMP+f/7NZ8eWnxL/uf89ff+32/4HIuLdDuP/4/7Hr2y27O6N5F79KGCr+z+JfNzpMP7z549+nxVdNQQAAAAAAAAAgB2Urt3LlqSF9XKaFgqNZ3j/GQfTcqU6d+JKZX5monHP2+HIp807rYYb9aReH8vux23WT22on85lAXMH1uqFYqU80eO+AwAAAAAAAAAAAAAAAAAAwLPi0Ibn/3/NrT3/v/F11cBetfkrv4G9bvP8f9jyilBgL3o8/5OetQPYfY7/oW/V5D/0L/kP/Uv+Q/+S/9C/5D/0L/kP/Uv+AwAAAAAAAAAAAAAAAAAAAAAAAABAV1y6eLE+1R6sLBXr9YmBhfmpypsnJ0rVqcL0fLFQrMxeK0xWKpPlUqFYmf6j70sqlWujMTN/fWSuVJ0bqS4svj5dmZ9pvlO0lO96jwAAAAAAAAAAAAAAAAAAAOCvZ2htStJCRL5RT9NCIeJvEXE4ieTK1XJpNCL+HhHf5fKD9fpYrxsNAAAAAAAAAAAAAAAAAAAAe0x1YXFqvFwuzXavMJCF6mKIzgsDW1k5IpZ3thn1b9zyp/LZBuzxptsbhdyz8Tt89gs9HJQAAAAAAAAAAAAAAAAAAKBPPXrot9NP/NbdBgEAAAAAAAAAAAAAAAAAAEBfSn9KIqI+HR/+/9DGpfuS1dza/4h46/bl96+Pz83NjtXn31ufP/dBNv9UL9oPdKqZp2lE1PMYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeKS6sDg1Xi6XZrdZGOxgnV73EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGA7fg8AAP//On7RDg==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2a) syz_emit_ethernet(0xe, &(0x7f00000008c0)={@local, @empty, @void, {@generic={0xb213}}}, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 354.725449ms ago: executing program 4 (id=5): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x480, &(0x7f0000000180)={[{@inlinecrypt}, {@grpquota}, {@errors_remount}]}, 0x2, 0x470, &(0x7f00000001c0)="$eJzs3M9vFFUcAPDvTLtFBOyq+IMfahWJjT9aCqgcPKjBxERNTPSgx6YtBFmooTUR0igYgydjTLwbj/4LnvRijCcTr3o3JMRwATytmd0Z2F12l3bddqX7+STDvjc/eO+7M2/2vXm7DWBoTWT/JBHbI+KPiBivZ5t3mKi/XLuyMnf9yspcEtXqO38ntf2uXlmZK3YtjtuWZybTiPTzJPa0KXfp7LmTs5XKwpk8P7186sPppbPnnjtxavb4wvGF0wePHDl8aObFFw4+35c4szpd3f3J4t5dr7//9VtvfplFtVLE3xJHn0x027i/Wu1zcYO1oyGdjA6wIqzJSERkp6tUa//jMRI3T954vPbZQCsHrKtqtVrd1nnz+SqwiSXRnO/Q5JMNqQywgYoP+mz8WyzFulL++vL6dkEG6vIr9QFQFve1fKlvGY0036fUMr7tp4mIeO/8P99mS6zPcwgAgCY/Zv2fZ5v6f2PFtgcb9rsnnxsqR8S9EXFfRNwfETsj4oF834ci4uE1lt86SXJr/ye91ENYq5b1/17K57aa+39F7y/KI3luRy3+UnLsRGXhQP6eTEZpS5af6VLGT0d//6rTtsb+X7Zk5Rd9wbwel0a3NB8zP7s8+19ibnT5QsTu0XbxJzdmApKI2BURu3ss48TT3+/ttO328XfRh3mm6ncRT9XP//loib+QdJ+fnL4rKgsHpour4la//nbx7U7lt8T/xpri74Ps/N/d9vq/EX85aZyvXVp7GRf//KLjmKbX638sebeWLm5WH88uL5+ZiRhLji5mo9py4/qDN48t8sX+WfyT++rxV8cbS0lr97jindgTEdlF/EhEPBoRj+V1fzwinoiIffs7x//Lq09+0Hv86yuLf35N5/9mYixa17RPjJz8+YemQsu3xH+9+/k/XEtN5mtWc/9bTb16u5oBAADgzpNGxPZI0qkb6TSdmqp/X35nRFpZXFp+5tjiR6fn678RKEcpLZ50jTc8D53Jh/X1/IWIqH+1oNh+KH9u/M3I1lp+am6xMj/o4GHIbevQ/jN/jQy6dsC683stGF7aPwwv7R+Gl/YPw6tN+986iHoAG6/d5/+nA6gHsPFa2r9pPxgixv8wvLR/GF4t7b/L3wMFNpGlrXH7H8l3TRT/U4+Hb9pElP4X1ehHongW3Hze08FXbFCJsYhY/VGjrW/dHZEY3D0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgn/4NAAD//46E168=") chdir(&(0x7f0000000280)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40042, 0x1) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) getdents(r0, 0x0, 0x0) 258.709812ms ago: executing program 2 (id=3): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x1, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) 251.861932ms ago: executing program 1 (id=2): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000180)={[{@acl}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@inlinecrypt}, {@errors_remount}]}, 0x7, 0x60a, &(0x7f00000027c0)="$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") truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143041, 0x0) 182.973494ms ago: executing program 2 (id=6): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000006c0), 0x1, 0x0) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 122.865246ms ago: executing program 4 (id=7): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8c, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x2aa, &(0x7f0000000c80)="$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") capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0xd5fc, 0x21fffc, 0x1000, 0x0, 0x2, 0x5}) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x4000) ioctl$BLKFLSBUF(r0, 0x1261, 0x0) 0s ago: executing program 0 (id=8): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x3010050, &(0x7f0000000200)=ANY=[], 0x1, 0x1506, &(0x7f0000003100)="$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") mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', &(0x7f00000005c0), 0x2a14090, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.45' (ED25519) to the list of known hosts. [ 21.858169][ T28] audit: type=1400 audit(1780404506.440:64): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.859186][ T279] cgroup: Unknown subsys name 'net' [ 21.880825][ T28] audit: type=1400 audit(1780404506.440:65): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.908140][ T28] audit: type=1400 audit(1780404506.470:66): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.908294][ T279] cgroup: Unknown subsys name 'devices' [ 22.049077][ T279] cgroup: Unknown subsys name 'hugetlb' [ 22.054735][ T279] cgroup: Unknown subsys name 'rlimit' [ 22.157003][ T28] audit: type=1400 audit(1780404506.730:67): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.180198][ T28] audit: type=1400 audit(1780404506.730:68): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.191075][ T281] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.205140][ T28] audit: type=1400 audit(1780404506.730:69): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.236710][ T28] audit: type=1400 audit(1780404506.800:70): avc: denied { relabelto } for pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.238165][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.262335][ T28] audit: type=1400 audit(1780404506.800:71): avc: denied { write } for pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.296406][ T28] audit: type=1400 audit(1780404506.820:72): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.321939][ T28] audit: type=1400 audit(1780404506.820:73): avc: denied { open } for pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.032277][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.039518][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.046859][ T287] device bridge_slave_0 entered promiscuous mode [ 23.054792][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.061898][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.069642][ T287] device bridge_slave_1 entered promiscuous mode [ 23.094548][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.101646][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.109055][ T288] device bridge_slave_0 entered promiscuous mode [ 23.117860][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.124901][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.132336][ T288] device bridge_slave_1 entered promiscuous mode [ 23.249510][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.256571][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.264112][ T294] device bridge_slave_0 entered promiscuous mode [ 23.271160][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.278263][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.285570][ T294] device bridge_slave_1 entered promiscuous mode [ 23.331254][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.338382][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.345830][ T291] device bridge_slave_0 entered promiscuous mode [ 23.355788][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.362913][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.370396][ T291] device bridge_slave_1 entered promiscuous mode [ 23.429029][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.436099][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.443944][ T295] device bridge_slave_0 entered promiscuous mode [ 23.458518][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.465577][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.473016][ T295] device bridge_slave_1 entered promiscuous mode [ 23.538262][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.545324][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.552744][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.559961][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.592602][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.599695][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.607000][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.614066][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.654777][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.661887][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.669188][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.676216][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.690148][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.697219][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.704857][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.711914][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.720232][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.727388][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.734685][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.741725][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.770028][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.777585][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.785204][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.792745][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.800172][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.808791][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.815902][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.823140][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.830348][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.837597][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.844766][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.857436][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.865616][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.872675][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.880246][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.888393][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.895401][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.920805][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.928387][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.936486][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.943527][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.955522][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.963907][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.970978][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.997020][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.005062][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.013261][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.020914][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.028592][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.036739][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.043896][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.051424][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.059514][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.087990][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.095638][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.103189][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.110676][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.118972][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.127313][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.135434][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.142469][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.150053][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.158565][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.166656][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.173700][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.181050][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.189480][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.197716][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.204738][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.212115][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.220514][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.228718][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.235729][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.243206][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.251452][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.259504][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.267549][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.276130][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.284758][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.293068][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.300114][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.311282][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.319819][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.340187][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.348701][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.356607][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.364341][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.372018][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.380315][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.388365][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.396301][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.411880][ T295] device veth0_vlan entered promiscuous mode [ 24.421512][ T288] device veth0_vlan entered promiscuous mode [ 24.427957][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.435884][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.451293][ T287] device veth0_vlan entered promiscuous mode [ 24.458506][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.465995][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.473826][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.482314][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.490885][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.498919][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.506853][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.514663][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.526119][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.534302][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.546972][ T295] device veth1_macvtap entered promiscuous mode [ 24.559031][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.573390][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.581624][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.590028][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.598960][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.607985][ T287] device veth1_macvtap entered promiscuous mode [ 24.624364][ T294] device veth0_vlan entered promiscuous mode [ 24.632028][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.639850][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.648229][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.656776][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.665242][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.673352][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.681739][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.689184][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.701249][ T288] device veth1_macvtap entered promiscuous mode [ 24.709263][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.717696][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.725793][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.751155][ T295] request_module fs-gadgetfs succeeded, but still no fs? [ 24.752227][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.768262][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.776614][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.784965][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.793332][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.801747][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.810002][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.820058][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.833173][ T291] device veth0_vlan entered promiscuous mode [ 24.841227][ T294] device veth1_macvtap entered promiscuous mode [ 24.848680][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.857036][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.865527][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.884214][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.897861][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.920779][ T291] device veth1_macvtap entered promiscuous mode [ 24.930157][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.938827][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.947457][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.955690][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.964507][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.980046][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.989948][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.029462][ T317] loop0: detected capacity change from 0 to 1024 [ 25.044105][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.053143][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.060776][ T319] loop4: detected capacity change from 0 to 512 [ 25.061899][ T317] ======================================================= [ 25.061899][ T317] WARNING: The mand mount option has been deprecated and [ 25.061899][ T317] and is ignored by this kernel. Remove the mand [ 25.061899][ T317] option from the mount to silence this warning. [ 25.061899][ T317] ======================================================= [ 25.088718][ T319] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 25.115783][ T319] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 25.131051][ T319] EXT4-fs (loop4): Invalid default hash set in the superblock [ 25.153448][ T324] loop1: detected capacity change from 0 to 1024 [ 25.161723][ T317] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 25.180150][ T324] EXT4-fs: Ignoring removed bh option [ 25.194475][ T317] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 25.217232][ T40] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.240105][ T324] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 2: comm syz.1.2: lblock 2 mapped to illegal pblock 2 (length 1) [ 25.244104][ T317] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: block 3: comm syz.0.1: lblock 3 mapped to illegal pblock 3 (length 3) [ 25.258557][ T324] EXT4-fs (loop1): Remounting filesystem read-only [ 25.268511][ T317] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 25.275074][ T324] EXT4-fs error (device loop1): __ext4_get_inode_loc:4522: comm syz.1.2: Invalid inode table block 1 in block_group 0 [ 25.288464][ T317] EXT4-fs (loop0): This should not happen!! Data will be lost [ 25.288464][ T317] [ 25.300940][ T324] EXT4-fs (loop1): Remounting filesystem read-only [ 25.310044][ T288] ------------[ cut here ]------------ [ 25.316156][ T324] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 25.321090][ T288] WARNING: CPU: 0 PID: 288 at fs/inode.c:335 drop_nlink+0xc5/0x110 [ 25.321125][ T288] Modules linked in: [ 25.321135][ T288] CPU: 0 PID: 288 Comm: syz-executor Not tainted syzkaller #0 [ 25.321153][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 25.321162][ T288] RIP: 0010:drop_nlink+0xc5/0x110 [ 25.321182][ T288] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 d3 a6 f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 eb fe aa ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 25.321196][ T288] RSP: 0018:ffffc9000c677c38 EFLAGS: 00010293 [ 25.321212][ T288] RAX: ffffffff81c67c95 RBX: ffff888111c9cbd8 RCX: ffff88810e33d100 [ 25.331098][ T324] EXT4-fs (loop1): Remounting filesystem read-only [ 25.338675][ T288] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 25.342556][ T324] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.2: mark_inode_dirty error [ 25.350036][ T288] RBP: ffffc9000c677c60 R08: 0000000000000003 R09: 0000000000000004 [ 25.350052][ T288] R10: dffffc0000000000 R11: fffff520018cef78 R12: dffffc0000000000 [ 25.391080][ T324] EXT4-fs (loop1): Remounting filesystem read-only [ 25.399205][ T288] R13: 1ffff11022393984 R14: ffff888111c9cc20 R15: 0000000000000000 [ 25.399230][ T288] FS: 000055555eb22500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 25.399247][ T288] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 25.399260][ T288] CR2: 00007f71edfea540 CR3: 000000012ed21000 CR4: 00000000003506b0 [ 25.399278][ T288] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 25.399288][ T288] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 25.399301][ T288] Call Trace: [ 25.399305][ T288] [ 25.399312][ T288] shmem_rmdir+0x5b/0x90 [ 25.399343][ T288] vfs_rmdir+0x393/0x500 [ 25.399366][ T288] incfs_kill_sb+0x105/0x220 [ 25.399390][ T288] deactivate_locked_super+0xb5/0x120 [ 25.399413][ T288] deactivate_super+0xaf/0xe0 [ 25.410504][ T324] EXT4-fs error (device loop1): ext4_acquire_dquot:6828: comm syz.1.2: Failed to acquire dquot type 0 [ 25.413962][ T288] cleanup_mnt+0x474/0x500 [ 25.425016][ T324] EXT4-fs (loop1): Remounting filesystem read-only [ 25.432814][ T288] __cleanup_mnt+0x19/0x20 [ 25.440859][ T40] usb 4-1: Using ep0 maxpacket: 16 [ 25.447337][ T288] task_work_run+0x1e1/0x250 [ 25.456134][ T324] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 25.464251][ T288] ? __cfi_task_work_run+0x10/0x10 [ 25.473420][ T324] EXT4-fs (loop1): Remounting filesystem read-only [ 25.479018][ T288] ? __x64_sys_umount+0x12d/0x170 [ 25.487118][ T324] EXT4-fs error (device loop1): ext4_evict_inode:281: inode #11: comm syz.1.2: mark_inode_dirty error [ 25.494996][ T288] ? __cfi___x64_sys_umount+0x10/0x10 [ 25.498667][ T40] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 25.501237][ T288] exit_to_user_mode_loop+0x9b/0xb0 [ 25.505477][ T40] usb 4-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 25.509744][ T288] exit_to_user_mode_prepare+0x87/0xd0 [ 25.514523][ T324] EXT4-fs (loop1): Remounting filesystem read-only [ 25.519696][ T288] syscall_exit_to_user_mode+0x1a/0x30 [ 25.524395][ T40] usb 4-1: config 0 has no interface number 0 [ 25.535341][ T288] do_syscall_64+0x58/0xa0 [ 25.540023][ T324] EXT4-fs warning (device loop1): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 25.546385][ T288] ? clear_bhb_loop+0x30/0x80 [ 25.551019][ T324] EXT4-fs (loop1): 1 orphan inode deleted [ 25.556007][ T288] ? clear_bhb_loop+0x30/0x80 [ 25.562541][ T324] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 25.570041][ T288] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 25.576461][ T40] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 25.581690][ T288] RIP: 0033:0x7faeedb9e097 [ 25.581712][ T288] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 25.581726][ T288] RSP: 002b:00007ffcdd31cdd8 EFLAGS: 00000246 [ 25.592211][ T40] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.597723][ T288] ORIG_RAX: 00000000000000a6 [ 25.597743][ T288] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007faeedb9e097 [ 25.603397][ T40] usb 4-1: Product: syz [ 25.611276][ T288] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcdd31ce90 [ 25.611292][ T288] RBP: 00007ffcdd31ce90 R08: 00007ffcdd31de90 R09: 00000000ffffffff [ 25.616711][ T40] usb 4-1: Manufacturer: syz [ 25.626637][ T288] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcdd31df20 [ 25.626650][ T288] R13: 00007faeedc321ca R14: 0000000000006274 R15: 00007ffcdd31df60 [ 25.632403][ T40] usb 4-1: SerialNumber: syz [ 25.638756][ T288] [ 25.638764][ T288] ---[ end trace 0000000000000000 ]--- [ 25.645499][ T40] usb 4-1: config 0 descriptor?? [ 25.671173][ T288] ================================================================== [ 25.697001][ T324] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #2: block 16: comm syz.1.2: lblock 0 mapped to illegal pblock 16 (length 1) [ 25.703628][ T288] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 25.703658][ T288] Write of size 4 at addr 0000000000000170 by task syz-executor/288 [ 25.703673][ T288] [ 25.711881][ T324] EXT4-fs (loop1): Remounting filesystem read-only [ 25.727680][ T288] CPU: 0 PID: 288 Comm: syz-executor Tainted: G W syzkaller #0 [ 25.727707][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 25.727717][ T288] Call Trace: [ 25.727723][ T288] [ 25.727737][ T288] __dump_stack+0x21/0x24 [ 25.727764][ T288] dump_stack_lvl+0x110/0x170 [ 25.727785][ T288] ? __cfi_dump_stack_lvl+0x8/0x8 [ 25.727804][ T288] ? __cfi_call_rcu+0x10/0x10 [ 25.727825][ T288] ? ihold+0x20/0x60 [ 25.759255][ T324] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #2: block 16: comm syz.1.2: lblock 0 mapped to illegal pblock 16 (length 1) [ 25.766653][ T288] ? ihold+0x20/0x60 [ 25.766682][ T288] print_report+0x3d/0x60 [ 25.775178][ T324] EXT4-fs (loop1): Remounting filesystem read-only [ 25.779235][ T288] kasan_report+0x122/0x150 [ 25.779264][ T288] ? ihold+0x20/0x60 [ 25.779283][ T288] kasan_check_range+0x249/0x2a0 [ 25.779306][ T288] __kasan_check_write+0x14/0x20 [ 25.952448][ T288] ihold+0x20/0x60 [ 25.956173][ T288] vfs_rmdir+0x25f/0x500 [ 25.960419][ T288] incfs_kill_sb+0x105/0x220 [ 25.965012][ T288] deactivate_locked_super+0xb5/0x120 [ 25.970413][ T288] deactivate_super+0xaf/0xe0 [ 25.975093][ T288] cleanup_mnt+0x474/0x500 [ 25.979509][ T288] __cleanup_mnt+0x19/0x20 [ 25.983921][ T288] task_work_run+0x1e1/0x250 [ 25.988531][ T288] ? __cfi_task_work_run+0x10/0x10 [ 25.993734][ T288] ? __x64_sys_umount+0x12d/0x170 [ 25.998762][ T288] ? __cfi___x64_sys_umount+0x10/0x10 [ 26.004136][ T288] exit_to_user_mode_loop+0x9b/0xb0 [ 26.009335][ T288] exit_to_user_mode_prepare+0x87/0xd0 [ 26.014794][ T288] syscall_exit_to_user_mode+0x1a/0x30 [ 26.020252][ T288] do_syscall_64+0x58/0xa0 [ 26.024677][ T288] ? clear_bhb_loop+0x30/0x80 [ 26.029353][ T288] ? clear_bhb_loop+0x30/0x80 [ 26.034027][ T288] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 26.039923][ T288] RIP: 0033:0x7faeedb9e097 [ 26.044333][ T288] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 26.064214][ T288] RSP: 002b:00007ffcdd31cdd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 26.072650][ T288] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007faeedb9e097 [ 26.080651][ T288] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcdd31ce90 [ 26.088625][ T288] RBP: 00007ffcdd31ce90 R08: 00007ffcdd31de90 R09: 00000000ffffffff [ 26.096600][ T288] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcdd31df20 [ 26.104576][ T288] R13: 00007faeedc321ca R14: 0000000000006274 R15: 00007ffcdd31df60 [ 26.112551][ T288] [ 26.115662][ T288] ================================================================== [ 26.127967][ T10] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 26.147670][ T43] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:2: lblock 8 mapped to illegal pblock 8 (length 8) [ 26.157086][ T10] EXT4-fs (loop1): Remounting filesystem read-only [ 26.161952][ T40] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 26.168794][ T10] EXT4-fs error (device loop1): ext4_release_dquot:6864: comm kworker/u4:1: Failed to release dquot type 0 [ 26.183797][ T40] usb 4-1: No valid video chain found. [ 26.196657][ T40] usb 4-1: USB disconnect, device number 2 [ 26.202742][ T43] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 26.202990][ T288] Disabling lock debugging due to kernel taint [ 26.215797][ T10] EXT4-fs (loop1): Remounting filesystem read-only [ 26.229673][ T288] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 26.237502][ T288] #PF: supervisor write access in kernel mode [ 26.243579][ T288] #PF: error_code(0x0002) - not-present page [ 26.243737][ T294] EXT4-fs (loop1): unmounting filesystem. [ 26.249564][ T288] PGD 1343c9067 P4D 1343c9067 PUD 0 [ 26.249589][ T288] Oops: 0002 [#1] PREEMPT SMP KASAN [ 26.249604][ T288] CPU: 1 PID: 288 Comm: syz-executor Tainted: G B W syzkaller #0 [ 26.249622][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 26.249631][ T288] RIP: 0010:ihold+0x26/0x60 [ 26.256523][ T294] EXT4-fs error (device loop1): __ext4_get_inode_loc:4522: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 26.260633][ T288] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 51 f6 aa ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 10 9e f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 41 [ 26.260649][ T288] RSP: 0018:ffffc9000c677c78 EFLAGS: 00010246 [ 26.260666][ T288] RAX: ffff88810e33d100 RBX: 0000000000000000 RCX: ffff88810e33d100 [ 26.260679][ T288] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 26.266287][ T43] EXT4-fs (loop0): This should not happen!! Data will be lost [ 26.266287][ T43] [ 26.274789][ T288] RBP: ffffc9000c677c88 R08: ffffffff87b767e7 R09: 1ffffffff0f6ecfc [ 26.274804][ T288] R10: dffffc0000000000 R11: fffffbfff0f6ecfd R12: ffff888111c9cbe4 [ 26.274817][ T288] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 26.274828][ T288] FS: 000055555eb22500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 26.274845][ T288] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.274857][ T288] CR2: 0000000000000170 CR3: 000000012ed21000 CR4: 00000000003506a0 [ 26.291597][ T294] EXT4-fs (loop1): Remounting filesystem read-only [ 26.302155][ T288] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 26.302171][ T288] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 26.302183][ T288] Call Trace: [ 26.302189][ T288] [ 26.302196][ T288] vfs_rmdir+0x25f/0x500 [ 26.302223][ T288] incfs_kill_sb+0x105/0x220 [ 26.353621][ T294] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 26.353776][ T288] deactivate_locked_super+0xb5/0x120 [ 26.362172][ T294] EXT4-fs (loop1): Remounting filesystem read-only [ 26.369716][ T288] deactivate_super+0xaf/0xe0 [ 26.369743][ T288] cleanup_mnt+0x474/0x500 [ 26.369762][ T288] __cleanup_mnt+0x19/0x20 [ 26.378185][ T294] EXT4-fs error (device loop1): ext4_quota_off:7134: inode #3: comm syz-executor: mark_inode_dirty error [ 26.386653][ T288] task_work_run+0x1e1/0x250 [ 26.386679][ T288] ? __cfi_task_work_run+0x10/0x10 [ 26.393610][ T294] EXT4-fs (loop1): Remounting filesystem read-only [ 26.401217][ T288] ? __x64_sys_umount+0x12d/0x170 [ 26.401246][ T288] ? __cfi___x64_sys_umount+0x10/0x10 [ 26.408843][ T287] EXT4-fs (loop0): unmounting filesystem. [ 26.415712][ T288] exit_to_user_mode_loop+0x9b/0xb0 [ 26.521982][ T288] exit_to_user_mode_prepare+0x87/0xd0 [ 26.527450][ T288] syscall_exit_to_user_mode+0x1a/0x30 [ 26.532908][ T288] do_syscall_64+0x58/0xa0 [ 26.537324][ T288] ? clear_bhb_loop+0x30/0x80 [ 26.541996][ T288] ? clear_bhb_loop+0x30/0x80 [ 26.546665][ T288] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 26.552562][ T288] RIP: 0033:0x7faeedb9e097 [ 26.556976][ T288] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 26.576577][ T288] RSP: 002b:00007ffcdd31cdd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 26.584990][ T288] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007faeedb9e097 [ 26.592963][ T288] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcdd31ce90 [ 26.600931][ T288] RBP: 00007ffcdd31ce90 R08: 00007ffcdd31de90 R09: 00000000ffffffff [ 26.608901][ T288] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcdd31df20 [ 26.616870][ T288] R13: 00007faeedc321ca R14: 0000000000006274 R15: 00007ffcdd31df60 [ 26.624847][ T288] [ 26.627880][ T288] Modules linked in: [ 26.631778][ T288] CR2: 0000000000000170 [ 26.635933][ T288] ---[ end trace 0000000000000000 ]--- [ 26.641390][ T288] RIP: 0010:ihold+0x26/0x60 [ 26.645901][ T288] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 51 f6 aa ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 10 9e f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 41 [ 26.665504][ T288] RSP: 0018:ffffc9000c677c78 EFLAGS: 00010246 [ 26.671579][ T288] RAX: ffff88810e33d100 RBX: 0000000000000000 RCX: ffff88810e33d100 [ 26.679552][ T288] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 26.687517][ T288] RBP: ffffc9000c677c88 R08: ffffffff87b767e7 R09: 1ffffffff0f6ecfc [ 26.695487][ T288] R10: dffffc0000000000 R11: fffffbfff0f6ecfd R12: ffff888111c9cbe4 [ 26.703453][ T288] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 26.711420][ T288] FS: 000055555eb22500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 26.720348][ T288] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.726929][ T288] CR2: 0000000000000170 CR3: 000000012ed21000 CR4: 00000000003506a0 [ 26.734922][ T288] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 26.742891][ T288] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 26.750859][ T288] Kernel panic - not syncing: Fatal exception [ 26.757021][ T288] Kernel Offset: disabled [ 26.761331][ T288] Rebooting in 86400 seconds..