last executing test programs: 3.288358589s ago: executing program 1 (id=45): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xf, 0x0, &(0x7f0000000580)="cb2313c1904d2fe84625b676943600"}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc2c02e4d8eb3a414, 0x4) r1 = openat$incfs(r0, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc058671e, &(0x7f00000000c0)) 3.288186529s ago: executing program 1 (id=46): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) io_setup(0x4, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000680)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x0, 0x8}]) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_destroy(r1) 3.163137622s ago: executing program 1 (id=47): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000280)=@vmx={0x0, 0x0, 0x2080, {0x3000, 0x7000, {}, 0x1, 0xffffffffffffffff}}) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000004000)=@vmx={0x8, 0x0, 0x2080, {0x40000, 0xfec0c000, {0x2}, 0x0, 0x5}, {"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", "3ca07a9b803250ecbb9ca5eb180423f4be70fa6a1c47270b4f188b798b3cd807857543d1814571f869f00724c250e43a2898ce11783b48c3f4ac89161cd70fa690b4e5420c2834ea8621f4b013a5e91f313022441ee4cc3a0b0dbfc32eb02ad46164c8cca21e54cd809905e319bf58bf32f18f8d8299d2ef54526ea385532aedc9d2e2124a07d45cad4c6b23f30fdaee0750a45f74e223811c1559a401e65f99d572d4fb4c79f5d89619e0d89a5a39aa6dd70a06b6bb75b9a0fe950c5aaf736cbbc5ce1aae5fc511a23511ba7fba235eb6d7c0f49d79bda826bd3338bc7b7030b255c72b3702b738972ab7bdc13de39e6a6a0f7b96523d703b4d1f6edefcba2a120360bea95ffa6bd5b5ebbcf5d8cea17b3dd3c40be047dd213074f7bc7967528781b4a4f0a61ec5d333d6430b32aa3948fdb09358bbfbe4f12b2a02b245f3076d18e10abd648750e301693bd33700a4cae922395e63e705fcd130d42148a33d3d441d203b703c20f6c73b902b96788daef444678222ee97a580d7f083246d6a49ae003df154866cf7e5cc555662ab46a11f8d0b45784e9692e2dc6bc945af3dec17299da5b5aebbf467eb95c9fe20798bc0ad326c74cbc9ac3618c4cf6d46833cad125b6a8e0a679f81a9c67719520e2d8dfa06a7161156f7cffead64dc0a381777debd7e865b211cddbc4048450c349e338a67f9b783b45c68e9e55f68f25bbc624e1449536bb6cfa742ddf12f3c4e87d1645dbf5723dfb374fae74ad24d01c05cfe1dafad9d0ed452bc5aaac1620f50f3861cb05687b9ee39441fcc4587897ac7a2cef66bacf112e0babc9515301a23038a5d5c3249ac2ea433b5cf6c2a3c454485a26cae50a3a2a2bc49d9443d62ae37ae3968627b8c398241c7cd039efe02f1c5c6acf31b5787aca59a41685e960318c079793a177b1880fbe92d65083cfa866299347962d5b78792f011b265e06d0e5b488272f0bac9b42b1946f3d281de548d5051c1424c62b11a3284282c7974cc3a95f43c7d5eba0e252e19a1071be00fa0450e7b73bfa362f2f2bc3ecb1289bbd753a0a20878377581be26a8dfe1a7732fd6e1ee8f19cd3d40833f98136032c76904d0be0d0cb565b49c8c659bf71455ec12bd8469c514c42e79a26d3104d881519b976c55c3cb088b79d51af21565171fbd1f688e1ee4a5f6055dafe4f2f48943392034dce83e324f98b84f3f421e83c133bc579e1e611a61288d9d0da67a19089183b38c71d4169979c34097c5e362db9ee086284ebf10c64cfa773de7fbb3851d82a8d70c82b1af58df346fcbaee5237ddd008afb7c82bbcf202d0ad3261dc0c0fd1c7f5fa7e85cb439b4f0a2248a2f97b8be92e781054456afbf80817623bc0f723f58e7cd3aa29d56f192762774092ce97ba9754386647b91c5e8a93b6d1be5bd5d1106a17fcebc376b7cb72ab3597d094e5dfcdf220b4abc46216aa254a59b4badb73b50e6010ff0861b4f0d4422d492da26ad8e5e2b2bb6df73c8850e5c9329cfdb619413729256ada6497bb63fcf22f38e71a08848d3bfe24e9148ef7f1874a21ceb87cd8a556e4f0aa155429d8d8c8cebac8f811040c8f49ec71482e1818bdf3751925c01abfbdb9ece027836b83e21c261c39171433a2550e7b9697f8bf5673f1687032f92928201b7ae9e817c892e99eaed3d6e446d0f4f92ce394280b027acb99faf378a3c4a6a4f18acc02c6f4dbf2101643235f976169ed9d2c497f9334bcb6ac3cc115a4ebd83733be968038d96e09373d4e306b487968ee8ee826601f6c2f53f6f91e19901e3309d074f5e2033c88e3470df6e9d4be9c686fbdbeffa0927b00a3c513e8fc800bf30a4f65c8df91aed6a1885371cff901b47da16111039e0bbb38d45cdbdfa54d825536a0e9c8e7ec387052ed122c02f05530adf712a6bc5e722466f7b9ec4f60577c5600604bbea28c750caee81af3c68be466e4c9a99a111431e9da564ecb21d01959e05f5a54c16c1d5a4192cdf77505314cd2594e58e694e0a475e2d3ab5ffd8279ef3848624bb7e098d427774f541f1d7a2b16516d81c3cd62694ad526d16906cffd74f450dd300d8c42849f0e568213d44e0fbbe94389bddf576903bfa01b571a51e22820adb3010c6899735b836f8596c10db9a199142cbb317757f367bb166cb83f1fc7244b00f90bfec6d2800f05e046cde80dab1eae9a9945e3f7073f51db39a82e18a2cf561eb10be103f237b401736b574c6548f086e77ca9327042574c391ba857d661f2f1e0ab56735c2f30b11c820a330fe92433d994ddaeae25ed0132ecf264ae8f26d03b69d09674bab12100dbe3f0bd02ad7405009d1bd818a92d848724727ff3d6ed47c192d72c17994bf6de056396088532c52bf765b2d8f2336c1b3068616b222ca29adbe82a47ef09c40106f0df146d477dc4d18c937df7e642f9c11a65a2c7c9e1a327567f0f711f8de0fa1d86ad5acd39fc718f35d9fd97c66a25c8225a9df181ac778f4638041670d5e38090e0bc3a3488a4fe356b874e39aaac58756008739c366084e6fbe3217f32fab9c227c3b4bdb2a3b85d4c11ccd522cff823ee320e21fabfd1843388c16e7e64e4c4ef806bb3ace42837a0de443a5cc95073929720e22ff60210ff2a8dac5887d7abdd6b010b80c9897d3ca436a32fbe931656e72b2dae537a070de3ac00d37f6d7552444ab927f9dc997f0a16f9e07d92d76e8b00e5d5099ed045ba1a4e9825202da8d833b92776e059814e4a35cfc5e1ac166b7254e12ef7bae386e94602c79eea85d219d69eda3c3fa6adff6a0fbfa98d54211c2f98c8981887d4dcafec83d23e978ca220307e59268869617ed835bb7993f7ac5007e3e6846716dfe114b30c5d130f03d45557d78cc8a1e35eb9382f4881798051abd8090d52e5b2548b183e2c32c261be716d41edfdcbd0966393d7f9dfa416395cc0fa4a61205fdc911c0381e1cd897735ba5ffceb5ddab3969f02a7c5fbf90536f86797cd479f51e3fe5274a05dd8984a235dcd375be2bccc1fbc22bcc6770fc2534998732ceb048b3d69a1b4e1706111a55ab958d92d542efc222ccb710556aa2bec044d707d82412cd2ebc7e5728d9f0779e12781f335e6effb92209ab8ef1f9ad30f9a326acc4ff2d5dac04a3507329fcd2da7f4b9d64877761e01560d83a7254ee6e0d7bedb5e007cac2ac8261cbca490b0c1b56963c45ef3d61584d463c3079a60bfc4504f743bdbb40ed6ccc8476da6cf769a82eb217d14777f3fa1aea04d822f6bd265f455aa1733a5c8f75523387b77053928ac25a57de0f40cb414e5c7dc516f1d49c180711a75549cee02aadbf6d44808e6ba02593e6e2fd34f35feb4f097f0f1cea097173ff363f02081ba252dd31f0b813a0e3c63c27d13fa1f08df1a59b058cb15b785e1d3e6618429a38aa085aa40021dc4835147e3c3036b20e3399e322a479bb913b111bd3724a23ac2639cd291aaca4ba1907572e8d7a273a128691bb53e5bbdbe9bd90d31a639a899081fa3d0d59a7ad3092cb1eb77e36aac96db0154058d55a5fcc8525c1f357d73cebde107d19f48e0d7db373bbe0b165b74e67aebf3f188f48cacae494e0bdaa3611bbefa0a100565d7e22f713bbde74f288a466fe095b2c057aa4999164078ec7d28dd6b4c75a3ff377b54c1e8802dcb40f35be1e9153007d4057d962ce4834eee54bac08c12074bfabe7cf0ece5f681605dfb17f9fb7d0eb6516d33b7948dc641c939e44077e8b65fb17cf451dc59b33280c8d1600c524c58a684dec26b7c5acd081580ff2ea98f7fb187fcaad0ea9dd511a60a1c9329d80533157d3a391580d014ec1cddee3acbbb870da64c5b9aa26a20e471e38ec8ae1630d35b8121c5d17e5fc50e720a7b79d148af7431789cf2218b3c9ed550c7d484be0e225c8988c555ffb43ea8248977d2c83967a2b96159880c3e6e8a22bc2bcc9fb0a9b94d12904cac787e11dae18486ad3767285da6bda30b4e29b64a02db30a83c54886e4db46cc08ef046291d28de68f0571cbd75c7c36df08c369a76209b62338adea524be7c12a8b545bd6433edf99a4209ffec1daf9e290b10005dd300099539c934539d40d6f87e031b78818625911ed257d20ff5bd9bafd8a6220ffa058a64497504d52a47c9f18d95b1c02d5ca338e3b82348ac2c256f528fafc404c44e660f45bcd1721d2a9cb41eec6836351654a338fe1618d106aabd74f56acf1f773e37f680c875893c65bbe1cb3c608354cd6a99f0e02b2eb8802429805d4dc7ba239dd5033d87cbdb3eaca9d4192c6881119d7d6cb253981a0bca61383a99800f6e09dd8bc4e66a9dd938d5c45ca14f78984c2cfe3b096851b6c9df997d6d83deed90d0f6aecd56dc23b4311d0bf7f283a447f31ad49f7e14848d9bcf09f130b50f8c9a313485b475d22b8f8b4dfbd29df195f50099a4f6feacb6deb1f0d08c32d85dd4935d296e98331b156635c52f7ac0f7b0737c278746d913b5dbd02bdfcea75f5b345f38c318e8158c95597b5ec772e4674055c88629a306bdad95d59ae2d02d76f711ad56fca18159cb9a8271c53b4c05d71d2f6d351498212d92b99368cdf930ff3fef52c55712a62b552c3c03d90a91a9c3494e5aac720e2e23d2e5621728d6e4bdf840bfa7beddb8f00ec5c454f47872d85f3dd5f7d1d671e95c31d5cb4ab30e4cc74fa4f7ea053cf3b197364bc9a47fe5f5dadc8167f173da9d749b09ba120e6c9ace66c3b135497ab60d0800562dc31839f9e5b1747c15a1ca0624e02dd0b860c443acccb90703a1d22a9857c8ede3b930b4130ff4e7ab47ddbc7c573ea8954d361d7500779863389e17e36b25f492465877885e7d2df0a6de0184033f3564d03ca6878cf220deba492c36eb64c52307cd395f5f728bad30bbaed9a6181925cc68713b6f607af18b8f6fececc0198496bfc6620ca1ef3cdba417bb9e6fafa317f427eb383010b2b3c85ab24b25db40e4ed8af29e0d44a6256ab6905d4e0f66d40b033fd84223ce5b70762e55cf5c2f90ea1db002376e91bdc45d3bc39ab149e4f579ca8a16be3ea82e729688f448d9172dddea526cef7ffc0338c57e324a6cf56f32308873332dd46de231f593ab02298b535e9aed31929742702095e5596b5ae40538925b5895420a4b17b26d9a831c08ee5f672de1319d31d198a23544b2da23de9d4bd5b9444c975644c8843ce39eb597c43ee01105c0cc7d05843c1ca35fad249b3c9f9a29f89961b5dbf64a1a044e513b0518c13acfeafe3bb37595f9a8cc330b7adefdd9990359907fab28b2cab3571df24e126bc217b2383ac15366be0547f98d221815020b1ed8a34ed31bcaaf3af0feee0be0ee8396f201a66a3a89b80663182a929e1174222984b48e553f5a24b64695efb9a3e653565bccb66dccf7d6cf315c0309143f999887c961ce79523a8e62bb4450f84b97308fc9f388c869e3350d089834ac280701d00fdc0db633c9dea286a15700c9c0096adc8868fa7a3b0b1d68a631916d06c5251e5831ca88ba0d0a68cd41f183e01662756be75a5bade6397c5ad4f334681d5246a53ab8a4f050054d4993e1c122500eea82997e5d2c5b8574299bcbcdd47d5bb20f34dd4992e61fb8a53bf40ece51e3acbebaee47eb1de41c2c630cfa8355f4a1695f3a6cef42f0627a45b7558fa0df183075f8e82857958aa15b09ea0b1d6e2f53a9bf358d9676ab22bef3138f2217e8b3b3587136c7e32fccc62a1aba7256d6c961f7b30755e5a3d7d349c04dd8419dea5acdb09"}}) 3.052381005s ago: executing program 1 (id=49): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3800000003"], 0x60}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f00000000c0)={0x2, 0xffffffff, 0x3, 0xfffff000, 0x0, 0x2}) 1.413069475s ago: executing program 1 (id=63): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902"], 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1.411017675s ago: executing program 0 (id=71): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x403, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd4000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f00000001c0)="f081550000a000000f0048180045000fbe252e8a094d36420f705626002e660f3a176a4b00b9800000c00f3267420f01c30f5966ba2c0cb8c087678eef66ba470f080ced45c194710a000000058a3bc4827dbcae009008f2", 0x58}], 0x1, 0x2a, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x2d, &(0x7f0000000000)=[@cr4={0x1, 0x9a0}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.316445918s ago: executing program 0 (id=64): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r0, &(0x7f0000000580)={@val={0xa, 0x72d1}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x1d8, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0xf}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x4, 0x1ff, 0x2000005, 0x53, [{0x4, 0x1e, "8666000005dc13128e21be0ca3631c139c476e64ddd58715f9515609f30f02dcc39e129ed698ffa44d6548a012f7004e0ab9dcb95580c0b6d48fc1a50000c8896cf496271da94eb0b9f1499f1bcb2cfe350875803587770312bd1d83e9a99408855797b33e14534c04acafd2d7eb6380b19eff8edf4e40f9661c77a5fba9af8147db07882c4b2b387a61a0ad366b75089a26b0dc126b5e9f0af1d657bd0752bc88f1853833ed6e6b5255910c9101243892dfbbbda1d2dbda346f3aa802afc1c1b4ee89e7df67dc1edfc4ab3fe773e7ea7ddc8b0e7ed5e3cdead388ad5ff116ec8279ecbd85faf0b0bc2c7378c7b2041bbb0badf634"}, {0x19, 0xa, "ad48eb31858e2be3bc713c589e797119b20cb9606959a12fc99d2ea2131da6f93b86b7645c3887a2b00ef5003f4b5f995553db90f61a77b03c0484d50c7ac9b4df0352683d7ef1d3e5f8120ca548f878"}, {0x1f, 0x0, "3457000005"}, {0x3, 0xf, "98cadafa174595f7f6484e6cda04f0785b24bf0f6bcad89c2ccf7c88b1ba56edfdd6bb5dc326796702c47e113d3698468fbb7326dbe14d20d0fc0c74d1e9d94057b4056b76797d99bfff96690440e51ba14d591b990376625cefb327d328655ca183d4ad196f6b2a5c63e4bdb3f92f3ce8909c7d7718"}]}}}}}}}, 0x212) 1.313802798s ago: executing program 0 (id=65): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil) syz_kvm_add_vcpu$x86(r2, 0x0) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000e00)={0x0, 0x0}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xc001102a}]}) 1.188349651s ago: executing program 0 (id=69): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000200)={@val={0xa, 0x88a8}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="cd1008a2dc58", @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4f9206", 0x30, 0x3a, 0x0, @remote, @loopback, {[], @time_exceed={0x3, 0x0, 0x0, 0x3, '\x00', {0x0, 0x6, '\x00', 0x9, 0x33, 0x1, @mcast2, @empty}}}}}}}}, 0x6a) 1.113392053s ago: executing program 0 (id=72): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f00000003c0)={@val={0xa, 0x9000}, @void, @eth={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x1b, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0xe}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @loopback, [{0x4, 0x0, "655382eb5d"}]}}}}}}}, 0x55) 1.027441455s ago: executing program 2 (id=74): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(0x3) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1004000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 1.027272425s ago: executing program 2 (id=76): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x6, 0xf, 0x1}}, 0x30) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r0, 0x5393, &(0x7f0000000100)=0x3) 1.019885875s ago: executing program 2 (id=77): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x18}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f0000001000)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xc0010020, 0x0, 0x1}]}) 1.003722465s ago: executing program 0 (id=78): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x101901, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x22, 0x8, {[@local=@item_4={0x3, 0x2, 0x2, "f2323915"}, @global=@item_012={0x0, 0x1, 0x9}, @global=@item_012={0x0, 0x1, 0x6}, @global=@item_012={0x0, 0x1, 0x4}]}}, 0x0}, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 919.973498ms ago: executing program 2 (id=79): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000afeb4f"], 0x14}, 0x1, 0x0, 0x0, 0x4000804}, 0x80) syz_genetlink_get_family_id$nfc(&(0x7f0000002a80), r1) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000002b80), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}}, 0x40000) 919.810027ms ago: executing program 2 (id=80): sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0xa4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/4, 0x3}], 0x3bc, 0x3, 0x10000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 803.80851ms ago: executing program 2 (id=81): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='fd\x00') fchdir(r0) exit(0x5c7b) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) 456.384419ms ago: executing program 3 (id=83): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x810) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf2501000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0xc854}, 0x0) 456.181559ms ago: executing program 3 (id=84): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000300)={@val={0x0, 0x88a8}, @void, @eth={@multicast, @remote, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x3, 0xc, 0x1c, 0x64, 0x0, 0x0, 0x2, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x39}}, {0x12, 0x9, 0x0, @rand_addr=0x64010101}}}}}}, 0x2e) 410.85431ms ago: executing program 3 (id=85): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040), 0x8) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) 392.860311ms ago: executing program 3 (id=86): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x142, 0x14) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r2) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) write(r0, &(0x7f0000000080)='4', 0x1) 73.426329ms ago: executing program 3 (id=87): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 72.019849ms ago: executing program 1 (id=88): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x80000000, 0x7, 0x10, 0x6, 0x1ff, 0x1, 0x145cd8df, 0x102000, 0x3, 0xfffffffffffffffc, 0xf5, 0x3, 0x10, 0xfffffffffffffffd, 0x8], 0x0, 0x1a8003}) 0s ago: executing program 3 (id=89): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000500)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/ncm.usb0/os_desc/interface.ncm/sub_compatible_id\x00', 0x0, 0x0) read(r0, &(0x7f0000000700), 0x64) kernel console output (not intermixed with test programs): cess permissive=1 [ 21.543333][ T36] audit: type=1400 audit(1785857769.240:63): avc: denied { siginh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.239' (ED25519) to the list of known hosts. [ 30.141969][ T36] audit: type=1400 audit(1785857777.950:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 30.146375][ T286] cgroup: Unknown subsys name 'net' [ 30.165864][ T36] audit: type=1400 audit(1785857777.950:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.194665][ T36] audit: type=1400 audit(1785857777.980:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.195312][ T286] cgroup: Unknown subsys name 'devices' [ 30.316144][ T286] cgroup: Unknown subsys name 'hugetlb' [ 30.322000][ T286] cgroup: Unknown subsys name 'rlimit' [ 30.439051][ T36] audit: type=1400 audit(1785857778.250:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.463907][ T36] audit: type=1400 audit(1785857778.250:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 30.491329][ T36] audit: type=1400 audit(1785857778.250:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 30.525455][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 30.536280][ T36] audit: type=1400 audit(1785857778.350:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 30.563658][ T36] audit: type=1400 audit(1785857778.350:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.611034][ T36] audit: type=1400 audit(1785857778.420:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.613457][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.638436][ T36] audit: type=1400 audit(1785857778.420:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.518425][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.525654][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.532754][ T293] bridge_slave_0: entered allmulticast mode [ 31.539361][ T293] bridge_slave_0: entered promiscuous mode [ 31.546694][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.553995][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.561470][ T293] bridge_slave_1: entered allmulticast mode [ 31.568021][ T293] bridge_slave_1: entered promiscuous mode [ 31.613821][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.621207][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.628789][ T294] bridge_slave_0: entered allmulticast mode [ 31.635710][ T294] bridge_slave_0: entered promiscuous mode [ 31.651102][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.658401][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.666166][ T296] bridge_slave_0: entered allmulticast mode [ 31.672801][ T296] bridge_slave_0: entered promiscuous mode [ 31.681203][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.688956][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.696401][ T296] bridge_slave_1: entered allmulticast mode [ 31.702929][ T296] bridge_slave_1: entered promiscuous mode [ 31.709145][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.716509][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.723952][ T294] bridge_slave_1: entered allmulticast mode [ 31.730445][ T294] bridge_slave_1: entered promiscuous mode [ 31.808875][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.816318][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.824064][ T295] bridge_slave_0: entered allmulticast mode [ 31.832183][ T295] bridge_slave_0: entered promiscuous mode [ 31.856202][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.864001][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.871262][ T295] bridge_slave_1: entered allmulticast mode [ 31.878349][ T295] bridge_slave_1: entered promiscuous mode [ 32.010540][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.018030][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.026001][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.033703][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.043304][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.050493][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.058360][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.065635][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.074856][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.082287][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.089817][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.097667][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.144864][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.152235][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.160268][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.167697][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.176322][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.184878][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.193000][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.200534][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.208935][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.216728][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.225027][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.255195][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.262791][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.271622][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.279182][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.297788][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.305483][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.313713][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.322655][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.331654][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.338867][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.371921][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.379737][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.388331][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.396421][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.421137][ T294] veth0_vlan: entered promiscuous mode [ 32.473118][ T293] veth0_vlan: entered promiscuous mode [ 32.482588][ T295] veth0_vlan: entered promiscuous mode [ 32.492357][ T294] veth1_macvtap: entered promiscuous mode [ 32.507085][ T296] veth0_vlan: entered promiscuous mode [ 32.520501][ T293] veth1_macvtap: entered promiscuous mode [ 32.553988][ T295] veth1_macvtap: entered promiscuous mode [ 32.567847][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.593430][ T296] veth1_macvtap: entered promiscuous mode [ 32.631114][ T313] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 32.741497][ T322] SELinux: ebitmap: start bit 0 comes after start bit 0 [ 32.751780][ T322] SELinux: failed to load policy [ 33.007978][ T66] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 33.163608][ T46] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 33.172295][ T66] usb 1-1: Using ep0 maxpacket: 8 [ 33.179510][ T66] usb 1-1: config 0 has no interfaces? [ 33.185227][ T66] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 33.194864][ T66] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.204889][ T66] usb 1-1: config 0 descriptor?? [ 33.324848][ T46] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 33.336775][ T46] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 33.348201][ T46] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 33.359753][ T46] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 33.373196][ T46] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 33.383415][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.392178][ T46] usb 4-1: Product: syz [ 33.396978][ T46] usb 4-1: Manufacturer: syz [ 33.401978][ T46] usb 4-1: SerialNumber: syz [ 33.408794][ T338] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 33.417712][ T46] cdc_mbim 4-1:1.0: skipping garbage [ 33.517222][ T66] usb 1-1: USB disconnect, device number 2 [ 33.619538][ T338] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 33.627193][ T338] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 34.238254][ T338] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 34.248637][ T359] kvm: kvm [358]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0xf800 [ 34.258856][ T338] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 34.267192][ T359] kvm: kvm [358]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0xf800 [ 34.282782][ T46] cdc_mbim 4-1:1.0: setting tx_max = 40 [ 34.291173][ T46] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 34.299513][ T46] wwan wwan0: port wwan0mbim0 attached [ 34.305467][ T66] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 34.317996][ T46] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 4a:cb:d9:0f:7e:65 [ 34.425842][ T368] kvm: MWAIT instruction emulated as NOP! [ 34.466901][ T66] usb 2-1: Using ep0 maxpacket: 16 [ 34.474367][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.488972][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.499493][ T314] usb 4-1: USB disconnect, device number 2 [ 34.513318][ T66] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 34.531781][ T314] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 34.550265][ T66] usb 2-1: New USB device found, idVendor=045e, idProduct=10da, bcdDevice= 0.00 [ 34.584815][ T66] usb 2-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 34.599365][ T66] usb 2-1: Product: syz [ 34.608629][ T66] usb 2-1: config 0 descriptor?? [ 34.627829][ T314] wwan wwan0: port wwan0mbim0 disconnected [ 34.903489][ T31] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 35.018216][ T414] syzkaller1: entered promiscuous mode [ 35.024464][ T414] syzkaller1: entered allmulticast mode [ 35.038960][ T66] hid-generic 0003:045E:10DA.0001: ignoring exceeding usage max [ 35.048954][ T66] hid-generic 0003:045E:10DA.0001: ignoring exceeding usage max [ 35.057013][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 35.065496][ T66] hid-generic 0003:045E:10DA.0001: unknown main item tag 0x0 [ 35.074094][ T66] hid-generic 0003:045E:10DA.0001: unknown main item tag 0x0 [ 35.083592][ T66] hid-generic 0003:045E:10DA.0001: unbalanced collection at end of report description [ 35.096235][ T31] usb 3-1: config 0 has no interfaces? [ 35.102722][ T31] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 35.113104][ T66] hid-generic 0003:045E:10DA.0001: probe with driver hid-generic failed with error -22 [ 35.123333][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.135340][ T31] usb 3-1: config 0 descriptor?? [ 35.193324][ T10] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 35.217995][ T420] ======================================================= [ 35.217995][ T420] WARNING: The mand mount option has been deprecated and [ 35.217995][ T420] and is ignored by this kernel. Remove the mand [ 35.217995][ T420] option from the mount to silence this warning. [ 35.217995][ T420] ======================================================= [ 35.256836][ T36] kauditd_printk_skb: 63 callbacks suppressed [ 35.256854][ T36] audit: type=1400 audit(1785857783.070:137): avc: denied { mounton } for pid=419 comm="syz.3.33" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 35.292488][ T314] usb 2-1: USB disconnect, device number 2 [ 35.292955][ T36] audit: type=1400 audit(1785857783.100:138): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 35.322343][ T36] audit: type=1400 audit(1785857783.130:139): avc: denied { create } for pid=421 comm="syz.3.34" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 35.344560][ T36] audit: type=1400 audit(1785857783.150:140): avc: denied { read write } for pid=421 comm="syz.3.34" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 35.369310][ T36] audit: type=1400 audit(1785857783.150:141): avc: denied { open } for pid=421 comm="syz.3.34" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 35.394064][ T36] audit: type=1400 audit(1785857783.150:142): avc: denied { mounton } for pid=421 comm="syz.3.34" path="/7/file0" dev="tmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 35.419545][ T10] usb 1-1: config 127 has an invalid interface number: 57 but max is 0 [ 35.429518][ T10] usb 1-1: config 127 has no interface number 0 [ 35.438464][ T36] audit: type=1400 audit(1785857783.240:143): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 35.462817][ T10] usb 1-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 35.485861][ T10] usb 1-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 35.499995][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.510343][ T10] usb 1-1: Product: syz [ 35.516170][ T10] usb 1-1: Manufacturer: syz [ 35.527033][ T10] usb 1-1: SerialNumber: syz [ 35.537946][ T412] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 35.591767][ T310] device offline error, dev sda, sector 278838 op 0x1:(WRITE) flags 0x4000 phys_seg 64 prio class 2 [ 35.604970][ T310] device offline error, dev sda, sector 279344 op 0x1:(WRITE) flags 0x4000 phys_seg 52 prio class 2 [ 35.619020][ T310] device offline error, dev sda, sector 279856 op 0x1:(WRITE) flags 0x4000 phys_seg 8 prio class 2 [ 35.631109][ T310] device offline error, dev sda, sector 280368 op 0x1:(WRITE) flags 0x4000 phys_seg 5 prio class 2 [ 35.643505][ T310] device offline error, dev sda, sector 280880 op 0x1:(WRITE) flags 0x4000 phys_seg 5 prio class 2 [ 35.656508][ T310] device offline error, dev sda, sector 281392 op 0x1:(WRITE) flags 0x4000 phys_seg 5 prio class 2 [ 35.668758][ T310] device offline error, dev sda, sector 281904 op 0x1:(WRITE) flags 0x4000 phys_seg 5 prio class 2 [ 35.680485][ T310] device offline error, dev sda, sector 282416 op 0x1:(WRITE) flags 0x4000 phys_seg 5 prio class 2 [ 35.693801][ T310] device offline error, dev sda, sector 282928 op 0x1:(WRITE) flags 0x4000 phys_seg 40 prio class 2 [ 35.707013][ T310] device offline error, dev sda, sector 283440 op 0x1:(WRITE) flags 0x4000 phys_seg 64 prio class 2 [ 35.724260][ T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2021 starting block 35493) [ 35.736897][ T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2021 starting block 35777) [ 35.750678][ T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2021 starting block 35970) [ 35.763687][ T309] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2021, error -5) [ 35.777753][ T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139302) [ 35.783667][ T309] Buffer I/O error on device sda1, logical block 35741 [ 35.792196][ T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139305) [ 35.801682][ T309] Buffer I/O error on device sda1, logical block 35742 [ 35.812138][ T36] audit: type=1400 audit(1785857783.590:144): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 35.829213][ T309] Buffer I/O error on device sda1, logical block 35743 [ 35.842204][ T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139330) [ 35.862703][ T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139344) [ 35.875587][ T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139369) [ 35.880928][ T309] Buffer I/O error on device sda1, logical block 35744 [ 35.889715][ T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139391) [ 35.910210][ T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139416) [ 35.921419][ T309] Buffer I/O error on device sda1, logical block 35745 [ 35.924932][ T36] audit: type=1400 audit(1785857783.590:145): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 35.955960][ T36] audit: type=1400 audit(1785857783.590:146): avc: denied { write } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 35.970047][ T309] Buffer I/O error on device sda1, logical block 35746 [ 35.980669][ T412] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 35.995347][ T309] Buffer I/O error on device sda1, logical block 35747 [ 36.003516][ T309] Buffer I/O error on device sda1, logical block 35748 [ 36.011197][ T309] Buffer I/O error on device sda1, logical block 35749 [ 36.018751][ T309] Buffer I/O error on device sda1, logical block 35750 [ 36.028741][ T309] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 36.042776][ T309] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 36.055840][ T309] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 36.069088][ T309] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 36.082520][ T309] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 36.096495][ T309] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 36.110391][ T309] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 36.124145][ T309] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 36.137694][ T309] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 36.153940][ T428] Buffer I/O error on dev sda1, logical block 132, lost async page write [ 36.156198][ T73] Aborting journal on device sda1-8. [ 36.168645][ T73] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 36.173911][ T428] Buffer I/O error on dev sda1, logical block 138, lost async page write [ 36.179423][ T73] JBD2: I/O error when updating journal superblock for sda1-8. [ 36.198353][ T286] EXT4-fs error (device sda1): ext4_journal_check_start:84: comm syz-executor: Detected aborted journal [ 36.200074][ T428] Buffer I/O error on dev sda1, logical block 145, lost async page write [ 36.221491][ T286] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 36.232486][ T10] asix 1-1:127.57 (unnamed net_device) (uninitialized): invalid hw address, using random [ 36.233710][ T428] Buffer I/O error on dev sda1, logical block 150, lost async page write [ 36.252898][ T428] Buffer I/O error on dev sda1, logical block 157, lost async page write [ 36.262053][ T428] Buffer I/O error on dev sda1, logical block 158, lost async page write [ 36.271154][ T428] Buffer I/O error on dev sda1, logical block 159, lost async page write [ 36.281252][ T428] Buffer I/O error on dev sda1, logical block 226, lost async page write [ 36.337530][ T428] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 36.420398][ T10] asix 1-1:127.57 (unnamed net_device) (uninitialized): invalid PHY address: 82 [ 36.631897][ T10] usb 1-1: USB disconnect, device number 3 [ 37.162361][ T458] syzkaller1: entered promiscuous mode [ 37.168364][ T458] syzkaller1: entered allmulticast mode [ 37.433482][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 37.587121][ T66] usb 3-1: USB disconnect, device number 2 [ 37.623049][ T31] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 37.631769][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.643543][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.654438][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 37.667844][ T31] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 37.677961][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.688910][ T31] usb 2-1: config 0 descriptor?? [ 38.053547][ T444] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 38.100764][ T31] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd [ 38.122167][ T31] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 38.137125][ T31] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 38.152041][ T480] udevd[480]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 38.205000][ T444] usb 3-1: config index 0 descriptor too short (expected 45, got 28) [ 38.220057][ T444] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 38.228102][ T444] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 38.248164][ T444] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 38.259808][ T444] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.268434][ T444] usb 3-1: Product: syz [ 38.272873][ T444] usb 3-1: Manufacturer: syz [ 38.278057][ T444] usb 3-1: SerialNumber: syz [ 38.293709][ T444] rtl8150 3-1:1.0: couldn't find required endpoints [ 38.304692][ T444] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 38.333908][ T110] udevd[110]: worker [339] terminated by signal 7 (Bus error) [ 38.341901][ T110] udevd[110]: worker [339] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1' [ 38.367394][ T31] usb 2-1: USB disconnect, device number 3 [ 38.395815][ T110] udevd[110]: worker [311] terminated by signal 7 (Bus error) [ 38.404779][ T110] udevd[110]: worker [311] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0' [ 38.425510][ T110] udevd[110]: worker [489] terminated by signal 7 (Bus error) [ 38.433761][ T110] udevd[110]: worker [489] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1' [ 38.495245][ T472] usb 3-1: USB disconnect, device number 3 [ 39.038165][ T509] udc dummy_udc.0: soft-connect without a gadget driver [ 39.182387][ T518] syzkaller1: entered promiscuous mode [ 39.188365][ T518] syzkaller1: entered allmulticast mode [ 39.195730][ T444] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 39.363417][ T444] usb 2-1: Using ep0 maxpacket: 8 [ 39.370871][ T444] usb 2-1: config 0 has no interfaces? [ 39.376788][ T444] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 39.386034][ T444] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.395983][ T444] usb 2-1: config 0 descriptor?? [ 39.523424][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 39.673352][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 39.680244][ T9] usb 2-1: USB disconnect, device number 4 [ 39.687328][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.698791][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.710373][ T10] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 39.720146][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.729191][ T10] usb 1-1: config 0 descriptor?? [ 39.798417][ T542] netlink: 16 bytes leftover after parsing attributes in process `syz.3.83'. [ 39.948099][ T548] Write-error on swap-device (8:0:787782) [ 39.954097][ T548] Write-error on swap-device (8:0:787790) [ 39.960712][ T548] Write-error on swap-device (8:0:787798) [ 39.967136][ T548] Write-error on swap-device (8:0:787806) [ 39.967751][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 39.973764][ T548] Write-error on swap-device (8:0:787814) [ 39.983117][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 39.992759][ T548] Write-error on swap-device (8:0:787822) Aug 4 15:36:27 [ 40.004174][ T548] Write-error on swap-device (8:0:787830) syzkaller kern.a[ 40.011928][ T548] Write-error on swap-device (8:0:787838) lert kernel: [ [ 40.019674][ T548] Write-error on swap-device (8:0:787846) 39.948099][ T5[ 40.027182][ T548] Write-error on swap-device (8:0:787854) 48] Write-error [ 40.027250][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 on swap-device ([ 40.045924][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 8:0:787782) Aug[ 40.056631][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 4 15:36:27 syz[ 40.067170][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 kaller kern.aler[ 40.077741][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 t kernel: [ 39[ 40.089425][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 .954097][ T548][ 40.101151][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 Write-error on [ 40.112777][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 swap-device (8:0[ 40.123852][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 :787790) Aug 4 15:36:27 syzkaller kern.alert kernel: [ 39.96[ 40.139616][ T10] savu 0003:1E7D:2D5A.0003: ignoring exceeding usage max 0712][ T548] Write-error on swap-device (8:0:787798) Aug 4 15:36:27 syzkaller kern.alert kernel: [ 39.96713[ 40.156185][ T10] savu 0003:1E7D:2D5A.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 6][ T548] Write-error on swap-device (8:0:78780[ 40.172808][ T549] udevd[549]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error 6) Aug 4 15:36:27 syzkaller kern.alert kernel: [ 39.973764][ T548] Write-error on swap-device (8:0:787814) Aug 4 15:36:27 syzkaller kern.alert kernel: [ 39.992759][ T548] Write-error on swap-device (8:0:787822) Aug 4 15:36:27 syzkaller kern.alert kernel: [ 40.004174][ T548] Write-error on swap-device (8:0:787830) Aug 4 15:36:27 syzkaller kern.alert kernel: [ 40.011928][ T548] Write-error on swap-device (8:0:787838) Aug 4 1[ 40.224735][ T552] overlayfs: upper fs does not support tmpfile. 5:36:27 syzkaller kern.alert kernel: [ 40.019674][ T548] Write-error on swap-device (8:0:787846) Aug 4 15:36:27 syzkaller k[ 40.244082][ T295] ------------[ cut here ]------------ ern.alert kernel[ 40.250996][ T295] WARNING: CPU: 0 PID: 295 at fs/inode.c:340 drop_nlink+0xce/0x110 : [ 40.027182][ 40.261079][ T295] Modules linked in: [ T548] Write-e[ 40.266479][ T295] CPU: 0 UID: 0 PID: 295 Comm: syz-executor Not tainted syzkaller #0 1c659cfea3877f078df945e50c8eb7045fd035a9 rror on swap-dev[ 40.280492][ T295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 ice (8:0:787854)[ 40.293977][ T295] RIP: 0010:drop_nlink+0xce/0x110 [ 40.301041][ T295] Code: 04 00 00 be 08 00 00 00 e8 4f 14 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d8 7a b4 03 cc e8 b2 4d 95 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 40.323357][ T295] RSP: 0018:ffffc9000b61fc88 EFLAGS: 00010293 [ 40.330122][ T295] RAX: ffffffff81f2240e RBX: ffff88811d2556c0 RCX: ffff888107ef3900 [ 40.339300][ T295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 40.348234][ T295] RBP: ffffc9000b61fcb0 R08: 0000000000000003 R09: 0000000000000004 [ 40.349204][ T472] usb 1-1: USB disconnect, device number 4 [ 40.357113][ T295] R10: dffffc0000000000 R11: fffff520016c3f80 R12: dffffc0000000000 [ 40.371999][ T295] R13: 1ffff11023a4aae1 R14: ffff88811d255708 R15: 0000000000000000 [ 40.381311][ T295] FS: 00005555911f4500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 40.390907][ T295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.398018][ T295] CR2: 000000110c34d292 CR3: 00000001316c4000 CR4: 00000000003526b0 [ 40.406886][ T295] DR0: 0000000000000000 DR1: 0000000000000071 DR2: 0000000000000000 [ 40.416031][ T295] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 40.425109][ T295] Call Trace: [ 40.428448][ T295] [ 40.431488][ T295] shmem_rmdir+0x5f/0x90 [ 40.436486][ T295] vfs_rmdir+0x3db/0x560 [ 40.441424][ T295] incfs_kill_sb+0x102/0x220 [ 40.447616][ T295] deactivate_locked_super+0xd2/0x270 [ 40.453801][ T295] deactivate_super+0xb8/0xe0 [ 40.458544][ T295] cleanup_mnt+0x438/0x4d0 [ 40.463389][ T295] __cleanup_mnt+0x1d/0x40 [ 40.468220][ T295] task_work_run+0x1e8/0x260 [ 40.473025][ T295] ? __cfi_task_work_run+0x10/0x10 [ 40.478778][ T295] ? __x64_sys_umount+0x12e/0x180 [ 40.484145][ T295] ? __cfi___x64_sys_umount+0x10/0x10 [ 40.489738][ T295] ? __kasan_check_read+0x15/0x20 [ 40.495159][ T295] resume_user_mode_work+0x35/0x50 [ 40.500602][ T295] syscall_exit_to_user_mode+0x63/0xb0 [ 40.506599][ T295] do_syscall_64+0x63/0xf0 [ 40.511440][ T295] ? clear_bhb_loop+0x50/0xa0 [ 40.517232][ T295] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.523838][ T295] RIP: 0033:0x7f35d259f257 [ 40.528741][ T295] Code: a2 c7 05 9c 44 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 40.551081][ T295] RSP: 002b:00007fff837a0c08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 40.559973][ T295] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f35d259f257 [ 40.568296][ T295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff837a0cc0 [ 40.576659][ T295] RBP: 00007fff837a0cc0 R08: 00007fff837a1cc0 R09: 00000000ffffffff [ 40.585346][ T295] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff837a1d50 [ 40.593513][ T295] R13: 00007f35d263445c R14: 0000000000009cfd R15: 00007fff837a1d90 [ 40.601623][ T295] [ 40.604849][ T295] ---[ end trace 0000000000000000 ]--- [ 40.611065][ T295] ================================================================== [ 40.619478][ T295] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 40.626230][ T295] Write of size 4 at addr 0000000000000168 by task syz-executor/295 [ 40.635100][ T295] [ 40.637734][ T295] CPU: 0 UID: 0 PID: 295 Comm: syz-executor Tainted: G W syzkaller #0 1c659cfea3877f078df945e50c8eb7045fd035a9 [ 40.637763][ T295] Tainted: [W]=WARN [ 40.637768][ T295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.637778][ T295] Call Trace: [ 40.637784][ T295] [ 40.637792][ T295] __dump_stack+0x21/0x30 [ 40.637819][ T295] dump_stack_lvl+0x140/0x1c0 [ 40.637841][ T295] ? __cfi_dump_stack_lvl+0x10/0x10 [ 40.637864][ T295] print_report+0x3d/0x70 [ 40.637886][ T295] kasan_report+0x162/0x1a0 [ 40.637906][ T295] ? ihold+0x24/0x70 [ 40.637925][ T295] ? ihold+0x24/0x70 [ 40.637942][ T295] kasan_check_range+0x25a/0x2b0 [ 40.637963][ T295] __kasan_check_write+0x18/0x20 [ 40.637978][ T295] ihold+0x24/0x70 [ 40.637995][ T295] vfs_rmdir+0x25c/0x560 [ 40.638017][ T295] incfs_kill_sb+0x102/0x220 [ 40.638109][ T295] deactivate_locked_super+0xd2/0x270 [ 40.638132][ T295] deactivate_super+0xb8/0xe0 [ 40.638154][ T295] cleanup_mnt+0x438/0x4d0 [ 40.638194][ T295] __cleanup_mnt+0x1d/0x40 [ 40.638219][ T295] task_work_run+0x1e8/0x260 [ 40.638254][ T295] ? __cfi_task_work_run+0x10/0x10 [ 40.638274][ T295] ? __x64_sys_umount+0x12e/0x180 [ 40.638303][ T295] ? __cfi___x64_sys_umount+0x10/0x10 [ 40.638324][ T295] ? __kasan_check_read+0x15/0x20 [ 40.638347][ T295] resume_user_mode_work+0x35/0x50 [ 40.638371][ T295] syscall_exit_to_user_mode+0x63/0xb0 [ 40.638396][ T295] do_syscall_64+0x63/0xf0 [ 40.638413][ T295] ? clear_bhb_loop+0x50/0xa0 [ 40.638436][ T295] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.638476][ T295] RIP: 0033:0x7f35d259f257 [ 40.638502][ T295] Code: a2 c7 05 9c 44 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 40.638515][ T295] RSP: 002b:00007fff837a0c08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 40.638534][ T295] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f35d259f257 [ 40.638545][ T295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff837a0cc0 [ 40.638555][ T295] RBP: 00007fff837a0cc0 R08: 00007fff837a1cc0 R09: 00000000ffffffff [ 40.638566][ T295] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff837a1d50 [ 40.638576][ T295] R13: 00007f35d263445c R14: 0000000000009cfd R15: 00007fff837a1d90 [ 40.638590][ T295] [ 40.638595][ T295] ================================================================== [ 40.898052][ T295] Disabling lock debugging due to kernel taint [ 40.904955][ T295] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 40.913327][ T295] #PF: supervisor write access in kernel mode [ 40.919883][ T295] #PF: error_code(0x0002) - not-present page [ 40.921877][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 40.925969][ T295] PGD 800000010df10067 P4D 800000010df10067 PUD 0 [ 40.926005][ T295] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 40.948878][ T295] CPU: 0 UID: 0 PID: 295 Comm: syz-executor Tainted: G B W syzkaller #0 1c659cfea3877f078df945e50c8eb7045fd035a9 [ 40.962761][ T295] Tainted: [B]=BAD_PAGE, [W]=WARN [ 40.968043][ T295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.980626][ T295] RIP: 0010:ihold+0x2a/0x70 [ 40.985959][ T295] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 9d 44 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 0c 0b ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 ad [ 41.006564][ T295] RSP: 0018:ffffc9000b61fcc8 EFLAGS: 00010246 [ 41.013840][ T295] RAX: ffff888107ef3900 RBX: 0000000000000000 RCX: ffff888107ef3900 [ 41.022186][ T295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 Aug 4 15:36:28 [ 41.023028][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 41.030305][ T295] RBP: ffffc9000b61fcd8 R08: ffffffff88bb6947 R09: 1ffffffff1176d28 syzkaller kern.a[ 41.030333][ T295] R10: dffffc0000000000 R11: fffffbfff1176d29 R12: 0000000000000000 lert kernel: [ [ 41.030351][ T295] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 40.904955][ T2[ 41.030367][ T295] FS: 00005555911f4500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 95] BUG: kernel [ 41.030418][ T295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 NULL pointer der[ 41.030477][ T295] CR2: 0000000000000168 CR3: 00000001316c4000 CR4: 00000000003526b0 eference, addres[ 41.030566][ T295] DR0: 0000000000000000 DR1: 0000000000000071 DR2: 0000000000000000 [ 41.030624][ T295] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 41.030640][ T295] Call Trace: s: 0000000000000[ 41.030652][ T295] 168 [ 41.030662][ T295] vfs_rmdir+0x25c/0x560 [ 41.030703][ T295] incfs_kill_sb+0x102/0x220 [ 41.135865][ T295] deactivate_locked_super+0xd2/0x270 [ 41.135912][ T295] deactivate_super+0xb8/0xe0 [ 41.135942][ T295] cleanup_mnt+0x438/0x4d0 [ 41.135982][ T295] __cleanup_mnt+0x1d/0x40 Aug 4 15:36:28 [ 41.155918][ T295] task_work_run+0x1e8/0x260 syzkaller kern.a[ 41.156725][ T92] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 41.162470][ T295] ? __cfi_task_work_run+0x10/0x10 lert kernel: [ [ 41.162531][ T295] ? __x64_sys_umount+0x12e/0x180 [ 41.162617][ T295] ? __cfi___x64_sys_umount+0x10/0x10 [ 41.162687][ T295] ? __kasan_check_read+0x15/0x20 40.913327][ T2[ 41.162765][ T295] resume_user_mode_work+0x35/0x50 95] #PF: supervi[ 41.205687][ T295] syscall_exit_to_user_mode+0x63/0xb0 [ 41.205864][ T295] do_syscall_64+0x63/0xf0 [ 41.205889][ T295] ? clear_bhb_loop+0x50/0xa0 sor write access[ 41.222703][ T295] entry_SYSCALL_64_after_hwframe+0x76/0x7e in kernel mode[ 41.230086][ T295] RIP: 0033:0x7f35d259f257 Aug 4 15:36:28[ 41.236394][ T295] Code: a2 c7 05 9c 44 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 syzkaller kern.[ 41.258392][ T295] RSP: 002b:00007fff837a0c08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 alert kernel: [ [ 41.268828][ T295] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f35d259f257 40.919883][ T[ 41.279092][ T295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff837a0cc0 295] #PF: error_[ 41.289588][ T295] RBP: 00007fff837a0cc0 R08: 00007fff837a1cc0 R09: 00000000ffffffff code(0x0002) - n[ 41.299567][ T295] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff837a1d50 ot-present page[ 41.309871][ T295] R13: 00007f35d263445c R14: 0000000000009cfd R15: 00007fff837a1d90 [ 41.319557][ T295] [ 41.322826][ T295] Modules linked in: [ 41.327122][ T295] CR2: 0000000000000168 [ 41.331380][ T295] ---[ end trace 0000000000000000 ]--- [ 41.336867][ T295] RIP: 0010:ihold+0x2a/0x70 [ 41.341399][ T295] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 9d 44 95 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 0c 0b ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 ad [ 41.361730][ T295] RSP: 0018:ffffc9000b61fcc8 EFLAGS: 00010246 [ 41.368082][ T295] RAX: ffff888107ef3900 RBX: 0000000000000000 RCX: ffff888107ef3900 [ 41.376349][ T295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 41.384633][ T295] RBP: ffffc9000b61fcd8 R08: ffffffff88bb6947 R09: 1ffffffff1176d28 [ 41.393389][ T295] R10: dffffc0000000000 R11: fffffbfff1176d29 R12: 0000000000000000 [ 41.402457][ T295] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 41.412041][ T295] FS: 00005555911f4500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 41.422782][ T295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.432011][ T295] CR2: 0000000000000168 CR3: 00000001316c4000 CR4: 00000000003526b0 [ 41.442904][ T295] DR0: 0000000000000000 DR1: 0000000000000071 DR2: 0000000000000000 [ 41.451635][ T295] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 41.460807][ T295] Kernel panic - not syncing: Fatal exception [ 41.468801][ T295] Kernel Offset: disabled [ 41.473849][ T295] Rebooting in 86400 seconds..