last executing test programs: 1m58.386151752s ago: executing program 3 (id=195): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e040122"], 0x7) 1m58.338735676s ago: executing program 3 (id=197): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x4}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x800) 1m58.273822079s ago: executing program 3 (id=199): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x80045440, 0x0) 1m57.979743944s ago: executing program 3 (id=201): mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1m57.333247164s ago: executing program 3 (id=204): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000440)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x203, 0x1, {0xffffffffffffffff, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x400000}}, {0x0, 0x13}}}, 0x35) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) 1m56.163133512s ago: executing program 3 (id=211): socket$nl_route(0x10, 0x3, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) mount_setattr(r0, &(0x7f0000001d80)='.\x00', 0x9100, &(0x7f0000000080)={0x81, 0x7a, 0x40000, {r0}}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="04133f4b9b"], 0xc) 1m55.987533998s ago: executing program 32 (id=211): socket$nl_route(0x10, 0x3, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) mount_setattr(r0, &(0x7f0000001d80)='.\x00', 0x9100, &(0x7f0000000080)={0x81, 0x7a, 0x40000, {r0}}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="04133f4b9b"], 0xc) 1m22.131803757s ago: executing program 0 (id=510): openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) syz_fuse_handle_req(r0, &(0x7f000000c3c0)="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", 0x2000, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x18, 0x0, 0x3, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m20.967546613s ago: executing program 0 (id=520): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x410281, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) r4 = dup2(r3, r2) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x5) 1m20.818327124s ago: executing program 0 (id=522): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000440)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x203, 0x1, {0xffffffffffffffff, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x400000}}, {0x0, 0x13}}}, 0x35) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) 1m20.695568505s ago: executing program 0 (id=525): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') ioctl$VT_ACTIVATE(r1, 0x5606, 0x0) (async) ioctl$VT_ACTIVATE(r1, 0x5606, 0x0) sendmsg$nl_generic(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x38, 0x701, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x4000000) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x1200051, 0x0) 1m20.498151769s ago: executing program 0 (id=526): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57789000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x32) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000140)={0x8}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x4608c2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'veth1_to_batadv\x00'}) write$tun(r2, &(0x7f0000001480)=ANY=[@ANYRES8, @ANYRES16=r3, @ANYRES64=r3, @ANYBLOB="b40927348bd23588da4de4f6a0ab776c2327a05b368c9d037ea34ce57086911f191bc4b557932fa8031fea6b953ed3583115980eabc941c0ae31ee0c28397b22588893ad5136973f0dfbaf44afbc04da8650d027b3e435ed7e0b60dae28fc0ba35eb1cf558950cb2c0044a18bacafb0d16164d56bc443e0eda15f2e1183e6b9f6027d368c1a63deb558a397c4da372930194019fb89374348bdde8de763cb0887078ad0c9da954a6ac31b08f124372c3"], 0xd2) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/custom0\x00', 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000400), 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=nd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',\x00']) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r6, 0xc0185649, 0x0) read$FUSE(r7, &(0x7f00000034c0)={0x2020}, 0x2020) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f00006a0000/0x400000)=nil) syz_usb_connect(0x5, 0x36, &(0x7f0000002000)=ANY=[@ANYBLOB="8cf0137e46795c93bf34c7e7d3785035ec6a0a6b0a0706536eb7abd2aa5e72daaf8763c9c4c9543ea98a7d25f600c1bafb70b3e40db6a66f2e2e723ff023ced1e5c2b0fa998c1a066219c7e23df00795f7758f2f5f51c9707ace317df2de85a8071d63507a395f7328bbc4cbdc4fd1", @ANYBLOB="b4436865b4beba128c8862ed8406c66f3a5b6d5118432c3ad59e98b155628ff9613c2b11758d5711ebc04713089afd9a838f0076ff3b1d81c512208f01280d61c523faa5cded359452f644724aff08093fc3f8c39fbe6ee630b9fa79dda8143aa57897d4be1880a0d29ee09cc2e309255e42126f133ea15b5cc4839a6cc4061dd9d4e168716a181a7ef7769ce6487a35cf8e3531860c4b2106165a09d1b3b73410ef56d43ab8daa9c032de3fb38929947fb93fa99086c7cd77dbf894348c3efc24dd8c1253952c440ca1f1fa983aae8d9639f26471fcc38f1db267bdcdf77346d4a748a7297fb3385063848226eeb382d2b998d3b34f7447614072cac21fe2436901fb82bd39de8fdfb794e46a53fc58c9a1fbcab05e7f9c868aa9af1ed3499eb4dcd1f55d9b016c07b95a3f52e2de5200d2da936eeaf0a149f417795236a5519098aa9e4cc97c836e37437f1c53f9d60deffee4a6617a603bdd511085656d7ed1a02254cf8c78f53d9ca47dc29ce678914a76c4835c693df210c8ae54945081a5cfa03867ac67e6a99c0f3a49f841d889bfa36e22134f90acb8ba32545d3744c7b018b45577be6a8e236cc97bbc061068f50f48bd66f10d9506016611c91824fa750c1b26782cbbd99f3982bfb8b2917cf0996edd4489027135f4fbb54ed882b9bf895a3e731b87da9ff2d12c59e886c41b20a43ae8b37b1f24dcd5b81358bdeddcc19f2722071f190b9fe4a471a7460d2dca4fc067c45cb5d6b8559e65c4b03cd757a139de8cf2db77ad78810395fa994e69ecfcc0b5c84e44a962d549576d816024a303e9b8211e3bd39d22595309a20bd20a117485414e4b87145808c3ad197555b2a3617307e89ecad5164bd4a7da3ff23a98fcc74e94d54ef9e0519548b4bd5beb52db6e55fe3a24d048512fd311a646a074842e2df9c92b1162575907fc8364705b58a8a286f02a05315d677608c074b773c35eef24899c4a728ff6ab88ffcacd613e07c3ac75a2c4491bee76660ce4205ac7d388805d39a546c5d58b665d590bd9f65f08fae7d2da443084a711eff110678995219d34a9c385e38ef8761bf05b5c159274aefe638f5ee1a8d8772d865225eeef7ffb12a0d371e36dcc239a401ee4edabd0fda6d050904df35ae92e3cc99efc6eaaa443347b6ff44a6aa2e1f6926caff8052cd3c7d05088cb29271a33d8f377301a61900695bc059dbd0b9d8d8f44f00464f9e22ff26855608c4e153f051122fdfa91924de8a860ea8984ab3450d69968cf07ef15a0dbbea3961b8e50cad5427cb74a15b47707eea3bf6cbb45926af0079c653d4948645c2d67f6fa670bd2d6b9e37fd800b06a9edb38172a144444ebb99c8cc8065fe7590788f5fec34d2acb7bfad47423f6589a9d944607454cccc1ae7c248f97829e889d5f4a0acc7b1f28860bc0b51926387c744b5829a4478825f424450afe247f8bf3f6ee8564adc14d22277bb06574597605a24e8449accb51aac91e35945f8c2475e9bdbd091e626eef1d06f1a2869f68d0ac1a73897a3dba844849961561d4587b0f86c285317b202b182909a87fe4a946b906e8b95afafa974a260175ab06634caaebd6ed4ef7084cba3bb138ce572c059d64a6b779e49d14d9713f0acfec3e5b84d7ed9830108b61b713b151ebea332b25f63f3254b38d649af31db2d7d05bf846cb3ec65707ef3156e8ec52a250270a47dc4bad0a6d45dda2814aad17fc3f46b5770965ac400c394e72dac2e6b07ca1bc4551e9162898207934f9456c48876eae3b8ca7bad1fbefa74650a1f9daf88f99e2af7a27d4c7ca0dfbebba4b839ff37c0bcce1170be71518ade25571b476377cf5b852c5ebc911ce9d1d74ae9047ed6caf32a4a3739ed92a2658dadb2462afdc4716c8e214c277e905d8cce7b62310e19c0b84f004d3dc227df35a9a456251f12a761de2460e94da168d9807618d81bde78c3bdf49ea7a935cc6d4e78f743070452cf5d23ba3d949610b02c81c4a87efcca07055765247b81da5ba7ac337a9fd65ce8004e008918e8adb82a274b65c52402a1825cce4a8c62bfab36fdc6e1803e358ce0a470c542a3817debaf7b1b4595c1c51be2d6b406f34cf335677e6c8ca61ac593c46a9db413d887b9da55413bc4b961bbf59a4506b8fe9704c5aeb47da6a801f12aad99854e490980556075f85944abb4dfd8dab4ae5fc9b25e95fd80aa720102502c583a1e1b4413ccabcfe2d7ab9057c9067c3e542c114cd492ddc3373f57f7165211bfebabddb7964c2c1fae61392e80a9bcd389e1fff04642b6e680a40530c15f9f7212c7c17da2638583f768f23df3068350f8a7b01f17e672fcf4131380631f3b399c8f125600b045ded2d4e4a58412ac0df3b0392a130ecf7a163551bae10fa9b914f32078fd23f462fc0ebfffb240c21bb97325b674bba70623bf9851220632ecec7a1a5bad3281904dad1a7c51294c68fdc70e636e7fd4e19001395365c4144b1af3f9e1f94d26ba0b7f9dd6ac8a760eff28f7365d1d17a09fc7eeace4dbd3f448842c041a75231121931d82601dc2f80413632e92d604f3cd141552893db2f2d94931397642f1450140dcd51313c13f67ca39bf1b86c78437e64cf2e15b1e1f8df872d5c54b7dc18c01baf516c54c9624e5bb7b571f35ca3aa613a66b0d5a8c823596a83a357a87a35eb575ef32b11a40481eecb505eb44ef7c9540fa84137d22dff2a92396bd3de02e6d5aca50b1ed9f1a3cd4ac3bbe1a503f6305e1ab814c5b807eb48c440ce93ade7452081ec1c1984a9cd4cf2233071a6decd4509b9e637483039bcf4cc7857ef76d9cefd9af78b949b89342e03995e30cfa3e269ecde279bde3802806eec1ab970690b89a4fa625769b962573ed0d06e37febe735a36ebca7531e71c2d24ba3415a3b6b3f5836b3e3cb19dafc056156be73b2032560768981ff12a9ae1b9ac5823008293d34a64fcc7e98b7e2dfa75fc6e4a13fa0c7d507ef7414046cc29c4da992328d2651c70e14fd487479c914799df2d592a05a9adf3e6610dbdd079f0ed65ae38f45b208ec5bf7e54e27b624f9a46115a2377ccf35945bdb9874e8b2f07fd45e5776c277a9341cc74bf169f46d381573bcec109d997cd1c310c84b5c7b896de3bf9e7f0b2e5b80c507333a9d9d300f45b19790d49969c83f3854b62a700c9befeae3fc870b34a22b723249cb989277d0ac2b034bf7dbafc94398cf0c6ad7b27e50c29cb192b2d7f69ef78105070d51f7a06243549945ef98ca19d6e90bc6d3323ca9415ce1e25dc7ca28c905fb4b927c41ae2c34a0de3f685c6c8c530e712ad4eb4f9e6e3d87f56d827e9fab9c0ee595cc4d884f9a39be77e5ee9cdb26fdad812bb5bfb70e0f25d1211c0d52642c46770e612a9a5b3a2907cda79afab7871062f365a85eae426cf8e6e0c0d4b31438e41132489b421d957e384f7cc775d68974296366d4896f437762500920993d72b5a9758640602c09d212b9c2e5f6183d2c48f972358344f838d2468285f28f3fc8e11a2b0140b4f3cafa81caedfc52b5fe7862a1e12ca8467d3523a995a7055d9673fe511f66fdedc5c23f7029ea05ed32216e18a25624b04bf4f1a31f4bcddd9419d21ef8421177644aabd0bbe37b5f5a166223ebaf361aaebafd20f146e8ab33ddcb0cc5dfe57e2d0491ae47fd68d88255f126e58e6961825885f26f5ff8af5163a922081c11182d6471404b42a29f9e200be3adb635dfd3ebc2eba3be96e984c6cf147c6e511da7940357a0a3be67b1b66697de7e2653f3f3c308f1b92b49139853dc21e0ad5506a7027b8656e32c522145e88857c0b64d5107e6dc8e5a77b924f1487ec40d7347e424fc46ca2b7fffec0b3c94556d648e5bdbde3c73f8fddfdc93945173f965d405e9e5916c5d62bf0ea313175d48aa31f2b0a6b4925d685825f531e7758883def22dd69a058b53a50d3675fa5373b529c72c23ed620f799a1e320ba22f37e7c114405e2ea8a9b19d3288ed3d43d2d67ea785496dfbe2b100e1b746bd4577755303612790fde2d88627ca52180a8200f05f4e5d46da753984ad593d1eb12e32a52b17925d3712670024006ac4baf417b714f5764748949a400073608cf3a5ce99fdc2abf76a91d9163e082bf65ecc18e7c05d0952ec363ab96fd29b48bcbd8ea05070260762d400345326b209b9d60ae78546be07853c88e89fa99582c216389c3bfde30dca3beba36ee4b8467de9dea463e187507300a28e51169597ce7e652225f6d685b3845be13584f232a3d0f24cb4c6be98b5954183f1473e6524e2b6e2816f782c9b1bd191cb9cc9bb46b90ff63efb4e6fd778410d2a9376e6166d55c7e38a122a05af3bc29390778ef71760ca17a6c650add87292b76d8a3df2479dd0f0626335b0b1d13963939863658be4ba76acf6ce965b794c7488e9b915f847c33fdf78374cc7b76af2b60b9343617a37a6de36ee2b14a680d23308bcd632586252f5a159b297eeb0a2245f1fb31e5489871eb3f2e005d5a6e13ade0bebdce92d797e9506cbc4b880aa86b829b21e4fe73642ef85f0122563dd852ede2ad1f37f58c581f0aa24dab8f483575bb891ea146f27a1a1a4b3c0a272735126979b8162a7cb822b1edac258e4f8f513be127268f52ee88fb10ca7e44501a6e2dff8e7995f205d158bd1e762c9d9df9625eb3017fa683c067712c50693040b9dc8ca00e42b3b42089b47783d085727dc438afba1a3b1c68612f37f085637e1eb785ceb66b3fd3822ae10977145da74e776ac8980819726f593291a072e957b0debf96ae6d85d370c59fa008672fa734d3cdb121eff63bcea36c661d5acfe582adb3b329e77f4fcdf87dcb1e909cf604c8faca0ffe7ac63ad4c73a8c067e8e1a487387157eabeafb1d5b89bfd714352d88dfccd387bc6b57f7bf55965e9e7a56947e4c36afed8a02698671249744849e9c242891864cf1cda954464db3c65005af1873be7d71b1f0c437dd9feba9e79bfe2b07341cfb11e7e615984223b8031a1d14cc2c2e91b364b63b130fb1af71b60b8dae06cd00d27e24204ba871c6f5c91ac5e877c05dd76063262b633eb5b5a8977976e64c5a28bb5194dc5d943adfef65aa8bd11988a478a1a6ed4a48d586a85cc6aa9903d6285edb7ef9488c8743fa9da2d8f0ae009c3b21164bad593f850b1c6ebef99e216cd0e749af72b19f9d099aa82a305a9018db28962890566247d5f323c054a354e459aa7fa7f794693fd62941d8d91625ad2246f2dad1c63f05c47207be2e7f4e17d460d5ef510765b0c68c0c5c00d17f40df24733604c1be57ae8dac22c6a4925b6db4b4ee7f48c7cf5201c1aa4ec0e1628df727405170f8b74c3695600b2f69b0dff121924cb39889a558ccbedecb064b7da3319da3eb8e3a9f3b021240915c891365d99251e8039c54632bc5a393261fdd2172ccdbf0a73bb15339672e693a77f1ab9f31538b74c71e224f90a163057ddaa9fdba6aac238c1ad08cd11a2407109f886b25329b6343b3a8ea403f8b09a7801bfaf526e62a80a55851a4579732c103ad4d66b5de9af86198bc7d00ac5241f5855fcc80f8241d61424a63446b76f87a0a5f87adf3d581ff5ac1da2b9377d60f3bb3f7bb543cb7b640f1d9e1f388950654d7924dba1df0e48409b52bb453bedc7300dd5780af9a83933e2d4bf60c4ee34c8a9090d3a740046140d50946f35f54eb7fd27f1b3ecc974dccd1a8c9861c365431b446cffe1300bfbdaadfb61a64ce3a7ae16a60e8c6118425a0469b375d433d", @ANYRES8=0x0], 0x0) r8 = syz_open_dev$vcsa(&(0x7f0000000000), 0x9, 0x400000) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r9 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r9, &(0x7f0000001fc0)=ANY=[@ANYBLOB="45000000060000000000000000000000030000000000000002000000070000001c"], 0x45) setuid(0xee00) faccessat(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r8, 0x4010ae68, &(0x7f0000000080)={0x10000}) 1m17.478353286s ago: executing program 0 (id=547): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="000086dd00000a0000008d40000064c80f590064110000000000000000000000000000000000ff020000e3ff000000000700000000014e244e22006490"], 0x9a) 1m2.273468132s ago: executing program 33 (id=547): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="000086dd00000a0000008d40000064c80f590064110000000000000000000000000000000000ff020000e3ff000000000700000000014e244e22006490"], 0x9a) 2.297547309s ago: executing program 4 (id=1177): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) (async) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x1ff, 0x4c40) (async) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00') ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) (async) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000040)={0x3, r6, 0x10000000, 0x80000005, 0xb, 0x1fd, 0x1}) (async) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) (async) setsockopt$packet_int(r1, 0x107, 0x12, &(0x7f00000001c0)=0x7, 0x4) (async) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000040)=0x8) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, 0x0, 0x0) (async) sendmsg$nl_generic(r8, 0x0, 0x20048010) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xd83ba000) (async) syz_usb_connect(0x2, 0x63, &(0x7f0000000000)=ANY=[@ANYRES32=r5], 0x0) (async) setsockopt$bt_l2cap_L2CAP_LM(r8, 0x6, 0x3, &(0x7f0000000080)=0x15, 0x4) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r9, 0x0, 0x3, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) 2.110553s ago: executing program 4 (id=1178): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r1, 0xffffffffffffffff, 0x0) 2.058707366s ago: executing program 4 (id=1180): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_MOVE(r2, 0xc028aa05, &(0x7f0000000480)={&(0x7f0000cd3000/0x4000)=nil, &(0x7f0000fee000/0x11000)=nil, 0x4000, 0x3}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) socket$pppl2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r5, 0xc06864b8, &(0x7f0000000240)) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)={0x44, r1, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac06}]}]}, 0x44}}, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0xdc, r6, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x31, 0x10}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_AF={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x13ba7370f1b45b3}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000010}, 0x10) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) io_setup(0x4, &(0x7f0000000000)) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r7, r8, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) 1.65195835s ago: executing program 5 (id=1181): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000380)={{@hyper, 0x2}, @hyper, 0x0, 0x3, 0x7fff, 0xffffffffffffffff, 0x0, 0x2006}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper=0x300, 0x0, 0x0, 0x5e}) 1.450323838s ago: executing program 4 (id=1183): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x47}, 0x80, &(0x7f0000006440)=[{&(0x7f0000000080)="513b5a9c0c0000004d4241fc0560", 0xe}], 0x1}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9c0000003e0001002bbd70000800000001000c00040004007800010000001080d963ad58f5fc88e080ee26aad73f033115e332b7fb60e98f48c9c6f1bae07697f20effffffffffffff3c2d8f50bc6a6e019b22f1176a0355b2b7669a607a37576b996e10c8bc4821a6a7d984802e25e147e1bab0857428b9fca918f982a93b4b1e25c88fc7bbd9a1ecfdd4e45a2f00000c010055604f2e657602b4000000000000007acf"], 0x9c}, 0x1, 0x0, 0x0, 0x400c801}, 0x2400c044) r4 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x800) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r5 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r5, 0x400, 0x1) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r6, &(0x7f0000000080)='./file0\x00', 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r7, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x3ef, 0x0) r8 = dup(r0) recvfrom$inet_nvme(r8, &(0x7f00000001c0)=""/134, 0x86, 0x40010002, &(0x7f0000000100)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x80) creat(&(0x7f0000000140)='./file0\x00', 0x71) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0) 1.439524017s ago: executing program 1 (id=1186): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x5c1340, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312d", @ANYRESDEC=0x0], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x31d300) sendfile(r0, r1, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) 1.391151778s ago: executing program 1 (id=1187): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, 0x2, 0x2, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_EXPECT_HELP_NAME={0xf, 0x6, 'netbios-ns\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4000) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r1, r1, 0x1, 0x9, &(0x7f0000000240)="00005dc169be5cb39e", 0x9, 0x1, 0x15c2, 0x5505, 0xc3b8, 0x1, 0x0, 'syz0\x00'}) 1.306497318s ago: executing program 1 (id=1188): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r1, 0xffffffffffffffff, 0x0) 1.304181982s ago: executing program 1 (id=1189): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0) chroot(&(0x7f00000000c0)='./cgroup\x00') 1.282082129s ago: executing program 2 (id=1190): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, 0x15, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x200080c0) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000013c0)={0x28, 0x25, 0x1, 0x70bd26, 0x0, "", [@typed={0x8, 0x73, 0x0, 0x0, @uid}, @nested={0x9, 0x0, 0x0, 0x1, [@generic="976b640868"]}, @nested={0x4, 0x1}]}, 0x28}], 0x1}, 0x0) socket$igmp(0x2, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0) (async) sendfile(r1, r1, 0x0, 0x7ffff000) (async) socket$netlink(0x10, 0x3, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) (async) close(r3) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETOBJ_RESET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, 0x15, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x200080c0) (async) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) (async) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000013c0)={0x28, 0x25, 0x1, 0x70bd26, 0x0, "", [@typed={0x8, 0x73, 0x0, 0x0, @uid}, @nested={0x9, 0x0, 0x0, 0x1, [@generic="976b640868"]}, @nested={0x4, 0x1}]}, 0x28}], 0x1}, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) (async) 1.255479706s ago: executing program 5 (id=1191): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000440)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x203, 0x1, {0xffffffffffffffff, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x400000}}, {0x0, 0x13}}}, 0x35) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) (fail_nth: 38) 1.177784002s ago: executing program 1 (id=1192): mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x800) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './cgroup\x00'}) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async) syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x800) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './cgroup\x00'}) (async) 1.071012296s ago: executing program 4 (id=1193): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) sendfile(r1, r0, 0x0, 0x7fffefff) fadvise64(r0, 0x9, 0x9, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b35, &(0x7f0000000000)={'wlan1\x00', @remote}) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r2, 0x3ba0, &(0x7f00000000c0)={0x48, 0x4, 0x0, 0x0, 0xb1, &(0x7f0000000000)="bc6d9e2364af59184cbd7e35d3ab5c9f1ce9f219cd932cd9d6665e9dab5c32e01c349e2109d555dbadf2e6a011922d76c14c7f8e4fe765721809b600b163f3cefd15e36b76d1d202cd979f2f1edaf5f8f59926bbd2d2856ebd23ea39792010e5720a21090106a2fcb509e3e59b452522615bfd028d241946d3dfa005dfb403db497dd02ccaec6e8559ff32cbe93412891aaf2495b063f97e81bed48c70f026f603f26c44774849133eddd5954d068dcad2", 0x401}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r3, 0x400448e6, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 969.202438ms ago: executing program 5 (id=1194): r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, 0x0, 0x0) syz_emit_vhci(0x0, 0x7) 816.77879ms ago: executing program 4 (id=1195): r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x5, @loopback, 0x10}, 0x1c) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x9, '\x00', @p_u8=0x0}}) getcwd(&(0x7f0000000140)=""/234, 0xea) r2 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x5, {0x5, 0xf, "00f400"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='erofs\x00', 0x200004, 0x0) 815.46944ms ago: executing program 2 (id=1196): creat(&(0x7f0000001380)='./file0\x00', 0x4) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x34, r1, 0x1, 0x703d25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044040}, 0x8842) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x208083, 0x0) 733.566901ms ago: executing program 2 (id=1197): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x200) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r1, r1, 0x1, 0x9, &(0x7f0000000240)="00005dc169be5cb39e", 0x9, 0x1, 0x15c2, 0x5505, 0xc3b8, 0x1, 0x0, 'syz0\x00'}) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x5d9, 0x410000) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x62, 0x8, 0x4, "c77ebeeab6d982115298af75eb4cbc087ae153c78b23aae9da79ee0ee9d5d466b5a0f316aaf83c74def2cefae13864442bccc3fb69ba53bf7737244374beac05a50476964c4c4e39c43800f06c7baeedd8a52f758049b7c114c2a1c151f25ee8e58e"}) 715.65182ms ago: executing program 1 (id=1198): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r2 = syz_open_pts(0xffffffffffffffff, 0x101000) dup3(r2, 0xffffffffffffffff, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x2000000, 0x2449, 0xfffffffffffffffd}) socket$netlink(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$pppoe(0x18, 0x1, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect(r4, &(0x7f00000004c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8}, 0x80) shutdown(r4, 0x1) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @any, 0x0, 0x1, 0x9, 0xfffffffffffffffd, 0x0, 0x8, 0x1}) 680.752365ms ago: executing program 5 (id=1199): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e04, @dev={0xac, 0x14, 0x14, 0x59}}, 0x10) shutdown(r0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000004080)=[{{&(0x7f00000000c0)=@caif=@rfm, 0x80, &(0x7f0000000500)=[{&(0x7f0000000140)=""/10, 0xa}, {&(0x7f0000000180)=""/232, 0xe8}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000400)=""/78, 0x4e}, {&(0x7f0000004180)=""/97, 0x61}, {&(0x7f0000000380)=""/60, 0x3c}], 0x6, &(0x7f0000000580)=""/66, 0x42}, 0x7}, {{&(0x7f0000000600)=@phonet, 0x80, &(0x7f0000002800)=[{&(0x7f0000000680)=""/31, 0x1f}, {&(0x7f00000006c0)=""/96, 0x60}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/21, 0x15}, {&(0x7f0000002780)=""/77, 0x4d}], 0x6, &(0x7f0000002880)=""/188, 0xbc}, 0x80000000}, {{&(0x7f0000002940)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000002d40)=[{&(0x7f00000029c0)=""/130, 0x82}, {&(0x7f0000002a80)=""/197, 0xc5}, {&(0x7f0000002b80)=""/115, 0x73}, {&(0x7f0000002c00)=""/219, 0xdb}, {&(0x7f0000002d00)=""/40, 0x28}], 0x5, &(0x7f0000002dc0)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000003dc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000004000)=[{&(0x7f0000003e40)=""/180, 0xb4}, {&(0x7f0000003f00)=""/199, 0xc7}], 0x2, &(0x7f0000004040)=""/25, 0x19}}], 0x4, 0x40000142, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0401220c"], 0x7) 614.353973ms ago: executing program 2 (id=1200): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109802, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000680)="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", 0xfdae}], 0x1) 588.933008ms ago: executing program 2 (id=1201): mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0) (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r0, 0x0, &(0x7f0000000240)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f00000000c0)=0x2) (async, rerun: 64) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) (rerun: 64) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, &(0x7f0000000040)) (async) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r5, 0x4112, 0x0) (async, rerun: 64) close(r4) (async, rerun: 64) timer_settime(r0, 0x0, &(0x7f00000000c0)={{r1, r2+10000000}, {0x0, 0x3938700}}, &(0x7f0000000100)) (async) r6 = mq_open(&(0x7f0000000140)='/dev/loop', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x2, 0x0, 0x100000001}) r7 = getpgrp(0xffffffffffffffff) mq_notify(r6, &(0x7f00000001c0)={0x0, 0x25, 0x2, @tid=r7}) 548.312295ms ago: executing program 5 (id=1202): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000440)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x203, 0x1, {0xffffffffffffffff, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x400000}}, {0x0, 0x13}}}, 0x35) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) (fail_nth: 39) 245.845964ms ago: executing program 2 (id=1203): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbb9, 0x20011, r0, 0x52fbf000) syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), 0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x16}, 0x300, 0x0, 0x2, 0x9, 0x0, 0x7}, 0x20) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) io_setup(0x9, &(0x7f0000000240)=0x0) io_submit(r3, 0x1, &(0x7f0000000380)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, r2, &(0x7f0000000080)='\x00', 0x1, 0x3, 0x0, 0x2}]) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00', 0x300, 0x0, 0x2, 0x0, 0x6, 0xf}, 0x20) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f00000bb000/0x4000)=nil, 0x4000, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/189, 0xbd, 0x1, &(0x7f0000000280)=""/158, 0x9e}, &(0x7f0000000180)=0x40) 0s ago: executing program 5 (id=1204): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28240, 0x0) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x8010, r0, 0xb13c9000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r1, &(0x7f0000002200)=ANY=[], 0xff2e) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x5) mprotect(&(0x7f0000786000/0x4000)=nil, 0x4000, 0x0) kernel console output (not intermixed with test programs): , times 0 [ 222.891217][ T8673] CPU: 0 UID: 0 PID: 8673 Comm: syz.2.934 Not tainted syzkaller #0 PREEMPT(full) [ 222.891251][ T8673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 222.891265][ T8673] Call Trace: [ 222.891274][ T8673] [ 222.891283][ T8673] dump_stack_lvl+0x189/0x250 [ 222.891323][ T8673] ? __pfx____ratelimit+0x10/0x10 [ 222.891354][ T8673] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.891385][ T8673] ? __pfx__printk+0x10/0x10 [ 222.891418][ T8673] ? __pfx___might_resched+0x10/0x10 [ 222.891445][ T8673] ? lock_acquire+0x5f/0x360 [ 222.891471][ T8673] should_fail_ex+0x414/0x560 [ 222.891494][ T8673] should_failslab+0xa8/0x100 [ 222.891525][ T8673] __kmalloc_noprof+0xcb/0x4f0 [ 222.891548][ T8673] ? iter_file_splice_write+0x1c6/0x10e0 [ 222.891579][ T8673] iter_file_splice_write+0x1c6/0x10e0 [ 222.891607][ T8673] ? __vfs_getxattr+0x3f1/0x430 [ 222.891641][ T8673] ? cap_inode_need_killpriv+0x51/0x60 [ 222.891667][ T8673] ? bpf_lsm_inode_need_killpriv+0x9/0x20 [ 222.891700][ T8673] ? security_inode_need_killpriv+0x71/0x270 [ 222.891727][ T8673] ? file_remove_privs_flags+0x40d/0x5f0 [ 222.891752][ T8673] ? __pfx_iter_file_splice_write+0x10/0x10 [ 222.891780][ T8673] ? ovl_splice_write+0x43d/0x580 [ 222.891811][ T8673] ? rcu_is_watching+0x15/0xb0 [ 222.891839][ T8673] ? lock_acquire+0x5f/0x360 [ 222.891863][ T8673] ? ovl_path_type+0x197/0x3d0 [ 222.891882][ T8673] ? ovl_real_file_path+0x145/0x310 [ 222.891916][ T8673] backing_file_splice_write+0x3be/0x5e0 [ 222.891944][ T8673] ovl_splice_write+0x43d/0x580 [ 222.891977][ T8673] ? __pfx_ovl_splice_write+0x10/0x10 [ 222.892007][ T8673] ? __pfx_ovl_file_end_write+0x10/0x10 [ 222.892046][ T8673] ? lock_acquire+0x5f/0x360 [ 222.892075][ T8673] ? preempt_count_add+0x91/0x1a0 [ 222.892101][ T8673] ? __pfx_ovl_splice_write+0x10/0x10 [ 222.892133][ T8673] direct_splice_actor+0x101/0x160 [ 222.892163][ T8673] splice_direct_to_actor+0x5a5/0xcc0 [ 222.892201][ T8673] ? __pfx_direct_splice_actor+0x10/0x10 [ 222.892228][ T8673] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 222.892261][ T8673] do_splice_direct+0x181/0x270 [ 222.892290][ T8673] ? __pfx_do_splice_direct+0x10/0x10 [ 222.892316][ T8673] ? common_file_perm+0x1b5/0x230 [ 222.892348][ T8673] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 222.892378][ T8673] ? bpf_lsm_file_permission+0x9/0x20 [ 222.892404][ T8673] ? security_file_permission+0x75/0x290 [ 222.892431][ T8673] ? rw_verify_area+0x255/0x4d0 [ 222.892458][ T8673] do_sendfile+0x4da/0x7e0 [ 222.892488][ T8673] ? rcu_is_watching+0x15/0xb0 [ 222.892520][ T8673] ? __pfx_do_sendfile+0x10/0x10 [ 222.892551][ T8673] ? lock_release+0x4b/0x3e0 [ 222.892575][ T8673] ? __might_fault+0xcc/0x130 [ 222.892599][ T8673] __se_sys_sendfile64+0xd9/0x190 [ 222.892631][ T8673] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 222.892661][ T8673] ? rcu_is_watching+0x15/0xb0 [ 222.892690][ T8673] ? rcu_is_watching+0x15/0xb0 [ 222.892720][ T8673] do_syscall_64+0xfa/0x3b0 [ 222.892751][ T8673] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.892773][ T8673] ? clear_bhb_loop+0x60/0xb0 [ 222.892804][ T8673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.892825][ T8673] RIP: 0033:0x7fa4e8d8ebe9 [ 222.892845][ T8673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.892864][ T8673] RSP: 002b:00007fa4e9b94038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 222.892889][ T8673] RAX: ffffffffffffffda RBX: 00007fa4e8fb5fa0 RCX: 00007fa4e8d8ebe9 [ 222.892905][ T8673] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000003 [ 222.892919][ T8673] RBP: 00007fa4e9b94090 R08: 0000000000000000 R09: 0000000000000000 [ 222.892933][ T8673] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000002 [ 222.892945][ T8673] R13: 00007fa4e8fb6038 R14: 00007fa4e8fb5fa0 R15: 00007ffe9b4335a8 [ 222.892968][ T8673] [ 223.332507][ T5942] usb 5-1: USB disconnect, device number 21 [ 223.747623][ T8700] FAULT_INJECTION: forcing a failure. [ 223.747623][ T8700] name failslab, interval 1, probability 0, space 0, times 0 [ 223.782283][ T8700] CPU: 1 UID: 0 PID: 8700 Comm: syz.4.944 Not tainted syzkaller #0 PREEMPT(full) [ 223.782315][ T8700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 223.782329][ T8700] Call Trace: [ 223.782338][ T8700] [ 223.782346][ T8700] dump_stack_lvl+0x189/0x250 [ 223.782387][ T8700] ? __pfx____ratelimit+0x10/0x10 [ 223.782416][ T8700] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.782451][ T8700] ? __pfx__printk+0x10/0x10 [ 223.782481][ T8700] ? __pfx___might_resched+0x10/0x10 [ 223.782508][ T8700] ? lock_acquire+0x5f/0x360 [ 223.782532][ T8700] should_fail_ex+0x414/0x560 [ 223.782554][ T8700] should_failslab+0xa8/0x100 [ 223.782578][ T8700] __kmalloc_noprof+0xcb/0x4f0 [ 223.782600][ T8700] ? iter_file_splice_write+0x1c6/0x10e0 [ 223.782630][ T8700] iter_file_splice_write+0x1c6/0x10e0 [ 223.782656][ T8700] ? __vfs_getxattr+0x3f1/0x430 [ 223.782686][ T8700] ? cap_inode_need_killpriv+0x51/0x60 [ 223.782712][ T8700] ? bpf_lsm_inode_need_killpriv+0x9/0x20 [ 223.782746][ T8700] ? security_inode_need_killpriv+0x71/0x270 [ 223.782772][ T8700] ? file_remove_privs_flags+0x40d/0x5f0 [ 223.782796][ T8700] ? __pfx_iter_file_splice_write+0x10/0x10 [ 223.782823][ T8700] ? ovl_splice_write+0x43d/0x580 [ 223.782854][ T8700] ? rcu_is_watching+0x15/0xb0 [ 223.782882][ T8700] ? lock_acquire+0x5f/0x360 [ 223.782904][ T8700] ? ovl_path_type+0x197/0x3d0 [ 223.782923][ T8700] ? ovl_real_file_path+0x145/0x310 [ 223.782958][ T8700] backing_file_splice_write+0x3be/0x5e0 [ 223.782984][ T8700] ovl_splice_write+0x43d/0x580 [ 223.783017][ T8700] ? __pfx_ovl_splice_write+0x10/0x10 [ 223.783046][ T8700] ? __pfx_ovl_file_end_write+0x10/0x10 [ 223.783077][ T8700] ? lock_acquire+0x5f/0x360 [ 223.783105][ T8700] ? preempt_count_add+0x91/0x1a0 [ 223.783131][ T8700] ? __pfx_ovl_splice_write+0x10/0x10 [ 223.783162][ T8700] direct_splice_actor+0x101/0x160 [ 223.783199][ T8700] splice_direct_to_actor+0x5a5/0xcc0 [ 223.783236][ T8700] ? __pfx_direct_splice_actor+0x10/0x10 [ 223.783264][ T8700] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 223.783297][ T8700] do_splice_direct+0x181/0x270 [ 223.783326][ T8700] ? __pfx_do_splice_direct+0x10/0x10 [ 223.783352][ T8700] ? common_file_perm+0x1b5/0x230 [ 223.783384][ T8700] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 223.783416][ T8700] ? bpf_lsm_file_permission+0x9/0x20 [ 223.783436][ T8700] ? security_file_permission+0x75/0x290 [ 223.783462][ T8700] ? rw_verify_area+0x255/0x4d0 [ 223.783489][ T8700] do_sendfile+0x4da/0x7e0 [ 223.783520][ T8700] ? rcu_is_watching+0x15/0xb0 [ 223.783551][ T8700] ? __pfx_do_sendfile+0x10/0x10 [ 223.783582][ T8700] ? lock_release+0x4b/0x3e0 [ 223.783606][ T8700] ? __might_fault+0xcc/0x130 [ 223.783631][ T8700] __se_sys_sendfile64+0xd9/0x190 [ 223.783662][ T8700] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 223.783690][ T8700] ? rcu_is_watching+0x15/0xb0 [ 223.783719][ T8700] ? rcu_is_watching+0x15/0xb0 [ 223.783748][ T8700] do_syscall_64+0xfa/0x3b0 [ 223.783779][ T8700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.783800][ T8700] ? clear_bhb_loop+0x60/0xb0 [ 223.783824][ T8700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.783845][ T8700] RIP: 0033:0x7f908a78ebe9 [ 223.783864][ T8700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.783884][ T8700] RSP: 002b:00007f908b66c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 223.783907][ T8700] RAX: ffffffffffffffda RBX: 00007f908a9b5fa0 RCX: 00007f908a78ebe9 [ 223.783922][ T8700] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000003 [ 223.783935][ T8700] RBP: 00007f908b66c090 R08: 0000000000000000 R09: 0000000000000000 [ 223.783948][ T8700] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000002 [ 223.783961][ T8700] R13: 00007f908a9b6038 R14: 00007f908a9b5fa0 R15: 00007ffdf0af6be8 [ 223.783984][ T8700] [ 224.306188][ T8708] /dev/rnullb0: Can't open blockdev [ 224.797544][ T8725] comedi comedi3: bad chanlist[0]=0x80000080 chan=128 range length=1 [ 224.926372][ T8731] FAULT_INJECTION: forcing a failure. [ 224.926372][ T8731] name failslab, interval 1, probability 0, space 0, times 0 [ 224.940189][ T8731] CPU: 1 UID: 0 PID: 8731 Comm: syz.1.957 Not tainted syzkaller #0 PREEMPT(full) [ 224.940219][ T8731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 224.940234][ T8731] Call Trace: [ 224.940242][ T8731] [ 224.940252][ T8731] dump_stack_lvl+0x189/0x250 [ 224.940291][ T8731] ? __pfx____ratelimit+0x10/0x10 [ 224.940321][ T8731] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.940353][ T8731] ? __pfx__printk+0x10/0x10 [ 224.940386][ T8731] ? __pfx___might_resched+0x10/0x10 [ 224.940413][ T8731] ? lock_acquire+0x5f/0x360 [ 224.940452][ T8731] should_fail_ex+0x414/0x560 [ 224.940474][ T8731] should_failslab+0xa8/0x100 [ 224.940499][ T8731] __kmalloc_noprof+0xcb/0x4f0 [ 224.940521][ T8731] ? iter_file_splice_write+0x1c6/0x10e0 [ 224.940551][ T8731] iter_file_splice_write+0x1c6/0x10e0 [ 224.940578][ T8731] ? __vfs_getxattr+0x3f1/0x430 [ 224.940610][ T8731] ? cap_inode_need_killpriv+0x51/0x60 [ 224.940635][ T8731] ? bpf_lsm_inode_need_killpriv+0x9/0x20 [ 224.940668][ T8731] ? security_inode_need_killpriv+0x71/0x270 [ 224.940693][ T8731] ? file_remove_privs_flags+0x40d/0x5f0 [ 224.940718][ T8731] ? __pfx_iter_file_splice_write+0x10/0x10 [ 224.940746][ T8731] ? ovl_splice_write+0x43d/0x580 [ 224.940775][ T8731] ? rcu_is_watching+0x15/0xb0 [ 224.940802][ T8731] ? lock_acquire+0x5f/0x360 [ 224.940825][ T8731] ? ovl_path_type+0x197/0x3d0 [ 224.940863][ T8731] ? ovl_real_file_path+0x145/0x310 [ 224.940896][ T8731] backing_file_splice_write+0x3be/0x5e0 [ 224.940924][ T8731] ovl_splice_write+0x43d/0x580 [ 224.940957][ T8731] ? __pfx_ovl_splice_write+0x10/0x10 [ 224.940987][ T8731] ? __pfx_ovl_file_end_write+0x10/0x10 [ 224.941018][ T8731] ? lock_acquire+0x5f/0x360 [ 224.941046][ T8731] ? preempt_count_add+0x91/0x1a0 [ 224.941072][ T8731] ? __pfx_ovl_splice_write+0x10/0x10 [ 224.941102][ T8731] direct_splice_actor+0x101/0x160 [ 224.941149][ T8731] splice_direct_to_actor+0x5a5/0xcc0 [ 224.941185][ T8731] ? __pfx_direct_splice_actor+0x10/0x10 [ 224.941212][ T8731] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 224.941242][ T8731] do_splice_direct+0x181/0x270 [ 224.941270][ T8731] ? __pfx_do_splice_direct+0x10/0x10 [ 224.941295][ T8731] ? common_file_perm+0x1b5/0x230 [ 224.941326][ T8731] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 224.941355][ T8731] ? bpf_lsm_file_permission+0x9/0x20 [ 224.941374][ T8731] ? security_file_permission+0x75/0x290 [ 224.941399][ T8731] ? rw_verify_area+0x255/0x4d0 [ 224.941424][ T8731] do_sendfile+0x4da/0x7e0 [ 224.941454][ T8731] ? rcu_is_watching+0x15/0xb0 [ 224.941484][ T8731] ? __pfx_do_sendfile+0x10/0x10 [ 224.941513][ T8731] ? lock_release+0x4b/0x3e0 [ 224.941536][ T8731] ? __might_fault+0xcc/0x130 [ 224.941560][ T8731] __se_sys_sendfile64+0xd9/0x190 [ 224.941590][ T8731] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 224.941619][ T8731] ? rcu_is_watching+0x15/0xb0 [ 224.941647][ T8731] ? rcu_is_watching+0x15/0xb0 [ 224.941675][ T8731] do_syscall_64+0xfa/0x3b0 [ 224.941705][ T8731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.941725][ T8731] ? clear_bhb_loop+0x60/0xb0 [ 224.941748][ T8731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.941767][ T8731] RIP: 0033:0x7faa1bf8ebe9 [ 224.941786][ T8731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.941805][ T8731] RSP: 002b:00007faa1cea0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 224.941829][ T8731] RAX: ffffffffffffffda RBX: 00007faa1c1b5fa0 RCX: 00007faa1bf8ebe9 [ 224.941844][ T8731] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000003 [ 224.941857][ T8731] RBP: 00007faa1cea0090 R08: 0000000000000000 R09: 0000000000000000 [ 224.941889][ T8731] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000002 [ 224.941903][ T8731] R13: 00007faa1c1b6038 R14: 00007faa1c1b5fa0 R15: 00007ffd649219a8 [ 224.941927][ T8731] [ 225.428726][ T8736] (syz.1.958,8736,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 225.439081][ T8736] (syz.1.958,8736,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 225.454737][ T8737] kAFS: unparsable volume name [ 225.732917][ T8752] FAULT_INJECTION: forcing a failure. [ 225.732917][ T8752] name failslab, interval 1, probability 0, space 0, times 0 [ 225.749027][ T8752] CPU: 1 UID: 0 PID: 8752 Comm: syz.4.966 Not tainted syzkaller #0 PREEMPT(full) [ 225.749059][ T8752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 225.749073][ T8752] Call Trace: [ 225.749081][ T8752] [ 225.749089][ T8752] dump_stack_lvl+0x189/0x250 [ 225.749129][ T8752] ? __pfx____ratelimit+0x10/0x10 [ 225.749167][ T8752] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.749197][ T8752] ? __pfx__printk+0x10/0x10 [ 225.749229][ T8752] ? __pfx___might_resched+0x10/0x10 [ 225.749256][ T8752] ? lock_acquire+0x5f/0x360 [ 225.749280][ T8752] should_fail_ex+0x414/0x560 [ 225.749303][ T8752] should_failslab+0xa8/0x100 [ 225.749328][ T8752] __kmalloc_noprof+0xcb/0x4f0 [ 225.749350][ T8752] ? iter_file_splice_write+0x1c6/0x10e0 [ 225.749381][ T8752] iter_file_splice_write+0x1c6/0x10e0 [ 225.749406][ T8752] ? __vfs_getxattr+0x3f1/0x430 [ 225.749438][ T8752] ? cap_inode_need_killpriv+0x51/0x60 [ 225.749464][ T8752] ? bpf_lsm_inode_need_killpriv+0x9/0x20 [ 225.749495][ T8752] ? security_inode_need_killpriv+0x71/0x270 [ 225.749519][ T8752] ? file_remove_privs_flags+0x40d/0x5f0 [ 225.749543][ T8752] ? __pfx_iter_file_splice_write+0x10/0x10 [ 225.749569][ T8752] ? ovl_splice_write+0x43d/0x580 [ 225.749599][ T8752] ? rcu_is_watching+0x15/0xb0 [ 225.749623][ T8752] ? lock_acquire+0x5f/0x360 [ 225.749642][ T8752] ? ovl_path_type+0x197/0x3d0 [ 225.749659][ T8752] ? ovl_real_file_path+0x145/0x310 [ 225.749686][ T8752] backing_file_splice_write+0x3be/0x5e0 [ 225.749708][ T8752] ovl_splice_write+0x43d/0x580 [ 225.749737][ T8752] ? __pfx_ovl_splice_write+0x10/0x10 [ 225.749761][ T8752] ? __pfx_ovl_file_end_write+0x10/0x10 [ 225.749787][ T8752] ? lock_acquire+0x5f/0x360 [ 225.749810][ T8752] ? preempt_count_add+0x91/0x1a0 [ 225.749831][ T8752] ? __pfx_ovl_splice_write+0x10/0x10 [ 225.749856][ T8752] direct_splice_actor+0x101/0x160 [ 225.749881][ T8752] splice_direct_to_actor+0x5a5/0xcc0 [ 225.749912][ T8752] ? __pfx_direct_splice_actor+0x10/0x10 [ 225.749934][ T8752] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 225.749961][ T8752] do_splice_direct+0x181/0x270 [ 225.749984][ T8752] ? __pfx_do_splice_direct+0x10/0x10 [ 225.750005][ T8752] ? common_file_perm+0x1b5/0x230 [ 225.750032][ T8752] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 225.750058][ T8752] ? bpf_lsm_file_permission+0x9/0x20 [ 225.750073][ T8752] ? security_file_permission+0x75/0x290 [ 225.750094][ T8752] ? rw_verify_area+0x255/0x4d0 [ 225.750115][ T8752] do_sendfile+0x4da/0x7e0 [ 225.750141][ T8752] ? rcu_is_watching+0x15/0xb0 [ 225.750173][ T8752] ? __pfx_do_sendfile+0x10/0x10 [ 225.750198][ T8752] ? lock_release+0x4b/0x3e0 [ 225.750224][ T8752] ? __might_fault+0xcc/0x130 [ 225.750244][ T8752] __se_sys_sendfile64+0xd9/0x190 [ 225.750269][ T8752] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 225.750292][ T8752] ? rcu_is_watching+0x15/0xb0 [ 225.750316][ T8752] ? rcu_is_watching+0x15/0xb0 [ 225.750339][ T8752] do_syscall_64+0xfa/0x3b0 [ 225.750364][ T8752] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.750381][ T8752] ? clear_bhb_loop+0x60/0xb0 [ 225.750401][ T8752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.750418][ T8752] RIP: 0033:0x7f908a78ebe9 [ 225.750434][ T8752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.750450][ T8752] RSP: 002b:00007f908b66c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 225.750469][ T8752] RAX: ffffffffffffffda RBX: 00007f908a9b5fa0 RCX: 00007f908a78ebe9 [ 225.750483][ T8752] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000003 [ 225.750494][ T8752] RBP: 00007f908b66c090 R08: 0000000000000000 R09: 0000000000000000 [ 225.750505][ T8752] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000002 [ 225.750516][ T8752] R13: 00007f908a9b6038 R14: 00007f908a9b5fa0 R15: 00007ffdf0af6be8 [ 225.750535][ T8752] [ 226.525835][ T8782] trusted_key: syz.2.977 sent an empty control message without MSG_MORE. [ 226.642477][ T8786] FAULT_INJECTION: forcing a failure. [ 226.642477][ T8786] name failslab, interval 1, probability 0, space 0, times 0 [ 226.656562][ T8786] CPU: 1 UID: 0 PID: 8786 Comm: syz.1.979 Not tainted syzkaller #0 PREEMPT(full) [ 226.656593][ T8786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 226.656607][ T8786] Call Trace: [ 226.656619][ T8786] [ 226.656628][ T8786] dump_stack_lvl+0x189/0x250 [ 226.656667][ T8786] ? __pfx____ratelimit+0x10/0x10 [ 226.656695][ T8786] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.656736][ T8786] ? __pfx__printk+0x10/0x10 [ 226.656768][ T8786] ? __pfx___might_resched+0x10/0x10 [ 226.656793][ T8786] ? lock_acquire+0x5f/0x360 [ 226.656818][ T8786] should_fail_ex+0x414/0x560 [ 226.656845][ T8786] should_failslab+0xa8/0x100 [ 226.656863][ T8786] __kmalloc_noprof+0xcb/0x4f0 [ 226.656897][ T8786] ? iter_file_splice_write+0x1c6/0x10e0 [ 226.656920][ T8786] iter_file_splice_write+0x1c6/0x10e0 [ 226.656938][ T8786] ? __vfs_getxattr+0x3f1/0x430 [ 226.656962][ T8786] ? cap_inode_need_killpriv+0x51/0x60 [ 226.656980][ T8786] ? bpf_lsm_inode_need_killpriv+0x9/0x20 [ 226.657005][ T8786] ? security_inode_need_killpriv+0x71/0x270 [ 226.657023][ T8786] ? file_remove_privs_flags+0x40d/0x5f0 [ 226.657040][ T8786] ? __pfx_iter_file_splice_write+0x10/0x10 [ 226.657060][ T8786] ? ovl_splice_write+0x43d/0x580 [ 226.657082][ T8786] ? rcu_is_watching+0x15/0xb0 [ 226.657102][ T8786] ? lock_acquire+0x5f/0x360 [ 226.657117][ T8786] ? ovl_path_type+0x197/0x3d0 [ 226.657131][ T8786] ? ovl_real_file_path+0x145/0x310 [ 226.657154][ T8786] backing_file_splice_write+0x3be/0x5e0 [ 226.657173][ T8786] ovl_splice_write+0x43d/0x580 [ 226.657196][ T8786] ? __pfx_ovl_splice_write+0x10/0x10 [ 226.657217][ T8786] ? __pfx_ovl_file_end_write+0x10/0x10 [ 226.657239][ T8786] ? lock_acquire+0x5f/0x360 [ 226.657258][ T8786] ? preempt_count_add+0x91/0x1a0 [ 226.657276][ T8786] ? __pfx_ovl_splice_write+0x10/0x10 [ 226.657297][ T8786] direct_splice_actor+0x101/0x160 [ 226.657318][ T8786] splice_direct_to_actor+0x5a5/0xcc0 [ 226.657344][ T8786] ? __pfx_direct_splice_actor+0x10/0x10 [ 226.657362][ T8786] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 226.657384][ T8786] do_splice_direct+0x181/0x270 [ 226.657403][ T8786] ? __pfx_do_splice_direct+0x10/0x10 [ 226.657421][ T8786] ? common_file_perm+0x1b5/0x230 [ 226.657444][ T8786] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 226.657465][ T8786] ? bpf_lsm_file_permission+0x9/0x20 [ 226.657478][ T8786] ? security_file_permission+0x75/0x290 [ 226.657496][ T8786] ? rw_verify_area+0x255/0x4d0 [ 226.657514][ T8786] do_sendfile+0x4da/0x7e0 [ 226.657535][ T8786] ? rcu_is_watching+0x15/0xb0 [ 226.657556][ T8786] ? __pfx_do_sendfile+0x10/0x10 [ 226.657577][ T8786] ? lock_release+0x4b/0x3e0 [ 226.657593][ T8786] ? __might_fault+0xcc/0x130 [ 226.657610][ T8786] __se_sys_sendfile64+0xd9/0x190 [ 226.657631][ T8786] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 226.657651][ T8786] ? rcu_is_watching+0x15/0xb0 [ 226.657671][ T8786] ? rcu_is_watching+0x15/0xb0 [ 226.657691][ T8786] do_syscall_64+0xfa/0x3b0 [ 226.657713][ T8786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.657736][ T8786] ? clear_bhb_loop+0x60/0xb0 [ 226.657753][ T8786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.657768][ T8786] RIP: 0033:0x7faa1bf8ebe9 [ 226.657781][ T8786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.657795][ T8786] RSP: 002b:00007faa1cea0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 226.657812][ T8786] RAX: ffffffffffffffda RBX: 00007faa1c1b5fa0 RCX: 00007faa1bf8ebe9 [ 226.657823][ T8786] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000003 [ 226.657833][ T8786] RBP: 00007faa1cea0090 R08: 0000000000000000 R09: 0000000000000000 [ 226.657842][ T8786] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000002 [ 226.657851][ T8786] R13: 00007faa1c1b6038 R14: 00007faa1c1b5fa0 R15: 00007ffd649219a8 [ 226.657868][ T8786] [ 227.043746][ T44] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 227.177161][ T8799] fuse: Unknown parameter 'grou00000000000000000000' [ 227.205987][ T44] usb 6-1: not running at top speed; connect to a high speed hub [ 227.214890][ T44] usb 6-1: config 95 has an invalid interface number: 1 but max is 0 [ 227.223050][ T44] usb 6-1: config 95 has no interface number 0 [ 227.231418][ T44] usb 6-1: config 95 interface 1 has no altsetting 0 [ 227.261873][ T44] usb 6-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 227.272351][ T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.280519][ T44] usb 6-1: Product: syz [ 227.284852][ T44] usb 6-1: Manufacturer: syz [ 227.289873][ T44] usb 6-1: SerialNumber: syz [ 227.640462][ T9] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 227.727617][ T8819] FAULT_INJECTION: forcing a failure. [ 227.727617][ T8819] name failslab, interval 1, probability 0, space 0, times 0 [ 227.745694][ T8819] CPU: 1 UID: 0 PID: 8819 Comm: syz.2.989 Not tainted syzkaller #0 PREEMPT(full) [ 227.745731][ T8819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 227.745745][ T8819] Call Trace: [ 227.745754][ T8819] [ 227.745763][ T8819] dump_stack_lvl+0x189/0x250 [ 227.745807][ T8819] ? __pfx____ratelimit+0x10/0x10 [ 227.745838][ T8819] ? __pfx_dump_stack_lvl+0x10/0x10 [ 227.745869][ T8819] ? __pfx__printk+0x10/0x10 [ 227.745901][ T8819] ? __pfx___might_resched+0x10/0x10 [ 227.745992][ T8819] ? lock_acquire+0x5f/0x360 [ 227.746021][ T8819] should_fail_ex+0x414/0x560 [ 227.746046][ T8819] should_failslab+0xa8/0x100 [ 227.746073][ T8819] __kmalloc_noprof+0xcb/0x4f0 [ 227.746097][ T8819] ? iter_file_splice_write+0x1c6/0x10e0 [ 227.746127][ T8819] iter_file_splice_write+0x1c6/0x10e0 [ 227.746154][ T8819] ? __vfs_getxattr+0x3f1/0x430 [ 227.746185][ T8819] ? cap_inode_need_killpriv+0x51/0x60 [ 227.746213][ T8819] ? bpf_lsm_inode_need_killpriv+0x9/0x20 [ 227.746246][ T8819] ? security_inode_need_killpriv+0x71/0x270 [ 227.746273][ T8819] ? file_remove_privs_flags+0x40d/0x5f0 [ 227.746305][ T8819] ? __pfx_iter_file_splice_write+0x10/0x10 [ 227.746334][ T8819] ? ovl_splice_write+0x43d/0x580 [ 227.746366][ T8819] ? rcu_is_watching+0x15/0xb0 [ 227.746394][ T8819] ? lock_acquire+0x5f/0x360 [ 227.746417][ T8819] ? ovl_path_type+0x197/0x3d0 [ 227.746436][ T8819] ? ovl_real_file_path+0x145/0x310 [ 227.746469][ T8819] backing_file_splice_write+0x3be/0x5e0 [ 227.746498][ T8819] ovl_splice_write+0x43d/0x580 [ 227.746533][ T8819] ? __pfx_ovl_splice_write+0x10/0x10 [ 227.746566][ T8819] ? __pfx_ovl_file_end_write+0x10/0x10 [ 227.746597][ T8819] ? lock_acquire+0x5f/0x360 [ 227.746627][ T8819] ? preempt_count_add+0x91/0x1a0 [ 227.746654][ T8819] ? __pfx_ovl_splice_write+0x10/0x10 [ 227.746732][ T8819] direct_splice_actor+0x101/0x160 [ 227.746763][ T8819] splice_direct_to_actor+0x5a5/0xcc0 [ 227.746799][ T8819] ? __pfx_direct_splice_actor+0x10/0x10 [ 227.746828][ T8819] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 227.746863][ T8819] do_splice_direct+0x181/0x270 [ 227.746892][ T8819] ? __pfx_do_splice_direct+0x10/0x10 [ 227.746919][ T8819] ? common_file_perm+0x1b5/0x230 [ 227.746954][ T8819] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 227.746986][ T8819] ? bpf_lsm_file_permission+0x9/0x20 [ 227.747007][ T8819] ? security_file_permission+0x75/0x290 [ 227.747034][ T8819] ? rw_verify_area+0x255/0x4d0 [ 227.747062][ T8819] do_sendfile+0x4da/0x7e0 [ 227.747093][ T8819] ? rcu_is_watching+0x15/0xb0 [ 227.747126][ T8819] ? __pfx_do_sendfile+0x10/0x10 [ 227.747158][ T8819] ? lock_release+0x4b/0x3e0 [ 227.747183][ T8819] ? __might_fault+0xcc/0x130 [ 227.747208][ T8819] __se_sys_sendfile64+0xd9/0x190 [ 227.747239][ T8819] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 227.747269][ T8819] ? rcu_is_watching+0x15/0xb0 [ 227.747299][ T8819] ? rcu_is_watching+0x15/0xb0 [ 227.747327][ T8819] do_syscall_64+0xfa/0x3b0 [ 227.747361][ T8819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.747383][ T8819] ? clear_bhb_loop+0x60/0xb0 [ 227.747406][ T8819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.747428][ T8819] RIP: 0033:0x7fa4e8d8ebe9 [ 227.747447][ T8819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.747467][ T8819] RSP: 002b:00007fa4e9b94038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 227.747491][ T8819] RAX: ffffffffffffffda RBX: 00007fa4e8fb5fa0 RCX: 00007fa4e8d8ebe9 [ 227.747507][ T8819] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000003 [ 227.747521][ T8819] RBP: 00007fa4e9b94090 R08: 0000000000000000 R09: 0000000000000000 [ 227.747535][ T8819] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000002 [ 227.747548][ T8819] R13: 00007fa4e8fb6038 R14: 00007fa4e8fb5fa0 R15: 00007ffe9b4335a8 [ 227.747572][ T8819] [ 228.154469][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 228.184255][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 228.201584][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 228.215416][ T44] usb 6-1: USB disconnect, device number 3 [ 228.221792][ T9] usb 5-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 228.260616][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.275905][ T6777] udevd[6777]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 228.294867][ T9] usb 5-1: config 0 descriptor?? [ 228.300494][ T8803] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 228.323125][ T8823] openvswitch: netlink: Flow actions attr not present in new flow. [ 228.324945][ T8824] NILFS (rnullb0): couldn't find nilfs on the device [ 228.406294][ T6747] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 228.432471][ T8831] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.992'. [ 228.533946][ T8833] netlink: 24 bytes leftover after parsing attributes in process `syz.2.993'. [ 228.547827][ T8833] netlink: 256 bytes leftover after parsing attributes in process `syz.2.993'. [ 228.557226][ T8833] netlink: 72 bytes leftover after parsing attributes in process `syz.2.993'. [ 228.566805][ T6747] usb 2-1: Using ep0 maxpacket: 16 [ 228.573855][ T6747] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 228.585723][ T6747] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 228.596956][ T6747] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 228.610500][ T6747] usb 2-1: config 1 interface 0 has no altsetting 0 [ 228.622139][ T6747] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 228.631465][ T6747] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.640863][ T6747] usb 2-1: Product: syz [ 228.655531][ T6747] usb 2-1: Manufacturer: syz [ 228.668371][ T8835] fuse: Unknown parameter 'grou00000000000000000000' [ 228.671224][ T6747] usb 2-1: SerialNumber: syz [ 228.723858][ T9] hid_parser_main: 5 callbacks suppressed [ 228.723887][ T9] aureal 0003:0755:2626.000B: unknown main item tag 0x0 [ 228.743610][ T9] aureal 0003:0755:2626.000B: unknown main item tag 0x0 [ 228.758199][ T9] aureal 0003:0755:2626.000B: unknown main item tag 0x0 [ 228.766757][ T9] aureal 0003:0755:2626.000B: unknown main item tag 0x0 [ 228.774610][ T9] aureal 0003:0755:2626.000B: unknown main item tag 0x0 [ 228.782370][ T9] aureal 0003:0755:2626.000B: unknown main item tag 0x0 [ 228.802609][ T9] aureal 0003:0755:2626.000B: unknown main item tag 0x0 [ 228.810196][ T9] aureal 0003:0755:2626.000B: unknown main item tag 0x0 [ 228.820432][ T9] aureal 0003:0755:2626.000B: unknown main item tag 0x0 [ 228.827739][ T9] aureal 0003:0755:2626.000B: unknown main item tag 0x0 [ 228.845489][ T9] aureal 0003:0755:2626.000B: hidraw0: USB HID v0.00 Device [HID 0755:2626] on usb-dummy_hcd.4-1/input0 [ 228.930131][ T1212] usb 5-1: USB disconnect, device number 22 [ 229.157793][ T8850] FAULT_INJECTION: forcing a failure. [ 229.157793][ T8850] name failslab, interval 1, probability 0, space 0, times 0 [ 229.171181][ T8850] CPU: 1 UID: 0 PID: 8850 Comm: syz.5.1000 Not tainted syzkaller #0 PREEMPT(full) [ 229.171206][ T8850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 229.171216][ T8850] Call Trace: [ 229.171222][ T8850] [ 229.171228][ T8850] dump_stack_lvl+0x189/0x250 [ 229.171258][ T8850] ? __pfx____ratelimit+0x10/0x10 [ 229.171280][ T8850] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.171302][ T8850] ? __pfx__printk+0x10/0x10 [ 229.171324][ T8850] ? __pfx___might_resched+0x10/0x10 [ 229.171344][ T8850] ? lock_acquire+0x5f/0x360 [ 229.171362][ T8850] should_fail_ex+0x414/0x560 [ 229.171378][ T8850] should_failslab+0xa8/0x100 [ 229.171397][ T8850] __kmalloc_noprof+0xcb/0x4f0 [ 229.171413][ T8850] ? iter_file_splice_write+0x1c6/0x10e0 [ 229.171436][ T8850] iter_file_splice_write+0x1c6/0x10e0 [ 229.171454][ T8850] ? __vfs_getxattr+0x3f1/0x430 [ 229.171477][ T8850] ? cap_inode_need_killpriv+0x51/0x60 [ 229.171495][ T8850] ? bpf_lsm_inode_need_killpriv+0x9/0x20 [ 229.171520][ T8850] ? security_inode_need_killpriv+0x71/0x270 [ 229.171538][ T8850] ? file_remove_privs_flags+0x40d/0x5f0 [ 229.171555][ T8850] ? __pfx_iter_file_splice_write+0x10/0x10 [ 229.171574][ T8850] ? ovl_splice_write+0x43d/0x580 [ 229.171597][ T8850] ? rcu_is_watching+0x15/0xb0 [ 229.171616][ T8850] ? lock_acquire+0x5f/0x360 [ 229.171632][ T8850] ? ovl_path_type+0x197/0x3d0 [ 229.171645][ T8850] ? ovl_real_file_path+0x145/0x310 [ 229.171668][ T8850] backing_file_splice_write+0x3be/0x5e0 [ 229.171687][ T8850] ovl_splice_write+0x43d/0x580 [ 229.171710][ T8850] ? __pfx_ovl_splice_write+0x10/0x10 [ 229.171731][ T8850] ? __pfx_ovl_file_end_write+0x10/0x10 [ 229.171753][ T8850] ? lock_acquire+0x5f/0x360 [ 229.171772][ T8850] ? preempt_count_add+0x91/0x1a0 [ 229.171790][ T8850] ? __pfx_ovl_splice_write+0x10/0x10 [ 229.171811][ T8850] direct_splice_actor+0x101/0x160 [ 229.171831][ T8850] splice_direct_to_actor+0x5a5/0xcc0 [ 229.171856][ T8850] ? __pfx_direct_splice_actor+0x10/0x10 [ 229.171875][ T8850] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 229.171897][ T8850] do_splice_direct+0x181/0x270 [ 229.171916][ T8850] ? __pfx_do_splice_direct+0x10/0x10 [ 229.171934][ T8850] ? common_file_perm+0x1b5/0x230 [ 229.171967][ T8850] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 229.171988][ T8850] ? bpf_lsm_file_permission+0x9/0x20 [ 229.172001][ T8850] ? security_file_permission+0x75/0x290 [ 229.172020][ T8850] ? rw_verify_area+0x255/0x4d0 [ 229.172038][ T8850] do_sendfile+0x4da/0x7e0 [ 229.172060][ T8850] ? rcu_is_watching+0x15/0xb0 [ 229.172082][ T8850] ? __pfx_do_sendfile+0x10/0x10 [ 229.172103][ T8850] ? lock_release+0x4b/0x3e0 [ 229.172120][ T8850] ? __might_fault+0xcc/0x130 [ 229.172137][ T8850] __se_sys_sendfile64+0xd9/0x190 [ 229.172159][ T8850] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 229.172179][ T8850] ? rcu_is_watching+0x15/0xb0 [ 229.172200][ T8850] ? rcu_is_watching+0x15/0xb0 [ 229.172219][ T8850] do_syscall_64+0xfa/0x3b0 [ 229.172241][ T8850] ? rcu_is_watching+0x15/0xb0 [ 229.172258][ T8850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.172273][ T8850] ? clear_bhb_loop+0x60/0xb0 [ 229.172290][ T8850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.172303][ T8850] RIP: 0033:0x7f621158ebe9 [ 229.172317][ T8850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.172330][ T8850] RSP: 002b:00007f62123b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 229.172346][ T8850] RAX: ffffffffffffffda RBX: 00007f62117b5fa0 RCX: 00007f621158ebe9 [ 229.172356][ T8850] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000003 [ 229.172366][ T8850] RBP: 00007f62123b0090 R08: 0000000000000000 R09: 0000000000000000 [ 229.172375][ T8850] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000002 [ 229.172384][ T8850] R13: 00007f62117b6038 R14: 00007f62117b5fa0 R15: 00007ffd4f422cf8 [ 229.172399][ T8850] [ 229.587974][ T8852] nfs4: Unknown parameter 'upperdir' [ 229.684536][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 229.706505][ T8857] netlink: 'syz.5.1003': attribute type 5 has an invalid length. [ 229.747043][ T8859] netlink: 'syz.5.1004': attribute type 8 has an invalid length. [ 229.760504][ T6747] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 30 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 229.774937][ T6747] usb 2-1: USB disconnect, device number 30 [ 229.782362][ T6747] usblp0: removed [ 229.838246][ T8861] fuse: Unknown parameter 'grou00000000000000000000' [ 229.844353][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 229.860624][ T9] usb 3-1: config 5 has an invalid interface number: 20 but max is 0 [ 229.888497][ T9] usb 3-1: config 5 has no interface number 0 [ 229.917117][ T30] audit: type=1326 audit(2000000014.840:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8858 comm="syz.5.1004" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f621158ebe9 code=0x0 [ 229.940887][ T9] usb 3-1: config 5 interface 20 has no altsetting 0 [ 229.983462][ T9] usb 3-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.08 [ 229.996781][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.018158][ T9] usb 3-1: Product: syz [ 230.022382][ T9] usb 3-1: Manufacturer: syz [ 230.037517][ T9] usb 3-1: SerialNumber: syz [ 230.467546][ T9] go7007 3-1:5.20: probe with driver go7007 failed with error -12 [ 230.534515][ T9] usb 3-1: USB disconnect, device number 26 [ 230.803397][ T8884] FAULT_INJECTION: forcing a failure. [ 230.803397][ T8884] name failslab, interval 1, probability 0, space 0, times 0 [ 230.817727][ T8884] CPU: 0 UID: 0 PID: 8884 Comm: syz.4.1011 Not tainted syzkaller #0 PREEMPT(full) [ 230.817758][ T8884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 230.817772][ T8884] Call Trace: [ 230.817780][ T8884] [ 230.817788][ T8884] dump_stack_lvl+0x189/0x250 [ 230.817825][ T8884] ? __pfx____ratelimit+0x10/0x10 [ 230.817854][ T8884] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.817886][ T8884] ? __pfx__printk+0x10/0x10 [ 230.817918][ T8884] ? __pfx___might_resched+0x10/0x10 [ 230.817945][ T8884] ? lock_acquire+0x5f/0x360 [ 230.817971][ T8884] should_fail_ex+0x414/0x560 [ 230.817993][ T8884] should_failslab+0xa8/0x100 [ 230.818019][ T8884] __kmalloc_noprof+0xcb/0x4f0 [ 230.818040][ T8884] ? iter_file_splice_write+0x1c6/0x10e0 [ 230.818071][ T8884] iter_file_splice_write+0x1c6/0x10e0 [ 230.818097][ T8884] ? __vfs_getxattr+0x3f1/0x430 [ 230.818131][ T8884] ? cap_inode_need_killpriv+0x51/0x60 [ 230.818156][ T8884] ? bpf_lsm_inode_need_killpriv+0x9/0x20 [ 230.818189][ T8884] ? security_inode_need_killpriv+0x71/0x270 [ 230.818215][ T8884] ? file_remove_privs_flags+0x40d/0x5f0 [ 230.818239][ T8884] ? __pfx_iter_file_splice_write+0x10/0x10 [ 230.818267][ T8884] ? ovl_splice_write+0x43d/0x580 [ 230.818298][ T8884] ? rcu_is_watching+0x15/0xb0 [ 230.818325][ T8884] ? lock_acquire+0x5f/0x360 [ 230.818348][ T8884] ? ovl_path_type+0x197/0x3d0 [ 230.818367][ T8884] ? ovl_real_file_path+0x145/0x310 [ 230.818402][ T8884] backing_file_splice_write+0x3be/0x5e0 [ 230.818427][ T8884] ovl_splice_write+0x43d/0x580 [ 230.818460][ T8884] ? __pfx_ovl_splice_write+0x10/0x10 [ 230.818491][ T8884] ? __pfx_ovl_file_end_write+0x10/0x10 [ 230.818523][ T8884] ? lock_acquire+0x5f/0x360 [ 230.818551][ T8884] ? preempt_count_add+0x91/0x1a0 [ 230.818576][ T8884] ? __pfx_ovl_splice_write+0x10/0x10 [ 230.818614][ T8884] direct_splice_actor+0x101/0x160 [ 230.818643][ T8884] splice_direct_to_actor+0x5a5/0xcc0 [ 230.818685][ T8884] ? __pfx_direct_splice_actor+0x10/0x10 [ 230.818713][ T8884] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 230.818745][ T8884] do_splice_direct+0x181/0x270 [ 230.818773][ T8884] ? __pfx_do_splice_direct+0x10/0x10 [ 230.818799][ T8884] ? common_file_perm+0x1b5/0x230 [ 230.818830][ T8884] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 230.818861][ T8884] ? bpf_lsm_file_permission+0x9/0x20 [ 230.818879][ T8884] ? security_file_permission+0x75/0x290 [ 230.818906][ T8884] ? rw_verify_area+0x255/0x4d0 [ 230.818931][ T8884] do_sendfile+0x4da/0x7e0 [ 230.818962][ T8884] ? rcu_is_watching+0x15/0xb0 [ 230.818992][ T8884] ? __pfx_do_sendfile+0x10/0x10 [ 230.819023][ T8884] ? lock_release+0x4b/0x3e0 [ 230.819046][ T8884] ? __might_fault+0xcc/0x130 [ 230.819070][ T8884] __se_sys_sendfile64+0xd9/0x190 [ 230.819102][ T8884] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 230.819131][ T8884] ? rcu_is_watching+0x15/0xb0 [ 230.819160][ T8884] ? rcu_is_watching+0x15/0xb0 [ 230.819189][ T8884] do_syscall_64+0xfa/0x3b0 [ 230.819219][ T8884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.819240][ T8884] ? clear_bhb_loop+0x60/0xb0 [ 230.819263][ T8884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.819284][ T8884] RIP: 0033:0x7f908a78ebe9 [ 230.819303][ T8884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.819322][ T8884] RSP: 002b:00007f908b66c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 230.819345][ T8884] RAX: ffffffffffffffda RBX: 00007f908a9b5fa0 RCX: 00007f908a78ebe9 [ 230.819362][ T8884] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000003 [ 230.819375][ T8884] RBP: 00007f908b66c090 R08: 0000000000000000 R09: 0000000000000000 [ 230.819388][ T8884] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000002 [ 230.819402][ T8884] R13: 00007f908a9b6038 R14: 00007f908a9b5fa0 R15: 00007ffdf0af6be8 [ 230.819425][ T8884] [ 231.198011][ C0] vkms_vblank_simulate: vblank timer overrun [ 231.281656][ T8891] overlayfs: failed to resolve './file1': -2 [ 231.464968][ T1212] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 231.480507][ T8895] fuse: Unknown parameter 'group_i00000000000000000000' [ 231.524357][ T6747] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 231.626938][ T1212] usb 2-1: config 0 has an invalid descriptor of length 91, skipping remainder of the config [ 231.638016][ T1212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 231.664270][ T1212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 231.677113][ T1212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 231.688961][ T1212] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 231.703663][ T1212] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 231.713227][ T1212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.722661][ T6747] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 231.730956][ T6747] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 231.752613][ T6747] usb 6-1: config 0 interface 0 has no altsetting 0 [ 231.763172][ T6747] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 231.784795][ T1212] usb 2-1: config 0 descriptor?? [ 231.793856][ T6747] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 231.814085][ T6747] usb 6-1: Product: syz [ 231.824331][ T6747] usb 6-1: Manufacturer: syz [ 231.828994][ T6747] usb 6-1: SerialNumber: syz [ 231.847059][ T6747] usb 6-1: config 0 descriptor?? [ 231.858915][ T6747] hub 6-1:0.0: bad descriptor, ignoring hub [ 231.874456][ T6747] hub 6-1:0.0: probe with driver hub failed with error -5 [ 231.884771][ T6747] usb 6-1: selecting invalid altsetting 0 [ 231.904633][ T1212] rc_core: IR keymap rc-hauppauge not found [ 231.919821][ T1212] Registered IR keymap rc-empty [ 231.930034][ T1212] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 231.964246][ T1212] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 231.993684][ T8886] 9p: Unknown parameter '6ýéúœ™wfdno' [ 232.026185][ T1212] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 232.049180][ T8911] FAULT_INJECTION: forcing a failure. [ 232.049180][ T8911] name failslab, interval 1, probability 0, space 0, times 0 [ 232.065118][ T1212] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input11 [ 232.069159][ T8911] CPU: 0 UID: 0 PID: 8911 Comm: syz.4.1022 Not tainted syzkaller #0 PREEMPT(full) [ 232.069193][ T8911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 232.069208][ T8911] Call Trace: [ 232.069217][ T8911] [ 232.069226][ T8911] dump_stack_lvl+0x189/0x250 [ 232.069272][ T8911] ? __pfx____ratelimit+0x10/0x10 [ 232.069305][ T8911] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.069339][ T8911] ? __pfx__printk+0x10/0x10 [ 232.069372][ T8911] ? __pfx___might_resched+0x10/0x10 [ 232.069403][ T8911] ? lock_acquire+0x5f/0x360 [ 232.069430][ T8911] should_fail_ex+0x414/0x560 [ 232.069455][ T8911] should_failslab+0xa8/0x100 [ 232.069484][ T8911] __kmalloc_noprof+0xcb/0x4f0 [ 232.069507][ T8911] ? iter_file_splice_write+0x1c6/0x10e0 [ 232.069541][ T8911] iter_file_splice_write+0x1c6/0x10e0 [ 232.069571][ T8911] ? __vfs_getxattr+0x3f1/0x430 [ 232.069606][ T8911] ? cap_inode_need_killpriv+0x51/0x60 [ 232.069634][ T8911] ? bpf_lsm_inode_need_killpriv+0x9/0x20 [ 232.069669][ T8911] ? security_inode_need_killpriv+0x71/0x270 [ 232.069698][ T8911] ? file_remove_privs_flags+0x40d/0x5f0 [ 232.069734][ T8911] ? __pfx_iter_file_splice_write+0x10/0x10 [ 232.069765][ T8911] ? ovl_splice_write+0x43d/0x580 [ 232.069797][ T8911] ? rcu_is_watching+0x15/0xb0 [ 232.069828][ T8911] ? lock_acquire+0x5f/0x360 [ 232.069853][ T8911] ? ovl_path_type+0x197/0x3d0 [ 232.069873][ T8911] ? ovl_real_file_path+0x145/0x310 [ 232.069910][ T8911] backing_file_splice_write+0x3be/0x5e0 [ 232.069940][ T8911] ovl_splice_write+0x43d/0x580 [ 232.069976][ T8911] ? __pfx_ovl_splice_write+0x10/0x10 [ 232.070010][ T8911] ? __pfx_ovl_file_end_write+0x10/0x10 [ 232.070044][ T8911] ? lock_acquire+0x5f/0x360 [ 232.070074][ T8911] ? preempt_count_add+0x91/0x1a0 [ 232.070103][ T8911] ? __pfx_ovl_splice_write+0x10/0x10 [ 232.070137][ T8911] direct_splice_actor+0x101/0x160 [ 232.070168][ T8911] splice_direct_to_actor+0x5a5/0xcc0 [ 232.070208][ T8911] ? __pfx_direct_splice_actor+0x10/0x10 [ 232.070237][ T8911] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 232.070273][ T8911] do_splice_direct+0x181/0x270 [ 232.070304][ T8911] ? __pfx_do_splice_direct+0x10/0x10 [ 232.070332][ T8911] ? common_file_perm+0x1b5/0x230 [ 232.070367][ T8911] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 232.070401][ T8911] ? bpf_lsm_file_permission+0x9/0x20 [ 232.070421][ T8911] ? security_file_permission+0x75/0x290 [ 232.070448][ T8911] ? rw_verify_area+0x255/0x4d0 [ 232.070477][ T8911] do_sendfile+0x4da/0x7e0 [ 232.070509][ T8911] ? rcu_is_watching+0x15/0xb0 [ 232.070543][ T8911] ? __pfx_do_sendfile+0x10/0x10 [ 232.070577][ T8911] ? lock_release+0x4b/0x3e0 [ 232.070602][ T8911] ? __might_fault+0xcc/0x130 [ 232.070629][ T8911] __se_sys_sendfile64+0xd9/0x190 [ 232.070663][ T8911] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 232.070694][ T8911] ? rcu_is_watching+0x15/0xb0 [ 232.070733][ T8911] ? rcu_is_watching+0x15/0xb0 [ 232.070764][ T8911] do_syscall_64+0xfa/0x3b0 [ 232.070798][ T8911] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.070822][ T8911] ? clear_bhb_loop+0x60/0xb0 [ 232.070848][ T8911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.070871][ T8911] RIP: 0033:0x7f908a78ebe9 [ 232.070892][ T8911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.070914][ T8911] RSP: 002b:00007f908b66c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 232.070940][ T8911] RAX: ffffffffffffffda RBX: 00007f908a9b5fa0 RCX: 00007f908a78ebe9 [ 232.070958][ T8911] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000003 [ 232.070971][ T8911] RBP: 00007f908b66c090 R08: 0000000000000000 R09: 0000000000000000 [ 232.070986][ T8911] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000002 [ 232.071001][ T8911] R13: 00007f908a9b6038 R14: 00007f908a9b5fa0 R15: 00007ffdf0af6be8 [ 232.071027][ T8911] [ 232.264336][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 232.282791][ T1212] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 232.438801][ T9] usb 3-1: config 4 has an invalid interface number: 62 but max is 3 [ 232.474523][ T1212] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 232.480266][ T9] usb 3-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 232.496325][ T9] usb 3-1: config 4 has an invalid interface number: 144 but max is 3 [ 232.504696][ T9] usb 3-1: config 4 has an invalid interface number: 150 but max is 3 [ 232.512920][ T9] usb 3-1: config 4 has an invalid interface number: 134 but max is 3 [ 232.523800][ T9] usb 3-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 232.532597][ T9] usb 3-1: config 4 has an invalid interface number: 246 but max is 3 [ 232.541138][ T9] usb 3-1: config 4 has an invalid interface number: 71 but max is 3 [ 232.541619][ T1212] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 232.549479][ T9] usb 3-1: config 4 has 7 interfaces, different from the descriptor's value: 4 [ 232.565480][ T9] usb 3-1: config 4 has no interface number 0 [ 232.571766][ T9] usb 3-1: config 4 has no interface number 2 [ 232.577962][ T9] usb 3-1: config 4 has no interface number 3 [ 232.584375][ T9] usb 3-1: config 4 has no interface number 4 [ 232.590499][ T9] usb 3-1: config 4 has no interface number 5 [ 232.596709][ T9] usb 3-1: config 4 has no interface number 6 [ 232.602876][ T9] usb 3-1: config 4 interface 62 altsetting 179 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 232.618988][ T1212] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 232.623674][ T9] usb 3-1: config 4 interface 62 altsetting 179 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 232.641622][ T9] usb 3-1: config 4 interface 62 altsetting 179 has a duplicate endpoint with address 0xB, skipping [ 232.657337][ T1212] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 232.695098][ T1212] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 232.707728][ T9] usb 3-1: config 4 interface 62 altsetting 179 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 232.721642][ T9] usb 3-1: config 4 interface 62 altsetting 179 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 232.737339][ T9] usb 3-1: config 4 interface 62 altsetting 179 has a duplicate endpoint with address 0xD, skipping [ 232.743511][ T1212] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 232.748794][ T9] usb 3-1: config 4 interface 144 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 232.755057][ T8888] usb 6-1: reset high-speed USB device number 4 using dummy_hcd [ 232.770853][ T9] usb 3-1: too many endpoints for config 4 interface 1 altsetting 2: 94, using maximum allowed: 30 [ 232.788260][ T9] usb 3-1: config 4 interface 1 altsetting 2 has an endpoint descriptor with address 0x1E, changing to 0xE [ 232.800085][ T8888] usb 6-1: device reset changed ep0 maxpacket size! [ 232.800683][ T9] usb 3-1: config 4 interface 1 altsetting 2 has a duplicate endpoint with address 0xE, skipping [ 232.811805][ T1212] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 232.818199][ T9] usb 3-1: config 4 interface 1 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 232.836772][ T5942] usb 6-1: USB disconnect, device number 4 [ 232.853199][ T8921] overlayfs: failed to get inode (-116) [ 232.859305][ T8921] overlayfs: failed to get inode (-116) [ 232.868641][ T9] usb 3-1: config 4 interface 1 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 232.869988][ T1212] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 232.881994][ T9] usb 3-1: config 4 interface 1 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 232.915706][ T8923] fuse: Unknown parameter 'group_i00000000000000000000' [ 232.919195][ T9] usb 3-1: config 4 interface 1 altsetting 2 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 232.936067][ T1212] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 232.937858][ T9] usb 3-1: config 4 interface 1 altsetting 2 has a duplicate endpoint with address 0xB, skipping [ 232.953918][ T9] usb 3-1: config 4 interface 1 altsetting 2 endpoint 0xA has invalid maxpacket 2047, setting to 1024 [ 232.965208][ T9] usb 3-1: config 4 interface 1 altsetting 2 has a duplicate endpoint with address 0xA, skipping [ 232.982260][ T9] usb 3-1: config 4 interface 1 altsetting 2 has a duplicate endpoint with address 0xC, skipping [ 232.993800][ T1212] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 232.999053][ T9] usb 3-1: config 4 interface 1 altsetting 2 has 12 endpoint descriptors, different from the interface descriptor's value: 94 [ 233.015182][ T9] usb 3-1: config 4 interface 150 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 233.017174][ T1212] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 233.034356][ T5942] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 233.040273][ T1212] usb 2-1: USB disconnect, device number 31 [ 233.046511][ T9] usb 3-1: config 4 interface 150 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 233.059290][ T9] usb 3-1: config 4 interface 150 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 233.070656][ T9] usb 3-1: config 4 interface 150 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 233.081814][ T9] usb 3-1: config 4 interface 150 altsetting 7 has 4 endpoint descriptors, different from the interface descriptor's value: 14 [ 233.095756][ T9] usb 3-1: too many endpoints for config 4 interface 134 altsetting 59: 128, using maximum allowed: 30 [ 233.107981][ T9] usb 3-1: config 4 interface 134 altsetting 59 has a duplicate endpoint with address 0xE, skipping [ 233.122282][ T9] usb 3-1: config 4 interface 134 altsetting 59 has an invalid descriptor for endpoint zero, skipping [ 233.134867][ T9] usb 3-1: config 4 interface 134 altsetting 59 has a duplicate endpoint with address 0xB, skipping [ 233.146359][ T9] usb 3-1: config 4 interface 134 altsetting 59 has an invalid descriptor for endpoint zero, skipping [ 233.170351][ T9] usb 3-1: config 4 interface 134 altsetting 59 has a duplicate endpoint with address 0xD, skipping [ 233.181588][ T9] usb 3-1: config 4 interface 134 altsetting 59 has a duplicate endpoint with address 0x8, skipping [ 233.214288][ T5942] usb 6-1: Using ep0 maxpacket: 16 [ 233.219611][ T9] usb 3-1: config 4 interface 134 altsetting 59 has a duplicate endpoint with address 0xC, skipping [ 233.233045][ T9] usb 3-1: config 4 interface 134 altsetting 59 has 10 endpoint descriptors, different from the interface descriptor's value: 128 [ 233.233165][ T5942] usb 6-1: config 0 has no interfaces? [ 233.253183][ T9] usb 3-1: config 4 interface 246 altsetting 9 has a duplicate endpoint with address 0x2, skipping [ 233.265449][ T9] usb 3-1: config 4 interface 246 altsetting 9 has an endpoint descriptor with address 0xCE, changing to 0x8E [ 233.277439][ T9] usb 3-1: config 4 interface 246 altsetting 9 has a duplicate endpoint with address 0x8E, skipping [ 233.290183][ T9] usb 3-1: config 4 interface 246 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 233.301286][ T9] usb 3-1: config 4 interface 246 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 233.314076][ T9] usb 3-1: config 4 interface 246 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 233.325716][ T5942] usb 6-1: New USB device found, idVendor=1608, idProduct=0212, bcdDevice=70.17 [ 233.335800][ T9] usb 3-1: config 4 interface 246 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 233.347398][ T5942] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.355611][ T5942] usb 6-1: Product: syz [ 233.359832][ T5942] usb 6-1: Manufacturer: syz [ 233.364622][ T9] usb 3-1: config 4 interface 246 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 233.375597][ T5942] usb 6-1: SerialNumber: syz [ 233.381029][ T9] usb 3-1: config 4 interface 246 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 233.392691][ T5942] usb 6-1: config 0 descriptor?? [ 233.397908][ T9] usb 3-1: config 4 interface 246 altsetting 9 has a duplicate endpoint with address 0xB, skipping [ 233.410962][ T9] usb 3-1: config 4 interface 246 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 233.422175][ T9] usb 3-1: config 4 interface 246 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 233.433058][ T9] usb 3-1: config 4 interface 246 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 233.444836][ T9] usb 3-1: config 4 interface 246 altsetting 9 has 12 endpoint descriptors, different from the interface descriptor's value: 15 [ 233.459193][ T9] usb 3-1: too many endpoints for config 4 interface 71 altsetting 96: 121, using maximum allowed: 30 [ 233.470660][ T9] usb 3-1: config 4 interface 71 altsetting 96 has a duplicate endpoint with address 0x9, skipping [ 233.482983][ T9] usb 3-1: config 4 interface 71 altsetting 96 has a duplicate endpoint with address 0x7, skipping [ 233.495658][ T9] usb 3-1: config 4 interface 71 altsetting 96 has an invalid descriptor for endpoint zero, skipping [ 233.506938][ T9] usb 3-1: config 4 interface 71 altsetting 96 has a duplicate endpoint with address 0x2, skipping [ 233.519260][ T9] usb 3-1: config 4 interface 71 altsetting 96 has 4 endpoint descriptors, different from the interface descriptor's value: 121 [ 233.532934][ T9] usb 3-1: config 4 interface 62 has no altsetting 0 [ 233.541303][ T9] usb 3-1: config 4 interface 144 has no altsetting 0 [ 233.549360][ T9] usb 3-1: config 4 interface 1 has no altsetting 0 [ 233.556339][ T9] usb 3-1: config 4 interface 150 has no altsetting 0 [ 233.563391][ T9] usb 3-1: config 4 interface 134 has no altsetting 0 [ 233.571212][ T9] usb 3-1: config 4 interface 246 has no altsetting 0 [ 233.583200][ T9] usb 3-1: config 4 interface 71 has no altsetting 0 [ 233.619374][ T5848] usb 6-1: USB disconnect, device number 5 [ 233.820157][ T8936] FAULT_INJECTION: forcing a failure. [ 233.820157][ T8936] name failslab, interval 1, probability 0, space 0, times 0 [ 233.834275][ T8936] CPU: 0 UID: 0 PID: 8936 Comm: syz.1.1031 Not tainted syzkaller #0 PREEMPT(full) [ 233.834308][ T8936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 233.834326][ T8936] Call Trace: [ 233.834335][ T8936] [ 233.834344][ T8936] dump_stack_lvl+0x189/0x250 [ 233.834383][ T8936] ? __pfx____ratelimit+0x10/0x10 [ 233.834413][ T8936] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.834444][ T8936] ? __pfx__printk+0x10/0x10 [ 233.834478][ T8936] ? __pfx___might_resched+0x10/0x10 [ 233.834505][ T8936] ? lock_acquire+0x5f/0x360 [ 233.834531][ T8936] should_fail_ex+0x414/0x560 [ 233.834554][ T8936] should_failslab+0xa8/0x100 [ 233.834580][ T8936] __kmalloc_noprof+0xcb/0x4f0 [ 233.834602][ T8936] ? iter_file_splice_write+0x1c6/0x10e0 [ 233.834632][ T8936] iter_file_splice_write+0x1c6/0x10e0 [ 233.834659][ T8936] ? __vfs_getxattr+0x3f1/0x430 [ 233.834692][ T8936] ? cap_inode_need_killpriv+0x51/0x60 [ 233.834718][ T8936] ? bpf_lsm_inode_need_killpriv+0x9/0x20 [ 233.834753][ T8936] ? security_inode_need_killpriv+0x71/0x270 [ 233.834779][ T8936] ? file_remove_privs_flags+0x40d/0x5f0 [ 233.834803][ T8936] ? __pfx_iter_file_splice_write+0x10/0x10 [ 233.834831][ T8936] ? ovl_splice_write+0x43d/0x580 [ 233.834862][ T8936] ? rcu_is_watching+0x15/0xb0 [ 233.834891][ T8936] ? lock_acquire+0x5f/0x360 [ 233.834913][ T8936] ? ovl_path_type+0x197/0x3d0 [ 233.834933][ T8936] ? ovl_real_file_path+0x145/0x310 [ 233.834967][ T8936] backing_file_splice_write+0x3be/0x5e0 [ 233.834994][ T8936] ovl_splice_write+0x43d/0x580 [ 233.835029][ T8936] ? __pfx_ovl_splice_write+0x10/0x10 [ 233.835059][ T8936] ? __pfx_ovl_file_end_write+0x10/0x10 [ 233.835091][ T8936] ? lock_acquire+0x5f/0x360 [ 233.835119][ T8936] ? preempt_count_add+0x91/0x1a0 [ 233.835145][ T8936] ? __pfx_ovl_splice_write+0x10/0x10 [ 233.835177][ T8936] direct_splice_actor+0x101/0x160 [ 233.835206][ T8936] splice_direct_to_actor+0x5a5/0xcc0 [ 233.835244][ T8936] ? __pfx_direct_splice_actor+0x10/0x10 [ 233.835281][ T8936] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 233.835312][ T8936] do_splice_direct+0x181/0x270 [ 233.835337][ T8936] ? __pfx_do_splice_direct+0x10/0x10 [ 233.835362][ T8936] ? common_file_perm+0x1b5/0x230 [ 233.835391][ T8936] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 233.835418][ T8936] ? bpf_lsm_file_permission+0x9/0x20 [ 233.835436][ T8936] ? security_file_permission+0x75/0x290 [ 233.835459][ T8936] ? rw_verify_area+0x255/0x4d0 [ 233.835485][ T8936] do_sendfile+0x4da/0x7e0 [ 233.835514][ T8936] ? rcu_is_watching+0x15/0xb0 [ 233.835544][ T8936] ? __pfx_do_sendfile+0x10/0x10 [ 233.835572][ T8936] ? lock_release+0x4b/0x3e0 [ 233.835593][ T8936] ? __might_fault+0xcc/0x130 [ 233.835617][ T8936] __se_sys_sendfile64+0xd9/0x190 [ 233.835646][ T8936] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 233.835673][ T8936] ? rcu_is_watching+0x15/0xb0 [ 233.835702][ T8936] ? rcu_is_watching+0x15/0xb0 [ 233.835730][ T8936] do_syscall_64+0xfa/0x3b0 [ 233.835762][ T8936] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.835783][ T8936] ? clear_bhb_loop+0x60/0xb0 [ 233.835807][ T8936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.835828][ T8936] RIP: 0033:0x7faa1bf8ebe9 [ 233.835848][ T8936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.835868][ T8936] RSP: 002b:00007faa1cea0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 233.835892][ T8936] RAX: ffffffffffffffda RBX: 00007faa1c1b5fa0 RCX: 00007faa1bf8ebe9 [ 233.835908][ T8936] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000003 [ 233.835922][ T8936] RBP: 00007faa1cea0090 R08: 0000000000000000 R09: 0000000000000000 [ 233.835935][ T8936] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000002 [ 233.835949][ T8936] R13: 00007faa1c1b6038 R14: 00007faa1c1b5fa0 R15: 00007ffd649219a8 [ 233.835973][ T8936] [ 234.361127][ T8942] qnx4: no qnx4 filesystem (no root dir). [ 234.395165][ T8944] netlink: 'syz.1.1034': attribute type 4 has an invalid length. [ 234.511157][ T8952] fuse: Unknown parameter 'group_i00000000000000000000' [ 235.031284][ T9] usb 3-1: New USB device found, idVendor=1b3d, idProduct=0114, bcdDevice=19.1c [ 235.046086][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.065154][ T9] usb 3-1: Product: Ы [ 235.069369][ T9] usb 3-1: Manufacturer: 혉剈◆░ë°ê©™è¡‚é·è•ºè®«á¹Šë Šê«¤äª©ï¥¿ç¼ªê¼ ã ¨á«¿ä¾Ÿî«îˆ“ᬧ報 [ 235.092735][ T8969] FAULT_INJECTION: forcing a failure. [ 235.092735][ T8969] name failslab, interval 1, probability 0, space 0, times 0 [ 235.114952][ T8969] CPU: 1 UID: 0 PID: 8969 Comm: syz.1.1042 Not tainted syzkaller #0 PREEMPT(full) [ 235.114988][ T8969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 235.115002][ T8969] Call Trace: [ 235.115010][ T8969] [ 235.115018][ T8969] dump_stack_lvl+0x189/0x250 [ 235.115056][ T8969] ? __pfx____ratelimit+0x10/0x10 [ 235.115084][ T8969] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.115132][ T8969] ? __pfx__printk+0x10/0x10 [ 235.115164][ T8969] ? __pfx___might_resched+0x10/0x10 [ 235.115192][ T8969] ? lock_acquire+0x5f/0x360 [ 235.115219][ T8969] should_fail_ex+0x414/0x560 [ 235.115243][ T8969] should_failslab+0xa8/0x100 [ 235.115268][ T8969] __kmalloc_noprof+0xcb/0x4f0 [ 235.115291][ T8969] ? iter_file_splice_write+0x1c6/0x10e0 [ 235.115323][ T8969] iter_file_splice_write+0x1c6/0x10e0 [ 235.115359][ T8969] ? __vfs_getxattr+0x3f1/0x430 [ 235.115392][ T8969] ? cap_inode_need_killpriv+0x51/0x60 [ 235.115419][ T8969] ? bpf_lsm_inode_need_killpriv+0x9/0x20 [ 235.115454][ T8969] ? security_inode_need_killpriv+0x71/0x270 [ 235.115481][ T8969] ? file_remove_privs_flags+0x40d/0x5f0 [ 235.115506][ T8969] ? __pfx_iter_file_splice_write+0x10/0x10 [ 235.115535][ T8969] ? ovl_splice_write+0x43d/0x580 [ 235.115566][ T8969] ? rcu_is_watching+0x15/0xb0 [ 235.115595][ T8969] ? lock_acquire+0x5f/0x360 [ 235.115618][ T8969] ? ovl_path_type+0x197/0x3d0 [ 235.115637][ T8969] ? ovl_real_file_path+0x145/0x310 [ 235.115672][ T8969] backing_file_splice_write+0x3be/0x5e0 [ 235.115699][ T8969] ovl_splice_write+0x43d/0x580 [ 235.115733][ T8969] ? __pfx_ovl_splice_write+0x10/0x10 [ 235.115765][ T8969] ? __pfx_ovl_file_end_write+0x10/0x10 [ 235.115796][ T8969] ? lock_acquire+0x5f/0x360 [ 235.115824][ T8969] ? preempt_count_add+0x91/0x1a0 [ 235.115849][ T8969] ? __pfx_ovl_splice_write+0x10/0x10 [ 235.115880][ T8969] direct_splice_actor+0x101/0x160 [ 235.115911][ T8969] splice_direct_to_actor+0x5a5/0xcc0 [ 235.115948][ T8969] ? __pfx_direct_splice_actor+0x10/0x10 [ 235.115976][ T8969] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 235.116009][ T8969] do_splice_direct+0x181/0x270 [ 235.116038][ T8969] ? __pfx_do_splice_direct+0x10/0x10 [ 235.116064][ T8969] ? common_file_perm+0x1b5/0x230 [ 235.116097][ T8969] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 235.116129][ T8969] ? bpf_lsm_file_permission+0x9/0x20 [ 235.116148][ T8969] ? security_file_permission+0x75/0x290 [ 235.116174][ T8969] ? rw_verify_area+0x255/0x4d0 [ 235.116201][ T8969] do_sendfile+0x4da/0x7e0 [ 235.116230][ T8969] ? rcu_is_watching+0x15/0xb0 [ 235.116261][ T8969] ? __pfx_do_sendfile+0x10/0x10 [ 235.116293][ T8969] ? lock_release+0x4b/0x3e0 [ 235.116316][ T8969] ? __might_fault+0xcc/0x130 [ 235.116348][ T8969] __se_sys_sendfile64+0xd9/0x190 [ 235.116379][ T8969] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 235.116409][ T8969] ? rcu_is_watching+0x15/0xb0 [ 235.116439][ T8969] ? rcu_is_watching+0x15/0xb0 [ 235.116467][ T8969] do_syscall_64+0xfa/0x3b0 [ 235.116499][ T8969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.116520][ T8969] ? clear_bhb_loop+0x60/0xb0 [ 235.116544][ T8969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.116564][ T8969] RIP: 0033:0x7faa1bf8ebe9 [ 235.116585][ T8969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.116605][ T8969] RSP: 002b:00007faa1cea0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 235.116630][ T8969] RAX: ffffffffffffffda RBX: 00007faa1c1b5fa0 RCX: 00007faa1bf8ebe9 [ 235.116646][ T8969] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000003 [ 235.116660][ T8969] RBP: 00007faa1cea0090 R08: 0000000000000000 R09: 0000000000000000 [ 235.116673][ T8969] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000002 [ 235.116686][ T8969] R13: 00007faa1c1b6038 R14: 00007faa1c1b5fa0 R15: 00007ffd649219a8 [ 235.116709][ T8969] [ 235.118889][ T9] usb 3-1: can't set config #4, error -71 [ 235.254354][ T8974] overlayfs: failed to resolve './file0': -2 [ 235.264729][ T9] usb 3-1: USB disconnect, device number 27 [ 235.456382][ T8976] fuse: Unknown parameter 'group_id00000000000000000000' [ 236.234287][ T44] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 236.385290][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 236.399988][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.429741][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.448775][ T9001] FAULT_INJECTION: forcing a failure. [ 236.448775][ T9001] name failslab, interval 1, probability 0, space 0, times 0 [ 236.461551][ T9001] CPU: 0 UID: 0 PID: 9001 Comm: syz.2.1053 Not tainted syzkaller #0 PREEMPT(full) [ 236.461581][ T9001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 236.461594][ T9001] Call Trace: [ 236.461602][ T9001] [ 236.461610][ T9001] dump_stack_lvl+0x189/0x250 [ 236.461650][ T9001] ? __pfx____ratelimit+0x10/0x10 [ 236.461679][ T9001] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.461711][ T9001] ? __pfx__printk+0x10/0x10 [ 236.461743][ T9001] ? __pfx___might_resched+0x10/0x10 [ 236.461770][ T9001] ? lock_acquire+0x5f/0x360 [ 236.461796][ T9001] should_fail_ex+0x414/0x560 [ 236.461819][ T9001] should_failslab+0xa8/0x100 [ 236.461845][ T9001] __kmalloc_noprof+0xcb/0x4f0 [ 236.461867][ T9001] ? iter_file_splice_write+0x1c6/0x10e0 [ 236.461898][ T9001] iter_file_splice_write+0x1c6/0x10e0 [ 236.461924][ T9001] ? __vfs_getxattr+0x3f1/0x430 [ 236.461956][ T9001] ? cap_inode_need_killpriv+0x51/0x60 [ 236.461982][ T9001] ? bpf_lsm_inode_need_killpriv+0x9/0x20 [ 236.462015][ T9001] ? security_inode_need_killpriv+0x71/0x270 [ 236.462041][ T9001] ? file_remove_privs_flags+0x40d/0x5f0 [ 236.462065][ T9001] ? __pfx_iter_file_splice_write+0x10/0x10 [ 236.462093][ T9001] ? ovl_splice_write+0x43d/0x580 [ 236.462125][ T9001] ? rcu_is_watching+0x15/0xb0 [ 236.462152][ T9001] ? lock_acquire+0x5f/0x360 [ 236.462174][ T9001] ? ovl_path_type+0x197/0x3d0 [ 236.462194][ T9001] ? ovl_real_file_path+0x145/0x310 [ 236.462238][ T9001] backing_file_splice_write+0x3be/0x5e0 [ 236.462265][ T9001] ovl_splice_write+0x43d/0x580 [ 236.462298][ T9001] ? __pfx_ovl_splice_write+0x10/0x10 [ 236.462328][ T9001] ? __pfx_ovl_file_end_write+0x10/0x10 [ 236.462358][ T9001] ? lock_acquire+0x5f/0x360 [ 236.462385][ T9001] ? preempt_count_add+0x91/0x1a0 [ 236.462411][ T9001] ? __pfx_ovl_splice_write+0x10/0x10 [ 236.462441][ T9001] direct_splice_actor+0x101/0x160 [ 236.462470][ T9001] splice_direct_to_actor+0x5a5/0xcc0 [ 236.462507][ T9001] ? __pfx_direct_splice_actor+0x10/0x10 [ 236.462533][ T9001] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 236.462565][ T9001] do_splice_direct+0x181/0x270 [ 236.462593][ T9001] ? __pfx_do_splice_direct+0x10/0x10 [ 236.462618][ T9001] ? common_file_perm+0x1b5/0x230 [ 236.462651][ T9001] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 236.462682][ T9001] ? bpf_lsm_file_permission+0x9/0x20 [ 236.462700][ T9001] ? security_file_permission+0x75/0x290 [ 236.462726][ T9001] ? rw_verify_area+0x255/0x4d0 [ 236.462753][ T9001] do_sendfile+0x4da/0x7e0 [ 236.462783][ T9001] ? rcu_is_watching+0x15/0xb0 [ 236.462814][ T9001] ? __pfx_do_sendfile+0x10/0x10 [ 236.462844][ T9001] ? lock_release+0x4b/0x3e0 [ 236.462867][ T9001] ? __might_fault+0xcc/0x130 [ 236.462891][ T9001] __se_sys_sendfile64+0xd9/0x190 [ 236.462921][ T9001] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 236.462950][ T9001] ? rcu_is_watching+0x15/0xb0 [ 236.462979][ T9001] ? rcu_is_watching+0x15/0xb0 [ 236.463007][ T9001] do_syscall_64+0xfa/0x3b0 [ 236.463038][ T9001] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.463059][ T9001] ? clear_bhb_loop+0x60/0xb0 [ 236.463083][ T9001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.463103][ T9001] RIP: 0033:0x7fa4e8d8ebe9 [ 236.463121][ T9001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.463140][ T9001] RSP: 002b:00007fa4e9b94038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 236.463164][ T9001] RAX: ffffffffffffffda RBX: 00007fa4e8fb5fa0 RCX: 00007fa4e8d8ebe9 [ 236.463180][ T9001] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000003 [ 236.463193][ T9001] RBP: 00007fa4e9b94090 R08: 0000000000000000 R09: 0000000000000000 [ 236.463207][ T9001] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000002 [ 236.463227][ T9001] R13: 00007fa4e8fb6038 R14: 00007fa4e8fb5fa0 R15: 00007ffe9b4335a8 [ 236.463251][ T9001] [ 236.466816][ T44] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 236.546320][ T9003] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1054'. [ 236.547489][ T44] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 236.553041][ T9003] NILFS (rnullb0): couldn't find nilfs on the device [ 236.558821][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.919868][ T44] usb 2-1: config 0 descriptor?? [ 236.929066][ T9012] fuse: Unknown parameter 'group_id00000000000000000000' [ 236.968190][ T9013] erofs (device rnullb0): cannot find valid erofs superblock [ 236.992748][ T9013] erofs (device rnullb0): cannot find valid erofs superblock [ 237.257532][ T9027] hpfs: Bad magic ... probably not HPFS [ 237.267978][ T9027] random: crng reseeded on system resumption [ 237.334294][ T44] hid_parser_main: 59 callbacks suppressed [ 237.334329][ T44] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 237.337663][ T9029] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 237.340618][ T44] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 237.347497][ T9029] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 237.354359][ T9029] vhci_hcd vhci_hcd.0: Device attached [ 237.390803][ T44] microsoft 0003:045E:07DA.000C: ignoring exceeding usage max [ 237.404810][ T44] microsoft 0003:045E:07DA.000C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 237.445608][ T44] microsoft 0003:045E:07DA.000C: no inputs found [ 237.452999][ T44] microsoft 0003:045E:07DA.000C: could not initialize ff, continuing anyway [ 237.467394][ T9030] vhci_hcd: connection closed [ 237.468375][ T13] vhci_hcd: stop threads [ 237.477994][ T13] vhci_hcd: release socket [ 237.507281][ T13] vhci_hcd: disconnect device [ 237.535186][ T5942] vhci_hcd: vhci_device speed not set [ 237.575928][ T44] usb 2-1: USB disconnect, device number 32 [ 237.593756][ T9036] FAULT_INJECTION: forcing a failure. [ 237.593756][ T9036] name failslab, interval 1, probability 0, space 0, times 0 [ 237.616044][ T9036] CPU: 1 UID: 0 PID: 9036 Comm: syz.5.1064 Not tainted syzkaller #0 PREEMPT(full) [ 237.616072][ T9036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 237.616085][ T9036] Call Trace: [ 237.616093][ T9036] [ 237.616101][ T9036] dump_stack_lvl+0x189/0x250 [ 237.616136][ T9036] ? __pfx____ratelimit+0x10/0x10 [ 237.616179][ T9036] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.616209][ T9036] ? __pfx__printk+0x10/0x10 [ 237.616241][ T9036] ? __pfx___might_resched+0x10/0x10 [ 237.616268][ T9036] ? lock_acquire+0x5f/0x360 [ 237.616293][ T9036] should_fail_ex+0x414/0x560 [ 237.616315][ T9036] should_failslab+0xa8/0x100 [ 237.616341][ T9036] __kmalloc_noprof+0xcb/0x4f0 [ 237.616362][ T9036] ? iter_file_splice_write+0x1c6/0x10e0 [ 237.616392][ T9036] iter_file_splice_write+0x1c6/0x10e0 [ 237.616419][ T9036] ? __vfs_getxattr+0x3f1/0x430 [ 237.616452][ T9036] ? cap_inode_need_killpriv+0x51/0x60 [ 237.616477][ T9036] ? bpf_lsm_inode_need_killpriv+0x9/0x20 [ 237.616510][ T9036] ? security_inode_need_killpriv+0x71/0x270 [ 237.616536][ T9036] ? file_remove_privs_flags+0x40d/0x5f0 [ 237.616560][ T9036] ? __pfx_iter_file_splice_write+0x10/0x10 [ 237.616589][ T9036] ? ovl_splice_write+0x43d/0x580 [ 237.616619][ T9036] ? rcu_is_watching+0x15/0xb0 [ 237.616647][ T9036] ? lock_acquire+0x5f/0x360 [ 237.616669][ T9036] ? ovl_path_type+0x197/0x3d0 [ 237.616689][ T9036] ? ovl_real_file_path+0x145/0x310 [ 237.616723][ T9036] backing_file_splice_write+0x3be/0x5e0 [ 237.616749][ T9036] ovl_splice_write+0x43d/0x580 [ 237.616783][ T9036] ? __pfx_ovl_splice_write+0x10/0x10 [ 237.616814][ T9036] ? __pfx_ovl_file_end_write+0x10/0x10 [ 237.616852][ T9036] ? lock_acquire+0x5f/0x360 [ 237.616880][ T9036] ? preempt_count_add+0x91/0x1a0 [ 237.616906][ T9036] ? __pfx_ovl_splice_write+0x10/0x10 [ 237.616938][ T9036] direct_splice_actor+0x101/0x160 [ 237.616968][ T9036] splice_direct_to_actor+0x5a5/0xcc0 [ 237.617004][ T9036] ? __pfx_direct_splice_actor+0x10/0x10 [ 237.617032][ T9036] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 237.617065][ T9036] do_splice_direct+0x181/0x270 [ 237.617092][ T9036] ? __pfx_do_splice_direct+0x10/0x10 [ 237.617118][ T9036] ? common_file_perm+0x1b5/0x230 [ 237.617158][ T9036] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 237.617189][ T9036] ? bpf_lsm_file_permission+0x9/0x20 [ 237.617208][ T9036] ? security_file_permission+0x75/0x290 [ 237.617234][ T9036] ? rw_verify_area+0x255/0x4d0 [ 237.617261][ T9036] do_sendfile+0x4da/0x7e0 [ 237.617292][ T9036] ? rcu_is_watching+0x15/0xb0 [ 237.617323][ T9036] ? __pfx_do_sendfile+0x10/0x10 [ 237.617353][ T9036] ? lock_release+0x4b/0x3e0 [ 237.617375][ T9036] ? __might_fault+0xcc/0x130 [ 237.617399][ T9036] __se_sys_sendfile64+0xd9/0x190 [ 237.617430][ T9036] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 237.617459][ T9036] ? rcu_is_watching+0x15/0xb0 [ 237.617487][ T9036] ? rcu_is_watching+0x15/0xb0 [ 237.617515][ T9036] do_syscall_64+0xfa/0x3b0 [ 237.617545][ T9036] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.617566][ T9036] ? clear_bhb_loop+0x60/0xb0 [ 237.617589][ T9036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.617610][ T9036] RIP: 0033:0x7f621158ebe9 [ 237.617628][ T9036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.617647][ T9036] RSP: 002b:00007f62123b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 237.617671][ T9036] RAX: ffffffffffffffda RBX: 00007f62117b5fa0 RCX: 00007f621158ebe9 [ 237.617686][ T9036] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000003 [ 237.617700][ T9036] RBP: 00007f62123b0090 R08: 0000000000000000 R09: 0000000000000000 [ 237.617713][ T9036] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000002 [ 237.617725][ T9036] R13: 00007f62117b6038 R14: 00007f62117b5fa0 R15: 00007ffd4f422cf8 [ 237.617747][ T9036] [ 238.077054][ T9045] fuse: Unknown parameter 'group_id00000000000000000000' [ 238.384292][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 238.488463][ T9059] netlink: 'syz.1.1073': attribute type 1 has an invalid length. [ 238.496560][ T9059] netlink: 'syz.1.1073': attribute type 2 has an invalid length. [ 238.504811][ T9059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1073'. [ 238.515321][ T9059] openvswitch: netlink: Message has 1 unknown bytes. [ 238.522066][ T9059] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.545632][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 238.572566][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 238.594267][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 238.606454][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 238.634241][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 238.652508][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 238.661884][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.770494][ T9065] FAULT_INJECTION: forcing a failure. [ 238.770494][ T9065] name failslab, interval 1, probability 0, space 0, times 0 [ 238.787345][ T9065] CPU: 1 UID: 0 PID: 9065 Comm: syz.2.1075 Not tainted syzkaller #0 PREEMPT(full) [ 238.787375][ T9065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 238.787389][ T9065] Call Trace: [ 238.787397][ T9065] [ 238.787407][ T9065] dump_stack_lvl+0x189/0x250 [ 238.787444][ T9065] ? __pfx____ratelimit+0x10/0x10 [ 238.787473][ T9065] ? __pfx_dump_stack_lvl+0x10/0x10 [ 238.787504][ T9065] ? __pfx__printk+0x10/0x10 [ 238.787537][ T9065] ? __pfx___might_resched+0x10/0x10 [ 238.787566][ T9065] ? lock_acquire+0x5f/0x360 [ 238.787591][ T9065] should_fail_ex+0x414/0x560 [ 238.787613][ T9065] should_failslab+0xa8/0x100 [ 238.787639][ T9065] __kmalloc_noprof+0xcb/0x4f0 [ 238.787660][ T9065] ? iter_file_splice_write+0x1c6/0x10e0 [ 238.787687][ T9065] iter_file_splice_write+0x1c6/0x10e0 [ 238.787714][ T9065] ? __vfs_getxattr+0x3f1/0x430 [ 238.787747][ T9065] ? cap_inode_need_killpriv+0x51/0x60 [ 238.787773][ T9065] ? bpf_lsm_inode_need_killpriv+0x9/0x20 [ 238.787806][ T9065] ? security_inode_need_killpriv+0x71/0x270 [ 238.787831][ T9065] ? file_remove_privs_flags+0x40d/0x5f0 [ 238.787855][ T9065] ? __pfx_iter_file_splice_write+0x10/0x10 [ 238.787883][ T9065] ? ovl_splice_write+0x43d/0x580 [ 238.787911][ T9065] ? rcu_is_watching+0x15/0xb0 [ 238.787939][ T9065] ? lock_acquire+0x5f/0x360 [ 238.787961][ T9065] ? ovl_path_type+0x197/0x3d0 [ 238.787991][ T9065] ? ovl_real_file_path+0x145/0x310 [ 238.788026][ T9065] backing_file_splice_write+0x3be/0x5e0 [ 238.788052][ T9065] ovl_splice_write+0x43d/0x580 [ 238.788084][ T9065] ? __pfx_ovl_splice_write+0x10/0x10 [ 238.788114][ T9065] ? __pfx_ovl_file_end_write+0x10/0x10 [ 238.788144][ T9065] ? lock_acquire+0x5f/0x360 [ 238.788173][ T9065] ? preempt_count_add+0x91/0x1a0 [ 238.788198][ T9065] ? __pfx_ovl_splice_write+0x10/0x10 [ 238.788228][ T9065] direct_splice_actor+0x101/0x160 [ 238.788259][ T9065] splice_direct_to_actor+0x5a5/0xcc0 [ 238.788297][ T9065] ? __pfx_direct_splice_actor+0x10/0x10 [ 238.788324][ T9065] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 238.788356][ T9065] do_splice_direct+0x181/0x270 [ 238.788383][ T9065] ? __pfx_do_splice_direct+0x10/0x10 [ 238.788409][ T9065] ? common_file_perm+0x1b5/0x230 [ 238.788440][ T9065] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 238.788470][ T9065] ? bpf_lsm_file_permission+0x9/0x20 [ 238.788488][ T9065] ? security_file_permission+0x75/0x290 [ 238.788513][ T9065] ? rw_verify_area+0x255/0x4d0 [ 238.788539][ T9065] do_sendfile+0x4da/0x7e0 [ 238.788569][ T9065] ? rcu_is_watching+0x15/0xb0 [ 238.788599][ T9065] ? __pfx_do_sendfile+0x10/0x10 [ 238.788631][ T9065] ? lock_release+0x4b/0x3e0 [ 238.788655][ T9065] ? __might_fault+0xcc/0x130 [ 238.788681][ T9065] __se_sys_sendfile64+0xd9/0x190 [ 238.788713][ T9065] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 238.788742][ T9065] ? rcu_is_watching+0x15/0xb0 [ 238.788771][ T9065] ? rcu_is_watching+0x15/0xb0 [ 238.788800][ T9065] do_syscall_64+0xfa/0x3b0 [ 238.788832][ T9065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.788853][ T9065] ? clear_bhb_loop+0x60/0xb0 [ 238.788876][ T9065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.788897][ T9065] RIP: 0033:0x7fa4e8d8ebe9 [ 238.788915][ T9065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.788936][ T9065] RSP: 002b:00007fa4e9b94038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 238.788959][ T9065] RAX: ffffffffffffffda RBX: 00007fa4e8fb5fa0 RCX: 00007fa4e8d8ebe9 [ 238.789007][ T9065] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000003 [ 238.789022][ T9065] RBP: 00007fa4e9b94090 R08: 0000000000000000 R09: 0000000000000000 [ 238.789036][ T9065] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000002 [ 238.789048][ T9065] R13: 00007fa4e8fb6038 R14: 00007fa4e8fb5fa0 R15: 00007ffe9b4335a8 [ 238.789072][ T9065] [ 239.181293][ T44] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 239.205634][ T9] usb 6-1: GET_CAPABILITIES returned 0 [ 239.211200][ T9] usbtmc 6-1:16.0: can't read capabilities [ 239.229482][ T9067] fuse: Bad value for 'user_id' [ 239.234426][ T9067] fuse: Bad value for 'user_id' [ 239.288545][ T9071] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 239.354520][ T44] usb 2-1: Using ep0 maxpacket: 8 [ 239.361869][ T44] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 239.371968][ T44] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 239.381999][ T44] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 239.392010][ T44] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 239.405093][ T44] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 239.414368][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.439126][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 239.554259][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 239.554584][ T1212] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 239.629160][ T44] usb 2-1: GET_CAPABILITIES returned 0 [ 239.636444][ T44] usbtmc 2-1:16.0: can't read capabilities [ 239.714251][ T1212] usb 3-1: Using ep0 maxpacket: 8 [ 239.721235][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.734689][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 239.748417][ T1212] usb 3-1: unable to get BOS descriptor or descriptor too short [ 239.748547][ T9] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 239.766025][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 239.774253][ T9] usb 5-1: SerialNumber: syz [ 239.779915][ T1212] usb 3-1: config 17 has an invalid interface number: 8 but max is -1 [ 239.791913][ T1212] usb 3-1: config 17 has 1 interface, different from the descriptor's value: 0 [ 239.801771][ T1212] usb 3-1: config 17 has no interface number 0 [ 239.809303][ T1212] usb 3-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 95, setting to 64 [ 239.820655][ T1212] usb 3-1: config 17 interface 8 has no altsetting 0 [ 239.837885][ T1212] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 239.849149][ T1212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.858334][ T1212] usb 3-1: Product: syz [ 239.862679][ T1212] usb 3-1: Manufacturer: syz [ 239.868470][ T1212] usb 3-1: SerialNumber: syz [ 239.883997][ T9072] program syz.1.1073 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 240.163356][ T9073] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 241.208850][ T44] usb 6-1: USB disconnect, device number 6 [ 241.600992][ T44] usb 2-1: USB disconnect, device number 33 [ 241.840876][ T9091] /dev/rnullb0: Can't open blockdev [ 242.286882][ T9] usb 5-1: 0:2 : does not exist [ 242.340509][ T9] usb 5-1: USB disconnect, device number 23 [ 242.372677][ T6777] udevd[6777]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 242.387158][ T1212] usb 3-1: selecting invalid altsetting 0 [ 242.482976][ T1212] usb 3-1: USB disconnect, device number 28 [ 242.507068][ T9098] fuse: Bad value for 'user_id' [ 242.519714][ T9098] fuse: Bad value for 'user_id' [ 242.537689][ T6777] udevd[6777]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 242.771172][ T9096] FAULT_INJECTION: forcing a failure. [ 242.771172][ T9096] name failslab, interval 1, probability 0, space 0, times 0 [ 242.795192][ T9096] CPU: 1 UID: 0 PID: 9096 Comm: syz.1.1085 Not tainted syzkaller #0 PREEMPT(full) [ 242.795226][ T9096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 242.795241][ T9096] Call Trace: [ 242.795249][ T9096] [ 242.795258][ T9096] dump_stack_lvl+0x189/0x250 [ 242.795298][ T9096] ? __pfx____ratelimit+0x10/0x10 [ 242.795327][ T9096] ? __pfx_dump_stack_lvl+0x10/0x10 [ 242.795358][ T9096] ? __pfx__printk+0x10/0x10 [ 242.795391][ T9096] ? __pfx___might_resched+0x10/0x10 [ 242.795418][ T9096] ? lock_acquire+0x5f/0x360 [ 242.795444][ T9096] should_fail_ex+0x414/0x560 [ 242.795467][ T9096] should_failslab+0xa8/0x100 [ 242.795492][ T9096] __kmalloc_noprof+0xcb/0x4f0 [ 242.795514][ T9096] ? kfree+0x4d/0x440 [ 242.795531][ T9096] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 242.795555][ T9096] tomoyo_realpath_from_path+0xe3/0x5d0 [ 242.795576][ T9096] ? tomoyo_domain+0xd9/0x130 [ 242.795598][ T9096] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 242.795626][ T9096] tomoyo_path_number_perm+0x1e8/0x5a0 [ 242.795653][ T9096] ? lock_release+0x4b/0x3e0 [ 242.795677][ T9096] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 242.795706][ T9096] ? rcu_is_watching+0x15/0xb0 [ 242.795735][ T9096] ? lock_release+0x4b/0x3e0 [ 242.795757][ T9096] ? vfs_write+0x956/0xb30 [ 242.795793][ T9096] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 242.795833][ T9096] ? lock_release+0x4b/0x3e0 [ 242.795860][ T9096] ? __fget_files+0x2a/0x420 [ 242.795888][ T9096] ? __fget_files+0x3a0/0x420 [ 242.795916][ T9096] ? __fget_files+0x2a/0x420 [ 242.795946][ T9096] security_file_ioctl+0xcb/0x2d0 [ 242.795973][ T9096] __se_sys_ioctl+0x47/0x170 [ 242.795996][ T9096] do_syscall_64+0xfa/0x3b0 [ 242.796027][ T9096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.796048][ T9096] ? clear_bhb_loop+0x60/0xb0 [ 242.796071][ T9096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.796091][ T9096] RIP: 0033:0x7faa1bf8ebe9 [ 242.796109][ T9096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.796129][ T9096] RSP: 002b:00007faa1cea0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 242.796152][ T9096] RAX: ffffffffffffffda RBX: 00007faa1c1b5fa0 RCX: 00007faa1bf8ebe9 [ 242.796168][ T9096] RDX: 0000200000000540 RSI: 00000000000007a8 RDI: 0000000000000004 [ 242.796182][ T9096] RBP: 00007faa1cea0090 R08: 0000000000000000 R09: 0000000000000000 [ 242.796196][ T9096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.796209][ T9096] R13: 00007faa1c1b6038 R14: 00007faa1c1b5fa0 R15: 00007ffd649219a8 [ 242.796232][ T9096] [ 242.796242][ T9096] ERROR: Out of memory at tomoyo_realpath_from_path. [ 242.974406][ T9109] ubi7: attaching mtd0 [ 243.083500][ T9109] ubi7: scanning is finished [ 243.090647][ T9109] ubi7: empty MTD device detected [ 243.294407][ T6747] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 243.315297][ T9109] ubi7: attached mtd0 (name "mtdram test device", size 0 MiB) [ 243.386611][ T9109] ubi7: PEB size: 4096 bytes (4 KiB), LEB size: 3519 bytes [ 243.443564][ T9109] ubi7: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 243.468973][ T9123] fuse: Bad value for 'user_id' [ 243.474316][ T6747] usb 5-1: Using ep0 maxpacket: 16 [ 243.480190][ T9109] ubi7: VID header offset: 513 (aligned 513), data offset: 577 [ 243.489431][ T6747] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 78, changing to 10 [ 243.494296][ T9123] fuse: Bad value for 'user_id' [ 243.511889][ T9109] ubi7: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 243.533549][ T9109] ubi7: user volume: 0, internal volumes: 1, max. volumes count: 20 [ 243.541839][ T6747] usb 5-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 243.550962][ T6747] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.564771][ T6747] usb 5-1: config 0 descriptor?? [ 243.587259][ T9109] ubi7: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1511571406 [ 243.632410][ T9109] ubi7: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 243.675806][ T9121] ubi7: background thread "ubi_bgt7d" started, PID 9121 [ 243.985863][ T6747] uclogic 0003:5543:0781.000D: item fetching failed at offset 1/5 [ 244.023643][ T6747] uclogic 0003:5543:0781.000D: parse failed [ 244.031675][ T6747] uclogic 0003:5543:0781.000D: probe with driver uclogic failed with error -22 [ 244.128042][ T9136] NILFS (rnullb0): couldn't find nilfs on the device [ 244.141409][ T9136] NILFS (rnullb0): couldn't find nilfs on the device [ 244.150897][ T9136] NILFS (rnullb0): couldn't find nilfs on the device [ 244.188579][ T9113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.193862][ T9136] NILFS (rnullb0): couldn't find nilfs on the device [ 244.246622][ T9136] NILFS (rnullb0): couldn't find nilfs on the device [ 244.263910][ T9136] NILFS (rnullb0): couldn't find nilfs on the device [ 244.287248][ T9136] NILFS (rnullb0): couldn't find nilfs on the device [ 244.323874][ T9113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.328993][ T9136] NILFS (rnullb0): couldn't find nilfs on the device [ 244.601017][ T9113] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1093' sets config #0 [ 244.625411][ T9113] usb usb1: usbfs: process 9113 (syz.4.1093) did not claim interface 3 before use [ 244.687011][ T9] usb 5-1: USB disconnect, device number 24 [ 245.293372][ T9150] binder: 9149:9150 unknown command 0 [ 245.300322][ T9150] binder: 9149:9150 ioctl c0306201 200000000080 returned -22 [ 245.360928][ T9153] fuse: Bad value for 'fd' [ 245.584406][ T44] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 245.683767][ T9159] block nbd5: shutting down sockets [ 245.758565][ T9158] random: crng reseeded on system resumption [ 245.766102][ T44] usb 5-1: unable to get BOS descriptor or descriptor too short [ 245.773804][ T44] usb 5-1: too many configurations: 255, using maximum allowed: 8 [ 245.789997][ T44] usb 5-1: config 1 has an invalid descriptor of length 226, skipping remainder of the config [ 245.800519][ T44] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 245.814937][ T44] usb 5-1: config 1 interface 1 has no altsetting 0 [ 245.822911][ T44] usb 5-1: config 1 has an invalid descriptor of length 226, skipping remainder of the config [ 245.833992][ T44] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 245.847159][ T981] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 245.855112][ T44] usb 5-1: config 1 interface 1 has no altsetting 0 [ 245.865738][ T44] usb 5-1: config 1 has an invalid descriptor of length 226, skipping remainder of the config [ 245.876476][ T44] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 245.889620][ T44] usb 5-1: config 1 interface 1 has no altsetting 0 [ 245.897270][ T44] usb 5-1: config 1 has an invalid descriptor of length 226, skipping remainder of the config [ 245.907905][ T44] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 245.921006][ T44] usb 5-1: config 1 interface 1 has no altsetting 0 [ 245.936627][ T44] usb 5-1: config 1 has an invalid descriptor of length 226, skipping remainder of the config [ 245.947335][ T44] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 245.962846][ T44] usb 5-1: config 1 interface 1 has no altsetting 0 [ 245.971052][ T44] usb 5-1: config 1 has an invalid descriptor of length 226, skipping remainder of the config [ 245.982123][ T44] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 245.995847][ T44] usb 5-1: config 1 interface 1 has no altsetting 0 [ 246.003895][ T44] usb 5-1: config 1 has an invalid descriptor of length 226, skipping remainder of the config [ 246.014465][ T44] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 246.027464][ T5942] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 246.027603][ T44] usb 5-1: config 1 interface 1 has no altsetting 0 [ 246.042717][ T981] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.042973][ T44] usb 5-1: config 1 has an invalid descriptor of length 226, skipping remainder of the config [ 246.056953][ T981] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 246.068555][ T44] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 246.082688][ T981] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 246.100370][ T44] usb 5-1: config 1 interface 1 has no altsetting 0 [ 246.109327][ T44] usb 5-1: New USB device found, idVendor=1d6b, idProduct=f037, bcdDevice=cd.57 [ 246.113583][ T981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.133633][ T981] usb 2-1: config 0 descriptor?? [ 246.134345][ T44] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=255 [ 246.150375][ T981] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 246.161823][ T44] usb 5-1: Product: syz [ 246.173539][ T44] usb 5-1: Manufacturer: syz [ 246.181198][ T44] usb 5-1: SerialNumber: syz [ 246.207327][ T5942] usb 6-1: config 5 has an invalid interface number: 123 but max is 0 [ 246.223007][ T5942] usb 6-1: config 5 has no interface number 0 [ 246.234756][ T5942] usb 6-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 246.248693][ T5942] usb 6-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 246.257398][ T9175] hfs: can't find a HFS filesystem on dev rnullb0 [ 246.258728][ T5942] usb 6-1: config 5 interface 123 has no altsetting 0 [ 246.275572][ T5942] usb 6-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 246.285001][ T5942] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.293199][ T5942] usb 6-1: Product: syz [ 246.298109][ T5942] usb 6-1: Manufacturer: syz [ 246.308125][ T5942] usb 6-1: SerialNumber: syz [ 246.413614][ T44] usb 5-1: USB disconnect, device number 25 [ 246.444143][ T6777] udevd[6777]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 246.560552][ T5942] ni6501 6-1:5.123: driver 'ni6501' failed to auto-configure device. [ 246.583855][ T5942] usb 6-1: USB disconnect, device number 7 [ 246.611106][ T9181] fuse: Bad value for 'fd' [ 247.071662][ T44] usb 2-1: USB disconnect, device number 34 [ 247.184429][ T5942] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 247.200061][ T9198] sctp: [Deprecated]: syz.5.1117 (pid 9198) Use of int in maxseg socket option. [ 247.200061][ T9198] Use struct sctp_assoc_value instead [ 247.262137][ T9202] hfs: can't find a HFS filesystem on dev rnullb0 [ 247.354263][ T5942] usb 3-1: device descriptor read/64, error -71 [ 247.656309][ T5942] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 247.954373][ T5942] usb 3-1: device descriptor read/64, error -71 [ 248.064717][ T5942] usb usb3-port1: attempt power cycle [ 248.246519][ T5885] Bluetooth: hci1: failed to read key size for handle 201 [ 248.294262][ T44] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 248.404463][ T5942] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 248.425266][ T5942] usb 3-1: device descriptor read/8, error -71 [ 248.446592][ T44] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 248.457875][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.473777][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.485222][ T44] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 248.505989][ T44] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 248.515851][ T44] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 248.530242][ T44] usb 2-1: Manufacturer: syz [ 248.547539][ T44] usb 2-1: config 0 descriptor?? [ 248.664266][ T5942] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 248.694980][ T5942] usb 3-1: device descriptor read/8, error -71 [ 248.805175][ T5942] usb usb3-port1: unable to enumerate USB device [ 248.874234][ T1212] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 248.970518][ T44] appleir 0003:05AC:8243.000E: unknown main item tag 0x0 [ 248.988640][ T44] appleir 0003:05AC:8243.000E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 249.020120][ T9231] 9p: Could not find request transport: xen [ 249.035320][ T1212] usb 5-1: Using ep0 maxpacket: 32 [ 249.046624][ T1212] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 249.064337][ T1212] usb 5-1: config 0 has no interface number 0 [ 249.079395][ T1212] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 249.088718][ T1212] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.099957][ T1212] usb 5-1: Product: syz [ 249.106474][ T1212] usb 5-1: Manufacturer: syz [ 249.111123][ T1212] usb 5-1: SerialNumber: syz [ 249.119752][ T1212] usb 5-1: config 0 descriptor?? [ 249.127061][ T1212] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 249.144758][ T9239] FAULT_INJECTION: forcing a failure. [ 249.144758][ T9239] name failslab, interval 1, probability 0, space 0, times 0 [ 249.157651][ T9239] CPU: 1 UID: 0 PID: 9239 Comm: syz.5.1131 Not tainted syzkaller #0 PREEMPT(full) [ 249.157682][ T9239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 249.157696][ T9239] Call Trace: [ 249.157706][ T9239] [ 249.157717][ T9239] dump_stack_lvl+0x189/0x250 [ 249.157752][ T9239] ? __pfx____ratelimit+0x10/0x10 [ 249.157774][ T9239] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.157797][ T9239] ? __pfx__printk+0x10/0x10 [ 249.157820][ T9239] ? __pfx___might_resched+0x10/0x10 [ 249.157840][ T9239] ? lock_acquire+0x5f/0x360 [ 249.157859][ T9239] should_fail_ex+0x414/0x560 [ 249.157877][ T9239] should_failslab+0xa8/0x100 [ 249.157896][ T9239] __kmalloc_noprof+0xcb/0x4f0 [ 249.157911][ T9239] ? iter_file_splice_write+0x1c6/0x10e0 [ 249.157933][ T9239] iter_file_splice_write+0x1c6/0x10e0 [ 249.157951][ T9239] ? __vfs_getxattr+0x3f1/0x430 [ 249.157974][ T9239] ? cap_inode_need_killpriv+0x51/0x60 [ 249.157992][ T9239] ? bpf_lsm_inode_need_killpriv+0x9/0x20 [ 249.158014][ T9239] ? security_inode_need_killpriv+0x71/0x270 [ 249.158033][ T9239] ? file_remove_privs_flags+0x40d/0x5f0 [ 249.158050][ T9239] ? __pfx_iter_file_splice_write+0x10/0x10 [ 249.158069][ T9239] ? ovl_splice_write+0x43d/0x580 [ 249.158091][ T9239] ? rcu_is_watching+0x15/0xb0 [ 249.158110][ T9239] ? lock_acquire+0x5f/0x360 [ 249.158126][ T9239] ? ovl_path_type+0x197/0x3d0 [ 249.158139][ T9239] ? ovl_real_file_path+0x145/0x310 [ 249.158163][ T9239] backing_file_splice_write+0x3be/0x5e0 [ 249.158181][ T9239] ovl_splice_write+0x43d/0x580 [ 249.158204][ T9239] ? __pfx_ovl_splice_write+0x10/0x10 [ 249.158225][ T9239] ? __pfx_ovl_file_end_write+0x10/0x10 [ 249.158246][ T9239] ? lock_acquire+0x5f/0x360 [ 249.158280][ T9239] ? preempt_count_add+0x91/0x1a0 [ 249.158298][ T9239] ? __pfx_ovl_splice_write+0x10/0x10 [ 249.158320][ T9239] direct_splice_actor+0x101/0x160 [ 249.158342][ T9239] splice_direct_to_actor+0x5a5/0xcc0 [ 249.158368][ T9239] ? __pfx_direct_splice_actor+0x10/0x10 [ 249.158387][ T9239] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 249.158410][ T9239] do_splice_direct+0x181/0x270 [ 249.158430][ T9239] ? __pfx_do_splice_direct+0x10/0x10 [ 249.158448][ T9239] ? common_file_perm+0x1b5/0x230 [ 249.158471][ T9239] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 249.158493][ T9239] ? bpf_lsm_file_permission+0x9/0x20 [ 249.158506][ T9239] ? security_file_permission+0x75/0x290 [ 249.158526][ T9239] ? rw_verify_area+0x255/0x4d0 [ 249.158545][ T9239] do_sendfile+0x4da/0x7e0 [ 249.158567][ T9239] ? rcu_is_watching+0x15/0xb0 [ 249.158589][ T9239] ? __pfx_do_sendfile+0x10/0x10 [ 249.158610][ T9239] ? lock_release+0x4b/0x3e0 [ 249.158627][ T9239] ? __might_fault+0xcc/0x130 [ 249.158644][ T9239] __se_sys_sendfile64+0xd9/0x190 [ 249.158665][ T9239] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 249.158686][ T9239] ? rcu_is_watching+0x15/0xb0 [ 249.158706][ T9239] ? rcu_is_watching+0x15/0xb0 [ 249.158726][ T9239] do_syscall_64+0xfa/0x3b0 [ 249.158749][ T9239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.158764][ T9239] ? clear_bhb_loop+0x60/0xb0 [ 249.158781][ T9239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.158795][ T9239] RIP: 0033:0x7f621158ebe9 [ 249.158809][ T9239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.158822][ T9239] RSP: 002b:00007f62123b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 249.158838][ T9239] RAX: ffffffffffffffda RBX: 00007f62117b5fa0 RCX: 00007f621158ebe9 [ 249.158849][ T9239] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000003 [ 249.158859][ T9239] RBP: 00007f62123b0090 R08: 0000000000000000 R09: 0000000000000000 [ 249.158868][ T9239] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000002 [ 249.158877][ T9239] R13: 00007f62117b6038 R14: 00007f62117b5fa0 R15: 00007ffd4f422cf8 [ 249.158893][ T9239] [ 249.546544][ T1212] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 249.559981][ T1212] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 249.615517][ T9217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.625428][ T9217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.713101][ T9245] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1132'. [ 249.823237][ T9248] ieee802154 phy0 wpan0: encryption failed: -22 [ 249.974562][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 249.976733][ T5942] usb 5-1: USB disconnect, device number 26 [ 250.021037][ T5942] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 250.052285][ T5942] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 250.075104][ T5942] quatech2 5-1:0.51: device disconnected [ 250.615919][ T9263] erofs (device rnullb0): cannot find valid erofs superblock [ 250.823654][ T9268] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 250.850522][ T9268] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 251.010580][ T9282] erofs (device rnullb0): cannot find valid erofs superblock [ 251.184486][ T981] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 251.224757][ T9284] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1147'. [ 251.256255][ T5848] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 251.344270][ T981] usb 6-1: Using ep0 maxpacket: 32 [ 251.353026][ T981] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.366598][ T981] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.377999][ T981] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 251.387466][ T981] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 251.396045][ T981] usb 6-1: Product: syz [ 251.400423][ T981] usb 6-1: Manufacturer: syz [ 251.414219][ T5848] usb 3-1: Using ep0 maxpacket: 8 [ 251.424593][ T981] hub 6-1:4.0: USB hub found [ 251.441630][ T9] usb 2-1: USB disconnect, device number 35 [ 251.453530][ T5848] usb 3-1: unable to get BOS descriptor or descriptor too short [ 251.485131][ T5848] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 251.516765][ T5848] usb 3-1: config 1 has no interface number 1 [ 251.544528][ T5848] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 251.564329][ T5848] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 251.574319][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.582595][ T5848] usb 3-1: Product: syz [ 251.587040][ T5848] usb 3-1: Manufacturer: syz [ 251.591763][ T5848] usb 3-1: SerialNumber: syz [ 251.638987][ T981] hub 6-1:4.0: 2 ports detected [ 251.808699][ T30] audit: type=1326 audit(2000000036.740:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9281 comm="syz.2.1146" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa4e8d8ebe9 code=0x0 [ 252.335399][ T5885] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 252.343929][ T5885] Bluetooth: hci1: Injecting HCI hardware error event [ 252.351521][ T5885] Bluetooth: hci1: hardware error 0x00 [ 252.525152][ T9303] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1153'. [ 252.564262][ T9303] netlink: 'syz.1.1153': attribute type 4 has an invalid length. [ 252.612489][ T9303] netlink: 'syz.1.1153': attribute type 4 has an invalid length. [ 252.922658][ T981] hub 6-1:4.0: activate --> -90 [ 253.239841][ T9313] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 253.294248][ T44] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 253.343735][ T981] hub 6-1:4.0: hub_ext_port_status failed (err = -71) [ 253.352756][ T9] usb 6-1: USB disconnect, device number 8 [ 253.359026][ T981] usb 6-1-port2: cannot reset (err = -71) [ 253.366610][ T5959] hid-generic 0005:15C2:5505.000F: unknown main item tag 0x0 [ 253.396898][ T981] usb 6-1-port2: attempt power cycle [ 253.402587][ T5959] hid-generic 0005:15C2:5505.000F: unknown main item tag 0x0 [ 253.412554][ T5959] hid-generic 0005:15C2:5505.000F: item fetching failed at offset 7/9 [ 253.426007][ T5959] hid-generic 0005:15C2:5505.000F: probe with driver hid-generic failed with error -22 [ 253.454270][ T44] usb 2-1: device descriptor read/64, error -71 [ 253.704284][ T44] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 253.834258][ T44] usb 2-1: device descriptor read/64, error -71 [ 253.945833][ T44] usb usb2-port1: attempt power cycle [ 254.042488][ T5848] usb 3-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 254.060958][ T5848] usb 3-1: 2:1 : sample bitwidth 128 in over sample bytes 8 [ 254.079451][ T5848] usb 3-1: 2:1 : unsupported sample bitwidth 128 in 8 bytes [ 254.101228][ T5848] usb 3-1: USB disconnect, device number 33 [ 254.294630][ T44] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 254.335772][ T44] usb 2-1: device descriptor read/8, error -71 [ 254.404346][ T5885] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 254.453150][ T9347] syzkaller1: entered promiscuous mode [ 254.459721][ T9347] syzkaller1: entered allmulticast mode [ 254.472976][ T9348] FAULT_INJECTION: forcing a failure. [ 254.472976][ T9348] name failslab, interval 1, probability 0, space 0, times 0 [ 254.497408][ T9348] CPU: 1 UID: 0 PID: 9348 Comm: syz.4.1170 Not tainted syzkaller #0 PREEMPT(full) [ 254.497441][ T9348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 254.497455][ T9348] Call Trace: [ 254.497463][ T9348] [ 254.497472][ T9348] dump_stack_lvl+0x189/0x250 [ 254.497510][ T9348] ? __pfx____ratelimit+0x10/0x10 [ 254.497538][ T9348] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.497570][ T9348] ? __pfx__printk+0x10/0x10 [ 254.497603][ T9348] ? __pfx___might_resched+0x10/0x10 [ 254.497631][ T9348] ? lock_acquire+0x5f/0x360 [ 254.497656][ T9348] should_fail_ex+0x414/0x560 [ 254.497678][ T9348] should_failslab+0xa8/0x100 [ 254.497703][ T9348] __kmalloc_noprof+0xcb/0x4f0 [ 254.497725][ T9348] ? iter_file_splice_write+0x1c6/0x10e0 [ 254.497754][ T9348] iter_file_splice_write+0x1c6/0x10e0 [ 254.497791][ T9348] ? __vfs_getxattr+0x3f1/0x430 [ 254.497823][ T9348] ? cap_inode_need_killpriv+0x51/0x60 [ 254.497849][ T9348] ? bpf_lsm_inode_need_killpriv+0x9/0x20 [ 254.497883][ T9348] ? security_inode_need_killpriv+0x71/0x270 [ 254.497908][ T9348] ? file_remove_privs_flags+0x40d/0x5f0 [ 254.497932][ T9348] ? __pfx_iter_file_splice_write+0x10/0x10 [ 254.497961][ T9348] ? ovl_splice_write+0x43d/0x580 [ 254.497992][ T9348] ? rcu_is_watching+0x15/0xb0 [ 254.498021][ T9348] ? lock_acquire+0x5f/0x360 [ 254.498043][ T9348] ? ovl_path_type+0x197/0x3d0 [ 254.498064][ T9348] ? ovl_real_file_path+0x145/0x310 [ 254.498098][ T9348] backing_file_splice_write+0x3be/0x5e0 [ 254.498125][ T9348] ovl_splice_write+0x43d/0x580 [ 254.498159][ T9348] ? __pfx_ovl_splice_write+0x10/0x10 [ 254.498190][ T9348] ? __pfx_ovl_file_end_write+0x10/0x10 [ 254.498223][ T9348] ? lock_acquire+0x5f/0x360 [ 254.498250][ T9348] ? preempt_count_add+0x91/0x1a0 [ 254.498275][ T9348] ? __pfx_ovl_splice_write+0x10/0x10 [ 254.498307][ T9348] direct_splice_actor+0x101/0x160 [ 254.498336][ T9348] splice_direct_to_actor+0x5a5/0xcc0 [ 254.498373][ T9348] ? __pfx_direct_splice_actor+0x10/0x10 [ 254.498399][ T9348] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 254.498433][ T9348] do_splice_direct+0x181/0x270 [ 254.498462][ T9348] ? __pfx_do_splice_direct+0x10/0x10 [ 254.498487][ T9348] ? common_file_perm+0x1b5/0x230 [ 254.498519][ T9348] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 254.498550][ T9348] ? bpf_lsm_file_permission+0x9/0x20 [ 254.498569][ T9348] ? security_file_permission+0x75/0x290 [ 254.498596][ T9348] ? rw_verify_area+0x255/0x4d0 [ 254.498622][ T9348] do_sendfile+0x4da/0x7e0 [ 254.498653][ T9348] ? rcu_is_watching+0x15/0xb0 [ 254.498685][ T9348] ? __pfx_do_sendfile+0x10/0x10 [ 254.498716][ T9348] ? lock_release+0x4b/0x3e0 [ 254.498740][ T9348] ? __might_fault+0xcc/0x130 [ 254.498786][ T9348] __se_sys_sendfile64+0xd9/0x190 [ 254.498817][ T9348] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 254.498847][ T9348] ? rcu_is_watching+0x15/0xb0 [ 254.498876][ T9348] ? rcu_is_watching+0x15/0xb0 [ 254.498906][ T9348] do_syscall_64+0xfa/0x3b0 [ 254.498949][ T9348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.498971][ T9348] ? clear_bhb_loop+0x60/0xb0 [ 254.498994][ T9348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.499015][ T9348] RIP: 0033:0x7f908a78ebe9 [ 254.499034][ T9348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.499054][ T9348] RSP: 002b:00007f908b66c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 254.499079][ T9348] RAX: ffffffffffffffda RBX: 00007f908a9b5fa0 RCX: 00007f908a78ebe9 [ 254.499096][ T9348] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000003 [ 254.499110][ T9348] RBP: 00007f908b66c090 R08: 0000000000000000 R09: 0000000000000000 [ 254.499124][ T9348] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000002 [ 254.499137][ T9348] R13: 00007f908a9b6038 R14: 00007f908a9b5fa0 R15: 00007ffdf0af6be8 [ 254.499161][ T9348] [ 255.088963][ T44] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 255.124324][ T44] usb 2-1: device descriptor read/8, error -71 [ 255.247898][ T44] usb usb2-port1: unable to enumerate USB device [ 255.503264][ T9373] FAULT_INJECTION: forcing a failure. [ 255.503264][ T9373] name failslab, interval 1, probability 0, space 0, times 0 [ 255.534470][ T9373] CPU: 1 UID: 0 PID: 9373 Comm: syz.2.1179 Not tainted syzkaller #0 PREEMPT(full) [ 255.534501][ T9373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 255.534515][ T9373] Call Trace: [ 255.534523][ T9373] [ 255.534532][ T9373] dump_stack_lvl+0x189/0x250 [ 255.534569][ T9373] ? __pfx____ratelimit+0x10/0x10 [ 255.534597][ T9373] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.534629][ T9373] ? __pfx__printk+0x10/0x10 [ 255.534660][ T9373] ? __pfx___might_resched+0x10/0x10 [ 255.534688][ T9373] ? lock_acquire+0x5f/0x360 [ 255.534713][ T9373] should_fail_ex+0x414/0x560 [ 255.534735][ T9373] should_failslab+0xa8/0x100 [ 255.534761][ T9373] __kmalloc_noprof+0xcb/0x4f0 [ 255.534782][ T9373] ? iter_file_splice_write+0x1c6/0x10e0 [ 255.534812][ T9373] iter_file_splice_write+0x1c6/0x10e0 [ 255.534839][ T9373] ? __vfs_getxattr+0x3f1/0x430 [ 255.534872][ T9373] ? cap_inode_need_killpriv+0x51/0x60 [ 255.534897][ T9373] ? bpf_lsm_inode_need_killpriv+0x9/0x20 [ 255.534930][ T9373] ? security_inode_need_killpriv+0x71/0x270 [ 255.534956][ T9373] ? file_remove_privs_flags+0x40d/0x5f0 [ 255.534987][ T9373] ? __pfx_iter_file_splice_write+0x10/0x10 [ 255.535015][ T9373] ? ovl_splice_write+0x43d/0x580 [ 255.535045][ T9373] ? rcu_is_watching+0x15/0xb0 [ 255.535072][ T9373] ? lock_acquire+0x5f/0x360 [ 255.535094][ T9373] ? ovl_path_type+0x197/0x3d0 [ 255.535113][ T9373] ? ovl_real_file_path+0x145/0x310 [ 255.535148][ T9373] backing_file_splice_write+0x3be/0x5e0 [ 255.535174][ T9373] ovl_splice_write+0x43d/0x580 [ 255.535207][ T9373] ? __pfx_ovl_splice_write+0x10/0x10 [ 255.535238][ T9373] ? __pfx_ovl_file_end_write+0x10/0x10 [ 255.535270][ T9373] ? lock_acquire+0x5f/0x360 [ 255.535297][ T9373] ? preempt_count_add+0x91/0x1a0 [ 255.535322][ T9373] ? __pfx_ovl_splice_write+0x10/0x10 [ 255.535353][ T9373] direct_splice_actor+0x101/0x160 [ 255.535383][ T9373] splice_direct_to_actor+0x5a5/0xcc0 [ 255.535420][ T9373] ? __pfx_direct_splice_actor+0x10/0x10 [ 255.535447][ T9373] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 255.535479][ T9373] do_splice_direct+0x181/0x270 [ 255.535508][ T9373] ? __pfx_do_splice_direct+0x10/0x10 [ 255.535533][ T9373] ? common_file_perm+0x1b5/0x230 [ 255.535565][ T9373] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 255.535596][ T9373] ? bpf_lsm_file_permission+0x9/0x20 [ 255.535614][ T9373] ? security_file_permission+0x75/0x290 [ 255.535640][ T9373] ? rw_verify_area+0x255/0x4d0 [ 255.535666][ T9373] do_sendfile+0x4da/0x7e0 [ 255.535697][ T9373] ? rcu_is_watching+0x15/0xb0 [ 255.535727][ T9373] ? __pfx_do_sendfile+0x10/0x10 [ 255.535759][ T9373] ? lock_release+0x4b/0x3e0 [ 255.535783][ T9373] ? __might_fault+0xcc/0x130 [ 255.535807][ T9373] __se_sys_sendfile64+0xd9/0x190 [ 255.535838][ T9373] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 255.535868][ T9373] ? rcu_is_watching+0x15/0xb0 [ 255.535897][ T9373] ? rcu_is_watching+0x15/0xb0 [ 255.535926][ T9373] do_syscall_64+0xfa/0x3b0 [ 255.535956][ T9373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.535985][ T9373] ? clear_bhb_loop+0x60/0xb0 [ 255.536009][ T9373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.536030][ T9373] RIP: 0033:0x7fa4e8d8ebe9 [ 255.536048][ T9373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.536069][ T9373] RSP: 002b:00007fa4e9b94038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 255.536092][ T9373] RAX: ffffffffffffffda RBX: 00007fa4e8fb5fa0 RCX: 00007fa4e8d8ebe9 [ 255.536108][ T9373] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000003 [ 255.536122][ T9373] RBP: 00007fa4e9b94090 R08: 0000000000000000 R09: 0000000000000000 [ 255.536135][ T9373] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000002 [ 255.536147][ T9373] R13: 00007fa4e8fb6038 R14: 00007fa4e8fb5fa0 R15: 00007ffe9b4335a8 [ 255.536170][ T9373] [ 256.182050][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.189836][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.266625][ T9389] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1183'. [ 256.318893][ T9389] openvswitch: netlink: Flow actions attr not present in new flow. [ 256.349442][ T9397] NILFS (rnullb0): couldn't find nilfs on the device [ 256.397421][ T9396] process 'syz.4.1183' launched './file0' with NULL argv: empty string added [ 256.409168][ T9401] FAULT_INJECTION: forcing a failure. [ 256.409168][ T9401] name failslab, interval 1, probability 0, space 0, times 0 [ 256.425547][ T9389] /dev/rnullb0: Can't open blockdev [ 256.429026][ T9401] CPU: 1 UID: 0 PID: 9401 Comm: syz.5.1191 Not tainted syzkaller #0 PREEMPT(full) [ 256.429062][ T9401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 256.429078][ T9401] Call Trace: [ 256.429087][ T9401] [ 256.429097][ T9401] dump_stack_lvl+0x189/0x250 [ 256.429140][ T9401] ? __pfx____ratelimit+0x10/0x10 [ 256.429171][ T9401] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.429207][ T9401] ? __pfx__printk+0x10/0x10 [ 256.429243][ T9401] ? __pfx___might_resched+0x10/0x10 [ 256.429273][ T9401] ? lock_acquire+0x5f/0x360 [ 256.429301][ T9401] should_fail_ex+0x414/0x560 [ 256.429327][ T9401] should_failslab+0xa8/0x100 [ 256.429355][ T9401] __kmalloc_noprof+0xcb/0x4f0 [ 256.429380][ T9401] ? iter_file_splice_write+0x1c6/0x10e0 [ 256.429415][ T9401] iter_file_splice_write+0x1c6/0x10e0 [ 256.429445][ T9401] ? __vfs_getxattr+0x3f1/0x430 [ 256.429482][ T9401] ? cap_inode_need_killpriv+0x51/0x60 [ 256.429510][ T9401] ? bpf_lsm_inode_need_killpriv+0x9/0x20 [ 256.429547][ T9401] ? security_inode_need_killpriv+0x71/0x270 [ 256.429578][ T9401] ? file_remove_privs_flags+0x40d/0x5f0 [ 256.429605][ T9401] ? __pfx_iter_file_splice_write+0x10/0x10 [ 256.429636][ T9401] ? ovl_splice_write+0x43d/0x580 [ 256.429671][ T9401] ? rcu_is_watching+0x15/0xb0 [ 256.429702][ T9401] ? lock_acquire+0x5f/0x360 [ 256.429728][ T9401] ? ovl_path_type+0x197/0x3d0 [ 256.429749][ T9401] ? ovl_real_file_path+0x145/0x310 [ 256.429789][ T9401] backing_file_splice_write+0x3be/0x5e0 [ 256.429818][ T9401] ovl_splice_write+0x43d/0x580 [ 256.429855][ T9401] ? __pfx_ovl_splice_write+0x10/0x10 [ 256.429901][ T9401] ? __pfx_ovl_file_end_write+0x10/0x10 [ 256.429939][ T9401] ? lock_acquire+0x5f/0x360 [ 256.429969][ T9401] ? preempt_count_add+0x91/0x1a0 [ 256.429998][ T9401] ? __pfx_ovl_splice_write+0x10/0x10 [ 256.430033][ T9401] direct_splice_actor+0x101/0x160 [ 256.430067][ T9401] splice_direct_to_actor+0x5a5/0xcc0 [ 256.430109][ T9401] ? __pfx_direct_splice_actor+0x10/0x10 [ 256.430139][ T9401] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 256.430175][ T9401] do_splice_direct+0x181/0x270 [ 256.430208][ T9401] ? __pfx_do_splice_direct+0x10/0x10 [ 256.430237][ T9401] ? common_file_perm+0x1b5/0x230 [ 256.430273][ T9401] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 256.430308][ T9401] ? bpf_lsm_file_permission+0x9/0x20 [ 256.430331][ T9401] ? security_file_permission+0x75/0x290 [ 256.430359][ T9401] ? rw_verify_area+0x255/0x4d0 [ 256.430388][ T9401] do_sendfile+0x4da/0x7e0 [ 256.430423][ T9401] ? rcu_is_watching+0x15/0xb0 [ 256.430458][ T9401] ? __pfx_do_sendfile+0x10/0x10 [ 256.430514][ T9401] ? lock_release+0x4b/0x3e0 [ 256.430542][ T9401] ? __might_fault+0xcc/0x130 [ 256.430570][ T9401] __se_sys_sendfile64+0xd9/0x190 [ 256.430605][ T9401] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 256.430637][ T9401] ? rcu_is_watching+0x15/0xb0 [ 256.430670][ T9401] ? rcu_is_watching+0x15/0xb0 [ 256.430701][ T9401] do_syscall_64+0xfa/0x3b0 [ 256.430736][ T9401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.430760][ T9401] ? clear_bhb_loop+0x60/0xb0 [ 256.430787][ T9401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.430809][ T9401] RIP: 0033:0x7f621158ebe9 [ 256.430826][ T9401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.430843][ T9401] RSP: 002b:00007f62123b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 256.430865][ T9401] RAX: ffffffffffffffda RBX: 00007f62117b5fa0 RCX: 00007f621158ebe9 [ 256.430889][ T9401] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000003 [ 256.430906][ T9401] RBP: 00007f62123b0090 R08: 0000000000000000 R09: 0000000000000000 [ 256.430921][ T9401] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000002 [ 256.430936][ T9401] R13: 00007f62117b6038 R14: 00007f62117b5fa0 R15: 00007ffd4f422cf8 [ 256.430964][ T9401] [ 256.475134][ T9403] /dev/rnullb0: Can't open blockdev [ 256.818280][ T9406] hfs: can't find a HFS filesystem on dev rnullb0 [ 256.841623][ T9416] /dev/rnullb0: Can't open blockdev [ 257.035823][ T9429] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 257.062682][ T9429] vxfs: unable to read disk superblock at 1 [ 257.068895][ T44] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 257.091749][ T9429] I/O error, dev loop2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 257.104496][ T9429] vxfs: unable to read disk superblock at 8 [ 257.110538][ T9429] vxfs: can't find superblock. [ 257.145790][ T9435] FAULT_INJECTION: forcing a failure. [ 257.145790][ T9435] name failslab, interval 1, probability 0, space 0, times 0 [ 257.161414][ T9435] CPU: 1 UID: 0 PID: 9435 Comm: syz.5.1202 Not tainted syzkaller #0 PREEMPT(full) [ 257.161435][ T9435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 257.161445][ T9435] Call Trace: [ 257.161451][ T9435] [ 257.161457][ T9435] dump_stack_lvl+0x189/0x250 [ 257.161484][ T9435] ? __pfx____ratelimit+0x10/0x10 [ 257.161504][ T9435] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.161526][ T9435] ? __pfx__printk+0x10/0x10 [ 257.161548][ T9435] ? __pfx___might_resched+0x10/0x10 [ 257.161567][ T9435] ? lock_acquire+0x5f/0x360 [ 257.161584][ T9435] should_fail_ex+0x414/0x560 [ 257.161600][ T9435] should_failslab+0xa8/0x100 [ 257.161618][ T9435] __kmalloc_noprof+0xcb/0x4f0 [ 257.161632][ T9435] ? iter_file_splice_write+0x1c6/0x10e0 [ 257.161653][ T9435] iter_file_splice_write+0x1c6/0x10e0 [ 257.161671][ T9435] ? __vfs_getxattr+0x3f1/0x430 [ 257.161697][ T9435] ? cap_inode_need_killpriv+0x51/0x60 [ 257.161715][ T9435] ? bpf_lsm_inode_need_killpriv+0x9/0x20 [ 257.161739][ T9435] ? security_inode_need_killpriv+0x71/0x270 [ 257.161757][ T9435] ? file_remove_privs_flags+0x40d/0x5f0 [ 257.161773][ T9435] ? __pfx_iter_file_splice_write+0x10/0x10 [ 257.161793][ T9435] ? ovl_splice_write+0x43d/0x580 [ 257.161814][ T9435] ? rcu_is_watching+0x15/0xb0 [ 257.161832][ T9435] ? lock_acquire+0x5f/0x360 [ 257.161848][ T9435] ? ovl_path_type+0x197/0x3d0 [ 257.161861][ T9435] ? ovl_real_file_path+0x145/0x310 [ 257.161885][ T9435] backing_file_splice_write+0x3be/0x5e0 [ 257.161903][ T9435] ovl_splice_write+0x43d/0x580 [ 257.161934][ T9435] ? __pfx_ovl_splice_write+0x10/0x10 [ 257.161955][ T9435] ? __pfx_ovl_file_end_write+0x10/0x10 [ 257.161978][ T9435] ? lock_acquire+0x5f/0x360 [ 257.161997][ T9435] ? preempt_count_add+0x91/0x1a0 [ 257.162015][ T9435] ? __pfx_ovl_splice_write+0x10/0x10 [ 257.162041][ T9435] direct_splice_actor+0x101/0x160 [ 257.162062][ T9435] splice_direct_to_actor+0x5a5/0xcc0 [ 257.162088][ T9435] ? __pfx_direct_splice_actor+0x10/0x10 [ 257.162108][ T9435] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 257.162130][ T9435] do_splice_direct+0x181/0x270 [ 257.162150][ T9435] ? __pfx_do_splice_direct+0x10/0x10 [ 257.162168][ T9435] ? common_file_perm+0x1b5/0x230 [ 257.162190][ T9435] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 257.162212][ T9435] ? bpf_lsm_file_permission+0x9/0x20 [ 257.162224][ T9435] ? security_file_permission+0x75/0x290 [ 257.162243][ T9435] ? rw_verify_area+0x255/0x4d0 [ 257.162261][ T9435] do_sendfile+0x4da/0x7e0 [ 257.162282][ T9435] ? rcu_is_watching+0x15/0xb0 [ 257.162304][ T9435] ? __pfx_do_sendfile+0x10/0x10 [ 257.162326][ T9435] ? lock_release+0x4b/0x3e0 [ 257.162343][ T9435] ? __might_fault+0xcc/0x130 [ 257.162359][ T9435] __se_sys_sendfile64+0xd9/0x190 [ 257.162382][ T9435] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 257.162402][ T9435] ? rcu_is_watching+0x15/0xb0 [ 257.162422][ T9435] ? rcu_is_watching+0x15/0xb0 [ 257.162443][ T9435] do_syscall_64+0xfa/0x3b0 [ 257.162464][ T9435] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.162478][ T9435] ? clear_bhb_loop+0x60/0xb0 [ 257.162495][ T9435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.162509][ T9435] RIP: 0033:0x7f621158ebe9 [ 257.162521][ T9435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.162535][ T9435] RSP: 002b:00007f62123b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 257.162551][ T9435] RAX: ffffffffffffffda RBX: 00007f62117b5fa0 RCX: 00007f621158ebe9 [ 257.162562][ T9435] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000003 [ 257.162572][ T9435] RBP: 00007f62123b0090 R08: 0000000000000000 R09: 0000000000000000 [ 257.162581][ T9435] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000002 [ 257.162590][ T9435] R13: 00007f62117b6038 R14: 00007f62117b5fa0 R15: 00007ffd4f422cf8 [ 257.162607][ T9435] [ 257.550294][ T5889] Bluetooth: hci3: command 0x0406 tx timeout [ 257.558780][ T5889] ------------[ cut here ]------------ [ 257.565616][ T5889] WARNING: net/bluetooth/hci_conn.c:567 at hci_conn_timeout+0xff/0x290, CPU#1: kworker/u9:7/5889 [ 257.576237][ T5889] Modules linked in: [ 257.580179][ T5889] CPU: 1 UID: 0 PID: 5889 Comm: kworker/u9:7 Not tainted syzkaller #0 PREEMPT(full) [ 257.589813][ T5889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 257.600279][ T5889] Workqueue: hci3 hci_conn_timeout [ 257.605991][ T5889] RIP: 0010:hci_conn_timeout+0xff/0x290 [ 257.611592][ T5889] Code: 48 89 df e8 23 0c 09 00 eb 07 e8 bc 6f 3d f7 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 e7 c4 fe ff e8 a2 6f 3d f7 90 <0f> 0b 90 eb 8c 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 31 ff ff ff [ 257.631337][ T5889] RSP: 0018:ffffc900041b7a50 EFLAGS: 00010293 [ 257.637474][ T5889] RAX: ffffffff8a8287ce RBX: ffff888024788000 RCX: ffff8880297dbc00 [ 257.645734][ T5889] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 257.653753][ T5889] RBP: 00000000ffffffff R08: ffff888024788013 R09: 1ffff110048f1002 [ 257.662043][ T5889] R10: dffffc0000000000 R11: ffffed10048f1003 R12: dffffc0000000000 [ 257.670306][ T5889] R13: ffff88801fb2bb18 R14: ffff888024788948 R15: ffff888024788010 [ 257.678618][ T5889] FS: 0000000000000000(0000) GS:ffff8881258cf000(0000) knlGS:0000000000000000 [ 257.687931][ T5889] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 257.694640][ T5889] CR2: 00002000001dd000 CR3: 00000000738f6000 CR4: 00000000003526f0 [ 257.702687][ T5889] DR0: 0000000000000007 DR1: 000000000000000b DR2: 00fe130000000002 [ 257.710792][ T5889] DR3: 000000000038e610 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 257.718832][ T5889] Call Trace: [ 257.722143][ T5889] [ 257.725158][ T5889] ? process_scheduled_works+0x9ef/0x17b0 [ 257.730916][ T5889] process_scheduled_works+0xae1/0x17b0 [ 257.736583][ T5889] ? __pfx_process_scheduled_works+0x10/0x10 [ 257.742621][ T5889] worker_thread+0x8a0/0xda0 [ 257.747566][ T5889] kthread+0x70e/0x8a0 [ 257.751688][ T5889] ? __pfx_worker_thread+0x10/0x10 [ 257.756907][ T5889] ? __pfx_kthread+0x10/0x10 [ 257.761541][ T5889] ? rcu_is_watching+0x15/0xb0 [ 257.766399][ T5889] ? __pfx_kthread+0x10/0x10 [ 257.771036][ T5889] ret_from_fork+0x3f9/0x770 [ 257.775702][ T5889] ? __pfx_ret_from_fork+0x10/0x10 [ 257.780859][ T5889] ? __switch_to_asm+0x39/0x70 [ 257.785712][ T5889] ? __switch_to_asm+0x33/0x70 [ 257.790515][ T5889] ? __pfx_kthread+0x10/0x10 [ 257.795191][ T5889] ret_from_fork_asm+0x1a/0x30 [ 257.799993][ T5889] [ 257.803050][ T5889] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 257.810706][ T5889] CPU: 1 UID: 0 PID: 5889 Comm: kworker/u9:7 Not tainted syzkaller #0 PREEMPT(full) [ 257.820195][ T5889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 257.830289][ T5889] Workqueue: hci3 hci_conn_timeout [ 257.835430][ T5889] Call Trace: [ 257.838716][ T5889] [ 257.841649][ T5889] dump_stack_lvl+0x99/0x250 [ 257.846255][ T5889] ? __asan_memcpy+0x40/0x70 [ 257.850863][ T5889] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.856081][ T5889] ? __pfx__printk+0x10/0x10 [ 257.860697][ T5889] vpanic+0x281/0x750 [ 257.864779][ T5889] ? __pfx__printk+0x10/0x10 [ 257.869382][ T5889] ? __pfx_vpanic+0x10/0x10 [ 257.873893][ T5889] ? is_bpf_text_address+0x292/0x2b0 [ 257.879188][ T5889] ? is_bpf_text_address+0x26/0x2b0 [ 257.884396][ T5889] panic+0xb9/0xc0 [ 257.888148][ T5889] ? __pfx_panic+0x10/0x10 [ 257.892580][ T5889] __warn+0x334/0x4c0 [ 257.896584][ T5889] ? hci_conn_timeout+0xff/0x290 [ 257.901623][ T5889] ? hci_conn_timeout+0xff/0x290 [ 257.906568][ T5889] report_bug+0x2be/0x4f0 [ 257.910916][ T5889] ? hci_conn_timeout+0xff/0x290 [ 257.915892][ T5889] ? hci_conn_timeout+0xff/0x290 [ 257.920837][ T5889] ? hci_conn_timeout+0x101/0x290 [ 257.925894][ T5889] handle_bug+0x84/0x160 [ 257.930171][ T5889] exc_invalid_op+0x1a/0x50 [ 257.934680][ T5889] asm_exc_invalid_op+0x1a/0x20 [ 257.939542][ T5889] RIP: 0010:hci_conn_timeout+0xff/0x290 [ 257.945095][ T5889] Code: 48 89 df e8 23 0c 09 00 eb 07 e8 bc 6f 3d f7 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 e7 c4 fe ff e8 a2 6f 3d f7 90 <0f> 0b 90 eb 8c 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 31 ff ff ff [ 257.964708][ T5889] RSP: 0018:ffffc900041b7a50 EFLAGS: 00010293 [ 257.970784][ T5889] RAX: ffffffff8a8287ce RBX: ffff888024788000 RCX: ffff8880297dbc00 [ 257.978760][ T5889] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 257.986736][ T5889] RBP: 00000000ffffffff R08: ffff888024788013 R09: 1ffff110048f1002 [ 257.994710][ T5889] R10: dffffc0000000000 R11: ffffed10048f1003 R12: dffffc0000000000 [ 258.002704][ T5889] R13: ffff88801fb2bb18 R14: ffff888024788948 R15: ffff888024788010 [ 258.010685][ T5889] ? hci_conn_timeout+0xfe/0x290 [ 258.015636][ T5889] ? process_scheduled_works+0x9ef/0x17b0 [ 258.021369][ T5889] process_scheduled_works+0xae1/0x17b0 [ 258.026948][ T5889] ? __pfx_process_scheduled_works+0x10/0x10 [ 258.032954][ T5889] worker_thread+0x8a0/0xda0 [ 258.037565][ T5889] kthread+0x70e/0x8a0 [ 258.041646][ T5889] ? __pfx_worker_thread+0x10/0x10 [ 258.046858][ T5889] ? __pfx_kthread+0x10/0x10 [ 258.051455][ T5889] ? rcu_is_watching+0x15/0xb0 [ 258.056236][ T5889] ? __pfx_kthread+0x10/0x10 [ 258.060831][ T5889] ret_from_fork+0x3f9/0x770 [ 258.065437][ T5889] ? __pfx_ret_from_fork+0x10/0x10 [ 258.070564][ T5889] ? __switch_to_asm+0x39/0x70 [ 258.075342][ T5889] ? __switch_to_asm+0x33/0x70 [ 258.080114][ T5889] ? __pfx_kthread+0x10/0x10 [ 258.084713][ T5889] ret_from_fork_asm+0x1a/0x30 [ 258.089493][ T5889] [ 258.092840][ T5889] Kernel Offset: disabled [ 258.097167][ T5889] Rebooting in 86400 seconds..