last executing test programs: 4m44.898205388s ago: executing program 0 (id=380): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f00000000c0)='*$#[)\\-$$%,\x00', 0x20000, &(0x7f0000000140)={@_ha_fsid={[0xfd, 0x7fff]}, {0x0, 0x3ff, 0x1ff, 0x6}}, 0x3, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0xbe}) setfsuid(0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000150001000000000000000000e0000002000000000000000000000000000000000000000000000000000006000000000a00108000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000000000000000000000000000000000000000000000003000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b56b6e000000030200000000"], 0xb8}}, 0x0) 4m44.718668055s ago: executing program 0 (id=381): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x1, 0x85, 0x2c, 0x8, 0x525, 0xa4a3, 0xfd97, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x2, 0x7, 0x0, 0x6, "", [{{0x9, 0x4, 0x8, 0xa, 0x1, 0xa6, 0x41, 0xa8, 0xed, [], [{{0x9, 0x5, 0x3, 0x1, 0x200, 0x1, 0x1d, 0xfa}}]}}]}}]}}, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_usb_connect(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="52010000ead4a320d118af1e6309010203010902240001f60720400904"], 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000002c0)="430fc73f0f2390b9800000c00f3235be0000000000300f0620dada080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x49}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407d1ebe2d00000000000109022400010000000009040000010300000009210000fc0122070009058103", @ANYRES8=r0], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(r6, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xa8, r7, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x64, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x50eac532}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x71}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f705545}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x24dda4a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d1d741e}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5f5cbabc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b97adf4}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x4000) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x6}, 0x10) syz_usb_control_io$hid(r3, &(0x7f0000000180)={0x24, &(0x7f0000000040)={0x40, 0x21, 0x18, {0x18, 0x11, "8763000000800000000049bf2d46bc420763797e527e"}}, 0x0, 0x0, 0x0}, 0x0) 4m42.981682053s ago: executing program 0 (id=396): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x9, 0x2, 0x7, 0x7}, 0x22, [0x1ff, 0x0, 0x9, 0x7fffffff, 0x4, 0x7b11d2f9, 0x8, 0x3, 0x150f, 0xd5f, 0x2a800000, 0x0, 0x401, 0xfffffb22, 0x10000, 0x82d6, 0x5, 0x4, 0x9, 0xed76, 0x5, 0x0, 0x7, 0x8, 0xb3, 0xa, 0x5, 0xab56, 0x0, 0x2, 0x7, 0xd, 0x2, 0x7, 0x1, 0x4, 0xa9, 0x1, 0x16, 0x2, 0x1, 0x101, 0xcf9b, 0x5, 0x2, 0x9, 0x650f, 0x1, 0x0, 0xe160, 0x7, 0x40000006, 0xffff, 0x64, 0x40, 0xb, 0x4, 0x6, 0x3, 0x7d69, 0x83, 0xb, 0x1, 0x7], [0x5, 0xfffffff7, 0x2, 0x0, 0x7, 0xf85, 0x135, 0xfffffffa, 0x9, 0x6, 0x5, 0x5, 0xf51a774, 0x0, 0xec08, 0x5, 0x5, 0x208, 0x6, 0x8d, 0xfffffffc, 0xf, 0x10001, 0x7, 0x5, 0x0, 0xe9a, 0x180000, 0x0, 0xffffffff, 0x3, 0x101, 0x3, 0x6, 0xffffff36, 0xa48, 0x3ff, 0x5, 0xed, 0x7, 0x610, 0x7, 0xc, 0x0, 0x7, 0x3, 0x8943, 0x5, 0xfffffbff, 0x2, 0x8, 0x0, 0x0, 0x80000000, 0x2, 0x4, 0x2, 0x5, 0x6, 0x1ff, 0xf166, 0x9, 0x1, 0x81], [0x8, 0x10001, 0xb, 0x8a72, 0x7ff, 0x2a5, 0x9, 0x7, 0xaa4, 0xffffffff, 0x9, 0xfc7d, 0x7, 0x400, 0xf, 0x3, 0x7f, 0x7, 0x8, 0x1, 0xffff, 0x7, 0x80, 0x8, 0x1, 0x31b7d937, 0x5, 0x3, 0x0, 0x3, 0x10000, 0xb2e4, 0xbb, 0x7fffffff, 0x6, 0x3, 0x4, 0x1, 0x0, 0x575c, 0xd, 0x6, 0x2, 0x6, 0x401, 0x2, 0xffff, 0x8, 0x7, 0x8e, 0x4, 0x9, 0x3, 0x3d, 0x4, 0x0, 0x9, 0x3, 0x1, 0x62, 0x40, 0xfb, 0x8, 0x10000], [0x101, 0x0, 0x7, 0x9d37, 0x81, 0x400, 0x2, 0x400, 0x6, 0x0, 0x7, 0x4, 0xff, 0x0, 0xdf7, 0x3e, 0x1, 0x2, 0x1, 0xc, 0xf, 0x585, 0x0, 0x4, 0x12, 0x29f, 0x8, 0x8, 0x8000, 0x6, 0xf401f490, 0x7, 0x9e, 0x656, 0x0, 0x3, 0xc, 0x6, 0x6, 0x7, 0x8c, 0x1, 0x0, 0x8, 0x79, 0x5, 0x6, 0x7, 0x5, 0x0, 0xffffffd2, 0x3, 0x4, 0x4, 0x4, 0xf76, 0xf5c, 0x1ff, 0x3, 0x1000, 0x400, 0x8, 0xfffffffb]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {0x0, 0x0, 0xfffa, 0x101}, 0xfffffffd, [0x8, 0x0, 0x0, 0x4, 0x1, 0x0, 0x401, 0x0, 0x4, 0x20008001, 0x2000, 0x3, 0x0, 0x7, 0x80, 0x80001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, 0x90, 0x801, 0x0, 0x2, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x3, 0x0, 0x8, 0x0, 0xd6, 0xfffffff9, 0x0, 0x3, 0x1, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x7ff, 0x3, 0x0, 0x0, 0xffff1e06, 0x3], [0xfffffffd, 0x3, 0x9, 0x6, 0x0, 0x2, 0x13, 0xff, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0x6189fbd8, 0x0, 0x400000, 0x0, 0x40000fff, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x9e2b, 0x0, 0xfffffffa, 0x5, 0x7aae62b1, 0x100000, 0x0, 0x40002, 0xffffffff, 0x1c, 0x1124, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0xfd5], [0x0, 0xfffffffc, 0x0, 0xd1, 0x0, 0x0, 0x0, 0xfa, 0x0, 0x7, 0x3, 0x7, 0x4, 0x1, 0x0, 0x3, 0x0, 0xb, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x3, 0x8000000, 0x4, 0x0, 0x4cc, 0x99, 0xfffffffd, 0x0, 0x80, 0x0, 0x2000000, 0x0, 0x7, 0x836, 0x1, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x100000, 0x0, 0x0, 0x0, 0xe9cb], [0x0, 0x0, 0x0, 0x0, 0x0, 0x4bdf, 0x4a92, 0xf152, 0x0, 0x10004, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9bf, 0x0, 0x8000, 0x0, 0x800, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0xfffffffe, 0x0, 0x5, 0x8, 0x0, 0x735, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0xb6, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0xcfb0]}, 0x45c) 4m42.852818125s ago: executing program 0 (id=398): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) umount2(&(0x7f0000001880)='./file0/../file0\x00', 0x9) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x1f0, r1, 0x1, 0x0, 0x1000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}]}], @beacon=[@NL80211_ATTR_BEACON_HEAD={0x9f, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x8}, @device_a, @device_b, @initial, {0xf, 0x1}}, 0x5, @default, 0x400, @val={0x0, 0x6, @default_ibss_ssid}, @val, @val={0x3, 0x1, 0xac}, @val={0x4, 0x6, {0xf, 0x0, 0x801, 0x1}}, @void, @val={0x5, 0x58, {0x6, 0xb0, 0x6, "c3f4552382e1146f902003a2ddeb1626f4e88feea7734c590a4c1f22c7ef37e77414d904910faa00d76586f36cf7e3dd63c924e73918d3f1d2b7fcec850d60b690e7c9741cf54d60efed2b3442f8e42410584ec6d3"}}, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_IE_PROBE_RESP={0xc, 0x7f, [@cf={0x4, 0x6, {0xfb, 0x9, 0x1, 0x9}}]}]]}, 0x1f0}}, 0x0) 4m35.164751888s ago: executing program 0 (id=423): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix={0xfffffffb, 0x9, 0x34325842, 0x0, 0x8, 0x10000000, 0x9, 0x2, 0x0, 0x6, 0x1, 0x7}}) 4m34.489613173s ago: executing program 0 (id=426): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x9, 0x2, 0x7, 0x7}, 0x22, [0x1ff, 0x0, 0x9, 0x7fffffff, 0x4, 0x7b11d2f9, 0x8, 0x3, 0x150f, 0xd5f, 0x2a800000, 0x0, 0x401, 0xfffffb22, 0x10000, 0x82d6, 0x5, 0x4, 0x9, 0xed76, 0x5, 0x0, 0x7, 0x8, 0xb3, 0xa, 0x5, 0xab56, 0x0, 0x2, 0x7, 0xd, 0x2, 0x7, 0x1, 0x4, 0xa9, 0x1, 0x16, 0x2, 0x1, 0x101, 0xcf9b, 0x5, 0x2, 0x9, 0x650f, 0x1, 0x0, 0xe160, 0x7, 0x40000006, 0xffff, 0x64, 0x40, 0xb, 0x4, 0x6, 0x3, 0x7d69, 0x83, 0xb, 0x1, 0x7], [0x5, 0xfffffff7, 0x2, 0x0, 0x7, 0xf85, 0x135, 0xfffffffa, 0x9, 0x6, 0x5, 0x5, 0xf51a774, 0x0, 0xec08, 0x5, 0x5, 0x208, 0x6, 0x8d, 0xfffffffc, 0xf, 0x10001, 0x7, 0x5, 0x0, 0xe9a, 0x180000, 0x0, 0xffffffff, 0x3, 0x101, 0x3, 0x6, 0xffffff36, 0xa48, 0x3ff, 0x5, 0xed, 0x7, 0x610, 0x7, 0xc, 0x0, 0x7, 0x3, 0x8943, 0x5, 0xfffffbff, 0x2, 0x8, 0x0, 0x0, 0x80000000, 0x2, 0x4, 0x2, 0x5, 0x6, 0x1ff, 0xf166, 0x9, 0x1, 0x81], [0x8, 0x10001, 0xb, 0x8a72, 0x7ff, 0x2a5, 0x9, 0x7, 0xaa4, 0xffffffff, 0x9, 0xfc7d, 0x7, 0x400, 0xf, 0x3, 0x7f, 0x7, 0x8, 0x1, 0xffff, 0x7, 0x80, 0x8, 0x1, 0x31b7d937, 0x5, 0x3, 0x0, 0x3, 0x10000, 0xb2e4, 0xbb, 0x7fffffff, 0x6, 0x3, 0x4, 0x1, 0x0, 0x575c, 0xd, 0x6, 0x2, 0x6, 0x401, 0x2, 0xffff, 0x8, 0x7, 0x8e, 0x4, 0x9, 0x3, 0x3d, 0x4, 0x0, 0x9, 0x3, 0x1, 0x62, 0x40, 0xfb, 0x8, 0x10000], [0x101, 0x0, 0x7, 0x9d37, 0x81, 0x400, 0x2, 0x400, 0x6, 0x0, 0x7, 0x4, 0xff, 0x0, 0xdf7, 0x3e, 0x1, 0x2, 0x1, 0xc, 0xf, 0x585, 0x0, 0x4, 0x12, 0x29f, 0x8, 0x8, 0x8000, 0x6, 0xf401f490, 0x7, 0x9e, 0x656, 0x0, 0x3, 0xc, 0x6, 0x6, 0x7, 0x8c, 0x1, 0x0, 0x8, 0x79, 0x5, 0x6, 0x7, 0x5, 0x0, 0xffffffd2, 0x3, 0x4, 0x4, 0x4, 0xf76, 0xf5c, 0x1ff, 0x3, 0x1000, 0x400, 0x8, 0xfffffffb]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {0x0, 0x0, 0xfffa, 0x101}, 0xfffffffd, [0x8, 0x0, 0x0, 0x4, 0x1, 0x0, 0x401, 0x0, 0x4, 0x20008001, 0x2000, 0x3, 0x0, 0x7, 0x80, 0x80001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, 0x90, 0x801, 0x0, 0x2, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x3, 0x0, 0x8, 0x0, 0xd6, 0xfffffff9, 0x0, 0x3, 0x1, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x7ff, 0x3, 0x0, 0x0, 0xffff1e06, 0x3], [0xfffffffd, 0x3, 0x9, 0x6, 0x0, 0x2, 0x13, 0xff, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0x6189fbd8, 0x0, 0x400000, 0x0, 0x40000fff, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x9e2b, 0x0, 0xfffffffa, 0x5, 0x7aae62b1, 0x100000, 0x0, 0x40002, 0xffffffff, 0x1c, 0x1124, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0xfd5], [0x0, 0xfffffffc, 0x0, 0xd1, 0x0, 0x0, 0x0, 0xfa, 0x0, 0x7, 0x3, 0x7, 0x4, 0x1, 0x0, 0x3, 0x0, 0xb, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x3, 0x8000000, 0x4, 0x0, 0x4cc, 0x99, 0xfffffffd, 0x0, 0x80, 0x0, 0x0, 0x3f00, 0x7, 0x836, 0x1, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x100000, 0x0, 0x0, 0x0, 0xe9cb], [0x0, 0x0, 0x0, 0x0, 0x0, 0x4bdf, 0x4a92, 0xf152, 0x0, 0x10004, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9bf, 0x0, 0x8000, 0x0, 0x800, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0xfffffffe, 0x0, 0x5, 0x8, 0x0, 0x735, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0xb6, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0xcfb0]}, 0x45c) 4m34.064614325s ago: executing program 32 (id=426): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x9, 0x2, 0x7, 0x7}, 0x22, [0x1ff, 0x0, 0x9, 0x7fffffff, 0x4, 0x7b11d2f9, 0x8, 0x3, 0x150f, 0xd5f, 0x2a800000, 0x0, 0x401, 0xfffffb22, 0x10000, 0x82d6, 0x5, 0x4, 0x9, 0xed76, 0x5, 0x0, 0x7, 0x8, 0xb3, 0xa, 0x5, 0xab56, 0x0, 0x2, 0x7, 0xd, 0x2, 0x7, 0x1, 0x4, 0xa9, 0x1, 0x16, 0x2, 0x1, 0x101, 0xcf9b, 0x5, 0x2, 0x9, 0x650f, 0x1, 0x0, 0xe160, 0x7, 0x40000006, 0xffff, 0x64, 0x40, 0xb, 0x4, 0x6, 0x3, 0x7d69, 0x83, 0xb, 0x1, 0x7], [0x5, 0xfffffff7, 0x2, 0x0, 0x7, 0xf85, 0x135, 0xfffffffa, 0x9, 0x6, 0x5, 0x5, 0xf51a774, 0x0, 0xec08, 0x5, 0x5, 0x208, 0x6, 0x8d, 0xfffffffc, 0xf, 0x10001, 0x7, 0x5, 0x0, 0xe9a, 0x180000, 0x0, 0xffffffff, 0x3, 0x101, 0x3, 0x6, 0xffffff36, 0xa48, 0x3ff, 0x5, 0xed, 0x7, 0x610, 0x7, 0xc, 0x0, 0x7, 0x3, 0x8943, 0x5, 0xfffffbff, 0x2, 0x8, 0x0, 0x0, 0x80000000, 0x2, 0x4, 0x2, 0x5, 0x6, 0x1ff, 0xf166, 0x9, 0x1, 0x81], [0x8, 0x10001, 0xb, 0x8a72, 0x7ff, 0x2a5, 0x9, 0x7, 0xaa4, 0xffffffff, 0x9, 0xfc7d, 0x7, 0x400, 0xf, 0x3, 0x7f, 0x7, 0x8, 0x1, 0xffff, 0x7, 0x80, 0x8, 0x1, 0x31b7d937, 0x5, 0x3, 0x0, 0x3, 0x10000, 0xb2e4, 0xbb, 0x7fffffff, 0x6, 0x3, 0x4, 0x1, 0x0, 0x575c, 0xd, 0x6, 0x2, 0x6, 0x401, 0x2, 0xffff, 0x8, 0x7, 0x8e, 0x4, 0x9, 0x3, 0x3d, 0x4, 0x0, 0x9, 0x3, 0x1, 0x62, 0x40, 0xfb, 0x8, 0x10000], [0x101, 0x0, 0x7, 0x9d37, 0x81, 0x400, 0x2, 0x400, 0x6, 0x0, 0x7, 0x4, 0xff, 0x0, 0xdf7, 0x3e, 0x1, 0x2, 0x1, 0xc, 0xf, 0x585, 0x0, 0x4, 0x12, 0x29f, 0x8, 0x8, 0x8000, 0x6, 0xf401f490, 0x7, 0x9e, 0x656, 0x0, 0x3, 0xc, 0x6, 0x6, 0x7, 0x8c, 0x1, 0x0, 0x8, 0x79, 0x5, 0x6, 0x7, 0x5, 0x0, 0xffffffd2, 0x3, 0x4, 0x4, 0x4, 0xf76, 0xf5c, 0x1ff, 0x3, 0x1000, 0x400, 0x8, 0xfffffffb]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {0x0, 0x0, 0xfffa, 0x101}, 0xfffffffd, [0x8, 0x0, 0x0, 0x4, 0x1, 0x0, 0x401, 0x0, 0x4, 0x20008001, 0x2000, 0x3, 0x0, 0x7, 0x80, 0x80001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, 0x90, 0x801, 0x0, 0x2, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x3, 0x0, 0x8, 0x0, 0xd6, 0xfffffff9, 0x0, 0x3, 0x1, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x7ff, 0x3, 0x0, 0x0, 0xffff1e06, 0x3], [0xfffffffd, 0x3, 0x9, 0x6, 0x0, 0x2, 0x13, 0xff, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0x6189fbd8, 0x0, 0x400000, 0x0, 0x40000fff, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x9e2b, 0x0, 0xfffffffa, 0x5, 0x7aae62b1, 0x100000, 0x0, 0x40002, 0xffffffff, 0x1c, 0x1124, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0xfd5], [0x0, 0xfffffffc, 0x0, 0xd1, 0x0, 0x0, 0x0, 0xfa, 0x0, 0x7, 0x3, 0x7, 0x4, 0x1, 0x0, 0x3, 0x0, 0xb, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x3, 0x8000000, 0x4, 0x0, 0x4cc, 0x99, 0xfffffffd, 0x0, 0x80, 0x0, 0x0, 0x3f00, 0x7, 0x836, 0x1, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x100000, 0x0, 0x0, 0x0, 0xe9cb], [0x0, 0x0, 0x0, 0x0, 0x0, 0x4bdf, 0x4a92, 0xf152, 0x0, 0x10004, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9bf, 0x0, 0x8000, 0x0, 0x800, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0xfffffffe, 0x0, 0x5, 0x8, 0x0, 0x735, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0xb6, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0xcfb0]}, 0x45c) 5.876793938s ago: executing program 2 (id=1729): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x5, "abaccfac46cdbb314bbb7526aeb5ab2c7b9ca5f882000006b2d13d0200"}) mmap(&(0x7f000010c000/0x2000)=nil, 0x2000, 0x3000001, 0x204072, 0xffffffffffffffff, 0xec776000) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc) fsopen(&(0x7f0000000240)='ntfs3\x00', 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0xffffffff, 0x200000}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x4140045e}, 0xc) r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfd, 0x8000}, 0xc) r10 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r10, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x51ee2927639cc674}, 0xc) r11 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r11, &(0x7f0000000300)={0x10, 0x0, 0xffffffff, 0x22ffffffff}, 0xc) r12 = socket$netlink(0x10, 0x3, 0xe) bind$netlink(r12, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socket$netlink(0x10, 0x3, 0x14) 5.413720512s ago: executing program 3 (id=1735): sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df715", 0x35, 0x0, 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @loopback, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc4510010000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000400000ccfde9fcdbdf2501000000080001000200000008000200020000003cc92f8807"], 0x24}, 0x1, 0x0, 0x0, 0xc082}, 0x20004080) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.225737793s ago: executing program 3 (id=1736): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xff00) mkdirat(0xffffffffffffff9c, 0x0, 0x158) writev(0xffffffffffffffff, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0xedc0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 5.225364485s ago: executing program 2 (id=1737): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usbip_server_init(0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) r1 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c24020800010300", @ANYRES8=r1, @ANYBLOB='\a'], 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) r2 = open$dir(&(0x7f0000000040)='./file1\x00', 0x680000, 0x80) mkdirat(r2, &(0x7f0000000140)='./file0/../file0\x00', 0x1ca) 5.125113981s ago: executing program 1 (id=1738): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x381001, 0x0) r1 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, r2) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x800080, &(0x7f0000000240)={[{@verity_off}]}) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000000000)={0x8000, {"863094aeb0b2561800", "398e9cb8b9ef106c55992b65958724b1", "04641700"}, 0x81, 0x6}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r4, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0xf29d}], 0x1a000, 0x40010102, 0x0) r5 = syz_usb_connect(0x6, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r6, &(0x7f0000000040)='7', 0x1) syz_usb_control_io$uac3(r5, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) r8 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109000904000001020d0000052406000105240008000d240f0100000000000000000006241a00000008241c0b00e9f7ff090581030002000000090401000002f7ff000904010102020d0000090582020002000000090503020002000000"], 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x800, 0x8, 0xfff, 0x10, 0x10, 0x8, 0x1, 0x9, 0x10, 0x1, 0x1, 0x13}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r8, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$KVM_SET_CLOCK(r9, 0x4030ae7b, &(0x7f00000000c0)={0x9, 0x0, 0x4f, 0x7, 0x1ff}) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/seq/clients\x00', 0x0, 0x0) connect$inet6(r10, &(0x7f0000000180)={0xa, 0x4e22, 0x80, @mcast1, 0x81}, 0x1c) write(r7, 0x0, 0x0) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000040)) 4.987069011s ago: executing program 3 (id=1739): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xff00) mkdirat(0xffffffffffffff9c, 0x0, 0x158) writev(0xffffffffffffffff, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (fail_nth: 23) 4.629767768s ago: executing program 3 (id=1740): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xffffffff, 0x1e5}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x13, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x10}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0xfffc, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 4.567833117s ago: executing program 3 (id=1741): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007882b740422c0917b7ca010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x560, 0x0, 0x8}]}) syz_usb_connect$uac2(0x1, 0x10c, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x499, 0x1041, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfa, 0x3, 0x1, 0x2, 0x20, 0xcc, {0x8, 0xb, 0x0, 0x0, 0x1, 0x2, 0x20, 0x64}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xffff, 0xff, 0x35, 0x9}, [@feature_unit={0x9, 0x24, 0x6, 0x4, 0x5, [0x2, 0xcf1284eb6d0d8bd5]}, @feature_unit={0x7, 0x24, 0x6, 0x4, 0x3, [0x4]}, @extension_unit={0x7, 0x24, 0x9, 0x1, 0x3, 0x2}, @mixer_unit={0x8, 0x24, 0x4, 0x2, 0x2, "c0dd07"}, @effect_unit={0xd, 0x24, 0x7, 0x4, 0x4, 0x5, [0x2, 0x3, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0x88, 0x96, 0x7, 0x14}, @as_header={0x10, 0x24, 0x1, 0x3, 0x7, 0x1, 0x5, 0x2, 0x8, 0xaf}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x8, 0x0, 0xf1, "1991c89eb9e3aa2569"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xfd67, 0x4, 0x62, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0x8, 0xeb, {0x8, 0x25, 0x1, 0x0, 0x0, 0x5b, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0x1, 0xe5, 0x7, 0x81}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x2, 0x4, 0x5, 0x6d, "db0172"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x6}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x1, 0x1, 0x4, "1370"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xfe, 0x1, 0x7f, 0xc0, "53806c"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x7, 0x2c, 0xa, {0x8, 0x25, 0x1, 0x81, 0x3c, 0x8, 0x7}}}}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x310, 0x3, 0x7, 0x5, 0x8, 0x57}, 0x29, &(0x7f0000000440)={0x5, 0xf, 0x29, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "d3b735cb874ea53c60cc95fc57ee8a20"}, @ssp_cap={0x10, 0x10, 0xa, 0xc, 0x1, 0x7, 0xf00f, 0x4, [0x3f0f]}]}, 0x8, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x430}}, {0x3c, &(0x7f0000000580)=@string={0x3c, 0x3, "cde626918f1ee2d1a0e77bbc482c1563e0c15d0573c87c82a846ee92b1e22a0296f3ee4efabcc58d4b2bf13669ca7a6cd6a6c46c104f900de944"}}, {0xa7, &(0x7f00000005c0)=@string={0xa7, 0x3, "840073cc0829529637c70edb121ef029afc6b0d771fb225d2eddfa19d532470fdf1c532052775b885ca12459c8144511674cbf6d55cae79e934f506bc82c1d1af28d3ff6549b3e4f8c542d965ae96fbe3d1f9447184a9fa741f6b101826d83016a5d59c7c13205d1b5fa996cd7ccffd2ea626d8cc6cbe0be9b4d1a1972d5beb18f3194ad5b4a8b74848b14a0709c73bd135a1cfea0d5b01caaf6e7fbc2c99d34400da0c3bb"}}, {0x4f, &(0x7f0000000680)=@string={0x4f, 0x3, "b097856fa367b9c6f4d33d5476dee35fbb104e11fa97642e6498d4eb6c21478797be7616e34aaed48835d07ea5aa78c338e57b69722a46735cfca1f0f4707e46fa6d994c295e68e3df9552f6ff"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xda59d2ba5eb5e651}}, {0x7a, &(0x7f0000000780)=@string={0x7a, 0x3, "44c7b70b664025d32e0486ebd151fbcef4ae150730d05608cbad1317dd4dcc2b219a584f4755fef100ea168e843efb322be57d8c80a211e025bc8d5daa5097a63fcc5ba6befd9ab104d7768a7287101032b159b259533fce0ca08ba97c12f91831d2325123b2f328aef499d831f167c6a7d0bade9b8997f2"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x44b}}]}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000c00)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000500)='l', 0x1}], 0x1}}], 0x2, 0x4000001) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @empty}}, 0xa8dc, 0x4}, &(0x7f0000000280)=0x90) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 3.381898078s ago: executing program 2 (id=1742): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x8, 0x101042) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48e1, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00000000000000002200", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x2000000000001]}}) 3.253895964s ago: executing program 2 (id=1743): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000580)={0x40, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000002380)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, &(0x7f0000000300)={0x14, &(0x7f0000000100)={0x40, 0x23, 0x34, {0x34, 0x22, "3abac8ce45bfd9c4d771bc3811b9bd7b6a4e7ab8bc43b3fd25d3f90be518ba78e871e80e22895ee157228d297af8a5efd1d1"}}, &(0x7f0000000280)={0x0, 0x3, 0x46, @string={0x46, 0x3, "b884d7a0a5572b800e655300bab50f47bfba46b07c359b94548e318af17ecfa51bb35a4e83ca914a108a228b25379aae33c39b885938f2fd3aad4a0de616459b21704314"}}}, &(0x7f0000000600)={0x34, &(0x7f00000003c0)={0x20, 0xc, 0x12, "09aca527207ba108c1f0557e09e6e341e716"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x46}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000500)={0xc0, 0xa1, 0x4, 0xf}, &(0x7f0000000540)={0x40, 0xa0, 0x4, 0x4}, &(0x7f00000005c0)={0xc0, 0xa2, 0x2f, "364e5b42ea8ac4468e51ad80701ee2a1a5f0c93f3fed511f613f6a85fbb5e13775f58f0831e75f847b2812492f3bea"}}) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x44, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.28583466s ago: executing program 4 (id=1745): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x8, 0x101042) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x48e1, 0x0, 0x0, 0x4, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x2, 0x2000000000001]}}) 2.077933917s ago: executing program 4 (id=1746): syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = syz_open_dev$sg(&(0x7f0000000000), 0xec45, 0x7a9342) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0022891424ae", @ANYRES64=r0], 0xb2) 2.055604482s ago: executing program 4 (id=1747): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x14, r1, 0x731, 0x100000, 0x8100, {0x38}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x60}, 0x1, 0x2, 0x0, 0x1bb5818a0d53d6a}, 0x40) 1.978922747s ago: executing program 1 (id=1748): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x60, r1, 0x731, 0x100000, 0x8100, {0x38}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x60}, 0x1, 0x2, 0x0, 0x1bb5818a0d53d6a}, 0x40) (fail_nth: 7) 1.805640163s ago: executing program 4 (id=1749): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x42, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r4, 0x84, 0x82, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x48, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 1.60963956s ago: executing program 4 (id=1750): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f00000000c0)='*$#[)\\-$$%,\x00', 0x20000, &(0x7f0000000140)={@_ha_fsid={[0xfd, 0x7fff]}, {0x0, 0x3ff, 0x1ff, 0x6}}, 0x3, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0xbe}) setfsuid(0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000150001000000000000000000e0000002000000000000000000000000000000000000000000000000000006000000000a00108000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000b56b6e000000030200000000"], 0xb8}}, 0x0) 1.542508257s ago: executing program 4 (id=1751): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usbip_server_init(0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) r1 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c24020800010300", @ANYRES8=r1, @ANYBLOB='\a'], 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) r2 = open$dir(&(0x7f0000000040)='./file1\x00', 0x680000, 0x80) mkdirat(r2, &(0x7f0000000140)='./file0/../file0\x00', 0x1ca) 1.350168935s ago: executing program 3 (id=1752): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x50d, 0x3201, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0xc, "", [{{0x9, 0x4, 0x0, 0xf, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0xff, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xb4, 0x83, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0xd) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f00000000c0)={0x0, 0x8, 0x2, {0x2, 0x21}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.349795461s ago: executing program 1 (id=1753): sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df715", 0x35, 0x0, 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @loopback, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc4510010000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000400000ccfde9fcdbdf2501000000080001000200000008000200020000003cc92f8807"], 0x24}, 0x1, 0x0, 0x0, 0xc082}, 0x20004080) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.262779185s ago: executing program 1 (id=1754): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r1, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xff00) mkdirat(0xffffffffffffff9c, 0x0, 0x158) writev(0xffffffffffffffff, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 993.241668ms ago: executing program 1 (id=1755): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x1) landlock_restrict_self(r0, 0x1) set_robust_list(&(0x7f00000001c0)={&(0x7f00000000c0)={&(0x7f0000000080)={&(0x7f0000000040)}}, 0x8, &(0x7f0000000180)={&(0x7f0000000140)={&(0x7f0000000100)}}}, 0x18) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000200)={0x2, 0x80, 0xd}) ioctl$NILFS_IOCTL_GET_SUINFO(r0, 0x80186e84, &(0x7f0000000280)={&(0x7f0000000240)=[{0x2, 0x2, 0x2}, {0x6, 0xffffffff, 0x2}, {0x0, 0x80000001, 0x2}], 0x3, 0x10, 0x79c, 0x21534b3c}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) flock(r1, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000300)) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f00000003c0)) unlinkat(r0, &(0x7f0000000400)='./file0\x00', 0x200) fgetxattr(0xffffffffffffffff, &(0x7f0000000440)=@known='trusted.overlay.redirect\x00', &(0x7f0000000480)=""/136, 0x88) fsetxattr$security_ima(r1, &(0x7f0000000540), &(0x7f0000000580)=@v1={0x2, "cf482b31230484dc6d281f"}, 0xc, 0x2b3ec16498bc10dc) r2 = syz_ublk_setup_io_uring(0x5239, &(0x7f00000005c0)={0x0, 0x235, 0x2, 0x1, 0x17c}, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) read$rfkill(r1, &(0x7f0000000700), 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000740)={0x2, 0x4, 0x1, 'queue1\x00', 0x5}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000800)=0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000840)=0x512) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000880)={[0x200, 0x9, 0x851, 0x931, 0x0, 0x800, 0x8, 0xfffffffffffffffc, 0x0, 0x100, 0x1, 0x5, 0x9, 0x6, 0x8000000000000001], 0xeeee8000, 0x80010}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000940)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000bc0)={&(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0], 0x4}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000c40), 0x482880, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000cc0)={'vxcan0\x00', 0x0}) sendto(r0, &(0x7f0000000c80)="fbaa6f420d0f1690d97ce252aba7cfe7ead15f0ae0ed53363243450e46b6", 0x1e, 0x80, &(0x7f0000000d00)=@can={0x1d, r6}, 0x80) ioctl$USBDEVFS_REAPURB(r5, 0x4008550c, &(0x7f0000000d80)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x2c, r7, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048081}, 0x810) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000f40)={0xb6, 0xa9b, {0xffffffffffffffff}, {0xee00}, 0x6, 0x100000000}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000002fc0)={{0x1, 0x1, 0x18, r2, {r9}}, './file0\x00'}) 757.950328ms ago: executing program 1 (id=1756): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x155440, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r1, 0xc008aec1, &(0x7f0000000040)={0x3, 0x0, [{0x6, 0x9, 0x5, 0x6aa, 0xbce8, 0x9, 0x4}, {0x2, 0x9, 0x2, 0xf8b, 0x8, 0x0, 0x209}, {0x1, 0x2, 0x4, 0x1, 0x80000001, 0x3, 0x1}]}) pipe2(&(0x7f00000000c0), 0x4000) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x19b6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x27, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7f, 0xfe, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x9, 0xc0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x20, 0x22, 0x84, {0xa1, 0x9, "c263138526792c3cbdeace918d0fb74237cc6e446c4e88e78881ce2a52973661d67a0c5544389eaeadcfe4a3f0c6541259c42632d7bf4e71b154dbca000400001368cc117a7346d97565724b97bdfa0c8e8b582ddcfe3c032c80d9da46c680be685627e4513ddfcaf9ba3c0168c18e4eb1ef8c2ca0b6c2ef3fc71095a4d9a1ba27822fa5a849d8acb967c3fd80a90a38f7946f6cae37c3499b922a58e39739"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r4, 0x40084146, &(0x7f0000000300)) r5 = fanotify_init(0x8, 0x80000) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYRESDEC=r5], 0x18) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000980)={0x2, @win={{0x4, 0x7, 0x2, 0x40}, 0x2, 0xc, 0x0, 0xd, 0x0, 0x8}}) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3107000010000081000038000000080001007063690011000200303030303a30303a31302e300000000008007300000000000e0001006e657464657673696d0000000f0006006e657464657673696d3000000800030001000000"], 0x60}, 0x1, 0x2}, 0x40) 227.99853ms ago: executing program 2 (id=1757): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x9, 0x2, 0x7, 0x7}, 0x22, [0x1ff, 0x0, 0x9, 0x7fffffff, 0x4, 0x7b11d2f9, 0x8, 0x3, 0x150f, 0xd5f, 0x2a800000, 0x0, 0x401, 0xfffffb22, 0x10000, 0x82d6, 0x5, 0x4, 0x9, 0xed76, 0x5, 0x0, 0x7, 0x8, 0xb3, 0xa, 0x5, 0xab56, 0x0, 0x2, 0x7, 0xd, 0x2, 0x7, 0x1, 0x4, 0xa9, 0x1, 0x16, 0x2, 0x1, 0x101, 0xcf9b, 0x5, 0x2, 0x9, 0x650f, 0x1, 0x0, 0xe160, 0x7, 0x40000006, 0xffff, 0x64, 0x40, 0xb, 0x4, 0x6, 0x3, 0x7d69, 0x83, 0xb, 0x1, 0x7], [0x5, 0xfffffff7, 0x2, 0x0, 0x7, 0xf85, 0x135, 0xfffffffa, 0x9, 0x6, 0x5, 0x5, 0xf51a774, 0x0, 0xec08, 0x5, 0x5, 0x208, 0x6, 0x8d, 0xfffffffc, 0xf, 0x10001, 0x7, 0x5, 0x0, 0xe9a, 0x180000, 0x0, 0xffffffff, 0x3, 0x101, 0x3, 0x6, 0xffffff36, 0xa48, 0x3ff, 0x5, 0xed, 0x7, 0x610, 0x7, 0xc, 0x0, 0x7, 0x3, 0x8943, 0x5, 0xfffffbff, 0x2, 0x8, 0x0, 0x0, 0x80000000, 0x2, 0x4, 0x2, 0x5, 0x6, 0x1ff, 0xf166, 0x9, 0x1, 0x81], [0x8, 0x10001, 0xb, 0x8a72, 0x7ff, 0x2a5, 0x9, 0x7, 0xaa4, 0xffffffff, 0x9, 0xfc7d, 0x7, 0x400, 0xf, 0x3, 0x7f, 0x7, 0x8, 0x1, 0xffff, 0x7, 0x80, 0x8, 0x1, 0x31b7d937, 0x5, 0x3, 0x0, 0x3, 0x10000, 0xb2e4, 0xbb, 0x7fffffff, 0x6, 0x3, 0x4, 0x1, 0x0, 0x575c, 0xd, 0x6, 0x2, 0x6, 0x401, 0x2, 0xffff, 0x8, 0x7, 0x8e, 0x4, 0x9, 0x3, 0x3d, 0x4, 0x0, 0x9, 0x3, 0x1, 0x62, 0x40, 0xfb, 0x8, 0x10000], [0x101, 0x0, 0x7, 0x9d37, 0x81, 0x400, 0x2, 0x400, 0x6, 0x0, 0x7, 0x4, 0xff, 0x0, 0xdf7, 0x3e, 0x1, 0x2, 0x1, 0xc, 0xf, 0x585, 0x0, 0x4, 0x12, 0x29f, 0x8, 0x8, 0x8000, 0x6, 0xf401f490, 0x7, 0x9e, 0x656, 0x0, 0x3, 0xc, 0x6, 0x6, 0x7, 0x8c, 0x1, 0x0, 0x8, 0x79, 0x5, 0x6, 0x7, 0x5, 0x0, 0xffffffd2, 0x3, 0x4, 0x4, 0x4, 0xf76, 0xf5c, 0x1ff, 0x3, 0x1000, 0x400, 0x8, 0xfffffffb]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {0x0, 0x0, 0xfffa, 0x101}, 0xfffffffd, [0x8, 0x0, 0x0, 0x4, 0x1, 0x0, 0x401, 0x0, 0x4, 0x20008001, 0x2000, 0x3, 0x0, 0x7, 0x80, 0x80001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, 0x90, 0x801, 0x0, 0x2, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8000008, 0x3, 0x0, 0x0, 0x1, 0x3, 0x0, 0x8, 0x0, 0xd6, 0xfffffff9, 0x0, 0x3, 0x1, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x7ff, 0x3, 0x0, 0x0, 0xffff1e06, 0x3], [0xfffffffd, 0x3, 0x9, 0x6, 0x0, 0x2, 0x13, 0xff, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0x6189fbd8, 0x0, 0x400000, 0x0, 0x40000fff, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x9e2b, 0x0, 0xfffffffa, 0x5, 0x7aae62b1, 0x100000, 0x0, 0x40002, 0xffffffff, 0x1c, 0x1124, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0xfd5], [0x0, 0xfffffffc, 0x0, 0xd1, 0x0, 0x0, 0x0, 0xfa, 0x0, 0x7, 0x3, 0x7, 0x4, 0x1, 0x0, 0x3, 0x0, 0xb, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x3, 0x8000000, 0x4, 0x0, 0x4cc, 0x99, 0xfffffffd, 0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x836, 0x1, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x100000, 0x0, 0x0, 0x0, 0xe9cb], [0x0, 0x0, 0x0, 0x0, 0x0, 0x4bdf, 0x4a92, 0xf152, 0x0, 0x10004, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9bf, 0x0, 0x8000, 0x0, 0x800, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0xfffffffe, 0x0, 0x5, 0x8, 0x0, 0x735, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0xb6, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0xcfb0]}, 0x45c) 0s ago: executing program 2 (id=1758): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b40), r0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000002000010025bd700100000000020000002000098008001300090000000800ea00", @ANYRES32=r3, @ANYBLOB='\f\x00', @ANYRES32=r3], 0x34}, 0x1, 0x0, 0x0, 0x40940}, 0x4) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14, r2, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x81c1}, 0xc0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_usb_connect$uac2(0x0, 0x90, &(0x7f0000000380)=ANY=[@ANYBLOB="120100000000002082053b0040000102030109027e0003efff6003080b0001010520020904000000010120000924010700001e00170924070501000603000c2403010003", @ANYRES64=r4], 0x0) eventfd(0x0) kernel console output (not intermixed with test programs): mount_busy()!=0 [ 391.136521][T10567] overlayfs: statfs failed on './file0' [ 391.352841][T10570] netlink: zone id is out of range [ 391.352855][T10570] netlink: zone id is out of range [ 391.353296][T10570] netlink: zone id is out of range [ 391.353306][T10570] netlink: zone id is out of range [ 391.353314][T10570] netlink: zone id is out of range [ 391.353321][T10570] netlink: zone id is out of range [ 391.353329][T10570] netlink: zone id is out of range [ 391.353336][T10570] netlink: zone id is out of range [ 391.353343][T10570] netlink: zone id is out of range [ 391.382358][T10570] netlink: zone id is out of range [ 391.615888][T10555] block nbd2: Disconnected due to user request. [ 391.615907][T10555] block nbd2: shutting down sockets [ 391.913921][T10576] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 392.327372][T10584] fuse: Bad value for 'fd' [ 392.346462][T10584] tmpfs: Unknown parameter 'obj_role' [ 392.652918][T10593] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1498'. [ 392.847668][ T9167] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 392.868637][ T9164] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 393.021227][ T9167] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 393.021258][ T9167] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.021278][ T9167] usb 4-1: Product: syz [ 393.021292][ T9167] usb 4-1: Manufacturer: syz [ 393.021306][ T9167] usb 4-1: SerialNumber: syz [ 393.028730][ T9164] usb 5-1: Using ep0 maxpacket: 16 [ 393.033021][ T9164] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 393.033044][ T9164] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 393.042871][ T9164] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 393.042897][ T9164] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.042916][ T9164] usb 5-1: Product: syz [ 393.042930][ T9164] usb 5-1: Manufacturer: syz [ 393.042956][ T9164] usb 5-1: SerialNumber: syz [ 393.093610][ T9164] usb 5-1: 0:2 : does not exist [ 393.312066][ T9164] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 393.463075][ T9167] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 393.475244][ T9167] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 393.477974][ T9167] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 393.500569][ T9164] usb 5-1: USB disconnect, device number 69 [ 393.525604][ T9167] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 393.591852][ T5768] udevd[5768]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 393.632837][T10602] input: syz0 as /devices/virtual/input/input109 [ 393.707956][ T32] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 393.873258][ T32] usb 3-1: Using ep0 maxpacket: 32 [ 393.890340][ T32] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 393.890365][ T32] usb 3-1: config 0 has no interface number 0 [ 393.902284][ T32] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 393.902313][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.902333][ T32] usb 3-1: Product: syz [ 393.902346][ T32] usb 3-1: Manufacturer: syz [ 393.902360][ T32] usb 3-1: SerialNumber: syz [ 393.913696][ T32] usb 3-1: config 0 descriptor?? [ 393.934638][ T32] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 393.934734][ T32] usb 3-1: selecting invalid altsetting 1 [ 393.934751][ T32] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 393.948840][ T32] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 393.950383][ T32] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 393.950514][ T32] usb 3-1: media controller created [ 394.085944][ T32] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 394.127695][T10600] tmpfs: User quota inode hardlimit too large. [ 394.324326][ T32] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 394.324382][ T32] zl10353_read_register: readreg error (reg=127, ret==-71) [ 394.324957][ T32] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 394.365425][T10618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.365923][T10618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.387274][ T32] usb 3-1: USB disconnect, device number 100 [ 394.398428][ T37] audit: type=1326 audit(1784086494.054:3849): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10617 comm="syz.1.1505" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a60ade59 code=0x7ffc0000 [ 394.398560][ T37] audit: type=1326 audit(1784086494.054:3850): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10617 comm="syz.1.1505" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a60ade59 code=0x7ffc0000 [ 394.401833][ T37] audit: type=1326 audit(1784086494.054:3851): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10617 comm="syz.1.1505" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a60ade59 code=0x7ffc0000 [ 394.406209][ T37] audit: type=1326 audit(1784086494.054:3852): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10617 comm="syz.1.1505" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f15a60ade59 code=0x7ffc0000 [ 394.406266][ T37] audit: type=1326 audit(1784086494.054:3853): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10617 comm="syz.1.1505" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a60ade59 code=0x7ffc0000 [ 394.406305][ T37] audit: type=1326 audit(1784086494.054:3854): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10617 comm="syz.1.1505" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a60ade59 code=0x7ffc0000 [ 394.406343][ T37] audit: type=1326 audit(1784086494.054:3855): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10617 comm="syz.1.1505" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a60ade59 code=0x7ffc0000 [ 394.406383][ T37] audit: type=1326 audit(1784086494.054:3856): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10617 comm="syz.1.1505" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a60ade59 code=0x7ffc0000 [ 394.406425][ T37] audit: type=1326 audit(1784086494.054:3857): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10617 comm="syz.1.1505" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f15a60ade59 code=0x7ffc0000 [ 394.406605][ T37] audit: type=1326 audit(1784086494.054:3858): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10617 comm="syz.1.1505" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a60ade59 code=0x7ffc0000 [ 394.576602][T10618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1505'. [ 394.997662][ T32] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 395.155382][ T32] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 395.155414][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.155433][ T32] usb 3-1: Product: syz [ 395.155448][ T32] usb 3-1: Manufacturer: syz [ 395.155462][ T32] usb 3-1: SerialNumber: syz [ 395.222497][ T9167] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 395.660450][ T5332] usb 3-1: USB disconnect, device number 101 [ 395.681730][ T32] usb 4-1: USB disconnect, device number 98 [ 395.866451][T10634] do_umount: task=syz.3.1510[10634] propagate_mount_busy()!=0 [ 395.867273][T10633] FAULT_INJECTION: forcing a failure. [ 395.867273][T10633] name failslab, interval 1, probability 0, space 0, times 0 [ 395.867305][T10633] CPU: 0 UID: 0 PID: 10633 Comm: syz.3.1510 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 395.867332][T10633] Tainted: [L]=SOFTLOCKUP [ 395.867339][T10633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 395.867350][T10633] Call Trace: [ 395.867358][T10633] [ 395.867367][T10633] dump_stack_lvl+0xe8/0x150 [ 395.867400][T10633] should_fail_ex+0x467/0x600 [ 395.867430][T10633] should_failslab+0xa8/0x100 [ 395.867442][T10633] __kmalloc_cache_noprof+0xa1/0x670 [ 395.867464][T10633] ? ovl_init_fs_context+0xa0/0x570 [ 395.867477][T10633] ? ovl_init_fs_context+0xa0/0x570 [ 395.867500][T10633] ovl_init_fs_context+0xa0/0x570 [ 395.867528][T10633] alloc_fs_context+0x9a3/0xd00 [ 395.867559][T10633] do_new_mount+0x17f/0xdc0 [ 395.867577][T10633] ? cap_capable+0x123/0x460 [ 395.867602][T10633] ? __pfx_do_new_mount+0x10/0x10 [ 395.867623][T10633] ? ns_capable+0x89/0xe0 [ 395.867646][T10633] ? path_mount+0x647/0x1050 [ 395.867667][T10633] ? user_path_at+0xd4/0x160 [ 395.867691][T10633] __se_sys_mount+0x31d/0x420 [ 395.867714][T10633] ? __pfx___se_sys_mount+0x10/0x10 [ 395.867737][T10633] ? __x64_sys_mount+0x20/0xc0 [ 395.867757][T10633] do_syscall_64+0x17b/0x530 [ 395.867779][T10633] ? irqentry_exit+0x10f/0x8f0 [ 395.867799][T10633] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.867820][T10633] ? clear_bhb_loop+0x40/0x90 [ 395.867845][T10633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.867866][T10633] RIP: 0033:0x7fe14032de59 [ 395.867884][T10633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.867901][T10633] RSP: 002b:00007fe13e586028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 395.867918][T10633] RAX: ffffffffffffffda RBX: 00007fe1405b5fa0 RCX: 00007fe14032de59 [ 395.867930][T10633] RDX: 0000200000000b80 RSI: 0000200000000580 RDI: 0000000000000000 [ 395.867943][T10633] RBP: 00007fe13e586090 R08: 0000200000000100 R09: 0000000000000000 [ 395.867955][T10633] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000002 [ 395.867967][T10633] R13: 00007fe1405b6038 R14: 00007fe1405b5fa0 R15: 00007ffcdccf9038 [ 395.867995][T10633] [ 396.330916][T10639] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 396.461618][ T9167] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 396.584272][ T9167] ath9k_htc: Failed to initialize the device [ 396.585111][ T5332] usb 3-1: ath9k_htc: USB layer deinitialized [ 396.987624][ T5332] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 397.139006][ T5332] usb 3-1: Using ep0 maxpacket: 16 [ 397.143034][ T5332] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 397.143057][ T5332] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 397.147308][ T5332] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 397.147324][ T5332] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.147335][ T5332] usb 3-1: Product: syz [ 397.147342][ T5332] usb 3-1: Manufacturer: syz [ 397.147350][ T5332] usb 3-1: SerialNumber: syz [ 397.233834][ T5332] usb 3-1: 0:2 : does not exist [ 397.327895][ T32] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 397.428872][ T5332] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 397.468422][ T5332] usb 3-1: USB disconnect, device number 102 [ 397.490042][ T32] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 397.490070][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.490090][ T32] usb 4-1: Product: syz [ 397.490184][ T32] usb 4-1: Manufacturer: syz [ 397.490199][ T32] usb 4-1: SerialNumber: syz [ 397.517634][ T10] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 397.564981][ T5985] udevd[5985]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 397.681834][ T10] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 397.681864][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.681884][ T10] usb 5-1: Product: syz [ 397.681898][ T10] usb 5-1: Manufacturer: syz [ 397.681912][ T10] usb 5-1: SerialNumber: syz [ 397.721115][ T10] usb 5-1: config 0 descriptor?? [ 397.733046][ T10] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 397.866453][T10662] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1521'. [ 397.958268][ T32] net_ratelimit: 2 callbacks suppressed [ 397.958370][ T32] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 397.958427][ T32] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 397.961272][ T32] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 397.961326][ T32] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 397.963349][ T32] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 398.027724][ T32] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 398.507630][ T5332] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 398.647656][ T5332] usb 3-1: device descriptor read/64, error -71 [ 398.887677][ T5332] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 399.017672][ T5332] usb 3-1: device descriptor read/64, error -71 [ 399.052761][ T10] gspca_stk1135: reg_w 0xd err -71 [ 399.053934][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 399.053948][ T10] gspca_stk1135: Sensor write failed [ 399.054000][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 399.054012][ T10] gspca_stk1135: Sensor write failed [ 399.054036][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 399.054046][ T10] gspca_stk1135: Sensor read failed [ 399.054071][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 399.054081][ T10] gspca_stk1135: Sensor read failed [ 399.054089][ T10] gspca_stk1135: Detected sensor type unknown (0x0) [ 399.054119][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 399.054128][ T10] gspca_stk1135: Sensor read failed [ 399.054151][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 399.054160][ T10] gspca_stk1135: Sensor read failed [ 399.054186][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 399.054195][ T10] gspca_stk1135: Sensor write failed [ 399.054220][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 399.054230][ T10] gspca_stk1135: Sensor write failed [ 399.058923][ T10] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 399.072465][ T10] usb 5-1: USB disconnect, device number 70 [ 399.128074][ T5332] usb usb3-port1: attempt power cycle [ 399.467811][ T5332] usb 3-1: new full-speed USB device number 105 using dummy_hcd [ 399.488567][ T5332] usb 3-1: device descriptor read/8, error -71 [ 399.727675][ T5332] usb 3-1: new full-speed USB device number 106 using dummy_hcd [ 399.748461][ T5332] usb 3-1: device descriptor read/8, error -71 [ 399.799441][T10677] input: syz0 as /devices/virtual/input/input110 [ 399.858041][ T5332] usb usb3-port1: unable to enumerate USB device [ 399.976817][T10680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.978247][T10680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.056844][ T5332] usb 4-1: USB disconnect, device number 99 [ 400.447750][ T5332] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 400.597657][ T5332] usb 4-1: Using ep0 maxpacket: 16 [ 400.601054][ T5332] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 400.601078][ T5332] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 400.603562][ T5332] usb 4-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40 [ 400.603590][ T5332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.603610][ T5332] usb 4-1: Product: syz [ 400.603624][ T5332] usb 4-1: Manufacturer: syz [ 400.603638][ T5332] usb 4-1: SerialNumber: syz [ 400.885936][ T5332] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 400.892504][ T5332] usb 4-1: USB disconnect, device number 100 [ 400.904868][ T5985] udevd[5985]: setting mode of /dev/bus/usb/004/100 to 020664 failed: No such file or directory [ 400.916512][ T5985] udevd[5985]: setting owner of /dev/bus/usb/004/100 to uid=0, gid=0 failed: No such file or directory [ 401.044842][T10694] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 401.449019][ T5332] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 401.607734][ T5332] usb 5-1: Using ep0 maxpacket: 16 [ 401.618674][ T5332] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 401.618699][ T5332] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 401.621664][ T5332] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 401.621691][ T5332] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.621710][ T5332] usb 5-1: Product: syz [ 401.621723][ T5332] usb 5-1: Manufacturer: syz [ 401.621738][ T5332] usb 5-1: SerialNumber: syz [ 401.659176][ T5332] usb 5-1: 0:2 : does not exist [ 401.903336][ T5332] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 402.036279][ T5332] usb 5-1: USB disconnect, device number 71 [ 402.108627][ T5985] udevd[5985]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 402.153096][T10706] do_umount: task=syz.3.1534[10706] propagate_mount_busy()!=0 [ 402.153937][T10706] FAULT_INJECTION: forcing a failure. [ 402.153937][T10706] name failslab, interval 1, probability 0, space 0, times 0 [ 402.153958][T10706] CPU: 0 UID: 0 PID: 10706 Comm: syz.3.1534 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 402.153973][T10706] Tainted: [L]=SOFTLOCKUP [ 402.153978][T10706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 402.153985][T10706] Call Trace: [ 402.153989][T10706] [ 402.153994][T10706] dump_stack_lvl+0xe8/0x150 [ 402.154012][T10706] should_fail_ex+0x467/0x600 [ 402.154029][T10706] should_failslab+0xa8/0x100 [ 402.154041][T10706] __kmalloc_cache_noprof+0xa1/0x670 [ 402.154063][T10706] ? ovl_init_fs_context+0x13c/0x570 [ 402.154084][T10706] ? ovl_init_fs_context+0x13c/0x570 [ 402.154112][T10706] ovl_init_fs_context+0x13c/0x570 [ 402.154141][T10706] alloc_fs_context+0x9a3/0xd00 [ 402.154177][T10706] do_new_mount+0x17f/0xdc0 [ 402.154194][T10706] ? cap_capable+0x123/0x460 [ 402.154220][T10706] ? __pfx_do_new_mount+0x10/0x10 [ 402.154236][T10706] ? ns_capable+0x89/0xe0 [ 402.154249][T10706] ? path_mount+0x647/0x1050 [ 402.154260][T10706] ? user_path_at+0xd4/0x160 [ 402.154273][T10706] __se_sys_mount+0x31d/0x420 [ 402.154286][T10706] ? __pfx___se_sys_mount+0x10/0x10 [ 402.154299][T10706] ? __x64_sys_mount+0x20/0xc0 [ 402.154310][T10706] do_syscall_64+0x17b/0x530 [ 402.154321][T10706] ? irqentry_exit+0x10f/0x8f0 [ 402.154331][T10706] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.154342][T10706] ? clear_bhb_loop+0x40/0x90 [ 402.154356][T10706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.154369][T10706] RIP: 0033:0x7fe14032de59 [ 402.154380][T10706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.154389][T10706] RSP: 002b:00007fe13e565028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 402.154401][T10706] RAX: ffffffffffffffda RBX: 00007fe1405b6090 RCX: 00007fe14032de59 [ 402.154409][T10706] RDX: 0000200000000b80 RSI: 0000200000000580 RDI: 0000000000000000 [ 402.154416][T10706] RBP: 00007fe13e565090 R08: 0000200000000100 R09: 0000000000000000 [ 402.154423][T10706] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000002 [ 402.154429][T10706] R13: 00007fe1405b6128 R14: 00007fe1405b6090 R15: 00007ffcdccf9038 [ 402.154445][T10706] [ 402.707699][ T5332] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 402.901777][ T5332] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 402.901805][ T5332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.901823][ T5332] usb 4-1: Product: syz [ 402.901837][ T5332] usb 4-1: Manufacturer: syz [ 402.901850][ T5332] usb 4-1: SerialNumber: syz [ 403.334914][ T5332] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 403.334975][ T5332] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 403.335983][ T5332] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 403.336034][ T5332] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 403.336947][ T5332] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 403.365370][ T5332] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 403.667674][ T9167] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 403.840861][ T9167] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 403.840900][ T9167] usb 5-1: can't read configurations, error -71 [ 403.982394][T10736] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 404.147997][T10736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.148554][T10736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.602599][T10737] overlayfs: statfs failed on './file0' [ 404.800916][T10747] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1548'. [ 404.897072][T10751] input: syz0 as /devices/virtual/input/input111 [ 404.927657][ T9167] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 405.077668][ T9167] usb 5-1: Using ep0 maxpacket: 8 [ 405.081007][ T9167] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 405.084289][ T9167] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 405.084317][ T9167] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.084337][ T9167] usb 5-1: Product: syz [ 405.084352][ T9167] usb 5-1: Manufacturer: syz [ 405.084366][ T9167] usb 5-1: SerialNumber: syz [ 405.137800][ T9167] usb 5-1: config 0 descriptor?? [ 405.144084][ T9167] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 405.144294][ T9167] usb 5-1: setting power ON [ 405.144360][ T9167] dvb-usb: bulk message failed: -22 (2/0) [ 405.208321][ T9167] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 405.209717][ T9167] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 405.209775][ T9167] usb 5-1: media controller created [ 405.251304][ T9167] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 405.300387][ T9167] usb 5-1: selecting invalid altsetting 6 [ 405.300412][ T9167] usb 5-1: digital interface selection failed (-22) [ 405.300428][ T9167] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 405.301979][ T9167] usb 5-1: setting power OFF [ 405.303429][ T9167] dvb-usb: bulk message failed: -22 (2/0) [ 405.303452][ T9167] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 405.303466][ T9167] (NULL device *): no alternate interface [ 405.369896][T10744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.372280][T10744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.449732][ T9167] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 405.464921][ T9167] usb 5-1: USB disconnect, device number 73 [ 405.498335][ T5332] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 405.538699][ T9136] usb 4-1: USB disconnect, device number 101 [ 405.648973][ T5332] usb 3-1: device descriptor read/64, error -71 [ 405.695765][T10759] do_umount: task=syz.3.1553[10759] propagate_mount_busy()!=0 [ 405.870376][T10762] do_umount: task=syz.3.1554[10762] propagate_mount_busy()!=0 [ 405.871614][T10761] FAULT_INJECTION: forcing a failure. [ 405.871614][T10761] name failslab, interval 1, probability 0, space 0, times 0 [ 405.871651][T10761] CPU: 1 UID: 0 PID: 10761 Comm: syz.3.1554 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 405.871679][T10761] Tainted: [L]=SOFTLOCKUP [ 405.871686][T10761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 405.871698][T10761] Call Trace: [ 405.871706][T10761] [ 405.871715][T10761] dump_stack_lvl+0xe8/0x150 [ 405.871747][T10761] should_fail_ex+0x467/0x600 [ 405.871778][T10761] should_failslab+0xa8/0x100 [ 405.871799][T10761] __kmalloc_node_track_caller_noprof+0xfb/0x7b0 [ 405.871830][T10761] ? vfs_parse_monolithic_sep+0x21b/0x360 [ 405.871856][T10761] ? vfs_parse_monolithic_sep+0x21b/0x360 [ 405.871887][T10761] kmemdup_nul+0x36/0xf0 [ 405.871952][T10761] vfs_parse_monolithic_sep+0x21b/0x360 [ 405.871978][T10761] ? __pfx_ovl_next_opt+0x10/0x10 [ 405.872005][T10761] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 405.872031][T10761] ? ovl_init_fs_context+0x49a/0x570 [ 405.872060][T10761] ? alloc_fs_context+0x9b7/0xd00 [ 405.872092][T10761] do_new_mount+0x2e2/0xdc0 [ 405.872112][T10761] ? cap_capable+0x123/0x460 [ 405.872137][T10761] ? __pfx_do_new_mount+0x10/0x10 [ 405.872159][T10761] ? ns_capable+0x89/0xe0 [ 405.872182][T10761] ? path_mount+0x647/0x1050 [ 405.872204][T10761] ? user_path_at+0xd4/0x160 [ 405.872229][T10761] __se_sys_mount+0x31d/0x420 [ 405.872255][T10761] ? __pfx___se_sys_mount+0x10/0x10 [ 405.872280][T10761] ? __x64_sys_mount+0x20/0xc0 [ 405.872301][T10761] do_syscall_64+0x17b/0x530 [ 405.872323][T10761] ? irqentry_exit+0x10f/0x8f0 [ 405.872342][T10761] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.872362][T10761] ? clear_bhb_loop+0x40/0x90 [ 405.872387][T10761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.872407][T10761] RIP: 0033:0x7fe14032de59 [ 405.872425][T10761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.872442][T10761] RSP: 002b:00007fe13e586028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 405.872464][T10761] RAX: ffffffffffffffda RBX: 00007fe1405b5fa0 RCX: 00007fe14032de59 [ 405.872479][T10761] RDX: 0000200000000b80 RSI: 0000200000000580 RDI: 0000000000000000 [ 405.872492][T10761] RBP: 00007fe13e586090 R08: 0000200000000100 R09: 0000000000000000 [ 405.872506][T10761] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000002 [ 405.872519][T10761] R13: 00007fe1405b6038 R14: 00007fe1405b5fa0 R15: 00007ffcdccf9038 [ 405.872556][T10761] [ 405.907638][ T5332] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 406.060168][ T5332] usb 3-1: device descriptor read/64, error -71 [ 406.178036][ T5332] usb usb3-port1: attempt power cycle [ 406.341898][T10772] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 406.517862][ T5332] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 406.540683][ T5332] usb 3-1: device descriptor read/8, error -71 [ 406.807767][ T5332] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 406.829585][ T5332] usb 3-1: device descriptor read/8, error -71 [ 406.887748][ T9167] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 406.948035][ T5332] usb usb3-port1: unable to enumerate USB device [ 407.037664][ T9167] usb 4-1: Using ep0 maxpacket: 16 [ 407.041337][ T9167] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 407.041361][ T9167] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 407.045032][ T9167] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 407.045058][ T9167] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.045078][ T9167] usb 4-1: Product: syz [ 407.045093][ T9167] usb 4-1: Manufacturer: syz [ 407.045200][ T9167] usb 4-1: SerialNumber: syz [ 407.122800][ T9167] usb 4-1: 0:2 : does not exist [ 407.328841][ T9167] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 407.385650][ T9167] usb 4-1: USB disconnect, device number 102 [ 407.418375][ T5985] udevd[5985]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 407.501833][T10783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.502509][T10783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.818406][ T9164] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 407.947666][ T9164] usb 5-1: device descriptor read/64, error -71 [ 408.187736][ T9164] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 408.318216][ T9164] usb 5-1: device descriptor read/64, error -71 [ 408.408362][T10807] do_umount: task=syz.2.1570[10807] propagate_mount_busy()!=0 [ 408.412494][T10805] overlayfs: statfs failed on './file0' [ 408.427980][ T9164] usb usb5-port1: attempt power cycle [ 408.714163][T10811] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 408.769216][ T9164] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 408.791630][ T9164] usb 5-1: device descriptor read/8, error -71 [ 408.805225][T10813] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1573'. [ 409.027629][ T9164] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 409.049373][ T9164] usb 5-1: device descriptor read/8, error -71 [ 409.157969][ T9164] usb usb5-port1: unable to enumerate USB device [ 409.187623][ T9167] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 409.344341][ T9167] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 409.344372][ T9167] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.344392][ T9167] usb 3-1: Product: syz [ 409.344406][ T9167] usb 3-1: Manufacturer: syz [ 409.344421][ T9167] usb 3-1: SerialNumber: syz [ 409.428049][ T9164] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 409.562508][ T9164] usb 4-1: device descriptor read/64, error -71 [ 409.793816][ T9167] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 409.793878][ T9167] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 409.798339][ T9164] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 409.927724][ T9164] usb 4-1: device descriptor read/64, error -71 [ 410.019342][T10818] input: syz0 as /devices/virtual/input/input113 [ 410.039217][ T9164] usb usb4-port1: attempt power cycle [ 410.185969][T10820] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1576'. [ 410.198242][ T9167] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 410.198296][ T9167] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 410.199513][ T9167] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 410.240081][ T9167] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 410.377699][ T9164] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 410.386785][T10828] do_umount: task=syz.1.1578[10828] propagate_mount_busy()!=0 [ 410.399242][ T9164] usb 4-1: device descriptor read/8, error -71 [ 410.584449][T10832] do_umount: task=syz.1.1579[10832] propagate_mount_busy()!=0 [ 410.586023][T10832] FAULT_INJECTION: forcing a failure. [ 410.586023][T10832] name failslab, interval 1, probability 0, space 0, times 0 [ 410.586055][T10832] CPU: 1 UID: 0 PID: 10832 Comm: syz.1.1579 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 410.586082][T10832] Tainted: [L]=SOFTLOCKUP [ 410.586089][T10832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 410.586103][T10832] Call Trace: [ 410.586111][T10832] [ 410.586119][T10832] dump_stack_lvl+0xe8/0x150 [ 410.586149][T10832] should_fail_ex+0x467/0x600 [ 410.586178][T10832] should_failslab+0xa8/0x100 [ 410.586199][T10832] __kmalloc_node_track_caller_noprof+0xfb/0x7b0 [ 410.586228][T10832] ? vfs_parse_monolithic_sep+0x21b/0x360 [ 410.586251][T10832] ? vfs_parse_monolithic_sep+0x21b/0x360 [ 410.586281][T10832] kmemdup_nul+0x36/0xf0 [ 410.586306][T10832] vfs_parse_monolithic_sep+0x21b/0x360 [ 410.586329][T10832] ? __pfx_ovl_next_opt+0x10/0x10 [ 410.586355][T10832] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 410.586380][T10832] ? ovl_init_fs_context+0x49a/0x570 [ 410.586409][T10832] ? alloc_fs_context+0x9b7/0xd00 [ 410.586441][T10832] do_new_mount+0x2e2/0xdc0 [ 410.586460][T10832] ? cap_capable+0x123/0x460 [ 410.586485][T10832] ? __pfx_do_new_mount+0x10/0x10 [ 410.586507][T10832] ? ns_capable+0x89/0xe0 [ 410.586530][T10832] ? path_mount+0x647/0x1050 [ 410.586552][T10832] ? user_path_at+0xd4/0x160 [ 410.586577][T10832] __se_sys_mount+0x31d/0x420 [ 410.586603][T10832] ? __pfx___se_sys_mount+0x10/0x10 [ 410.586635][T10832] ? __x64_sys_mount+0x20/0xc0 [ 410.586657][T10832] do_syscall_64+0x17b/0x530 [ 410.586677][T10832] ? irqentry_exit+0x10f/0x8f0 [ 410.586694][T10832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.586712][T10832] ? clear_bhb_loop+0x40/0x90 [ 410.586735][T10832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.586753][T10832] RIP: 0033:0x7f15a60ade59 [ 410.586772][T10832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.586787][T10832] RSP: 002b:00007f15a42e5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 410.586808][T10832] RAX: ffffffffffffffda RBX: 00007f15a6336090 RCX: 00007f15a60ade59 [ 410.586823][T10832] RDX: 0000200000000b80 RSI: 0000200000000580 RDI: 0000000000000000 [ 410.586836][T10832] RBP: 00007f15a42e5090 R08: 0000200000000100 R09: 0000000000000000 [ 410.586848][T10832] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000002 [ 410.586860][T10832] R13: 00007f15a6336128 R14: 00007f15a6336090 R15: 00007ffece20f778 [ 410.586890][T10832] [ 410.638215][ T9164] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 410.659697][ T9164] usb 4-1: device descriptor read/8, error -71 [ 410.769378][ T9164] usb usb4-port1: unable to enumerate USB device [ 411.229994][ T37] kauditd_printk_skb: 65 callbacks suppressed [ 411.230089][ T37] audit: type=1326 audit(1784086510.884:3924): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10847 comm="syz.1.1584" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f15a60ade59 code=0x0 [ 411.230285][ T37] audit: type=1326 audit(1784086510.884:3925): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10847 comm="syz.1.1584" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f15a60ade59 code=0x0 [ 412.035928][ T32] usb 3-1: USB disconnect, device number 111 [ 412.467695][ T10] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 412.680891][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 412.682058][ T10] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 412.684232][ T10] usb 4-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 412.684258][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.684278][ T10] usb 4-1: Product: syz [ 412.684291][ T10] usb 4-1: Manufacturer: syz [ 412.684306][ T10] usb 4-1: SerialNumber: syz [ 412.955763][ T10] usb 4-1: unit 0 not found! [ 413.153153][ T10] usb 4-1: USB disconnect, device number 107 [ 413.304488][ T5985] udevd[5985]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 413.416109][T10864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.416682][T10864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.612856][T10850] syz.3.1585 (10850) used greatest stack depth: 18528 bytes left [ 413.775295][T10875] do_umount: task=syz.2.1592[10875] propagate_mount_busy()!=0 [ 413.780782][T10873] overlayfs: missing 'lowerdir' [ 413.932721][T10877] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 414.097969][ T37] audit: type=1326 audit(1784086513.754:3926): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10844 comm="syz.4.1583" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a3e7de59 code=0x7fc00000 [ 414.258363][ T10] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 414.301274][T10888] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1597'. [ 414.361787][T10890] input: syz0 as /devices/virtual/input/input114 [ 414.417934][ T9136] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 414.425046][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 414.425074][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.425093][ T10] usb 4-1: Product: syz [ 414.425107][ T10] usb 4-1: Manufacturer: syz [ 414.425121][ T10] usb 4-1: SerialNumber: syz [ 414.546912][T10892] netlink: 'syz.4.1599': attribute type 1 has an invalid length. [ 414.546926][T10892] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1599'. [ 414.549569][ T9136] usb 3-1: device descriptor read/64, error -71 [ 414.798027][ T9136] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 414.878887][T10897] do_umount: task=syz.4.1600[10897] propagate_mount_busy()!=0 [ 414.893386][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 414.893445][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 414.938909][ T9136] usb 3-1: device descriptor read/64, error -71 [ 415.058123][ T9136] usb usb3-port1: attempt power cycle [ 415.093658][T10900] do_umount: task=syz.4.1601[10900] propagate_mount_busy()!=0 [ 415.094778][T10900] FAULT_INJECTION: forcing a failure. [ 415.094778][T10900] name failslab, interval 1, probability 0, space 0, times 0 [ 415.094801][T10900] CPU: 0 UID: 0 PID: 10900 Comm: syz.4.1601 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 415.094816][T10900] Tainted: [L]=SOFTLOCKUP [ 415.094820][T10900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 415.094826][T10900] Call Trace: [ 415.094831][T10900] [ 415.094836][T10900] dump_stack_lvl+0xe8/0x150 [ 415.094855][T10900] should_fail_ex+0x467/0x600 [ 415.094872][T10900] should_failslab+0xa8/0x100 [ 415.094883][T10900] ? do_getname_kernel+0x54/0x230 [ 415.094899][T10900] kmem_cache_alloc_noprof+0x9e/0x680 [ 415.094913][T10900] ? trace_kmalloc+0x2a/0xf0 [ 415.094926][T10900] ? do_getname_kernel+0x54/0x230 [ 415.094945][T10900] do_getname_kernel+0x54/0x230 [ 415.094959][T10900] ? kern_path+0x1b/0x150 [ 415.094970][T10900] kern_path+0x25/0x150 [ 415.094982][T10900] ovl_parse_param+0xb04/0xf40 [ 415.094998][T10900] ? __pfx_ovl_parse_param+0x10/0x10 [ 415.095014][T10900] ? static_key_count+0x41/0x70 [ 415.095064][T10900] vfs_parse_fs_param+0x1a9/0x420 [ 415.095092][T10900] vfs_parse_monolithic_sep+0x281/0x360 [ 415.095117][T10900] ? __pfx_ovl_next_opt+0x10/0x10 [ 415.095142][T10900] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 415.095175][T10900] ? alloc_fs_context+0x9b7/0xd00 [ 415.095215][T10900] do_new_mount+0x2e2/0xdc0 [ 415.095234][T10900] ? cap_capable+0x123/0x460 [ 415.095258][T10900] ? __pfx_do_new_mount+0x10/0x10 [ 415.095272][T10900] ? ns_capable+0x89/0xe0 [ 415.095285][T10900] ? path_mount+0x647/0x1050 [ 415.095296][T10900] ? user_path_at+0xd4/0x160 [ 415.095309][T10900] __se_sys_mount+0x31d/0x420 [ 415.095322][T10900] ? __pfx___se_sys_mount+0x10/0x10 [ 415.095334][T10900] ? __x64_sys_mount+0x20/0xc0 [ 415.095346][T10900] do_syscall_64+0x17b/0x530 [ 415.095357][T10900] ? irqentry_exit+0x10f/0x8f0 [ 415.095367][T10900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.095378][T10900] ? clear_bhb_loop+0x40/0x90 [ 415.095391][T10900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.095401][T10900] RIP: 0033:0x7f63a3e7de59 [ 415.095412][T10900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.095421][T10900] RSP: 002b:00007f63a20b5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 415.095433][T10900] RAX: ffffffffffffffda RBX: 00007f63a4106090 RCX: 00007f63a3e7de59 [ 415.095440][T10900] RDX: 0000200000000b80 RSI: 0000200000000580 RDI: 0000000000000000 [ 415.095447][T10900] RBP: 00007f63a20b5090 R08: 0000200000000100 R09: 0000000000000000 [ 415.095454][T10900] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000002 [ 415.095461][T10900] R13: 00007f63a4106128 R14: 00007f63a4106090 R15: 00007ffd42e8ebe8 [ 415.095476][T10900] [ 415.095818][T10900] overlayfs: failed to resolve './bus': -12 [ 415.301449][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 415.301503][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 415.302739][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 415.329537][ T10] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 415.417649][ T9136] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 415.438404][ T9136] usb 3-1: device descriptor read/8, error -71 [ 415.687612][ T9136] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 415.711740][ T9136] usb 3-1: device descriptor read/8, error -71 [ 415.818981][ T9136] usb usb3-port1: unable to enumerate USB device [ 416.773440][T10916] cgroup: fork rejected by pids controller in /syz1 [ 417.066691][ T32] usb 4-1: USB disconnect, device number 108 [ 417.193550][T10927] netlink: 'syz.3.1607': attribute type 2 has an invalid length. [ 417.736593][ T7765] bridge0: port 3(syz_tun) entered disabled state [ 417.895789][ T7765] syz_tun (unregistering): left allmulticast mode [ 417.895821][ T7765] syz_tun (unregistering): left promiscuous mode [ 417.904784][ T7765] bridge0: port 3(syz_tun) entered disabled state [ 417.978452][T10943] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 417.979249][T10943] do_umount: task=syz.3.1613[10943] propagate_mount_busy()!=0 [ 417.980268][T10943] overlayfs: statfs failed on './file0' [ 418.126034][T10947] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 418.161386][ T7765] raw-gadget.1 gadget.1: failed to queue disconnect event [ 418.220495][ T5332] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 418.410454][ T5332] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 418.410485][ T5332] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.410505][ T5332] usb 3-1: Product: syz [ 418.410517][ T5332] usb 3-1: Manufacturer: syz [ 418.410527][ T5332] usb 3-1: SerialNumber: syz [ 418.713013][ T37] audit: type=1326 audit(1784086518.364:3927): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10905 comm="syz.4.1603" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a3e7de59 code=0x7fc00000 [ 418.832103][ T5332] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 418.832163][ T5332] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 418.847718][ T32] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 418.997701][ T32] usb 4-1: device descriptor read/64, error -71 [ 419.085044][ T5602] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 419.142969][ T5602] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 419.161326][ T5602] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 419.200720][ T5602] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 419.201701][ T5602] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 419.279702][ T32] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 419.383882][ T5332] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 419.383931][ T5332] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 419.384702][ T5332] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 419.437804][ T32] usb 4-1: device descriptor read/64, error -71 [ 419.454656][ T5332] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 419.548064][ T32] usb usb4-port1: attempt power cycle [ 419.602456][ T5770] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.605375][T10966] FAULT_INJECTION: forcing a failure. [ 419.605375][T10966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.605410][T10966] CPU: 1 UID: 0 PID: 10966 Comm: syz.4.1620 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 419.605435][T10966] Tainted: [L]=SOFTLOCKUP [ 419.605443][T10966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 419.605454][T10966] Call Trace: [ 419.605462][T10966] [ 419.605470][T10966] dump_stack_lvl+0xe8/0x150 [ 419.605502][T10966] should_fail_ex+0x467/0x600 [ 419.605532][T10966] _copy_from_user+0x2d/0xb0 [ 419.605551][T10966] ___sys_sendmsg+0x1c6/0x360 [ 419.605580][T10966] ? __lock_acquire+0x6df/0x2e40 [ 419.605603][T10966] ? __pfx____sys_sendmsg+0x10/0x10 [ 419.605663][T10966] ? __fget_files+0x2a/0x420 [ 419.605682][T10966] ? __fget_files+0x3a8/0x420 [ 419.605711][T10966] __x64_sys_sendmsg+0x1b7/0x290 [ 419.605742][T10966] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 419.605798][T10966] do_syscall_64+0x17b/0x530 [ 419.605819][T10966] ? irqentry_exit+0x10f/0x8f0 [ 419.605837][T10966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.605857][T10966] ? clear_bhb_loop+0x40/0x90 [ 419.605879][T10966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.605898][T10966] RIP: 0033:0x7f63a3e7de59 [ 419.605916][T10966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.605933][T10966] RSP: 002b:00007f63a20d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.605954][T10966] RAX: ffffffffffffffda RBX: 00007f63a4105fa0 RCX: 00007f63a3e7de59 [ 419.605969][T10966] RDX: 0000000000000040 RSI: 0000200000000240 RDI: 0000000000000003 [ 419.605982][T10966] RBP: 00007f63a20d6090 R08: 0000000000000000 R09: 0000000000000000 [ 419.605994][T10966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.606006][T10966] R13: 00007f63a4106038 R14: 00007f63a4105fa0 R15: 00007ffd42e8ebe8 [ 419.606035][T10966] [ 419.847393][T10970] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1621'. [ 420.019022][ T32] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 420.043995][ T32] usb 4-1: device descriptor read/8, error -71 [ 420.277757][ T32] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 420.304070][ T32] usb 4-1: device descriptor read/8, error -71 [ 420.329687][T10981] program syz.4.1623 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 420.332888][ T5770] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.408043][ T32] usb usb4-port1: unable to enumerate USB device [ 420.607682][ T5332] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 420.633722][ T5770] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.767689][ T5332] usb 5-1: Using ep0 maxpacket: 32 [ 420.770757][ T5332] usb 5-1: config 8 has an invalid interface number: 97 but max is 0 [ 420.770782][ T5332] usb 5-1: config 8 has no interface number 0 [ 420.770829][ T5332] usb 5-1: config 8 interface 97 altsetting 9 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 420.770852][ T5332] usb 5-1: config 8 interface 97 altsetting 9 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 420.770867][ T5332] usb 5-1: config 8 interface 97 has no altsetting 0 [ 420.800748][ T5332] usb 5-1: New USB device found, idVendor=1199, idProduct=68ab, bcdDevice=10.61 [ 420.800777][ T5332] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.800796][ T5332] usb 5-1: Product: syz [ 420.800811][ T5332] usb 5-1: Manufacturer: syz [ 420.800824][ T5332] usb 5-1: SerialNumber: syz [ 421.022551][ T10] usb 3-1: USB disconnect, device number 116 [ 421.171793][T10986] input: syz0 as /devices/virtual/input/input115 [ 421.196792][ T5770] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.394714][T10991] overlay: Unknown parameter 'fowner' [ 421.417761][ T5614] Bluetooth: hci1: command tx timeout [ 421.569313][T10995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.591395][T10995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.679174][T10989] syzkaller0: entered allmulticast mode [ 422.033316][ T5332] hub 5-1:8.97: bad descriptor, ignoring hub [ 422.033354][ T5332] hub 5-1:8.97: probe with driver hub failed with error -5 [ 422.034364][ T5332] sierra 5-1:8.97: Sierra USB modem converter detected [ 422.053931][ T5332] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 422.059222][ T9167] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 422.083782][ T5332] usb 5-1: Sierra USB modem converter now attached to ttyUSB1 [ 422.118481][ T5332] usb 5-1: USB disconnect, device number 78 [ 422.172999][ T5332] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 422.193376][ T5332] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 422.195919][ T5332] sierra 5-1:8.97: device disconnected [ 422.217829][ T9167] usb 3-1: Using ep0 maxpacket: 16 [ 422.225367][ T9167] usb 3-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 422.225394][ T9167] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.225413][ T9167] usb 3-1: Product: syz [ 422.225426][ T9167] usb 3-1: Manufacturer: syz [ 422.225440][ T9167] usb 3-1: SerialNumber: syz [ 422.273646][ T9167] usb 3-1: config 0 descriptor?? [ 422.295297][ T9167] gspca_main: spca508-2.14.0 probing 041e:4018 [ 422.720050][T11010] do_umount: task=syz.4.1628[11010] propagate_mount_busy()!=0 [ 422.741566][T11010] FAULT_INJECTION: forcing a failure. [ 422.741566][T11010] name failslab, interval 1, probability 0, space 0, times 0 [ 422.741653][T11010] CPU: 1 UID: 0 PID: 11010 Comm: syz.4.1628 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 422.741681][T11010] Tainted: [L]=SOFTLOCKUP [ 422.741688][T11010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 422.741700][T11010] Call Trace: [ 422.741708][T11010] [ 422.741715][T11010] dump_stack_lvl+0xe8/0x150 [ 422.741746][T11010] should_fail_ex+0x467/0x600 [ 422.741779][T11010] should_failslab+0xa8/0x100 [ 422.741802][T11010] __kmalloc_node_track_caller_noprof+0xfb/0x7b0 [ 422.741832][T11010] ? ovl_do_parse_layer+0x39/0xc20 [ 422.741857][T11010] ? ovl_do_parse_layer+0x39/0xc20 [ 422.741886][T11010] kstrdup+0x42/0x100 [ 422.741910][T11010] ovl_do_parse_layer+0x39/0xc20 [ 422.741940][T11010] ? kfree+0x1c5/0x6c0 [ 422.741964][T11010] ? ovl_parse_param+0xb28/0xf40 [ 422.741994][T11010] ovl_parse_param+0xb58/0xf40 [ 422.742024][T11010] ? __pfx_ovl_parse_param+0x10/0x10 [ 422.742067][T11010] ? static_key_count+0x41/0x70 [ 422.742093][T11010] vfs_parse_fs_param+0x1a9/0x420 [ 422.742122][T11010] vfs_parse_monolithic_sep+0x281/0x360 [ 422.742148][T11010] ? __pfx_ovl_next_opt+0x10/0x10 [ 422.742174][T11010] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 422.742207][T11010] ? alloc_fs_context+0x9b7/0xd00 [ 422.742241][T11010] do_new_mount+0x2e2/0xdc0 [ 422.742259][T11010] ? cap_capable+0x123/0x460 [ 422.742285][T11010] ? __pfx_do_new_mount+0x10/0x10 [ 422.742307][T11010] ? ns_capable+0x89/0xe0 [ 422.742330][T11010] ? path_mount+0x647/0x1050 [ 422.742352][T11010] ? user_path_at+0xd4/0x160 [ 422.742378][T11010] __se_sys_mount+0x31d/0x420 [ 422.742404][T11010] ? __pfx___se_sys_mount+0x10/0x10 [ 422.742428][T11010] ? __x64_sys_mount+0x20/0xc0 [ 422.742451][T11010] do_syscall_64+0x17b/0x530 [ 422.742472][T11010] ? irqentry_exit+0x10f/0x8f0 [ 422.742491][T11010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.742511][T11010] ? clear_bhb_loop+0x40/0x90 [ 422.742535][T11010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.742555][T11010] RIP: 0033:0x7f63a3e7de59 [ 422.742573][T11010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.742590][T11010] RSP: 002b:00007f63a20b5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 422.742611][T11010] RAX: ffffffffffffffda RBX: 00007f63a4106090 RCX: 00007f63a3e7de59 [ 422.742626][T11010] RDX: 0000200000000b80 RSI: 0000200000000580 RDI: 0000000000000000 [ 422.742639][T11010] RBP: 00007f63a20b5090 R08: 0000200000000100 R09: 0000000000000000 [ 422.742653][T11010] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000002 [ 422.742664][T11010] R13: 00007f63a4106128 R14: 00007f63a4106090 R15: 00007ffd42e8ebe8 [ 422.742699][T11010] [ 422.848689][T11012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.849248][T11012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.997847][ T9167] gspca_spca508: reg_read err -110 [ 422.998301][ T9167] gspca_spca508: reg_read err -32 [ 423.010938][ T9167] gspca_spca508: reg_read err -32 [ 423.032638][ T9167] gspca_spca508: reg_read err -71 [ 423.057257][ T9167] gspca_spca508: reg write: error -71 [ 423.057344][ T9167] spca508 3-1:0.0: probe with driver spca508 failed with error -71 [ 423.097359][ T9167] usb 3-1: USB disconnect, device number 117 [ 423.194539][T10952] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.194773][T10952] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.195017][T10952] bridge_slave_0: entered allmulticast mode [ 423.199354][T10952] bridge_slave_0: entered promiscuous mode [ 423.244262][T10952] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.250244][T10952] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.250516][T10952] bridge_slave_1: entered allmulticast mode [ 423.253738][T10952] bridge_slave_1: entered promiscuous mode [ 423.495757][T10952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.499857][ T5614] Bluetooth: hci1: command tx timeout [ 423.639111][T10952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.747980][ T5770] bridge_slave_1: left allmulticast mode [ 423.748004][ T5770] bridge_slave_1: left promiscuous mode [ 423.748281][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.890558][ T5770] bridge_slave_0: left allmulticast mode [ 423.890593][ T5770] bridge_slave_0: left promiscuous mode [ 423.913047][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.937781][ T5332] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 423.996936][T11030] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 424.136148][ T5332] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 424.136179][ T5332] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.136199][ T5332] usb 3-1: Product: syz [ 424.136213][ T5332] usb 3-1: Manufacturer: syz [ 424.136228][ T5332] usb 3-1: SerialNumber: syz [ 424.585300][ T37] audit: type=1326 audit(1784086524.214:3928): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10996 comm="syz.3.1626" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14032de59 code=0x7fc00000 [ 424.585510][ T9167] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 424.586424][ T5332] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 424.586485][ T5332] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 424.717698][ T9167] usb 5-1: device descriptor read/64, error -71 [ 424.775664][T11035] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1636'. [ 424.977686][ T9167] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 425.055037][ T5332] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 425.055097][ T5332] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 425.055960][ T5332] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 425.091889][ T5332] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 425.107640][ T9167] usb 5-1: device descriptor read/64, error -71 [ 425.218214][ T9167] usb usb5-port1: attempt power cycle [ 425.348126][ T5770] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 425.374933][T11050] do_umount: task=syz.3.1638[11050] propagate_mount_busy()!=0 [ 425.381022][T11050] overlayfs: statfs failed on './file0' [ 425.430432][ T5770] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 425.473830][ T5770] bond0 (unregistering): Released all slaves [ 425.574604][ T9167] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 425.581017][ T5614] Bluetooth: hci1: command tx timeout [ 425.591279][ T9167] usb 5-1: device descriptor read/8, error -71 [ 425.624183][T10952] team0: Port device team_slave_0 added [ 425.629555][T10952] team0: Port device team_slave_1 added [ 425.712728][T10952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.712739][T10952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.712754][T10952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.716527][T10952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.716540][T10952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.716565][T10952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.857909][ T9167] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 425.880541][ T9167] usb 5-1: device descriptor read/8, error -71 [ 425.995674][ T9167] usb usb5-port1: unable to enumerate USB device [ 425.996325][T10952] hsr_slave_0: entered promiscuous mode [ 426.010833][T10952] hsr_slave_1: entered promiscuous mode [ 426.012728][T10952] debugfs: 'hsr0' already exists in 'hsr' [ 426.012750][T10952] Cannot create hsr debugfs directory [ 426.345829][T11059] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1639'. [ 426.743278][ T9136] usb 3-1: USB disconnect, device number 118 [ 427.150374][T11081] FAULT_INJECTION: forcing a failure. [ 427.150374][T11081] name failslab, interval 1, probability 0, space 0, times 0 [ 427.150405][T11081] CPU: 0 UID: 0 PID: 11081 Comm: syz.2.1642 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 427.150426][T11081] Tainted: [L]=SOFTLOCKUP [ 427.150432][T11081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 427.150441][T11081] Call Trace: [ 427.150447][T11081] [ 427.150455][T11081] dump_stack_lvl+0xe8/0x150 [ 427.150479][T11081] should_fail_ex+0x467/0x600 [ 427.150503][T11081] should_failslab+0xa8/0x100 [ 427.150520][T11081] kmem_cache_alloc_node_noprof+0xac/0x660 [ 427.150544][T11081] ? __alloc_skb+0x1d7/0x7a0 [ 427.150563][T11081] ? __alloc_skb+0x1d7/0x7a0 [ 427.150597][T11081] __alloc_skb+0x1d7/0x7a0 [ 427.150621][T11081] netlink_sendmsg+0x5d4/0xb40 [ 427.150654][T11081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 427.150677][T11081] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 427.150704][T11081] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 427.150728][T11081] ? arch_stack_walk+0xfb/0x150 [ 427.150753][T11081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 427.150775][T11081] sock_sendmsg_nosec+0x13a/0x180 [ 427.150795][T11081] ____sys_sendmsg+0x565/0x870 [ 427.150825][T11081] ? __pfx_____sys_sendmsg+0x10/0x10 [ 427.150858][T11081] ? import_iovec+0x73/0xa0 [ 427.150966][T11081] ___sys_sendmsg+0x2a5/0x360 [ 427.150992][T11081] ? __lock_acquire+0x6df/0x2e40 [ 427.151017][T11081] ? __pfx____sys_sendmsg+0x10/0x10 [ 427.151076][T11081] ? __fget_files+0x2a/0x420 [ 427.151094][T11081] ? __fget_files+0x3a8/0x420 [ 427.151121][T11081] __x64_sys_sendmsg+0x1b7/0x290 [ 427.151153][T11081] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 427.151199][T11081] do_syscall_64+0x17b/0x530 [ 427.151217][T11081] ? irqentry_exit+0x10f/0x8f0 [ 427.151233][T11081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.151244][T11081] ? clear_bhb_loop+0x40/0x90 [ 427.151257][T11081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.151268][T11081] RIP: 0033:0x7fd5a07ade59 [ 427.151278][T11081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.151287][T11081] RSP: 002b:00007fd59ea06028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 427.151300][T11081] RAX: ffffffffffffffda RBX: 00007fd5a0a35fa0 RCX: 00007fd5a07ade59 [ 427.151307][T11081] RDX: 0000000000000040 RSI: 0000200000000240 RDI: 0000000000000003 [ 427.151314][T11081] RBP: 00007fd59ea06090 R08: 0000000000000000 R09: 0000000000000000 [ 427.151321][T11081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.151327][T11081] R13: 00007fd5a0a36038 R14: 00007fd5a0a35fa0 R15: 00007ffd2aedbdc8 [ 427.151342][T11081] [ 427.545571][ T5260] 8021q: adding VLAN 0 to HW filter on device eth5 [ 427.627397][T11087] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1645'. [ 427.658132][ T5614] Bluetooth: hci1: command tx timeout [ 427.835557][T11091] input: syz0 as /devices/virtual/input/input116 [ 427.988329][ T9167] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 428.139749][ T9167] usb 5-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 428.139782][ T9167] usb 5-1: config 0 interface 0 has no altsetting 0 [ 428.139805][ T9167] usb 5-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 428.139831][ T9167] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.170854][ T9167] usb 5-1: config 0 descriptor?? [ 428.284330][T11105] do_umount: task=syz.2.1649[11105] propagate_mount_busy()!=0 [ 428.298349][ T10] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 428.487920][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 428.487950][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.487970][ T10] usb 4-1: Product: syz [ 428.487984][ T10] usb 4-1: Manufacturer: syz [ 428.487999][ T10] usb 4-1: SerialNumber: syz [ 428.705746][T11115] FAULT_INJECTION: forcing a failure. [ 428.705746][T11115] name failslab, interval 1, probability 0, space 0, times 0 [ 428.705849][T11115] CPU: 1 UID: 0 PID: 11115 Comm: syz.2.1650 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 428.705877][T11115] Tainted: [L]=SOFTLOCKUP [ 428.705884][T11115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 428.705896][T11115] Call Trace: [ 428.705904][T11115] [ 428.705920][T11115] dump_stack_lvl+0xe8/0x150 [ 428.705977][T11115] should_fail_ex+0x467/0x600 [ 428.706010][T11115] should_failslab+0xa8/0x100 [ 428.706031][T11115] __kmalloc_node_track_caller_noprof+0xfb/0x7b0 [ 428.706064][T11115] ? lockdep_hardirqs_on+0x7a/0x110 [ 428.706090][T11115] ? vfs_parse_monolithic_sep+0x21b/0x360 [ 428.706116][T11115] ? vfs_parse_monolithic_sep+0x21b/0x360 [ 428.706146][T11115] kmemdup_nul+0x36/0xf0 [ 428.706171][T11115] vfs_parse_monolithic_sep+0x21b/0x360 [ 428.706195][T11115] ? __pfx_ovl_next_opt+0x10/0x10 [ 428.706221][T11115] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 428.706253][T11115] ? alloc_fs_context+0x9b7/0xd00 [ 428.706286][T11115] do_new_mount+0x2e2/0xdc0 [ 428.706304][T11115] ? cap_capable+0x123/0x460 [ 428.706330][T11115] ? __pfx_do_new_mount+0x10/0x10 [ 428.706351][T11115] ? ns_capable+0x89/0xe0 [ 428.706374][T11115] ? path_mount+0x647/0x1050 [ 428.706396][T11115] ? user_path_at+0xd4/0x160 [ 428.706421][T11115] __se_sys_mount+0x31d/0x420 [ 428.706447][T11115] ? __pfx___se_sys_mount+0x10/0x10 [ 428.706471][T11115] ? __x64_sys_mount+0x20/0xc0 [ 428.706493][T11115] do_syscall_64+0x17b/0x530 [ 428.706513][T11115] ? irqentry_exit+0x10f/0x8f0 [ 428.706530][T11115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.706550][T11115] ? clear_bhb_loop+0x40/0x90 [ 428.706574][T11115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.706601][T11115] RIP: 0033:0x7fd5a07ade59 [ 428.706619][T11115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.706637][T11115] RSP: 002b:00007fd59e9e5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 428.706658][T11115] RAX: ffffffffffffffda RBX: 00007fd5a0a36090 RCX: 00007fd5a07ade59 [ 428.706671][T11115] RDX: 0000200000000b80 RSI: 0000200000000580 RDI: 0000000000000000 [ 428.706684][T11115] RBP: 00007fd59e9e5090 R08: 0000200000000100 R09: 0000000000000000 [ 428.706698][T11115] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000002 [ 428.706709][T11115] R13: 00007fd5a0a36128 R14: 00007fd5a0a36090 R15: 00007ffd2aedbdc8 [ 428.706740][T11115] [ 429.040122][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 429.040183][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 429.224416][T11119] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 429.449474][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 429.449528][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 429.450378][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 429.489945][ T10] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 429.939793][ T5260] 8021q: adding VLAN 0 to HW filter on device eth6 [ 430.099060][ T10] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 430.237673][ T10] usb 3-1: device descriptor read/64, error -71 [ 430.277630][ T5770] hsr_slave_0: left promiscuous mode [ 430.317660][ T5770] hsr_slave_1: left promiscuous mode [ 430.319382][ T5770] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.319409][ T5770] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.343051][ T5770] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.343076][ T5770] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.470416][ T5770] veth1_macvtap: left promiscuous mode [ 430.470867][ T5770] veth0_macvtap: left promiscuous mode [ 430.491480][ T5770] veth1_vlan: left promiscuous mode [ 430.491831][ T5770] veth0_vlan: left promiscuous mode [ 430.510340][ T10] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 430.551938][ T37] audit: type=1326 audit(1784086530.204:3929): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11085 comm="syz.4.1643" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a3e7de59 code=0x7fc00000 [ 430.605542][ T9167] usbhid 5-1:0.0: can't add hid device: -71 [ 430.605613][ T9167] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 430.658853][ T10] usb 3-1: device descriptor read/64, error -71 [ 430.666329][ T9167] usb 5-1: USB disconnect, device number 83 [ 430.768056][ T10] usb usb3-port1: attempt power cycle [ 431.086315][ T5332] usb 4-1: USB disconnect, device number 113 [ 431.145079][ T10] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 431.161222][ T10] usb 3-1: device descriptor read/8, error -71 [ 431.408942][ T10] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 431.429725][ T10] usb 3-1: device descriptor read/8, error -71 [ 431.539917][ T10] usb usb3-port1: unable to enumerate USB device [ 431.961476][ T5770] team0 (unregistering): Port device team_slave_1 removed [ 432.018286][ T5770] team0 (unregistering): Port device team_slave_0 removed [ 432.187644][ T5332] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 432.237287][ T9164] usb 4-1: new full-speed USB device number 114 using dummy_hcd [ 432.364671][ T5332] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 432.364702][ T5332] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.364722][ T5332] usb 5-1: Product: syz [ 432.364735][ T5332] usb 5-1: Manufacturer: syz [ 432.364750][ T5332] usb 5-1: SerialNumber: syz [ 432.428438][ T9164] usb 4-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 432.428471][ T9164] usb 4-1: config 0 interface 0 has no altsetting 0 [ 432.428504][ T9164] usb 4-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 432.428527][ T9164] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.495959][ T9164] usb 4-1: config 0 descriptor?? [ 432.840003][ T5332] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 432.840064][ T5332] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 433.502930][ T5332] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 433.502991][ T5332] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 433.534409][ T5332] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 433.603333][ T5332] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 434.147720][ T9167] usb 3-1: new full-speed USB device number 123 using dummy_hcd [ 434.301937][ T9167] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 434.302017][ T9167] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 434.302043][ T9167] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 434.302064][ T9167] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 434.318016][ T9167] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 434.318045][ T9167] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.318186][ T9167] usb 3-1: Product: syz [ 434.318201][ T9167] usb 3-1: Manufacturer: syz [ 434.318215][ T9167] usb 3-1: SerialNumber: syz [ 434.337629][ T9167] usb 3-1: config 0 descriptor?? [ 434.833287][ T5332] usb 3-1: USB disconnect, device number 123 [ 434.846371][ T37] audit: type=1326 audit(1784086534.494:3930): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11156 comm="syz.3.1660" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14032de59 code=0x7fc00000 [ 434.906702][ T9164] usbhid 4-1:0.0: can't add hid device: -71 [ 434.906813][ T9164] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 435.020549][ T9164] usb 4-1: USB disconnect, device number 114 [ 435.152895][ T32] usb 5-1: USB disconnect, device number 84 [ 435.155340][T11203] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1667'. [ 435.265073][T11207] input: syz0 as /devices/virtual/input/input117 [ 435.309211][T11209] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 435.513223][ T9164] usb 4-1: new full-speed USB device number 115 using dummy_hcd [ 435.675887][ T9164] usb 4-1: config 150 has an invalid interface number: 204 but max is 2 [ 435.675914][ T9164] usb 4-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 435.675935][ T9164] usb 4-1: config 150 has no interface number 0 [ 435.675974][ T9164] usb 4-1: config 150 interface 204 has no altsetting 0 [ 435.681462][ T9164] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 435.681488][ T9164] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.681507][ T9164] usb 4-1: Product: syz [ 435.681521][ T9164] usb 4-1: Manufacturer: syz [ 435.681535][ T9164] usb 4-1: SerialNumber: syz [ 435.951770][ T9164] xr_serial 4-1:150.204: skipping garbage [ 435.951827][ T9164] xr_serial 4-1:150.204: xr_serial converter detected [ 436.108403][ T199] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 436.257640][ T199] usb 3-1: device descriptor read/64, error -71 [ 436.484468][T10952] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 436.498289][ T199] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 436.629161][ T199] usb 3-1: device descriptor read/64, error -71 [ 436.669086][T10952] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 436.689985][T10952] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 436.766710][ T199] usb usb3-port1: attempt power cycle [ 436.866812][T10952] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 436.891429][T10952] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 436.931565][ T9164] usb 4-1: xr_serial converter now attached to ttyUSB0 [ 437.042497][T10952] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 437.054013][T10952] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 437.112089][T10952] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 437.137683][ T9165] usb 4-1: USB disconnect, device number 115 [ 437.138914][ T199] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 437.172004][ T9165] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 437.174265][ T9165] xr_serial 4-1:150.204: device disconnected [ 437.188058][ T199] usb 3-1: device descriptor read/8, error -71 [ 437.284539][T11234] comedi: No check for data length of config insn id 5008 is implemented [ 437.284557][T11234] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 437.286626][T11234] comedi: Assuming n=15 is correct [ 437.366539][T11234] netlink: 'syz.4.1673': attribute type 4 has an invalid length. [ 437.437637][ T199] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 437.467605][ T199] usb 3-1: device descriptor read/8, error -71 [ 437.510870][T10952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.556746][T10952] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.574345][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.574492][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.588025][ T199] usb usb3-port1: unable to enumerate USB device [ 437.604242][ T1449] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.604379][ T1449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.822286][T11244] FAULT_INJECTION: forcing a failure. [ 437.822286][T11244] name failslab, interval 1, probability 0, space 0, times 0 [ 437.822323][T11244] CPU: 1 UID: 0 PID: 11244 Comm: syz.3.1675 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 437.822351][T11244] Tainted: [L]=SOFTLOCKUP [ 437.822358][T11244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 437.822370][T11244] Call Trace: [ 437.822377][T11244] [ 437.822386][T11244] dump_stack_lvl+0xe8/0x150 [ 437.822418][T11244] should_fail_ex+0x467/0x600 [ 437.822449][T11244] should_failslab+0xa8/0x100 [ 437.822470][T11244] __kmalloc_node_track_caller_noprof+0xfb/0x7b0 [ 437.822499][T11244] ? vfs_parse_monolithic_sep+0x21b/0x360 [ 437.822525][T11244] ? ovl_parse_param_lowerdir+0x245/0xab0 [ 437.822550][T11244] ? ovl_parse_param_lowerdir+0x245/0xab0 [ 437.822583][T11244] kstrdup+0x42/0x100 [ 437.822605][T11244] ovl_parse_param_lowerdir+0x245/0xab0 [ 437.822639][T11244] ? __pfx_ovl_parse_param_lowerdir+0x10/0x10 [ 437.822676][T11244] ovl_parse_param+0x5f2/0xf40 [ 437.822706][T11244] ? rcu_is_watching+0x15/0xb0 [ 437.822730][T11244] ? __pfx_ovl_parse_param+0x10/0x10 [ 437.822762][T11244] ? static_key_count+0x41/0x70 [ 437.822788][T11244] vfs_parse_fs_param+0x1a9/0x420 [ 437.822816][T11244] vfs_parse_monolithic_sep+0x281/0x360 [ 437.822841][T11244] ? __pfx_ovl_next_opt+0x10/0x10 [ 437.822867][T11244] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 437.822900][T11244] ? alloc_fs_context+0x9b7/0xd00 [ 437.822933][T11244] do_new_mount+0x2e2/0xdc0 [ 437.822951][T11244] ? cap_capable+0x123/0x460 [ 437.822977][T11244] ? __pfx_do_new_mount+0x10/0x10 [ 437.822998][T11244] ? ns_capable+0x89/0xe0 [ 437.823021][T11244] ? path_mount+0x647/0x1050 [ 437.823044][T11244] ? user_path_at+0xd4/0x160 [ 437.823069][T11244] __se_sys_mount+0x31d/0x420 [ 437.823095][T11244] ? __pfx___se_sys_mount+0x10/0x10 [ 437.823126][T11244] ? __x64_sys_mount+0x20/0xc0 [ 437.823148][T11244] do_syscall_64+0x17b/0x530 [ 437.823169][T11244] ? irqentry_exit+0x10f/0x8f0 [ 437.823187][T11244] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.823207][T11244] ? clear_bhb_loop+0x40/0x90 [ 437.823231][T11244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.823251][T11244] RIP: 0033:0x7fe14032de59 [ 437.823269][T11244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.823287][T11244] RSP: 002b:00007fe13e586028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 437.823307][T11244] RAX: ffffffffffffffda RBX: 00007fe1405b5fa0 RCX: 00007fe14032de59 [ 437.823322][T11244] RDX: 0000200000000b80 RSI: 0000200000000580 RDI: 0000000000000000 [ 437.823336][T11244] RBP: 00007fe13e586090 R08: 0000200000000100 R09: 0000000000000000 [ 437.823349][T11244] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000002 [ 437.823361][T11244] R13: 00007fe1405b6038 R14: 00007fe1405b5fa0 R15: 00007ffcdccf9038 [ 437.823393][T11244] [ 437.862954][ T199] usb 5-1: new full-speed USB device number 85 using dummy_hcd [ 438.097025][ T199] usb 5-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 438.097060][ T199] usb 5-1: config 0 interface 0 has no altsetting 0 [ 438.097092][ T199] usb 5-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 438.097115][ T199] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.180956][ T199] usb 5-1: config 0 descriptor?? [ 438.652581][ T9165] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 438.814089][ T9165] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 438.814840][ T9165] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.814862][ T9165] usb 4-1: Product: syz [ 438.814876][ T9165] usb 4-1: Manufacturer: syz [ 438.814890][ T9165] usb 4-1: SerialNumber: syz [ 439.005512][T10952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.250414][ T9165] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 439.250474][ T9165] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 439.674393][T10952] veth0_vlan: entered promiscuous mode [ 439.863908][ T9165] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 439.863966][ T9165] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 439.864874][ T9165] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 439.903046][ T9165] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 439.935817][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.948150][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.001360][T10952] veth1_vlan: entered promiscuous mode [ 440.134818][T10952] veth0_macvtap: entered promiscuous mode [ 440.161378][T10952] veth1_macvtap: entered promiscuous mode [ 440.232757][T10952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.281089][T10952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.309777][ T41] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.309825][ T41] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.309889][ T41] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.309924][ T41] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.500971][ T37] audit: type=1326 audit(1784086540.154:3931): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11240 comm="syz.4.1674" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a3e7de59 code=0x7fc00000 [ 440.620522][ T199] usbhid 5-1:0.0: can't add hid device: -71 [ 440.620640][ T199] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 440.662417][ T199] usb 5-1: USB disconnect, device number 85 [ 441.588132][ T10] usb 4-1: USB disconnect, device number 116 [ 441.826464][T11286] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 441.931995][T11288] FAULT_INJECTION: forcing a failure. [ 441.931995][T11288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.932031][T11288] CPU: 0 UID: 0 PID: 11288 Comm: syz.4.1687 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 441.932059][T11288] Tainted: [L]=SOFTLOCKUP [ 441.932067][T11288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 441.932078][T11288] Call Trace: [ 441.932086][T11288] [ 441.932095][T11288] dump_stack_lvl+0xe8/0x150 [ 441.932124][T11288] should_fail_ex+0x467/0x600 [ 441.932154][T11288] _copy_from_iter+0x1d3/0x1660 [ 441.932187][T11288] ? trace_kmem_cache_alloc+0x29/0xe0 [ 441.932226][T11288] ? __pfx__copy_from_iter+0x10/0x10 [ 441.932245][T11288] ? __alloc_skb+0x276/0x7a0 [ 441.932262][T11288] ? __alloc_skb+0x276/0x7a0 [ 441.932283][T11288] ? netlink_sendmsg+0x650/0xb40 [ 441.932307][T11288] ? skb_put+0x112/0x210 [ 441.932327][T11288] netlink_sendmsg+0x6c0/0xb40 [ 441.932354][T11288] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.932376][T11288] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 441.932400][T11288] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 441.932423][T11288] ? arch_stack_walk+0xfb/0x150 [ 441.932448][T11288] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.932470][T11288] sock_sendmsg_nosec+0x13a/0x180 [ 441.932490][T11288] ____sys_sendmsg+0x565/0x870 [ 441.932521][T11288] ? __pfx_____sys_sendmsg+0x10/0x10 [ 441.932554][T11288] ? import_iovec+0x73/0xa0 [ 441.932584][T11288] ___sys_sendmsg+0x2a5/0x360 [ 441.932604][T11288] ? __lock_acquire+0x6df/0x2e40 [ 441.932621][T11288] ? __pfx____sys_sendmsg+0x10/0x10 [ 441.932665][T11288] ? __fget_files+0x2a/0x420 [ 441.932680][T11288] ? __fget_files+0x3a8/0x420 [ 441.932702][T11288] __x64_sys_sendmsg+0x1b7/0x290 [ 441.932727][T11288] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 441.932765][T11288] do_syscall_64+0x17b/0x530 [ 441.932782][T11288] ? irqentry_exit+0x10f/0x8f0 [ 441.932797][T11288] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.932812][T11288] ? clear_bhb_loop+0x40/0x90 [ 441.932832][T11288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.932848][T11288] RIP: 0033:0x7f63a3e7de59 [ 441.932863][T11288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.932877][T11288] RSP: 002b:00007f63a20d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 441.932894][T11288] RAX: ffffffffffffffda RBX: 00007f63a4105fa0 RCX: 00007f63a3e7de59 [ 441.932906][T11288] RDX: 0000000000000040 RSI: 0000200000000240 RDI: 0000000000000003 [ 441.932917][T11288] RBP: 00007f63a20d6090 R08: 0000000000000000 R09: 0000000000000000 [ 441.932926][T11288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.932936][T11288] R13: 00007f63a4106038 R14: 00007f63a4105fa0 R15: 00007ffd42e8ebe8 [ 441.932962][T11288] [ 441.967311][ T5770] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.967330][ T5770] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.422712][T11292] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1688'. [ 442.426702][ T5771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.426721][ T5771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.802429][T11300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1617'. [ 442.877655][ T9167] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 443.028426][ T9167] usb 4-1: Using ep0 maxpacket: 16 [ 443.035736][ T9167] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 443.035762][ T9167] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 443.057127][ T10] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 443.067947][ T9167] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 443.067977][ T9167] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.067999][ T9167] usb 4-1: Product: syz [ 443.068014][ T9167] usb 4-1: Manufacturer: syz [ 443.068032][ T9167] usb 4-1: SerialNumber: syz [ 443.165769][ T9167] usb 4-1: 0:2 : does not exist [ 443.219999][ T10] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 443.220034][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 443.220066][ T10] usb 3-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 443.220089][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.221751][T11303] input: syz0 as /devices/virtual/input/input118 [ 443.286749][ T10] usb 3-1: config 0 descriptor?? [ 443.390762][ T9167] usb 4-1: USB disconnect, device number 117 [ 443.570848][ T5985] udevd[5985]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 443.650533][T11306] do_umount: task=syz.1.1693[11306] propagate_mount_busy()!=0 [ 444.097861][ T9165] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 444.140578][T11315] do_umount: task=syz.3.1696[11315] propagate_mount_busy()!=0 [ 444.141891][T11315] FAULT_INJECTION: forcing a failure. [ 444.141891][T11315] name failslab, interval 1, probability 0, space 0, times 0 [ 444.141924][T11315] CPU: 1 UID: 0 PID: 11315 Comm: syz.3.1696 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 444.141951][T11315] Tainted: [L]=SOFTLOCKUP [ 444.141959][T11315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 444.141968][T11315] Call Trace: [ 444.141973][T11315] [ 444.141978][T11315] dump_stack_lvl+0xe8/0x150 [ 444.142002][T11315] should_fail_ex+0x467/0x600 [ 444.142033][T11315] should_failslab+0xa8/0x100 [ 444.142055][T11315] __kmalloc_node_track_caller_noprof+0xfb/0x7b0 [ 444.142086][T11315] ? ovl_parse_param_lowerdir+0x271/0xab0 [ 444.142114][T11315] ? ovl_parse_param_lowerdir+0x271/0xab0 [ 444.142131][T11315] kstrdup+0x42/0x100 [ 444.142143][T11315] ovl_parse_param_lowerdir+0x271/0xab0 [ 444.142161][T11315] ? __pfx_ovl_parse_param_lowerdir+0x10/0x10 [ 444.142196][T11315] ovl_parse_param+0x5f2/0xf40 [ 444.142223][T11315] ? rcu_is_watching+0x15/0xb0 [ 444.142247][T11315] ? __pfx_ovl_parse_param+0x10/0x10 [ 444.142280][T11315] ? static_key_count+0x41/0x70 [ 444.142295][T11315] vfs_parse_fs_param+0x1a9/0x420 [ 444.142309][T11315] vfs_parse_monolithic_sep+0x281/0x360 [ 444.142322][T11315] ? __pfx_ovl_next_opt+0x10/0x10 [ 444.142341][T11315] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 444.142373][T11315] ? alloc_fs_context+0x9b7/0xd00 [ 444.142407][T11315] do_new_mount+0x2e2/0xdc0 [ 444.142425][T11315] ? cap_capable+0x123/0x460 [ 444.142449][T11315] ? __pfx_do_new_mount+0x10/0x10 [ 444.142460][T11315] ? ns_capable+0x89/0xe0 [ 444.142472][T11315] ? path_mount+0x647/0x1050 [ 444.142483][T11315] ? user_path_at+0xd4/0x160 [ 444.142497][T11315] __se_sys_mount+0x31d/0x420 [ 444.142521][T11315] ? __pfx___se_sys_mount+0x10/0x10 [ 444.142546][T11315] ? __x64_sys_mount+0x20/0xc0 [ 444.142569][T11315] do_syscall_64+0x17b/0x530 [ 444.142590][T11315] ? irqentry_exit+0x10f/0x8f0 [ 444.142615][T11315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.142626][T11315] ? clear_bhb_loop+0x40/0x90 [ 444.142640][T11315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.142659][T11315] RIP: 0033:0x7fe14032de59 [ 444.142678][T11315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 444.142695][T11315] RSP: 002b:00007fe13e565028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 444.142716][T11315] RAX: ffffffffffffffda RBX: 00007fe1405b6090 RCX: 00007fe14032de59 [ 444.142731][T11315] RDX: 0000200000000b80 RSI: 0000200000000580 RDI: 0000000000000000 [ 444.142744][T11315] RBP: 00007fe13e565090 R08: 0000200000000100 R09: 0000000000000000 [ 444.142758][T11315] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000002 [ 444.142770][T11315] R13: 00007fe1405b6128 R14: 00007fe1405b6090 R15: 00007ffcdccf9038 [ 444.142795][T11315] [ 444.454299][ T9165] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 444.454329][ T9165] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.454349][ T9165] usb 2-1: Product: syz [ 444.454364][ T9165] usb 2-1: Manufacturer: syz [ 444.454378][ T9165] usb 2-1: SerialNumber: syz [ 444.897267][ T9165] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 444.897329][ T9165] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 445.033891][T11328] tmpfs: Bad value for 'mpol' [ 445.071721][T11328] fuse: Bad value for 'user_id' [ 445.071741][T11328] fuse: Bad value for 'user_id' [ 445.537632][ T9165] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 445.537689][ T9165] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 445.538661][ T9165] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 445.593443][ T9165] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 445.644048][ T37] audit: type=1326 audit(1784086545.294:3932): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11296 comm="syz.2.1691" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a07ade59 code=0x7fc00000 [ 445.728186][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 445.728301][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 445.758021][ T10] usb 3-1: USB disconnect, device number 2 [ 445.844753][T11336] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1706'. [ 445.913680][T11339] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 445.993971][T11342] FAULT_INJECTION: forcing a failure. [ 445.993971][T11342] name failslab, interval 1, probability 0, space 0, times 0 [ 445.994008][T11342] CPU: 0 UID: 0 PID: 11342 Comm: syz.2.1707 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 445.994035][T11342] Tainted: [L]=SOFTLOCKUP [ 445.994042][T11342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 445.994054][T11342] Call Trace: [ 445.994062][T11342] [ 445.994072][T11342] dump_stack_lvl+0xe8/0x150 [ 445.994100][T11342] should_fail_ex+0x467/0x600 [ 445.994128][T11342] should_failslab+0xa8/0x100 [ 445.994151][T11342] ? skb_clone+0x212/0x3a0 [ 445.994180][T11342] kmem_cache_alloc_noprof+0x9e/0x680 [ 445.994208][T11342] ? skb_clone+0x212/0x3a0 [ 445.994243][T11342] skb_clone+0x212/0x3a0 [ 445.994276][T11342] __netlink_deliver_tap+0x410/0x880 [ 445.994318][T11342] ? netlink_deliver_tap+0x2e/0x1b0 [ 445.994350][T11342] netlink_deliver_tap+0x19c/0x1b0 [ 445.994381][T11342] netlink_unicast+0x7b8/0x990 [ 445.994419][T11342] netlink_sendmsg+0x813/0xb40 [ 445.994458][T11342] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.994490][T11342] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 445.994525][T11342] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 445.994555][T11342] ? arch_stack_walk+0xfb/0x150 [ 445.994588][T11342] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.994617][T11342] sock_sendmsg_nosec+0x13a/0x180 [ 445.994643][T11342] ____sys_sendmsg+0x565/0x870 [ 445.994681][T11342] ? __pfx_____sys_sendmsg+0x10/0x10 [ 445.994719][T11342] ? import_iovec+0x73/0xa0 [ 445.994754][T11342] ___sys_sendmsg+0x2a5/0x360 [ 445.994781][T11342] ? __lock_acquire+0x6df/0x2e40 [ 445.994803][T11342] ? __pfx____sys_sendmsg+0x10/0x10 [ 445.994872][T11342] ? __fget_files+0x2a/0x420 [ 445.994893][T11342] ? __fget_files+0x3a8/0x420 [ 445.994924][T11342] __x64_sys_sendmsg+0x1b7/0x290 [ 445.994956][T11342] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 445.995005][T11342] do_syscall_64+0x17b/0x530 [ 445.995028][T11342] ? irqentry_exit+0x10f/0x8f0 [ 445.995047][T11342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.995068][T11342] ? clear_bhb_loop+0x40/0x90 [ 445.995093][T11342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.995113][T11342] RIP: 0033:0x7fd5a07ade59 [ 445.995132][T11342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.995150][T11342] RSP: 002b:00007fd59ea06028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 445.995171][T11342] RAX: ffffffffffffffda RBX: 00007fd5a0a35fa0 RCX: 00007fd5a07ade59 [ 445.995186][T11342] RDX: 0000000000000040 RSI: 0000200000000240 RDI: 0000000000000003 [ 445.995199][T11342] RBP: 00007fd59ea06090 R08: 0000000000000000 R09: 0000000000000000 [ 445.995211][T11342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.995224][T11342] R13: 00007fd5a0a36038 R14: 00007fd5a0a35fa0 R15: 00007ffd2aedbdc8 [ 445.995256][T11342] [ 446.373342][T11345] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1708'. [ 446.497726][ T9165] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 446.502843][T11351] input: syz0 as /devices/virtual/input/input119 [ 446.658208][ T9165] usb 5-1: Using ep0 maxpacket: 16 [ 446.660286][ T9165] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.660363][ T9165] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 446.663735][ T9165] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 446.663763][ T9165] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.663780][ T9165] usb 5-1: Product: syz [ 446.663790][ T9165] usb 5-1: Manufacturer: syz [ 446.663798][ T9165] usb 5-1: SerialNumber: syz [ 446.667811][ T10] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 446.705457][ T9165] usb 5-1: 0:2 : does not exist [ 446.817815][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 446.820705][ T10] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 446.820734][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.827410][ T10] usb 4-1: config 0 descriptor?? [ 446.871156][ T10] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 446.882428][ T9165] usb 2-1: USB disconnect, device number 50 [ 446.968085][ T9167] usb 5-1: USB disconnect, device number 86 [ 446.969714][ T32] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 447.038678][T11357] do_umount: task=syz.1.1713[11357] propagate_mount_busy()!=0 [ 447.106683][T11347] sg_write: data in/out 443356/194 bytes for SCSI command 0x0-- guessing data in; [ 447.106683][T11347] program syz.3.1709 not setting count and/or reply_len properly [ 447.130496][ T32] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 447.130522][ T32] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.130542][ T32] usb 3-1: config 0 has no interface number 0 [ 447.130586][ T32] usb 3-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 447.130627][ T32] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 447.130649][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.137054][ T32] usb 3-1: config 0 descriptor?? [ 447.176522][ T32] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 447.368786][ T10] gspca_nw80x: reg_r err -71 [ 447.368972][ T10] nw80x 4-1:0.0: probe with driver nw80x failed with error -71 [ 447.385862][ T10] usb 4-1: USB disconnect, device number 118 [ 447.647690][ T5332] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 447.800186][ T5332] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 447.800217][ T5332] usb 2-1: config 0 interface 0 has no altsetting 0 [ 447.800244][ T5332] usb 2-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 447.800263][ T5332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.806075][ T5332] usb 2-1: config 0 descriptor?? [ 447.891198][T11367] do_umount: task=syz.4.1715[11367] propagate_mount_busy()!=0 [ 447.893170][T11366] FAULT_INJECTION: forcing a failure. [ 447.893170][T11366] name failslab, interval 1, probability 0, space 0, times 0 [ 447.893204][T11366] CPU: 0 UID: 0 PID: 11366 Comm: syz.4.1715 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 447.893235][T11366] Tainted: [L]=SOFTLOCKUP [ 447.893243][T11366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 447.893255][T11366] Call Trace: [ 447.893264][T11366] [ 447.893272][T11366] dump_stack_lvl+0xe8/0x150 [ 447.893305][T11366] should_fail_ex+0x467/0x600 [ 447.893336][T11366] should_failslab+0xa8/0x100 [ 447.893358][T11366] __kmalloc_node_track_caller_noprof+0xfb/0x7b0 [ 447.893388][T11366] ? ovl_parse_param_lowerdir+0x537/0xab0 [ 447.893415][T11366] ? ovl_parse_param_lowerdir+0x537/0xab0 [ 447.893445][T11366] kstrdup+0x42/0x100 [ 447.893467][T11366] ovl_parse_param_lowerdir+0x537/0xab0 [ 447.893501][T11366] ? __pfx_ovl_parse_param_lowerdir+0x10/0x10 [ 447.893538][T11366] ovl_parse_param+0x5f2/0xf40 [ 447.893566][T11366] ? rcu_is_watching+0x15/0xb0 [ 447.893590][T11366] ? __pfx_ovl_parse_param+0x10/0x10 [ 447.893623][T11366] ? static_key_count+0x41/0x70 [ 447.893648][T11366] vfs_parse_fs_param+0x1a9/0x420 [ 447.893684][T11366] vfs_parse_monolithic_sep+0x281/0x360 [ 447.893711][T11366] ? __pfx_ovl_next_opt+0x10/0x10 [ 447.893737][T11366] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 447.893770][T11366] ? alloc_fs_context+0x9b7/0xd00 [ 447.893802][T11366] do_new_mount+0x2e2/0xdc0 [ 447.893821][T11366] ? cap_capable+0x123/0x460 [ 447.893846][T11366] ? __pfx_do_new_mount+0x10/0x10 [ 447.893862][T11366] ? ns_capable+0x89/0xe0 [ 447.893880][T11366] ? path_mount+0x647/0x1050 [ 447.893896][T11366] ? user_path_at+0xd4/0x160 [ 447.893913][T11366] __se_sys_mount+0x31d/0x420 [ 447.893932][T11366] ? __pfx___se_sys_mount+0x10/0x10 [ 447.893950][T11366] ? __x64_sys_mount+0x20/0xc0 [ 447.893966][T11366] do_syscall_64+0x17b/0x530 [ 447.893982][T11366] ? irqentry_exit+0x10f/0x8f0 [ 447.893995][T11366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.894011][T11366] ? clear_bhb_loop+0x40/0x90 [ 447.894029][T11366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.894044][T11366] RIP: 0033:0x7f63a3e7de59 [ 447.894061][T11366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.894075][T11366] RSP: 002b:00007f63a20d6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 447.894092][T11366] RAX: ffffffffffffffda RBX: 00007f63a4105fa0 RCX: 00007f63a3e7de59 [ 447.894103][T11366] RDX: 0000200000000b80 RSI: 0000200000000580 RDI: 0000000000000000 [ 447.894114][T11366] RBP: 00007f63a20d6090 R08: 0000200000000100 R09: 0000000000000000 [ 447.894124][T11366] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000002 [ 447.894134][T11366] R13: 00007f63a4106038 R14: 00007f63a4105fa0 R15: 00007ffd42e8ebe8 [ 447.894159][T11366] [ 448.288771][ T5771] usb 3-1: Failed to submit usb control message: -110 [ 448.288808][ T5771] usb 3-1: unable to send the bmi data to the device: -110 [ 448.288907][ T5771] usb 3-1: unable to get target info from device [ 448.288941][ T5771] usb 3-1: could not get target info (-110) [ 448.289121][ T5771] usb 3-1: could not probe fw (-110) [ 448.438599][T11370] fuse: Bad value for 'user_id' [ 448.438613][T11370] fuse: Bad value for 'user_id' [ 449.561997][ T9164] usb 3-1: USB disconnect, device number 3 [ 449.637865][ T9167] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 449.757688][ T32] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 449.816850][ T9167] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 449.816880][ T9167] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.816900][ T9167] usb 4-1: Product: syz [ 449.816913][ T9167] usb 4-1: Manufacturer: syz [ 449.816927][ T9167] usb 4-1: SerialNumber: syz [ 449.917741][ T32] usb 5-1: device descriptor read/64, error -71 [ 450.157679][ T32] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 450.233263][ T9167] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 450.233710][ T9167] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 450.287717][ T32] usb 5-1: device descriptor read/64, error -71 [ 450.295236][ T37] audit: type=1326 audit(1784086549.944:3933): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11362 comm="syz.1.1714" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe253de59 code=0x7fc00000 [ 450.337051][ T5332] usbhid 2-1:0.0: can't add hid device: -71 [ 450.337170][ T5332] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 450.362934][ T5332] usb 2-1: USB disconnect, device number 51 [ 450.408058][ T32] usb usb5-port1: attempt power cycle [ 450.552902][T11389] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 450.768321][ T32] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 450.800237][ T32] usb 5-1: device descriptor read/8, error -71 [ 450.846537][ T9167] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 450.846584][ T9167] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 450.850976][ T9167] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 450.887737][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 450.907286][ T9167] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 451.039984][ T32] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 451.057713][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 451.060073][ T32] usb 5-1: device descriptor read/8, error -71 [ 451.060696][ T10] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 451.060720][ T10] usb 3-1: config 179 has no interface number 0 [ 451.060775][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 451.060789][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 451.060804][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 451.060817][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 451.060830][ T10] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 451.060853][ T10] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 451.060865][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.065458][T11391] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 451.168425][ T32] usb usb5-port1: unable to enumerate USB device [ 451.217667][ T9167] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 451.367603][ T9167] usb 2-1: Using ep0 maxpacket: 16 [ 451.370262][ T9167] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 451.370285][ T9167] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 451.373320][ T9167] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 451.373347][ T9167] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.373366][ T9167] usb 2-1: Product: syz [ 451.373381][ T9167] usb 2-1: Manufacturer: syz [ 451.373395][ T9167] usb 2-1: SerialNumber: syz [ 451.450206][ T9167] usb 2-1: 0:2 : does not exist [ 451.477534][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 451.477611][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 451.484301][ T10] usb 3-1: USB disconnect, device number 4 [ 451.643113][ T5332] usb 2-1: USB disconnect, device number 52 [ 452.343007][T11400] FAULT_INJECTION: forcing a failure. [ 452.343007][T11400] name failslab, interval 1, probability 0, space 0, times 0 [ 452.343043][T11400] CPU: 1 UID: 0 PID: 11400 Comm: syz.1.1728 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 452.343070][T11400] Tainted: [L]=SOFTLOCKUP [ 452.343078][T11400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 452.343091][T11400] Call Trace: [ 452.343099][T11400] [ 452.343110][T11400] dump_stack_lvl+0xe8/0x150 [ 452.343139][T11400] should_fail_ex+0x467/0x600 [ 452.343170][T11400] should_failslab+0xa8/0x100 [ 452.343192][T11400] __kmalloc_noprof+0xfb/0x790 [ 452.343221][T11400] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 452.343246][T11400] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 452.343279][T11400] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 452.343312][T11400] genl_start+0x180/0x6d0 [ 452.343350][T11400] __netlink_dump_start+0x442/0x7b0 [ 452.343387][T11400] genl_family_rcv_msg_dumpit+0x213/0x310 [ 452.343416][T11400] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 452.343439][T11400] ? genl_get_cmd+0x4d6/0x960 [ 452.343467][T11400] ? rcu_is_watching+0x15/0xb0 [ 452.343489][T11400] ? __pfx_genl_start+0x10/0x10 [ 452.343510][T11400] ? __pfx_genl_dumpit+0x10/0x10 [ 452.343532][T11400] ? __pfx_genl_done+0x10/0x10 [ 452.343559][T11400] ? bpf_lsm_capable+0x9/0x20 [ 452.343619][T11400] ? security_capable+0x74/0x280 [ 452.343653][T11400] genl_rcv_msg+0x5e1/0x7a0 [ 452.343691][T11400] ? __pfx_genl_rcv_msg+0x10/0x10 [ 452.343713][T11400] ? ref_tracker_free+0x668/0x820 [ 452.343740][T11400] ? __pfx_devlink_nl_health_reporter_dump_get_dumpit+0x10/0x10 [ 452.343830][T11400] ? ____sys_sendmsg+0x565/0x870 [ 452.343857][T11400] ? ___sys_sendmsg+0x2a5/0x360 [ 452.343883][T11400] ? __x64_sys_sendmsg+0x1b7/0x290 [ 452.343910][T11400] ? do_syscall_64+0x17b/0x530 [ 452.343930][T11400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.343960][T11400] netlink_rcv_skb+0x226/0x4a0 [ 452.343992][T11400] ? __pfx_genl_rcv_msg+0x10/0x10 [ 452.344016][T11400] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 452.344055][T11400] ? netlink_deliver_tap+0x2e/0x1b0 [ 452.344083][T11400] ? netlink_deliver_tap+0x2e/0x1b0 [ 452.344117][T11400] genl_rcv+0x28/0x40 [ 452.344138][T11400] netlink_unicast+0x7f5/0x990 [ 452.344178][T11400] netlink_sendmsg+0x813/0xb40 [ 452.344218][T11400] ? __pfx_netlink_sendmsg+0x10/0x10 [ 452.344250][T11400] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 452.344282][T11400] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 452.344311][T11400] ? arch_stack_walk+0xfb/0x150 [ 452.344351][T11400] ? __pfx_netlink_sendmsg+0x10/0x10 [ 452.344380][T11400] sock_sendmsg_nosec+0x13a/0x180 [ 452.344407][T11400] ____sys_sendmsg+0x565/0x870 [ 452.344445][T11400] ? __pfx_____sys_sendmsg+0x10/0x10 [ 452.344485][T11400] ? import_iovec+0x73/0xa0 [ 452.344519][T11400] ___sys_sendmsg+0x2a5/0x360 [ 452.344548][T11400] ? __lock_acquire+0x6df/0x2e40 [ 452.344572][T11400] ? __pfx____sys_sendmsg+0x10/0x10 [ 452.344639][T11400] ? __fget_files+0x2a/0x420 [ 452.344658][T11400] ? __fget_files+0x3a8/0x420 [ 452.344689][T11400] __x64_sys_sendmsg+0x1b7/0x290 [ 452.344722][T11400] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 452.344773][T11400] do_syscall_64+0x17b/0x530 [ 452.344793][T11400] ? irqentry_exit+0x10f/0x8f0 [ 452.344812][T11400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.344833][T11400] ? clear_bhb_loop+0x40/0x90 [ 452.344857][T11400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.344877][T11400] RIP: 0033:0x7f6fe253de59 [ 452.344896][T11400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.344913][T11400] RSP: 002b:00007f6fe0796028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 452.344934][T11400] RAX: ffffffffffffffda RBX: 00007f6fe27c5fa0 RCX: 00007f6fe253de59 [ 452.344949][T11400] RDX: 0000000000000040 RSI: 0000200000000240 RDI: 0000000000000003 [ 452.344962][T11400] RBP: 00007f6fe0796090 R08: 0000000000000000 R09: 0000000000000000 [ 452.344975][T11400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.344988][T11400] R13: 00007f6fe27c6038 R14: 00007f6fe27c5fa0 R15: 00007ffc1533e628 [ 452.345022][T11400] [ 452.424236][T11402] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1730'. [ 452.788444][ T5332] usb 4-1: USB disconnect, device number 119 [ 452.836072][T11413] input: syz0 as /devices/virtual/input/input120 [ 452.995475][T11420] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 453.004221][ T32] usb 5-1: new full-speed USB device number 91 using dummy_hcd [ 453.152255][ T32] usb 5-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 453.152291][ T32] usb 5-1: config 0 interface 0 has no altsetting 0 [ 453.152325][ T32] usb 5-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 453.152349][ T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.171771][ T32] usb 5-1: config 0 descriptor?? [ 453.486535][T11429] FAULT_INJECTION: forcing a failure. [ 453.486535][T11429] name failslab, interval 1, probability 0, space 0, times 0 [ 453.486557][T11429] CPU: 1 UID: 0 PID: 11429 Comm: syz.3.1739 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 453.486575][T11429] Tainted: [L]=SOFTLOCKUP [ 453.486579][T11429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 453.486586][T11429] Call Trace: [ 453.486590][T11429] [ 453.486595][T11429] dump_stack_lvl+0xe8/0x150 [ 453.486614][T11429] should_fail_ex+0x467/0x600 [ 453.486630][T11429] should_failslab+0xa8/0x100 [ 453.486641][T11429] ? do_getname_kernel+0x54/0x230 [ 453.486657][T11429] kmem_cache_alloc_noprof+0x9e/0x680 [ 453.486678][T11429] ? trace_kmalloc+0x2a/0xf0 [ 453.486691][T11429] ? do_getname_kernel+0x54/0x230 [ 453.486709][T11429] do_getname_kernel+0x54/0x230 [ 453.486724][T11429] ? kern_path+0x1b/0x150 [ 453.486735][T11429] kern_path+0x25/0x150 [ 453.486746][T11429] ovl_parse_param_lowerdir+0x6c7/0xab0 [ 453.486765][T11429] ? __pfx_ovl_parse_param_lowerdir+0x10/0x10 [ 453.486783][T11429] ovl_parse_param+0x5f2/0xf40 [ 453.486797][T11429] ? rcu_is_watching+0x15/0xb0 [ 453.486810][T11429] ? __pfx_ovl_parse_param+0x10/0x10 [ 453.486826][T11429] ? static_key_count+0x41/0x70 [ 453.486840][T11429] vfs_parse_fs_param+0x1a9/0x420 [ 453.486855][T11429] vfs_parse_monolithic_sep+0x281/0x360 [ 453.486868][T11429] ? __pfx_ovl_next_opt+0x10/0x10 [ 453.486881][T11429] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 453.486897][T11429] ? __pfx_ovl_parse_monolithic+0x10/0x10 [ 453.486910][T11429] ? ovl_parse_monolithic+0x12/0x30 [ 453.486922][T11429] ? __pfx_ovl_next_opt+0x10/0x10 [ 453.486937][T11429] do_new_mount+0x2e2/0xdc0 [ 453.486947][T11429] ? cap_capable+0x123/0x460 [ 453.486960][T11429] ? __pfx_do_new_mount+0x10/0x10 [ 453.486971][T11429] ? ns_capable+0x89/0xe0 [ 453.486983][T11429] ? path_mount+0x647/0x1050 [ 453.486995][T11429] ? user_path_at+0xd4/0x160 [ 453.487007][T11429] __se_sys_mount+0x31d/0x420 [ 453.487020][T11429] ? __pfx___se_sys_mount+0x10/0x10 [ 453.487033][T11429] ? __x64_sys_mount+0x20/0xc0 [ 453.487044][T11429] do_syscall_64+0x17b/0x530 [ 453.487056][T11429] ? irqentry_exit+0x10f/0x8f0 [ 453.487066][T11429] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.487076][T11429] ? clear_bhb_loop+0x40/0x90 [ 453.487089][T11429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.487099][T11429] RIP: 0033:0x7fe14032de59 [ 453.487109][T11429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.487118][T11429] RSP: 002b:00007fe13e586028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 453.487130][T11429] RAX: ffffffffffffffda RBX: 00007fe1405b5fa0 RCX: 00007fe14032de59 [ 453.487138][T11429] RDX: 0000200000000b80 RSI: 0000200000000580 RDI: 0000000000000000 [ 453.487144][T11429] RBP: 00007fe13e586090 R08: 0000200000000100 R09: 0000000000000000 [ 453.487151][T11429] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000002 [ 453.487158][T11429] R13: 00007fe1405b6038 R14: 00007fe1405b5fa0 R15: 00007ffcdccf9038 [ 453.487176][T11429] [ 453.487238][T11429] overlayfs: failed to resolve '.': -12 [ 453.554837][ T5332] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 453.609290][ T199] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 453.822860][ T5332] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 453.822897][ T5332] usb 2-1: can't read configurations, error -61 [ 453.847713][ T199] usb 3-1: Using ep0 maxpacket: 16 [ 453.849728][ T199] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 453.849751][ T199] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 453.852448][ T199] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 453.852475][ T199] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.852494][ T199] usb 3-1: Product: syz [ 453.852508][ T199] usb 3-1: Manufacturer: syz [ 453.852523][ T199] usb 3-1: SerialNumber: syz [ 453.967646][ T5332] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 453.972271][ T199] usb 3-1: 0:2 : does not exist [ 454.067673][ T9167] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 454.130726][ T5332] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 454.130764][ T5332] usb 2-1: can't read configurations, error -61 [ 454.155173][ T5332] usb usb2-port1: attempt power cycle [ 454.168007][ T9166] usb 3-1: USB disconnect, device number 5 [ 454.238245][ T9167] usb 4-1: Using ep0 maxpacket: 32 [ 454.240419][ T9167] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 454.240661][ T9167] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.246652][ T9167] usb 4-1: config 0 descriptor?? [ 454.284688][ T9167] gspca_main: sunplus-2.14.0 probing 041e:400b [ 454.483481][T11435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.484919][T11435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.504074][ T5332] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 454.530593][ T5332] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 454.530629][ T5332] usb 2-1: can't read configurations, error -61 [ 454.657643][ T5332] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 454.680905][ T5332] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 454.680940][ T5332] usb 2-1: can't read configurations, error -61 [ 454.681415][ T5332] usb usb2-port1: unable to enumerate USB device [ 454.712151][T11435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.712728][T11435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.187600][ T5332] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 455.352310][ T5332] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 455.352341][ T5332] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.352360][ T5332] usb 3-1: Product: syz [ 455.352528][ T5332] usb 3-1: Manufacturer: syz [ 455.352548][ T5332] usb 3-1: SerialNumber: syz [ 455.586729][ T37] audit: type=1326 audit(1784086555.234:3934): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11405 comm="syz.4.1732" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a3e7de59 code=0x7fc00000 [ 455.655776][ T32] usbhid 5-1:0.0: can't add hid device: -71 [ 455.658357][ T32] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 455.720945][ T32] usb 5-1: USB disconnect, device number 91 [ 455.812663][ T5332] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 455.812724][ T5332] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 456.261573][ T9167] gspca_sunplus: reg_w_riv err -71 [ 456.261668][ T9167] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 456.283694][ T9167] usb 4-1: USB disconnect, device number 120 [ 456.332920][T11452] FAULT_INJECTION: forcing a failure. [ 456.332920][T11452] name failslab, interval 1, probability 0, space 0, times 0 [ 456.332957][T11452] CPU: 1 UID: 0 PID: 11452 Comm: syz.1.1748 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 456.332983][T11452] Tainted: [L]=SOFTLOCKUP [ 456.332991][T11452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 456.333003][T11452] Call Trace: [ 456.333011][T11452] [ 456.333019][T11452] dump_stack_lvl+0xe8/0x150 [ 456.333048][T11452] should_fail_ex+0x467/0x600 [ 456.333079][T11452] should_failslab+0xa8/0x100 [ 456.333101][T11452] __kmalloc_cache_noprof+0xa1/0x670 [ 456.333131][T11452] ? genl_start+0x1c9/0x6d0 [ 456.333151][T11452] ? genl_start+0x1c9/0x6d0 [ 456.333180][T11452] genl_start+0x1c9/0x6d0 [ 456.333210][T11452] __netlink_dump_start+0x442/0x7b0 [ 456.333257][T11452] genl_family_rcv_msg_dumpit+0x213/0x310 [ 456.333286][T11452] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 456.333308][T11452] ? genl_get_cmd+0x4d6/0x960 [ 456.333334][T11452] ? rcu_is_watching+0x15/0xb0 [ 456.333354][T11452] ? __pfx_genl_start+0x10/0x10 [ 456.333374][T11452] ? __pfx_genl_dumpit+0x10/0x10 [ 456.333403][T11452] ? __pfx_genl_done+0x10/0x10 [ 456.333441][T11452] ? bpf_lsm_capable+0x9/0x20 [ 456.333465][T11452] ? security_capable+0x74/0x280 [ 456.333498][T11452] genl_rcv_msg+0x5e1/0x7a0 [ 456.333527][T11452] ? __pfx_genl_rcv_msg+0x10/0x10 [ 456.333548][T11452] ? ref_tracker_free+0x668/0x820 [ 456.333574][T11452] ? __pfx_devlink_nl_health_reporter_dump_get_dumpit+0x10/0x10 [ 456.333602][T11452] ? ____sys_sendmsg+0x565/0x870 [ 456.333628][T11452] ? ___sys_sendmsg+0x2a5/0x360 [ 456.333655][T11452] ? __x64_sys_sendmsg+0x1b7/0x290 [ 456.333680][T11452] ? do_syscall_64+0x17b/0x530 [ 456.333700][T11452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.333730][T11452] netlink_rcv_skb+0x226/0x4a0 [ 456.333760][T11452] ? __pfx_genl_rcv_msg+0x10/0x10 [ 456.333785][T11452] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 456.333827][T11452] ? netlink_deliver_tap+0x2e/0x1b0 [ 456.333855][T11452] ? netlink_deliver_tap+0x2e/0x1b0 [ 456.333888][T11452] genl_rcv+0x28/0x40 [ 456.333909][T11452] netlink_unicast+0x7f5/0x990 [ 456.333947][T11452] netlink_sendmsg+0x813/0xb40 [ 456.333987][T11452] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.334018][T11452] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 456.334050][T11452] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 456.334075][T11452] ? arch_stack_walk+0xfb/0x150 [ 456.334102][T11452] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.334125][T11452] sock_sendmsg_nosec+0x13a/0x180 [ 456.334147][T11452] ____sys_sendmsg+0x565/0x870 [ 456.334179][T11452] ? __pfx_____sys_sendmsg+0x10/0x10 [ 456.334210][T11452] ? import_iovec+0x73/0xa0 [ 456.334237][T11452] ___sys_sendmsg+0x2a5/0x360 [ 456.334260][T11452] ? __lock_acquire+0x6df/0x2e40 [ 456.334279][T11452] ? __pfx____sys_sendmsg+0x10/0x10 [ 456.334331][T11452] ? __fget_files+0x2a/0x420 [ 456.334347][T11452] ? __fget_files+0x3a8/0x420 [ 456.334371][T11452] __x64_sys_sendmsg+0x1b7/0x290 [ 456.334404][T11452] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 456.334444][T11452] do_syscall_64+0x17b/0x530 [ 456.334460][T11452] ? irqentry_exit+0x10f/0x8f0 [ 456.334475][T11452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.334492][T11452] ? clear_bhb_loop+0x40/0x90 [ 456.334512][T11452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.334528][T11452] RIP: 0033:0x7f6fe253de59 [ 456.334543][T11452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.334556][T11452] RSP: 002b:00007f6fe0796028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 456.334574][T11452] RAX: ffffffffffffffda RBX: 00007f6fe27c5fa0 RCX: 00007f6fe253de59 [ 456.334586][T11452] RDX: 0000000000000040 RSI: 0000200000000240 RDI: 0000000000000003 [ 456.334597][T11452] RBP: 00007f6fe0796090 R08: 0000000000000000 R09: 0000000000000000 [ 456.334607][T11452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.334617][T11452] R13: 00007f6fe27c6038 R14: 00007f6fe27c5fa0 R15: 00007ffc1533e628 [ 456.334644][T11452] [ 456.436876][ T5332] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 456.436939][ T5332] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 456.438584][ T5332] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 456.490660][ T5332] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 456.653159][T11456] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1750'. [ 456.708247][T11458] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 457.197622][ T9167] usb 4-1: new full-speed USB device number 121 using dummy_hcd [ 457.349338][ T9167] usb 4-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 457.349370][ T9167] usb 4-1: config 0 interface 0 has no altsetting 0 [ 457.349395][ T9167] usb 4-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 457.349407][ T9167] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.377633][ T5332] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 457.382663][ T9167] usb 4-1: config 0 descriptor?? [ 457.547660][ T5332] usb 5-1: Using ep0 maxpacket: 16 [ 457.552053][ T5332] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 457.552077][ T5332] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 457.554552][ T5332] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 457.554578][ T5332] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.554597][ T5332] usb 5-1: Product: syz [ 457.554611][ T5332] usb 5-1: Manufacturer: syz [ 457.554626][ T5332] usb 5-1: SerialNumber: syz [ 457.621544][ T5332] usb 5-1: 0:2 : does not exist [ 457.697824][ T199] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 457.821242][ T5332] usb 5-1: USB disconnect, device number 92 [ 457.859734][ T199] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 457.859769][ T199] usb 2-1: config 0 interface 0 has no altsetting 0 [ 457.859800][ T199] usb 2-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.00 [ 457.859825][ T199] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.867364][ T199] usb 2-1: config 0 descriptor?? [ 457.910773][T11473] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 457.972659][ T9135] usb 3-1: USB disconnect, device number 6 [ 458.086971][T11475] input: syz0 as /devices/virtual/input/input121 [ 458.326752][ T199] asus 0003:0B05:19B6.0020: ignoring exceeding usage max [ 458.344367][ T199] asus 0003:0B05:19B6.0020: hidraw0: USB HID v0.7f Device [HID 0b05:19b6] on usb-dummy_hcd.1-1/input0 [ 458.563288][ T9166] usb 2-1: USB disconnect, device number 57 [ 458.592377][ T9166] ------------[ cut here ]------------ [ 458.592393][ T9166] !work->func [ 458.592425][ T9166] WARNING: kernel/workqueue.c:4392 at __flush_work+0xc68/0xd70, CPU#1: kworker/1:10/9166 [ 458.592466][ T9166] Modules linked in: [ 458.592491][ T9166] CPU: 1 UID: 0 PID: 9166 Comm: kworker/1:10 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 458.592520][ T9166] Tainted: [L]=SOFTLOCKUP [ 458.592528][ T9166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 458.592541][ T9166] Workqueue: usb_hub_wq hub_event [ 458.592640][ T9166] RIP: 0010:__flush_work+0xc68/0xd70 [ 458.592666][ T9166] Code: 6b 8b e8 ab 6d 13 00 48 c7 c7 80 38 3c 8e 48 89 de e9 49 ff ff ff e8 27 c7 37 00 90 0f 0b 90 e9 45 ff ff ff e8 19 c7 37 00 90 <0f> 0b 90 31 c0 49 bd f8 f8 f8 f8 f8 f8 f8 f8 e9 2d ff ff ff e8 ff [ 458.592684][ T9166] RSP: 0018:ffffc9000a12efc0 EFLAGS: 00010283 [ 458.592702][ T9166] RAX: ffffffff818ddc97 RBX: ffff88803c4bfcf0 RCX: 0000000000100000 [ 458.592717][ T9166] RDX: ffffc90019276000 RSI: 0000000000004c74 RDI: 0000000000004c75 [ 458.592742][ T9166] RBP: ffffc9000a12f178 R08: 0000000000000000 R09: 0000000000000000 [ 458.592756][ T9166] R10: dffffc0000000000 R11: fffffbfff1fa1890 R12: dffffc0000000000 [ 458.592773][ T9166] R13: 1ffff11007897f9e R14: 1ffff92001425e00 R15: ffff88803c4bfcd8 [ 458.592791][ T9166] FS: 0000000000000000(0000) GS:ffff888125af2000(0000) knlGS:0000000000000000 [ 458.592809][ T9166] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 458.592825][ T9166] CR2: 0000200000000270 CR3: 000000005fcc8000 CR4: 00000000003526f0 [ 458.592844][ T9166] Call Trace: [ 458.592853][ T9166] [ 458.592871][ T9166] ? __pfx___flush_work+0x10/0x10 [ 458.592901][ T9166] ? preempt_schedule_thunk+0x16/0x40 [ 458.592923][ T9166] ? rcu_is_watching+0x15/0xb0 [ 458.592950][ T9166] ? work_grab_pending+0x3d1/0x930 [ 458.592983][ T9166] ? __cancel_work_sync+0x5c/0x110 [ 458.593011][ T9166] __cancel_work_sync+0xbe/0x110 [ 458.593062][ T9166] asus_remove+0x13f/0x170 [ 458.593151][ T9166] ? __pfx_asus_remove+0x10/0x10 [ 458.593175][ T9166] hid_device_remove+0xc8/0x1d0 [ 458.593226][ T9166] ? __pfx_hid_device_remove+0x10/0x10 [ 458.593249][ T9166] device_release_driver_internal+0x48b/0x880 [ 458.593282][ T9166] bus_remove_device+0x449/0x560 [ 458.593320][ T9166] ? __pfx_bus_remove_device+0x10/0x10 [ 458.593351][ T9166] ? up_read+0x34/0x180 [ 458.593378][ T9166] ? kernfs_remove_by_name_ns+0x101/0x140 [ 458.593409][ T9166] device_del+0x528/0x8f0 [ 458.593442][ T9166] ? __pfx_device_del+0x10/0x10 [ 458.593466][ T9166] ? rt_spin_unlock+0x157/0x200 [ 458.593495][ T9166] hid_destroy_device+0x6b/0x1b0 [ 458.593519][ T9166] usbhid_disconnect+0x9f/0xc0 [ 458.593592][ T9166] usb_unbind_interface+0x295/0x9f0 [ 458.593656][ T9166] ? kernfs_remove_by_name_ns+0x101/0x140 [ 458.593685][ T9166] ? __pfx_usb_unbind_interface+0x10/0x10 [ 458.593711][ T9166] device_release_driver_internal+0x4f5/0x880 [ 458.593749][ T9166] bus_remove_device+0x449/0x560 [ 458.593786][ T9166] ? __pfx_bus_remove_device+0x10/0x10 [ 458.593817][ T9166] ? up_read+0x34/0x180 [ 458.593843][ T9166] ? kernfs_remove_by_name_ns+0x101/0x140 [ 458.593873][ T9166] device_del+0x528/0x8f0 [ 458.593907][ T9166] ? __pfx_device_del+0x10/0x10 [ 458.593930][ T9166] ? kobject_put+0x516/0x550 [ 458.593963][ T9166] usb_disable_device+0x3d4/0x8d0 [ 458.593996][ T9166] usb_disconnect+0x32d/0x990 [ 458.594025][ T9166] hub_event+0x1bb7/0x4cf0 [ 458.594058][ T9166] ? __lock_acquire+0x6df/0x2e40 [ 458.594082][ T9166] ? register_lock_class+0x31/0x2e0 [ 458.594140][ T9166] ? __pfx_hub_event+0x10/0x10 [ 458.594168][ T9166] ? rcu_is_watching+0x15/0xb0 [ 458.594192][ T9166] ? process_one_work+0x7fd/0x1480 [ 458.594214][ T9166] process_one_work+0xaaf/0x1480 [ 458.594253][ T9166] ? __pfx_process_one_work+0x10/0x10 [ 458.594272][ T9166] ? do_raw_spin_lock+0x12b/0x2f0 [ 458.594304][ T9166] ? assign_work+0x3cf/0x5d0 [ 458.594330][ T9166] worker_thread+0xb05/0x10d0 [ 458.594374][ T9166] kthread+0x388/0x470 [ 458.594401][ T9166] ? __pfx_worker_thread+0x10/0x10 [ 458.594423][ T9166] ? __pfx_kthread+0x10/0x10 [ 458.594453][ T9166] ret_from_fork+0x514/0xb70 [ 458.594485][ T9166] ? __pfx_ret_from_fork+0x10/0x10 [ 458.594510][ T9166] ? __switch_to+0xc89/0x1420 [ 458.594534][ T9166] ? __pfx_kthread+0x10/0x10 [ 458.594559][ T9166] ret_from_fork_asm+0x1a/0x30 [ 458.594601][ T9166] [ 458.594613][ T9166] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 458.594632][ T9166] CPU: 1 UID: 0 PID: 9166 Comm: kworker/1:10 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 458.594662][ T9166] Tainted: [L]=SOFTLOCKUP [ 458.594671][ T9166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 458.594684][ T9166] Workqueue: usb_hub_wq hub_event [ 458.594710][ T9166] Call Trace: [ 458.594719][ T9166] [ 458.594727][ T9166] vpanic+0x56c/0xa60 [ 458.594759][ T9166] ? __pfx__printk+0x10/0x10 [ 458.594783][ T9166] ? __pfx_vpanic+0x10/0x10 [ 458.594803][ T9166] ? is_bpf_text_address+0x292/0x2b0 [ 458.594843][ T9166] ? is_bpf_text_address+0x26/0x2b0 [ 458.594876][ T9166] panic+0xc5/0xd0 [ 458.594897][ T9166] ? __pfx_panic+0x10/0x10 [ 458.594929][ T9166] ? ret_from_fork_asm+0x1a/0x30 [ 458.594963][ T9166] __warn+0x315/0x4c0 [ 458.594980][ T9166] ? __flush_work+0xc68/0xd70 [ 458.595006][ T9166] ? __flush_work+0xc68/0xd70 [ 458.595030][ T9166] __report_bug+0x276/0x570 [ 458.595054][ T9166] ? __flush_work+0xc68/0xd70 [ 458.595083][ T9166] ? __pfx___report_bug+0x10/0x10 [ 458.595105][ T9166] ? finish_task_switch+0x412/0xc60 [ 458.595135][ T9166] ? lockdep_hardirqs_on+0x7a/0x110 [ 458.595158][ T9166] ? rcu_is_watching+0x15/0xb0 [ 458.595182][ T9166] ? trace_sched_exit_tp+0x3a/0x130 [ 458.595213][ T9166] ? __schedule+0x171f/0x5530 [ 458.595243][ T9166] ? __flush_work+0xc68/0xd70 [ 458.595264][ T9166] report_bug+0x16a/0x220 [ 458.595285][ T9166] ? __flush_work+0xc68/0xd70 [ 458.595306][ T9166] ? __flush_work+0xc6a/0xd70 [ 458.595330][ T9166] handle_bug+0x9c/0x200 [ 458.595352][ T9166] exc_invalid_op+0x1a/0x50 [ 458.595375][ T9166] asm_exc_invalid_op+0x1a/0x20 [ 458.595395][ T9166] RIP: 0010:__flush_work+0xc68/0xd70 [ 458.595419][ T9166] Code: 6b 8b e8 ab 6d 13 00 48 c7 c7 80 38 3c 8e 48 89 de e9 49 ff ff ff e8 27 c7 37 00 90 0f 0b 90 e9 45 ff ff ff e8 19 c7 37 00 90 <0f> 0b 90 31 c0 49 bd f8 f8 f8 f8 f8 f8 f8 f8 e9 2d ff ff ff e8 ff [ 458.595436][ T9166] RSP: 0018:ffffc9000a12efc0 EFLAGS: 00010283 [ 458.595454][ T9166] RAX: ffffffff818ddc97 RBX: ffff88803c4bfcf0 RCX: 0000000000100000 [ 458.595469][ T9166] RDX: ffffc90019276000 RSI: 0000000000004c74 RDI: 0000000000004c75 [ 458.595483][ T9166] RBP: ffffc9000a12f178 R08: 0000000000000000 R09: 0000000000000000 [ 458.595497][ T9166] R10: dffffc0000000000 R11: fffffbfff1fa1890 R12: dffffc0000000000 [ 458.595511][ T9166] R13: 1ffff11007897f9e R14: 1ffff92001425e00 R15: ffff88803c4bfcd8 [ 458.595535][ T9166] ? __flush_work+0xc67/0xd70 [ 458.595577][ T9166] ? __pfx___flush_work+0x10/0x10 [ 458.595603][ T9166] ? preempt_schedule_thunk+0x16/0x40 [ 458.595626][ T9166] ? rcu_is_watching+0x15/0xb0 [ 458.595655][ T9166] ? work_grab_pending+0x3d1/0x930 [ 458.595691][ T9166] ? __cancel_work_sync+0x5c/0x110 [ 458.595718][ T9166] __cancel_work_sync+0xbe/0x110 [ 458.595755][ T9166] asus_remove+0x13f/0x170 [ 458.595784][ T9166] ? __pfx_asus_remove+0x10/0x10 [ 458.595808][ T9166] hid_device_remove+0xc8/0x1d0 [ 458.595836][ T9166] ? __pfx_hid_device_remove+0x10/0x10 [ 458.595859][ T9166] device_release_driver_internal+0x48b/0x880 [ 458.595892][ T9166] bus_remove_device+0x449/0x560 [ 458.595930][ T9166] ? __pfx_bus_remove_device+0x10/0x10 [ 458.595960][ T9166] ? up_read+0x34/0x180 [ 458.595986][ T9166] ? kernfs_remove_by_name_ns+0x101/0x140 [ 458.596016][ T9166] device_del+0x528/0x8f0 [ 458.596058][ T9166] ? __pfx_device_del+0x10/0x10 [ 458.596085][ T9166] ? rt_spin_unlock+0x157/0x200 [ 458.596117][ T9166] hid_destroy_device+0x6b/0x1b0 [ 458.596145][ T9166] usbhid_disconnect+0x9f/0xc0 [ 458.596168][ T9166] usb_unbind_interface+0x295/0x9f0 [ 458.596206][ T9166] ? kernfs_remove_by_name_ns+0x101/0x140 [ 458.596234][ T9166] ? __pfx_usb_unbind_interface+0x10/0x10 [ 458.596261][ T9166] device_release_driver_internal+0x4f5/0x880 [ 458.596294][ T9166] bus_remove_device+0x449/0x560 [ 458.596331][ T9166] ? __pfx_bus_remove_device+0x10/0x10 [ 458.596364][ T9166] ? up_read+0x34/0x180 [ 458.596389][ T9166] ? kernfs_remove_by_name_ns+0x101/0x140 [ 458.596419][ T9166] device_del+0x528/0x8f0 [ 458.596452][ T9166] ? __pfx_device_del+0x10/0x10 [ 458.596475][ T9166] ? kobject_put+0x516/0x550 [ 458.596508][ T9166] usb_disable_device+0x3d4/0x8d0 [ 458.596545][ T9166] usb_disconnect+0x32d/0x990 [ 458.596572][ T9166] hub_event+0x1bb7/0x4cf0 [ 458.596606][ T9166] ? __lock_acquire+0x6df/0x2e40 [ 458.596629][ T9166] ? register_lock_class+0x31/0x2e0 [ 458.596691][ T9166] ? __pfx_hub_event+0x10/0x10 [ 458.596723][ T9166] ? rcu_is_watching+0x15/0xb0 [ 458.596757][ T9166] ? process_one_work+0x7fd/0x1480 [ 458.596780][ T9166] process_one_work+0xaaf/0x1480 [ 458.596825][ T9166] ? __pfx_process_one_work+0x10/0x10 [ 458.596845][ T9166] ? do_raw_spin_lock+0x12b/0x2f0 [ 458.596881][ T9166] ? assign_work+0x3cf/0x5d0 [ 458.596908][ T9166] worker_thread+0xb05/0x10d0 [ 458.596968][ T9166] kthread+0x388/0x470 [ 458.596996][ T9166] ? __pfx_worker_thread+0x10/0x10 [ 458.597017][ T9166] ? __pfx_kthread+0x10/0x10 [ 458.597044][ T9166] ret_from_fork+0x514/0xb70 [ 458.597073][ T9166] ? __pfx_ret_from_fork+0x10/0x10 [ 458.597105][ T9166] ? __switch_to+0xc89/0x1420 [ 458.597130][ T9166] ? __pfx_kthread+0x10/0x10 [ 458.597157][ T9166] ret_from_fork_asm+0x1a/0x30 [ 458.597201][ T9166] [ 458.597471][ T9166] Kernel Offset: disabled