last executing test programs: 1.417807066s ago: executing program 1 (id=142): r0 = socket$netlink(0x10, 0x3, 0xa) r1 = dup(r0) r2 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d1) 1.341034958s ago: executing program 1 (id=143): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ip_vti0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc14fff5004788031c09103328", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.29732712s ago: executing program 1 (id=144): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x1002, 0x20000000001000}) fcntl$lock(r0, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x2005, 0x1fd}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x2, 0x2b, 0x9}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x1, 0x90}) 456.266975ms ago: executing program 2 (id=159): openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x200601, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x0}) 443.138076ms ago: executing program 1 (id=160): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00009b5000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, &(0x7f0000000240)="b9800000c00f3235004000000f30b9fa000000130f01d9300d76c4020a1bf7b805000000b90000c0fe0f0a41d941d9000f30660fc775022e0fba600c9864660ffc76002f3166b85766baa00066ed00d0", 0x50}], 0x1, 0x42, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 422.676767ms ago: executing program 2 (id=161): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) 351.712859ms ago: executing program 2 (id=162): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0x3) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 337.85407ms ago: executing program 2 (id=163): ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x890c, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000001300)={0x2, 0xe21, @multicast2}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') pread64(r1, &(0x7f0000000100)=""/83, 0x53, 0x100) 321.20018ms ago: executing program 2 (id=164): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000046c000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000240)="420f01c90f40730b0f01cab9f00b0000b8322a0000ba000000000f300fc7afbd4400006567450f30c744240007000000c744240260dd47fdc7442406000000000f011424420f01cac4c1e6510dbb000000b9490a00000f32", 0x58}], 0x1, 0x60, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) setpriority(0x2, 0xff, 0x0) 291.922371ms ago: executing program 1 (id=165): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x9732) listen(r0, 0xec) accept4$bt_l2cap(r0, 0x0, 0x0, 0x800) 282.817301ms ago: executing program 2 (id=166): syz_ublk_setup_io_uring(0x20, &(0x7f0000000200)={0x0, 0x0, 0x80, 0x2, 0x52}, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) close(0x3) 259.173112ms ago: executing program 1 (id=168): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010c50f80b0000000000001090264000100003001090400000903000200092109000301222c000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000140)={0x20, 0x14, 0x2c, {0x2c, 0xd, "e75bcf47a88a34d2dd23ee248c3610da0300000000000000697103bd4f114ece0513e8bec3cd466f0000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000300)={0x40, 0x30, 0x52, "df31991f2fb2616357ea800ed48fdea52582d147d8598294a3681ff0c27da9121b7489464d8cbe613546aff8aa15ab28511f6b559c86e853570bcbee80a4cae265667edae4b1a7da857fb9dcbc5fecc4fa6e"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x9}, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x40, 0x7, 0x2, 0xe97}, 0x0, &(0x7f0000000500)={0x40, 0xb, 0x2, "ec89"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x80}, &(0x7f0000000580)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x5}, 0x0, 0x0}) 225.222033ms ago: executing program 0 (id=170): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000200)={0x7fffffff, 0x4f1317d8, 0x2, 0xb, 0x59, "766f0000000000110b8e230900000000000005", 0x800, 0x4}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xd) 211.387423ms ago: executing program 0 (id=171): inotify_init1(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xfffffffe], [0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf51, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3b56, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x8000], [0x7, 0x0, 0x4, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0xfaea, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 194.487814ms ago: executing program 0 (id=172): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) madvise(&(0x7f000056d000/0x2000)=nil, 0x2000, 0x17) 181.882784ms ago: executing program 3 (id=173): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000080)={0xc0, 0x0, 0x4000}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) 166.657255ms ago: executing program 0 (id=174): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x10, 0x0, 0x107}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x5f, 0x0, [{0x40000021}]}) 112.457657ms ago: executing program 3 (id=175): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x2006}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="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", 0x3a5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1}}], 0x2, 0x119e75c4067765af) 97.655417ms ago: executing program 3 (id=176): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000279000/0x4000)=nil, 0x4000}}) 82.986737ms ago: executing program 3 (id=177): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="00214717a70700000000030600000000000000000000721d5874f72cf86d73d32f46380f", 0x24}], 0x1, 0x7, 0x1) 71.495958ms ago: executing program 0 (id=178): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x4040, 0x4) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000140)="be38", 0x2}, {&(0x7f00000001c0)="3ab0f40c5bf3", 0x6}, {0x0}], 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001800000000000000000000000700000044047300"], 0x38}, 0x0) read$FUSE(r1, &(0x7f0000003840)={0x2020}, 0x2020) 56.941298ms ago: executing program 0 (id=179): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, 0x0) 23.102729ms ago: executing program 3 (id=180): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x11e) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) 0s ago: executing program 3 (id=181): r0 = landlock_create_ruleset(&(0x7f00000000c0)={0xc0d8, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) connect$unix(r1, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) kernel console output (not intermixed with test programs): cess permissive=1 [ 14.682111][ T36] audit: type=1400 audit(1781336092.880:63): avc: denied { siginh } for pid=233 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.118' (ED25519) to the list of known hosts. [ 22.876204][ T36] audit: type=1400 audit(1781336101.080:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.879868][ T287] cgroup: Unknown subsys name 'net' [ 22.898894][ T36] audit: type=1400 audit(1781336101.090:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.926338][ T36] audit: type=1400 audit(1781336101.110:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.926800][ T287] cgroup: Unknown subsys name 'devices' [ 23.049098][ T287] cgroup: Unknown subsys name 'hugetlb' [ 23.054741][ T287] cgroup: Unknown subsys name 'rlimit' [ 23.161727][ T36] audit: type=1400 audit(1781336101.370:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.184941][ T36] audit: type=1400 audit(1781336101.370:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.209701][ T36] audit: type=1400 audit(1781336101.370:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.238501][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.247379][ T36] audit: type=1400 audit(1781336101.460:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.272853][ T36] audit: type=1400 audit(1781336101.460:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.311370][ T36] audit: type=1400 audit(1781336101.520:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.337046][ T36] audit: type=1400 audit(1781336101.520:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.337689][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.220539][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.227916][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.235005][ T295] bridge_slave_0: entered allmulticast mode [ 24.241426][ T295] bridge_slave_0: entered promiscuous mode [ 24.254652][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.261771][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.268935][ T295] bridge_slave_1: entered allmulticast mode [ 24.275196][ T295] bridge_slave_1: entered promiscuous mode [ 24.318912][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.325977][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.333203][ T294] bridge_slave_0: entered allmulticast mode [ 24.339579][ T294] bridge_slave_0: entered promiscuous mode [ 24.348814][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.355887][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.363037][ T296] bridge_slave_0: entered allmulticast mode [ 24.369449][ T296] bridge_slave_0: entered promiscuous mode [ 24.375981][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.383071][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.390258][ T296] bridge_slave_1: entered allmulticast mode [ 24.396518][ T296] bridge_slave_1: entered promiscuous mode [ 24.402619][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.409730][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.416814][ T294] bridge_slave_1: entered allmulticast mode [ 24.423192][ T294] bridge_slave_1: entered promiscuous mode [ 24.441484][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.448599][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.455689][ T297] bridge_slave_0: entered allmulticast mode [ 24.462105][ T297] bridge_slave_0: entered promiscuous mode [ 24.468657][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.475719][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.482865][ T297] bridge_slave_1: entered allmulticast mode [ 24.489199][ T297] bridge_slave_1: entered promiscuous mode [ 24.630990][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.638091][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.645413][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.652520][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.670476][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.677576][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.684864][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.691951][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.701296][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.708377][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.715671][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.722738][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.783041][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.790140][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.797476][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.804524][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.821370][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.828816][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.836190][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.844229][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.851741][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.859277][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.866484][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.873864][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.883339][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.890429][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.904446][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.911549][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.924606][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.931702][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.942799][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.949898][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.959091][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.966155][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.980147][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.987219][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.026281][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.033395][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.054818][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.061908][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.079689][ T294] veth0_vlan: entered promiscuous mode [ 25.095741][ T296] veth0_vlan: entered promiscuous mode [ 25.115346][ T295] veth0_vlan: entered promiscuous mode [ 25.125382][ T294] veth1_macvtap: entered promiscuous mode [ 25.136570][ T296] veth1_macvtap: entered promiscuous mode [ 25.151878][ T295] veth1_macvtap: entered promiscuous mode [ 25.175712][ T297] veth0_vlan: entered promiscuous mode [ 25.202958][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.223592][ T297] veth1_macvtap: entered promiscuous mode [ 25.431857][ T330] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.506991][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.577136][ T315] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.658112][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 25.667947][ T31] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 25.677854][ T31] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 25.692269][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 25.701631][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 25.709882][ T31] usb 2-1: Product: syz [ 25.714142][ T31] usb 2-1: Manufacturer: syz [ 25.719026][ T31] usb 2-1: SerialNumber: syz [ 25.737937][ T315] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 25.751673][ T315] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 25.760917][ T315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 25.769088][ T315] usb 3-1: SerialNumber: syz [ 25.928377][ T31] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 26.104684][ T342] syz.3.13 uses obsolete (PF_INET,SOCK_PACKET) [ 26.396623][ T315] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 26.652657][ T31] usb 2-1: USB disconnect, device number 2 [ 26.672021][ T31] usblp0: removed [ 26.688145][ T379] support for cryptoloop has been removed. Use dm-crypt instead. [ 26.818546][ T315] usb 3-1: USB disconnect, device number 2 [ 26.826178][ T315] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 27.087062][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 27.116956][ T429] netlink: 188 bytes leftover after parsing attributes in process `syz.0.36'. [ 27.246911][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 27.254742][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.274669][ T31] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 27.284506][ T31] usb 2-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 27.295801][ T31] usb 2-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 27.309524][ T31] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 27.323637][ T31] usb 2-1: config 1 interface 1 has no altsetting 0 [ 27.331957][ T31] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 27.349573][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.359720][ T31] usb 2-1: Product: syz [ 27.364461][ T31] usb 2-1: Manufacturer: syz [ 27.369587][ T31] usb 2-1: SerialNumber: syz [ 27.583469][ T473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.53'. [ 27.596049][ T31] usb 2-1: selecting invalid altsetting 0 [ 27.805547][ T31] usb 2-1: 1:1: cannot get freq (v2/v3): err -32 [ 27.963271][ T36] kauditd_printk_skb: 97 callbacks suppressed [ 27.963291][ T36] audit: type=1400 audit(1781336106.170:171): avc: denied { relabelfrom } for pid=500 comm="syz.2.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 27.989595][ T36] audit: type=1400 audit(1781336106.170:172): avc: denied { relabelto } for pid=500 comm="syz.2.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 28.060672][ T36] audit: type=1400 audit(1781336106.270:173): avc: denied { read } for pid=502 comm="syz.3.66" name=".log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 28.087005][ T36] audit: type=1400 audit(1781336106.270:174): avc: denied { open } for pid=502 comm="syz.3.66" path="/32/file0/.log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 28.125104][ T36] audit: type=1400 audit(1781336106.270:175): avc: denied { name_bind } for pid=504 comm="syz.2.67" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 28.154286][ T36] audit: type=1400 audit(1781336106.320:176): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 28.176180][ T36] audit: type=1400 audit(1781336106.330:177): avc: denied { read write } for pid=506 comm="syz.2.68" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 28.208288][ T36] audit: type=1400 audit(1781336106.330:178): avc: denied { open } for pid=506 comm="syz.2.68" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 28.214568][ T515] process 'syz.2.71' launched './file0' with NULL argv: empty string added [ 28.235520][ T36] audit: type=1400 audit(1781336106.330:179): avc: denied { ioctl } for pid=506 comm="syz.2.68" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 28.257970][ T515] Invalid argument reading file caps for ./file0 [ 28.267614][ T36] audit: type=1400 audit(1781336106.330:180): avc: denied { unlink } for pid=508 comm="syz.3.69" name="#3" dev="tmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 28.281997][ T9] usb 2-1: USB disconnect, device number 3 [ 28.325027][ T518] kvm: user requested TSC rate below hardware speed [ 28.561349][ T547] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 28.571217][ T547] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 28.741133][ T562] netlink: 'syz.2.93': attribute type 9 has an invalid length. [ 28.914896][ T590] ======================================================= [ 28.914896][ T590] WARNING: The mand mount option has been deprecated and [ 28.914896][ T590] and is ignored by this kernel. Remove the mand [ 28.914896][ T590] option from the mount to silence this warning. [ 28.914896][ T590] ======================================================= [ 29.256949][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 29.385158][ T629] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.407102][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 29.415712][ T10] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 29.424204][ T10] usb 3-1: config 0 has no interface number 0 [ 29.432125][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 29.441379][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.449444][ T10] usb 3-1: Product: syz [ 29.453740][ T10] usb 3-1: Manufacturer: syz [ 29.458377][ T10] usb 3-1: SerialNumber: syz [ 29.463653][ T10] usb 3-1: config 0 descriptor?? [ 29.469608][ T10] smsc95xx v2.0.0 [ 29.877399][ T310] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 30.056068][ T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.083050][ T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.096786][ T310] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 30.108578][ T66] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.113554][ T310] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 30.128001][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.137598][ T310] usb 4-1: config 0 descriptor?? [ 30.149214][ T66] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 30.482075][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 30.506899][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 30.516416][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 30.527409][ T10] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 30.536681][ T10] usb 3-1: USB disconnect, device number 3 [ 30.550629][ T310] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 30.562086][ T310] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 30.570112][ T310] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 30.577915][ T310] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 30.593303][ T310] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 30.602022][ T310] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 30.609750][ T310] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 30.617469][ T310] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 30.625181][ T310] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 30.632924][ T310] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 30.640636][ T310] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 30.650403][ T310] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 30.658892][ T310] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 30.666387][ T310] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 30.674630][ T310] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 30.713617][ T310] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 30.740819][ T310] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 30.813615][ T10] usb 4-1: USB disconnect, device number 2 [ 30.834241][ T697] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 30.834265][ T697] rust_binder: Read failure Err(EFAULT) in pid:92 [ 30.843279][ T697] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 30.849797][ T697] rust_binder: Read failure Err(EFAULT) in pid:92 [ 31.205378][ T731] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.248325][ T735] netlink: 108 bytes leftover after parsing attributes in process `syz.0.167'. [ 31.506945][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 31.517552][ T296] ------------[ cut here ]------------ [ 31.523090][ T296] WARNING: CPU: 1 PID: 296 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 31.531106][ T296] Modules linked in: [ 31.535086][ T296] CPU: 1 UID: 0 PID: 296 Comm: syz-executor Not tainted syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 31.546785][ T296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 31.556916][ T296] RIP: 0010:drop_nlink+0xce/0x110 [ 31.562216][ T296] Code: 04 00 00 be 08 00 00 00 e8 6f 06 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f2 4f 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 31.581944][ T296] RSP: 0018:ffffc9000b65fc60 EFLAGS: 00010293 [ 31.588085][ T296] RAX: ffffffff81f271be RBX: ffff8881213361e8 RCX: ffff88812df11300 [ 31.596074][ T296] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 31.604130][ T296] RBP: ffffc9000b65fc88 R08: 0000000000000003 R09: 0000000000000004 [ 31.612222][ T296] R10: dffffc0000000000 R11: fffff520016cbf7c R12: dffffc0000000000 [ 31.620286][ T296] R13: 1ffff11024266c46 R14: ffff888121336230 R15: 0000000000000000 [ 31.628356][ T296] FS: 0000555582661500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 31.637527][ T296] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.644126][ T296] CR2: 0000555582684958 CR3: 0000000103f60000 CR4: 00000000003526b0 [ 31.652231][ T296] Call Trace: [ 31.655537][ T296] [ 31.658524][ T296] shmem_rmdir+0x5f/0x90 [ 31.662833][ T296] vfs_rmdir+0x3e3/0x560 [ 31.666982][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 31.667184][ T296] incfs_kill_sb+0x109/0x230 [ 31.674851][ T10] usb 2-1: config index 0 descriptor too short (expected 100, got 36) [ 31.676812][ T296] deactivate_locked_super+0xd5/0x2a0 [ 31.685870][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.690390][ T296] deactivate_super+0xb8/0xe0 [ 31.702040][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 31.705997][ T296] cleanup_mnt+0x406/0x4a0 [ 31.719636][ T10] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 31.723221][ T296] __cleanup_mnt+0x1d/0x40 [ 31.733062][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.736718][ T296] task_work_run+0x1e5/0x260 [ 31.748007][ T10] usb 2-1: config 0 descriptor?? [ 31.749396][ T296] ? __cfi_task_work_run+0x10/0x10 [ 31.759524][ T296] ? __x64_sys_umount+0x12e/0x180 [ 31.764582][ T296] ? __cfi___x64_sys_umount+0x10/0x10 [ 31.770019][ T296] ? __kasan_check_read+0x15/0x20 [ 31.775198][ T296] resume_user_mode_work+0x35/0x50 [ 31.780381][ T296] syscall_exit_to_user_mode+0x63/0xb0 [ 31.785885][ T296] do_syscall_64+0x63/0xf0 [ 31.790403][ T296] ? clear_bhb_loop+0x50/0xa0 [ 31.795121][ T296] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.801125][ T296] RIP: 0033:0x7fd0fcf9e097 [ 31.805595][ T296] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 31.825388][ T296] RSP: 002b:00007fff63634928 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 31.833865][ T296] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fd0fcf9e097 [ 31.841912][ T296] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff636349e0 [ 31.849949][ T296] RBP: 00007fff636349e0 R08: 00007fff636359e0 R09: 00000000ffffffff [ 31.857988][ T296] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff63635a70 [ 31.865988][ T296] R13: 00007fd0fd0321ca R14: 0000000000007b09 R15: 00007fff63635ab0 [ 31.874020][ T296] [ 31.877098][ T296] ---[ end trace 0000000000000000 ]--- [ 31.882725][ T296] ================================================================== [ 31.890858][ T296] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 31.897113][ T296] Write of size 4 at addr 0000000000000168 by task syz-executor/296 [ 31.905127][ T296] [ 31.907464][ T296] CPU: 0 UID: 0 PID: 296 Comm: syz-executor Tainted: G W syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 31.907494][ T296] Tainted: [W]=WARN [ 31.907500][ T296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 31.907511][ T296] Call Trace: [ 31.907517][ T296] [ 31.907524][ T296] __dump_stack+0x21/0x30 [ 31.907558][ T296] dump_stack_lvl+0x140/0x1c0 [ 31.907584][ T296] ? __cfi_dump_stack_lvl+0x10/0x10 [ 31.907612][ T296] print_report+0x3d/0x70 [ 31.907637][ T296] kasan_report+0x162/0x1a0 [ 31.907662][ T296] ? ihold+0x24/0x70 [ 31.907684][ T296] ? _raw_spin_unlock+0x45/0x60 [ 31.907709][ T296] ? ihold+0x24/0x70 [ 31.907731][ T296] kasan_check_range+0x25a/0x2b0 [ 31.907755][ T296] __kasan_check_write+0x18/0x20 [ 31.907773][ T296] ihold+0x24/0x70 [ 31.907794][ T296] vfs_rmdir+0x26a/0x560 [ 31.907820][ T296] incfs_kill_sb+0x109/0x230 [ 31.907840][ T296] deactivate_locked_super+0xd5/0x2a0 [ 31.907867][ T296] deactivate_super+0xb8/0xe0 [ 31.907892][ T296] cleanup_mnt+0x406/0x4a0 [ 31.907916][ T296] __cleanup_mnt+0x1d/0x40 [ 31.907937][ T296] task_work_run+0x1e5/0x260 [ 31.907962][ T296] ? __cfi_task_work_run+0x10/0x10 [ 31.907986][ T296] ? __x64_sys_umount+0x12e/0x180 [ 31.908003][ T296] ? __cfi___x64_sys_umount+0x10/0x10 [ 31.908020][ T296] ? __kasan_check_read+0x15/0x20 [ 31.908043][ T296] resume_user_mode_work+0x35/0x50 [ 31.908061][ T296] syscall_exit_to_user_mode+0x63/0xb0 [ 31.908084][ T296] do_syscall_64+0x63/0xf0 [ 31.908110][ T296] ? clear_bhb_loop+0x50/0xa0 [ 31.908129][ T296] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.908163][ T296] RIP: 0033:0x7fd0fcf9e097 [ 31.908178][ T296] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 31.908193][ T296] RSP: 002b:00007fff63634928 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 31.908212][ T296] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fd0fcf9e097 [ 31.908224][ T296] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff636349e0 [ 31.908236][ T296] RBP: 00007fff636349e0 R08: 00007fff636359e0 R09: 00000000ffffffff [ 31.908262][ T296] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff63635a70 [ 31.908275][ T296] R13: 00007fd0fd0321ca R14: 0000000000007b09 R15: 00007fff63635ab0 [ 31.908290][ T296] [ 31.908297][ T296] ================================================================== [ 32.166940][ T296] Disabling lock debugging due to kernel taint [ 32.173181][ T296] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 32.181016][ T296] #PF: supervisor write access in kernel mode [ 32.187111][ T296] #PF: error_code(0x0002) - not-present page [ 32.193122][ T296] PGD 800000010e7eb067 P4D 800000010e7eb067 PUD 0 [ 32.199677][ T296] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 32.205782][ T296] CPU: 1 UID: 0 PID: 296 Comm: syz-executor Tainted: G B W syzkaller #0 471281939cd7bfdfff4c6b6074d5d68627c837ba [ 32.218937][ T296] Tainted: [B]=BAD_PAGE, [W]=WARN [ 32.224003][ T296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 32.234082][ T296] RIP: 0010:ihold+0x2a/0x70 [ 32.238650][ T296] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 dd 46 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 2c fd ed ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 ed [ 32.258287][ T296] RSP: 0018:ffffc9000b65fca0 EFLAGS: 00010246 [ 32.264378][ T296] RAX: ffff88812df11300 RBX: 0000000000000000 RCX: ffff88812df11300 [ 32.272384][ T296] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 32.280384][ T296] RBP: ffffc9000b65fcb0 R08: ffffffff88bbe947 R09: 1ffffffff1177d28 [ 32.288399][ T296] R10: dffffc0000000000 R11: fffffbfff1177d29 R12: ffff8881213361f4 [ 32.296400][ T296] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 32.304404][ T296] FS: 0000555582661500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 32.313358][ T296] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.319961][ T296] CR2: 0000000000000168 CR3: 0000000103f60000 CR4: 00000000003526b0 [ 32.327955][ T296] Call Trace: [ 32.331242][ T296] [ 32.334188][ T296] vfs_rmdir+0x26a/0x560 [ 32.338477][ T296] incfs_kill_sb+0x109/0x230 [ 32.343101][ T296] deactivate_locked_super+0xd5/0x2a0 [ 32.348525][ T296] deactivate_super+0xb8/0xe0 [ 32.353281][ T296] cleanup_mnt+0x406/0x4a0 [ 32.357730][ T296] __cleanup_mnt+0x1d/0x40 [ 32.362193][ T296] task_work_run+0x1e5/0x260 [ 32.366822][ T296] ? __cfi_task_work_run+0x10/0x10 [ 32.371968][ T296] ? __x64_sys_umount+0x12e/0x180 [ 32.377052][ T296] ? __cfi___x64_sys_umount+0x10/0x10 [ 32.382455][ T296] ? __kasan_check_read+0x15/0x20 [ 32.387535][ T296] resume_user_mode_work+0x35/0x50 [ 32.392679][ T296] syscall_exit_to_user_mode+0x63/0xb0 [ 32.398162][ T296] do_syscall_64+0x63/0xf0 [ 32.402616][ T296] ? clear_bhb_loop+0x50/0xa0 [ 32.407326][ T296] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.413266][ T296] RIP: 0033:0x7fd0fcf9e097 [ 32.417713][ T296] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 32.437347][ T296] RSP: 002b:00007fff63634928 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 32.445819][ T296] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fd0fcf9e097 [ 32.453817][ T296] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff636349e0 [ 32.461798][ T296] RBP: 00007fff636349e0 R08: 00007fff636359e0 R09: 00000000ffffffff [ 32.469792][ T296] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff63635a70 [ 32.477794][ T296] R13: 00007fd0fd0321ca R14: 0000000000007b09 R15: 00007fff63635ab0 [ 32.485878][ T296] [ 32.488912][ T296] Modules linked in: [ 32.492860][ T296] CR2: 0000000000000168 [ 32.497015][ T296] ---[ end trace 0000000000000000 ]--- [ 32.502513][ T296] RIP: 0010:ihold+0x2a/0x70 [ 32.507096][ T296] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 dd 46 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 2c fd ed ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 ed [ 32.523745][ T10] hid-led 0003:0FC5:B080.0003: unknown main item tag 0xd [ 32.526728][ T296] RSP: 0018:ffffc9000b65fca0 EFLAGS: 00010246 [ 32.539792][ T10] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 32.539863][ T10] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 32.546911][ T296] RAX: ffff88812df11300 RBX: 0000000000000000 RCX: ffff88812df11300 [ 32.546930][ T296] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 32.546943][ T296] RBP: ffffc9000b65fcb0 R08: ffffffff88bbe947 R09: 1ffffffff1177d28 [ 32.546960][ T296] R10: dffffc0000000000 R11: fffffbfff1177d29 R12: ffff8881213361f4 [ 32.555615][ T10] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0 [ 32.561962][ T296] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 32.561979][ T296] FS: 0000555582661500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 32.561998][ T296] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.562013][ T296] CR2: 0000000000000168 CR3: 0000000103f60000 CR4: 00000000003526b0 [ 32.562033][ T296] Kernel panic - not syncing: Fatal exception [ 32.562234][ T296] Kernel Offset: disabled