last executing test programs: 1m33.973442516s ago: executing program 0 (id=56): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newpolicy={0xfc, 0x13, 0x101, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x13}, @in=@rand_addr=0x64010102, 0x100, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0xfffffffe, 0x40000}, [@tmpl={0x44, 0x5, [{{@in6=@mcast1, 0x4d5, 0x32}, 0xa, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x2, 0x48, 0xfffffffe, 0xffff, 0x5}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 1m33.780930246s ago: executing program 0 (id=57): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x4, 0x0, 0xfffffffe}]}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 1m33.588508352s ago: executing program 0 (id=59): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000400)={0xffffffff000, 0xa2, 0x6, 0x101}) 1m33.504132343s ago: executing program 0 (id=61): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) open$dir(&(0x7f0000000100)='./file0/file0\x00', 0x4c400, 0x110) umount2(&(0x7f0000000440)='./file0/file0\x00', 0x0) 1m32.560266903s ago: executing program 0 (id=69): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd4}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x38}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x4d2, @remote}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000040) 1m32.360972519s ago: executing program 0 (id=71): recvmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000002c0)=""/200, 0xc8}], 0x1, &(0x7f0000000680)=""/80, 0x50}, 0x5}], 0x1, 0x40010000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=ANY=[], 0x48}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m32.01995126s ago: executing program 32 (id=71): recvmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000002c0)=""/200, 0xc8}], 0x1, &(0x7f0000000680)=""/80, 0x50}, 0x5}], 0x1, 0x40010000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=ANY=[], 0x48}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.042520348s ago: executing program 1 (id=579): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1ec) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8018, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x4000003e, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) 4.040207167s ago: executing program 3 (id=581): syz_open_procfs(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @local, 0x9}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000010ffffffffffffffffffffffff86dd6900000000083c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x42) 3.843705358s ago: executing program 4 (id=582): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d800000010008104687da3aa7143a0b8c81d080900000000000000a118001500060014000040a8002b000e00014006046109d67f6f94007134cf6ee0a000a0e408e8d8ef52a9bbc7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c4a918d1bcf0f938baa5d060a517898516277ce06bbace6f177ccbec4c2ee5a7cef4260027836b0d17a54ef5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f00feffff16", 0xaa}], 0x1}, 0x4004) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4417d290ddada01ca48b8a9884315c2c245040f23c00f21f835000002000f23f8c4a2e0f3db0f07d2c74424001e09000000442402e4000000654c0fc72ef3410fc777d365420fc7700066b8502466ef", 0x6e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.790522134s ago: executing program 1 (id=583): gettid() fcntl$lock(0xffffffffffffffff, 0x24, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x40000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 3.688560858s ago: executing program 3 (id=584): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x3, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="c91443d5daaf04b192358b692f84d66c60492a57cffd585b0068ccde45d94ded1e86d3670791c21f8e0b2153d10d45d37b72ee2fa06ad61b0a9354045a8dae1bd1cfb49f3c11fe54c17eee632d95574681e6c472eb8a1beaf3a4b88561847a0a0f05fa4a26639d7e74a0c1c2790d6a59d4073b1c55539b7c21b8550efbd5f835c56642f4be57d170e36a6bf3a995f418554f0cab342769089d0777b28daad5c0c4ba56a0bd6c0515d9bf488fdcf49a9a7bbfcf5ad78733f8119f2568daefbd0985a9916c0d048e38765cc7bb1c82e0f3c81d98e7179ec782331bc3cfb2caf58a99668420795e6a00ef41dcf5283bbb61ebaedbb7a675be4fb2d11c31f9b76936d1112c68978c73f42e145b094490d748c1456a14c23fe25e2fdaeaaa7dc0d35dcc9bbfe86361f99f4d04090d1e66aa9714ee9f4608ad66c60f500bf06a1b5b90fbe2f6c42c4b5f337393b0bb201473712c48f898c514fff84c46b50d3aaf44578f41d312bb5a73526db7818617dcb938ebdb17f92423ca2cf7ea2c611483e0baff012fd97e28558317049e4fe2d27f72796d7260b33900cd61f984c087d3c54f6aa11e389a49069ef99ca86c279598b42dd3485f09fc7e119f707438498316cf2f2bc8a293eeb1a35635989327d4f6c9ba6b2d5b9b8ee89a1e13d538b954479663223bb704af6a63ee497734410ea43bfdb0ad3708cb7155df2432c44e8468a7b77b807d345c9b94fedadfdeba12f4b6d11d16fd6dd5fff6cf896d0f40785ffca538dae61d8a5ffee814e96628cd945553e788b8d915762ca3b40124149b3c186ddd5f7af5b75f4725444f2f7e54b999c93e8c5fd4d4fbd7a3b3d7e85df3053c866f1dd247cac6912ed8b0e491101ca5a0b999a21014b573ba3996c76065c9d8bebf431f8be6435837193efd6e5a565b2ced30d04355435f166b09f9dc91ee50412d0daf72b28ec14c505cb155de1a46362f140ac2b633fa42b12109f0a29fa8ba271d6fc2a77af3b16032ee46b3ddead76a481ef52f6bd25cab4494681f0abc2ffc60ebb36cffcc058a067fcdae6c9de670cd6fde6eb8086a65fc05df17cf69f654516ba30ee04a1427b40fb8e81fe46787d557046854ad342442bacd781c7a6063892402fb0d765397448991206b28193e20f285e50d9219ace39b311e572ebcd80702164315656e7fa92960d0fd28c6489406f0b3061218417548e7e78b8aaaf5a623eb47c92aebfebd1c78343bc781f184e0122a28f56b18832da5646ee8405fa2fc040ab30377c447b42d0bfdddc65e064ccdf1ad52a94309a819caeb523e22b25d1ba288b7f2c726290d50021b9839c5d3c471aadb08025d97619935a9880942cf653508a0b2c43838e5aada8b84d22042928dd372dedec14672266ddceb0744c7464ab282d7fbfb2767e891832aa25d1425b33a60c6894a8d5292fdd73e05a868b8e50cb1a412d1249a77ccfc3d3eb35a67221f80bb8960fd93ceb74e102f2a6946b50caae3ccb86a8ec441d6e58dbf24b3eb962c8a28cffeded9b7cf4a54f524a1ef49fbdc91e125aad65a54df6a0f10cd8799f48aa144f7aec977b4a347c5c9628c4805ecf71f305adc9e5ca7c1f313f9ea3e99b3590efd94d831e1ff5cd7a26b72281109547facfa3abac2cfc9177b117a3757b778e95b5069236abb25d8fb032c38d296f87388fdd364b491cb828732177a2c6bcaaf831d138c898bb60c0d9d8a02d8b4b8e7efa87d3ed66221ac52e31ba9c2da488b999eaf82994bc8f1ac29d5e60b8b1cdc30a1c9829aca1cd7881c8aaac9ede0f5d8b85538d2b13751cfc6b37587b0223b9f6b6dd9340753106b1eecdf4f63c51cc2c63a1f86235bad7602e115d1e0ed78a6b170b88eb9584d2098b187695627612189998171d245797391b2b79bb690a79dac4b769e3f18c4d49359f7b460d997c03c793f51a830d5b21faed2ae1c3eb0fce0cdadde3c789ec931b6397c2a2fb2eda87756fec031e5f50f07619130f8e39f1e00004a1f204e5d87780542bdedf0b1ca5168779ad7cb2ebf27e0a5d760a2492b4d92eab24f2bc9af0a3e51140c415a6f885d0faa38ee6dcffc41652b28e628b859db0e7a0f961e37c5806df137e68c5316667f36051eb05c971e208721fdb8a49b8c49f85114be9dd7288f4e95c5f6fb8c1bc1bc7d79f32ba5419d90130a0328ba70d10c770a1540718f7d890dba9c39a116623d492275a1268c91149bfe026ca1c6a458449d4004d653f4b0a234eacd1f4da495fd1f936b4b335f64514fc8091b1dab132f599e26cb127e25011efa30a922b5a3e8807db9a00a9cc732fd323708767c905c8a3cd53e2e8d377d3b43cb971cbd0e66e2e47f3d601d49e29941b2ea4d3c8b7f5698e1a633ebba00f6c178d6d04b9f1544f04cd173e2d49f129a8725a647e1a9e798b5581c6a461b585012a302353178188e55f8102a49343c9c370ee505d09e4be8580d95f5bf39267b00e93adb6b52b2029160d78ac271e4e0c70ed835484e80302b93efd599707d4d22c806476fd04d18ebd6a9bf88c11dc2c96041ac8c3e04ac0aa5d2ac6740972717b543fb871884a7a0434a433571fd621977777984ea9c06914be966da9f349cb1ef3a116c49f0c716eae1df118cd3d5b350b917c06d853c1e1514213f5a29071e42eecee264ff20529c53c3a060a18a680ade2a08b4549e6998f06e61e4f4c36d578e9ad83dd38d1eeb100e7ab023edb38426d5165b867b9507a6b644aa0322da335b208105f2e74a9841ea7c629ea20cef740f6364e9d84a4485d3bb6b5f4e14c7764f78b65c0647870638a8f618381ec0823faed0424a448f753a59fb22e5138e0ca537b6935befb99fc6eea2d9457c01345afbbaaf3a7a96a39478b222af322f86730d137c3f570b38c7363bb9a89bb4b3b8979b9afd232927becbc91c8d4a276febe47bacd4a84c0bfdd54e685080f2c3be0b1e37bc6d21b13b7b1bfd507880f6ad7fa39bf99eaf6b7088d758d9383e38326381088e9e3e792f75d682cf61cf1176953960b0e160b2a535495d52c28f14fa45ed7a3f91e219dcd05afdda2b7e6c1b742b29f6c5f62a040a5fe6606433fce7de757ed76372dfc0b1af9af10c0128bcd335eff1c6c9660b0893730c3ef8de6e50dba419b35d1766eb9a5dce4c2fa518f8e3e2a27855e04d06b89e97578a4406ac03f3314575143db5e43ae3d03a7e90a590b4c188a5acbe1cf23cd4cf60ca98248d4e740122a55ac6e463511b4c4cd47040aafc0bed7878348a4caad4d977671cf4ac319773767ee28f8ccc4c9deae531b029eff5345470f20865549b2f2c4089306304e13e42ca37fbca6839bbcd2f10bd20c81d44ab73ad5ffcc55f51b53efb00d3c68d8d8505e005247ba23e86a803b199f36447fd01f192994b2fa27c9db59ae66b56b30c1ae5cd717407068a9b13ca941b82db254f4ecdbd1751a3f8f1061031bb41af5c04a33ffc98509f456830cf3c94c14451f04d84844e41c618e82958710d07daeba666329b914f2cc7c1d34ffbf6b50620b7c78c25c5d82a5aadcc4d824b3b68c34231fa7c0befe5241c447f90111c55848feed9d1ee67f61095ec2c0b4ac82f5cf169201516082a804c9d1775990d430d21bc65877041905caf385918f44191c134e493d960724b28f01e79fbf3b99eac1e75fbc8ab8dcfdd98b573fa6d7e6a6ead6b15ed78e2a8d564f61d8c52be8104306c104146696e16c9e9bff79a5fc1d92326cf0f2ff5e5c5c252773f2bd2c554bc409aaec03055f71d439daebc1d8b06c9ca0e1fe4729e8e6119616e8fb861b1e2694d1df267cbc496ba4a87013c3317a16b4c1e369748507794a20ad06aad20e4dbfc1834d789d2a8e9395ddad33a74c6c7cf54e61e533cae228909536eba8020f0c3845d2063270cae4d8e8dd8cfe3f112c46751444546ced9f6434741656dcda2185be13eebcc0392c256f384fc16353e89cbdeef8fb2e3cadc1ed2142f3b6485dc2d540fe799d027413128f624aaf8bc1933d3a0e6a954931bfc914921dec7ec822a31ebb652d4f312ab4068cedc6203b0de98e60c5f82296a3482132b288ba0a8eabdd8ac40faf145928e7563dbcb14d0625c92b542860993bb0388d8390dae727ae4086d4de1b7fea9d79f4844374bcd67fa5e1a3a28cd6d8da3f171fcf9d13062bb149fde18917c6650cdfa2be8de33b556ad34fad454db13a446e8a7c40167117e884d874c786768975df0b201ea0077ba735d31d65a832dc122d13c6559601b83899af1f14808f55f077ad465ed61378c63abff3ad742691168fe1e31bfd0dbb9f43d364ddf0bb185f69e69110c9eb1ab808354fdd2cf571838d5ec63bac3d70ca40878dc3c3cea26adffd5a197206d7c80d6a86c202338e72f17dc7185e1df0cfefa9475a2156738f90c6410c1698d1a160fd396548323c796ec5dca3cd59e468ff6a14caf34b4fdb16f1c92acb6bff2e859f9de1266dea0d1828598319b40a3edef657be02188fc94490c1da088d3ec2f315d6b5bb2f262764b67ba321379f4c93bb3ef9bc7db0c0e5f1e680ebfa84463e904d5351ecf25d1d22a98f81f7a1fc4c4fee3934b7672661f0bcd94109706644d0fdac4b7933b5db2acf39b98c0a8106a7a757408404a4c299a077379458e2118fb0a53b798adc1b85d3eb20b539e572741b9855e44a545809f897dde06730145b5caefe9db1c321783450d25d38834532c3e372fa92a53ac9cb4330eaaf65fe1b69a66459058e02d20c6641b7d8edfa8e356baaeb011b61208ef36ed33235144c86d6ce65da89d66da06291d4acc05e3136559ab77a7c4ad229c5307b48ed642d96c28cd06c82dedd4a16ed90bceda81292120438fd5c47b7b41b2646fe0899643f896ddb2d11e7311f8a0cbb9bfa38106507e06f35b3052ad6b6a11ac5f0129bedc59d04aee3737ebbf10f97c80f1a4e3f51ac8ac4488ad9e3f685a7c0dd4074b07774f4efe4b9f2cba400ef49f73b12fc7d96d8f3283a1eaf8c003931fc24a9248e201ac31bb49226c37d535592e00308d86ba0765a7eda13b72686101d352fb959598038b8dec44a0f18e5c8ec089912d325880390ce5186d4585df46e5662987c164f0ccfb8f12f6144f91349051d3ffa35ba597d2b5920e279ca8e139dfe2ba9923c0190fd444c8bf12a627618791a8781d6b54470777e6a5dac8cb505ae1e534b0c3af7db010dd602b1459964e1e15a812f3b4c8038e6bc1dc568ba482ee4944582abeeda1ed012391706ddb1e0ce60efd15acde8283d3612de5d0cf76185ad3a1ce89488e1cea4009573b55a2766d100ecefc5d53c99876cfec65daea82f55cf9687ec70e45cfdba9fe69fc3a822c29ff4be34857bdcd4313fb23d1d01d8a79cbd0057eeb5c1c0b39f75d5a753a2e10bd0ebb91dab1312bdf1a984332d566ab56dfd838d285995bec8726c5d1358fe10b0b6aaa99b9d9b08894c1dbd06356e5c693ddebb9d8b306062defb160db9d8f02ae3df59697866f5adeb34c8c5b27b63b09675030f344197b3bff097b996819dec9059aaf5ec1a6c585a86d16528091543a9e6bca4d850b7963fd1e7d981814dedb165c1a6444ec0a21743a4de8845b386ad4e1e9c9f2873f6a353487d9a8f8f56ae1d0f69124ee56b5c2b2a48c78cc6ba6b313b889adf0acfaebb4e2dc71054a4992366a2b6ff1f5972d7d2f0e9e3b17d7fbe931f43871819dc6e6040ba239ebce2cfa424ff7344b8a880040321909dcd16956594f5d99fdd39ea5d7209b906d2601572c56c72db899f986185194fe5aab45f27d9ac12aa8600b3c2728ef2e589a6886d711edf4d7f95b2e10d9adde3009560ad754f9e7a52808720a973dc475f8177fd5b199b69925f03a44a8bd9f3c3369861802ce5ca4b40cb47d19e2e1bda1b054f16b66ac7b7c0e5205112e011d6957f1df50505003544631ff4385d8128d46838338930aebc0496348045a7c05abd7a56e1079947d3eb1c50e4d8be001d03d8973f8f08f2f21a415174173ccb90f7ab615be5036947e164a434c059637bfeebb8b9f2e87b9774a4595c71122c9fac74347488b9a054e2e7b9c45b7b12fcca0fe789db614c70d4149d44e50fb64aabccee7447288a5b865a60c2640171f89afecda2cb18b7ecea214bd32f43d5ff66e90741697d085f3ee9bfd8662a3cc570999bb151090160d3bf5bf1d85e896d66276cba7ed97f341f595b13c02ac2a1352aec7a5980de2c8f9d890951108947b7602dcf2bdd2aef680667572b87aadf7c54338492eae763df73e89e3c438c196da83d98bc65233a242e08894f2390d8714f0abb801d9e5c42f169555284b6cf079005b373e9938db71a93ee5945c2a43a06e3df580d372318b3d203503c6e968206d7db8116cca2f2a1fae7f5b5195bea92914d66516bc3ceb2d9dc4de59d0d52ab80910aba7ebb696c7deaddcf0fedf56e2a88c3496bb79897c6420a0ef1b03ad89c76b24f67ffd41c9227d464565457bb25f0b32c83e676b0a3284f2acbed39c6875871c5e866a8284f12e383f87f12dd9bbe3078c68b3711eaa9bc17a7ac8413a8ef486922eddf43f01625671b7c3d0a4c6c2dc38217b4135c8cb46df7d936aabfd253e95e0816dd1f92b257e2f96d2a259a320756ba77d99b709711326f2ea42def974d60f817a1f6779121dd32a1cb194c7809e4c8fd052ba357323436491ec45a49fa601ed373aadd2199e4483704fb2f4edd7bf2815b552fb84d09094cab9700b5125887ee508570217c16799bc11d9e3658de8d9812f30dc8078bbecaf887a6527686b026eea70229df1e61759adf19c1b96673419decb382ae29bd685c5f32120b2d56d3e97c9ef00a2c0598c2181b8fa53172312590a9549ff55dffb9070b042c74654b2ae56371b2a6bac8e2808a40fd5d6d0af184c035101394e347521467e0ddb962e0d63614cf1461ac7b9d744084e9f6f26c88d515dbb1b7392b8e9384b81f186224d5c09e266682d8044d8afb1bd6483962b03ed6884759d2647b8f174a6695a437a1f1aac3e6a2f8ca658ee8a8ae44a77393cec61a9f335a1e859825e73df4125828fbde19d3695125992ddb2826ffbc6c7cfbfdbae19ba864c4170c79cce408e8b280a7632c855d802029ebac8627fbd6fec1c3bd858411c969ca035992f2ab909c423158dffd0dd5a407b3e0c2d9b180440996e09e15f17b4e42f365371d9dd58c4609455253c44c2ba73f592e360ab5fcccdb6e90ae0c60ada9325c4824242c0d866e7dfbefe091067d5c7ff0432814f733591eb0096659738b34cfa8c6c988ec628f34fe08f31dc0156dc39866412932d045168f4f3a48f24fb3b884be1384845d496c3009626f1c41b0189e95c9055d24eb5a0390596f6ccf50d3727e607875a3b2cf076a277e12ac07ddc59da78ee16e1952706ac6a1a9ade80b867d889789c935d196cc4da67aa35ba80ef2077ee4dd69c5f31a0410f7fd0739303ddcdbff2f53e0a44ec5de0f062e533444bd946959a1d9c25b297b6fc7675ca4add9e24e8ff390e0375f3b15e1d3e8129007d743e384659f191bd23ffe02140fa64d5c6d75937b28d51afcaa9d207f57c878f2f54493025e9eff5b5ce0c997d11c9690262e38e1e83c7f1a0ed3f200d9d0472739d59dea3cc6e8783758e3e3201731cf27211267702594356345449b42fa64b64c6f00a8f26665524fe2208b1a7c5fbdc822ea611c1811526471e4f52ab5e3a43de8fd4eba2fb2796a206e348de9b0be78ded78204dc82d9e9adccbe408d7ff538aab3d663eab189927a9cd597388e8dc5063d2db42cd65415fa32d20288da017c9f94e788dfe7cc3a0f6b6ab06116ed3f72f3c048cb1e51abf308ed7169908d1ad5b7ab3a86a3316d164084f8d88c6f96142d888ccb158efa586015914c116db114aa82c44a55d4c33bd901dc34e820d3120d57def03ea4f01b263913cc02ca586b208506d149ef03a706fd5360a12b83acb7bf97ac1f1f85389d4fbfdcf38551e9dbce760a05e8e4023d85038570d3697b3e7de73aac9c7feb39b6ccd1a775c8ce01b08d7190e28866aa7bb8d0cff0fc45b452fcb6a290f98f4b5ec125224c8a93918b1f2888befba6de3d294ee1f13a9c56e92eaac0b8e6c6905e77a60ea7e1d1ed979b6b2606652e7d75750a065c57c7efb1ef5708719ef04e354bd861b15e0a1cbc7cfe65c8a3d9a2b790260d6e6eb60bd4e0fb3f040dfa27fa00797664122add0750a23a8b20fcd68b6be1e21620dda4bf0561f4c5ed74f41612a0676dcdbf669df3436cbf2ce253e69319e3ab36e6e6314f11e0d0882ee3d7f3d3b3dcfe3cd7f061e301369207545676e09801f9bc4bc4c3dcaf48e5320a4b3211051a7525868a0ac1278ed6fc9531ed89cf4205458acc05d5351bcab7ea50250b6cb4c6fdd0cd96f30cdc9a820f495d0a3e14eb6c493a85a87e3b7fb8e5f23431c3c5359f5802f1fc11ff71c3172c6b57b5587ab38579b79e328792edb7a81d60762bc6c88693a00712f811cab9b075a97535c904396dbd2fa0994ba9c9b06fe9c042cb6860d22844b94863bf7b68a1ab8639e4487b38d48e40da4a98dedd7d73ca4b575bf4c604a364a9247c2ea5e3b127ff42f9bce1d3d37c2428edab1708ebd71ac0e4a408a9c6eb97407a4a8b5e912e2c63fadd1abad9a772a96fc4666f7d2b604adbde6f1136de2adfe38994491ab0f34ff1fd20cb8034ad39aae4c5c0076da2e7a157764b770e1c5f35b6f323ce809b2e92be1345204021d74712368e0ef77056afd85f065bba085793c9b6950d3c3fc6c445afbdd5a80cf7b0bb13055fd486700be1500bdf8771e286a63962e56d4771ed5eefbf111ba7380f02d6f96eed174246820b73bd772689c072bb3d8e43ef96f5466dce5c9392e34b7176821d2f4df3dab4c6ef5e0238ffe61582812fdacc987fbb6d98cad5a2d7af0e4c8dd3f800cd75c38a515d4d4c7118c5f81c6f7504e7ae452370c56c4b7fb4daa65bf26919c12081485d09e9d142965320211f483ed2a0a6836fa2488a878eaf9653b0528c3680b75a1920a25b5c5c17548c7ceb9a1656a0cf6a404aec14f7ed8a1dcf8ed32e1cf94dc2f60b65aa102650b7a22d9e708c606ce8403ceb81434bd9938b2c4e5a8530a156a1df7d143b2da54071ba3e673ce11760f72c32273b7bcd9a48da2a6caeb4b782cf1c3a044c1731f3ad61ce32bbd0b52cbb187cb3ecc1e85a67ffe27cf86769a0d69fe293dd30f060b8a0f26ccd0287d0b8d941ee7410a7c6aa430add67c2dd60db292e24f294ce80b0321aaa4d054a6f5d9981e1d5e859b454f5005be082bd59baca5775eedb7994333c62c452ef7b2893e4d03a28c0e368928b4bdd6e31f52a83cd7e162975405fd128321e0a8e3e77fd93257b0c46b309e16203974382ced818faac3a02e74141e9ea36c4a1b98bd859fafce43b2984d856c832f61b1ca562cee96f5843adc14b35bec1ccdafedd214f1a344345373f3c9eccee8324950a23c3e77d55dbde9a7ac1b7804927affb8b0e1488dcd8919d227bd1f50a35abf25e3f120c25b0dfb4d85b4c2a2c69cf7047c76c45e4e901e7396140496f9a322c2c2ac777a27adff5a6daf32e852b1bac89f1086739a603cf0f6838f792351c08e38ab130e5a83aa5a4f2da19df131770a308d810eed0059a2e5546a2169b9d0119f6df7c18981f4b4f119c76fdaac031ce7551f25678b5c4d8815a7ea9565e63389fca6ea0bcd40e71ac72124113dc0041ce26a0c9979ff76d7f1f2c0cd2c16d8c7a36930b909ed7e2d4adfa8352b12b99bdcbc25b485f652539fab7ac983c1ae925967c15ba2345e45d6bafe13b3e9d7acf1a592422ea09c3a45f7fe24e235bd70b106cdaa665584e74cdaf9f39b804bc6c4e7f0bf572225acd4dfe010081b91c2d5970d4f43d2e1a0e05f84baaf50642991b3704034aed74572e6a4715b79276432d06660b39c989570fc0d5d0071a7c690658caee447370d3295db3b5dc625e697e1ca2675b5430b9969024835c7d001fbce86c5165c4fe8f2d46b883daaa3fbf42dc5cf61209379013896df740b9cc32638358ea8079a33f04197f650471086e67e5cf9779268d7973c73bbbde2f1c11e1a8e2b154aaa8b4b74f8a03f14ceb7afc4ba35e6620b7af89c969021d20cb260c1868f3fa432ce7e509db06001ae6540531b126c1e3a851acbf0a9c1354bece05c094d69d9bd87f99391e23306911383d2082997339daebd67d8a707c9b496a309b7921696f39a07864f31208802db7188881e346b41c34f4129fca9c6a13172a4dabfe791584d240fc03685057d53c08737aa1d486233318eb4545f2e8d18087705b9d3a7658564592f56aea3aee53d66c249988bf353853728553a1577062e24af533f47dc012ae90c5c085babc121be2993c063e203ab949a088041271ac0527c56edd4b7a87e98323a0137cd493aa05fe38d02754a66d89348b119e6200d5919bc366788eb67115fc57c4c1a9dd42c7411d6709ad82de8662a1849445b39beb2ba8f894860e41a054f61337179a9214b0884f3964c95ed2a4ab37de8038566bba76fbaa7502c0460558ff4bf4793ca68d78e50f384a81da4cfa23723747e906b82290e0b8ea07e3404bee0915800d4c3c07f94c43e7aafbc7a44d923de97963d0d1586bee06fc90aadbe5758fb9933ff7df346d62e082223741f5cb26ef953ca654ab983a72b30b296891c9e3f1ed5216b0e588eb25f5d4ccad6f96973cc2d26196bbd37c83266473071ccd84d9e3c74f22621e8bd60afa4bcad6c853c7591fe5d4298a954ea5006f682a7a65aeb26b230f3866a28a58bf532aca8fd5eaec64f442ac510a7df4114f00fd6ff7e02d77f8e72797222556959958c4c4d166c5af18a6e25588cac9871a3d5bb453889ff8d13db22024a997bf97a5afdf698b1deaff3101e27868d2de47b92c403ce82e15f3239d8923e8ca0c01e3781b5dd6121f57d2238dc3ff8a1bde3e371efd33838c552e43588042b360f55d7ca92f11987630364b263428e18601d7bf23f6432b3a9aa2c500cd9ac5f73cbe309443858a2806956b0cdcfc19904567bb1703641017c6199e768410e03d8ba603eb34249d567370202f39639ae8f6d52d9d5dbfc544c5b85ac8187095c63f1f613fe4af179fc5c837e6e0ccc21e62ac22ac045c4ac3b1ca6a4cbdbe29ea465240fc0aed1f0e086d7580bcf81d4e2a4d55a8e3bc57110e7cf1e1895df07974f0686dd2ea2b12bbfd64e7a9d0c62c662f0370e6ed495eeb2ee5029042147a1f2e5fcd6068b06567be893cb80e2cbb5fbb12847313811c13cf685698d5e2175959579e510279b9e959ac2c3f94fec653c6b521f8909d633ccedbc1109285ecbd52d27cd2891eaf354db2c966d1e3086718848433c12658fe7f6fbfef930b963139a63f6c4caee5a1964d3a038dd0db403c0a251d702c07a0fba4a3576ec6668a78e9e26efc6ad83a670a47608bf4207979bf196b3160c95e7ccc6406d46f529d34676b76d72396262e1448df051130a21484e0e977df1f7f0a259ac762eef9506877498b9998e1286d6294cf60b95352e81c3", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x150, 0x0, 0x3, [{{0x4, 0x3, 0x28000, 0x3, 0x5, 0x10000, {0x6, 0x9, 0x8000000000000004, 0x40000000000b, 0x6, 0x0, 0x6, 0xf6e1, 0x6, 0x8000, 0xde, 0x0, 0x0, 0x8001, 0x6}}, {0x4, 0x1, 0x1, 0x32540194, '\x00'}}, {{0x4, 0x3, 0x8001, 0x80000001, 0xfff, 0x7ff, {0x5, 0x7, 0x4, 0x6, 0x1, 0x2, 0x2, 0x6, 0x7, 0xc000, 0x0, r2, r3, 0x1, 0x3}}, {0x0, 0x7, 0x1, 0x20000300, '\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r4, 0x0, 0x0) 3.533932108s ago: executing program 1 (id=586): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0xb7, &(0x7f00000001c0)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="403f0100000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB="401605"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x80a, 0x9, 0x4, 0x7, 0x5, 0x3, 0x7, 0x7fffffff, 0x14, 0x9, 0x7e4, 0x2}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac3(0x5, 0x0, 0x0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x16, &(0x7f0000000400)=@string={0x16, 0x3, "6264e701664c67a5954e71f7420b64d0f1dba41a"}}]}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="200f14"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="400cf202"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.338343233s ago: executing program 4 (id=588): syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.337134397s ago: executing program 3 (id=596): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0x1, 0x60, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000001c0)={"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"}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x5e0, 0x7, 0x0, 0x17c, 0x3, 0x800, 0xf6, 0x3ef, 0x3, 0x2, 0x8, 0x2000009, 0x8, 0x9, 0x80000000000, 0xbdb], 0x60000, 0x3c0390}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.945403121s ago: executing program 4 (id=589): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000f, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000040)={0x4, {"0dbad96fff01000008ff00200800", "3dfab043e15fad27a639f905b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x40010, 0x6}) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r0, 0x6f2d, 0x5) 2.94500416s ago: executing program 3 (id=590): socket$inet6_sctp(0xa, 0x1, 0x84) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0) 2.536496408s ago: executing program 2 (id=591): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) 2.206840637s ago: executing program 2 (id=592): syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x180, 0x0, 0x0) 1.78096671s ago: executing program 4 (id=593): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x1, 0xffff, 0x0, 0x3ff, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) ioctl$BLKIOMIN(r2, 0x1278, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 1.289031561s ago: executing program 3 (id=594): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 1.286815102s ago: executing program 4 (id=603): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) open$dir(&(0x7f0000000100)='./file0/file0\x00', 0x4c400, 0x110) umount2(&(0x7f0000000440)='./file0/file0\x00', 0x0) 1.174093758s ago: executing program 2 (id=595): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000a00)="b9800000c00f3235000400000f30440f20c03508000000440f22c036746665f36526f24c22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30470f013848b80010000000000045808023c00f21f83500000b00c40238f76600c481e57dcd", 0x6c}], 0x1, 0x10, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x3ff, 0x2001, 0x0, 0x5}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 867.65093ms ago: executing program 2 (id=597): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x3, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x150, 0x0, 0x3, [{{0x4, 0x3, 0x28000, 0x3, 0x5, 0x10000, {0x6, 0x9, 0x8000000000000004, 0x40000000000b, 0x6, 0x0, 0x6, 0xf6e1, 0x6, 0x8000, 0xde, 0x0, 0x0, 0x8001, 0x6}}, {0x4, 0x1, 0x1, 0x32540194, '\x00'}}, {{0x4, 0x3, 0x8001, 0x80000001, 0xfff, 0x7ff, {0x5, 0x7, 0x4, 0x6, 0x1, 0x2, 0x2, 0x6, 0x7, 0xc000, 0x0, r2, r3, 0x1, 0x3}}, {0x0, 0x7, 0x1, 0x20000300, '\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r4, 0x0, 0x0) 860.96189ms ago: executing program 1 (id=606): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x840) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000100)={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, "d1eccca3c1b5361c375c29237e02435bef1ddad8f3c4ba51f19636f3acacf78b", 0xe, 0xb, 0x2000000, 0x3}, 0x3c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0xffe) 527.279478ms ago: executing program 1 (id=598): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0x1, 0x60, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000001c0)={"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"}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x5e0, 0x7, 0x0, 0x17c, 0x3, 0x800, 0xf6, 0x3ef, 0x3, 0x2, 0x8, 0x2000009, 0x8, 0x9, 0x80000000000, 0xbdb], 0x60000, 0x3c0390}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 526.383118ms ago: executing program 3 (id=608): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) read$FUSE(r2, 0x0, 0x2000) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0xe9, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)='\x00\x00\x00\x00\x00\x00', 0x0, 0xb, 0x0, 0x80, 0x0}) 496.108996ms ago: executing program 2 (id=599): mmap$IORING_OFF_SQ_RING(0x0, 0xd00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000400)={0x0, 0x1, 0x0, &(0x7f0000000300)=""/107, 0x0, 0x6000}) write$vhost_msg_v2(r1, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/116, 0xfccf, 0x0, 0x1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000100)=0x1) 242.911241ms ago: executing program 4 (id=600): pipe(&(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x9362, 0x0) mount(0x0, &(0x7f0000000500)='./bus\x00', 0x0, 0x808080, 0x0) 412.109µs ago: executing program 1 (id=601): syz_io_uring_setup(0x1716, &(0x7f0000000280)={0x0, 0xb77f, 0x1000, 0x0, 0x269}, &(0x7f00000001c0), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010102, 0x4e1f, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcf, 0x12d5c, 0x12d5c}}, 0x44) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 0s ago: executing program 2 (id=602): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c", 0xd}], 0x1}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x1000, 0xe000, 0x0, 0x0, 0x8, 0x1, 0x0, 0x2, 0x0, 0x8, 0x6, 0x40}, {0x4, 0x10000, 0x4, 0xff, 0xff, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x1, 0xdddd1000, 0xc, 0x5, 0x4, 0xc4, 0x0, 0xf0, 0x6a, 0x3, 0x0, 0xfc}, {0x1, 0x9000, 0x6, 0x0, 0x81, 0x0, 0x9, 0x0, 0x8, 0x2, 0x6}, {0x6000, 0xffff1000, 0xf, 0x0, 0x0, 0x4, 0x7, 0x0, 0x1, 0x3c}, {0x2, 0x0, 0xa, 0x78, 0x5, 0x40, 0x2, 0x0, 0x3c, 0xfe, 0x5, 0x4}, {0x4, 0xa000, 0x0, 0x3, 0x4, 0x2, 0xa9, 0x20, 0x0, 0x3, 0xff}, {0xeeee0000, 0x41000, 0xc, 0x0, 0xb, 0x7, 0x8, 0x40, 0x26, 0x0, 0x3, 0x2}, {0xdddd0000, 0x3}, {0x30000, 0xfffe}, 0xddfcffe7, 0x0, 0x0, 0x78, 0x0, 0x0, 0xd000, [0x3, 0x0, 0x40000000001]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): 0000 [ 100.911144][ T6336] R13: 00007fc9b5226038 R14: 00007fc9b5225fa0 R15: 00007ffc083dbe58 [ 100.911173][ T6336] [ 101.508284][ T6355] FAULT_INJECTION: forcing a failure. [ 101.508284][ T6355] name failslab, interval 1, probability 0, space 0, times 0 [ 101.508320][ T6355] CPU: 0 UID: 0 PID: 6355 Comm: syz.1.176 Tainted: G L syzkaller #0 PREEMPT(full) [ 101.508347][ T6355] Tainted: [L]=SOFTLOCKUP [ 101.508354][ T6355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.508365][ T6355] Call Trace: [ 101.508371][ T6355] [ 101.508381][ T6355] dump_stack_lvl+0xe8/0x150 [ 101.508413][ T6355] should_fail_ex+0x3eb/0x540 [ 101.508440][ T6355] should_failslab+0xa8/0x100 [ 101.508464][ T6355] __kmalloc_cache_noprof+0x9e/0x600 [ 101.508495][ T6355] ? nbd_alloc_and_init_config+0x87/0x250 [ 101.508516][ T6355] ? nbd_alloc_and_init_config+0x87/0x250 [ 101.508542][ T6355] nbd_alloc_and_init_config+0x87/0x250 [ 101.508569][ T6355] nbd_open+0x53c/0x7e0 [ 101.508597][ T6355] ? __pfx_nbd_open+0x10/0x10 [ 101.508634][ T6355] blkdev_get_whole+0x98/0x510 [ 101.508655][ T6355] ? bdev_open+0xb0/0xd70 [ 101.508677][ T6355] bdev_open+0x324/0xd70 [ 101.508707][ T6355] blkdev_open+0x461/0x600 [ 101.508732][ T6355] ? __pfx_blkdev_open+0x10/0x10 [ 101.508753][ T6355] do_dentry_open+0x80e/0x1360 [ 101.508784][ T6355] vfs_open_consume+0x4a/0x350 [ 101.508803][ T6355] ? path_openat+0x14bb/0x1e40 [ 101.508835][ T6355] path_openat+0x14d7/0x1e40 [ 101.508882][ T6355] do_file_open+0x23e/0x4a0 [ 101.508917][ T6355] ? __pfx_do_file_open+0x10/0x10 [ 101.508968][ T6355] ? _raw_spin_unlock+0x28/0x50 [ 101.508995][ T6355] ? alloc_fd+0x651/0x6c0 [ 101.509029][ T6355] do_sys_openat2+0x115/0x200 [ 101.509065][ T6355] ? __pfx_do_sys_openat2+0x10/0x10 [ 101.509093][ T6355] ? do_user_addr_fault+0xd3f/0x1480 [ 101.509129][ T6355] __x64_sys_openat+0x138/0x170 [ 101.509157][ T6355] do_syscall_64+0x166/0x520 [ 101.509176][ T6355] ? trace_irq_disable+0x3b/0x140 [ 101.509203][ T6355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.509224][ T6355] ? clear_bhb_loop+0x70/0xc0 [ 101.509249][ T6355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.509269][ T6355] RIP: 0033:0x7fc9b4f5e98e [ 101.509288][ T6355] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 101.509304][ T6355] RSP: 002b:00007fc9b5ef8b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 101.509326][ T6355] RAX: ffffffffffffffda RBX: 00007fc9b5ef96c0 RCX: 00007fc9b4f5e98e [ 101.509341][ T6355] RDX: 0000000000002000 RSI: 00007fc9b5ef8c00 RDI: ffffffffffffff9c [ 101.509356][ T6355] RBP: 00007fc9b5ef8c00 R08: 0000000000000000 R09: 0000000000000000 [ 101.509369][ T6355] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 101.509382][ T6355] R13: 00007fc9b5226038 R14: 00007fc9b5225fa0 R15: 00007ffc083dbe58 [ 101.509415][ T6355] [ 101.556427][ T6358] ======================================================= [ 101.556427][ T6358] WARNING: The mand mount option has been deprecated and [ 101.556427][ T6358] and is ignored by this kernel. Remove the mand [ 101.556427][ T6358] option from the mount to silence this warning. [ 101.556427][ T6358] ======================================================= [ 101.823416][ T6361] kvm: emulating exchange as write [ 102.359635][ T6382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.182'. [ 102.927361][ T6400] FAULT_INJECTION: forcing a failure. [ 102.927361][ T6400] name failslab, interval 1, probability 0, space 0, times 0 [ 102.927396][ T6400] CPU: 0 UID: 0 PID: 6400 Comm: syz.1.187 Tainted: G L syzkaller #0 PREEMPT(full) [ 102.927424][ T6400] Tainted: [L]=SOFTLOCKUP [ 102.927431][ T6400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.927444][ T6400] Call Trace: [ 102.927452][ T6400] [ 102.927461][ T6400] dump_stack_lvl+0xe8/0x150 [ 102.927493][ T6400] should_fail_ex+0x3eb/0x540 [ 102.927519][ T6400] ? __alloc_skb+0x1db/0x7a0 [ 102.927538][ T6400] should_failslab+0xa8/0x100 [ 102.927565][ T6400] ? __alloc_skb+0x1db/0x7a0 [ 102.927582][ T6400] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 102.927610][ T6400] ? __alloc_skb+0x18d/0x7a0 [ 102.927629][ T6400] ? __alloc_skb+0x1db/0x7a0 [ 102.927655][ T6400] __alloc_skb+0x1db/0x7a0 [ 102.927679][ T6400] hci_mgmt_cmd+0x1c1/0xfc0 [ 102.927705][ T6400] ? hci_sock_copy_creds+0x230/0x300 [ 102.927738][ T6400] hci_sock_sendmsg+0x6e1/0xf50 [ 102.927762][ T6400] ? __pfx_aa_sk_perm+0x10/0x10 [ 102.927784][ T6400] ? preempt_schedule_thunk+0x16/0x40 [ 102.927816][ T6400] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 102.927846][ T6400] ? apparmor_socket_sendmsg+0x98/0x360 [ 102.927869][ T6400] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 102.927892][ T6400] sock_sendmsg_nosec+0x13a/0x180 [ 102.927921][ T6400] sock_write_iter+0x2de/0x3e0 [ 102.927949][ T6400] ? __pfx_sock_write_iter+0x10/0x10 [ 102.927983][ T6400] ? bpf_lsm_file_permission+0x9/0x20 [ 102.928005][ T6400] ? security_file_permission+0x75/0x260 [ 102.928044][ T6400] vfs_write+0x612/0xba0 [ 102.928079][ T6400] ? __pfx_vfs_write+0x10/0x10 [ 102.928117][ T6400] ? __fget_files+0x2a/0x420 [ 102.928151][ T6400] ksys_write+0x150/0x270 [ 102.928180][ T6400] ? __pfx_ksys_write+0x10/0x10 [ 102.928219][ T6400] do_syscall_64+0x166/0x520 [ 102.928237][ T6400] ? trace_irq_disable+0x3b/0x140 [ 102.928266][ T6400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.928294][ T6400] ? clear_bhb_loop+0x70/0xc0 [ 102.928319][ T6400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.928339][ T6400] RIP: 0033:0x7fc9b4f9e159 [ 102.928359][ T6400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.928376][ T6400] RSP: 002b:00007fc9b5ef9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 102.928397][ T6400] RAX: ffffffffffffffda RBX: 00007fc9b5225fa0 RCX: 00007fc9b4f9e159 [ 102.928416][ T6400] RDX: 0000000000000006 RSI: 0000200000001280 RDI: 0000000000000004 [ 102.928428][ T6400] RBP: 00007fc9b503506b R08: 0000000000000000 R09: 0000000000000000 [ 102.928439][ T6400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.928450][ T6400] R13: 00007fc9b5226038 R14: 00007fc9b5225fa0 R15: 00007ffc083dbe58 [ 102.928480][ T6400] [ 103.115196][ T973] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 103.313047][ T973] usb 4-1: Using ep0 maxpacket: 32 [ 103.315585][ T973] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 103.322579][ T973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.322602][ T973] usb 4-1: Product: syz [ 103.322689][ T973] usb 4-1: Manufacturer: syz [ 103.322703][ T973] usb 4-1: SerialNumber: syz [ 103.368590][ T973] usb 4-1: config 0 descriptor?? [ 103.379753][ T973] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 103.494796][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 103.656931][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 103.658519][ T9] usb 5-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 103.688431][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.688463][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.688485][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.688547][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.745853][ T9] usb 5-1: config 0 descriptor?? [ 104.187500][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 104.353396][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 104.354267][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 104.358850][ T10] usb 3-1: config index 0 descriptor too short (expected 41214, got 45) [ 104.358875][ T10] usb 3-1: config 99 has too many interfaces: 99, using maximum allowed: 32 [ 104.358894][ T10] usb 3-1: config 99 has an invalid descriptor of length 101, skipping remainder of the config [ 104.358917][ T10] usb 3-1: config 99 has 0 interfaces, different from the descriptor's value: 99 [ 104.358980][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.756373][ T10] usb 3-1: string descriptor 0 read error: -71 [ 104.773290][ T10] usb 3-1: USB disconnect, device number 8 [ 104.780468][ T9] sony 0003:054C:042F.0003: can't set operational mode: step 3, ignoring [ 104.879333][ T9] input: HID 054c:042f as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:042F.0003/input/input5 [ 104.963912][ T9] sony 0003:054C:042F.0003: input,hidraw0: USB HID v0.00 Joystick [HID 054c:042f] on usb-dummy_hcd.4-1/input0 [ 105.050685][ T973] gspca_ov534_9: reg_r err -71 [ 105.314371][ T973] gspca_ov534_9: Unknown sensor 0000 [ 105.317122][ T973] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 105.319662][ T973] usb 4-1: USB disconnect, device number 5 [ 105.329243][ T6470] gadgetfs: bound to dummy_udc driver [ 105.563360][ T973] usb 5-1: USB disconnect, device number 5 [ 105.574194][ T5614] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 105.574421][ C1] gadgetfs: connected [ 105.575227][ T5614] gadgetfs: disconnected [ 105.822490][ T6482] Bluetooth: MGMT ver 1.23 [ 106.247273][ T31] audit: type=1800 audit(1789536768.217:3): pid=6497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.206" name="syzkaller0" dev="sda1" ino=2046 res=0 errno=0 [ 106.294368][ T30] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 106.362097][ T6499] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 106.456380][ T30] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 106.457609][ T30] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 106.457632][ T30] usb 3-1: config 1 has no interface number 0 [ 106.462205][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.462229][ T30] usb 3-1: Product: syz [ 106.462243][ T30] usb 3-1: Manufacturer: syz [ 106.462257][ T30] usb 3-1: SerialNumber: syz [ 106.498994][ T30] usb 3-1: 3:1 : does not exist [ 106.499020][ T30] usb 3-1: 3:2 : does not exist [ 106.599445][ T6502] FAULT_INJECTION: forcing a failure. [ 106.599445][ T6502] name failslab, interval 1, probability 0, space 0, times 0 [ 106.599479][ T6502] CPU: 1 UID: 0 PID: 6502 Comm: syz.4.208 Tainted: G L syzkaller #0 PREEMPT(full) [ 106.599507][ T6502] Tainted: [L]=SOFTLOCKUP [ 106.599514][ T6502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.599525][ T6502] Call Trace: [ 106.599534][ T6502] [ 106.599543][ T6502] dump_stack_lvl+0xe8/0x150 [ 106.599575][ T6502] should_fail_ex+0x3eb/0x540 [ 106.599601][ T6502] ? __pfx_proc_alloc_inode+0x10/0x10 [ 106.599632][ T6502] should_failslab+0xa8/0x100 [ 106.599657][ T6502] ? __pfx_proc_alloc_inode+0x10/0x10 [ 106.599685][ T6502] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 106.599715][ T6502] ? proc_alloc_inode+0x2a/0xc0 [ 106.599743][ T6502] ? proc_alloc_inode+0x2a/0xc0 [ 106.599776][ T6502] ? __pfx_proc_alloc_inode+0x10/0x10 [ 106.599805][ T6502] proc_alloc_inode+0x2a/0xc0 [ 106.599843][ T6502] alloc_inode+0x6a/0x1b0 [ 106.599868][ T6502] new_inode+0x1f/0x170 [ 106.599896][ T6502] proc_sys_make_inode+0x50/0x4e0 [ 106.599915][ T6502] ? do_raw_spin_unlock+0xf5/0x200 [ 106.599943][ T6502] proc_sys_lookup+0x32f/0x720 [ 106.599968][ T6502] __lookup_slow+0x1fb/0x2f0 [ 106.599997][ T6502] lookup_slow+0x53/0x70 [ 106.600024][ T6502] path_lookupat+0x3f5/0x8c0 [ 106.600064][ T6502] filename_lookup+0x265/0x5d0 [ 106.600087][ T6502] ? do_syscall_64+0x166/0x520 [ 106.600111][ T6502] ? __pfx_filename_lookup+0x10/0x10 [ 106.600159][ T6502] ? lock_acquire+0x115/0x350 [ 106.600198][ T6502] filename_setxattr+0xc2/0x630 [ 106.600227][ T6502] ? __might_fault+0xaf/0x130 [ 106.600256][ T6502] ? __pfx_filename_setxattr+0x10/0x10 [ 106.600286][ T6502] ? do_getname+0x151/0x250 [ 106.600311][ T6502] path_setxattrat+0x408/0x450 [ 106.600338][ T6502] ? __pfx_path_setxattrat+0x10/0x10 [ 106.600355][ T6502] ? do_futex+0x3e7/0x4e0 [ 106.600405][ T6502] ? rcu_is_watching+0x16/0xb0 [ 106.600431][ T6502] __x64_sys_setxattr+0xbc/0xe0 [ 106.600461][ T6502] do_syscall_64+0x166/0x520 [ 106.600479][ T6502] ? trace_irq_disable+0x3b/0x140 [ 106.600506][ T6502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.600526][ T6502] ? clear_bhb_loop+0x70/0xc0 [ 106.600550][ T6502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.600570][ T6502] RIP: 0033:0x7fa4e0d9e159 [ 106.600588][ T6502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.600605][ T6502] RSP: 002b:00007fa4e1c9a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 106.600626][ T6502] RAX: ffffffffffffffda RBX: 00007fa4e1025fa0 RCX: 00007fa4e0d9e159 [ 106.600641][ T6502] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000200000000040 [ 106.600655][ T6502] RBP: 00007fa4e0e3506b R08: 0000000000000003 R09: 0000000000000000 [ 106.600668][ T6502] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 106.600680][ T6502] R13: 00007fa4e1026038 R14: 00007fa4e1025fa0 R15: 00007ffca269d238 [ 106.600711][ T6502] [ 106.934303][ T6504] kvm: user requested TSC rate below hardware speed [ 106.941753][ T6504] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 106.941774][ T6504] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 107.390143][ T973] usb 3-1: USB disconnect, device number 9 [ 108.255266][ T973] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 108.406232][ T973] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 108.407186][ T973] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 108.407210][ T973] usb 3-1: config 0 has no interface number 0 [ 108.407258][ T973] usb 3-1: config 0 interface 41 has no altsetting 0 [ 108.410184][ T973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.410207][ T973] usb 3-1: Product: syz [ 108.410219][ T973] usb 3-1: Manufacturer: syz [ 108.410234][ T973] usb 3-1: SerialNumber: syz [ 108.471269][ T973] usb 3-1: config 0 descriptor?? [ 108.758142][ T6548] evm: overlay not supported [ 109.004545][ T6554] capability: warning: `syz.1.225' uses 32-bit capabilities (legacy support in use) [ 109.245945][ T30] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 109.300057][ T973] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 109.415908][ T5614] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 109.416499][ T30] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 109.417748][ T30] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 109.418878][ T30] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 109.421485][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.421508][ T30] usb 4-1: Product: syz [ 109.421522][ T30] usb 4-1: Manufacturer: syz [ 109.421536][ T30] usb 4-1: SerialNumber: syz [ 109.433249][ T30] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected [ 109.438979][ T30] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 109.443558][ T30] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 109.565832][ T5614] usb 2-1: Using ep0 maxpacket: 32 [ 109.567124][ T5614] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 109.568386][ T5614] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.568414][ T5614] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.568450][ T5614] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.573736][ T5614] usb 2-1: config 0 descriptor?? [ 109.591732][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 109.759444][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 109.761421][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 109.762747][ T9] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 109.762771][ T9] usb 5-1: config 0 has no interface number 0 [ 109.762811][ T9] usb 5-1: config 0 interface 184 has no altsetting 0 [ 109.765306][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.765329][ T9] usb 5-1: Product: syz [ 109.765343][ T9] usb 5-1: Manufacturer: syz [ 109.765380][ T9] usb 5-1: SerialNumber: syz [ 109.830774][ T9] usb 5-1: config 0 descriptor?? [ 109.991993][ T5614] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 109.992038][ T5614] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 110.189329][ T5614] ft260 0003:0403:6030.0004: chip code: 0000 0000 [ 110.391351][ T5614] ft260 0003:0403:6030.0004: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 110.541322][ T973] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 110.541377][ T973] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 110.541605][ T973] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 110.579755][ T973] usb 3-1: USB disconnect, device number 10 [ 110.593049][ T5614] ft260 0003:0403:6030.0004: failed to retrieve status: -32, no wakeup [ 110.799246][ T6563] ft260 0003:0403:6030.0004: ft260_i2c_read: failed with -38 [ 110.800140][ T5614] usb 2-1: USB disconnect, device number 5 [ 111.444511][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 111.444549][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 111.469947][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 111.469966][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 111.469976][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 111.469985][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 111.470152][ T9] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 111.473673][ T9] usb 5-1: USB disconnect, device number 6 [ 111.518089][ T6558] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear output buffers, -110 [ 111.550898][ T5708] usb 4-1: USB disconnect, device number 6 [ 111.566374][ T5708] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 111.574281][ T5708] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 111.579404][ T5708] ti_usb_3410_5052 4-1:2.0: device disconnected [ 111.597870][ T973] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 111.747004][ T973] usb 2-1: Using ep0 maxpacket: 8 [ 111.748923][ T973] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 111.750208][ T973] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 111.750231][ T973] usb 2-1: config 0 has no interface number 0 [ 111.750268][ T973] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 111.750288][ T973] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 111.750301][ T973] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 111.750314][ T973] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 111.750336][ T973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.752456][ T973] usb 2-1: config 0 descriptor?? [ 111.812194][ T973] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 112.225615][ T6583] FAULT_INJECTION: forcing a failure. [ 112.225615][ T6583] name failslab, interval 1, probability 0, space 0, times 0 [ 112.225654][ T6583] CPU: 0 UID: 0 PID: 6583 Comm: syz.3.238 Tainted: G L syzkaller #0 PREEMPT(full) [ 112.225685][ T6583] Tainted: [L]=SOFTLOCKUP [ 112.225693][ T6583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.225704][ T6583] Call Trace: [ 112.225713][ T6583] [ 112.225721][ T6583] dump_stack_lvl+0xe8/0x150 [ 112.225754][ T6583] should_fail_ex+0x3eb/0x540 [ 112.225781][ T6583] should_failslab+0xa8/0x100 [ 112.225804][ T6583] __kmalloc_cache_noprof+0x9e/0x600 [ 112.225835][ T6583] ? snd_seq_timer_new+0x54/0x6d0 [ 112.225862][ T6583] ? snd_seq_timer_new+0x54/0x6d0 [ 112.225892][ T6583] ? __kmalloc_cache_noprof+0x31c/0x600 [ 112.225922][ T6583] snd_seq_timer_new+0x54/0x6d0 [ 112.225957][ T6583] snd_seq_queue_alloc+0x169/0x740 [ 112.225984][ T6583] ? clientptr+0x17/0x160 [ 112.226005][ T6583] snd_seq_ioctl_create_queue+0x7f/0x3c0 [ 112.226031][ T6583] snd_seq_oss_open+0x657/0xf40 [ 112.226059][ T6583] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 112.226112][ T6583] ? rcu_is_watching+0x16/0xb0 [ 112.226134][ T6583] ? trace_contention_end+0x3d/0x140 [ 112.226175][ T6583] ? __pfx___mutex_lock+0x10/0x10 [ 112.226199][ T6583] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 112.226222][ T6583] ? __pfx_free_devinfo+0x10/0x10 [ 112.226243][ T6583] ? do_raw_spin_unlock+0xf5/0x200 [ 112.226281][ T6583] ? soundcore_open+0x2da/0x490 [ 112.226308][ T6583] odev_open+0x67/0xa0 [ 112.226330][ T6583] chrdev_open+0x4d9/0x600 [ 112.226354][ T6583] ? __pfx_chrdev_open+0x10/0x10 [ 112.226376][ T6583] ? devcgroup_check_permission+0x31/0x8f0 [ 112.226409][ T6583] ? __pfx_chrdev_open+0x10/0x10 [ 112.226427][ T6583] do_dentry_open+0x80e/0x1360 [ 112.226456][ T6583] vfs_open_consume+0x4a/0x350 [ 112.226475][ T6583] ? path_openat+0x14bb/0x1e40 [ 112.226506][ T6583] path_openat+0x14d7/0x1e40 [ 112.226552][ T6583] do_file_open+0x23e/0x4a0 [ 112.226585][ T6583] ? __pfx_do_file_open+0x10/0x10 [ 112.226633][ T6583] ? _raw_spin_unlock+0x28/0x50 [ 112.226658][ T6583] ? alloc_fd+0x651/0x6c0 [ 112.226693][ T6583] do_sys_openat2+0x115/0x200 [ 112.226715][ T6583] ? __se_sys_futex+0x3a8/0x450 [ 112.226737][ T6583] ? __pfx_do_sys_openat2+0x10/0x10 [ 112.226763][ T6583] ? rcu_is_watching+0x16/0xb0 [ 112.226787][ T6583] __x64_sys_openat+0x138/0x170 [ 112.226815][ T6583] do_syscall_64+0x166/0x520 [ 112.226833][ T6583] ? trace_irq_disable+0x3b/0x140 [ 112.226860][ T6583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.226881][ T6583] ? clear_bhb_loop+0x70/0xc0 [ 112.226905][ T6583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.226925][ T6583] RIP: 0033:0x7f057339e159 [ 112.226943][ T6583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.226959][ T6583] RSP: 002b:00007f05742d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 112.226981][ T6583] RAX: ffffffffffffffda RBX: 00007f0573625fa0 RCX: 00007f057339e159 [ 112.226995][ T6583] RDX: 0000000000080d02 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 112.227010][ T6583] RBP: 00007f057343506b R08: 0000000000000000 R09: 0000000000000000 [ 112.227022][ T6583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.227034][ T6583] R13: 00007f0573626038 R14: 00007f0573625fa0 R15: 00007ffc0876be48 [ 112.227066][ T6583] [ 112.476538][ T6589] FAULT_INJECTION: forcing a failure. [ 112.476538][ T6589] name fail_futex, interval 1, probability 0, space 0, times 0 [ 112.476569][ T6589] CPU: 0 UID: 0 PID: 6589 Comm: syz.3.239 Tainted: G L syzkaller #0 PREEMPT(full) [ 112.476595][ T6589] Tainted: [L]=SOFTLOCKUP [ 112.476602][ T6589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.476613][ T6589] Call Trace: [ 112.476621][ T6589] [ 112.476628][ T6589] dump_stack_lvl+0xe8/0x150 [ 112.476658][ T6589] should_fail_ex+0x3eb/0x540 [ 112.476684][ T6589] get_futex_key+0x1b4/0x1580 [ 112.476724][ T6589] ? __pfx_get_futex_key+0x10/0x10 [ 112.476751][ T6589] ? kasan_save_free_info+0x40/0x50 [ 112.476774][ T6589] ? __kasan_slab_free+0x5c/0x80 [ 112.476791][ T6589] ? kfree+0x1c5/0x650 [ 112.476813][ T6589] ? __se_sys_add_key+0x3a3/0x420 [ 112.476838][ T6589] ? do_syscall_64+0x166/0x520 [ 112.476855][ T6589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.476883][ T6589] futex_wake+0x119/0x5f0 [ 112.476913][ T6589] ? __pfx_futex_wake+0x10/0x10 [ 112.476951][ T6589] do_futex+0x458/0x4e0 [ 112.476977][ T6589] ? __pfx_do_futex+0x10/0x10 [ 112.477000][ T6589] ? rcu_is_watching+0x16/0xb0 [ 112.477024][ T6589] __se_sys_futex+0x3a8/0x450 [ 112.477050][ T6589] ? __pfx___se_sys_futex+0x10/0x10 [ 112.477079][ T6589] ? __x64_sys_futex+0x21/0xf0 [ 112.477102][ T6589] do_syscall_64+0x166/0x520 [ 112.477119][ T6589] ? trace_irq_disable+0x3b/0x140 [ 112.477144][ T6589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.477163][ T6589] ? clear_bhb_loop+0x70/0xc0 [ 112.477186][ T6589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.477205][ T6589] RIP: 0033:0x7f057339e159 [ 112.477222][ T6589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.477237][ T6589] RSP: 002b:00007f05742d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 112.477282][ T6589] RAX: ffffffffffffffda RBX: 00007f0573625fa8 RCX: 00007f057339e159 [ 112.477296][ T6589] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0573625fac [ 112.477309][ T6589] RBP: 00007f0573625fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 112.477322][ T6589] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 112.477335][ T6589] R13: 00007f0573626038 R14: 00007ffc0876bd60 R15: 00007ffc0876be48 [ 112.477363][ T6589] [ 112.612707][ T6591] FAULT_INJECTION: forcing a failure. [ 112.612707][ T6591] name failslab, interval 1, probability 0, space 0, times 0 [ 112.612737][ T6591] CPU: 0 UID: 0 PID: 6591 Comm: syz.4.240 Tainted: G L syzkaller #0 PREEMPT(full) [ 112.612764][ T6591] Tainted: [L]=SOFTLOCKUP [ 112.612772][ T6591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.612784][ T6591] Call Trace: [ 112.612791][ T6591] [ 112.612799][ T6591] dump_stack_lvl+0xe8/0x150 [ 112.612829][ T6591] should_fail_ex+0x3eb/0x540 [ 112.612856][ T6591] should_failslab+0xa8/0x100 [ 112.612880][ T6591] __kmalloc_cache_noprof+0x9e/0x600 [ 112.612908][ T6591] ? __kasan_kmalloc+0x93/0xb0 [ 112.612926][ T6591] ? nci_allocate_device+0xe7/0x380 [ 112.612947][ T6591] ? nci_allocate_device+0xe7/0x380 [ 112.612972][ T6591] ? __pfx_virtual_nci_send+0x10/0x10 [ 112.612992][ T6591] nci_allocate_device+0xe7/0x380 [ 112.613017][ T6591] virtual_ncidev_open+0x75/0x1a0 [ 112.613038][ T6591] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 112.613056][ T6591] misc_open+0x2d5/0x350 [ 112.613087][ T6591] chrdev_open+0x4d9/0x600 [ 112.613108][ T6591] ? __pfx_chrdev_open+0x10/0x10 [ 112.613127][ T6591] ? devcgroup_check_permission+0x31/0x8f0 [ 112.613159][ T6591] ? __pfx_chrdev_open+0x10/0x10 [ 112.613177][ T6591] do_dentry_open+0x80e/0x1360 [ 112.613208][ T6591] vfs_open_consume+0x4a/0x350 [ 112.613235][ T6591] ? path_openat+0x14bb/0x1e40 [ 112.613266][ T6591] path_openat+0x14d7/0x1e40 [ 112.613312][ T6591] do_file_open+0x23e/0x4a0 [ 112.613345][ T6591] ? __pfx_do_file_open+0x10/0x10 [ 112.613394][ T6591] ? _raw_spin_unlock+0x28/0x50 [ 112.613419][ T6591] ? alloc_fd+0x651/0x6c0 [ 112.613451][ T6591] do_sys_openat2+0x115/0x200 [ 112.613472][ T6591] ? __se_sys_futex+0x3a8/0x450 [ 112.613495][ T6591] ? __pfx_do_sys_openat2+0x10/0x10 [ 112.613524][ T6591] ? rcu_is_watching+0x16/0xb0 [ 112.613547][ T6591] __x64_sys_openat+0x138/0x170 [ 112.613574][ T6591] do_syscall_64+0x166/0x520 [ 112.613592][ T6591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.613612][ T6591] ? clear_bhb_loop+0x70/0xc0 [ 112.613635][ T6591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.613654][ T6591] RIP: 0033:0x7fa4e0d9e159 [ 112.613671][ T6591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.613687][ T6591] RSP: 002b:00007fa4e1c9a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 112.613708][ T6591] RAX: ffffffffffffffda RBX: 00007fa4e1025fa0 RCX: 00007fa4e0d9e159 [ 112.613721][ T6591] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 112.613734][ T6591] RBP: 00007fa4e0e3506b R08: 0000000000000000 R09: 0000000000000000 [ 112.613746][ T6591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.613758][ T6591] R13: 00007fa4e1026038 R14: 00007fa4e1025fa0 R15: 00007ffca269d238 [ 112.613787][ T6591] [ 114.425025][ T5708] usb 2-1: USB disconnect, device number 6 [ 114.448711][ T5708] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 114.902790][ T6632] FAULT_INJECTION: forcing a failure. [ 114.902790][ T6632] name fail_futex, interval 1, probability 0, space 0, times 0 [ 114.902820][ T6632] CPU: 0 UID: 0 PID: 6632 Comm: syz.2.255 Tainted: G L syzkaller #0 PREEMPT(full) [ 114.902844][ T6632] Tainted: [L]=SOFTLOCKUP [ 114.902851][ T6632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 114.902862][ T6632] Call Trace: [ 114.902870][ T6632] [ 114.902878][ T6632] dump_stack_lvl+0xe8/0x150 [ 114.902909][ T6632] should_fail_ex+0x3eb/0x540 [ 114.902937][ T6632] get_futex_key+0x1b4/0x1580 [ 114.902978][ T6632] ? __pfx_get_futex_key+0x10/0x10 [ 114.903005][ T6632] ? lock_acquire+0x115/0x350 [ 114.903038][ T6632] ? lock_acquire+0x115/0x350 [ 114.903067][ T6632] futex_wait_setup+0x4a/0x590 [ 114.903098][ T6632] ? __futex_wait+0xdb/0x470 [ 114.903128][ T6632] __futex_wait+0x175/0x470 [ 114.903162][ T6632] ? __pfx___futex_wait+0x10/0x10 [ 114.903189][ T6632] ? __pfx_futex_wake_mark+0x10/0x10 [ 114.903218][ T6632] ? futex_hash+0x4e/0x2b0 [ 114.903247][ T6632] ? futex_hash+0x4e/0x2b0 [ 114.903276][ T6632] ? futex_hash+0x275/0x2b0 [ 114.903310][ T6632] futex_wait+0x121/0x390 [ 114.903337][ T6632] ? __pfx_futex_wait+0x10/0x10 [ 114.903381][ T6632] do_futex+0x3e7/0x4e0 [ 114.903406][ T6632] ? __pfx_do_futex+0x10/0x10 [ 114.903434][ T6632] __se_sys_futex+0x3a8/0x450 [ 114.903460][ T6632] ? __pfx___se_sys_futex+0x10/0x10 [ 114.903480][ T6632] ? __se_sys_rename+0x185/0x2c0 [ 114.903501][ T6632] ? kmem_cache_free+0x182/0x650 [ 114.903544][ T6632] ? __x64_sys_futex+0x21/0xf0 [ 114.903569][ T6632] do_syscall_64+0x166/0x520 [ 114.903588][ T6632] ? trace_irq_disable+0x3b/0x140 [ 114.903615][ T6632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.903635][ T6632] ? clear_bhb_loop+0x70/0xc0 [ 114.903659][ T6632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.903679][ T6632] RIP: 0033:0x7f0df219e159 [ 114.903697][ T6632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.903713][ T6632] RSP: 002b:00007f0df30350e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 114.903734][ T6632] RAX: ffffffffffffffda RBX: 00007f0df2425fa8 RCX: 00007f0df219e159 [ 114.903749][ T6632] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0df2425fa8 [ 114.903761][ T6632] RBP: 00007f0df2425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 114.903774][ T6632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.903786][ T6632] R13: 00007f0df2426038 R14: 00007ffcaa5a5850 R15: 00007ffcaa5a5938 [ 114.903816][ T6632] Hü[ 115.226162][ T52] Bluetooth: hci4: setting up ROME/QCA6390 [ 115.272142][ T6635] Bluetooth: hci4: Frame reassembly failed (-84) [ 115.281731][ T973] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 115.429207][ T973] usb 5-1: Using ep0 maxpacket: 16 [ 115.432466][ T973] usb 5-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 115.434608][ T973] usb 5-1: too many endpoints for config 0 interface 0 altsetting 8: 254, using maximum allowed: 30 [ 115.434644][ T973] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 115.434670][ T973] usb 5-1: config 0 interface 0 has no altsetting 0 [ 115.434734][ T973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.496361][ T973] usb 5-1: config 0 descriptor?? ü[ 115.792611][ T973] usbhid 5-1:0.0: can't add hid device: -71 [ 115.792707][ T973] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 115.828623][ T973] usb 5-1: USB disconnect, device number 7 [ 116.022159][ T6644] kvm: faulting far call emulation tainted memory [ 116.022258][ T6644] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 116.766795][ T6649] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 117.601935][ T5616] Bluetooth: hci4: command 0xfc00 tx timeout [ 117.602521][ T52] Bluetooth: hci4: Reading QCA version information failed (-110) Hü[ 117.602640][ T52] Bluetooth: hci4: Retry BT power ON:0 [ 117.630334][ T30] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 117.780225][ T30] usb 4-1: Using ep0 maxpacket: 32 [ 117.784059][ T30] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 117.785615][ T30] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 117.785637][ T30] usb 4-1: config 0 has no interface number 0 [ 117.789529][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.789549][ T30] usb 4-1: Product: syz [ 117.789563][ T30] usb 4-1: Manufacturer: syz [ 117.789577][ T30] usb 4-1: SerialNumber: syz [ 117.793205][ T30] usb 4-1: config 0 descriptor?? ü[ 118.239214][ T30] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 118.239239][ T30] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 119.460002][ T30] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 119.460254][ T30] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 119.491373][ T30] usb 4-1: USB disconnect, device number 7 Hü[ 120.002963][ T5616] Bluetooth: hci4: command 0xfc00 tx timeout [ 120.003061][ T52] Bluetooth: hci4: Reading QCA version information failed (-110) [ 120.003087][ T52] Bluetooth: hci4: Retry BT power ON:1 ü[ 120.667036][ T6725] tipc: Enabled bearer , priority 0 [ 120.729731][ T6721] syzkaller0: entered promiscuous mode [ 120.729754][ T6721] syzkaller0: entered allmulticast mode [ 120.730438][ T6721] tipc: Resetting bearer [ 120.751317][ T6720] tipc: Resetting bearer [ 120.796231][ T6727] net_ratelimit: 51 callbacks suppressed [ 120.950466][ T6729] FAULT_INJECTION: forcing a failure. [ 120.950466][ T6729] name failslab, interval 1, probability 0, space 0, times 0 [ 120.950510][ T6729] CPU: 0 UID: 0 PID: 6729 Comm: syz.4.288 Tainted: G L syzkaller #0 PREEMPT(full) [ 120.950536][ T6729] Tainted: [L]=SOFTLOCKUP [ 120.950544][ T6729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 120.950557][ T6729] Call Trace: [ 120.950565][ T6729] [ 120.950575][ T6729] dump_stack_lvl+0xe8/0x150 [ 120.950608][ T6729] should_fail_ex+0x3eb/0x540 [ 120.950636][ T6729] should_failslab+0xa8/0x100 [ 120.950661][ T6729] __kmalloc_cache_noprof+0x9e/0x600 [ 120.950692][ T6729] ? alloc_mnt_ns+0xae/0x2c0 [ 120.950720][ T6729] ? alloc_mnt_ns+0xae/0x2c0 [ 120.950751][ T6729] alloc_mnt_ns+0xae/0x2c0 [ 120.950779][ T6729] __se_sys_fsmount+0x754/0xf00 [ 120.950814][ T6729] ? __pfx___se_sys_fsmount+0x10/0x10 [ 120.950843][ T6729] ? rcu_is_watching+0x16/0xb0 [ 120.950878][ T6729] do_syscall_64+0x166/0x520 [ 120.950898][ T6729] ? trace_irq_disable+0x3b/0x140 [ 120.950928][ T6729] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.950950][ T6729] ? clear_bhb_loop+0x70/0xc0 [ 120.950976][ T6729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.950998][ T6729] RIP: 0033:0x7fa4e0d9e159 [ 120.951026][ T6729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.951044][ T6729] RSP: 002b:00007fa4e1c9a028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b0 [ 120.951073][ T6729] RAX: ffffffffffffffda RBX: 00007fa4e1025fa0 RCX: 00007fa4e0d9e159 [ 120.951089][ T6729] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 120.951103][ T6729] RBP: 00007fa4e0e3506b R08: 0000000000000000 R09: 0000000000000000 [ 120.951118][ T6729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.951132][ T6729] R13: 00007fa4e1026038 R14: 00007fa4e1025fa0 R15: 00007ffca269d238 [ 120.951167][ T6729] [ 122.331381][ T5616] Bluetooth: hci4: command 0xfc00 tx timeout Hü[ 122.331493][ T52] Bluetooth: hci4: Reading QCA version information failed (-110) [ 122.331522][ T52] Bluetooth: hci4: Retry BT power ON:2 ü[ 124.733398][ T5616] Bluetooth: hci4: command 0xfc00 tx timeout [ 124.733507][ T52] Bluetooth: hci4: Reading QCA version information failed (-110) [ 125.582200][ T6720] tipc: Disabling bearer [ 126.174133][ C1] net_ratelimit: 75 callbacks suppressed [ 126.176173][ T6786] netlink: 20 bytes leftover after parsing attributes in process `syz.3.305'. [ 126.265934][ T9] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 126.307185][ T6788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.306'. [ 126.415400][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 126.420774][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.420794][ T9] usb 5-1: Product: syz [ 126.420808][ T9] usb 5-1: Manufacturer: syz [ 126.420823][ T9] usb 5-1: SerialNumber: syz [ 126.462766][ T9] usb 5-1: config 0 descriptor?? [ 126.673084][ T9] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 126.784439][ T30] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 126.814459][ T5759] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 126.934518][ T30] usb 3-1: Using ep0 maxpacket: 32 [ 126.939539][ T30] usb 3-1: unable to get BOS descriptor or descriptor too short [ 126.939582][ T30] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 126.940934][ T30] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.940956][ T30] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 126.943418][ T30] usb 3-1: New USB device strings: Mfr=2, Product=2, SerialNumber=3 [ 126.943431][ T30] usb 3-1: Product: syz [ 126.943439][ T30] usb 3-1: Manufacturer: syz [ 126.943446][ T30] usb 3-1: SerialNumber: syz [ 126.976751][ T5759] usb 2-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 126.978201][ T5759] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 126.978226][ T5759] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 126.978250][ T5759] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 126.978297][ T5759] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 32768, setting to 1024 [ 126.981822][ T5759] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.981848][ T5759] usb 2-1: Product: syz [ 126.981862][ T5759] usb 2-1: Manufacturer: syz [ 126.981899][ T5759] usb 2-1: SerialNumber: syz [ 126.999675][ T6795] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 126.999816][ T6795] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 127.008946][ T5759] oti6858 2-1:1.0: oti6858 converter detected [ 127.037471][ T5759] usb 2-1: oti6858 converter now attached to ttyUSB0 [ 127.438462][ T5759] usb 2-1: USB disconnect, device number 7 [ 127.473684][ T5759] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 127.488580][ T5759] oti6858 2-1:1.0: device disconnected [ 127.529916][ T30] usb 3-1: 3:0: cannot get min/max values for control 2 (id 3) [ 127.529940][ T30] usb 3-1: applying playback min mute quirk [ 127.529955][ T30] usb 3-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 127.529973][ T30] usb 3-1: [3] FU [ÑŠ Playback Volume] ch = 1, val = 0/1/1 [ 127.532286][ T30] usb 3-1: 3:0: cannot get min/max values for control 8 (id 3) [ 127.533199][ T30] usb 3-1: 3:0: failed to get current value for ch 1 (-71) [ 127.589878][ T30] usb 3-1: 3:0: failed to get current value for ch 1 (-71) [ 127.646848][ T30] usb 3-1: USB disconnect, device number 11 [ 127.730560][ T6002] udevd[6002]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.311546][ T9] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 128.344588][ T9] usb 5-1: USB disconnect, device number 8 [ 128.708011][ T6806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.314'. [ 129.195683][ T5708] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 129.346160][ T5708] usb 5-1: Using ep0 maxpacket: 32 [ 129.346908][ T5708] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 129.348576][ T5708] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.348601][ T5708] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.348653][ T5708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.354465][ T5708] usb 5-1: config 0 descriptor?? [ 129.419283][ T5708] hub 5-1:0.0: USB hub found [ 129.567215][ T5708] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 129.993134][ T5708] hid-generic 0003:046D:C31C.0005: unknown main item tag 0x0 [ 130.023942][ T5708] hid-generic 0003:046D:C31C.0005: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 130.226517][ T5759] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 130.377549][ T5759] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 130.379116][ T5759] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 130.379140][ T5759] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 130.379160][ T5759] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 130.379222][ T5759] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 130.379247][ T5759] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 130.381207][ T5759] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 130.381227][ T5759] usb 2-1: Product: syz [ 130.381242][ T5759] usb 2-1: Manufacturer: syz [ 130.403005][ T5759] cdc_wdm 2-1:1.0: skipping garbage [ 130.403017][ T5759] cdc_wdm 2-1:1.0: skipping garbage [ 130.423090][ T5759] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 130.423106][ T5759] cdc_wdm 2-1:1.0: Unknown control protocol [ 130.673305][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 130.673328][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 130.674197][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 130.674219][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 130.674625][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 130.674645][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 130.674999][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 130.675019][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 130.675279][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 130.675299][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 130.675666][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 130.675686][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 130.675835][ T5759] usb 2-1: USB disconnect, device number 8 [ 130.675946][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 130.675966][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 130.675984][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 130.714075][ T6814] usb 5-1: reset high-speed USB device number 9 using dummy_hcd [ 131.323380][ T5759] usb 5-1: USB disconnect, device number 9 [ 131.366732][ C1] net_ratelimit: 38 callbacks suppressed [ 131.705989][ T6843] nvme_tcp: queue 0: data digest mismatch host: disabled ctrl: enabled [ 132.702016][ T6871] nvmet_tcp: address family 255 not supported [ 132.812811][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.812862][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.930971][ T6876] FAULT_INJECTION: forcing a failure. [ 132.930971][ T6876] name failslab, interval 1, probability 0, space 0, times 0 [ 132.931002][ T6876] CPU: 1 UID: 0 PID: 6876 Comm: syz.2.341 Tainted: G L syzkaller #0 PREEMPT(full) [ 132.931032][ T6876] Tainted: [L]=SOFTLOCKUP [ 132.931041][ T6876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 132.931054][ T6876] Call Trace: [ 132.931064][ T6876] [ 132.931073][ T6876] dump_stack_lvl+0xe8/0x150 [ 132.931106][ T6876] should_fail_ex+0x3eb/0x540 [ 132.931135][ T6876] should_failslab+0xa8/0x100 [ 132.931162][ T6876] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 132.931197][ T6876] ? snd_pcm_hw_rule_add+0x196/0x800 [ 132.931222][ T6876] ? snd_pcm_hw_rule_add+0x196/0x800 [ 132.931254][ T6876] ? kfree+0x4d/0x650 [ 132.931279][ T6876] ? snd_pcm_hw_rule_add+0x196/0x800 [ 132.931305][ T6876] krealloc_node_align_noprof+0x19a/0x390 [ 132.931343][ T6876] snd_pcm_hw_rule_add+0x196/0x800 [ 132.931368][ T6876] ? __pfx_snd_pcm_hw_rule_muldivk+0x10/0x10 [ 132.931398][ T6876] ? __pfx_snd_pcm_hw_rule_format+0x10/0x10 [ 132.931427][ T6876] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 132.931456][ T6876] ? snd_pcm_attach_substream+0x845/0xb10 [ 132.931494][ T6876] snd_pcm_open_substream+0xebf/0x24f0 [ 132.931518][ T6876] ? snd_pcm_open+0x17d/0x690 [ 132.931548][ T6876] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 132.931574][ T6876] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 132.931608][ T6876] snd_pcm_open+0x1dc/0x690 [ 132.931635][ T6876] ? __pfx_snd_pcm_open+0x10/0x10 [ 132.931657][ T6876] ? __pfx_default_wake_function+0x10/0x10 [ 132.931694][ T6876] snd_pcm_playback_open+0x5f/0xc0 [ 132.931719][ T6876] chrdev_open+0x4d9/0x600 [ 132.931742][ T6876] ? __pfx_chrdev_open+0x10/0x10 [ 132.931765][ T6876] ? devcgroup_check_permission+0x31/0x8f0 [ 132.931799][ T6876] ? __pfx_chrdev_open+0x10/0x10 [ 132.931819][ T6876] do_dentry_open+0x80e/0x1360 [ 132.931852][ T6876] vfs_open_consume+0x4a/0x350 [ 132.931873][ T6876] ? path_openat+0x14bb/0x1e40 [ 132.931905][ T6876] path_openat+0x14d7/0x1e40 [ 132.931953][ T6876] do_file_open+0x23e/0x4a0 [ 132.931989][ T6876] ? __pfx_do_file_open+0x10/0x10 [ 132.932040][ T6876] ? _raw_spin_unlock+0x28/0x50 [ 132.932066][ T6876] ? alloc_fd+0x651/0x6c0 [ 132.932101][ T6876] do_sys_openat2+0x115/0x200 [ 132.932127][ T6876] ? __pfx_do_sys_openat2+0x10/0x10 [ 132.932157][ T6876] ? do_user_addr_fault+0xd3f/0x1480 [ 132.932190][ T6876] __x64_sys_openat+0x138/0x170 [ 132.932219][ T6876] do_syscall_64+0x166/0x520 [ 132.932238][ T6876] ? trace_irq_disable+0x3b/0x140 [ 132.932272][ T6876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.932294][ T6876] ? clear_bhb_loop+0x70/0xc0 [ 132.932320][ T6876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.932341][ T6876] RIP: 0033:0x7f0df215e98e [ 132.932361][ T6876] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 132.932380][ T6876] RSP: 002b:00007f0df3034b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 132.932403][ T6876] RAX: ffffffffffffffda RBX: 00007f0df30356c0 RCX: 00007f0df215e98e [ 132.932419][ T6876] RDX: 0000000000101080 RSI: 00007f0df3034c00 RDI: ffffffffffffff9c [ 132.932434][ T6876] RBP: 00007f0df3034c00 R08: 0000000000000000 R09: 0000000000000000 [ 132.932448][ T6876] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 132.932462][ T6876] R13: 00007f0df2426038 R14: 00007f0df2425fa0 R15: 00007ffcaa5a5938 [ 132.932495][ T6876] [ 133.007888][ T30] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 133.174254][ T30] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 133.174291][ T30] usb 4-1: too many configurations: 73, using maximum allowed: 8 [ 133.176570][ T30] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.176590][ T30] usb 4-1: config 0 has no interfaces? [ 133.184751][ T30] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.184771][ T30] usb 4-1: config 0 has no interfaces? [ 133.187331][ T30] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.187352][ T30] usb 4-1: config 0 has no interfaces? [ 133.191035][ T30] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.191056][ T30] usb 4-1: config 0 has no interfaces? [ 133.196388][ T30] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.196410][ T30] usb 4-1: config 0 has no interfaces? [ 133.201274][ T30] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.201294][ T30] usb 4-1: config 0 has no interfaces? [ 133.209287][ T30] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.209308][ T30] usb 4-1: config 0 has no interfaces? [ 133.213763][ T30] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.213784][ T30] usb 4-1: config 0 has no interfaces? [ 133.215159][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=145 [ 133.215179][ T30] usb 4-1: SerialNumber: syz [ 133.293134][ T30] usb 4-1: config 0 descriptor?? [ 133.563812][ T30] usb 4-1: USB disconnect, device number 8 [ 134.456974][ T6908] VFS: file-max limit 0 reached [ 134.468320][ T5759] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 134.643380][ T5759] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 134.656189][ T5759] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.656210][ T5759] usb 5-1: Product: syz [ 134.656224][ T5759] usb 5-1: Manufacturer: syz [ 134.656238][ T5759] usb 5-1: SerialNumber: syz [ 134.685318][ T5759] usb 5-1: config 0 descriptor?? [ 134.695038][ T5759] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 135.256249][ T6928] FAULT_INJECTION: forcing a failure. [ 135.256249][ T6928] name failslab, interval 1, probability 0, space 0, times 0 [ 135.256279][ T6928] CPU: 1 UID: 0 PID: 6928 Comm: syz.3.359 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.256307][ T6928] Tainted: [L]=SOFTLOCKUP [ 135.256317][ T6928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 135.256330][ T6928] Call Trace: [ 135.256338][ T6928] [ 135.256348][ T6928] dump_stack_lvl+0xe8/0x150 [ 135.256381][ T6928] should_fail_ex+0x3eb/0x540 [ 135.256408][ T6928] should_failslab+0xa8/0x100 [ 135.256432][ T6928] __kmalloc_cache_noprof+0x9e/0x600 [ 135.256461][ T6928] ? kvm_init_irq_routing+0x4f/0x110 [ 135.256486][ T6928] ? kvm_dev_ioctl+0xa1a/0x1770 [ 135.256512][ T6928] ? kvm_dev_ioctl+0xa1a/0x1770 [ 135.256544][ T6928] kvm_dev_ioctl+0xa1a/0x1770 [ 135.256579][ T6928] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 135.256606][ T6928] ? __fget_files+0x2a/0x420 [ 135.256634][ T6928] ? bpf_lsm_file_ioctl+0x9/0x20 [ 135.256659][ T6928] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 135.256687][ T6928] __se_sys_ioctl+0xfc/0x170 [ 135.256719][ T6928] do_syscall_64+0x166/0x520 [ 135.256738][ T6928] ? trace_irq_disable+0x3b/0x140 [ 135.256767][ T6928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.256788][ T6928] ? clear_bhb_loop+0x70/0xc0 [ 135.256814][ T6928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.256835][ T6928] RIP: 0033:0x7f057339e159 [ 135.256854][ T6928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.256872][ T6928] RSP: 002b:00007f05742d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 135.256896][ T6928] RAX: ffffffffffffffda RBX: 00007f0573625fa0 RCX: 00007f057339e159 [ 135.256912][ T6928] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000005 [ 135.256925][ T6928] RBP: 00007f057343506b R08: 0000000000000000 R09: 0000000000000000 [ 135.256939][ T6928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.256951][ T6928] R13: 00007f0573626038 R14: 00007f0573625fa0 R15: 00007ffc0876be48 [ 135.256984][ T6928] [ 135.665057][ T6935] digital: digital_start_poll: Unknown protocol [ 136.134879][ T9] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 136.135150][ T5759] gspca_stk1135: reg_w 0xf err -71 [ 136.136206][ T5759] gspca_stk1135: serial bus timeout: status=0x00 [ 136.136220][ T5759] gspca_stk1135: Sensor write failed [ 136.136270][ T5759] gspca_stk1135: serial bus timeout: status=0x00 [ 136.136281][ T5759] gspca_stk1135: Sensor write failed [ 136.136308][ T5759] gspca_stk1135: serial bus timeout: status=0x00 [ 136.136318][ T5759] gspca_stk1135: Sensor read failed [ 136.136345][ T5759] gspca_stk1135: serial bus timeout: status=0x00 [ 136.136355][ T5759] gspca_stk1135: Sensor read failed [ 136.136363][ T5759] gspca_stk1135: Detected sensor type unknown (0x0) [ 136.136421][ T5759] gspca_stk1135: serial bus timeout: status=0x00 [ 136.136432][ T5759] gspca_stk1135: Sensor read failed [ 136.136458][ T5759] gspca_stk1135: serial bus timeout: status=0x00 [ 136.136468][ T5759] gspca_stk1135: Sensor read failed [ 136.136494][ T5759] gspca_stk1135: serial bus timeout: status=0x00 [ 136.136504][ T5759] gspca_stk1135: Sensor write failed [ 136.136550][ T5759] gspca_stk1135: serial bus timeout: status=0x00 [ 136.136560][ T5759] gspca_stk1135: Sensor write failed [ 136.138662][ T5759] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 136.257541][ T5759] usb 5-1: USB disconnect, device number 10 [ 136.281113][ T9] usb 2-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 136.282783][ T9] usb 2-1: config 0 has an invalid interface number: 175 but max is 0 [ 136.282804][ T9] usb 2-1: config 0 has an invalid descriptor of length 123, skipping remainder of the config [ 136.282823][ T9] usb 2-1: config 0 has no interface number 0 [ 136.282878][ T9] usb 2-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 136.282903][ T9] usb 2-1: config 0 interface 175 altsetting 0 endpoint 0x8A has invalid maxpacket 9728, setting to 64 [ 136.282944][ T9] usb 2-1: config 0 interface 175 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 16 [ 136.289699][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.289719][ T9] usb 2-1: Product: syz [ 136.289734][ T9] usb 2-1: Manufacturer: syz [ 136.289747][ T9] usb 2-1: SerialNumber: syz [ 136.318380][ T9] usb 2-1: config 0 descriptor?? [ 136.348465][ T9] symbolserial 2-1:0.175: required endpoints missing [ 136.550523][ T5759] usb 2-1: USB disconnect, device number 9 [ 136.569327][ C1] net_ratelimit: 61 callbacks suppressed [ 136.662879][ T5708] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 136.810096][ T5708] usb 3-1: Using ep0 maxpacket: 8 [ 136.936987][ T6955] netlink: 11575 bytes leftover after parsing attributes in process `syz.3.367'. [ 137.004134][ T5708] usb 3-1: unable to get BOS descriptor or descriptor too short [ 137.004178][ T5708] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 137.009303][ T5708] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 137.009337][ T5708] usb 3-1: can't read configurations, error -71 [ 137.220993][ T6959] rust_binder: Write failure EINVAL in pid:274 [ 137.600439][ T43] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 137.606976][ T43] (NULL device *): queue 0 connect admin queue failed (-111). [ 137.607058][ T43] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 137.607078][ T43] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 137.648757][ T6962] nvme nvme0: NVME-FC{0}: new ctrl: NQN "n", hostnqn: nqn.2014-08.org.nvmexpress:uuid:28183fbb-e87a-498a-aec6-2e7caa0e2c1e [ 138.240548][ T5708] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 138.391494][ T5708] usb 3-1: Using ep0 maxpacket: 32 [ 138.392301][ T5708] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 138.394502][ T5708] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.394529][ T5708] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.394583][ T5708] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.437859][ T5708] usb 3-1: config 0 descriptor?? [ 138.485723][ T6980] loop0: detected capacity change from 0 to 4096 [ 138.546605][ T6980] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 138.546634][ T6980] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 138.546648][ T6980] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 138.546740][ T6980] loop0: [ 138.865560][ T5708] ft260 0003:0403:6030.0006: unknown main item tag 0x0 [ 138.865594][ T5708] ft260 0003:0403:6030.0006: unknown main item tag 0x0 [ 139.058130][ T5708] ft260 0003:0403:6030.0006: chip code: 0000 0000 [ 139.252529][ T5708] ft260 0003:0403:6030.0006: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 139.356701][ T6991] EXT4-fs (sda1): resizing filesystem from 262144 to 1 blocks [ 139.356731][ T6991] EXT4-fs warning (device sda1): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 139.451081][ T52] Bluetooth: hci1: command 0x2016 tx timeout [ 139.453610][ T5708] ft260 0003:0403:6030.0006: failed to retrieve status: -32, no wakeup [ 139.612974][ T12] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 139.616690][ T12] (NULL device *): queue 0 connect admin queue failed (-111). [ 139.616715][ T12] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 139.616733][ T12] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 139.662638][ T6975] i2c i2c-1: adapter quirk: 2nd comb msg must be read (addr 0xfff8, size 0, write) [ 139.664132][ T9] usb 3-1: USB disconnect, device number 14 [ 139.862665][ T5759] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 140.037632][ T5759] usb 4-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 140.044232][ T5759] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.044257][ T5759] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.044310][ T5759] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.576648][ T5759] hid-sensor-hub 0003:8086:0000.0007: unknown main item tag 0x0 [ 140.576680][ T5759] hid-sensor-hub 0003:8086:0000.0007: unknown main item tag 0x0 [ 140.616281][ T5759] hid-sensor-hub 0003:8086:0000.0007: hiddev0,hidraw0: USB HID v1.11 Device [HID 8086:0000] on usb-dummy_hcd.3-1/input0 [ 140.999726][ T7028] kvm: pic: single mode not supported [ 140.999741][ T7028] kvm: pic: level sensitive irq not supported [ 140.999875][ T7028] kvm: pic: single mode not supported [ 140.999885][ T7028] kvm: pic: level sensitive irq not supported [ 141.000010][ T7028] kvm: pic: single mode not supported [ 141.000020][ T7028] kvm: pic: level sensitive irq not supported [ 141.000143][ T7028] kvm: pic: single mode not supported [ 141.000152][ T7028] kvm: pic: level sensitive irq not supported [ 141.057077][ T7028] kvm: pic: single mode not supported [ 141.057091][ T7028] kvm: pic: level sensitive irq not supported [ 141.057212][ T7028] kvm: pic: single mode not supported [ 141.057223][ T7028] kvm: pic: level sensitive irq not supported [ 141.058487][ T7028] kvm: pic: single mode not supported [ 141.058497][ T7028] kvm: pic: level sensitive irq not supported [ 141.058650][ T7028] kvm: pic: single mode not supported [ 141.058661][ T7028] kvm: pic: level sensitive irq not supported [ 141.058790][ T7028] kvm: pic: single mode not supported [ 141.058799][ T7028] kvm: pic: level sensitive irq not supported [ 141.122617][ T7028] kvm: pic: single mode not supported [ 141.122630][ T7028] kvm: pic: level sensitive irq not supported [ 141.694621][ T12] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 141.694872][ T12] (NULL device *): queue 0 connect admin queue failed (-111). [ 141.694906][ T12] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 141.694925][ T12] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 141.771905][ C0] net_ratelimit: 83 callbacks suppressed [ 142.664460][ T5708] usb 4-1: USB disconnect, device number 9 [ 143.194716][ T7077] FAULT_INJECTION: forcing a failure. [ 143.194716][ T7077] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 143.194743][ T7077] CPU: 0 UID: 0 PID: 7077 Comm: syz.2.410 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.194768][ T7077] Tainted: [L]=SOFTLOCKUP [ 143.194776][ T7077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 143.194788][ T7077] Call Trace: [ 143.194797][ T7077] [ 143.194806][ T7077] dump_stack_lvl+0xe8/0x150 [ 143.194835][ T7077] should_fail_ex+0x3eb/0x540 [ 143.194862][ T7077] _copy_from_user+0x2d/0xb0 [ 143.194890][ T7077] ucma_set_option+0xf9/0xce0 [ 143.194921][ T7077] ? __pfx_ucma_set_option+0x10/0x10 [ 143.194944][ T7077] ? __lock_acquire+0x747/0x2de0 [ 143.194980][ T7077] ? aa_file_perm+0x4ed/0x15f0 [ 143.195006][ T7077] ? aa_file_perm+0x18b/0x15f0 [ 143.195043][ T7077] ? lock_acquire+0x115/0x350 [ 143.195084][ T7077] ? __might_fault+0xaf/0x130 [ 143.195116][ T7077] ucma_write+0x249/0x2f0 [ 143.195142][ T7077] ? __pfx_ucma_write+0x10/0x10 [ 143.195163][ T7077] ? security_file_permission+0x75/0x260 [ 143.195194][ T7077] ? rw_verify_area+0x203/0x4c0 [ 143.195223][ T7077] ? __pfx_ucma_write+0x10/0x10 [ 143.195255][ T7077] vfs_write+0x296/0xba0 [ 143.195291][ T7077] ? __pfx_vfs_write+0x10/0x10 [ 143.195320][ T7077] ? __fget_files+0x2a/0x420 [ 143.195350][ T7077] ? __fget_files+0x2a/0x420 [ 143.195373][ T7077] ? __fget_files+0x3a2/0x420 [ 143.195396][ T7077] ? __fget_files+0x2a/0x420 [ 143.195429][ T7077] ksys_write+0x150/0x270 [ 143.195457][ T7077] ? __pfx_ksys_write+0x10/0x10 [ 143.195495][ T7077] do_syscall_64+0x166/0x520 [ 143.195514][ T7077] ? trace_irq_disable+0x3b/0x140 [ 143.195542][ T7077] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.195563][ T7077] ? clear_bhb_loop+0x70/0xc0 [ 143.195589][ T7077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.195607][ T7077] RIP: 0033:0x7f0df219e159 [ 143.195623][ T7077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.195637][ T7077] RSP: 002b:00007f0df3035028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 143.195654][ T7077] RAX: ffffffffffffffda RBX: 00007f0df2425fa0 RCX: 00007f0df219e159 [ 143.195669][ T7077] RDX: 0000000000000020 RSI: 00002000000000c0 RDI: 0000000000000004 [ 143.195680][ T7077] RBP: 00007f0df223506b R08: 0000000000000000 R09: 0000000000000000 [ 143.195691][ T7077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.195701][ T7077] R13: 00007f0df2426038 R14: 00007f0df2425fa0 R15: 00007ffcaa5a5938 [ 143.195727][ T7077] [ 143.740008][ T31] audit: type=1326 audit(1789536805.678:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7065 comm="syz.4.408" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa4e0d9e159 code=0x0 [ 143.775191][ T772] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 143.779093][ T772] (NULL device *): queue 0 connect admin queue failed (-111). [ 143.779118][ T772] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 143.779137][ T772] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 145.123121][ T7106] capability: warning: `syz.2.419' uses deprecated v2 capabilities in a way that may be insecure [ 145.507695][ T7119] CIFS: Attempting to mount //::1/share [ 145.753003][ T7127] tipc: Enabled bearer , priority 0 [ 145.818752][ T7127] syzkaller0: entered promiscuous mode [ 145.818775][ T7127] syzkaller0: entered allmulticast mode [ 145.819709][ T7127] tipc: Resetting bearer [ 145.841202][ T7126] tipc: Resetting bearer [ 145.854422][ T772] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 145.855032][ T772] (NULL device *): queue 0 connect admin queue failed (-111). [ 145.855054][ T772] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 145.855072][ T772] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 146.045366][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 146.205930][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 146.211300][ T9] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 146.215536][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 146.215563][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 146.219965][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.219984][ T9] usb 3-1: Product: syz [ 146.219998][ T9] usb 3-1: Manufacturer: syz [ 146.220021][ T9] usb 3-1: SerialNumber: syz [ 146.223611][ T9] usb 3-1: config 0 descriptor?? [ 146.336076][ T7119] CIFS: VFS: cifs_mount failed w/return code = -512 [ 146.563869][ C0] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 146.772052][ T9] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input6 [ 146.896553][ T6125] net_ratelimit: 76 callbacks suppressed [ 146.897305][ T9] imon:send_packet: packet tx failed (-71) [ 146.929495][ T9] imon 3-1:0.0: panel buttons/knobs setup failed [ 147.007245][ T9] rc_core: IR keymap rc-imon-pad not found [ 147.007265][ T9] Registered IR keymap rc-empty [ 147.007516][ T9] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 147.007532][ T9] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 147.014267][ T9] imon:send_packet: packet tx failed (-71) [ 147.034700][ T9] imon 3-1:0.0: remote input dev register failed [ 147.034965][ T9] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 147.222564][ T9] imon 3-1:0.0: unable to initialize intf0, err 0 [ 147.222579][ T9] imon:imon_probe: failed to initialize context! [ 147.222591][ T9] imon 3-1:0.0: unable to register, err -19 [ 147.262926][ T9] usb 3-1: USB disconnect, device number 15 [ 147.644870][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 147.798732][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 147.805999][ T9] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 147.808586][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 147.808617][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 147.812884][ T9] usb 3-1: string descriptor 0 read error: -22 [ 147.813031][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.819598][ T9] usb 3-1: config 0 descriptor?? [ 147.854741][ T9] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input8 [ 147.936066][ T50] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 147.938035][ T50] (NULL device *): queue 0 connect admin queue failed (-111). [ 147.938060][ T50] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 147.938079][ T50] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 148.025058][ T5708] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 148.186059][ T5708] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 148.186744][ T9] rc_core: IR keymap rc-imon-pad not found [ 148.186759][ T9] Registered IR keymap rc-empty [ 148.186871][ T9] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 148.186890][ T9] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 148.188569][ T5708] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.188612][ T5708] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 148.188638][ T5708] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 148.188664][ T5708] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 148.188686][ T5708] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 148.192448][ T5708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 148.192467][ T5708] usb 4-1: Product: syz [ 148.192480][ T5708] usb 4-1: Manufacturer: syz [ 148.192495][ T5708] usb 4-1: SerialNumber: syz [ 148.263934][ T5708] usb 4-1: config 0 descriptor?? [ 148.295760][ T9] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 148.298493][ T9] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input9 [ 148.340033][ T9] imon 3-1:0.0: iMON device (15c2:0041, intf0) on usb<3:16> initialized [ 148.495561][ T5708] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 148.495582][ T5708] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 148.698424][ T5708] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 148.698444][ T5708] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 148.698464][ T5708] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 148.699328][ C0] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 148.700139][ T5767] usb 3-1: USB disconnect, device number 16 [ 148.901268][ T5708] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 149.688229][ T5767] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 149.841473][ T5767] usb 3-1: Using ep0 maxpacket: 16 [ 149.848419][ T5767] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 149.850456][ T5767] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 149.852623][ T5767] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.852642][ T5767] usb 3-1: Product: syz [ 149.852655][ T5767] usb 3-1: Manufacturer: syz [ 149.852669][ T5767] usb 3-1: SerialNumber: syz [ 149.855529][ T5767] usb 3-1: config 0 descriptor?? [ 149.883446][ T5767] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 149.883472][ T5767] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 149.959518][ T7126] tipc: Disabling bearer [ 150.019277][ T43] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 150.020277][ T43] (NULL device *): queue 0 connect admin queue failed (-111). [ 150.020298][ T43] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 150.020317][ T43] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 150.124401][ T5708] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 150.124845][ T5708] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 150.177758][ T5708] usb 4-1: USB disconnect, device number 10 [ 150.248656][ T31] audit: type=1800 audit(1789536812.195:5): pid=7170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.441" name="(" dev="sda1" ino=2043 res=0 errno=0 [ 150.502842][ T5767] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 151.164892][ T5767] em28xx 3-1:0.0: read from i2c device at 0xa0 failed with unknown error (status=65) [ 151.164964][ T5767] em28xx 3-1:0.0: board has no eeprom [ 151.429687][ T5767] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 151.429720][ T5767] em28xx 3-1:0.0: dvb set to bulk mode. [ 151.432351][ T9] em28xx 3-1:0.0: Binding DVB extension [ 151.481748][ T5767] usb 3-1: USB disconnect, device number 17 [ 151.528609][ T5767] em28xx 3-1:0.0: Disconnecting em28xx [ 151.680341][ T9] em28xx 3-1:0.0: Registering input extension [ 151.683349][ T5767] em28xx 3-1:0.0: Closing input extension [ 151.733447][ T5767] em28xx: Freeing device [ 151.746937][ T973] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 151.789392][ T7203] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 151.830541][ T5708] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 151.854610][ T5708] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 151.872778][ T7198] ceph: No mds server is up or the cluster is laggy [ 151.918555][ T973] usb 5-1: Using ep0 maxpacket: 16 [ 151.921563][ T973] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 151.922759][ T973] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 151.922777][ T973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 151.935784][ T973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.935803][ T973] usb 5-1: Product: syz [ 151.935817][ T973] usb 5-1: Manufacturer: syz [ 151.935831][ T973] usb 5-1: SerialNumber: syz [ 151.952474][ T973] usb 5-1: config 0 descriptor?? [ 151.979477][ T973] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 151.979503][ T973] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 152.108893][ T50] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 152.109759][ T50] (NULL device *): queue 0 connect admin queue failed (-111). [ 152.109775][ T50] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 152.109801][ T50] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 152.177147][ C1] net_ratelimit: 44 callbacks suppressed [ 152.583269][ T973] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 152.584539][ T973] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 152.598291][ T7218] FAULT_INJECTION: forcing a failure. [ 152.598291][ T7218] name failslab, interval 1, probability 0, space 0, times 0 [ 152.598320][ T7218] CPU: 0 UID: 0 PID: 7218 Comm: syz.3.458 Tainted: G L syzkaller #0 PREEMPT(full) [ 152.598348][ T7218] Tainted: [L]=SOFTLOCKUP [ 152.598356][ T7218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 152.598370][ T7218] Call Trace: [ 152.598385][ T7218] [ 152.598393][ T7218] dump_stack_lvl+0xe8/0x150 [ 152.598426][ T7218] should_fail_ex+0x3eb/0x540 [ 152.598454][ T7218] should_failslab+0xa8/0x100 [ 152.598478][ T7218] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 152.598507][ T7218] ? __kasan_kmalloc+0x93/0xb0 [ 152.598528][ T7218] ? vidtv_mux_init+0x3b1/0x1960 [ 152.598550][ T7218] ? vidtv_mux_init+0x3b1/0x1960 [ 152.598578][ T7218] kstrdup+0x42/0x100 [ 152.598608][ T7218] vidtv_mux_init+0x3b1/0x1960 [ 152.598631][ T7218] ? __mutex_lock+0x305/0x15a0 [ 152.598657][ T7218] vidtv_start_feed+0x36b/0x5a0 [ 152.598690][ T7218] ? __pfx_vidtv_start_feed+0x10/0x10 [ 152.598714][ T7218] ? do_raw_spin_lock+0x12b/0x2f0 [ 152.598738][ T7218] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 152.598786][ T7218] dmx_ts_feed_start_filtering+0x129/0x220 [ 152.598819][ T7218] dvb_dmxdev_filter_start+0x434/0x10d0 [ 152.598857][ T7218] dvb_demux_do_ioctl+0x48b/0x540 [ 152.598884][ T7218] dvb_usercopy+0x199/0x2e0 [ 152.598907][ T7218] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 152.598931][ T7218] ? __pfx_dvb_usercopy+0x10/0x10 [ 152.598964][ T7218] ? __fget_files+0x3a2/0x420 [ 152.598988][ T7218] ? __fget_files+0x2a/0x420 [ 152.599015][ T7218] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 152.599039][ T7218] dvb_demux_ioctl+0x29/0x40 [ 152.599064][ T7218] __se_sys_ioctl+0xfc/0x170 [ 152.599096][ T7218] do_syscall_64+0x166/0x520 [ 152.599113][ T7218] ? trace_irq_disable+0x3b/0x140 [ 152.599140][ T7218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.599161][ T7218] ? clear_bhb_loop+0x70/0xc0 [ 152.599186][ T7218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.599206][ T7218] RIP: 0033:0x7f057339e159 [ 152.599224][ T7218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.599242][ T7218] RSP: 002b:00007f05742d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 152.599264][ T7218] RAX: ffffffffffffffda RBX: 00007f0573625fa0 RCX: 00007f057339e159 [ 152.599279][ T7218] RDX: 00002000000000c0 RSI: 0000000040146f2c RDI: 0000000000000003 [ 152.599293][ T7218] RBP: 00007f057343506b R08: 0000000000000000 R09: 0000000000000000 [ 152.599306][ T7218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.599318][ T7218] R13: 00007f0573626038 R14: 00007f0573625fa0 R15: 00007ffc0876be48 [ 152.599350][ T7218] [ 152.630600][ T5708] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 152.908314][ T5708] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 152.909606][ T5708] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.909668][ T5708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.913351][ T5708] usb 2-1: config 0 descriptor?? [ 153.130365][ T5708] usbhid 2-1:0.0: can't add hid device: -71 [ 153.130487][ T5708] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 153.169494][ T5708] usb 2-1: USB disconnect, device number 10 [ 153.306915][ T31] audit: type=1800 audit(1789536815.244:6): pid=7229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.462" name="file0" dev="overlay" ino=590 res=0 errno=0 [ 153.420950][ T973] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 153.421415][ T973] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 153.421867][ T973] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 153.422361][ T973] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 153.422815][ T973] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 153.423362][ T973] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 153.443038][ T973] usb 5-1: USB disconnect, device number 11 [ 153.657890][ T5708] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 153.808889][ T5708] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 153.810395][ T5708] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.810454][ T5708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.828634][ T5708] usb 2-1: config 0 descriptor?? [ 153.829859][ T5614] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 154.009111][ T5614] usb 4-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 154.010893][ T5614] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 154.015510][ T5614] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.015531][ T5614] usb 4-1: Product: syz [ 154.015570][ T5614] usb 4-1: Manufacturer: syz [ 154.015585][ T5614] usb 4-1: SerialNumber: syz [ 154.064680][ T7233] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 154.188240][ T772] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 154.189991][ T772] (NULL device *): queue 0 connect admin queue failed (-111). [ 154.190016][ T772] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 154.190035][ T772] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 154.261292][ T31] audit: type=1800 audit(1789536816.203:7): pid=7238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.466" name="/" dev="fuse" ino=1 res=0 errno=0 [ 154.335168][ T5614] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 154.455132][ T5614] usb 4-1: USB disconnect, device number 11 [ 154.543760][ T5615] udevd[5615]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 154.555208][ T7240] tipc: Withdrawal distribution failure [ 154.701082][ T5708] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 154.703112][ T7214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.708548][ T7214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.708947][ T5708] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input11 [ 155.126024][ C1] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 155.126089][ T5708] usb 2-1: USB disconnect, device number 11 [ 155.310373][ T7253] rust_binder: Failure in copy_transaction_data: ENOMEM [ 155.310414][ T7253] rust_binder: 7252:7253 transaction call to 7252:0 failed ENOMEM, code 0 size 18446744073709551205-1792 [ 155.310891][ T5614] rust_binder: 7252: undelivered TRANSACTION_ERROR: 29201 [ 155.468538][ T7258] FAULT_INJECTION: forcing a failure. [ 155.468538][ T7258] name failslab, interval 1, probability 0, space 0, times 0 [ 155.468565][ T7258] CPU: 1 UID: 0 PID: 7258 Comm: syz.4.475 Tainted: G L syzkaller #0 PREEMPT(full) [ 155.468594][ T7258] Tainted: [L]=SOFTLOCKUP [ 155.468602][ T7258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 155.468615][ T7258] Call Trace: [ 155.468623][ T7258] [ 155.468633][ T7258] dump_stack_lvl+0xe8/0x150 [ 155.468663][ T7258] should_fail_ex+0x3eb/0x540 [ 155.468694][ T7258] should_failslab+0xa8/0x100 [ 155.468715][ T7258] ? security_file_alloc+0x34/0x310 [ 155.468745][ T7258] kmem_cache_alloc_noprof+0x9c/0x600 [ 155.468771][ T7258] ? rcu_is_watching+0x16/0xb0 [ 155.468792][ T7258] ? security_file_alloc+0x34/0x310 [ 155.468828][ T7258] security_file_alloc+0x34/0x310 [ 155.468860][ T7258] init_file+0x90/0x2b0 [ 155.468885][ T7258] alloc_empty_file+0x74/0x1d0 [ 155.468908][ T7258] alloc_file_pseudo+0x110/0x1e0 [ 155.468935][ T7258] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 155.468959][ T7258] ? _raw_spin_unlock+0x28/0x50 [ 155.468986][ T7258] ? alloc_fd+0x651/0x6c0 [ 155.469013][ T7258] sock_alloc_file+0xb8/0x2e0 [ 155.469048][ T7258] ? __sys_socket+0x12b/0x1b0 [ 155.469080][ T7258] __sys_socket+0x13f/0x1b0 [ 155.469114][ T7258] __x64_sys_socket+0x7a/0x90 [ 155.469145][ T7258] do_syscall_64+0x166/0x520 [ 155.469164][ T7258] ? trace_irq_disable+0x3b/0x140 [ 155.469192][ T7258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.469213][ T7258] ? clear_bhb_loop+0x70/0xc0 [ 155.469238][ T7258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.469258][ T7258] RIP: 0033:0x7fa4e0d9e159 [ 155.469277][ T7258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.469293][ T7258] RSP: 002b:00007fa4e1c9a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 155.469314][ T7258] RAX: ffffffffffffffda RBX: 00007fa4e1025fa0 RCX: 00007fa4e0d9e159 [ 155.469330][ T7258] RDX: 0000000000000000 RSI: 0000000000080805 RDI: 0000000000000002 [ 155.469343][ T7258] RBP: 00007fa4e0e3506b R08: 0000000000000000 R09: 0000000000000000 [ 155.469356][ T7258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.469368][ T7258] R13: 00007fa4e1026038 R14: 00007fa4e1025fa0 R15: 00007ffca269d238 [ 155.469399][ T7258] [ 156.261365][ T72] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 156.262295][ T72] (NULL device *): queue 0 connect admin queue failed (-111). [ 156.262318][ T72] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 156.262351][ T72] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 156.287545][ T7273] CacheFiles: Failed to register: -95 [ 156.479356][ T5767] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 156.632569][ T5767] usb 2-1: Using ep0 maxpacket: 8 [ 156.633919][ T5767] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 156.637258][ T5767] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.637277][ T5767] usb 2-1: Product: syz [ 156.637292][ T5767] usb 2-1: Manufacturer: syz [ 156.637306][ T5767] usb 2-1: SerialNumber: syz [ 156.677296][ T5767] usb 2-1: config 0 descriptor?? [ 156.888349][ T5767] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 156.960307][ T1219] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 157.109577][ T1219] usb 4-1: Using ep0 maxpacket: 8 [ 157.110453][ T1219] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 157.111743][ T1219] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 157.111807][ T1219] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 157.111829][ T1219] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 157.111853][ T1219] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 157.111876][ T1219] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.111942][ T1219] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.196668][ T6122] net_ratelimit: 68 callbacks suppressed [ 157.331638][ T1219] usb 4-1: GET_CAPABILITIES returned 0 [ 157.331679][ T1219] usbtmc 4-1:16.0: can't read capabilities [ 157.500750][ T7293] FAULT_INJECTION: forcing a failure. [ 157.500750][ T7293] name failslab, interval 1, probability 0, space 0, times 0 [ 157.508643][ T5767] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 157.537014][ T7293] CPU: 1 UID: 0 PID: 7293 Comm: syz.2.489 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.537047][ T7293] Tainted: [L]=SOFTLOCKUP [ 157.537056][ T7293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 157.537069][ T7293] Call Trace: [ 157.537078][ T7293] [ 157.537089][ T7293] dump_stack_lvl+0xe8/0x150 [ 157.537122][ T7293] should_fail_ex+0x3eb/0x540 [ 157.537152][ T7293] should_failslab+0xa8/0x100 [ 157.537177][ T7293] __kmalloc_cache_noprof+0x9e/0x600 [ 157.537209][ T7293] ? iommu_fwspec_init+0x375/0x470 [ 157.537236][ T7293] ? iommu_fwspec_init+0x375/0x470 [ 157.537268][ T7293] iommu_fwspec_init+0x375/0x470 [ 157.537299][ T7293] iommu_mock_device_add+0x56/0x1e0 [ 157.537330][ T7293] iommufd_test+0x38d2/0x6360 [ 157.537369][ T7293] ? __lock_acquire+0x747/0x2de0 [ 157.537399][ T7293] ? __pfx_iommufd_test+0x10/0x10 [ 157.537442][ T7293] ? tomoyo_path_number_perm+0x219/0x5f0 [ 157.537467][ T7293] ? tomoyo_path_number_perm+0x219/0x5f0 [ 157.537492][ T7293] ? lock_acquire+0x115/0x350 [ 157.537536][ T7293] ? __might_fault+0xaf/0x130 [ 157.537567][ T7293] iommufd_fops_ioctl+0x465/0x600 [ 157.537595][ T7293] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 157.537621][ T7293] ? __fget_files+0x2a/0x420 [ 157.537653][ T7293] ? __fget_files+0x2a/0x420 [ 157.537681][ T7293] ? bpf_lsm_file_ioctl+0x9/0x20 [ 157.537705][ T7293] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 157.537726][ T7293] __se_sys_ioctl+0xfc/0x170 [ 157.537761][ T7293] do_syscall_64+0x166/0x520 [ 157.537781][ T7293] ? trace_irq_disable+0x3b/0x140 [ 157.537806][ T7293] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.537828][ T7293] ? clear_bhb_loop+0x70/0xc0 [ 157.537861][ T7293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.537882][ T7293] RIP: 0033:0x7f0df219e159 [ 157.537903][ T7293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.537921][ T7293] RSP: 002b:00007f0df3035028 EFLAGS: 00000246 [ 157.537934][ T7293] ORIG_RAX: 0000000000000010 [ 157.537943][ T7293] RAX: ffffffffffffffda RBX: 00007f0df2425fa0 RCX: 00007f0df219e159 [ 157.537959][ T7293] RDX: 0000200000000140 RSI: 0000000000003ba0 RDI: 0000000000000005 [ 157.537974][ T7293] RBP: 00007f0df223506b R08: 0000000000000000 R09: 0000000000000000 [ 157.537988][ T7293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.538001][ T7293] R13: 00007f0df2426038 R14: 00007f0df2425fa0 R15: 00007ffcaa5a5938 [ 157.538034][ T7293] [ 157.538222][ T5767] usb 2-1: USB disconnect, device number 12 [ 157.811118][ T7296] FAULT_INJECTION: forcing a failure. [ 157.811118][ T7296] name failslab, interval 1, probability 0, space 0, times 0 [ 157.811148][ T7296] CPU: 1 UID: 0 PID: 7296 Comm: syz.4.490 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.811176][ T7296] Tainted: [L]=SOFTLOCKUP [ 157.811184][ T7296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 157.811198][ T7296] Call Trace: [ 157.811207][ T7296] [ 157.811216][ T7296] dump_stack_lvl+0xe8/0x150 [ 157.811247][ T7296] should_fail_ex+0x3eb/0x540 [ 157.811276][ T7296] should_failslab+0xa8/0x100 [ 157.811300][ T7296] __kmalloc_noprof+0xf9/0x710 [ 157.811326][ T7296] ? rcu_is_watching+0x16/0xb0 [ 157.811347][ T7296] ? tomoyo_realpath_from_path+0xef/0x640 [ 157.811372][ T7296] ? tomoyo_realpath_from_path+0xef/0x640 [ 157.811404][ T7296] tomoyo_realpath_from_path+0xef/0x640 [ 157.811444][ T7296] tomoyo_mount_permission+0x3e9/0x9e0 [ 157.811468][ T7296] ? tomoyo_mount_permission+0x2b5/0x9e0 [ 157.811496][ T7296] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 157.811518][ T7296] ? kasan_save_track+0x4f/0x80 [ 157.811593][ T7296] ? kasan_quarantine_put+0xbb/0x1f0 [ 157.811624][ T7296] security_sb_mount+0xe4/0x320 [ 157.811651][ T7296] path_mount+0xbc/0x1050 [ 157.811680][ T7296] ? user_path_at+0xd4/0x160 [ 157.811708][ T7296] __se_sys_mount+0x31d/0x420 [ 157.811740][ T7296] ? __pfx___se_sys_mount+0x10/0x10 [ 157.811771][ T7296] ? __x64_sys_mount+0x20/0xc0 [ 157.811799][ T7296] do_syscall_64+0x166/0x520 [ 157.811827][ T7296] ? trace_irq_disable+0x3b/0x140 [ 157.811854][ T7296] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.811875][ T7296] ? clear_bhb_loop+0x70/0xc0 [ 157.811898][ T7296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.811916][ T7296] RIP: 0033:0x7fa4e0d9e159 [ 157.811935][ T7296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.811952][ T7296] RSP: 002b:00007fa4e1c9a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 157.811975][ T7296] RAX: ffffffffffffffda RBX: 00007fa4e1025fa0 RCX: 00007fa4e0d9e159 [ 157.811990][ T7296] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 00002000000000c0 [ 157.812006][ T7296] RBP: 00007fa4e0e3506b R08: 0000000000000000 R09: 0000000000000000 [ 157.812019][ T7296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.812032][ T7296] R13: 00007fa4e1026038 R14: 00007fa4e1025fa0 R15: 00007ffca269d238 [ 157.812062][ T7296] [ 157.812070][ T7296] ERROR: Out of memory at tomoyo_realpath_from_path. [ 157.935393][ T5767] usb 4-1: USB disconnect, device number 12 [ 158.340823][ T772] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 158.344050][ T772] (NULL device *): queue 0 connect admin queue failed (-111). [ 158.344071][ T772] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 158.344089][ T772] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 158.734803][ T7317] jffs2: notice: (7317) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 158.823580][ T5618] Bluetooth: hci0: command 0x0406 tx timeout [ 159.006580][ T7327] netlink: 132 bytes leftover after parsing attributes in process `syz.4.501'. [ 159.411566][ T7332] input: syz0 as /devices/virtual/input/input12 [ 159.417824][ T7335] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 159.417870][ T7335] overlayfs: failed to set xattr on upper [ 159.417878][ T7335] overlayfs: ...falling back to redirect_dir=nofollow. [ 159.417887][ T7335] overlayfs: ...falling back to index=off. [ 159.417896][ T7335] overlayfs: ...falling back to uuid=null. [ 159.422833][ T7335] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 159.422849][ T7335] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 159.422970][ T7335] overlayfs: failed to get uuid (/file0, err=-95); falling back to uuid=null. [ 159.539733][ T31] audit: type=1800 audit(1789536821.481:8): pid=7337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.506" name="file0" dev="overlay" ino=728 res=0 errno=0 [ 160.205572][ T7353] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 160.262817][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 160.411540][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 160.412355][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 160.414715][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.414738][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 160.422400][ T12] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 160.425071][ T12] (NULL device *): queue 0 connect admin queue failed (-111). [ 160.425093][ T12] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 160.425111][ T12] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 160.426601][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.426620][ T9] usb 4-1: Product: syz [ 160.426634][ T9] usb 4-1: Manufacturer: syz [ 160.426648][ T9] usb 4-1: SerialNumber: syz [ 160.550697][ T9] usb 4-1: 0:2 : does not exist [ 160.695907][ T9] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 160.891618][ T9] usb 4-1: USB disconnect, device number 13 [ 160.911759][ T973] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 160.972781][ T6002] udevd[6002]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 161.085229][ T973] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 161.089194][ T973] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.089239][ T973] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 161.089261][ T973] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 161.089285][ T973] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 161.089344][ T973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.853542][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 161.932615][ T5759] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 162.003034][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 162.003960][ T9] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 162.007118][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.007145][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.007225][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.019640][ T9] usb 2-1: config 0 descriptor?? [ 162.084478][ T5759] usb 4-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 162.086878][ T5759] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 162.086906][ T5759] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 162.086991][ T5759] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.262159][ C1] net_ratelimit: 36 callbacks suppressed [ 162.305050][ T973] [drm] Initialized gud 1.0.0 for 3-1:1.0 on minor 1 [ 162.384843][ T10] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 162.413735][ T10] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 162.500129][ T9] ft260 0003:0403:6030.0009: unknown main item tag 0x0 [ 162.500163][ T9] ft260 0003:0403:6030.0009: unknown main item tag 0x0 [ 162.503151][ T50] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 162.509222][ T50] (NULL device *): queue 0 connect admin queue failed (-111). [ 162.509244][ T50] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 162.509262][ T50] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 162.658988][ T9] ft260 0003:0403:6030.0009: chip code: 0000 0000 [ 162.805214][ T5759] pegasus 4-1:1.0: probe with driver pegasus failed with error -71 [ 162.846697][ T5759] usb 4-1: USB disconnect, device number 14 [ 162.865407][ T9] ft260 0003:0403:6030.0009: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 163.068619][ T9] ft260 0003:0403:6030.0009: failed to retrieve status: -32, no wakeup [ 163.276322][ T7378] ft260 0003:0403:6030.0009: ft260_hid_output_report_check_status: failed to start transfer, ret -38 [ 163.646544][ T7378] ft260 0003:0403:6030.0009: failed to reset I2C controller: -108 [ 163.646588][ T7378] ft260 0003:0403:6030.0009: ft260_i2c_write: failed with -38 [ 164.465129][ T30] usb 2-1: USB disconnect, device number 13 [ 164.584648][ T72] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 164.599612][ T72] (NULL device *): queue 0 connect admin queue failed (-111). [ 164.599637][ T72] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 164.599654][ T72] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 164.644692][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 164.805612][ T9] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 164.807003][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.807046][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 164.807068][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 164.807091][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 164.807162][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.818803][ T7431] FAULT_INJECTION: forcing a failure. [ 165.818803][ T7431] name failslab, interval 1, probability 0, space 0, times 0 [ 165.818838][ T7431] CPU: 1 UID: 0 PID: 7431 Comm: syz.1.534 Tainted: G L syzkaller #0 PREEMPT(full) [ 165.818866][ T7431] Tainted: [L]=SOFTLOCKUP [ 165.818875][ T7431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 165.818889][ T7431] Call Trace: [ 165.818897][ T7431] [ 165.818906][ T7431] dump_stack_lvl+0xe8/0x150 [ 165.818940][ T7431] should_fail_ex+0x3eb/0x540 [ 165.818968][ T7431] should_failslab+0xa8/0x100 [ 165.818993][ T7431] __kmalloc_cache_noprof+0x9e/0x600 [ 165.819061][ T7431] ? get_mountpoint+0x2cc/0x510 [ 165.819092][ T7431] ? get_mountpoint+0x2cc/0x510 [ 165.819128][ T7431] get_mountpoint+0x2cc/0x510 [ 165.819164][ T7431] attach_recursive_mnt+0x23b/0x2510 [ 165.819201][ T7431] ? do_raw_spin_unlock+0xf5/0x200 [ 165.819229][ T7431] ? _raw_spin_unlock+0x28/0x50 [ 165.819256][ T7431] ? __pfx_attach_recursive_mnt+0x10/0x10 [ 165.819306][ T7431] do_new_mount+0xa3f/0xdc0 [ 165.819337][ T7431] ? __pfx_do_new_mount+0x10/0x10 [ 165.819365][ T7431] ? ns_capable+0x84/0xe0 [ 165.819390][ T7431] ? path_mount+0x647/0x1050 [ 165.819418][ T7431] ? user_path_at+0xd4/0x160 [ 165.819449][ T7431] __se_sys_mount+0x31d/0x420 [ 165.819481][ T7431] ? __pfx___se_sys_mount+0x10/0x10 [ 165.819514][ T7431] ? __x64_sys_mount+0x20/0xc0 [ 165.819538][ T7431] do_syscall_64+0x166/0x520 [ 165.819558][ T7431] ? trace_irq_disable+0x3b/0x140 [ 165.819587][ T7431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.819608][ T7431] ? clear_bhb_loop+0x70/0xc0 [ 165.819633][ T7431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.819654][ T7431] RIP: 0033:0x7fc9b4f9e159 [ 165.819674][ T7431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.819693][ T7431] RSP: 002b:00007fc9b5ef9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 165.819715][ T7431] RAX: ffffffffffffffda RBX: 00007fc9b5225fa0 RCX: 00007fc9b4f9e159 [ 165.819731][ T7431] RDX: 0000200000001600 RSI: 0000200000001500 RDI: 0000000000000000 [ 165.819746][ T7431] RBP: 00007fc9b503506b R08: 0000000000000000 R09: 0000000000000000 [ 165.819760][ T7431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.819773][ T7431] R13: 00007fc9b5226038 R14: 00007fc9b5225fa0 R15: 00007ffc083dbe58 [ 165.819807][ T7431] [ 166.089642][ T9] gud 4-1:1.0: USB-2: Failed to add TV modes (ret=-5) [ 166.089756][ T9] gud 4-1:1.0: USB-2: Failed to add properties (ret=-5) [ 166.089800][ T9] gud 4-1:1.0: Failed to get connectors (error=-5) [ 166.089848][ T9] gud 4-1:1.0: probe with driver gud failed with error -5 [ 166.236019][ T7439] FAULT_INJECTION: forcing a failure. [ 166.236019][ T7439] name failslab, interval 1, probability 0, space 0, times 0 [ 166.236052][ T7439] CPU: 0 UID: 0 PID: 7439 Comm: syz.1.535 Tainted: G L syzkaller #0 PREEMPT(full) [ 166.236081][ T7439] Tainted: [L]=SOFTLOCKUP [ 166.236090][ T7439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 166.236106][ T7439] Call Trace: [ 166.236115][ T7439] [ 166.236124][ T7439] dump_stack_lvl+0xe8/0x150 [ 166.236161][ T7439] should_fail_ex+0x3eb/0x540 [ 166.236190][ T7439] should_failslab+0xa8/0x100 [ 166.236215][ T7439] __kmalloc_noprof+0xf9/0x710 [ 166.236245][ T7439] ? __kmalloc_cache_noprof+0x148/0x600 [ 166.236278][ T7439] ? alloc_pipe_info+0x1f4/0x4c0 [ 166.236307][ T7439] ? alloc_pipe_info+0x1f4/0x4c0 [ 166.236344][ T7439] alloc_pipe_info+0x1f4/0x4c0 [ 166.236377][ T7439] splice_direct_to_actor+0xa41/0xcb0 [ 166.236412][ T7439] ? __pfx_futex_wake_mark+0x10/0x10 [ 166.236444][ T7439] ? __pfx_aa_file_perm+0x10/0x10 [ 166.236472][ T7439] ? __pfx_direct_splice_actor+0x10/0x10 [ 166.236500][ T7439] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 166.236537][ T7439] do_splice_direct+0x195/0x290 [ 166.236567][ T7439] ? __pfx_do_splice_direct+0x10/0x10 [ 166.236596][ T7439] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 166.236631][ T7439] ? rw_verify_area+0x203/0x4c0 [ 166.236670][ T7439] do_sendfile+0x52e/0x7c0 [ 166.236701][ T7439] ? __pfx_do_sendfile+0x10/0x10 [ 166.236727][ T7439] ? __might_fault+0xaf/0x130 [ 166.236759][ T7439] __se_sys_sendfile64+0xdf/0x1a0 [ 166.236783][ T7439] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 166.236815][ T7439] do_syscall_64+0x166/0x520 [ 166.236835][ T7439] ? trace_irq_disable+0x3b/0x140 [ 166.236864][ T7439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.236885][ T7439] ? clear_bhb_loop+0x70/0xc0 [ 166.236910][ T7439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.236931][ T7439] RIP: 0033:0x7fc9b4f9e159 [ 166.236951][ T7439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.236970][ T7439] RSP: 002b:00007fc9b5ef9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 166.236993][ T7439] RAX: ffffffffffffffda RBX: 00007fc9b5225fa0 RCX: 00007fc9b4f9e159 [ 166.237009][ T7439] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000003 [ 166.237023][ T7439] RBP: 00007fc9b503506b R08: 0000000000000000 R09: 0000000000000000 [ 166.237037][ T7439] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000000 [ 166.237050][ T7439] R13: 00007fc9b5226038 R14: 00007fc9b5225fa0 R15: 00007ffc083dbe58 [ 166.237081][ T7439] [ 166.367373][ T9] usb 4-1: USB disconnect, device number 15 [ 166.664403][ T12] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 166.664578][ T12] (NULL device *): queue 0 connect admin queue failed (-111). [ 166.664599][ T12] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 166.664639][ T12] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 166.825933][ T5759] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 166.994646][ T5759] usb 2-1: Using ep0 maxpacket: 32 [ 166.995357][ T5759] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 166.995886][ T5759] usb 2-1: config 0 has no interfaces? [ 166.995915][ T5759] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.006303][ T5759] usb 2-1: config 0 descriptor?? [ 167.219016][ T7457] mmap: syz.3.540 (7457) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 167.249132][ T7445] FAULT_INJECTION: forcing a failure. [ 167.249132][ T7445] name failslab, interval 1, probability 0, space 0, times 0 [ 167.249170][ T7445] CPU: 1 UID: 0 PID: 7445 Comm: syz.1.537 Tainted: G L syzkaller #0 PREEMPT(full) [ 167.249198][ T7445] Tainted: [L]=SOFTLOCKUP [ 167.249207][ T7445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 167.249220][ T7445] Call Trace: [ 167.249229][ T7445] [ 167.249238][ T7445] dump_stack_lvl+0xe8/0x150 [ 167.249271][ T7445] should_fail_ex+0x3eb/0x540 [ 167.249301][ T7445] should_failslab+0xa8/0x100 [ 167.249325][ T7445] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 167.249357][ T7445] ? kasprintf+0xe2/0x140 [ 167.249384][ T7445] ? kasprintf+0xe2/0x140 [ 167.249415][ T7445] kvasprintf+0xeb/0x1a0 [ 167.249439][ T7445] ? lock_acquire+0x115/0x350 [ 167.249472][ T7445] ? __pfx_kvasprintf+0x10/0x10 [ 167.249510][ T7445] kasprintf+0xe2/0x140 [ 167.249542][ T7445] ? __pfx_kasprintf+0x10/0x10 [ 167.249566][ T7445] ? kernfs_put+0x7b9/0x820 [ 167.249598][ T7445] ? kernfs_create_link+0x187/0x200 [ 167.249653][ T7445] module_add_driver+0x19c/0x320 [ 167.249687][ T7445] bus_add_driver+0x391/0x670 [ 167.249716][ T7445] driver_register+0x23a/0x320 [ 167.249748][ T7445] usb_gadget_register_driver_owner+0xf9/0x270 [ 167.249779][ T7445] raw_ioctl+0x1541/0x41c0 [ 167.249806][ T7445] ? tomoyo_path_number_perm+0x219/0x5f0 [ 167.249832][ T7445] ? do_vfs_ioctl+0x116f/0x1530 [ 167.249854][ T7445] ? __pfx_raw_ioctl+0x10/0x10 [ 167.249885][ T7445] ? hook_file_ioctl+0x1f2/0x600 [ 167.249926][ T7445] ? __fget_files+0x2a/0x420 [ 167.249967][ T7445] ? __fget_files+0x2a/0x420 [ 167.249996][ T7445] ? __fget_files+0x3a2/0x420 [ 167.250020][ T7445] ? __fget_files+0x2a/0x420 [ 167.250048][ T7445] ? bpf_lsm_file_ioctl+0x9/0x20 [ 167.250074][ T7445] ? __pfx_raw_ioctl+0x10/0x10 [ 167.250093][ T7445] __se_sys_ioctl+0xfc/0x170 [ 167.250127][ T7445] do_syscall_64+0x166/0x520 [ 167.250147][ T7445] ? trace_irq_disable+0x3b/0x140 [ 167.250175][ T7445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.250197][ T7445] ? clear_bhb_loop+0x70/0xc0 [ 167.250222][ T7445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.250244][ T7445] RIP: 0033:0x7fc9b4f9ddeb [ 167.250263][ T7445] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 167.250281][ T7445] RSP: 002b:00007fc9b5ef6f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 167.250304][ T7445] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fc9b4f9ddeb [ 167.250320][ T7445] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 167.250333][ T7445] RBP: 00007fc9b5ef7fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 167.250348][ T7445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.250361][ T7445] R13: 00002000000001c0 R14: 0000000000000002 R15: 0000000000000868 [ 167.250391][ T7445] [ 167.254158][ T7445] bus_add_driver: failed to create module links for raw-gadget.2 [ 167.254333][ T7445] UDC core: USB Raw Gadget: driver registration failed: -12 [ 167.254351][ T7445] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 167.259417][ T30] usb 2-1: USB disconnect, device number 14 [ 167.387690][ T72] net_ratelimit: 46 callbacks suppressed [ 167.889856][ T7466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.545'. [ 167.889887][ T7466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.545'. [ 168.042613][ T7470] rust_binder: Error in use_page_slow: ESRCH [ 168.042633][ T7470] rust_binder: use_range failure ESRCH [ 168.042688][ T7470] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 168.042703][ T7470] rust_binder: Failure in copy_transaction_data: ESRCH [ 168.042723][ T7470] rust_binder: 7468:7470 transaction call to 7468:0 failed ESRCH, code 0 size 0-0 [ 168.044513][ T5614] rust_binder: 7468: undelivered TRANSACTION_ERROR: 29201 [ 168.089756][ T973] Console: switching to colour frame buffer device 128x48 [ 168.153647][ T973] gud 3-1:1.0: [drm] fb0: guddrmfb frame buffer device [ 168.175863][ T7470] syz.1.546 (7470) used greatest stack depth: 11936 bytes left [ 168.210354][ T973] usb 3-1: USB disconnect, device number 18 [ 168.302194][ T973] Console: switching to colour VGA+ 80x25 [ 168.745515][ T72] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 168.747283][ T72] (NULL device *): queue 0 connect admin queue failed (-111). [ 168.747307][ T72] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 168.747325][ T72] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 168.865858][ T52] Bluetooth: hci2: unexpected event for opcode 0x2041 [ 169.523763][ T7513] FAULT_INJECTION: forcing a failure. [ 169.523763][ T7513] name failslab, interval 1, probability 0, space 0, times 0 [ 169.523793][ T7513] CPU: 0 UID: 0 PID: 7513 Comm: syz.3.560 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.523821][ T7513] Tainted: [L]=SOFTLOCKUP [ 169.523829][ T7513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 169.523842][ T7513] Call Trace: [ 169.523850][ T7513] [ 169.523859][ T7513] dump_stack_lvl+0xe8/0x150 [ 169.523891][ T7513] should_fail_ex+0x3eb/0x540 [ 169.523918][ T7513] should_failslab+0xa8/0x100 [ 169.523943][ T7513] __kmalloc_noprof+0xf9/0x710 [ 169.523972][ T7513] ? __kmalloc_cache_noprof+0x148/0x600 [ 169.523998][ T7513] ? alloc_pipe_info+0x1f4/0x4c0 [ 169.524027][ T7513] ? alloc_pipe_info+0x1f4/0x4c0 [ 169.524061][ T7513] alloc_pipe_info+0x1f4/0x4c0 [ 169.524093][ T7513] splice_direct_to_actor+0xa41/0xcb0 [ 169.524126][ T7513] ? __pfx_futex_wake_mark+0x10/0x10 [ 169.524154][ T7513] ? __pfx_aa_file_perm+0x10/0x10 [ 169.524192][ T7513] ? __pfx_direct_splice_actor+0x10/0x10 [ 169.524221][ T7513] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 169.524257][ T7513] do_splice_direct+0x195/0x290 [ 169.524285][ T7513] ? __pfx_do_splice_direct+0x10/0x10 [ 169.524312][ T7513] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 169.524343][ T7513] ? rw_verify_area+0x203/0x4c0 [ 169.524379][ T7513] do_sendfile+0x52e/0x7c0 [ 169.524411][ T7513] ? __pfx_do_sendfile+0x10/0x10 [ 169.524436][ T7513] ? __might_fault+0xaf/0x130 [ 169.524469][ T7513] __se_sys_sendfile64+0xdf/0x1a0 [ 169.524493][ T7513] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 169.524529][ T7513] do_syscall_64+0x166/0x520 [ 169.524550][ T7513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.524573][ T7513] ? clear_bhb_loop+0x70/0xc0 [ 169.524599][ T7513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.524620][ T7513] RIP: 0033:0x7f057339e159 [ 169.524640][ T7513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.524659][ T7513] RSP: 002b:00007f05742d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 169.524682][ T7513] RAX: ffffffffffffffda RBX: 00007f0573625fa0 RCX: 00007f057339e159 [ 169.524698][ T7513] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000003 [ 169.524713][ T7513] RBP: 00007f057343506b R08: 0000000000000000 R09: 0000000000000000 [ 169.524727][ T7513] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000000 [ 169.524741][ T7513] R13: 00007f0573626038 R14: 00007f0573625fa0 R15: 00007ffc0876be48 [ 169.524773][ T7513] [ 169.904360][ T7518] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 170.336368][ T30] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 170.486311][ T30] usb 3-1: Using ep0 maxpacket: 32 [ 170.487021][ T30] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 170.488201][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.488227][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.488281][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.492539][ T30] usb 3-1: config 0 descriptor?? [ 170.525025][ T7540] rust_binder: Failed to get security ctx for id 0: EINVAL [ 170.525047][ T7540] rust_binder: Failure in copy_transaction_data: EINVAL [ 170.525065][ T7540] rust_binder: 7539:7540 transaction async to 7539:0 failed EINVAL, code 0 size 0-0 [ 170.531634][ T5759] rust_binder: 7539: undelivered TRANSACTION_ERROR: 29201 [ 170.826820][ T50] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 170.826964][ T50] (NULL device *): queue 0 connect admin queue failed (-111). [ 170.826985][ T50] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 170.827003][ T50] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 170.924795][ T30] ft260 0003:0403:6030.000A: unknown main item tag 0x0 [ 170.924826][ T30] ft260 0003:0403:6030.000A: unknown main item tag 0x0 [ 171.121805][ T30] ft260 0003:0403:6030.000A: chip code: 0000 0000 [ 171.323275][ T30] ft260 0003:0403:6030.000A: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 171.527558][ T30] ft260 0003:0403:6030.000A: failed to retrieve status: -32, no wakeup [ 171.752825][ T7531] ft260 0003:0403:6030.000A: ft260_hid_output_report_check_status: failed to start transfer, ret -38 [ 172.019412][ T7531] ft260 0003:0403:6030.000A: failed to reset I2C controller: -108 [ 172.019432][ T7531] ft260 0003:0403:6030.000A: ft260_i2c_write: failed with -38 [ 172.165402][ T7554] FAULT_INJECTION: forcing a failure. [ 172.165402][ T7554] name failslab, interval 1, probability 0, space 0, times 0 [ 172.165435][ T7554] CPU: 1 UID: 0 PID: 7554 Comm: syz.4.576 Tainted: G L syzkaller #0 PREEMPT(full) [ 172.165461][ T7554] Tainted: [L]=SOFTLOCKUP [ 172.165469][ T7554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.165482][ T7554] Call Trace: [ 172.165491][ T7554] [ 172.165500][ T7554] dump_stack_lvl+0xe8/0x150 [ 172.165533][ T7554] should_fail_ex+0x3eb/0x540 [ 172.165560][ T7554] should_failslab+0xa8/0x100 [ 172.165585][ T7554] __kmalloc_noprof+0xf9/0x710 [ 172.165615][ T7554] ? __kmalloc_cache_noprof+0x148/0x600 [ 172.165642][ T7554] ? alloc_pipe_info+0x1f4/0x4c0 [ 172.165671][ T7554] ? alloc_pipe_info+0x1f4/0x4c0 [ 172.165707][ T7554] alloc_pipe_info+0x1f4/0x4c0 [ 172.165740][ T7554] splice_direct_to_actor+0xa41/0xcb0 [ 172.165775][ T7554] ? __pfx_futex_wake_mark+0x10/0x10 [ 172.165806][ T7554] ? __pfx_aa_file_perm+0x10/0x10 [ 172.165833][ T7554] ? __pfx_direct_splice_actor+0x10/0x10 [ 172.165860][ T7554] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 172.165896][ T7554] do_splice_direct+0x195/0x290 [ 172.165926][ T7554] ? __pfx_do_splice_direct+0x10/0x10 [ 172.165952][ T7554] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 172.165985][ T7554] ? rw_verify_area+0x203/0x4c0 [ 172.166015][ T7554] do_sendfile+0x52e/0x7c0 [ 172.166045][ T7554] ? __pfx_do_sendfile+0x10/0x10 [ 172.166070][ T7554] ? __might_fault+0xaf/0x130 [ 172.166100][ T7554] __se_sys_sendfile64+0xdf/0x1a0 [ 172.166124][ T7554] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 172.166155][ T7554] do_syscall_64+0x166/0x520 [ 172.166175][ T7554] ? trace_irq_disable+0x3b/0x140 [ 172.166204][ T7554] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.166225][ T7554] ? clear_bhb_loop+0x70/0xc0 [ 172.166250][ T7554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.166270][ T7554] RIP: 0033:0x7fa4e0d9e159 [ 172.166289][ T7554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.166307][ T7554] RSP: 002b:00007fa4e1c9a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 172.166330][ T7554] RAX: ffffffffffffffda RBX: 00007fa4e1025fa0 RCX: 00007fa4e0d9e159 [ 172.166346][ T7554] RDX: 0000200000000080 RSI: 0000000000000003 RDI: 0000000000000003 [ 172.166361][ T7554] RBP: 00007fa4e0e3506b R08: 0000000000000000 R09: 0000000000000000 [ 172.166374][ T7554] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000000 [ 172.166395][ T7554] R13: 00007fa4e1026038 R14: 00007fa4e1025fa0 R15: 00007ffca269d238 [ 172.166426][ T7554] [ 172.437337][ C0] net_ratelimit: 70 callbacks suppressed [ 172.603053][ T7559] 9p: Bad value for 'wfdno' [ 172.851960][ T1219] usb 3-1: USB disconnect, device number 19 [ 172.907621][ T12] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 172.911427][ T12] (NULL device *): queue 0 connect admin queue failed (-111). [ 172.911448][ T12] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 172.911466][ T12] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 174.100643][ T7582] kvm: pic: non byte write [ 174.268505][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 174.449097][ T9] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 174.450342][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.450385][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 174.450408][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 174.450431][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 174.450490][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.000232][ T50] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 175.002673][ T50] (NULL device *): queue 0 connect admin queue failed (-111). [ 175.002723][ T50] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 175.002741][ T50] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 175.774106][ T9] gud 2-1:1.0: USB-1: Failed to add TV modes (ret=-5) [ 175.774157][ T9] gud 2-1:1.0: USB-1: Failed to add properties (ret=-5) [ 175.774237][ T9] gud 2-1:1.0: Failed to get connectors (error=-5) [ 175.774265][ T9] gud 2-1:1.0: probe with driver gud failed with error -5 [ 175.995732][ T9] usb 2-1: USB disconnect, device number 15 [ 176.279535][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.594'. [ 176.279559][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.594'. [ 177.070264][ T12] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "n" [ 177.070528][ T12] (NULL device *): queue 0 connect admin queue failed (-111). [ 177.070548][ T12] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 177.070566][ T12] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 177.500312][ T7396] kobject: 'tx-0' (ffff888029df5420): calling ktype release [ 177.500340][ T7396] kobject: 'tx-0': free name [ 177.500373][ T7396] kernfs queues: removing [ 177.500404][ T7396] kobject: 'queues' (ffff888027bfdc50): kobject_cleanup, parent 0000000000000000 [ 177.500423][ T7396] kobject: 'queues' (ffff888027bfdc50): calling ktype release [ 177.500437][ T7396] kobject: 'queues' (ffff888027bfdc50): kset_release [ 177.500464][ T7396] kobject: 'queues': free name [ 177.500746][ T7396] kernfs runtime_status: removing [ 177.500807][ T7396] kernfs control: removing [ 177.500858][ T7396] kernfs runtime_suspended_time: removing [ 177.500908][ T7396] kernfs runtime_active_time: removing [ 177.500959][ T7396] kernfs autosuspend_delay_ms: removing [ 177.501063][ T7396] kernfs power: removing [ 177.501156][ T7396] kernfs device: removing [ 177.501193][ T7396] kernfs subsystem: removing [ 177.501229][ T7396] kernfs bnep0: removing [ 177.501269][ T7396] kernfs uevent: removing [ 177.501329][ T7396] kernfs rx_packets: removing [ 177.501384][ T7396] kernfs tx_packets: removing [ 177.501437][ T7396] kernfs rx_bytes: removing [ 177.501487][ T7396] kernfs tx_bytes: removing [ 177.501537][ T7396] kernfs rx_errors: removing [ 177.501836][ T7396] kernfs tx_errors: removing [ 177.501889][ T7396] kernfs rx_dropped: removing [ 177.501940][ T7396] kernfs tx_dropped: removing [ 177.501993][ T7396] kernfs multicast: removing [ 177.502044][ T7396] kernfs collisions: removing [ 177.502095][ T7396] kernfs rx_length_errors: removing [ 177.502147][ T7396] kernfs rx_over_errors: removing [ 177.502198][ T7396] kernfs rx_crc_errors: removing [ 177.502250][ T7396] kernfs rx_frame_errors: removing [ 177.502302][ T7396] kernfs rx_fifo_errors: removing [ 177.502353][ T7396] kernfs rx_missed_errors: removing [ 177.502402][ T7396] kernfs tx_aborted_errors: removing [ 177.502452][ T7396] kernfs tx_carrier_errors: removing [ 177.502504][ T7396] kernfs tx_fifo_errors: removing [ 177.502555][ T7396] kernfs tx_heartbeat_errors: removing [ 177.502613][ T7396] kernfs tx_window_errors: removing [ 177.502675][ T7396] kernfs rx_compressed: removing [ 177.502726][ T7396] kernfs tx_compressed: removing [ 177.502777][ T7396] kernfs rx_nohandler: removing [ 177.502826][ T7396] kernfs statistics: removing [ 177.502895][ T7396] kernfs netdev_group: removing [ 177.502947][ T7396] kernfs type: removing [ 177.502983][ T7396] kernfs dev_id: removing [ 177.503038][ T7396] kernfs dev_port: removing [ 177.503829][ T7396] kernfs iflink: removing [ 177.503869][ T7396] kernfs ifindex: removing [ 177.503902][ T7396] kernfs name_assign_type: removing [ 177.503951][ T7396] kernfs addr_assign_type: removing [ 177.503985][ T7396] kernfs addr_len: removing [ 177.504035][ T7396] kernfs link_mode: removing [ 177.504084][ T7396] kernfs address: removing [ 177.504119][ T7396] kernfs broadcast: removing [ 177.504168][ T7396] kernfs speed: removing [ 177.504217][ T7396] kernfs duplex: removing [ 177.504268][ T7396] kernfs dormant: removing [ 177.504318][ T7396] kernfs testing: removing [ 177.504369][ T7396] kernfs operstate: removing [ 177.504420][ T7396] kernfs carrier_changes: removing [ 177.504472][ T7396] kernfs ifalias: removing [ 177.504522][ T7396] kernfs carrier: removing [ 177.504581][ T7396] kernfs mtu: removing [ 177.504632][ T7396] kernfs flags: removing [ 177.504683][ T7396] kernfs tx_queue_len: removing [ 177.504734][ T7396] kernfs gro_flush_timeout: removing [ 177.504787][ T7396] kernfs napi_defer_hard_irqs: removing [ 177.504838][ T7396] kernfs proto_down: removing [ 177.504885][ T7396] kernfs carrier_up_count: removing [ 177.504933][ T7396] kernfs carrier_down_count: removing [ 177.504984][ T7396] kernfs threaded: removing [ 177.505027][ T7396] PM: Removing info for No Bus:bnep0 [ 177.508721][ T5967] kobject: 'bnep0' (ffff88807c10e7c0): kobject_uevent_env [ 177.508777][ T5967] kobject: 'bnep0' (ffff88807c10e7c0): fill_kobj_path: path = '/devices/virtual/net/bnep0' [ 177.510093][ T5967] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 177.891591][ T5967] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 177.900006][ T5967] CPU: 1 UID: 0 PID: 5967 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 177.911015][ T5967] Tainted: [L]=SOFTLOCKUP [ 177.913121][ C0] virtqueue callback for ffff888026199e00 (ffffffff86c736f0) [ 177.913157][ C0] No more buffers in queue [ 177.913530][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 177.913552][ C0] No more buffers in queue [ 177.920146][ C0] eth0: xmit ffff88807a606280 42:01:0a:80:00:01 [ 177.920174][ C0] Added buffer head 19 to ffff888026199c00 [ 177.920206][ C0] virtqueue callback for ffff888026199c00 (ffffffff86c73830) [ 177.921389][ C0] Sent skb ffff88807a606280 [ 177.921426][ C0] No more buffers in queue [ 177.965426][ T5967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 177.975477][ T5967] RIP: 0010:klist_remove+0x156/0x340 [ 177.980767][ T5967] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 5d 75 4b f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 3e 75 4b f6 49 8b 44 24 58 48 89 44 24 08 [ 178.000390][ T5967] RSP: 0018:ffffc90004d87880 EFLAGS: 00010202 [ 178.006446][ T5967] RAX: 000000000000000b RBX: ffff88807754ddc0 RCX: ffffffff9ac59501 [ 178.014407][ T5967] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000000058 [ 178.022367][ T5967] RBP: ffffc90004d87980 R08: ffffffff90813aa3 R09: 1ffffffff2102754 [ 178.030327][ T5967] R10: dffffc0000000000 R11: fffffbfff2102755 R12: 0000000000000000 [ 178.038285][ T5967] R13: 1ffff1100f08308c R14: ffff888078418460 R15: dffffc0000000000 [ 178.046242][ T5967] FS: 0000000000000000(0000) GS:ffff88812495b000(0000) knlGS:0000000000000000 [ 178.055162][ T5967] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 178.061736][ T5967] CR2: 00007f0df2f556c8 CR3: 000000006faf6000 CR4: 00000000003526f0 [ 178.069701][ T5967] Call Trace: [ 178.072967][ T5967] [ 178.075888][ T5967] ? __pfx_klist_remove+0x10/0x10 [ 178.080902][ T5967] ? kobject_move+0x5e2/0x720 [ 178.085566][ T5967] ? __pfx_kobject_move+0x10/0x10 [ 178.090579][ T5967] ? get_device_parent+0x366/0x3a0 [ 178.095678][ T5967] device_move+0x18e/0x720 [ 178.100084][ T5967] hci_conn_del_sysfs+0xb8/0x1a0 [ 178.105011][ T5967] hci_conn_del+0xc98/0x1290 [ 178.109589][ T5967] hci_conn_hash_flush+0x189/0x260 [ 178.114688][ T5967] hci_dev_close_sync+0x7f1/0xf50 [ 178.119723][ T5967] ? __pfx___mutex_lock+0x10/0x10 [ 178.124737][ T5967] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 178.130282][ T5967] ? up_write+0x19d/0x4a0 [ 178.134600][ T5967] ? rcu_is_watching+0x16/0xb0 [ 178.139350][ T5967] hci_unregister_dev+0x232/0x5b0 [ 178.144368][ T5967] vhci_release+0x16d/0x1c0 [ 178.148859][ T5967] ? __pfx_vhci_release+0x10/0x10 [ 178.153869][ T5967] __fput+0x413/0xa50 [ 178.157851][ T5967] task_work_run+0x1d9/0x260 [ 178.162435][ T5967] ? __pfx_task_work_run+0x10/0x10 [ 178.167539][ T5967] ? do_exit+0x735/0x2360 [ 178.171859][ T5967] ? kmem_cache_free+0x182/0x650 [ 178.176792][ T5967] ? put_net+0x191/0x260 [ 178.181057][ T5967] do_exit+0x73a/0x2360 [ 178.185211][ T5967] ? __pfx_do_exit+0x10/0x10 [ 178.189789][ T5967] ? do_raw_spin_lock+0x12b/0x2f0 [ 178.194808][ T5967] ? _raw_spin_unlock_irq+0x23/0x50 [ 178.200002][ T5967] do_group_exit+0x22d/0x2f0 [ 178.204588][ T5967] __x64_sys_exit_group+0x3f/0x40 [ 178.209602][ T5967] x64_sys_call+0x18c6/0x18d0 [ 178.214270][ T5967] do_syscall_64+0x166/0x520 [ 178.218846][ T5967] ? trace_irq_disable+0x3b/0x140 [ 178.223868][ T5967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.229925][ T5967] ? clear_bhb_loop+0x70/0xc0 [ 178.234591][ T5967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.240472][ T5967] RIP: 0033:0x7fa4e0d9e159 [ 178.244895][ T5967] Code: Unable to access opcode bytes at 0x7fa4e0d9e12f. [ 178.251899][ T5967] RSP: 002b:00007ffca269a1b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 178.260301][ T5967] RAX: ffffffffffffffda RBX: 00007fa4e0e3452d RCX: 00007fa4e0d9e159 [ 178.268273][ T5967] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 178.270131][ C0] wireguard: wg2: Handshake for peer 30 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 2) [ 178.287732][ T5967] RBP: 0000000000000016 R08: 0000000000000000 R09: 00007fa4e0e344bb [ 178.295689][ T5967] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffca269b470 [ 178.303645][ T5967] R13: 00007fa4e0e344bb R14: 000055558415f4e8 R15: 00007ffca269d630 [ 178.311610][ T5967] [ 178.314618][ T5967] Modules linked in: [ 178.318867][ C1] bridge0: port 1(bridge_slave_0) hold timer expired [ 178.325598][ C1] bridge0: port 2(bridge_slave_1) hold timer expired [ 178.332459][ C1] net_ratelimit: 62 callbacks suppressed [ 178.338094][ C1] wireguard: wg0: Sending keepalive packet to peer 1 ([::1]:20002/0%0) [ 178.346435][ C1] wireguard: wg0: Sending keepalive packet to peer 13 ([::1]:20002/0%0) [ 178.354905][ C1] wireguard: wg1: Sending keepalive packet to peer 9 ([::1]:20001/0%0) [ 178.363252][ C1] wireguard: wg0: Sending keepalive packet to peer 7 ([::1]:20002/0%0) [ 178.371651][ C1] wireguard: wg0: Sending keepalive packet to peer 25 ([::1]:20002/0%0) [ 178.375631][ T72] wireguard: wg2: Sending handshake initiation to peer 30 (127.0.0.1:20002) [ 178.385332][ C0] virtqueue callback for ffff888020f55800 (ffffffff85687ad0) [ 178.385390][ C0] virtqueue interrupt with no work for ffff888020f55a00 [ 178.385404][ C0] virtqueue interrupt with no work for ffff888020f55c00 [ 178.392489][ T9] Added buffer head 0 to ffff888020f55800 [ 178.416205][ T5967] ---[ end trace 0000000000000000 ]--- [ 178.430471][ C1] proto(17) != IPPROTO_TCP or too short (len = 40) [ 178.433332][ T5704] wireguard: wg1: Receiving keepalive packet from peer 15 ([::1]:20001/0%0) [ 178.433408][ T5967] RIP: 0010:klist_remove+0x156/0x340 [ 178.433436][ T5967] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 5d 75 4b f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 3e 75 4b f6 49 8b 44 24 58 48 89 44 24 08 [ 178.433453][ T5967] RSP: 0018:ffffc90004d87880 EFLAGS: 00010202 [ 178.433472][ T5967] RAX: 000000000000000b RBX: ffff88807754ddc0 RCX: ffffffff9ac59501 [ 178.433487][ T5967] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000000058 [ 178.433500][ T5967] RBP: ffffc90004d87980 R08: ffffffff90813aa3 R09: 1ffffffff2102754 [ 178.433515][ T5967] R10: dffffc0000000000 R11: fffffbfff2102755 R12: 0000000000000000 [ 178.433530][ T5967] R13: 1ffff1100f08308c R14: ffff888078418460 R15: dffffc0000000000 [ 178.433545][ T5967] FS: 0000000000000000(0000) GS:ffff88812495b000(0000) knlGS:0000000000000000 [ 178.433563][ T5967] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 178.433577][ T5967] CR2: 00007fd426f3e4e8 CR3: 00000000747d0000 CR4: 00000000003526f0 [ 178.433599][ T5967] Kernel panic - not syncing: Fatal exception [ 178.549381][ T5967] Kernel Offset: disabled [ 178.553699][ T5967] Rebooting in 86400 seconds..