last executing test programs:

7.656004299s ago: executing program 2 (id=478):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
tkill(r0, 0x36)
unshare(0x60040000)

7.163807018s ago: executing program 2 (id=482):
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40080)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084)
io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010025bd70000000", @ANYRES32=0x0, @ANYBLOB="0c009900b4170e7e08006140fb0100000051"], 0x28}, 0x1, 0x0, 0x0, 0x4c854}, 0x20040880)
add_key$fscrypt_provisioning(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
mount$fuse(0x0, 0x0, 0x0, 0x1000430, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[])

6.65724554s ago: executing program 4 (id=483):
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0))
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b", 0xe4}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000001701000002000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf900000080c79d6b6d1d4301678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f06ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aadb6ed6155fad3c98896658e106d043cc8652373dd8e2a7"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076af", 0x45}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd", 0x32}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r2 = socket$alg(0x26, 0x5, 0x0)
ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000ac0)={0xffffffffffffffff, &(0x7f00000006c0)='\x00', 0x81, &(0x7f0000000700)={@_ha_fsid={[0x2, 0xfff]}, {0x1ff, 0x2, 0x6, 0x6}}, 0x3, &(0x7f0000000980), &(0x7f0000000a80)=0x9})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00'})
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

6.494017104s ago: executing program 4 (id=484):
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f00000002c0))
write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYRESHEX], 0x509)
close(0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="290e29bd7000fbdbdf0527960000050031000e0000001400300053e0e85290ceb080fb816d3cdadf198b08000200", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="10002bbd7000fcdbdf250c00000008000300", @ANYRES32, @ANYBLOB="482145fd5c2ad421b19dd288e84d05f3817ab6e33d4c838450cfc61231bb9fbb383515c79dfd41a8cce1f5ceeb1ccd3cd7d7be5b22ed2e092fce31ce935954903094d6da6589c4330646373006d99849870d02e90369ecbdb85dd4912fb9893d4e01"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x24004001)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x40)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000200)={0x1, 0x7, 0x7, &(0x7f0000000040)={0x5, "810556c721393f4084c89ea7f77d040b00"}})
close(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2000405, 0x0)

5.571332244s ago: executing program 3 (id=492):
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20)
fdatasync(r0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000080)=0x401)
ustat(0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x5, 0x609f, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {}, 0x1, @can={{0x3, 0x1}, 0x1, 0x3, 0x0, 0x0, "6ee7ba2197db18bc"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x44801)

4.631716456s ago: executing program 2 (id=494):
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0))
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076af", 0x45}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd", 0x32}], 0x2, 0x0, 0x0, 0xc0}], 0x1, 0x48040)
r2 = socket$alg(0x26, 0x5, 0x0)
ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000ac0)={0xffffffffffffffff, &(0x7f00000006c0)='\x00', 0x81, &(0x7f0000000700)={@_ha_fsid={[0x2, 0xfff]}, {0x1ff, 0x2, 0x6, 0x6}}, 0x3, &(0x7f0000000980), &(0x7f0000000a80)=0x9})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00'})
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

4.435327075s ago: executing program 3 (id=495):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000800), r0)
sendmsg$NFC_CMD_SE_IO(r0, 0x0, 0x40)

4.348510403s ago: executing program 3 (id=496):
socket$kcm(0xa, 0x5, 0x0)
r0 = socket$kcm(0x2, 0x3, 0x2)
close(0x3)
r1 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r1, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)='`', 0x1}], 0x1}, 0x41)
setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x4)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x4, 0x7f, 0x5, 0x1, 0x4, @mcast2, @empty, 0x8700, 0x10, 0x2, 0x4}})
socket$kcm(0x2, 0x3, 0x2)
close(0x3)
ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000040)={'veth0_to_bond\x00', @random="0200ac7f7f00"})
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x29, 0x5, 0x0)
r4 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x2, 0x20000)
ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f0000000380)={r3, 0x59bc, 0x4, "8711a9d820bdbbe0ea08c094324669b90dbf1d019684841188f3f322d73395431d5b89e3e710ceb396bf4578c9784b8c18ffdc78f36f4aa86d51a894e10722a66108a5c9311a616a33217331bf10e021ccc8b5ec5191af0dc9babeed66d5dd9b387d2c2ebcdc5d891fef84faeb085b9266c801dea8840e03067b7bf7a89252baea0e4bdd281e4e4ce8a7d25c43dfced77779151cd635c25b22eb"})
setsockopt$sock_attach_bpf(r3, 0x119, 0x32, 0x0, 0x4c)
ioctl$ECCGETLAYOUT(r4, 0x81484d11, &(0x7f0000000440))
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x18, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000008d510000000000000000000079a00000000000007b00e0ff00000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002800000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94)

4.200550061s ago: executing program 3 (id=497):
socket(0x2, 0x80805, 0x0)
r0 = dup(0xffffffffffffffff)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x8840)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0)
getsockname$packet(r0, 0x0, &(0x7f0000000100))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0)
recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0)

4.054848779s ago: executing program 2 (id=499):
socket(0x2, 0x80805, 0x0)
r0 = dup(0xffffffffffffffff)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x8840)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0)
getsockname$packet(r0, 0x0, &(0x7f0000000100))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r1, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0)
io_setup(0x8, &(0x7f0000000540)=<r2=>0x0)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x4, r3, 0x0, 0x0, 0x2a25}])
recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0)

3.809923973s ago: executing program 4 (id=500):
r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x53, 0xffffffffffffffff, 0xb, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000040)="46a1a199bd02ee2c55b610", 0x0, 0xfffffffc, 0x14, 0x1, 0x0})

3.749825417s ago: executing program 4 (id=501):
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4)
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
syz_emit_ethernet(0x74, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200807aa3277300000000000200000800450000240000000300e000000100000000fe9a9078020000"], 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x0, 0x0}, 0x10)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r3, &(0x7f0000000000)="24000000010006", 0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0xa)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x1, 0x0)
sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x8, 0x0, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x9, 0xffffffff}, 0x0)
madvise(&(0x7f0000385000/0x1000)=nil, 0x1000, 0x18)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000)
sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000)
r5 = socket$inet(0xa, 0x801, 0x84)
listen(r5, 0x8)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x41)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4)
sendmsg$nl_xfrm(r7, 0x0, 0x0)
write$binfmt_script(r6, &(0x7f0000000200), 0xfffffd9d)

3.360400717s ago: executing program 1 (id=502):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002140)={0x18, 0x44, 0x1, 0x70bd29, 0x4, {0x2}, [@nested={0x4, 0x48}]}, 0x18}, 0x1, 0x0, 0x0, 0x200048d5}, 0x4008094)

3.359516922s ago: executing program 1 (id=503):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20)
fdatasync(r0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000080)=0x401)
ustat(0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x5, 0x609f, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {}, 0x1, @can={{0x3, 0x1}, 0x1, 0x3, 0x0, 0x0, "6ee7ba2197db18bc"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x44801)

3.292105255s ago: executing program 3 (id=504):
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40080)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084)
io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010025bd70000000", @ANYRES32=0x0, @ANYBLOB="0c009900b4170e7e08006140fb0100000051"], 0x28}, 0x1, 0x0, 0x0, 0x4c854}, 0x20040880)
add_key$fscrypt_provisioning(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
mount$fuse(0x0, 0x0, 0x0, 0x1000430, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[])

2.898836691s ago: executing program 2 (id=505):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0)
write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x200000000000, 0x0)
syz_usb_disconnect(r1)
syz_usb_connect(0x6, 0x24, &(0x7f0000000300)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r1, 0xc0085508, &(0x7f0000000040)=0x40)
close(0x3)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
read(r2, &(0x7f00000002c0)=""/201, 0xc9)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@local, 0x4d, r4})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3800006, 0x31, 0xffffffffffffffff, 0xd0fb8000)

2.656973495s ago: executing program 0 (id=506):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000000000040ac0567020000000000010902240001000900000904000009030000005ba09ad2e54c7170767195483a3c09210000000122290009058103080009"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x9, {0x9}}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="30000000200000082bbd7000ffdbdf250214100604000007100000000c000c4020000000000000ee08000b"], 0x30}}, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}], 0x1}}], 0x1, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[], 0x118}}], 0x1, 0x810)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c582a626739b1c83b47dec6359c05eaad4a50fae9f6dcd3292ea54c7be8bbdefb1", 0x24)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@getnexthop={0x20, 0x76, 0xa11, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8}]}, 0x20}}, 0x0)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(r2, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xfffffffffffffe51}], 0x3b, 0x6, 0x1)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

2.644454451s ago: executing program 4 (id=507):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0)
write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x200000000000, 0x0)
syz_usb_disconnect(r1)
syz_usb_connect(0x6, 0x24, &(0x7f0000000300)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r1, 0xc0085508, &(0x7f0000000040)=0x40)
close(0x3)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
read(r2, &(0x7f00000002c0)=""/201, 0xc9)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@local, 0x4d, r4})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3800006, 0x31, 0xffffffffffffffff, 0xd0fb8000)

2.344729349s ago: executing program 1 (id=508):
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0))
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b", 0xe4}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000001701000002000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf900000080c79d6b6d1d4301678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f06ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aadb6ed6155fad3c98896658e106d043cc8652373dd8e2a7"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076af", 0x45}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd", 0x32}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r2 = socket$alg(0x26, 0x5, 0x0)
ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000ac0)={0xffffffffffffffff, &(0x7f00000006c0)='\x00', 0x81, &(0x7f0000000700)={@_ha_fsid={[0x2, 0xfff]}, {0x1ff, 0x2, 0x6, 0x6}}, 0x3, &(0x7f0000000980), &(0x7f0000000a80)=0x9})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00'})
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

2.227033003s ago: executing program 1 (id=509):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000)
r2 = mq_open(&(0x7f0000019500)='mptcp_pm\x00', 0x1, 0x100, &(0x7f0000019540)={0x3, 0x3, 0x8, 0x8000000000000000}) (fail_nth: 1)
mq_getsetattr(r2, &(0x7f0000019580)={0x1, 0x2, 0x5, 0x8000000000000000}, &(0x7f00000195c0))
socket(0x80000000000000a, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100))
memfd_create(0x0, 0x8)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000194c0)={0x0, 0x0, &(0x7f0000019480)={&(0x7f0000000280)={0x30, r3, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x41}, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x9a91, 0x4f}}]}, 0x30}, 0x1, 0x0, 0x0, 0x81fe0b26ce7c10aa}, 0x140c0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

1.915103285s ago: executing program 1 (id=510):
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448dd, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYRESHEX], 0x509)
close(0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="290e29bd7000fbdbdf0527960000050031000e0000001400300053e0e85290ceb080fb816d3cdadf198b08000200", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="10002bbd7000fcdbdf250c00000008000300", @ANYRES32, @ANYBLOB="482145fd5c2ad421b19dd288e84d05f3817ab6e33d4c838450cfc61231bb9fbb383515c79dfd41a8cce1f5ceeb1ccd3cd7d7be5b22ed2e092fce31ce935954903094d6da6589c4330646373006d99849870d02e90369ecbdb85dd4912fb9893d4e01"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x24004001)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x40)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000200)={0x1, 0x7, 0x7, &(0x7f0000000040)={0x5, "810556c721393f4084c89ea7f77d040b00"}})
close(0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2000405, 0x0)

1.818315402s ago: executing program 0 (id=511):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1)
rt_sigpending(&(0x7f0000000140), 0x8)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x38, r3, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x19, 0x2, 0x0, 0xfff, 0xc5f, 0x3, 0x1, 0x9]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c040}, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r5})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000001c0)={0x35, 0x4, r5, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x800000, 0x1004000})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a31000000000900010073797a300000000070000000060a010400000000000000000100000008000b40000000000900010073797a300000000048000480200001800700010072740000140002800800014000000015080002400000000024000180090001006861736800000000140002800800024000000017080007"], 0xe4}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

1.377206685s ago: executing program 0 (id=512):
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0))
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da08", 0xdd}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000001701000002000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf900000080c79d6b6d1d4301678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f06ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aadb"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd0911809", 0x78}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea", 0x26}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r2 = socket$alg(0x26, 0x5, 0x0)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x1, 0x19, 0xc, "faf98317e5a114998a1a8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0x7]}})
ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000ac0)={0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000700)={@_ha_fsid={[0x2, 0xfff]}, {0x1ff, 0x2, 0x6, 0x6}}, 0x3, &(0x7f0000000980), &(0x7f0000000a80)=0x9})
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1.249171766s ago: executing program 0 (id=513):
sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0)
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FIBMAP(r0, 0x301, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0xe, &(0x7f0000002040)=ANY=[@ANYBLOB="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", @ANYRES64], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x86, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x12, 0x0, 0x0, 0x10, 0xe6}, 0x4b)
sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) (async)
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$FIBMAP(r0, 0x301, 0x0) (async)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0xe, &(0x7f0000002040)=ANY=[@ANYBLOB="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", @ANYRES64], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x86, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x12, 0x0, 0x0, 0x10, 0xe6}, 0x4b) (async)

1.175010592s ago: executing program 0 (id=514):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8008b}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xa888}]}}}, @IFLA_ADDRESS={0x6, 0x1, @dev}]}, 0x48}}, 0x4)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000)
r3 = mq_open(&(0x7f0000019500)='mptcp_pm\x00', 0x1, 0x100, &(0x7f0000019540)={0x3, 0x3, 0x8, 0x8000000000000000})
mq_getsetattr(r3, &(0x7f0000019580)={0x1, 0x2, 0x5, 0x8000000000000000}, &(0x7f00000195c0))
socket(0x80000000000000a, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100))
memfd_create(0x0, 0x8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r6=>0x0})
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r7 = syz_io_uring_setup(0xf00, &(0x7f0000000bc0)={0x0, 0x5078, 0xc00, 0x2, 0x0, 0x0, 0x0}, &(0x7f0000000040), &(0x7f00000002c0), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, &(0x7f0000000400)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1}, 0x1)
ioctl$XFS_IOC_OPEN_BY_HANDLE(r4, 0xc038586b, &(0x7f0000019380)={0xffffffffffffffff, &(0x7f0000000240)='\xaa\xaa\xaa\xaa\xaa', 0x80842, &(0x7f0000000280)={@_ha_fsid={[0x9, 0x5]}, {0x5, 0xe, 0x3, 0x1}}, 0x101, &(0x7f0000019300)={@_ha_fsid}, &(0x7f0000019340)=0x7f})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000194c0)={0x0, 0x0, &(0x7f0000019480)={&(0x7f0000000180)={0x30, r5, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x41}, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x9a91, 0x4e}}]}, 0x30}, 0x1, 0x0, 0x0, 0x81fe0b26ce7c10aa}, 0x40140c4)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

756.436263ms ago: executing program 4 (id=515):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1bd)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) (async)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000480)={{0x12, 0x1, 0x110, 0x3d, 0xb9, 0x3e, 0x20, 0xb49, 0x64f, 0xfef9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x8, 0x70, 0x9, "", [{{0x9, 0x4, 0x32, 0x2, 0x0, 0x7a, 0x12, 0x6d, 0x2}}]}}]}}, 0x0) (async)
syz_usb_connect(0x2, 0x24, &(0x7f0000000480)={{0x12, 0x1, 0x110, 0x3d, 0xb9, 0x3e, 0x20, 0xb49, 0x64f, 0xfef9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x8, 0x70, 0x9, "", [{{0x9, 0x4, 0x32, 0x2, 0x0, 0x7a, 0x12, 0x6d, 0x2}}]}}]}}, 0x0)
write(r0, &(0x7f0000000100)='isp1301 0x2c\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/i2c/devices/i2c-1/new_device\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='isp1301 0x2c\x00', 0xd)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0)
ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f00000000c0))
write(r2, &(0x7f0000000340)="6953703133303120307832630078087ecd3ed48cdc5d280abcdfb484ab7271e9c5ba881522c65f00040000000000005170180f97624a8a9c8be08b6614e5412ec0ebadd7592d06b9cd7e4167aa8e28570bafe1df498a2e071a04aa4b4322c4bda3ec71cfeb5adbb1a897d54b3eb33e633f0c6501b2839e816ffe93a35ef0fea79c8cce6811e5e526885b6cfda8c85e32d45fc3dd884a3af25c34a254d4c10452a09dfdf9c5c85ece2f6d0024ddb7781f9f46ea60d04f7a77b565796a793abb661556e37c5e084413524bf6bc4917df71aaf5665ecfd8933e849f813ce167000000000000000000", 0xfffffffffffffee4) (async)
write(r2, &(0x7f0000000340)="6953703133303120307832630078087ecd3ed48cdc5d280abcdfb484ab7271e9c5ba881522c65f00040000000000005170180f97624a8a9c8be08b6614e5412ec0ebadd7592d06b9cd7e4167aa8e28570bafe1df498a2e071a04aa4b4322c4bda3ec71cfeb5adbb1a897d54b3eb33e633f0c6501b2839e816ffe93a35ef0fea79c8cce6811e5e526885b6cfda8c85e32d45fc3dd884a3af25c34a254d4c10452a09dfdf9c5c85ece2f6d0024ddb7781f9f46ea60d04f7a77b565796a793abb661556e37c5e084413524bf6bc4917df71aaf5665ecfd8933e849f813ce167000000000000000000", 0xfffffffffffffee4)

747.84727ms ago: executing program 2 (id=516):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x1, 0x7, 0x7, &(0x7f0000000040)={0x5, "810556c721393f4084c89ea7f77d040b00"}})

691.559264ms ago: executing program 3 (id=517):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f00000011c0)=[@in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e22, @private=0xa010102}]}, &(0x7f0000000180)=0x10)
getsockopt$bt_hci(r1, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) (fail_nth: 1)

543.33244ms ago: executing program 0 (id=518):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20)
fdatasync(r0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000080)=0x401)
ustat(0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x5, 0x609f, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {}, 0x1, @can={{0x3, 0x1}, 0x1, 0x3, 0x0, 0x0, "6ee7ba2197db18bc"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x44801)

0s ago: executing program 1 (id=519):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
tkill(r0, 0x36)
unshare(0x60040000)

kernel console output (not intermixed with test programs):

 mceusb 3-1:0.0: Error: mce write urb status = -71
[  147.854045][ T5787] mceusb 3-1:0.0: Error: mce write urb status = -71
[  147.913601][ T5787] mceusb 3-1:0.0: Error: mce write urb status = -71
[  147.977637][ T5787] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  148.061377][ T5787] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  148.138642][ T6983] FAULT_INJECTION: forcing a failure.
[  148.138642][ T6983] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  148.151750][ T6983] CPU: 1 UID: 0 PID: 6983 Comm: syz.4.337 Not tainted syzkaller #0 PREEMPT(full) 
[  148.151771][ T6983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  148.151781][ T6983] Call Trace:
[  148.151788][ T6983]  <TASK>
[  148.151795][ T6983]  dump_stack_lvl+0x100/0x190
[  148.151822][ T6983]  should_fail_ex.cold+0x5/0xa
[  148.151845][ T6983]  _copy_from_user+0x2e/0xd0
[  148.151871][ T6983]  core_sys_select+0x2d0/0xbb0
[  148.151897][ T6983]  ? __pfx_core_sys_select+0x10/0x10
[  148.151914][ T6983]  ? find_held_lock+0x2b/0x80
[  148.151931][ T6983]  ? get_pid_task+0xfc/0x250
[  148.151980][ T6983]  ? __pfx_set_user_sigmask+0x10/0x10
[  148.152004][ T6983]  ? __mutex_unlock_slowpath+0x35d/0x930
[  148.152034][ T6983]  do_pselect.constprop.0+0x238/0x270
[  148.152057][ T6983]  ? __pfx_do_pselect.constprop.0+0x10/0x10
[  148.152084][ T6983]  ? ksys_write+0x1ac/0x250
[  148.152105][ T6983]  __x64_sys_pselect6+0x149/0x1c0
[  148.152127][ T6983]  do_syscall_64+0x115/0x870
[  148.152149][ T6983]  ? clear_bhb_loop+0x70/0xc0
[  148.152172][ T6983]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.152191][ T6983] RIP: 0033:0x7f718579e0d9
[  148.152216][ T6983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  148.152232][ T6983] RSP: 002b:00007f71866ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[  148.152249][ T6983] RAX: ffffffffffffffda RBX: 00007f7185a26090 RCX: 00007f718579e0d9
[  148.152261][ T6983] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000040
[  148.152271][ T6983] RBP: 00007f71866ea090 R08: 0000000000000000 R09: 0000000000000000
[  148.152281][ T6983] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001
[  148.152291][ T6983] R13: 00007f7185a26128 R14: 00007f7185a26090 R15: 00007ffe9d1e1378
[  148.152316][ T6983]  </TASK>
[  148.723052][ T6948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.334'.
[  148.732390][ T6948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.334'.
[  148.741701][ T6948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.334'.
[  149.091394][ T5787] usb 3-1: USB disconnect, device number 27
[  149.242717][ T6988] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.251675][ T6988] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.307924][ T6989] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.315097][ T6989] bridge0: port 2(bridge_slave_1) entered forwarding state
[  149.322571][ T6989] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.330113][ T6989] bridge0: port 1(bridge_slave_0) entered forwarding state
[  149.357544][ T6989] bridge0: entered promiscuous mode
[  149.367190][ T6989] bridge0: entered allmulticast mode
[  149.510792][ T6998] FAULT_INJECTION: forcing a failure.
[  149.510792][ T6998] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  149.526322][ T6993] FAULT_INJECTION: forcing a failure.
[  149.526322][ T6993] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  149.540130][ T6993] CPU: 1 UID: 0 PID: 6993 Comm: syz.0.340 Not tainted syzkaller #0 PREEMPT(full) 
[  149.540151][ T6993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  149.540162][ T6993] Call Trace:
[  149.540167][ T6993]  <TASK>
[  149.540174][ T6993]  dump_stack_lvl+0x100/0x190
[  149.540201][ T6993]  should_fail_ex.cold+0x5/0xa
[  149.540223][ T6993]  _copy_from_user+0x2e/0xd0
[  149.540248][ T6993]  io_register_clone_buffers+0xda/0xa40
[  149.540270][ T6993]  ? __mutex_lock+0x26d/0x1bd0
[  149.540294][ T6993]  ? __do_sys_io_uring_register+0x135/0x1bc0
[  149.540322][ T6993]  ? find_held_lock+0x2b/0x80
[  149.540339][ T6993]  ? __pfx_io_register_clone_buffers+0x10/0x10
[  149.540359][ T6993]  ? __fget_files+0x215/0x3d0
[  149.540393][ T6993]  __do_sys_io_uring_register+0x340/0x1bc0
[  149.540415][ T6993]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  149.540439][ T6993]  ? __pfx___do_sys_io_uring_register+0x10/0x10
[  149.540458][ T6993]  ? __fget_files+0x21f/0x3d0
[  149.540481][ T6993]  ? fput+0x79/0x100
[  149.540502][ T6993]  ? ksys_write+0x1ac/0x250
[  149.540518][ T6993]  ? __pfx_ksys_write+0x10/0x10
[  149.540542][ T6993]  do_syscall_64+0x115/0x870
[  149.540564][ T6993]  ? clear_bhb_loop+0x70/0xc0
[  149.540585][ T6993]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.540603][ T6993] RIP: 0033:0x7f34d4f9e0d9
[  149.540618][ T6993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  149.540634][ T6993] RSP: 002b:00007f34d5d99028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[  149.540651][ T6993] RAX: ffffffffffffffda RBX: 00007f34d5225fa0 RCX: 00007f34d4f9e0d9
[  149.540662][ T6993] RDX: 0000200000000000 RSI: 000000000000001e RDI: 0000000000000007
[  149.540673][ T6993] RBP: 00007f34d5d99090 R08: 0000000000000000 R09: 0000000000000000
[  149.540683][ T6993] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001
[  149.540693][ T6993] R13: 00007f34d5226038 R14: 00007f34d5225fa0 R15: 00007ffc11541af8
[  149.540718][ T6993]  </TASK>
[  149.542003][ T6998] CPU: 1 UID: 0 PID: 6998 Comm: syz.4.342 Not tainted syzkaller #0 PREEMPT(full) 
[  149.542023][ T6998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  149.542033][ T6998] Call Trace:
[  149.542038][ T6998]  <TASK>
[  149.542045][ T6998]  dump_stack_lvl+0x100/0x190
[  149.542071][ T6998]  should_fail_ex.cold+0x5/0xa
[  149.542094][ T6998]  _copy_to_user+0x32/0xd0
[  149.542119][ T6998]  simple_read_from_buffer+0xcb/0x170
[  149.542141][ T6998]  proc_fail_nth_read+0x1af/0x230
[  149.542170][ T6998]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  149.542199][ T6998]  ? rw_verify_area+0xce/0x6d0
[  149.542223][ T6998]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  149.542251][ T6998]  vfs_read+0x1e4/0xb40
[  149.542281][ T6998]  ? __pfx_vfs_read+0x10/0x10
[  149.542307][ T6998]  ? __fget_files+0x215/0x3d0
[  149.542331][ T6998]  ? __fget_files+0x21f/0x3d0
[  149.542356][ T6998]  ksys_read+0x12a/0x250
[  149.542372][ T6998]  ? __pfx_ksys_read+0x10/0x10
[  149.542395][ T6998]  do_syscall_64+0x115/0x870
[  149.542417][ T6998]  ? clear_bhb_loop+0x70/0xc0
[  149.542438][ T6998]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.542455][ T6998] RIP: 0033:0x7f718575e90e
[  149.542469][ T6998] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  149.542485][ T6998] RSP: 002b:00007f718670afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  149.542500][ T6998] RAX: ffffffffffffffda RBX: 00007f718670b6c0 RCX: 00007f718575e90e
[  149.542511][ T6998] RDX: 000000000000000f RSI: 00007f718670b0a0 RDI: 0000000000000003
[  149.542521][ T6998] RBP: 00007f718670b090 R08: 0000000000000000 R09: 0000000000000000
[  149.542531][ T6998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  149.542540][ T6998] R13: 00007f7185a26038 R14: 00007f7185a25fa0 R15: 00007ffe9d1e1378
[  149.542565][ T6998]  </TASK>
[  149.972151][   T29] audit: type=1400 audit(1786407007.698:670): avc:  denied  { accept } for  pid=6999 comm="syz.4.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  150.152249][ T5787] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  150.365077][ T5787] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  150.383965][ T5787] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  150.434488][ T5787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  150.465993][ T5787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  150.477158][ T5787] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  150.509617][ T5787] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  150.519325][ T5787] usb 3-1: Manufacturer: syz
[  150.533080][ T5787] usb 3-1: config 0 descriptor??
[  150.802257][ T1608] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  150.945119][   T29] audit: type=1800 audit(1786407008.678:671): pid=6991 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.341" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  150.966297][ T1608] usb 4-1: Using ep0 maxpacket: 16
[  150.971465][ T1608] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  150.982246][ T5707] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  150.990442][ T1608] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  151.013387][ T1608] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  151.031314][ T1608] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024
[  151.042701][ T1608] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[  151.055164][ T1608] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  151.069409][ T1608] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  151.105263][ T1608] usb 4-1: Manufacturer: syz
[  151.122609][ T1608] usb 4-1: config 0 descriptor??
[  151.163454][ T5707] usb 1-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[  151.203175][ T5707] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  151.216732][ T5707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.244627][ T5707] usb 1-1: config 0 descriptor??
[  151.261857][ T7014] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  151.392686][ T5593] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  151.442461][ T1608] rc_core: IR keymap rc-hauppauge not found
[  151.454627][ T1608] Registered IR keymap rc-empty
[  151.468146][ T1608] mceusb 4-1:0.0: Error: mce write urb status = -71
[  151.496749][   T29] audit: type=1400 audit(1786407009.228:672): avc:  denied  { write } for  pid=7025 comm="syz.4.351" name="uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  151.524464][ T1608] mceusb 4-1:0.0: Error: mce write urb status = -71
[  151.542960][ T5593] usb 2-1: device descriptor read/64, error -71
[  151.550515][ T1608] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  151.564201][ T1608] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input52
[  151.579820][ T1608] mceusb 4-1:0.0: Error: mce write urb status = -71
[  151.603868][ T1608] mceusb 4-1:0.0: Error: mce write urb status = -71
[  151.624769][ T1608] mceusb 4-1:0.0: Error: mce write urb status = -71
[  151.642760][ T1608] mceusb 4-1:0.0: Error: mce write urb status = -71
[  151.662381][ T1608] mceusb 4-1:0.0: Error: mce write urb status = -71
[  151.682707][ T1608] mceusb 4-1:0.0: Error: mce write urb status = -71
[  151.702414][ T1608] mceusb 4-1:0.0: Error: mce write urb status = -71
[  151.722933][ T1608] mceusb 4-1:0.0: Error: mce write urb status = -71
[  151.747002][ T1608] mceusb 4-1:0.0: Error: mce write urb status = -71
[  151.773895][   T29] audit: type=1400 audit(1786407009.508:673): avc:  denied  { wake_alarm } for  pid=7025 comm="syz.4.351" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  151.796260][ T1608] mceusb 4-1:0.0: Error: mce write urb status = -71
[  151.809597][ T5593] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  151.877389][ T1608] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  151.899628][ T1608] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  151.942228][ T5593] usb 2-1: device descriptor read/64, error -71
[  151.967313][ T1608] usb 4-1: USB disconnect, device number 26
[  152.065854][ T5593] usb usb2-port1: attempt power cycle
[  152.149319][ T5707] usbhid 1-1:0.0: can't add hid device: -71
[  152.155633][ T5707] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  152.165995][ T5707] usb 1-1: USB disconnect, device number 22
[  152.521816][ T5593] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  152.527652][ T5787] usbhid 3-1:0.0: can't add hid device: -71
[  152.542891][ T5593] usb 2-1: device descriptor read/8, error -71
[  152.546647][ T5787] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  152.567759][ T5787] usb 3-1: USB disconnect, device number 28
[  152.663345][ T7039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.354'.
[  152.677458][ T7039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.354'.
[  152.682368][ T5687] libceph: connect (1)[c::]:6789 error -101
[  152.692374][ T5687] libceph: mon0 (1)[c::]:6789 connect error
[  152.706364][ T7034] ceph: No mds server is up or the cluster is laggy
[  152.782352][ T5593] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  152.832649][ T5593] usb 2-1: device descriptor read/8, error -71
[  152.845812][ T7046] gadgetfs: bound to dummy_udc driver
[  152.953298][ T5593] usb usb2-port1: unable to enumerate USB device
[  152.973074][ T5687] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  153.063064][ T7046] gadgetfs: suspended from state 2
[  153.092248][ T5787] usb 3-1: new full-speed USB device number 29 using dummy_hcd
[  153.133011][ T5687] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  153.143899][ T5687] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  153.158810][ T5687] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.170401][ T5687] usb 1-1: config 0 descriptor??
[  153.399439][ T5687] usbhid 1-1:0.0: can't add hid device: -71
[  153.403825][   T29] audit: type=1400 audit(1786407011.138:674): avc:  denied  { create } for  pid=7052 comm="syz.4.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  153.412213][ T5687] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  153.463539][   T29] audit: type=1400 audit(1786407011.158:675): avc:  denied  { bind } for  pid=7052 comm="syz.4.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  153.475503][ T5687] usb 1-1: USB disconnect, device number 23
[  153.806423][ T7064] jffs2: notice: (7064) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  153.992187][ T5687] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  154.048801][   T29] audit: type=1400 audit(1786407011.778:676): avc:  denied  { read write } for  pid=7070 comm="syz.3.364" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  154.622526][   T29] audit: type=1400 audit(1786407012.328:677): avc:  denied  { open } for  pid=7070 comm="syz.3.364" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  154.677010][ T5687] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[  154.711577][ T5687] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  154.775011][ T5687] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.881639][ T5687] usb 1-1: config 0 descriptor??
[  154.998079][ T7079] capability: warning: `syz.1.365' uses deprecated v2 capabilities in a way that may be insecure
[  155.324633][   T29] audit: type=1400 audit(1786407012.748:678): avc:  denied  { setopt } for  pid=7076 comm="syz.1.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  155.397483][   T29] audit: type=1400 audit(1786407012.758:679): avc:  denied  { ioctl } for  pid=7076 comm="syz.1.365" path="socket:[18877]" dev="sockfs" ino=18877 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  155.693000][ T7086] FAULT_INJECTION: forcing a failure.
[  155.693000][ T7086] name failslab, interval 1, probability 0, space 0, times 0
[  155.728192][ T7086] CPU: 1 UID: 0 PID: 7086 Comm: syz.2.367 Not tainted syzkaller #0 PREEMPT(full) 
[  155.728214][ T7086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  155.728224][ T7086] Call Trace:
[  155.728229][ T7086]  <TASK>
[  155.728236][ T7086]  dump_stack_lvl+0x100/0x190
[  155.728261][ T7086]  should_fail_ex.cold+0x5/0xa
[  155.728282][ T7086]  should_failslab+0xc2/0x120
[  155.728304][ T7086]  kmem_cache_alloc_noprof+0x91/0x6a0
[  155.728325][ T7086]  ? vm_area_dup+0x27/0x8e0
[  155.728344][ T7086]  vm_area_dup+0x27/0x8e0
[  155.728361][ T7086]  __split_vma+0x18c/0xda0
[  155.728380][ T7086]  ? __pfx___split_vma+0x10/0x10
[  155.728408][ T7086]  ? __pfx_mas_prev+0x10/0x10
[  155.728438][ T7086]  vms_gather_munmap_vmas+0x3a5/0x1720
[  155.728460][ T7086]  ? __pfx_vms_gather_munmap_vmas+0x10/0x10
[  155.728485][ T7086]  ? mas_walk+0x6ef/0x9b0
[  155.728513][ T7086]  __mmap_region+0x4a7/0x2db0
[  155.728534][ T7086]  ? __pfx___mmap_region+0x10/0x10
[  155.728549][ T7086]  ? __pfx___might_resched+0x10/0x10
[  155.728571][ T7086]  ? find_held_lock+0x2b/0x80
[  155.728586][ T7086]  ? process_measurement+0x4c8/0x2350
[  155.728603][ T7086]  ? process_measurement+0x4c8/0x2350
[  155.728619][ T7086]  ? down_write+0x146/0x1f0
[  155.728648][ T7086]  ? process_measurement+0x1f4/0x2350
[  155.728670][ T7086]  ? find_held_lock+0x2b/0x80
[  155.728685][ T7086]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  155.728715][ T7086]  ? __lock_acquire+0x49f/0x1a40
[  155.728747][ T7086]  ? find_held_lock+0x2b/0x80
[  155.728761][ T7086]  ? is_bpf_text_address+0x8a/0x1a0
[  155.728820][ T7086]  mmap_region+0x35d/0x620
[  155.728839][ T7086]  ? __pfx_mmap_region+0x10/0x10
[  155.728857][ T7086]  ? shmem_get_unmapped_area+0x141/0x960
[  155.728883][ T7086]  ? selinux_mmap_addr+0x2b/0x110
[  155.728907][ T7086]  ? bpf_lsm_mmap_addr+0x9/0x30
[  155.728921][ T7086]  ? security_mmap_addr+0x71/0x1e0
[  155.728938][ T7086]  ? __get_unmapped_area+0x255/0x3e0
[  155.728962][ T7086]  do_mmap+0xc63/0x12f0
[  155.728988][ T7086]  ? __pfx_do_mmap+0x10/0x10
[  155.729009][ T7086]  ? __pfx_down_write_killable+0x10/0x10
[  155.729037][ T7086]  vm_mmap_pgoff+0x29e/0x470
[  155.729063][ T7086]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  155.729087][ T7086]  ? __mutex_unlock_slowpath+0x35d/0x930
[  155.729116][ T7086]  ksys_mmap_pgoff+0xe4/0x610
[  155.729140][ T7086]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[  155.729159][ T7086]  ? fput+0x79/0x100
[  155.729178][ T7086]  ? ksys_write+0x1ac/0x250
[  155.729193][ T7086]  ? __pfx_ksys_write+0x10/0x10
[  155.729211][ T7086]  __x64_sys_mmap+0x125/0x190
[  155.729236][ T7086]  do_syscall_64+0x115/0x870
[  155.729256][ T7086]  ? clear_bhb_loop+0x70/0xc0
[  155.729276][ T7086]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.729292][ T7086] RIP: 0033:0x7fbfc339e0d9
[  155.729306][ T7086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  155.729321][ T7086] RSP: 002b:00007fbfc420a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  155.729337][ T7086] RAX: ffffffffffffffda RBX: 00007fbfc3626090 RCX: 00007fbfc339e0d9
[  155.729348][ T7086] RDX: 000000000000000f RSI: 0000000000b36000 RDI: 0000200000000000
[  155.729357][ T7086] RBP: 00007fbfc420a090 R08: 0000000000000006 R09: 0000000000001000
[  155.729367][ T7086] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001
[  155.729377][ T7086] R13: 00007fbfc3626128 R14: 00007fbfc3626090 R15: 00007ffcaa5ff268
[  155.729404][ T7086]  </TASK>
[  155.772138][   T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  156.172596][ T5687] aiptek 1-1:0.0: Aiptek using 400 ms programming speed
[  156.181195][ T5687] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input55
[  156.362968][   T10] usb 5-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[  156.378207][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  156.389966][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.406156][   T10] usb 5-1: config 0 descriptor??
[  156.411951][ T7081] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  156.439280][ T7096] netlink: 48 bytes leftover after parsing attributes in process `syz.2.371'.
[  156.490558][ T5593] usb 1-1: USB disconnect, device number 24
[  156.490687][    C0] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[  156.810508][   T24] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  156.849253][   T29] audit: type=1400 audit(1786407014.578:680): avc:  denied  { write } for  pid=7098 comm="syz.1.372" name="nullb" dev="configfs" ino=3326 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  156.873132][   T29] audit: type=1400 audit(1786407014.578:681): avc:  denied  { read } for  pid=7098 comm="syz.1.372" name="memory_backed" dev="configfs" ino=18377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[  156.902486][   T29] audit: type=1800 audit(1786407014.578:682): pid=7099 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.372" name="memory_backed" dev="configfs" ino=18377 res=0 errno=0
[  156.930947][   T29] audit: type=1800 audit(1786407014.578:683): pid=7099 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.372" name="power" dev="configfs" ino=18381 res=0 errno=0
[  156.959098][ T7099] null_blk: disk my_zoned_dev created
[  156.983326][   T24] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  157.008041][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  157.077325][   T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  157.106801][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  157.142219][   T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  157.155858][ T7104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.374'.
[  157.180291][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.189597][   T24] usb 3-1: Product: syz
[  157.194258][   T24] usb 3-1: Manufacturer: syz
[  157.198865][   T24] usb 3-1: SerialNumber: syz
[  157.211059][   T24] usb 3-1: config 0 descriptor??
[  157.219896][ T7106] fuse: Bad value for 'rootmode'
[  157.226263][   T10] usbhid 5-1:0.0: can't add hid device: -71
[  157.232337][   T29] audit: type=1400 audit(1786407014.948:684): avc:  denied  { mounton } for  pid=7105 comm="syz.0.375" path="/80/file0" dev="tmpfs" ino=445 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  157.261098][   T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  157.556204][   T29] audit: type=1400 audit(1786407015.188:685): avc:  denied  { write } for  pid=7105 comm="syz.0.375" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  157.558916][   T10] usb 5-1: USB disconnect, device number 24
[  157.590927][   T24] ums-isd200 3-1:0.0: USB Mass Storage device detected
[  157.605762][ T7111] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4)
[  157.612418][ T7111] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  157.620402][ T5687] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  157.633944][ T7111] vhci_hcd vhci_hcd.0: Device attached
[  157.782160][ T5687] usb 2-1: Using ep0 maxpacket: 16
[  157.792173][ T5687] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  157.827988][ T5687] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  157.862183][ T5787] usb 39-1: new low-speed USB device number 2 using vhci_hcd
[  157.897171][ T5687] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  157.947570][ T5687] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024
[  158.023077][ T5687] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[  158.136139][ T5687] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  158.285476][ T5687] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  158.347511][ T5687] usb 2-1: Manufacturer: syz
[  158.465744][ T5687] usb 2-1: config 0 descriptor??
[  158.751819][ T7112] vhci_hcd: connection reset by peer
[  158.915504][ T1115] vhci_hcd vhci_hcd.3: stop threads
[  158.945862][ T1115] vhci_hcd vhci_hcd.3: release socket
[  158.991292][ T1115] vhci_hcd vhci_hcd.3: disconnect device
[  159.672156][ T5687] rc_core: IR keymap rc-hauppauge not found
[  159.841912][ T5687] Registered IR keymap rc-empty
[  159.849120][ T5687] mceusb 2-1:0.0: Error: mce write urb status = -71
[  159.857378][   T24] scsi host1: usb-storage 3-1:0.0
[  159.870229][   T24] usb 3-1: USB disconnect, device number 30
[  159.875569][ T5687] mceusb 2-1:0.0: Error: mce write urb status = -71
[  159.903203][ T5687] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  159.916650][ T5687] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input56
[  159.939248][ T5687] mceusb 2-1:0.0: Error: mce write urb status = -71
[  159.972337][ T5687] mceusb 2-1:0.0: Error: mce write urb status = -71
[  159.983060][    C0] rc rc0: IR event FIFO is full!
[  159.988004][    C0] rc rc0: IR event FIFO is full!
[  159.992929][    C0] rc rc0: IR event FIFO is full!
[  159.997859][    C0] rc rc0: IR event FIFO is full!
[  160.002784][    C0] rc rc0: IR event FIFO is full!
[  160.007929][    C0] rc rc0: IR event FIFO is full!
[  160.012867][    C0] rc rc0: IR event FIFO is full!
[  160.018414][ T5687] mceusb 2-1:0.0: Error: mce write urb status = -71
[  160.020053][ T7130] rc rc0: two consecutive events of type pulse
[  160.042515][ T5687] mceusb 2-1:0.0: Error: mce write urb status = -71
[  160.072796][ T5687] mceusb 2-1:0.0: Error: mce write urb status = -71
[  160.164874][ T7135] FAULT_INJECTION: forcing a failure.
[  160.164874][ T7135] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  160.177955][ T7135] CPU: 1 UID: 0 PID: 7135 Comm: syz.0.379 Not tainted syzkaller #0 PREEMPT(full) 
[  160.177978][ T7135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  160.177988][ T7135] Call Trace:
[  160.177995][ T7135]  <TASK>
[  160.178002][ T7135]  dump_stack_lvl+0x100/0x190
[  160.178030][ T7135]  should_fail_ex.cold+0x5/0xa
[  160.178053][ T7135]  _copy_from_user+0x2e/0xd0
[  160.178080][ T7135]  copy_msghdr_from_user+0x9f/0x4c0
[  160.178100][ T7135]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  160.178124][ T7135]  ? __lock_acquire+0x49f/0x1a40
[  160.178148][ T7135]  ? __lock_acquire+0x49f/0x1a40
[  160.178172][ T7135]  ___sys_recvmsg+0xdd/0x1a0
[  160.178191][ T7135]  ? __pfx____sys_recvmsg+0x10/0x10
[  160.178212][ T7135]  ? find_held_lock+0x2b/0x80
[  160.178243][ T7135]  do_recvmmsg+0x2f3/0x740
[  160.178265][ T7135]  ? __pfx_do_recvmmsg+0x10/0x10
[  160.178288][ T7135]  ? __mutex_unlock_slowpath+0x35d/0x930
[  160.178319][ T7135]  ? __fget_files+0x21f/0x3d0
[  160.178345][ T7135]  __x64_sys_recvmmsg+0x22a/0x280
[  160.178376][ T7135]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  160.178408][ T7135]  do_syscall_64+0x115/0x870
[  160.178430][ T7135]  ? clear_bhb_loop+0x70/0xc0
[  160.178452][ T7135]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.178471][ T7135] RIP: 0033:0x7f34d4f9e0d9
[  160.178486][ T7135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  160.178502][ T7135] RSP: 002b:00007f34d31f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  160.178520][ T7135] RAX: ffffffffffffffda RBX: 00007f34d5226090 RCX: 00007f34d4f9e0d9
[  160.178531][ T7135] RDX: 0000000000000001 RSI: 0000200000005700 RDI: 0000000000000005
[  160.178542][ T7135] RBP: 00007f34d31f6090 R08: 0000000000000000 R09: 0000000000000000
[  160.178553][ T7135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  160.178563][ T7135] R13: 00007f34d5226128 R14: 00007f34d5226090 R15: 00007ffc11541af8
[  160.178587][ T7135]  </TASK>
[  160.478856][ T7137] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality.
[  160.612357][ T5687] mceusb 2-1:0.0: Error: mce write urb status = -71
[  160.953151][ T5687] mceusb 2-1:0.0: Error: mce write urb status = -71
[  161.002176][ T5687] mceusb 2-1:0.0: Error: mce write urb status = -71
[  161.002209][ T7149] netlink: 28 bytes leftover after parsing attributes in process `syz.4.383'.
[  161.022400][ T5687] mceusb 2-1:0.0: Error: mce write urb status = -71
[  161.042406][ T5687] mceusb 2-1:0.0: Error: mce write urb status = -71
[  161.065668][ T5687] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  161.106058][ T5687] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  161.323320][ T5687] usb 2-1: USB disconnect, device number 26
[  161.631185][ T7158] netlink: 40 bytes leftover after parsing attributes in process `syz.1.384'.
[  161.659761][ T7158] netlink: 40 bytes leftover after parsing attributes in process `syz.1.384'.
[  161.799934][ T7158] netlink: 40 bytes leftover after parsing attributes in process `syz.1.384'.
[  161.810939][ T7158] netlink: 40 bytes leftover after parsing attributes in process `syz.1.384'.
[  161.834802][ T5783] libceph: connect (1)[c::]:6789 error -101
[  161.874546][ T5783] libceph: mon0 (1)[c::]:6789 connect error
[  161.881000][ T7168] ceph: No mds server is up or the cluster is laggy
[  161.930585][   T29] audit: type=1400 audit(1786407019.658:686): avc:  denied  { accept } for  pid=7165 comm="syz.0.385" lport=57329 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  161.955767][ T7158] netlink: 40 bytes leftover after parsing attributes in process `syz.1.384'.
[  161.999343][ T7158] netlink: 40 bytes leftover after parsing attributes in process `syz.1.384'.
[  162.035748][   T29] audit: type=1400 audit(1786407019.708:687): avc:  denied  { getopt } for  pid=7165 comm="syz.0.385" lport=57329 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  162.171007][ T7183] gadgetfs: bound to dummy_udc driver
[  162.277310][ T7189] FAULT_INJECTION: forcing a failure.
[  162.277310][ T7189] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  162.301001][   T29] audit: type=1400 audit(1786407020.008:688): avc:  denied  { bind } for  pid=7186 comm="syz.1.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  162.331785][ T7189] CPU: 0 UID: 0 PID: 7189 Comm: syz.1.390 Not tainted syzkaller #0 PREEMPT(full) 
[  162.331807][ T7189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  162.331818][ T7189] Call Trace:
[  162.331824][ T7189]  <TASK>
[  162.331830][ T7189]  dump_stack_lvl+0x100/0x190
[  162.331857][ T7189]  should_fail_ex.cold+0x5/0xa
[  162.331879][ T7189]  _copy_from_user+0x2e/0xd0
[  162.331905][ T7189]  copy_msghdr_from_user+0x9f/0x4c0
[  162.331924][ T7189]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  162.331954][ T7189]  ___sys_sendmsg+0x106/0x1e0
[  162.331974][ T7189]  ? __pfx____sys_sendmsg+0x10/0x10
[  162.331990][ T7189]  ? __lock_acquire+0x49f/0x1a40
[  162.332013][ T7189]  ? get_pid_task+0x106/0x250
[  162.332057][ T7189]  __sys_sendmsg+0x160/0x210
[  162.332092][ T7189]  ? __pfx___sys_sendmsg+0x10/0x10
[  162.332129][ T7189]  do_syscall_64+0x115/0x870
[  162.332153][ T7189]  ? clear_bhb_loop+0x70/0xc0
[  162.332175][ T7189]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.332193][ T7189] RIP: 0033:0x7f11a3b9e0d9
[  162.332208][ T7189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  162.332225][ T7189] RSP: 002b:00007f11a1df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  162.332243][ T7189] RAX: ffffffffffffffda RBX: 00007f11a3e25fa0 RCX: 00007f11a3b9e0d9
[  162.332254][ T7189] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[  162.332265][ T7189] RBP: 00007f11a1df6090 R08: 0000000000000000 R09: 0000000000000000
[  162.332275][ T7189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  162.332285][ T7189] R13: 00007f11a3e26038 R14: 00007f11a3e25fa0 R15: 00007fffc57f84b8
[  162.332311][ T7189]  </TASK>
[  162.533484][   T29] audit: type=1400 audit(1786407020.238:689): avc:  denied  { write } for  pid=7156 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  162.562324][   T24] usb 1-1: new full-speed USB device number 25 using dummy_hcd
[  162.563258][ T5783] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  162.591087][    C1] gadgetfs: connected
[  162.596502][   T24] gadgetfs: disconnected
[  162.691866][ T7183] gadgetfs: suspended from state 2
[  162.709159][   T29] audit: type=1400 audit(1786407020.438:690): avc:  denied  { write } for  pid=7194 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  162.752188][ T5783] usb 3-1: Using ep0 maxpacket: 32
[  162.758038][ T5783] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  162.768262][ T5783] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[  162.777839][ T5783] usb 3-1: config 0 has no interface number 0
[  162.787002][ T5783] usb 3-1: config 0 interface 12 has no altsetting 0
[  162.810543][ T5783] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.828860][ T5783] usb 3-1: Product: syz
[  162.842973][ T5783] usb 3-1: Manufacturer: syz
[  162.847766][ T5783] usb 3-1: SerialNumber: syz
[  162.886242][ T5783] usb 3-1: config 0 descriptor??
[  162.952827][   T24] usb 1-1: device not accepting address 25, error -71
[  162.982392][ T5787] vhci_hcd vhci_hcd.3: vhci_device speed not set
[  163.177956][   T29] audit: type=1400 audit(1786407020.908:691): avc:  denied  { name_bind } for  pid=7209 comm="syz.1.394" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  163.317556][   T29] audit: type=1400 audit(1786407021.028:692): avc:  denied  { write } for  pid=7200 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  163.446345][   T29] audit: type=1400 audit(1786407021.178:693): avc:  denied  { write } for  pid=7218 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  163.502527][ T7221] FAULT_INJECTION: forcing a failure.
[  163.502527][ T7221] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  163.542270][ T7221] CPU: 1 UID: 0 PID: 7221 Comm: syz.1.396 Not tainted syzkaller #0 PREEMPT(full) 
[  163.542292][ T7221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  163.542301][ T7221] Call Trace:
[  163.542307][ T7221]  <TASK>
[  163.542314][ T7221]  dump_stack_lvl+0x100/0x190
[  163.542347][ T7221]  should_fail_ex.cold+0x5/0xa
[  163.542371][ T7221]  _copy_from_user+0x2e/0xd0
[  163.542396][ T7221]  copy_msghdr_from_user+0x9f/0x4c0
[  163.542416][ T7221]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  163.542445][ T7221]  ___sys_sendmsg+0x106/0x1e0
[  163.542464][ T7221]  ? __pfx____sys_sendmsg+0x10/0x10
[  163.542479][ T7221]  ? __lock_acquire+0x49f/0x1a40
[  163.542502][ T7221]  ? get_pid_task+0x106/0x250
[  163.542546][ T7221]  __sys_sendmsg+0x160/0x210
[  163.542569][ T7221]  ? __pfx___sys_sendmsg+0x10/0x10
[  163.542604][ T7221]  do_syscall_64+0x115/0x870
[  163.542627][ T7221]  ? clear_bhb_loop+0x70/0xc0
[  163.542651][ T7221]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.542669][ T7221] RIP: 0033:0x7f11a3b9e0d9
[  163.542684][ T7221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  163.542700][ T7221] RSP: 002b:00007f11a1df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  163.542716][ T7221] RAX: ffffffffffffffda RBX: 00007f11a3e25fa0 RCX: 00007f11a3b9e0d9
[  163.542728][ T7221] RDX: 0000000004004040 RSI: 00002000000003c0 RDI: 0000000000000003
[  163.542739][ T7221] RBP: 00007f11a1df6090 R08: 0000000000000000 R09: 0000000000000000
[  163.542749][ T7221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  163.542758][ T7221] R13: 00007f11a3e26038 R14: 00007f11a3e25fa0 R15: 00007fffc57f84b8
[  163.542783][ T7221]  </TASK>
[  163.548717][ T5783] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  163.744054][ T5783] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71
[  163.744113][ T7224] netlink: 12 bytes leftover after parsing attributes in process `syz.1.397'.
[  163.751368][ T5783] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  163.751426][ T5783] f81534 3-1:0.12: probe with driver f81534 failed with error -71
[  163.796265][ T5783] usb 3-1: USB disconnect, device number 31
[  164.247181][   T29] audit: type=1400 audit(1786407021.978:694): avc:  denied  { mount } for  pid=7234 comm="syz.0.399" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  164.302432][   T29] audit: type=1400 audit(1786407022.008:695): avc:  denied  { shutdown } for  pid=7234 comm="syz.0.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  164.477199][ T7235] process 'syz.0.399' launched '@~' with NULL argv: empty string added
[  164.492176][ T5707] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  165.173112][ T5707] usb 4-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[  165.194161][ T5707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  165.212268][ T5707] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.228126][ T5707] usb 4-1: config 0 descriptor??
[  165.235617][ T7241] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  165.663709][ T5707] hid_parser_main: 461 callbacks suppressed
[  165.663729][ T5707] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0
[  165.698054][ T5707] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0
[  165.712743][ T5707] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0
[  165.743930][ T5707] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0
[  165.788847][ T5707] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0
[  165.836628][ T5707] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0
[  165.849743][ T5707] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0
[  165.858986][ T5707] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0
[  165.865969][ T5707] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0
[  165.882476][ T5707] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0
[  165.894959][ T5707] asus 0003:0B05:1ABE.0006: reserved main item tag 0xd
[  165.980219][ T5707] asus 0003:0B05:1ABE.0006: hidraw0: USB HID v7f.fd Device [HID 0b05:1abe] on usb-dummy_hcd.3-1/input0
[  166.092230][ T1608] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  166.210529][ T5707] asus 0003:0B05:1ABE.0006: Asus handshake 5a returned invalid response: 21 a1 f8 0a 0a e5 a4 8f 8f b2 38 84 05 b0 61 38 2c 15 81 26 54 aa 0a 2e d0 e1 89 1a 7c 65 b5 b0 d1 18 7c 10 d4 84 f8 51 91 ba 2b 08 b2 2a 1c bb 83 06 5e 6f d3 9b ba 89 15 6e 33 2f 66 43 90 2d
[  166.264354][ T1608] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  166.285970][ T1608] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  166.319466][ T1608] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.341567][ T1608] usb 2-1: config 0 descriptor??
[  166.418886][ T5707] usb 4-1: USB disconnect, device number 27
[  166.579733][ T1608] usbhid 2-1:0.0: can't add hid device: -71
[  166.599506][ T1608] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  166.643541][ T1608] usb 2-1: USB disconnect, device number 27
[  166.933077][ T5687] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  167.216080][   T29] kauditd_printk_skb: 5 callbacks suppressed
[  167.216108][   T29] audit: type=1400 audit(1786407024.948:701): avc:  denied  { block_suspend } for  pid=7299 comm="syz.3.410" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  167.256969][ T1608] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  167.463568][ T1608] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[  167.539393][ T1608] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  167.655571][ T1608] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.693554][ T5707] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  167.701708][ T1608] usb 2-1: config 0 descriptor??
[  167.853109][ T5707] usb 4-1: device descriptor read/64, error -71
[  167.982227][ T5593] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  168.002565][ T5687] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  168.012557][ T5687] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  168.023467][ T5687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.034046][ T5687] usb 3-1: config 0 descriptor??
[  168.092607][ T5707] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  168.122157][ T5593] usb 1-1: device descriptor read/64, error -71
[  168.232179][ T5707] usb 4-1: device descriptor read/64, error -71
[  168.254078][ T5687] usbhid 3-1:0.0: can't add hid device: -71
[  168.260272][ T5687] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  168.285668][ T5687] usb 3-1: USB disconnect, device number 32
[  168.342336][ T5707] usb usb4-port1: attempt power cycle
[  168.362824][ T5593] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  168.522131][ T5593] usb 1-1: device descriptor read/64, error -71
[  168.543564][ T1608] aiptek 2-1:0.0: Aiptek using 400 ms programming speed
[  168.551812][ T1608] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input57
[  168.632560][ T5593] usb usb1-port1: attempt power cycle
[  168.692157][ T5707] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  168.702230][ T5687] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  168.712531][ T5707] usb 4-1: device descriptor read/8, error -71
[  168.852632][ T5687] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[  168.862950][ T5687] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  168.876396][ T5687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.880613][ T1608] usb 2-1: USB disconnect, device number 28
[  168.884474][    C1] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[  168.886697][ T5687] usb 3-1: config 0 descriptor??
[  168.952206][ T5707] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  168.972140][ T5593] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  168.980228][ T5707] usb 4-1: device descriptor read/8, error -71
[  168.993833][ T5593] usb 1-1: device descriptor read/8, error -71
[  169.103091][ T5707] usb usb4-port1: unable to enumerate USB device
[  169.161782][   T29] audit: type=1400 audit(1786407026.888:702): avc:  denied  { name_bind } for  pid=7309 comm="syz.4.414" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  169.242122][ T5593] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  169.262516][ T5593] usb 1-1: device descriptor read/8, error -71
[  169.383239][ T5593] usb usb1-port1: unable to enumerate USB device
[  169.402824][ T5783] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  169.552794][ T5783] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  169.563264][ T5783] usb 5-1: config 1 interface 0 altsetting 157 bulk endpoint 0x1 has invalid maxpacket 32
[  169.573208][ T5783] usb 5-1: config 1 interface 0 altsetting 157 bulk endpoint 0x82 has invalid maxpacket 32
[  169.583223][ T5783] usb 5-1: config 1 interface 0 has no altsetting 0
[  169.591412][ T5783] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.599428][ T5783] usb 5-1: Product: у
[  169.603514][ T5783] usb 5-1: Manufacturer: Ⰱ
[  169.608879][ T5783] usb 5-1: SerialNumber: 徤뷔息ଏ냐䮞퀽ꩱി签
[  169.619657][ T7310] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  169.627013][ T7310] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  169.682150][ T5593] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  169.722793][ T5687] aiptek 3-1:0.0: Aiptek using 400 ms programming speed
[  169.730884][ T5687] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input58
[  169.832170][ T5593] usb 2-1: Using ep0 maxpacket: 16
[  169.838070][ T5593] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  169.848032][ T5593] usb 2-1: config 0 has an invalid descriptor of length 35, skipping remainder of the config
[  169.858233][ T5593] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  169.869127][ T5593] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024
[  169.880277][ T5593] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[  169.890228][ T5593] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  169.904401][ T5593] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  169.912434][ T5593] usb 2-1: Manufacturer: syz
[  169.919111][ T5593] usb 2-1: config 0 descriptor??
[  170.053316][ T5707] usb 3-1: USB disconnect, device number 33
[  170.053344][    C0] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[  170.071753][   T29] audit: type=1400 audit(1786407027.798:703): avc:  denied  { getopt } for  pid=7309 comm="syz.4.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  170.081918][ T5783] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 157 proto 3 vid 0x0525 pid 0xA4A8
[  170.110336][ T5783] usb 5-1: USB disconnect, device number 25
[  170.136732][ T5783] usblp0: removed
[  170.191130][ T5593] rc_core: IR keymap rc-hauppauge not found
[  170.205748][ T5593] Registered IR keymap rc-empty
[  170.212719][ T5593] mceusb 2-1:0.0: Error: mce write urb status = -71
[  170.232590][ T5593] mceusb 2-1:0.0: Error: mce write urb status = -71
[  170.241967][ T5687] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  170.254376][ T5593] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  170.269985][ T5593] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input59
[  170.285880][ T5593] mceusb 2-1:0.0: Error: mce write urb status = -71
[  170.314056][ T5593] mceusb 2-1:0.0: Error: mce write urb status = -71
[  170.353194][ T5593] mceusb 2-1:0.0: Error: mce write urb status = -71
[  170.372299][ T5593] mceusb 2-1:0.0: Error: mce write urb status = -71
[  170.392365][ T5593] mceusb 2-1:0.0: Error: mce write urb status = -71
[  170.405615][   T29] audit: type=1400 audit(1786407028.138:704): avc:  denied  { write } for  pid=7314 comm="syz.3.416" name="hidraw0" dev="devtmpfs" ino=3281 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  170.431897][ T5593] mceusb 2-1:0.0: Error: mce write urb status = -71
[  170.452735][ T5593] mceusb 2-1:0.0: Error: mce write urb status = -71
[  170.473608][ T5593] mceusb 2-1:0.0: Error: mce write urb status = -71
[  170.494870][ T5593] mceusb 2-1:0.0: Error: mce write urb status = -71
[  170.522307][ T5593] mceusb 2-1:0.0: Error: mce write urb status = -71
[  170.554636][ T5593] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  170.564094][ T5593] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  170.580015][ T5593] usb 2-1: USB disconnect, device number 29
[  170.660024][   T29] audit: type=1400 audit(1786407028.388:705): avc:  denied  { call } for  pid=7322 comm="syz.4.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  170.740695][ T7327] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  170.816726][   T29] audit: type=1400 audit(1786407028.548:706): avc:  denied  { create } for  pid=7328 comm="syz.4.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  171.644594][ T7343] FAULT_INJECTION: forcing a failure.
[  171.644594][ T7343] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  171.684326][ T7343] CPU: 0 UID: 0 PID: 7343 Comm: syz.0.425 Not tainted syzkaller #0 PREEMPT(full) 
[  171.684348][ T7343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  171.684358][ T7343] Call Trace:
[  171.684364][ T7343]  <TASK>
[  171.684370][ T7343]  dump_stack_lvl+0x100/0x190
[  171.684397][ T7343]  should_fail_ex.cold+0x5/0xa
[  171.684420][ T7343]  _copy_from_user+0x2e/0xd0
[  171.684446][ T7343]  __sys_bpf+0x2f5/0x4e80
[  171.684472][ T7343]  ? __pfx___sys_bpf+0x10/0x10
[  171.684489][ T7343]  ? find_held_lock+0x2b/0x80
[  171.684506][ T7343]  ? get_pid_task+0xfc/0x250
[  171.684522][ T7343]  ? get_pid_task+0xfc/0x250
[  171.684545][ T7343]  ? find_held_lock+0x2b/0x80
[  171.684567][ T7343]  ? rcu_read_lock_any_held+0x6a/0xa0
[  171.684585][ T7343]  ? find_held_lock+0x2b/0x80
[  171.684600][ T7343]  ? ksys_write+0x190/0x250
[  171.684616][ T7343]  ? ksys_write+0x190/0x250
[  171.684649][ T7343]  ? fput+0x79/0x100
[  171.684674][ T7343]  ? __x64_sys_bpf+0xce/0x140
[  171.684691][ T7343]  __x64_sys_bpf+0xce/0x140
[  171.684709][ T7343]  ? do_syscall_64+0x90/0x870
[  171.684733][ T7343]  do_syscall_64+0x115/0x870
[  171.684754][ T7343]  ? clear_bhb_loop+0x70/0xc0
[  171.684776][ T7343]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.684793][ T7343] RIP: 0033:0x7f34d4f9e0d9
[  171.684807][ T7343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  171.684823][ T7343] RSP: 002b:00007f34d5d99028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  171.684840][ T7343] RAX: ffffffffffffffda RBX: 00007f34d5225fa0 RCX: 00007f34d4f9e0d9
[  171.684851][ T7343] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a
[  171.684862][ T7343] RBP: 00007f34d5d99090 R08: 0000000000000000 R09: 0000000000000000
[  171.684871][ T7343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  171.684881][ T7343] R13: 00007f34d5226038 R14: 00007f34d5225fa0 R15: 00007ffc11541af8
[  171.684905][ T7343]  </TASK>
[  171.686118][ T7346] FAULT_INJECTION: forcing a failure.
[  171.686118][ T7346] name failslab, interval 1, probability 0, space 0, times 0
[  171.862136][ T5593] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  171.880093][ T7346] CPU: 0 UID: 0 PID: 7346 Comm: syz.2.426 Not tainted syzkaller #0 PREEMPT(full) 
[  171.880113][ T7346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  171.880122][ T7346] Call Trace:
[  171.880127][ T7346]  <TASK>
[  171.880132][ T7346]  dump_stack_lvl+0x100/0x190
[  171.880157][ T7346]  should_fail_ex.cold+0x5/0xa
[  171.880178][ T7346]  should_failslab+0xc2/0x120
[  171.880202][ T7346]  __kvmalloc_node_noprof+0x116/0x970
[  171.880223][ T7346]  ? traverse.part.0.constprop.0+0x397/0x650
[  171.880246][ T7346]  traverse.part.0.constprop.0+0x397/0x650
[  171.880276][ T7346]  seq_read_iter+0x93f/0x1270
[  171.880295][ T7346]  ? _kstrtoull+0x13c/0x1f0
[  171.880315][ T7346]  seq_read+0x344/0x4d0
[  171.880331][ T7346]  ? __pfx_seq_read+0x10/0x10
[  171.880351][ T7346]  ? import_ubuf+0x1b6/0x220
[  171.880373][ T7346]  ? selinux_file_permission+0x8f/0x6d0
[  171.880400][ T7346]  ? __pfx_seq_read+0x10/0x10
[  171.880416][ T7346]  proc_reg_read+0x240/0x330
[  171.880436][ T7346]  ? __pfx_proc_reg_read+0x10/0x10
[  171.880454][ T7346]  vfs_readv+0x5d8/0x8d0
[  171.880483][ T7346]  ? __pfx_vfs_readv+0x10/0x10
[  171.880520][ T7346]  ? __fget_files+0x21f/0x3d0
[  171.880542][ T7346]  ? do_preadv+0x1ac/0x270
[  171.880562][ T7346]  do_preadv+0x1ac/0x270
[  171.880585][ T7346]  ? __pfx_do_preadv+0x10/0x10
[  171.880614][ T7346]  do_syscall_64+0x115/0x870
[  171.880634][ T7346]  ? clear_bhb_loop+0x70/0xc0
[  171.880653][ T7346]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.880668][ T7346] RIP: 0033:0x7fbfc339e0d9
[  171.880681][ T7346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  171.880695][ T7346] RSP: 002b:00007fbfc422b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  171.880710][ T7346] RAX: ffffffffffffffda RBX: 00007fbfc3625fa0 RCX: 00007fbfc339e0d9
[  171.880720][ T7346] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 0000000000000003
[  171.880729][ T7346] RBP: 00007fbfc422b090 R08: 0000000000000000 R09: 0000000000000000
[  171.880739][ T7346] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001
[  171.880747][ T7346] R13: 00007fbfc3626038 R14: 00007fbfc3625fa0 R15: 00007ffcaa5ff268
[  171.880769][ T7346]  </TASK>
[  172.023380][   T29] audit: type=1400 audit(1786407029.748:707): avc:  denied  { create } for  pid=7348 comm="syz.0.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  172.149600][   T29] audit: type=1400 audit(1786407029.788:708): avc:  denied  { write } for  pid=7352 comm="syz.2.428" name="node" dev="configfs" ino=13479 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  172.162560][ T7356] FAULT_INJECTION: forcing a failure.
[  172.162560][ T7356] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  172.172844][   T29] audit: type=1800 audit(1786407029.798:709): pid=7353 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.428" name="ipv4_address" dev="configfs" ino=20050 res=0 errno=0
[  172.206996][   T29] audit: type=1800 audit(1786407029.798:710): pid=7353 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.428" name="ipv4_port" dev="configfs" ino=20053 res=0 errno=0
[  172.225424][ T5593] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  172.228390][   T29] audit: type=1800 audit(1786407029.798:711): pid=7353 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.428" name="num" dev="configfs" ino=20055 res=0 errno=0
[  172.264451][   T29] audit: type=1800 audit(1786407029.798:712): pid=7353 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.428" name="local" dev="configfs" ino=20056 res=0 errno=0
[  172.289449][ T5593] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  172.290777][   T29] audit: type=1800 audit(1786407029.888:713): pid=7356 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.429" name="ipv4_address" dev="configfs" ino=20061 res=0 errno=0
[  172.329602][   T29] audit: type=1800 audit(1786407029.888:714): pid=7356 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.429" name="ipv4_port" dev="configfs" ino=20062 res=0 errno=0
[  172.334806][ T5593] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.355462][ T7356] CPU: 0 UID: 0 PID: 7356 Comm: syz.3.429 Not tainted syzkaller #0 PREEMPT(full) 
[  172.355482][ T7356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  172.355491][ T7356] Call Trace:
[  172.355496][ T7356]  <TASK>
[  172.355502][ T7356]  dump_stack_lvl+0x100/0x190
[  172.355526][ T7356]  should_fail_ex.cold+0x5/0xa
[  172.355547][ T7356]  _copy_from_iter+0x1f4/0x1690
[  172.355570][ T7356]  ? __lock_acquire+0x49f/0x1a40
[  172.355591][ T7356]  ? __pfx__copy_from_iter+0x10/0x10
[  172.355623][ T7356]  configfs_write_iter+0xb3/0x4e0
[  172.355646][ T7356]  vfs_write+0x6ac/0x1050
[  172.355662][ T7356]  ? __pfx_configfs_write_iter+0x10/0x10
[  172.355683][ T7356]  ? __pfx_vfs_write+0x10/0x10
[  172.355712][ T7356]  ksys_write+0x12a/0x250
[  172.355726][ T7356]  ? __pfx_ksys_write+0x10/0x10
[  172.355748][ T7356]  do_syscall_64+0x115/0x870
[  172.355767][ T7356]  ? clear_bhb_loop+0x70/0xc0
[  172.355787][ T7356]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.355803][ T7356] RIP: 0033:0x7fcdb479e0d9
[  172.355816][ T7356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  172.355830][ T7356] RSP: 002b:00007fcdb55a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  172.355844][ T7356] RAX: ffffffffffffffda RBX: 00007fcdb4a25fa0 RCX: 00007fcdb479e0d9
[  172.355854][ T7356] RDX: 0000000000000006 RSI: 0000200000000380 RDI: 0000000000000006
[  172.355863][ T7356] RBP: 00007fcdb55a4090 R08: 0000000000000000 R09: 0000000000000000
[  172.355872][ T7356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  172.355881][ T7356] R13: 00007fcdb4a26038 R14: 00007fcdb4a25fa0 R15: 00007ffd14f28e18
[  172.355903][ T7356]  </TASK>
[  172.471463][   T29] audit: type=1800 audit(1786407029.888:715): pid=7356 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.429" name="num" dev="configfs" ino=20063 res=0 errno=0
[  172.544969][ T5593] usb 2-1: config 0 descriptor??
[  172.601497][   T29] audit: type=1800 audit(1786407029.888:716): pid=7356 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.429" name="local" dev="configfs" ino=20064 res=0 errno=0
[  172.630352][ T7365] gadgetfs: bound to dummy_udc driver
[  172.782696][ T5593] usbhid 2-1:0.0: can't add hid device: -71
[  172.789118][ T5593] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  172.800294][ T5593] usb 2-1: USB disconnect, device number 30
[  172.867188][ T7369] SELinux:  invalid class
[  172.889781][ T7369] SELinux: failed to load policy
[  172.894952][ T5707] usb 1-1: new full-speed USB device number 31 using dummy_hcd
[  172.906390][    C1] gadgetfs: connected
[  172.906642][ T7365] gadgetfs: suspended from state 3
[  172.917519][   T29] audit: type=1400 audit(1786407030.578:717): avc:  denied  { load_policy } for  pid=7368 comm="syz.0.433" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  172.962889][ T7365] gadgetfs: disconnected
[  173.822842][ T5593] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  173.882175][   T24] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  174.494757][ T5593] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[  174.513370][ T5593] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  174.525100][ T5593] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.535753][ T5593] usb 2-1: config 0 descriptor??
[  174.552449][   T24] usb 5-1: Using ep0 maxpacket: 16
[  174.561532][   T24] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  174.582288][ T5593] usb 2-1: can't set config #0, error -71
[  174.591390][   T24] usb 5-1: config 0 has an invalid descriptor of length 39, skipping remainder of the config
[  174.611376][ T5593] usb 2-1: USB disconnect, device number 31
[  174.620891][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  174.642780][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024
[  174.655953][   T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[  174.672122][   T24] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  174.688805][   T24] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  174.708507][   T24] usb 5-1: Manufacturer: syz
[  174.717547][   T24] usb 5-1: config 0 descriptor??
[  174.788960][ T7391] FAULT_INJECTION: forcing a failure.
[  174.788960][ T7391] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  174.805813][ T4911] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  174.811143][ T7391] CPU: 0 UID: 0 PID: 7391 Comm: syz.2.439 Not tainted syzkaller #0 PREEMPT(full) 
[  174.811163][ T7391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  174.811172][ T7391] Call Trace:
[  174.811178][ T7391]  <TASK>
[  174.811183][ T7391]  dump_stack_lvl+0x100/0x190
[  174.811207][ T7391]  should_fail_ex.cold+0x5/0xa
[  174.811240][ T7391]  _copy_from_user+0x2e/0xd0
[  174.811262][ T7391]  copy_msghdr_from_user+0x9f/0x4c0
[  174.811280][ T7391]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  174.811306][ T7391]  ___sys_sendmsg+0x106/0x1e0
[  174.811323][ T7391]  ? __pfx____sys_sendmsg+0x10/0x10
[  174.811336][ T7391]  ? __lock_acquire+0x49f/0x1a40
[  174.811356][ T7391]  ? get_pid_task+0x106/0x250
[  174.811395][ T7391]  __sys_sendmsg+0x160/0x210
[  174.811415][ T7391]  ? __pfx___sys_sendmsg+0x10/0x10
[  174.811447][ T7391]  do_syscall_64+0x115/0x870
[  174.811467][ T7391]  ? clear_bhb_loop+0x70/0xc0
[  174.811486][ T7391]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.811501][ T7391] RIP: 0033:0x7fbfc339e0d9
[  174.811514][ T7391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  174.811529][ T7391] RSP: 002b:00007fbfc422b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  174.811544][ T7391] RAX: ffffffffffffffda RBX: 00007fbfc3625fa0 RCX: 00007fbfc339e0d9
[  174.811555][ T7391] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  174.811563][ T7391] RBP: 00007fbfc422b090 R08: 0000000000000000 R09: 0000000000000000
[  174.811572][ T7391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  174.811581][ T7391] R13: 00007fbfc3626038 R14: 00007fbfc3625fa0 R15: 00007ffcaa5ff268
[  174.811602][ T7391]  </TASK>
[  174.880365][ T7395] can0: slcan on ttyS3.
[  174.884433][ T4911] CPU: 1 UID: 0 PID: 4911 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) 
[  174.884455][ T4911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  174.884466][ T4911] Workqueue: hci2 hci_rx_work
[  174.884492][ T4911] Call Trace:
[  174.884498][ T4911]  <TASK>
[  174.884505][ T4911]  dump_stack_lvl+0x100/0x190
[  174.884530][ T4911]  sysfs_warn_dup.cold+0x1c/0x28
[  174.884553][ T4911]  sysfs_create_dir_ns+0x24b/0x2b0
[  174.884573][ T4911]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  174.884590][ T4911]  ? find_held_lock+0x2b/0x80
[  174.884605][ T4911]  ? kobject_add_internal+0x25f/0x930
[  174.884621][ T4911]  ? kobject_add_internal+0x25f/0x930
[  174.884639][ T4911]  ? do_raw_spin_unlock+0x145/0x1e0
[  174.884665][ T4911]  kobject_add_internal+0x2c8/0x930
[  174.884686][ T4911]  kobject_add+0x16a/0x1e0
[  174.884702][ T4911]  ? __pfx_kobject_add+0x10/0x10
[  174.884717][ T4911]  ? class_to_subsys+0x10f/0x150
[  174.884744][ T4911]  ? kobject_put+0xb9/0x640
[  174.884766][ T4911]  ? _raw_spin_unlock+0x28/0x50
[  174.884790][ T4911]  device_add+0x294/0x1970
[  174.884812][ T4911]  ? __pfx_dev_set_name+0x10/0x10
[  174.884829][ T4911]  ? __pfx_device_add+0x10/0x10
[  174.884851][ T4911]  ? mgmt_send_event_skb+0x2fb/0x460
[  174.884880][ T4911]  hci_conn_add_sysfs+0x1a3/0x260
[  174.884905][ T4911]  le_conn_complete_evt+0x11eb/0x1f60
[  174.884932][ T4911]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  174.884951][ T4911]  ? hci_event_packet+0x186/0xcd0
[  174.884975][ T4911]  hci_le_conn_complete_evt+0x23c/0x3a0
[  174.884995][ T4911]  ? skb_pull_data+0x15f/0x1e0
[  174.885022][ T4911]  hci_le_meta_evt+0x34a/0x5f0
[  174.885042][ T4911]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  174.885066][ T4911]  hci_event_packet+0x51c/0xcd0
[  174.885085][ T4911]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  174.885106][ T4911]  ? __pfx_hci_event_packet+0x10/0x10
[  174.885128][ T4911]  ? kcov_remote_start+0x384/0x670
[  174.885146][ T4911]  ? lockdep_hardirqs_on+0x78/0x100
[  174.885172][ T4911]  hci_rx_work+0x451/0xfc0
[  174.885195][ T4911]  process_one_work+0xa23/0x1940
[  174.885237][ T4911]  ? __pfx_process_one_work+0x10/0x10
[  174.885264][ T4911]  ? __pfx_hci_rx_work+0x10/0x10
[  174.885287][ T4911]  worker_thread+0x5ef/0xe50
[  174.885312][ T4911]  ? __pfx_worker_thread+0x10/0x10
[  174.885332][ T4911]  ? kthread+0x13a/0x450
[  174.885348][ T4911]  ? __pfx_worker_thread+0x10/0x10
[  174.885367][ T4911]  kthread+0x370/0x450
[  174.885383][ T4911]  ? __pfx_kthread+0x10/0x10
[  174.885402][ T4911]  ret_from_fork+0x72b/0xd50
[  174.885428][ T4911]  ? __pfx_ret_from_fork+0x10/0x10
[  174.885452][ T4911]  ? __switch_to+0x800/0x10f0
[  174.885469][ T4911]  ? __pfx_kthread+0x10/0x10
[  174.885486][ T4911]  ret_from_fork_asm+0x1a/0x30
[  174.885521][ T4911]  </TASK>
[  174.885560][ T4911] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  174.903816][   T29] audit: type=1400 audit(1786407032.628:718): avc:  denied  { read } for  pid=5257 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  174.908403][ T4911] Bluetooth: hci2: failed to register connection device
[  175.232138][ T5783] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  175.312127][   T24] rc_core: IR keymap rc-hauppauge not found
[  175.319627][   T24] Registered IR keymap rc-empty
[  175.330017][   T24] mceusb 5-1:0.0: Error: mce write urb status = -71
[  175.362973][   T24] mceusb 5-1:0.0: Error: mce write urb status = -71
[  175.363719][ T7396] can0 (unregistered): slcan off ttyS3.
[  175.383225][   T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  175.396926][   T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input60
[  175.417789][   T24] mceusb 5-1:0.0: Error: mce write urb status = -71
[  175.442461][   T24] mceusb 5-1:0.0: Error: mce write urb status = -71
[  175.472577][   T24] mceusb 5-1:0.0: Error: mce write urb status = -71
[  175.482104][ T5783] usb 3-1: Using ep0 maxpacket: 32
[  175.503287][   T24] mceusb 5-1:0.0: Error: mce write urb status = -71
[  175.505735][ T5783] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  175.534778][   T24] mceusb 5-1:0.0: Error: mce write urb status = -71
[  175.563790][ T5783] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  175.574065][ T5783] usb 3-1: config 0 has no interfaces?
[  175.579590][ T5783] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.610561][ T5783] usb 3-1: config 0 descriptor??
[  175.669469][   T24] mceusb 5-1:0.0: Error: mce write urb status = -71
[  175.695829][   T24] mceusb 5-1:0.0: Error: mce write urb status = -71
[  175.724018][ T7413] SELinux:  invalid class
[  175.745882][ T7413] SELinux: failed to load policy
[  175.805089][ T7417] FAULT_INJECTION: forcing a failure.
[  175.805089][ T7417] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  175.818280][ T7417] CPU: 1 UID: 0 PID: 7417 Comm: syz.1.446 Not tainted syzkaller #0 PREEMPT(full) 
[  175.818301][ T7417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  175.818312][ T7417] Call Trace:
[  175.818317][ T7417]  <TASK>
[  175.818324][ T7417]  dump_stack_lvl+0x100/0x190
[  175.818351][ T7417]  should_fail_ex.cold+0x5/0xa
[  175.818374][ T7417]  _copy_from_user+0x2e/0xd0
[  175.818399][ T7417]  packet_setsockopt+0x1a14/0x2380
[  175.818423][ T7417]  ? irqentry_exit+0x24d/0xa00
[  175.818448][ T7417]  ? __pfx_packet_setsockopt+0x10/0x10
[  175.818471][ T7417]  ? selinux_netlbl_socket_setsockopt+0x134/0x470
[  175.818500][ T7417]  ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10
[  175.818533][ T7417]  ? selinux_socket_setsockopt+0x4c/0x80
[  175.818562][ T7417]  ? selinux_socket_setsockopt+0x6a/0x80
[  175.818585][ T7417]  ? __pfx_packet_setsockopt+0x10/0x10
[  175.818610][ T7417]  do_sock_setsockopt+0xf3/0x1d0
[  175.818639][ T7417]  __sys_setsockopt+0x195/0x220
[  175.818666][ T7417]  __x64_sys_setsockopt+0xbd/0x160
[  175.818686][ T7417]  ? do_syscall_64+0x90/0x870
[  175.818707][ T7417]  ? lockdep_hardirqs_on+0x78/0x100
[  175.818728][ T7417]  do_syscall_64+0x115/0x870
[  175.818749][ T7417]  ? clear_bhb_loop+0x70/0xc0
[  175.818769][ T7417]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.818787][ T7417] RIP: 0033:0x7f11a3b9e0d9
[  175.818801][ T7417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  175.818817][ T7417] RSP: 002b:00007f11a1db4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  175.818834][ T7417] RAX: ffffffffffffffda RBX: 00007f11a3e26180 RCX: 00007f11a3b9e0d9
[  175.818845][ T7417] RDX: 0000000000000012 RSI: 0000000000000107 RDI: 0000000000000006
[  175.818855][ T7417] RBP: 00007f11a1db4090 R08: 0000000000000004 R09: 0000000000000000
[  175.818865][ T7417] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001
[  175.818876][ T7417] R13: 00007f11a3e26218 R14: 00007f11a3e26180 R15: 00007fffc57f84b8
[  175.818900][ T7417]  </TASK>
[  176.073112][   T24] mceusb 5-1:0.0: Error: mce write urb status = -71
[  176.095055][   T24] mceusb 5-1:0.0: Error: mce write urb status = -71
[  176.112249][ T5787] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  176.112432][   T24] mceusb 5-1:0.0: Error: mce write urb status = -71
[  176.138066][   T29] audit: type=1400 audit(1786407033.868:719): avc:  denied  { write } for  pid=7404 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  176.143857][   T24] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  176.170763][   T24] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  176.186967][   T24] usb 5-1: USB disconnect, device number 26
[  176.248522][   T29] audit: type=1400 audit(1786407033.978:720): avc:  denied  { write } for  pid=7426 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  176.292136][ T5787] usb 4-1: Using ep0 maxpacket: 32
[  176.298351][ T5787] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  176.318528][ T5787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.331984][ T5787] usb 4-1: config 0 descriptor??
[  176.550596][ T5787] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  176.583568][ T5787] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  176.603129][ T5787] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  176.627026][ T5787] usb 4-1: media controller created
[  176.648695][ T7446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.448'.
[  176.680299][ T5787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  176.896937][ T7458] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7458 comm=syz.0.453
[  176.950418][ T7460] xt_l2tp: v2 doesn't support IP mode
[  177.005681][ T5783] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  177.205054][ T5783] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  177.244971][ T5783] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  177.308075][ T5783] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.436162][ T5783] usb 5-1: config 0 descriptor??
[  177.502575][   T24] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  177.552413][ T7408] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  177.553340][ T5594] Bluetooth: hci0: command 0x0c1a tx timeout
[  177.565211][ T5787] az6027: usb out operation failed. (-71)
[  177.571447][ T5787] az6027: usb out operation failed. (-71)
[  177.577381][ T5787] stb0899_attach: Driver disabled by Kconfig
[  177.583572][ T5787] az6027: no front-end attached
[  177.583572][ T5787] 
[  177.590876][ T5787] az6027: usb out operation failed. (-71)
[  177.598289][ T5787] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  177.606715][ T5787] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input61
[  177.619173][ T5787] dvb-usb: schedule remote query interval to 400 msecs.
[  177.626257][ T5787] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  177.638613][ T5787] usb 4-1: USB disconnect, device number 32
[  177.652787][   T24] usb 1-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02
[  177.709747][ T5783] usbhid 5-1:0.0: can't add hid device: -71
[  177.733328][ T5783] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  177.736043][   T24] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 3
[  177.741542][ T5787] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  177.763965][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.780756][ T5783] usb 5-1: USB disconnect, device number 27
[  177.799070][ T7460] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  177.811338][   T24] ums-alauda 1-1:1.0: USB Mass Storage device detected
[  177.825315][   T24] ums-alauda 1-1:1.0: This device (0584,0008,0102 S 06 P f4) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller)
[  177.825315][   T24]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  177.861326][   T24] scsi host1: usb-storage 1-1:1.0
[  177.907197][ T7468] pim6reg: entered allmulticast mode
[  177.926363][ T7468] pim6reg: left allmulticast mode
[  177.994022][   T24] usb 3-1: USB disconnect, device number 34
[  178.028390][ T5707] usb 1-1: USB disconnect, device number 32
[  178.080841][ T7475] bond1: Unable to set up delay as MII monitoring is disabled
[  178.091276][ T7475] bond1 (unregistering): Released all slaves
[  178.222275][ T5687] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  178.252032][ T7481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.457'.
[  178.261956][ T7479] comedi: valid board names for 8255 driver are:
[  178.268468][ T5783] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  178.276272][ T7479]  8255
[  178.280066][ T7479] comedi: valid board names for vmk80xx driver are:
[  178.283027][ T7481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.457'.
[  178.286750][ T7479]  vmk80xx
[  178.296787][ T7481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.457'.
[  178.298499][ T7479] comedi: valid board names for usbduxsigma driver are:
[  178.316048][ T6115] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  178.336871][ T6115] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  178.349377][ T7479]  usbduxsigma
[  178.354499][ T6115] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  178.363450][ T7479] comedi: valid board names for usbduxfast driver are:
[  178.370540][ T6115] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  178.381190][ T7479]  usbduxfast
[  178.384664][ T7479] comedi: valid board names for usbdux driver are:
[  178.391289][ T7479]  usbdux
[  178.394525][ T7479] comedi: valid board names for ni6501 driver are:
[  178.401035][ T7479]  ni6501
[  178.404419][ T7479] comedi: valid board names for dt9812 driver are:
[  178.410933][ T7479]  dt9812
[  178.415446][ T7479] comedi: valid board names for ni_labpc_cs driver are:
[  178.422576][ T7479]  ni_labpc_cs
[  178.426044][ T7479] comedi: valid board names for ni_daq_700 driver are:
[  178.451324][ T7479]  ni_daq_700
[  178.456255][ T7479] comedi: valid board names for labpc_pci driver are:
[  178.463276][ T7479]  labpc_pci
[  178.466554][ T7479] comedi: valid board names for adl_pci9118 driver are:
[  178.473831][ T7479]  pci9118dg
[  178.477098][ T7479]  pci9118hg
[  178.480298][ T7479]  pci9118hr
[  178.483975][ T7479] comedi: valid board names for 8255_pci driver are:
[  178.490725][ T7479]  8255_pci
[  178.494210][ T7479] comedi: valid board names for s526 driver are:
[  178.501022][ T7479]  s526
[  178.514979][ T5687] usb 2-1: Using ep0 maxpacket: 16
[  178.521727][ T5687] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  178.528988][ T7479] comedi: valid board names for multiq3 driver are:
[  178.534306][ T5687] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.537885][ T7479]  multiq3
[  178.545530][ T5783] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[  178.558306][ T5687] usb 2-1: Product: syz
[  178.562506][ T5687] usb 2-1: Manufacturer: syz
[  178.567092][ T5687] usb 2-1: SerialNumber: syz
[  178.570165][ T7479] comedi: valid board names for pcmuio driver are:
[  178.573913][ T5687] usb 2-1: config 0 descriptor??
[  178.586381][ T5783] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  178.596584][ T7479]  pcmuio48
[  178.597976][ T5687] hub 2-1:0.0: bad descriptor, ignoring hub
[  178.608114][ T7479]  pcmuio96
[  178.635330][ T7479] comedi: valid board names for pcmmio driver are:
[  179.030386][   T24] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  179.269807][ T5783] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.277878][ T5687] hub 2-1:0.0: probe with driver hub failed with error -5
[  179.287155][ T5783] usb 5-1: config 0 descriptor??
[  179.355470][ T7488] syz.3.459 (7488): drop_caches: 2
[  179.402780][    T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!!
[  179.433057][    T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!!
[  179.546919][ T7468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  179.555814][ T7468] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  179.572968][ T7468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  179.581603][ T7468] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  179.591247][ T7479]  pcmmio
[  179.598740][ T7479] comedi: valid board names for pcmda12 driver are:
[  179.647531][ T5687] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  179.656333][ T6115] usb 2-1: Failed to submit usb control message: -71
[  179.657084][ T7479]  pcmda12
[  179.664268][ T6115] usb 2-1: unable to send the bmi data to the device: -71
[  179.675244][ T6115] usb 2-1: unable to get target info from device
[  179.682472][ T6115] usb 2-1: could not get target info (-71)
[  179.689489][ T6115] usb 2-1: could not probe fw (-71)
[  179.689525][ T5783] aiptek 5-1:0.0: Aiptek using 400 ms programming speed
[  179.725096][ T7479] comedi: valid board names for pcmad driver are:
[  179.752150][   T24] usb 3-1: Using ep0 maxpacket: 32
[  179.753573][ T5783] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input62
[  179.757826][   T24] usb 3-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68
[  179.777455][ T7479]  pcmad12
[  179.785340][ T5687] usb 2-1: USB disconnect, device number 32
[  179.796625][ T7498] FAULT_INJECTION: forcing a failure.
[  179.796625][ T7498] name failslab, interval 1, probability 0, space 0, times 0
[  179.799194][ T7479]  pcmad16
[  179.809500][ T7498] CPU: 1 UID: 0 PID: 7498 Comm: syz.4.462 Not tainted syzkaller #0 PREEMPT(full) 
[  179.809520][ T7498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  179.809529][ T7498] Call Trace:
[  179.809534][ T7498]  <TASK>
[  179.809540][ T7498]  dump_stack_lvl+0x100/0x190
[  179.809566][ T7498]  should_fail_ex.cold+0x5/0xa
[  179.809587][ T7498]  should_failslab+0xc2/0x120
[  179.809608][ T7498]  kmem_cache_alloc_noprof+0x91/0x6a0
[  179.809628][ T7498]  ? do_getname+0x35/0x390
[  179.809652][ T7498]  do_getname+0x35/0x390
[  179.809673][ T7498]  do_sys_openat2+0xc7/0x1e0
[  179.809693][ T7498]  ? __pfx_do_sys_openat2+0x10/0x10
[  179.809714][ T7498]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  179.809737][ T7498]  ? __fget_files+0x21f/0x3d0
[  179.809757][ T7498]  __x64_sys_openat+0x12d/0x210
[  179.809777][ T7498]  ? __pfx___x64_sys_openat+0x10/0x10
[  179.809796][ T7498]  ? ksys_write+0x1ac/0x250
[  179.809817][ T7498]  do_syscall_64+0x115/0x870
[  179.809836][ T7498]  ? clear_bhb_loop+0x70/0xc0
[  179.809855][ T7498]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.809870][ T7498] RIP: 0033:0x7f718575e90e
[  179.809884][ T7498] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  179.809898][ T7498] RSP: 002b:00007f718670ab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  179.809913][ T7498] RAX: ffffffffffffffda RBX: 00007f718670b6c0 RCX: 00007f718575e90e
[  179.809923][ T7498] RDX: 0000000000008002 RSI: 00007f718670ac00 RDI: ffffffffffffff9c
[  179.809932][ T7498] RBP: 00007f718670ac00 R08: 0000000000000000 R09: 0000000000000000
[  179.809941][ T7498] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  179.809950][ T7498] R13: 00007f7185a26038 R14: 00007f7185a25fa0 R15: 00007ffe9d1e1378
[  179.809971][ T7498]  </TASK>
[  179.833780][   T29] kauditd_printk_skb: 3 callbacks suppressed
[  179.833808][   T29] audit: type=1400 audit(1786407037.528:724): avc:  denied  { append } for  pid=7497 comm="syz.4.462" name="sg0" dev="devtmpfs" ino=779 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  179.859054][ T7479] comedi: valid board names for ni_labpc driver are:
[  179.865597][   T24] usb 3-1: config 0 has an invalid interface number: 89 but max is 0
[  180.057043][ T7479]  lab-pc-1200
[  180.066295][ T7479]  lab-pc-1200ai
[  180.074943][ T7479]  lab-pc+
[  180.081003][ T7479] comedi: valid board names for atmio16 driver are:
[  180.092112][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  180.093252][ T7479]  atmio16
[  180.105616][ T7479]  atmio16d
[  180.108739][ T7479] comedi: valid board names for ni_at_ao driver are:
[  180.115555][ T7479]  at-ao-6
[  180.115551][ T5787] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  180.118851][ T7479]  at-ao-10
[  180.129470][ T7479] comedi: valid board names for ni_at_a2150 driver are:
[  180.148236][ T7479]  ni_at_a2150
[  180.170781][ T7479] comedi: valid board names for adq12b driver are:
[  180.192370][ T7479]  adq12b
[  180.198316][ T7479] comedi: valid board names for mpc624 driver are:
[  180.202934][ T5783] usb 5-1: USB disconnect, device number 28
[  180.204837][    C0] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[  180.226562][   T24] usb 3-1: config 0 has no interface number 0
[  180.232804][   T24] usb 3-1: config 0 interface 89 altsetting 225 bulk endpoint 0x82 has invalid maxpacket 6
[  180.243694][   T24] usb 3-1: config 0 interface 89 has no altsetting 0
[  180.258295][ T7479]  mpc624
[  180.261257][ T7479] comedi: valid board names for c6xdigio driver are:
[  180.271314][ T7479]  c6xdigio
[  180.279259][ T7479] comedi: valid board names for aio_iiro_16 driver are:
[  180.319682][ T7479]  aio_iiro_16
[  180.335516][ T7479] comedi: valid board names for aio_aio12_8 driver are:
[  180.339816][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.353077][ T7479]  aio_aio12_8
[  180.356580][ T7479]  aio_ai12_8
[  180.360909][ T7479]  aio_ao12_4
[  180.364850][ T7479] comedi: valid board names for fl512 driver are:
[  180.371282][ T7479]  fl512
[  180.374407][ T7479] comedi: valid board names for dmm32at driver are:
[  180.381041][ T7479]  dmm32at
[  180.387737][ T5787] usb 1-1: Using ep0 maxpacket: 16
[  180.395478][ T7479] comedi: valid board names for dt282x driver are:
[  180.404768][ T7479]  dt2821
[  180.407797][ T7479]  dt2821-f
[  180.424727][ T5787] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  180.465970][   T24] usb 3-1: Product: syz
[  180.470186][   T24] usb 3-1: Manufacturer: syz
[  180.476858][   T24] usb 3-1: SerialNumber: syz
[  180.485072][   T24] usb 3-1: config 0 descriptor??
[  180.487658][ T7479]  dt2821-g
[  180.490653][ T7486] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  180.500357][ T7479]  dt2823
[  180.501483][   T24] hub 3-1:0.89: bad descriptor, ignoring hub
[  180.504403][ T5787] usb 1-1: config 0 has an invalid descriptor of length 39, skipping remainder of the config
[  180.509288][   T24] hub 3-1:0.89: probe with driver hub failed with error -5
[  180.510030][   T24] option 3-1:0.89: GSM modem (1-port) converter detected
[  180.537087][ T7479]  dt2824-pgh
[  180.540431][ T7479]  dt2824-pgl
[  180.548948][ T7479]  dt2825
[  180.620778][ T7479]  dt2827
[  180.630177][ T7479]  dt2828
[  180.637505][ T7479]  dt2829
[  180.649497][ T7479]  dt21-ez
[  181.003979][ T5787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  181.014884][ T5787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024
[  181.026227][ T5787] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[  181.028255][   T24] usb 3-1: GSM modem (1-port) converter now attached to ttyUSB0
[  181.037207][ T5787] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  181.038073][ T5787] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  181.066642][ T7479]  dt23-ez
[  181.079828][ T7479]  dt24-ez
[  181.086576][ T7479]  dt24-ez-pgl
[  181.093981][ T7479] comedi: valid board names for dt2817 driver are:
[  181.105938][ T7479]  dt2817
[  181.112093][ T7479] comedi: valid board names for dt2815 driver are:
[  181.129889][ T5787] usb 1-1: Manufacturer: syz
[  181.142159][ T7479]  dt2815
[  181.161639][ T7479] comedi: valid board names for dt2814 driver are:
[  181.169978][ T7479]  dt2814
[  181.183113][ T7479] comedi: valid board names for dt2811 driver are:
[  181.207343][ T7479]  dt2811-pgh
[  181.217045][ T7479]  dt2811-pgl
[  181.240313][ T5787] usb 1-1: config 0 descriptor??
[  181.252152][ T7479] comedi: valid board names for dt2801 driver are:
[  181.286777][ T7479]  dt2801
[  181.305917][ T7479] comedi: valid board names for das6402 driver are:
[  181.329328][ T7479]  das6402-12
[  181.335394][ T7479]  das6402-16
[  181.341736][ T7479] comedi: valid board names for das1800 driver are:
[  181.348515][ T7479]  das-1701st
[  181.354426][ T7479]  das-1701st-da
[  181.357987][ T7479]  das-1702st
[  181.361299][ T7479]  das-1702st-da
[  181.364918][ T7479]  das-1702hr
[  181.368338][ T7479]  das-1702hr-da
[  181.371926][ T7479]  das-1701ao
[  181.375801][ T7479]  das-1702ao
[  181.379138][ T7479]  das-1801st
[  181.383683][ T7479]  das-1801st-da
[  181.387845][ T7479]  das-1802st
[  181.397188][ T7479]  das-1802st-da
[  181.401645][ T7479]  das-1802hr
[  181.405029][ T7479]  das-1802hr-da
[  181.409011][ T7479]  das-1801hc
[  181.414487][ T7479]  das-1802hc
[  181.418185][ T7479]  das-1801ao
[  181.421516][ T7479]  das-1802ao
[  181.432974][ T7479] comedi: valid board names for das800 driver are:
[  181.439493][ T7479]  das-800
[  181.443369][ T7479]  cio-das800
[  181.446694][ T7479]  das-801
[  181.453332][ T7479]  cio-das801
[  181.460735][ T7479]  das-802
[  181.464201][ T7479]  cio-das802
[  181.467509][ T7479]  cio-das802/16
[  181.471124][ T7479] comedi: valid board names for isa-das08 driver are:
[  181.477923][ T7479]  isa-das08
[  181.481215][ T7479]  das08-pgm
[  181.484660][ T7479]  das08-pgh
[  181.488217][ T7479]  das08-pgl
[  181.491430][ T7479]  das08-aoh
[  181.494702][ T7479]  das08-aol
[  181.497911][ T7479]  das08-aom
[  181.501099][ T7479]  das08/jr-ao
[  181.504678][ T5787] rc_core: IR keymap rc-hauppauge not found
[  181.504777][ T7479]  das08jr-16-ao
[  181.510948][ T5787] Registered IR keymap rc-empty
[  181.514435][ T7479]  pc104-das08
[  181.519260][ T5787] mceusb 1-1:0.0: Error: mce write urb status = -71
[  181.525417][ T7479]  das08jr/16
[  181.533091][ T7479] comedi: valid board names for das16m1 driver are:
[  181.539721][ T7479]  das16m1
[  181.543021][ T7479] comedi: valid board names for dac02 driver are:
[  181.549450][ T5787] mceusb 1-1:0.0: Error: mce write urb status = -71
[  181.549480][ T7479]  dac02
[  181.558994][ T7479] comedi: valid board names for rti802 driver are:
[  181.565927][ T5783] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  181.567693][ T7479]  rti802
[  181.577018][ T7479] comedi: valid board names for rti800 driver are:
[  181.581341][ T5787] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  181.583573][ T7479]  rti800
[  181.599073][ T7479]  rti815
[  181.599675][ T5787] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input63
[  181.602017][ T7479] comedi: valid board names for pcm3724 driver are:
[  181.616666][ T5787] mceusb 1-1:0.0: Error: mce write urb status = -71
[  181.620791][ T7479]  pcm3724
[  181.620800][ T7479] comedi: valid board names for pcl818 driver are:
[  181.637517][   T24] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  181.639816][ T7479]  pcl818l
[  181.648402][ T7479]  pcl818h
[  181.651547][ T5787] mceusb 1-1:0.0: Error: mce write urb status = -71
[  181.651553][ T7479]  pcl818hd
[  181.651563][ T7479]  pcl818hg
[  181.651570][ T7479]  pcl818
[  181.667399][ T7479]  pcl718
[  181.670315][ T7479]  pcm3718
[  181.673532][ T7479] comedi: valid board names for pcl816 driver are:
[  181.680054][ T7479]  pcl816
[  181.683064][ T7479]  pcl814b
[  181.686093][ T7479] comedi: valid board names for pcl812 driver are:
[  181.690859][ T5787] mceusb 1-1:0.0: Error: mce write urb status = -71
[  181.693991][ T7479]  pcl812
[  181.702293][ T7479]  pcl812pg
[  181.705400][ T7479]  acl8112pg
[  181.708583][ T7479]  acl8112dg
[  181.711757][ T7479]  acl8112hg
[  181.715187][ T7479]  a821pgl
[  181.718261][ T7479]  a821pglnda
[  181.721652][ T7479]  a821pgh
[  181.724744][ T7479]  a822pgl
[  181.727760][ T7479]  a822pgh
[  181.730758][ T7479]  a823pgl
[  181.732212][ T5687] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  181.733792][ T7479]  a823pgh
[  181.733800][ T7479]  pcl813
[  181.733807][ T7479]  pcl813b
[  181.733813][ T7479]  acl8113
[  181.733819][ T7479]  iso813
[  181.733826][ T7479]  acl8216
[  181.733832][ T7479]  a826pg
[  181.733838][ T7479] comedi: valid board names for pcl730 driver are:
[  181.733848][ T7479]  pcl730
[  181.742528][ T5787] mceusb 1-1:0.0: Error: mce write urb status = -71
[  181.744522][ T7479]  iso730
[  181.762108][ T5783] usb 5-1: Using ep0 maxpacket: 8
[  181.762444][ T7479]  acl7130
[  181.769327][ T5783] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  181.771762][ T7479]  pcm3730
[  181.771771][ T7479]  pcl725
[  181.771778][ T7479]  p8r8dio
[  181.771785][ T7479]  acl7225b
[  181.771791][ T7479]  p16r16dio
[  181.771798][ T7479]  pcl733
[  181.771804][ T7479]  pcl734
[  181.771811][ T7479]  opmm-1616-xt
[  181.771818][ T7479]  pearl-mm-p
[  181.771825][ T7479]  ir104-pbf
[  181.779309][ T5787] mceusb 1-1:0.0: Error: mce write urb status = -71
[  181.781578][ T7479] comedi: valid board names for pcl726 driver are:
[  181.787672][ T5783] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  181.789686][ T7479]  pcl726
[  181.800448][ T5783] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  181.802211][   T24] usb 2-1: Using ep0 maxpacket: 32
[  181.811336][ T5783] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  181.811404][ T5787] mceusb 1-1:0.0: Error: mce write urb status = -71
[  181.814276][ T7479]  pcl727
[  181.830161][ T7479]  pcl728
[  181.851351][ T5783] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  181.851378][ T5783] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  181.854406][   T24] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  181.869254][ T5787] mceusb 1-1:0.0: Error: mce write urb status = -71
[  181.879162][ T7479]  acl6126
[  181.885904][ T5783] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.888680][ T7479]  acl6128
[  181.926016][ T5687] usb 4-1: Using ep0 maxpacket: 8
[  181.932577][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.936988][ T7479] comedi: valid board names for pcl724 driver are:
[  181.945897][   T24] usb 2-1: config 0 descriptor??
[  181.949874][ T5787] mceusb 1-1:0.0: Error: mce write urb status = -71
[  181.958585][ T7479]  pcl724
[  181.964814][ T5687] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  181.971398][ T7479]  pcl722
[  181.992935][ T7479]  pcl731
[  181.995933][ T7479]  acl7122
[  182.000105][ T7479]  acl7124
[  182.003578][ T7479]  pet48dio
[  182.003599][ T5687] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  182.006765][ T7479]  pcmio48
[  182.014887][ T5687] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  182.018322][ T7479]  onyx-mm-dio
[  182.028070][ T5687] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  182.031444][ T7479] comedi: valid board names for pcl711 driver are:
[  182.044845][ T5787] mceusb 1-1:0.0: Error: mce write urb status = -71
[  182.048322][ T7479]  pcl711
[  182.054327][ T5687] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  182.057279][ T7479]  pcl711b
[  182.066942][ T5687] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  182.066981][ T5687] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.090931][ T7479]  acl8112hg
[  182.092452][ T5787] mceusb 1-1:0.0: Error: mce write urb status = -71
[  182.094976][ T7479]  acl8112dg
[  182.107992][ T7479] comedi: valid board names for amplc_pc263 driver are:
[  182.115953][ T7479]  pc263
[  182.118832][ T7479] comedi: valid board names for amplc_pc236 driver are:
[  182.125965][ T7479]  pc36at
[  182.128912][ T7479] comedi: valid board names for amplc_dio200 driver are:
[  182.134303][ T5787] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  182.136136][ T7479]  pc212e
[  182.147567][ T5787] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  182.148042][ T7479]  pc214e
[  182.160722][ T5787] usb 1-1: USB disconnect, device number 33
[  182.167284][ T7479]  pc215e
[  182.170287][ T7479]  pc218e
[  182.173404][ T7479]  pc272e
[  182.178102][   T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  182.186087][ T7479] comedi: valid board names for comedi_parport driver are:
[  182.196113][ T7479]  comedi_parport
[  182.196573][   T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  182.199774][ T7479] comedi: valid board names for comedi_test driver are:
[  182.219324][ T7479]  comedi_test
[  182.222767][ T7479] comedi: valid board names for comedi_bond driver are:
[  182.229799][ T7479]  comedi_bond
[  182.237835][   T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  182.245720][   T24] usb 2-1: media controller created
[  182.259059][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  182.367279][   T29] audit: type=1400 audit(1786407040.098:725): avc:  denied  { append } for  pid=7523 comm="syz.2.470" name="loop6" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  182.368616][ T7524] loop6: detected capacity change from 0 to 524287999
[  182.442638][ T5787] usb 3-1: USB disconnect, device number 35
[  182.457131][ T5787] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0
[  182.471464][ T5787] option 3-1:0.89: device disconnected
[  182.660195][ T7531] usbtmc 5-1:16.0: simple usb_control_msg returned 0
[  182.829178][ T7532] FAULT_INJECTION: forcing a failure.
[  182.829178][ T7532] name failslab, interval 1, probability 0, space 0, times 0
[  182.841906][ T7532] CPU: 1 UID: 0 PID: 7532 Comm: syz.3.469 Not tainted syzkaller #0 PREEMPT(full) 
[  182.841921][ T7532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  182.841927][ T7532] Call Trace:
[  182.841931][ T7532]  <TASK>
[  182.841936][ T7532]  dump_stack_lvl+0x100/0x190
[  182.841953][ T7532]  should_fail_ex.cold+0x5/0xa
[  182.841969][ T7532]  should_failslab+0xc2/0x120
[  182.841987][ T7532]  __kmalloc_noprof+0xfc/0x820
[  182.842000][ T7532]  ? rcu_is_watching+0x12/0xc0
[  182.842018][ T7532]  ? tomoyo_realpath_from_path+0xb6/0x690
[  182.842033][ T7532]  tomoyo_realpath_from_path+0xb6/0x690
[  182.842048][ T7532]  tomoyo_path_number_perm+0x23c/0x580
[  182.842068][ T7532]  ? tomoyo_path_number_perm+0x22e/0x580
[  182.842090][ T7532]  ? __lock_acquire+0x414/0x1a40
[  182.842113][ T7532]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  182.842138][ T7532]  ? ktime_get+0x9f/0x320
[  182.842157][ T7532]  ? ktime_get+0x1a4/0x320
[  182.842198][ T7532]  ? find_held_lock+0x2b/0x80
[  182.842214][ T7532]  ? __fget_files+0x215/0x3d0
[  182.842232][ T7532]  ? hook_file_ioctl_common+0x140/0x440
[  182.842251][ T7532]  ? __fget_files+0x215/0x3d0
[  182.842273][ T7532]  ? __fget_files+0x21f/0x3d0
[  182.842296][ T7532]  security_file_ioctl+0xd3/0x230
[  182.842323][ T7532]  __x64_sys_ioctl+0xb7/0x210
[  182.842351][ T7532]  do_syscall_64+0x115/0x870
[  182.842373][ T7532]  ? clear_bhb_loop+0x70/0xc0
[  182.842396][ T7532]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.842413][ T7532] RIP: 0033:0x7fcdb479e0d9
[  182.842428][ T7532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  182.842445][ T7532] RSP: 002b:00007fcdb5583028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  182.842462][ T7532] RAX: ffffffffffffffda RBX: 00007fcdb4a26090 RCX: 00007fcdb479e0d9
[  182.842473][ T7532] RDX: 0000000000000000 RSI: 0000000000005b15 RDI: 0000000000000004
[  182.842483][ T7532] RBP: 00007fcdb5583090 R08: 0000000000000000 R09: 0000000000000000
[  182.842493][ T7532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  182.842503][ T7532] R13: 00007fcdb4a26128 R14: 00007fcdb4a26090 R15: 00007ffd14f28e18
[  182.842527][ T7532]  </TASK>
[  182.902200][ T5687] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  182.904473][ T5593] usb 5-1: USB disconnect, device number 29
[  182.908056][ T5787] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  182.927474][ T7532] ERROR: Out of memory at tomoyo_realpath_from_path.
[  183.092712][ T5787] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  183.104480][ T5687] usb 3-1: unable to get BOS descriptor or descriptor too short
[  183.113195][ T5687] usb 3-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95
[  183.122776][ T5787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  183.135124][ T5687] usb 3-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config
[  183.147093][ T5787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.155533][ T5687] usb 3-1: config 66 has 1 interface, different from the descriptor's value: 2
[  183.165572][ T5687] usb 3-1: config 66 interface 0 altsetting 16 endpoint 0x7 has invalid wMaxPacketSize 0
[  183.176152][ T5787] usb 1-1: config 0 descriptor??
[  183.181314][ T5687] usb 3-1: config 66 interface 0 has no altsetting 0
[  183.192218][ T5687] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.201378][ T5687] usb 3-1: Product: syz
[  183.205649][ T5687] usb 3-1: Manufacturer: syz
[  183.210345][ T5687] usb 3-1: SerialNumber: syz
[  183.391652][ T5787] usbhid 1-1:0.0: can't add hid device: -71
[  183.392973][ T7515] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  183.398795][ T5594] Bluetooth: hci0: command 0x0c1a tx timeout
[  183.413473][   T24] az6027: usb out operation failed. (-71)
[  183.414312][ T5787] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  183.424516][   T24] az6027: usb out operation failed. (-71)
[  183.429724][ T5787] usb 1-1: USB disconnect, device number 34
[  183.453434][ T5687] ati_remote2 3-1:66.0: ati_remote2_probe(): need 2 interfaces, found 1
[  183.461776][   T24] stb0899_attach: Driver disabled by Kconfig
[  183.461790][   T24] az6027: no front-end attached
[  183.461790][   T24] 
[  183.462283][   T24] az6027: usb out operation failed. (-71)
[  183.473410][ T5687] usb 3-1: USB disconnect, device number 36
[  183.519380][   T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  183.540370][   T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input64
[  183.559084][   T24] dvb-usb: schedule remote query interval to 400 msecs.
[  183.567081][   T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  183.589129][   T24] usb 2-1: USB disconnect, device number 33
[  183.655484][   T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  183.782261][ T5708] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  183.944378][ T5708] usb 5-1: Using ep0 maxpacket: 32
[  183.950695][ T5708] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  183.968259][ T5787] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  183.977475][ T5708] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[  183.986035][ T5708] usb 5-1: config 0 has no interface number 0
[  183.992515][ T5708] usb 5-1: config 0 interface 12 has no altsetting 0
[  184.000909][ T5708] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.004085][ T7536] veth0: entered promiscuous mode
[  184.009187][ T5708] usb 5-1: Product: syz
[  184.018296][ T5708] usb 5-1: Manufacturer: syz
[  184.019863][ T7536] veth0: left promiscuous mode
[  184.024326][ T5708] usb 5-1: SerialNumber: syz
[  184.037503][ T5708] usb 5-1: config 0 descriptor??
[  184.132707][ T5787] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[  184.144198][ T5787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  184.156627][ T5787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.179087][ T5787] usb 1-1: config 0 descriptor??
[  184.347746][ T7548] veth0: entered promiscuous mode
[  184.356252][ T7548] FAULT_INJECTION: forcing a failure.
[  184.356252][ T7548] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  184.370526][ T7548] CPU: 1 UID: 0 PID: 7548 Comm: syz.1.479 Not tainted syzkaller #0 PREEMPT(full) 
[  184.370548][ T7548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  184.370558][ T7548] Call Trace:
[  184.370564][ T7548]  <TASK>
[  184.370570][ T7548]  dump_stack_lvl+0x100/0x190
[  184.370597][ T7548]  should_fail_ex.cold+0x5/0xa
[  184.370621][ T7548]  _copy_from_user+0x2e/0xd0
[  184.370647][ T7548]  move_addr_to_kernel+0x65/0x170
[  184.370674][ T7548]  __sys_sendto+0x1b8/0x4e0
[  184.370695][ T7548]  ? __pfx___sys_sendto+0x10/0x10
[  184.370723][ T7548]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  184.370758][ T7548]  ? ksys_write+0x1ac/0x250
[  184.370778][ T7548]  ? __pfx_ksys_write+0x10/0x10
[  184.370793][ T7548]  ? arch_syscall_is_vdso_sigreturn+0xb6/0x200
[  184.370825][ T7548]  __x64_sys_sendto+0xe0/0x1c0
[  184.370845][ T7548]  ? do_syscall_64+0x90/0x870
[  184.370868][ T7548]  ? lockdep_hardirqs_on+0x78/0x100
[  184.370890][ T7548]  do_syscall_64+0x115/0x870
[  184.370912][ T7548]  ? clear_bhb_loop+0x70/0xc0
[  184.370934][ T7548]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.370953][ T7548] RIP: 0033:0x7f11a3b9e0d9
[  184.370967][ T7548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  184.370984][ T7548] RSP: 002b:00007f11a1df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  184.371001][ T7548] RAX: ffffffffffffffda RBX: 00007f11a3e25fa0 RCX: 00007f11a3b9e0d9
[  184.371012][ T7548] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000006
[  184.371023][ T7548] RBP: 00007f11a1df6090 R08: 0000200000000700 R09: 0000000000000010
[  184.371033][ T7548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  184.371043][ T7548] R13: 00007f11a3e26038 R14: 00007f11a3e25fa0 R15: 00007fffc57f84b8
[  184.371068][ T7548]  </TASK>
[  184.371282][ T7548] veth0: left promiscuous mode
[  184.473727][ T5723] usb 4-1: USB disconnect, device number 33
[  184.663289][ T5708] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  184.730989][ T5708] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71
[  184.740797][ T5708] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  184.752329][ T5708] f81534 5-1:0.12: probe with driver f81534 failed with error -71
[  184.795736][ T5708] usb 5-1: USB disconnect, device number 30
[  185.012148][ T5797] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  185.052625][ T5787] aiptek 1-1:0.0: Aiptek using 400 ms programming speed
[  185.060637][ T5787] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input65
[  185.162689][ T5797] usb 3-1: Using ep0 maxpacket: 16
[  185.168274][ T5797] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  185.179344][ T5797] usb 3-1: config 0 has an invalid descriptor of length 39, skipping remainder of the config
[  185.189644][ T5797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  185.201890][ T5797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024
[  185.212903][ T5797] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[  185.223210][ T5797] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  185.237905][ T5797] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  185.246251][ T5797] usb 3-1: Manufacturer: syz
[  185.258553][ T5797] usb 3-1: config 0 descriptor??
[  185.363768][ T5787] usb 1-1: USB disconnect, device number 35
[  185.363802][    C0] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[  185.574303][ T5797] rc_core: IR keymap rc-hauppauge not found
[  185.586716][ T5797] Registered IR keymap rc-empty
[  185.594374][ T5797] mceusb 3-1:0.0: Error: mce write urb status = -71
[  185.613959][ T5797] mceusb 3-1:0.0: Error: mce write urb status = -71
[  185.637338][ T7574] FAULT_INJECTION: forcing a failure.
[  185.637338][ T7574] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  185.644454][ T5797] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  185.663701][ T5797] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input66
[  185.664486][ T7574] CPU: 0 UID: 0 PID: 7574 Comm: syz.1.487 Not tainted syzkaller #0 PREEMPT(full) 
[  185.664505][ T7574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  185.664515][ T7574] Call Trace:
[  185.664520][ T7574]  <TASK>
[  185.664525][ T7574]  dump_stack_lvl+0x100/0x190
[  185.664549][ T7574]  should_fail_ex.cold+0x5/0xa
[  185.664570][ T7574]  _copy_from_user+0x2e/0xd0
[  185.664593][ T7574]  __sys_bpf+0x2f5/0x4e80
[  185.664616][ T7574]  ? __pfx___sys_bpf+0x10/0x10
[  185.664637][ T7574]  ? find_held_lock+0x2b/0x80
[  185.664652][ T7574]  ? get_pid_task+0xfc/0x250
[  185.664666][ T7574]  ? get_pid_task+0xfc/0x250
[  185.664688][ T7574]  ? find_held_lock+0x2b/0x80
[  185.664707][ T7574]  ? rcu_read_lock_any_held+0x6a/0xa0
[  185.664723][ T7574]  ? find_held_lock+0x2b/0x80
[  185.664736][ T7574]  ? ksys_write+0x190/0x250
[  185.664751][ T7574]  ? ksys_write+0x190/0x250
[  185.664781][ T7574]  ? fput+0x79/0x100
[  185.664803][ T7574]  ? __x64_sys_bpf+0xce/0x140
[  185.664818][ T7574]  __x64_sys_bpf+0xce/0x140
[  185.664835][ T7574]  ? do_syscall_64+0x90/0x870
[  185.664856][ T7574]  do_syscall_64+0x115/0x870
[  185.664875][ T7574]  ? clear_bhb_loop+0x70/0xc0
[  185.664894][ T7574]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.664909][ T7574] RIP: 0033:0x7f11a3b9e0d9
[  185.664922][ T7574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  185.664936][ T7574] RSP: 002b:00007f11a1df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  185.664951][ T7574] RAX: ffffffffffffffda RBX: 00007f11a3e25fa0 RCX: 00007f11a3b9e0d9
[  185.664961][ T7574] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005
[  185.664970][ T7574] RBP: 00007f11a1df6090 R08: 0000000000000000 R09: 0000000000000000
[  185.664979][ T7574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  185.664988][ T7574] R13: 00007f11a3e26038 R14: 00007f11a3e25fa0 R15: 00007fffc57f84b8
[  185.665009][ T7574]  </TASK>
[  185.890770][ T5797] mceusb 3-1:0.0: Error: mce write urb status = -71
[  185.912338][ T5797] mceusb 3-1:0.0: Error: mce write urb status = -71
[  185.932184][ T5593] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  185.941340][ T5797] mceusb 3-1:0.0: Error: mce write urb status = -71
[  185.972324][ T5797] mceusb 3-1:0.0: Error: mce write urb status = -71
[  186.013874][ T5797] mceusb 3-1:0.0: Error: mce write urb status = -71
[  186.042595][ T5797] mceusb 3-1:0.0: Error: mce write urb status = -71
[  186.518341][ T5797] mceusb 3-1:0.0: Error: mce write urb status = -71
[  186.532148][ T5593] usb 5-1: Using ep0 maxpacket: 32
[  186.538067][ T5593] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  186.547637][ T5797] mceusb 3-1:0.0: Error: mce write urb status = -71
[  186.555217][ T5593] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.565853][ T5593] usb 5-1: config 0 descriptor??
[  186.572804][ T5797] mceusb 3-1:0.0: Error: mce write urb status = -71
[  186.593764][ T5797] mceusb 3-1:0.0: Error: mce write urb status = -71
[  186.628179][ T5797] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  186.637356][   T24] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  186.721148][ T5797] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  187.226518][ T5593] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  187.235831][ T5593] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  187.248567][ T5797] usb 3-1: USB disconnect, device number 37
[  187.267024][ T5593] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  187.303963][ T5593] usb 5-1: media controller created
[  187.312242][   T24] usb 1-1: Using ep0 maxpacket: 16
[  187.318048][   T24] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  187.367377][ T5593] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  187.384727][   T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  187.419462][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  187.461948][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024
[  187.482302][ T5594] Bluetooth: hci0: command 0x0c1a tx timeout
[  187.498279][ T7563] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  187.514194][   T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[  187.527832][ T5593] az6027: usb out operation failed. (-71)
[  187.563598][ T5593] az6027: usb out operation failed. (-71)
[  187.583700][   T24] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  187.597088][ T5593] stb0899_attach: Driver disabled by Kconfig
[  187.613057][ T5593] az6027: no front-end attached
[  187.613057][ T5593] 
[  187.630804][ T5593] az6027: usb out operation failed. (-71)
[  187.641015][   T24] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  187.660538][ T5593] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  187.673643][   T24] usb 1-1: Manufacturer: syz
[  187.682750][ T5593] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input67
[  187.703486][   T24] usb 1-1: config 0 descriptor??
[  187.720831][ T5593] dvb-usb: schedule remote query interval to 400 msecs.
[  187.739326][ T5593] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  187.775255][ T5593] usb 5-1: USB disconnect, device number 31
[  187.879593][ T5593] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  187.992108][   T24] rc_core: IR keymap rc-hauppauge not found
[  187.999616][   T24] Registered IR keymap rc-empty
[  188.013855][   T24] mceusb 1-1:0.0: Error: mce write urb status = -71
[  188.035625][   T24] mceusb 1-1:0.0: Error: mce write urb status = -71
[  188.064201][   T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  188.083004][   T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input68
[  188.112578][   T24] mceusb 1-1:0.0: Error: mce write urb status = -71
[  188.133082][   T24] mceusb 1-1:0.0: Error: mce write urb status = -71
[  188.163116][   T24] mceusb 1-1:0.0: Error: mce write urb status = -71
[  188.192340][   T24] mceusb 1-1:0.0: Error: mce write urb status = -71
[  188.212704][   T24] mceusb 1-1:0.0: Error: mce write urb status = -71
[  188.232706][   T24] mceusb 1-1:0.0: Error: mce write urb status = -71
[  188.252432][   T24] mceusb 1-1:0.0: Error: mce write urb status = -71
[  188.273430][   T24] mceusb 1-1:0.0: Error: mce write urb status = -71
[  188.292619][   T24] mceusb 1-1:0.0: Error: mce write urb status = -71
[  188.312267][   T24] mceusb 1-1:0.0: Error: mce write urb status = -71
[  188.334012][   T24] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  188.343138][   T24] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  188.413646][   T24] usb 1-1: USB disconnect, device number 36
[  188.676612][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  188.686185][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  189.257556][ T7625] gadgetfs: bound to dummy_udc driver
[  189.274273][ T5708] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  189.302981][ T7627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  189.312999][ T7627] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  189.442131][ T5708] usb 4-1: Using ep0 maxpacket: 16
[  189.455841][ T5708] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  189.467020][ T5708] usb 4-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config
[  189.480152][ T5708] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  189.481134][ T7625] gadgetfs: suspended from state 2
[  189.491155][ T5708] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024
[  189.503587][   T24] usb 1-1: new full-speed USB device number 37 using dummy_hcd
[  189.510368][ T5708] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[  189.528702][ T5708] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  189.545787][ T5708] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  189.554902][ T5708] usb 4-1: Manufacturer: syz
[  189.565364][ T5708] usb 4-1: config 0 descriptor??
[  189.758985][ T7639] FAULT_INJECTION: forcing a failure.
[  189.758985][ T7639] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  189.772054][ T7639] CPU: 0 UID: 0 PID: 7639 Comm: syz.1.509 Not tainted syzkaller #0 PREEMPT(full) 
[  189.772075][ T7639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  189.772086][ T7639] Call Trace:
[  189.772099][ T7639]  <TASK>
[  189.772106][ T7639]  dump_stack_lvl+0x100/0x190
[  189.772132][ T7639]  should_fail_ex.cold+0x5/0xa
[  189.772150][ T7639]  _copy_from_user+0x2e/0xd0
[  189.772166][ T7639]  __x64_sys_mq_open+0x129/0x1e0
[  189.772181][ T7639]  ? __pfx___x64_sys_mq_open+0x10/0x10
[  189.772195][ T7639]  ? fput+0x79/0x100
[  189.772215][ T7639]  do_syscall_64+0x115/0x870
[  189.772231][ T7639]  ? clear_bhb_loop+0x70/0xc0
[  189.772245][ T7639]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.772256][ T7639] RIP: 0033:0x7f11a3b9e0d9
[  189.772266][ T7639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  189.772277][ T7639] RSP: 002b:00007f11a1df6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0
[  189.772288][ T7639] RAX: ffffffffffffffda RBX: 00007f11a3e25fa0 RCX: 00007f11a3b9e0d9
[  189.772295][ T7639] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 0000200000019500
[  189.772301][ T7639] RBP: 00007f11a1df6090 R08: 0000000000000000 R09: 0000000000000000
[  189.772308][ T7639] R10: 0000200000019540 R11: 0000000000000246 R12: 0000000000000001
[  189.772314][ T7639] R13: 00007f11a3e26038 R14: 00007f11a3e25fa0 R15: 00007fffc57f84b8
[  189.772328][ T7639]  </TASK>
[  189.976293][ T5708] rc_core: IR keymap rc-hauppauge not found
[  189.982351][ T5708] Registered IR keymap rc-empty
[  189.988887][ T5708] mceusb 4-1:0.0: Error: mce write urb status = -71
[  190.022940][ T5708] mceusb 4-1:0.0: Error: mce write urb status = -71
[  190.043682][ T5708] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  190.056848][ T5708] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input69
[  190.081723][ T5708] mceusb 4-1:0.0: Error: mce write urb status = -71
[  190.112836][ T5708] mceusb 4-1:0.0: Error: mce write urb status = -71
[  190.142320][ T5708] mceusb 4-1:0.0: Error: mce write urb status = -71
[  190.150163][ T7647] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  190.162377][ T5708] mceusb 4-1:0.0: Error: mce write urb status = -71
[  190.194423][ T5708] mceusb 4-1:0.0: Error: mce write urb status = -71
[  190.222297][ T5708] mceusb 4-1:0.0: Error: mce write urb status = -71
[  190.242314][ T5708] mceusb 4-1:0.0: Error: mce write urb status = -71
[  190.273088][ T5708] mceusb 4-1:0.0: Error: mce write urb status = -71
[  190.302364][ T5708] mceusb 4-1:0.0: Error: mce write urb status = -71
[  190.322135][ T5593] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  190.332641][ T5708] mceusb 4-1:0.0: Error: mce write urb status = -71
[  190.376988][ T5708] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  190.388740][ T5708] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  190.403558][ T5708] usb 4-1: USB disconnect, device number 34
[  190.482160][ T5593] usb 2-1: Using ep0 maxpacket: 32
[  190.491409][ T5593] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  190.509151][ T5593] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.531346][ T5593] usb 2-1: config 0 descriptor??
[  190.707179][ T7656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.514'.
[  190.716757][ T7656] netlink: 'syz.0.514': attribute type 8 has an invalid length.
[  190.748343][ T5593] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  190.785105][ T5593] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  190.786057][ T5608] Bluetooth: hci3: command 0x0406 tx timeout
[  190.800403][ T5609] Bluetooth: hci0: command 0x0c1a tx timeout
[  190.805680][ T5593] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  190.807311][ T5611] Bluetooth: hci1: command 0x0406 tx timeout
[  190.815216][ T5597] Bluetooth: hci2: command 0x0406 tx timeout
[  190.848937][ T5593] usb 2-1: media controller created
[  191.098280][ T5593] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  191.180508][ T5593] az6027: usb out operation failed. (-71)
[  191.215878][ T5593] az6027: usb out operation failed. (-71)
[  191.238105][ T7662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  191.250703][ T5593] stb0899_attach: Driver disabled by Kconfig
[  191.270215][ T5593] az6027: no front-end attached
[  191.270215][ T5593] 
[  191.280183][ T5593] az6027: usb out operation failed. (-71)
[  191.286245][ T5593] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  191.294242][ T7662] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  191.335499][ T5593] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input70
[  191.361401][ T7667] FAULT_INJECTION: forcing a failure.
[  191.361401][ T7667] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  191.428337][ T5593] dvb-usb: schedule remote query interval to 400 msecs.
[  191.438866][ T7667] CPU: 1 UID: 0 PID: 7667 Comm: syz.3.517 Not tainted syzkaller #0 PREEMPT(full) 
[  191.438888][ T7667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  191.438898][ T7667] Call Trace:
[  191.438904][ T7667]  <TASK>
[  191.438911][ T7667]  dump_stack_lvl+0x100/0x190
[  191.438938][ T7667]  should_fail_ex.cold+0x5/0xa
[  191.438961][ T7667]  _copy_from_user+0x2e/0xd0
[  191.438987][ T7667]  copy_from_sockptr_offset.constprop.0+0x12c/0x150
[  191.439016][ T7667]  ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10
[  191.439051][ T7667]  do_sock_getsockopt+0x530/0x6e0
[  191.439077][ T7667]  ? __lock_acquire+0x49f/0x1a40
[  191.439109][ T7667]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  191.439135][ T7667]  ? rcu_read_lock_any_held+0x6a/0xa0
[  191.439160][ T7667]  ? find_held_lock+0x2b/0x80
[  191.439184][ T7667]  ? __fget_files+0x21f/0x3d0
[  191.439209][ T7667]  __sys_getsockopt+0x148/0x260
[  191.439239][ T7667]  ? __x64_sys_getsockopt+0xbd/0x160
[  191.439260][ T7667]  __x64_sys_getsockopt+0xbd/0x160
[  191.439281][ T7667]  ? do_syscall_64+0x90/0x870
[  191.439304][ T7667]  ? lockdep_hardirqs_on+0x78/0x100
[  191.439328][ T7667]  do_syscall_64+0x115/0x870
[  191.439350][ T7667]  ? clear_bhb_loop+0x70/0xc0
[  191.439372][ T7667]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.439390][ T7667] RIP: 0033:0x7fcdb479e0d9
[  191.439405][ T7667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  191.439421][ T7667] RSP: 002b:00007fcdb5583028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  191.439439][ T7667] RAX: ffffffffffffffda RBX: 00007fcdb4a26090 RCX: 00007fcdb479e0d9
[  191.439450][ T7667] RDX: 000000000000006d RSI: 0000000000000084 RDI: 0000000000000005
[  191.439461][ T7667] RBP: 00007fcdb5583090 R08: 0000200000001040 R09: 0000000000000000
[  191.439472][ T7667] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  191.439482][ T7667] R13: 00007fcdb4a26128 R14: 00007fcdb4a26090 R15: 00007ffd14f28e18
[  191.439506][ T7667]  </TASK>
[  191.504965][ T5723] usb 5-1: new full-speed USB device number 32 using dummy_hcd
[  191.514574][ T7662] i2c i2c-0: new_device: Instantiated device isp1301 at 0x2c
[  191.658225][ T5593] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  191.679471][ T5593] usb 2-1: USB disconnect, device number 34
[  191.852906][ T1608] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  192.012194][ T1608] usb 3-1: Using ep0 maxpacket: 32
[  192.018936][ T1608] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  192.055990][ T1608] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  192.149717][ T1608] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  192.299936][ T7669] i2c i2c-1: new_device: Instantiated device isp1301 at 0x2c
[  192.313331][ T1608] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.337474][ T5593] ------------[ cut here ]------------
[  192.343544][ T5593] Device '1-002c' does not have a release() function, it is broken and must be fixed. See Documentation/core-api/kobject.rst.
[  192.356830][ T5593] WARNING: drivers/base/core.c:2638 at device_release+0x1da/0x270, CPU#1: kworker/1:3/5593
[  192.366866][ T5593] Modules linked in:
[  192.371301][ T5593] CPU: 1 UID: 0 PID: 5593 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) 
[  192.381127][ T5593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  192.391218][ T5593] Workqueue: usb_hub_wq hub_event
[  192.396275][ T5593] RIP: 0010:device_release+0x1dd/0x270
[  192.401735][ T5593] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8b 6b 50 48 85 ed 74 19 e8 ad 8b af fb 48 8d 3d a6 05 d3 0a 48 89 ee <67> 48 0f b9 3a e9 eb fe ff ff e8 94 8b af fb 48 89 da 48 b8 00 00
[  192.421528][ T5593] RSP: 0018:ffffc900030ef458 EFLAGS: 00010287
[  192.428418][ T5593] RAX: 0000000000037c06 RBX: ffff88803543e020 RCX: ffffc90019fb7000
[  192.436631][ T5593] RDX: 0000000000100000 RSI: ffff88802c328a80 RDI: ffffffff912ded80
[  192.445023][ T5593] RBP: ffff88802c328a80 R08: 0000000000000001 R09: 0000000000000000
[  192.453230][ T5593] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888054a49800
[  192.461200][ T5593] R13: dffffc0000000000 R14: ffff88802c328a80 R15: 0000000000000000
[  192.469197][ T5593] FS:  0000000000000000(0000) GS:ffff888123eec000(0000) knlGS:0000000000000000
[  192.478425][ T5593] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  192.485034][ T5593] CR2: 00007f11a3e27dac CR3: 000000000e994000 CR4: 00000000003526f0
[  192.493042][ T5593] Call Trace:
[  192.496315][ T5593]  <TASK>
[  192.499244][ T5593]  kobject_put+0x1f7/0x640
[  192.503700][ T5593]  device_unregister+0x2f/0xe0
[  192.508467][ T5593]  i2c_unregister_device+0xf5/0x270
[  192.513780][ T5593]  i2c_deregister_clients+0x255/0x460
[  192.519185][ T5593]  i2c_del_adapter+0x124/0x2d0
[  192.523993][ T5593]  dvb_usb_i2c_exit+0x9f/0xf0
[  192.528695][ T5593]  dvb_usb_device_exit+0x313/0x520
[  192.533858][ T5593]  ? __pfx_dvb_usb_device_exit+0x10/0x10
[  192.539496][ T5593]  ? find_held_lock+0x2b/0x80
[  192.544948][ T5593]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  192.551000][ T5593]  ? usb_disable_interface+0x211/0x4c0
[  192.556505][ T5593]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  192.562363][ T5593]  usb_unbind_interface+0x1dd/0x9e0
[  192.567579][ T5593]  ? __pfx_usb_unbind_interface+0x10/0x10
[  192.573365][ T5593]  device_remove+0x12a/0x180
[  192.577975][ T5593]  device_release_driver_internal+0x44e/0x620
[  192.584099][ T5593]  bus_remove_device+0x2bc/0x560
[  192.589052][ T5593]  ? __pfx_bus_remove_device+0x10/0x10
[  192.594561][ T5593]  ? __pfx_device_remove_attrs+0x10/0x10
[  192.600209][ T5593]  device_del+0x376/0x9b0
[  192.604595][ T5593]  ? __pfx_device_del+0x10/0x10
[  192.609464][ T5593]  ? __pfx___pm_runtime_barrier+0x10/0x10
[  192.615243][ T5593]  usb_disable_device+0x367/0x810
[  192.620276][ T5593]  ? mark_held_locks+0x40/0x70
[  192.625092][ T5593]  usb_disconnect+0x2e2/0x9a0
[  192.629782][ T5593]  hub_event+0x1bb1/0x4420
[  192.634249][ T5593]  ? __lock_acquire+0x49f/0x1a40
[  192.639198][ T5593]  ? do_raw_spin_unlock+0x145/0x1e0
[  192.644437][ T5593]  ? __pfx_hub_event+0x10/0x10
[  192.649612][ T5593]  ? debug_object_deactivate+0x2e4/0x3b0
[  192.655550][ T5593]  ? rcu_is_watching+0x12/0xc0
[  192.660356][ T5593]  process_one_work+0xa23/0x1940
[  192.665342][ T5593]  ? __pfx_process_one_work+0x10/0x10
[  192.670732][ T5593]  ? __pfx_hub_event+0x10/0x10
[  192.675539][ T5593]  worker_thread+0x5ef/0xe50
[  192.680144][ T5593]  ? __pfx_worker_thread+0x10/0x10
[  192.685263][ T5593]  ? kthread+0x13a/0x450
[  192.689512][ T5593]  ? __pfx_worker_thread+0x10/0x10
[  192.694656][ T5593]  kthread+0x370/0x450
[  192.698742][ T5593]  ? __pfx_kthread+0x10/0x10
[  192.703368][ T5593]  ret_from_fork+0x72b/0xd50
[  192.707968][ T5593]  ? __pfx_ret_from_fork+0x10/0x10
[  192.713258][ T5593]  ? __switch_to+0x800/0x10f0
[  192.717940][ T5593]  ? __pfx_kthread+0x10/0x10
[  192.722585][ T5593]  ret_from_fork_asm+0x1a/0x30
[  192.727377][ T5593]  </TASK>
[  192.730394][ T5593] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  192.737663][ T5593] CPU: 1 UID: 0 PID: 5593 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) 
[  192.747022][ T5593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  192.757078][ T5593] Workqueue: usb_hub_wq hub_event
[  192.762132][ T5593] Call Trace:
[  192.765411][ T5593]  <TASK>
[  192.768341][ T5593]  dump_stack_lvl+0x100/0x190
[  192.773023][ T5593]  vpanic+0x552/0x970
[  192.777008][ T5593]  ? __pfx_vpanic+0x10/0x10
[  192.781518][ T5593]  panic+0xd1/0xe0
[  192.785235][ T5593]  ? __pfx_panic+0x10/0x10
[  192.789657][ T5593]  check_panic_on_warn.cold+0x19/0x34
[  192.795015][ T5593]  ? device_release+0x1da/0x270
[  192.799844][ T5593]  __warn.cold+0x191/0x318
[  192.804244][ T5593]  __report_bug+0x30f/0x440
[  192.808730][ T5593]  ? device_release+0x1da/0x270
[  192.813567][ T5593]  ? __pfx___report_bug+0x10/0x10
[  192.818592][ T5593]  ? do_raw_spin_lock+0x128/0x260
[  192.823603][ T5593]  ? find_held_lock+0x2b/0x80
[  192.828259][ T5593]  ? kobj_kset_leave+0x160/0x210
[  192.833178][ T5593]  report_bug_entry+0xe1/0x290
[  192.837941][ T5593]  ? device_release+0x1dd/0x270
[  192.842773][ T5593]  handle_bug+0x1cd/0x2a0
[  192.847092][ T5593]  exc_invalid_op+0x17/0x50
[  192.851585][ T5593]  asm_exc_invalid_op+0x1a/0x20
[  192.856428][ T5593] RIP: 0010:device_release+0x1dd/0x270
[  192.861869][ T5593] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8b 6b 50 48 85 ed 74 19 e8 ad 8b af fb 48 8d 3d a6 05 d3 0a 48 89 ee <67> 48 0f b9 3a e9 eb fe ff ff e8 94 8b af fb 48 89 da 48 b8 00 00
[  192.881456][ T5593] RSP: 0018:ffffc900030ef458 EFLAGS: 00010287
[  192.887503][ T5593] RAX: 0000000000037c06 RBX: ffff88803543e020 RCX: ffffc90019fb7000
[  192.895456][ T5593] RDX: 0000000000100000 RSI: ffff88802c328a80 RDI: ffffffff912ded80
[  192.903407][ T5593] RBP: ffff88802c328a80 R08: 0000000000000001 R09: 0000000000000000
[  192.911358][ T5593] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888054a49800
[  192.919309][ T5593] R13: dffffc0000000000 R14: ffff88802c328a80 R15: 0000000000000000
[  192.927272][ T5593]  ? device_release+0x1d3/0x270
[  192.932109][ T5593]  kobject_put+0x1f7/0x640
[  192.936529][ T5593]  device_unregister+0x2f/0xe0
[  192.941289][ T5593]  i2c_unregister_device+0xf5/0x270
[  192.946474][ T5593]  i2c_deregister_clients+0x255/0x460
[  192.951842][ T5593]  i2c_del_adapter+0x124/0x2d0
[  192.956596][ T5593]  dvb_usb_i2c_exit+0x9f/0xf0
[  192.961271][ T5593]  dvb_usb_device_exit+0x313/0x520
[  192.966381][ T5593]  ? __pfx_dvb_usb_device_exit+0x10/0x10
[  192.971997][ T5593]  ? find_held_lock+0x2b/0x80
[  192.976657][ T5593]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  192.982445][ T5593]  ? usb_disable_interface+0x211/0x4c0
[  192.987889][ T5593]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  192.993680][ T5593]  usb_unbind_interface+0x1dd/0x9e0
[  192.998872][ T5593]  ? __pfx_usb_unbind_interface+0x10/0x10
[  193.004577][ T5593]  device_remove+0x12a/0x180
[  193.009152][ T5593]  device_release_driver_internal+0x44e/0x620
[  193.015207][ T5593]  bus_remove_device+0x2bc/0x560
[  193.020129][ T5593]  ? __pfx_bus_remove_device+0x10/0x10
[  193.025580][ T5593]  ? __pfx_device_remove_attrs+0x10/0x10
[  193.031200][ T5593]  device_del+0x376/0x9b0
[  193.035517][ T5593]  ? __pfx_device_del+0x10/0x10
[  193.040351][ T5593]  ? __pfx___pm_runtime_barrier+0x10/0x10
[  193.046059][ T5593]  usb_disable_device+0x367/0x810
[  193.051074][ T5593]  ? mark_held_locks+0x40/0x70
[  193.055828][ T5593]  usb_disconnect+0x2e2/0x9a0
[  193.060496][ T5593]  hub_event+0x1bb1/0x4420
[  193.064912][ T5593]  ? __lock_acquire+0x49f/0x1a40
[  193.069836][ T5593]  ? do_raw_spin_unlock+0x145/0x1e0
[  193.075022][ T5593]  ? __pfx_hub_event+0x10/0x10
[  193.079770][ T5593]  ? debug_object_deactivate+0x2e4/0x3b0
[  193.085396][ T5593]  ? rcu_is_watching+0x12/0xc0
[  193.090164][ T5593]  process_one_work+0xa23/0x1940
[  193.095096][ T5593]  ? __pfx_process_one_work+0x10/0x10
[  193.100456][ T5593]  ? __pfx_hub_event+0x10/0x10
[  193.105208][ T5593]  worker_thread+0x5ef/0xe50
[  193.109786][ T5593]  ? __pfx_worker_thread+0x10/0x10
[  193.114893][ T5593]  ? kthread+0x13a/0x450
[  193.119115][ T5593]  ? __pfx_worker_thread+0x10/0x10
[  193.124205][ T5593]  kthread+0x370/0x450
[  193.128256][ T5593]  ? __pfx_kthread+0x10/0x10
[  193.132828][ T5593]  ret_from_fork+0x72b/0xd50
[  193.137408][ T5593]  ? __pfx_ret_from_fork+0x10/0x10
[  193.142506][ T5593]  ? __switch_to+0x800/0x10f0
[  193.147166][ T5593]  ? __pfx_kthread+0x10/0x10
[  193.151737][ T5593]  ret_from_fork_asm+0x1a/0x30
[  193.156512][ T5593]  </TASK>
[  193.159698][ T5593] Kernel Offset: disabled
[  193.163997][ T5593] Rebooting in 86400 seconds..