program: syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="73657373696f6e3d308a30303030303030303030303030303030322c00"], 0x1, 0xc3c, &(0x7f0000000d00)="$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") (async) syz_usb_connect(0x3, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010102d1a05e20cd0c02010e89010203010902120001085440010904"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) r0 = syz_open_dev$I2C(&(0x7f0000000140), 0x2, 0x48842) pwritev(r0, &(0x7f0000001640)=[{&(0x7f0000000180)="a964", 0x2}, {&(0x7f0000000200)="51b9cbb3dfd681487078dbd83c7a158c7e29d9b2a34198ca1b244a5696ed28dc95182803952fa7eea85641a767d41d498983b23fdf57654ec6f6e163de25d70961bb", 0x42}], 0x2, 0x0, 0x5) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x5dc0, 0x48502) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='dummy_hcd.0', 0xb) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x210800, 0x0) (async) r3 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r3) (async) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r4, &(0x7f00000002c0)={'#! ', '', [{0x20, '\xa2\x9cV\t\xf4s\x84\x01\xa8\xb7\xec\x19\x8d\xf3rq\x11\xd7\x0f\xcbR\xab\xc6@(\xc2\xcfp\x02if\xe5\xbf\xce\xa4\x16|\x97\xcb\x8a\xd6\xa6G:)%}k\x9d\x13\x8b\x00\x00'}]}, 0x3a) (async) close(r4) (async) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) ptrace(0x10, r2) (async) ptrace$peekuser(0x3, r2, 0x190) (async) ptrace$setsig(0x4203, r2, 0x5893, 0x0) (async) statfs(&(0x7f0000002c00)='./file0\x00', &(0x7f0000002c40)=""/63) [ 92.785791][ T10] cfg80211: failed to load regulatory.db [ 92.868551][ T4652] Bluetooth: hci0: command tx timeout [ 92.972724][ T5334] dummy_hcd dummy_hcd.0: remove, state 1 [ 93.052707][ T5312] hub 5-0:1.0: activate --> -108 [ 93.069449][ T5312] hub 5-0:1.0: hub_ext_port_status failed (err = -108) [ 93.075016][ T5334] usb usb5: USB disconnect, device number 1 [ 93.105030][ T5327] loop0: detected capacity change from 0 to 2088 [ 93.127667][ T5334] dummy_hcd dummy_hcd.0: stopped [ 93.154326][ T5327] udf: Unknown parameter './file0' [ 93.161970][ T5334] dummy_hcd dummy_hcd.0: USB bus 5 deregistered [ 94.951307][ T4652] Bluetooth: hci0: command tx timeout [ 95.955341][ T5334] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 95.960606][ T5334] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 95.964239][ T5334] CPU: 0 UID: 0 PID: 5334 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 95.968013][ T5334] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.972429][ T5334] RIP: 0010:set_link_state+0x27/0x1000 [ 95.976758][ T5334] Code: 90 90 90 55 41 57 41 56 41 55 41 54 53 48 83 ec 38 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 80 41 0e fa 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 5b 73 7d fa 49 8b 16 4d 8d a6 a3 00 [ 95.984147][ T5334] RSP: 0018:ffffc9000f49f780 EFLAGS: 00010046 [ 95.986621][ T5334] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888035fb4a80 [ 95.989506][ T5334] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 95.992382][ T5334] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 95.995713][ T5334] R10: dffffc0000000000 R11: fffff52001e93eec R12: 0000000000000246 [ 95.999027][ T5334] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 96.002440][ T5334] FS: 0000000000000000(0000) GS:ffff88808c53f000(0000) knlGS:0000000000000000 [ 96.006335][ T5334] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.009158][ T5334] CR2: 00007f99ea9af990 CR3: 0000000013353000 CR4: 0000000000352ef0 [ 96.012600][ T5334] Call Trace: [ 96.014090][ T5334] [ 96.015395][ T5334] ? rcu_is_watching+0x15/0xb0 [ 96.017246][ T5334] ? __pfx_dummy_pullup+0x10/0x10 [ 96.019155][ T5334] dummy_pullup+0xc4/0x120 [ 96.020756][ T5334] ? __pfx_dummy_pullup+0x10/0x10 [ 96.022540][ T5334] usb_gadget_disconnect_locked+0x126/0x480 [ 96.024683][ T5334] gadget_unbind_driver+0xc2/0x410 [ 96.026758][ T5334] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 96.029287][ T5334] device_release_driver_internal+0x48b/0x880 [ 96.031976][ T5334] driver_detach+0x1f3/0x2d0 [ 96.033984][ T5334] bus_remove_driver+0x226/0x320 [ 96.036080][ T5334] usb_gadget_unregister_driver+0x4e/0x70 [ 96.038530][ T5334] raw_release+0xd7/0x260 [ 96.040377][ T5334] ? __pfx_raw_release+0x10/0x10 [ 96.042345][ T5334] __fput+0x418/0xa50 [ 96.043984][ T5334] task_work_run+0x1d9/0x270 [ 96.045806][ T5334] ? __pfx_task_work_run+0x10/0x10 [ 96.048120][ T5334] ? do_raw_spin_unlock+0x4d/0x210 [ 96.050299][ T5334] do_exit+0x73a/0x2360 [ 96.052235][ T5334] ? __pfx_do_exit+0x10/0x10 [ 96.054452][ T5334] ? do_raw_spin_lock+0x12b/0x2f0 [ 96.056840][ T5334] do_group_exit+0x22d/0x2f0 [ 96.058877][ T5334] ? _raw_spin_unlock_irq+0x23/0x50 [ 96.061109][ T5334] get_signal+0x121b/0x12c0 [ 96.062927][ T5334] arch_do_signal_or_restart+0xbb/0x860 [ 96.065339][ T5334] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 96.067931][ T5334] ? exc_page_fault+0x6a/0xc0 [ 96.069705][ T5334] exit_to_user_mode_loop+0x104/0x730 [ 96.071700][ T5334] ? rcu_is_watching+0x15/0xb0 [ 96.073578][ T5334] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.076102][ T5334] do_syscall_64+0x353/0x580 [ 96.077892][ T5334] ? trace_irq_disable+0x3b/0x140 [ 96.079910][ T5334] ? clear_bhb_loop+0x40/0x90 [ 96.081744][ T5334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.084202][ T5334] RIP: 0033:0x7f99e9b9e019 [ 96.086177][ T5334] Code: Unable to access opcode bytes at 0x7f99e9b9dfef. [ 96.089033][ T5334] RSP: 002b:00007f99ea98e0a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 96.092337][ T5334] RAX: fffffffffffffe00 RBX: 00007f99e9e26188 RCX: 00007f99e9b9e019 [ 96.095059][ T5334] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f99e9e26188 [ 96.098295][ T5334] RBP: 00007f99e9e26180 R08: 0000000000000000 R09: 0000000000000000 [ 96.101629][ T5334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.105035][ T5334] R13: 00007f99e9e26218 R14: 00007ffec1005ba0 R15: 00007ffec1005c88 [ 96.108490][ T5334] [ 96.109891][ T5334] Modules linked in: [ 96.111612][ T5334] ---[ end trace 0000000000000000 ]--- [ 96.114012][ T5334] RIP: 0010:set_link_state+0x27/0x1000 [ 96.116247][ T5334] Code: 90 90 90 55 41 57 41 56 41 55 41 54 53 48 83 ec 38 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 80 41 0e fa 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 5b 73 7d fa 49 8b 16 4d 8d a6 a3 00 [ 96.124153][ T5334] RSP: 0018:ffffc9000f49f780 EFLAGS: 00010046 [ 96.126762][ T5334] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888035fb4a80 [ 96.130182][ T5334] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 96.133631][ T5334] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 96.137083][ T5334] R10: dffffc0000000000 R11: fffff52001e93eec R12: 0000000000000246 [ 96.140535][ T5334] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 96.143939][ T5334] FS: 0000000000000000(0000) GS:ffff88808c53f000(0000) knlGS:0000000000000000 [ 96.147790][ T5334] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.150642][ T5334] CR2: 00007f99ea9af990 CR3: 0000000013353000 CR4: 0000000000352ef0 [ 96.154125][ T5334] Kernel panic - not syncing: Fatal exception [ 96.157189][ T5334] Kernel Offset: disabled [ 96.159007][ T5334] Rebooting in 86400 seconds..