last executing test programs:

9.452049722s ago: executing program 4 (id=333):
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="100000000914ed37"], 0x10}, 0x1, 0x0, 0x0, 0x40040}, 0x20004080)
recvmsg$can_bcm(r4, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40000000)
sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x3)
connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10)
creat(&(0x7f00000000c0)='./bus\x00', 0x182)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r6, &(0x7f0000000240)="8a", 0x1, 0x40440c4, &(0x7f0000000080)={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0xe}, 0x6}, 0x1c)

9.437870071s ago: executing program 2 (id=334):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
r2 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_disconnect(r2)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd)
dup(r3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r4, 0x0, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
clock_adjtime(0x0, &(0x7f00000001c0)={0x8, 0x9, 0x40000000010, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x7fff, 0x1, 0x0, 0xfffffffd, 0x7, 0x1000000000, 0x0, 0x2000000003, 0x0, 0x82a, 0x8000000, 0x81, 0x7, 0x0, 0x0, 0x5})
syz_clone3(0x0, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x8880, 0x85)
ioctl$TIOCVHANGUP(r3, 0x5437, 0x0)
syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802)
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x18, 0x0, 0x1, 0x4, 0x6, @random="6154565d36f0"}, 0x14)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r7, @ANYBLOB="fe000000000000001c0012000c00010062"], 0x3c}}, 0x0)

7.694287845s ago: executing program 3 (id=342):
mkdir(&(0x7f0000000400)='./file0\x00', 0x114)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0xffff, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xdfb435498d672af6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40048c1}, 0x4)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r6)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

7.583597038s ago: executing program 3 (id=343):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd28, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10001}, [@FRA_FLOW={0x8, 0xb, 0xfffffffd}]}, 0x24}}, 0x40)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x18, 0x0, 0x1, 0x4, 0x6, @random="6154565d36f0"}, 0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)

6.330339882s ago: executing program 2 (id=345):
creat(&(0x7f0000001140)='./file0\x00', 0xd931d3864d39dcfb)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x100d, 0x1a2d82)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000100)={r0, 0x5, {0x0, 0x0, 0x0, 0x1fffffffff, 0x4, 0x0, 0x6, 0x12, 0x20, "996a78edc5cac93c3e473f65d1eb5297f0ca82d56dcddb164e29606b4f2cf0b60d9b92b3cf1597f6b7ff9c4fbf4326f66eccb232ee89d4a42e798491e44e3e6f", "3c913ccfcc7356b96e9819ddc15edb9ca42b19129e446327fbe58f6157f9777bae32f98acacecf34365db4d55dace1d4e9d56e6fa42e009f00", "fd4131e7744b74aaa2317f2b2cb2fea7e7d63f26e8cfd1d6c6eaab2b99d845fb", [0x63, 0x4004]}})
r2 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x40047452, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f00000004c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}})
syz_fuse_handle_req(r3, &(0x7f0000004a00)="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", 0x2000, &(0x7f0000007a80)={&(0x7f00000001c0)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff871989a0dd67, 0xdcf, 0x9, 0xb, 0x800, 0x0, 0x0, 0x4, 0x23}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r3, &(0x7f0000002a00)="0d9ec529eb18ec94a35378619cb10ff8c913f67139447b7ee0cca809e36c363ba1d3975a7446b70c6bdd99e2cff540eda7589ea89efeb498df568916036f0848ede5f089bf502b483c67c0432c34b98b1bc085a99e2981103397e0b0eed2ec64c1075798b56a42ea532091f5326c97622a47c53fbf42e71c3ed4b954c559424b49a13598c6c63ef65b62384b038b3e6e98ebecd178289831eaecd986a01c751e8cca7a57c009f2b5310fe9dd8a63b91c4b5b13d1c44d2b874b32ae3e961b9e96a511ffaa3ed20248dfb470460d305e44ffcd287b355380319fd31f7538c6d00de06ddb8f72b3a59c4699c94d7379e1e190c6dd7786e12096f9e963a038b6b4375535047135ecc07b16035ceeb27ed09d77f52b6eae27a03071e060b05bf347b9ba44a984e5db346d230ae9c5324ecfd4e7725bc5019a9f4d20237c820359d73b82f9c668ae71f6b85d5350140a16f988bb2b8010effb52636e0b728be1b1ed37c1b8868ec67edd52951dbf65b479aa25e92667a98c755d88995e6303a48a64317bd4b201fc6dea59381abfb5e0fb1035bbd32a97a6324b08f404fe3991879a0c6362032864031737941d9cc534697da61a43c8723ecd1062906b65c504d86383cdf9631f228372b13aee64f8ea8db00dffc37fa092ab5daeb7431dab37091c44f91c9202df60876a6e06ceee3e6a095406fe5cc1f83de1a4adf36fbef5a94a622132cc85e56fb53a9cff67bc69a24d8c259ccfe19b1925061f0cad95d6b4158c1394b8acfa9a8f52a566c6cb4e0b14dd30c85b309289a5f395e01d981735f6fce6ab30994643d70b2f322b7a233a339e621ea2eb00a0082a175c231b330a58062680546c28db8ff5b7e66c0e3df0a9b74ab72abfd241fcbe1e3d27a2d1eab44cf88180dcef4482c866324133f9e4780b891a7c5000b005cab0c131c225e944fd1aab5de9e8d17b8770b4472b6e4a13b6cce90ba152e5144acf74cd8a9821ce3eae72dc7ddc81b76482226098329c3a8ecb923822610aa0b086f44329522dd8f9ae355b4666d1a10911ef8e21377578b42fe6ee0b2a77917157488d6e0bb388951f80551dcaebf212b396d1f922aec595bd340390d310f6006c4b3efdd80838f39d25470db39d6205ba8f52bac634f8145a3c10ed007acc2f25c5dbfe911f18f44a0c57cee33725eb8c5f2d9112f91787c2c323b67b67d9d1f593d26430d77189d4678fd8d7c11c1f2d744ad59a03a8cffc52ee0293c90b00d61897c80184aa63fcf43c109b06af20c808035af0a0bf9cbe544681768f92a2ebe3b4458dd020fb0550822bc2f769631e00d63bd91e7100299bbc4ce53a35e993e24028dc5c81d46f5377d21f2f38a9688ed981044346b865161b68f3390a50c2e625052396cdb6637e9434904c63d8ca45aa2325626293cdd9cd0179b1d995be10281fa8d281db16320f520e42af268ff30dc2d8885aa3d9e7f294eadb4d827d195cd5d18632928f2153261345c231efd143288b881638b61dc5dab8114c1948d83b8ac4e278f131ec3eef4e87e43a36f4b41a699a741ef3a7cd4f0bc5dbd2dffb1d223a5c5b38b98e49092631a176d15c4f3c077d639726a3482bf2fdc73c2bdb09208aaf90bc64b5fee89d231bb1679de3e5d31662db2c5824ce9941f94500e5a11b8fe79da548efed8cc44e9bc1d5175dd77fc16f8219a83b83ccca2181bf411b0945312598817e08e5277530eccffff17d198613cc8c991349141ced56e79031ab6cb98f3f39e5f20bac76017083041a1ee99ca257d0e0cf95e59617139afb08cf0c6a607d3f2ac2b5d3f4394a4a063c9769bb884ec522d46138228c7e9b5c7ea5e3a6c70815b565ce15a13fd0a5deb28e710c15fe25c744b430b4f6482532fb96566381c56e12632cab5acb5e08d6f973003c96a7d81ff76966e0f93c83c462bfcef230939e48c4983bfed78f68b0f540d1fff2196cbd1f1c1a1c310ec10f5a2745407000bc6db1fcc8540282cc7e96cf5582c4eaf874a2fe6369534176429b7505eb0aade883260806be2d86a42e76b315a76e5f686ca669f49e1f9054a77b8eaff14a43e9a9801244e8e94ff50a17b60dee0122ea70819bae3375070466c7f202c4ea0fc0c9aaae50c43c554e937f67689b3e18ed543749a7ef0997a7a7530b918c4ef935137137e1ee7e6a8919fb76a8f008ddcc2d8b2e18f3eb90f7a13cf4f49170ccf50c75de82e92a5e2d1f311e59071ff202b6cae4d6243fc3787cb9fbd401938cc18dcf5620f8b8f74e9e3b13dcde85ef896f31f5a2458118addae77206ab1506882f91873b4828950a7b91ddae74888155a9c486c7c60492813ac0e33362dc4e21e00538e5b05b78271d82486a0d156d4a5a07085bb1cd74f5d63763f18648a489352b5d05107909fe54b5d332cde2900c82c150b11071e028eeb275cc9a9614f1eda4e4830b128870e732d473100c24152aff2aa1659daa65d7e9591ebfcae5dca4e84c9a0965a01668e59843ef4a093d9b01067a0ae9d09e3d810c2cb63600ee05b10fc8685e8cb150e2d6d75baecfb8762f7a7d131417eb0721e19e1d21f5adcc1e09489f06b81d91b48608107fc7b3853e214a3c786a9812113ccbcf09907506d0e9cd72c79793584b4fe06a18a627bd969f628a5936367961f1e7d117d03a8fabc85f5ecdd0ddcfae49aa293893a2e5ae376be11031abc0e05ff250b35926345b52f8d3dc02b7497f7513e759247353db9b8e493120e73981aef4c4c9747621537a089848754c14cda1cad18084274e98ea2bf7400ca846184e0e31a571f9bd770222b1038a4ce60dcf8fe9cca4d60048cc29c37c1345de992e9dc7128ef093c1ce80232a88a3da7ae8bc87120c5b1f405d5186141288998fed9e021cd0ad6b12b51c217849390be3ea00cbd6c755958140bfb9b2a2765ad1f51ac045fdc5c28ee5886b1436015b88bd90d19328f91394110b0d891678e63b63d6cc4d35279f6f616d7692c6fe177a79d80ae8f7e4ad5078d8d7096f3ee664dcdb2f634eba98f4788de1f5e34f32ef09e2f0aee4fdc5bec4bc4aeec5721ac3a2da1bf52da017c3312095403d50dcde39671242b610f11832773796557f71455376a7741ab242a9fc94464180bf224d5e8c79b462e3a816f6c08ab0f5503386d34ddfd808b4b8d5d333548d4b873923c6c297b2fa1abe433ec9264385c50dca40316c37ed85db382e7c853ba331c727043cb3345de9f89b1c804e98205eda3d6b6e042c9c41877d456dcb8f12663e6dc1ba809229536fbcc4c58d01a137eb80af8596dfc7b5fa7a044cd141238aa82e440526e55a28c4ed2f4b26157a0eebb4a77c5ab66fcce2602e1a70aea07e5e7e7e5321d58ad128a5ea6b574730037f24a7300e0ad6fc96bd18e03763bbbf21bd3c388aff1cc5ea13728ba2f8e1eb70148d2603e55bb01cce0763c2020b5627a0ccb35ae3a9b3df380e6d9800d9506219a90971a3b8bde1dae6a43fce2aaecbc026be8f4e9bd749e10c87ed7d78f92014342fa449eef28e7175548e5a8ec4fe7d31fc86737aee63ef40b54485380b6898161676f0d82f76113b12a529fbce4482dd278a90aa416077c677aea623ddb3761bc81527ab7e3d73a3b4c8c3e4352c7c083cee8953ebd972a83caed837587e8d7cf360f28ce64e8744ba1098513bb6c7fdc6a3c7c8e5870223d6cc0b18b5d6edea926d5376aeb85488d3712e8f67128f0d3fb2b42f82363a0d4c1c806ff283f6e4ddc10ce4a0803be66a247207d6606c7dd67cd293dada159016d7fd7e88c4df53d09bdd9fd9fa3c732da45fb92bdf6f442eda15edd97bf1928a7699008f0b482240a684ff5efef0cadbf1b4f16888650d59b2bdaeae0d1112a79c5522dd0933ccc16fed7cd0ccabe929f625de8947b3b1532dc04253cca988a1584df2b31492b19410d6f681d614eaa20029592c00c948a98973a9fba87f1397f8859ba543edeb5c0b0db92f65462a1103947d780b539433332d65bd1418bc00c9e815f73e0cc0aca5fcc9f95f707c455013a55a0c4a29093b05b94edc5b5284ec7ccf3ec091002b4229036c174e2927127f40769ece890612bbeb960d9392f442765a2ca8990c52ad7d4441e975a7cf079d139945f2b2a8a34f0e85d76cbc96efbb52cf8b5ae681234e14b6648244d41cfee2d9b189cd831cc2f31ae7e5f11aaaff1629f8c2cf73494ac38e58da7010dd986f8b6134ee0dabfdcb30617d15720cffbec7651f22253aea21696d2ece4fe026543ea2f3473e4c12e65dbb3cbf764ffa0b3a396382b9b7f0c24eaaf3495554b2319b66f3cabf01a8d6cfd1382d94ab71cd11eae2a42e4dc841d4a9732c395688d3377c8ccff7e3f88a3129855a5f41a7de6b6a9ac40a87c288f4821295edfc4f5b8fe5a1fc0162e9820205c809935cc6047e8a835c651be02fb41c21de30ac770d7a7f2108c6a3f1cf2649cac444f028a6ebf4db422cbbdb7fd0cb39109a3130ffae17810bb58f5c557c99670224c2678fa07f1064911e6c665c0d1c26cd2f40f7089789208a48eb339bb8885910e035b4b8c69b1c3ad79270ac6e70b963493a6628b90501822878cdfac866268d914d8af2814612b0198f9e4c6b48e739e414d61f34e2f69ff7cdc4fc7ffe45a64c5faf191ef6c4e31cecebe09a2f6a63d60926ebaa7e925ccea5c93e403c7ec0ee55423ce4893471440006d4c09c141e489dda5577f73b57ecfc764ee5bc1bc88f7866dc6a494e3ee560c956dc12ae51842030251f1cedf2caca15549d0bb4ee3bef03702197350cd7586b5916ef6a0abcb5f30548d22ce5d8c4dbd82030b8d7b5481c51676b7d14d35c20346c74dcc7d96ea0b13f890f755a219993e88739da8246283ebbd82eb1b15956b5ec16ad523768c19ceba9199f97d7bb43b85fa11349ff7fb89a97b463b34c584ae9e2af6c8f20ab528750a22ff6c2297e400065fbd9a4660ec2c658afff6db9b67070352d2aa5e6cfe534eeb5ff271575b828dfd7f537e3627a1a6419ed0c84297fc3d362a52f3860a2eb7ae0a50f06d3c68c4a1463ec331ead7af2dba792332218b04d5b585de1a471d296df6e10316852d50f211e07643f749a1d75410e66e47db40bfcefe4b708d0b2879a50ccbd85939b89fe4b905a6a0d000000e28d18c048e66108a06d8b6a64ec5737b5ae283d914484167c8ac7dde7ec007aad1999854c4d6a0e5f887f99de3662610d5e8d49bac7d41d6fb7d90b4b04939638e2151ba67e75362aded50edfb7d9919b345b5b7df6a909190000000000000000c68bd764968f4d8a5779ffd9a35e58558272a214ae26a094360b9f2ec97c5e0a7693f4b7509b962cd8537e90ce7be70b54e9531e7295f894b94566df49c50c2265842392dff50e17ed3f7beb9ba4ad0520a73db1d8d3b39759e7fffcbf26517316bc74437fef944fc915ec24affc1a53748cfc883e3ddea9e25063ea8383b06f0d5c9db13a0ff335f52699226b391543060ae5e2c25b585b9ef7d5ff9495a4873cac58b5feff5f08717b04e81bfea349accc58fcc6a6505de3aa6ff4985d9c38bb83e8daa663ccb356df3ed52343ed7723687e416816f987c565eae22c7548c1d6b56a5b6819583da0ddf92739f65e604e37b3275a6cb1252d4ef7a515c4b1e9068d714be80066bf0d422f1e4d2ce6f95c9eac081d6e4596a6a8e16a57b732b575b7de16f176ff0e34e84b293d3fd77fa30a7b7cf12a1edd54170e56bf7f2d40620ad56acbc5cc615556300ff9e95ce3dda93c8333f23f0d97a5e666c438f5d0f40f911f614563d343ac6e4f9fee1d149c94fc75a97ac839b6d8d7b27c5efb870d2bfc6dbe6b688490b23597d83982d7858215c59011042b1957a0b386842621c72f89a9b524008794ffa0c179753ab48d0f73e5ff13624b3b90287edaf6a5367dcfe4094a21ffad3e881b428b77ccac6924d5bde9c781d4189654d8f29885fbde07e6334c6406dd3ece359c6ac7c6147f5c4906e56764e9980a669bfd00d9eb780e7f9988630d1eb098b3e4fd4c795f11441fb6d0ff7cf086eb291b1ec8d90092e1eaf9722ccdcd15408617cdb8c49043bf71a6eafaf22754fcb363f6c630501b619bbd87cc13d5df0948a176771d2d69236eb50dd313817d9687967e7d71f854db6bff803f4501d999dfe3da37ccfdf894a7914c4c113fa7a18c3468a52d646a5070614a6f02b7ff21c9f6927f5de55be85ba815f4bb9e29f26a94423c58338947c804e0627d69bc5a6e93fc5fe8cae851700253f2d494622c6127b4d77bf54a1ac27957234628cbe2fea1729ec53be7d90806d510ccddfd76fab1b9bf1207db8b05c3eaa88fa4c0a5db13cec9310f4e02c1d8114705446fd6649df3829aa12786b8d10b4540d8c1f1c8208c4b41998435e3fa1ec5199cb2d3d0c5c04c5e0b3ffd69112252106bb39333ff23b38d167a9b45ad1bdabf434c8695e2676d461b34c5f048e70b67a44d824baa090c8be13a22ef0d0970cc7a94ed4b77bfc3a40427c6c11abd2b415817243f6801d535a3adc9924a1671b645100e822a0c1876a37d9c9e230e3d762f1cfbb89a8b28255ba4cc5b46cb1635cf185578fa068b68bac93991982b48e7faacc09745a7e33bb12de6b25a2342a7e03cff06dde29b4d05de84e56c78fc6d9dcd180438da3136767d5846bfe7168faeac5b9434394bd747126c5c1ecc6621d10817ce9b6540433828a3bb8f6da0cd8f2b54a47cd5473f6bc3dc1234bd115a6890aa678d1bce7840d7a4559cda556740860079e46217c20e45ee59b8b7078d9b70cb6a249eb2e5e4071d044f456fb61649f261689b8d7a532afaf88eb30041242ce491fb7e654a1f06add370e2706f75c2fe1afe8e065804414c660ec4d96f496b1ad87592de8b7d04baa7ab142f580f262c64c57fce8ef933f18904f00064ca2ccf5eaf61bb7841bd408ae213deeb15d860f7ee7224b9d2dd38ee9f6c3fca6590335715c218db8f8c98e6339a6944817a1ce2e115ae984699861631b9893c143f594d6dde0895a0c7edb9912fe9cd8fd0765227b3963033306d15711387044bc373ac10d7be73cd80f1a79cf1ea0989ea9ae8a0dbbd1227bc33df652792a6bd95f1d21c6497c4c35b9a1eadc0217e322285a2eb832753aae74ef42fc983e58a126b7c23e4b0bac16f0de1eff7d41477bb25052f32cc9cc956ebd209d6b945b1fa9182857e180672a6be7edeb5234830668b1ea749d0a0dd3a244684d4dd76221c3bdf98c2f1eacb7a6dcccafd249b0ba2592c88790de40895799ea4dfb045cc2392dbb623bfe420b24e5a425b84a4b24d787a68bbec9db363ac4e9453df597f0224d8b7b2e4e552cc9e53accbae97e189cf9b59ebf8bb89591fe3fda450af548ffc46eff98b5216e238a9246e2fb95810f8f4d89504633a6d223484a765b9e6e5497159b31c51fa6cc10641bafa81b10c5ab853f3136fa1b4334bcbde99cb4689f077ca3c29c2f1aca2a05762943073d5992aac4d9b0d411ba25905c34fd02b8eb7b9db375a6f6516446cc195eb55eda1e007e26328e9e2642a9c4e90c56440cc60a1db77713860a56820901b3022d55c621e9d54f759dd17fc5b59331c63cf30e07081bf0cdee6cc94ddfe8c6179e7ed86607d4ba7d5f1e97fbc1139b43ae5fd04c1c715f4600f028d0852a421d472b1b48e591b6edfebcd86be3db2caf967b06776096e14f0deffc9bb126ec329c49ada996b963e942d9c404967dc23bdbd0eee951b2879f2ef7ae224d4ff25edac4ddeb2c0b8e579af283e87c625d3fae5286fa855930e45207af7054763937a9247dc38e37e6dee2e325b617280846012e463707b6ccfa2fc399a66e534221a456281d18c79d46f5c77c2d359e19ea870cd230709b5e33cd52fd43388ef91dea0a1e0df6c72688d9fd32bb67f489a3618604ef1dfa0d7f569d40cc68e39994e4ed8830d00008998f59485ce4723c1eeb7c72f7e833418bab47735a91c7ab24e8555d2ccf3a812b6c634c0c3a68271ec8b536aaa442e056945feca6fb4e54d2cf60a0334f494b2bdb6fbd59fde0ce9d2cf03333a0c7121e086aa4c657360fbfb60f3ce0fc0d90ff12b03464e8ff0e5e546ff79735c5c800a0f9b680a478c772f60173a760e280d8287681986038444f2103e2894d5809d062cfe8380e34bca86475da3d7634131c2a8cdc98c5927bc137db61f94eaf9a74f87cc85072c201766eae17fbd5b732859fb1b1c980b36e377aa41a95bca18ccea529420e742899af7b968c1fb890d181da9f86358dbeea877c3e9123a9289c362fa61d96c707ac94b427318a1e5f21078aa9d1fd7a52704e0d73e527f3ca65b7b459734dd30db5335c450f1dbcc1e4259d657d13b6d6b4adddc3d0eae034d1878cd0aa1825991d75f8e6b5b4c0d6d17e8ce709b19ff794a8ef856abdfac65cd13631f1b66b20f2ebf2f3122d18e03cbfff88206a5998fc3cb2b40634fcecdb8f5bdbfe044dbf169ccd2cd60f7bf033272f38f587943fcc75d2d65d9028c02891c8415706c2b2459b7a3c5cc82b0446088d3b3bcc033ad453136afd4ac4678320fc17288dbfa1c5180ad57508a2a298ed4ebc716ede34fded574d9779be5d56517d4dd40f197312390c488f46914b0927b13901ce70c1684801f2811168fab53391af2fdabbb6e683abfa021f6b80077f19455c34cecf5dbdb2fa6e3930eb5940cb14504050cc75949424310dff81116b8f2076b8ecace84c302e758fa90af5a1888aa8a5a2bff4aeb7ebd1c7a216bdbb84bf9c021caf3c8efbfdc5d3aede46381bcda372a5398c89868ad57287736fec2a70bed638974fde5875eafa506a6bd7f772d2b221f4bde4920fe0c56f8e0847e2a7e8387c64ddef4203d77a526c46d7871befe0c5f9128bd67319acd963fc040185aac4e7815d928bbd7ffd8f3d125e63320182f202fa9a52505be9585556a5d1308c118ccdf01978027cbace7ab339d6f53d15e795b7f3fedae4f86c3f257ed80ee634375dc2333ceed1ccaeab1b6be7a9611ff33d79dccdec2007558c06dfc06612d56d37882e5f1de340cf05f4fffbe1a5def6d045bc5bdaf633f07360f9028cedd103bf03fec8beb9fdbf8c5fc684d12efae1859c53e2cc3e2f508a9cd0410ec036648d3760dd591f7ae04e4cdd61a2566319c943f0b63d87e422dfe5c0d1edcb2dc515778a0d7bb2c93ced3b1435adbc51d3fdca9c13679397bc4260093d64869998d6a28bb862ead0fa411585289cc00dc199eac6c607b8a84123dad3be80dd8fd86aa202113131046336352235f34c05f5ea6d5265adda98edbbfd11d6839c5b1bfe4fad4e688558d633d4a281df44d9c0a35abd464e01f8ab01a1e272cc8cd155a40b8aca4c6b1dc894c0fdc02f15a8f67ce94c7f99b6fcc0e4a3a8a71365645ad7809d47bb26f46ed8bd02f6e8f3d277224f82f3d41695f367e343ac6d507413f4bdacf9e344a49156c4de36d68c075415f8004748055b38b8a4110f869fafcc59cdae5663eda72a05be365a50e98bfd4b00e35aef687afae7bd6622cdd725326776f6fb1476c8cf8c20a0e5223e2bea494a1bbe4e79b25a5e48ba34bc66a84ecc4a0aba98e74ca2b1f61893e61a29498d855a778a2a9ce7b7fcaa44b4aedcbd0e28d6c49bdb6776975bf69161f372b964e4288ce6a3b877c3126f90c4c9749d45b8c5c840983b035993e484a945be5fc9d2d1bd3f3de4e6de7bc74a7a07b13e9e82acc11db85454f1d928fe52ad42ca783fd20dd3e94471b498c2736af40d2a45ff74f9ef874639e33306daa8a667674571e2ed93a48f49b57e9e3382fa8090774bc795609ee510b6a1ca48d9833819cbe8ac77eeebb0e3b6c59ced2d1ab355264934ff1914a3f654249bba60a692dd36368b8a866b333320e57e9c7d3646c375696ff14e303780ffd7b957d89ccdf57823d2d1e158773c2075233dd2f331eafe3802da683c293eaa24cd8b63a7582ddb202cd6f8c837c74f823727641c7eb680fe51ce7f250adb34956e4cab17b8a5f10edf144c700e376c682dd46c8fc89830fee1a3cfafe0a5a2e7581d5d16ad6267d1dc2d5be8547f9352d1591b42de94f2559b44a80038360c6394541a77d95b196558a479b609882fc597b9cbe285ad7c7a41133ed85c8ab6e6dec5bf70f9e787985512d48865022705098a6703b255a6f2b05b62fc7ab32e67f06d785ccb33fb348205a76939e6c2991486c5aae8ec1556b2f8e30ca445a4a495cbf2c6013042b8cea615e58899fccbbf1fc4f17a6dc37e46b17ada0be033dc67904fbd7903086d3417e423af64338426a84ca0c2a3252db62695f9cdf10ebc09b9da5747d30e7f4adfb374e1d2bb24542b0373b1fb897690b49fe24d8575ec9800f019c9c76459421c11f002989ac82c13c04a202cf7f9f38b053f9a680d4d5012887a11d25cad201df20a4eee6d2c0474055579ac729c7514a88b1675bbf6b773448c6c1a5ccd157f44f7e032a6b848f2e734d773f029e48fd13c90d41666f9bd4e9bea91950737b6e7502f9d2677938f240e3f905d6095bb0f8bbe961b99b2d025538c3888bfff8957e3592ee5b26a75399b59c697f59fcdfbbe3bcffb8777340875611bf75486d2378e68de771800bfffe0572fb36ca855ec5fc8cb90c76455773c36ec40b101fb30c48f8a8e775f5220e024b4da9dddc2fcf4da413e7c5db9e0567cbb5fad0c91d779a0939debd9247d3f7d8107fd986f73a9c9067e6594fabde0b9e887040cfbe7d31332f41259de57b38f33275597725392efea51f290b8e1b5c243ffd9eb4c0231600f9b4b204344736849d527156c4720a463bbe88fbbdc333099d949853d5c6fda98bcd35ad3f1fb1d5a7d00541a8a202c8590e35360bb9d25d6431476649e1898f901fad37975d6dce9833956e7a78d0306f533d4aa3c9676017c7abc7e1f8a3f117774a4f5beba55d1c3cd580fb18defccc349cce24e94a4cf1f4c6f45d783ee0167a55369c9b5e1eb6d0a836f3eb2354fad3cd771a9d777ff84c63120baee86ddc52b3e6817dce339ac9c240e75f3e2f77afbffbc1d54eb5936d045370ce3b77365c5320892dc7bc36e488019461d2e552969de9f25bd8de049d693be450c43c5d22d7569fc384e8d56ddb577c5f3c3471f5ba2998bc0c697a06b6d8ba5f2f7236e78aaed69b468e761a5f07145c0326ebb94f50aaa8c5666c92006d8d139036f981003933f8e2eba106a0e251fa9f5407544e44aedbbb271a3bf1c660a9cb8c74dbd0713aaebba2dd046af8b9428709646521d6bf387a92996b35748e1e67b602309b7da0fb642e89de19f550925f4db082ef7e9821ac4b2aee93c9cf791c086751c4cb4172608a4f903dc40727858046851529205b45786e294c17abf5e5f6bc730cbfb8fd977c5501a8140ac7984a267880b53cb94157be9ac157be1cf12d8a9e5612947772b734ed6ae30e548a3b2faecf94a7e03f86317f52ac797aefb957d2a29de8f8ced414ce22c800e0dc7e49d3672fca633248f3e68c00", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0xf, {0x4, 0x1, 0x0, {0xffffffffffffffff, 0x0, 0x200, 0x80000001, 0x101, 0x200000000001, 0x9e9, 0xc9, 0x3, 0x8000, 0x3, 0x0, 0x0, 0x8, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
rmdir(&(0x7f0000000240)='./file0\x00')
faccessat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x5, 0x300)

5.980571099s ago: executing program 4 (id=346):
r0 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000048000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000014000480080001400000000308000240000000000800054000000004"], 0x128}, 0x1, 0x0, 0x0, 0xfffffff5}, 0x0)

5.421684859s ago: executing program 2 (id=348):
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
setuid(0xee01)
syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

5.417629219s ago: executing program 1 (id=349):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0) (async)
r1 = socket$l2tp6(0xa, 0x2, 0x73) (async)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async, rerun: 32)
readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/160, 0xa0}, {&(0x7f0000000300)=""/127, 0x7f}, {&(0x7f00000003c0)=""/208, 0xd0}, {&(0x7f0000000500)=""/59, 0x3b}, {&(0x7f0000000540)=""/37, 0x25}, {&(0x7f0000000580)=""/82, 0x52}, {&(0x7f0000000600)=""/38, 0x26}], 0x7) (rerun: 32)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) (async, rerun: 32)
ioctl$BINDER_GET_EXTENDED_ERROR(r3, 0xc00c6211, 0x0) (async, rerun: 32)
syz_open_dev$radio(0x0, 0x2, 0x2) (async, rerun: 32)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'ip6tnl0\x00', &(0x7f00000006c0)={'ip6_vti0\x00', <r5=>0x0, 0x2f, 0x48, 0x80, 0xadd5, 0x14, @loopback, @mcast2, 0x7800, 0x40, 0x5, 0x7}})
sendmsg$nl_route_sched(r4, &(0x7f0000000880)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)=@newtfilter={0x48, 0x2c, 0x400, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x8, 0x3}, {0xd, 0x7}, {0x0, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x2, 0xd}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}, @filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x9}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4c000}, 0x4008090) (async)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) (async)
pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7c, 0x10000, 0x8004, 0x4, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x8, 0x40080000006, 0xb06c}, 0x0, 0x0) (async)
r7 = syz_open_dev$loop(0x0, 0x2, 0x161281)
mount(&(0x7f0000000040)=@filename='\x00', &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='ubifs\x00', 0x0, 0x0)
ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fa, 0x0, 0x0, 0x1c, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1cac3f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f050500000000e354b98ef0000000000000000000004000", [0xa, 0x3fd]}})
bind$l2tp6(r1, &(0x7f0000000280)={0xa, 0x0, 0x1000, @local, 0xfffffffc}, 0x20)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc10c5541, &(0x7f0000000040)=0x2)

5.242829577s ago: executing program 1 (id=350):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30)
pipe(&(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$binfmt_misc(r5, &(0x7f0000000980), 0xfdef)
splice(r2, 0x0, r5, 0x0, 0x80, 0x4)
r6 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0)
landlock_restrict_self(r6, 0x9)
read$FUSE(r4, &(0x7f0000000980)={0x2020}, 0x2020)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={r1, 0xcc8c, 0x8000, 0x8, 0x5, 0xfffffffc}, 0x14)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r7, 0x84, 0xc, &(0x7f0000000040)=0xffff0001, 0x4)

5.242547922s ago: executing program 4 (id=351):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0xf9ffff0000000000, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000000000000000000000000000000000000000000000000000000000000000000040c3aef8761e30cff0ed36b2eb00"]}, 0x108)

5.193463285s ago: executing program 4 (id=352):
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="100000000914ed37"], 0x10}, 0x1, 0x0, 0x0, 0x40040}, 0x20004080)
recvmsg$can_bcm(r4, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40000000)
sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x3)
connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10)
socketpair(0x9, 0x5, 0x0, &(0x7f0000000000))
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r6, &(0x7f0000000240)="8a", 0x1, 0x40440c4, &(0x7f0000000080)={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0xe}, 0x6}, 0x1c)

5.140731815s ago: executing program 1 (id=353):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82)
writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)="26eba9fdb4cbab48929e1af1510000000000000005", 0x15}], 0x1)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280), 0x0) (async)
accept4(r1, 0x0, 0x0, 0x80000) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
syz_usb_connect(0x3, 0x992, &(0x7f0000000e80)={{0x12, 0x1, 0x201, 0x70, 0xa3, 0x9e, 0x10, 0x19d2, 0x284, 0xf6bd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x980, 0x3, 0x0, 0x7f, 0x80, 0x7, "", [{{0x9, 0x4, 0x95, 0x3, 0xb, 0xff, 0xff, 0xff, 0x6, [], [{{0x9, 0x5, 0xb, 0x3, 0x440, 0xf, 0x2, 0x5c}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x0, 0x45, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc}, @generic={0x96, 0x30, "f9af0a3441e8a4fc0c2e75fb10002dd9b88a4a4ca366d83639e42eb64e7863029ec991191f34bec1c1d454e903552b0c00268f22cdfcd29a00ef80a7b041e7cff9b3ecff1bedb68632c8cdc8ec3d02378a7e52d169d50c9762e774436f6c90241440ff0079d7164b8ece2fcc4ca5a0894819d4df462553653770c834599eb69437a6811f5c3fed8b1fb411320914e12ebcdc9fc9"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x8, 0xa0, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x3}]}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x9, 0x9, 0xc}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x7, 0x58, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8b, 0x800}]}}, {{0x9, 0x5, 0x2, 0xc, 0x8, 0x2, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x3}]}}, {{0x9, 0x5, 0x0, 0x8, 0x40, 0x66}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x5, 0xc, 0x4, [@generic={0x40, 0x23, "8695860de74634d33ca8903aeace4a5e077b83c3e8f203dd7d9a2cd3a85ee3df46b603542bc81df82c2600dd3227450ceed2370d0af58cce70b0c613b399"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0xbe, 0x5d, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x2}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x4, 0x1, 0xb3}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x63, 0xf8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x2}]}}]}}, {{0x9, 0x4, 0x60, 0x7, 0xd, 0xde, 0x60, 0xb7, 0x2, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "2811"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x400, 0x775, 0x7}, {0x6, 0x24, 0x1a, 0xd5}, [@dmm={0x7, 0x24, 0x14, 0x8, 0x8001}, @country_functional={0xa, 0x24, 0x7, 0x4, 0x6, [0x120, 0x3ff]}]}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "1c04"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x5, 0x3, 0x4}}], [{{0x9, 0x5, 0x4, 0x4, 0x200, 0x8, 0x9, 0xb, [@generic={0x30, 0xf, "7f12f2140488bc1fce31a3560ad5455fad0d6f01113e279856e9d457e0411dc26cd274a8288e4004bea5360fa9d1"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x1, 0x3, 0xff}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x5, 0x80, 0x4}}, {{0x9, 0x5, 0x1, 0x4, 0x8, 0xf, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x800}]}}, {{0x9, 0x5, 0xa, 0x1, 0x200, 0x8, 0x5, 0xa6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x2}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0xfb, 0xf5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0xffff}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0xa23}]}}, {{0x9, 0x5, 0xc, 0xc, 0x8, 0x7, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x7}, @generic={0xff, 0x31, "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"}]}}, {{0x9, 0x5, 0xd, 0x8, 0x600, 0xfe, 0xe, 0xa7, [@generic={0x70, 0x8, "65c7b8ea47185a8e2b1aec5c208f4c98dd9bf4a96661451df8d08795967f5f2cd92310c36dbc67f05acac5eeff893b41fcdce76b92880db106ff684116ad31627ed105e021d91d08738793de321669f46825c35867fa19cb23366333a923ad9c1e758559ed269a2b2aa1236d7a21"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x40, 0x4, 0x2, 0x6}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x9, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x6}, @generic={0xe4, 0x9, "5c7dcc105d5fba8faaafe553ba0248f9342a99deb5a332ada810ce8c8e03eb8a57719c66c80931f449ce8e7f754377ff889c1cf0fb88720ae6444a3fe62c23f5c43339c58b0f63dfb6bca9d6e7c29b0ec59fb84d196beb5e87f2cbbf0638ff70b44319119452db3a4af636702431690452c3dd00b7dc855aa4991d11ea325ad09617fbf42eee48baf7aa09b5b1d4ba4a39506bf702061f31db9d4ff2dad8197c0acd284bfe6c8e78ffb76600851174ccb5e778085e91bde97a9c6736151c5cb898dce743b19e26fc1282ef8a5b9bce52eaec62920ba8b66ac7748fb513d5e10df1fe"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x400, 0xfd, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x80, 0x5}]}}, {{0x9, 0x5, 0xf, 0x3, 0x200, 0xfc, 0x81, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xc0, 0x2}]}}, {{0x9, 0x5, 0xc, 0x1, 0x40, 0x76, 0x1, 0x3}}]}}, {{0x9, 0x4, 0xa7, 0x4, 0x10, 0xf7, 0x3, 0x90, 0x3, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "4ac90190"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x0, 0x7fff, 0x3}, {0x6, 0x24, 0x1a, 0xb03, 0x2}, [@mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x2, 0x861f}, @dmm={0x7, 0x24, 0x14, 0x6, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x9, 0x7, 0x2, 0x1, 0x0, 0x65}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x1, 0x8, 0xfc, 0x8, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x3b}]}, @generic={0x8a, 0x2, "fc536fa95dafcd14da64e467206d905161d757067de1b7d561339ab9dcc009a9c9ec5f35ccafee226f6ba4497ba403e6fd9a682bfc2a5662981b9b02712c3b93f63e9dc7c9a208facd3edaacebd67cf81b6a97e2e8d0b1de557128e8dabe58845c83801dae78a2b6a3b2c12f0f7327719e414149805bbe7c2aaa9062fe163d60f76e374a519dac86"}], [{{0x9, 0x5, 0x4, 0x2, 0x3ff, 0x5, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0xf}]}}, {{0x9, 0x5, 0x6, 0x2, 0x0, 0x76, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x83, 0x6}, @generic={0xb6, 0x23, "1a7d9a00eb1ccd38d4710089534670682dfc118d289ad355728f3ae7c00e3fbb5f1aad4019949919af28423a9610c5798ae17aa35c1bacfda5aaf0694349e10ae90481514fbebd9fcd6c27ca23f9c74e2afdee61c33e511a9f9765ba1d945f229b9fc4d7b409aab275b269b3db4971ba3e12f98c024fce2aa975e63905dea9e54a76a854dc6ec704f5b7fe685c6047e619fe777a0af9a35607606854ac0009501997d47674b1e58120be569d4e70c67cb7e581e1"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x8, 0x3, 0x4}}, {{0x9, 0x5, 0x2, 0xc, 0x3ff, 0x1, 0xd, 0x7, [@generic={0x67, 0xf, "ed907b57b4e5bb6756124600813ff97d8e91941b46d49552903095edb13493b30b0e0402c7925805489982957eccf44bc0a8222a8e02cd48a20dc7099e33e39c6354b7a3db73a3c948cb70481965173a19ce22288d732bfc0a8c5ca6442dc94c9fab45b079"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x7ff}]}}, {{0x9, 0x5, 0x0, 0x1, 0x400, 0x4, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x800}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xac, 0x1ff}]}}, {{0x9, 0x5, 0x7, 0x2, 0x200, 0x5, 0x2, 0xcd, [@generic={0x1c, 0xb, "003485c3e5e18b63c49f5e4857fa67b803e11f083ad9cb13f9ee"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x3ff, 0x0, 0xff, 0x1}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0xec, 0x3, 0x3, [@generic={0xc5, 0x1, "38430f299261cc5fbab0dc5dec3697e293e15e2eb481af73ca0d18617c1dc4fa644ad6e96ac0ac945bd853c9ba8493a4d51f510f5fab634d8bc812e84d229712eb67ad87c548718de823825dafa4da869f79db0395aa03806bb6f5ca0c419e0cf7478d2f37379c02dca68a61cccf20919ae7f071fb472079856fba462894618c8be6521af6e91ef567b9b22233a3e8bda8521767b84517627819b41d6435b29d3ca809d6edb3222fbe4da9beee9d32ca47ef182cb4c48a5411f38bead743612cfbbe8f"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x4}]}}, {{0x9, 0x5, 0x5, 0x8, 0x8, 0x0, 0x0, 0xca, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3a, 0x1200}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x9, 0x9d, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xe, 0x400}]}}, {{0x9, 0x5, 0x8, 0x3, 0x200, 0x4, 0x94, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xdd, 0x3}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x8, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x1}, @generic={0x4d, 0x11, "76cd793697e965f2555ff84c32ad0d2274cfee15f4d0daae015bcbdbfa3c52b84eb32499aa4fb7c78a7b6ca809abdef4acb813e4b63905e13415a5e0f543c7512382589d1d038267904ed0"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0xe0, 0x7, 0x2, [@generic={0x6c, 0x23, "d696ebc5f4367d5306e769b960299f8472752fa8476bdef37c2f5f983746d4f595945c9a43af9f275ab30de94cbba3de2d3cafae24de0bd63d8d59e7531ab360e0026c6ecca374a4aa78db4870c3c98c709dbac2dbdac8acd7cc9096a5d9654f700e8532d0eeb45329cb"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0x1000}]}}, {{0x9, 0x5, 0x6, 0x2, 0x20, 0x9, 0x2, 0xc0}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xb, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x40, 0x6}]}}, {{0x9, 0x5, 0x3, 0x12, 0x10, 0x6, 0x65, 0x63}}]}}]}}]}}, &(0x7f0000001b40)={0xa, &(0x7f0000001840)={0xa, 0x6, 0x201, 0xa9, 0x4, 0x81, 0xff, 0x11}, 0x21, &(0x7f0000001880)={0x5, 0xf, 0x21, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x4, 0x91}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0xba, 0xf000, 0x800}, @ptm_cap={0x3}]}, 0x7, [{0x31, &(0x7f00000018c0)=@string={0x31, 0x3, "4d8cf2f808105380680cb302322e2261a02dfa97e3a7739ec6f29f8011e80025765f89faa35899d0f1ae56f00634a5"}}, {0x1c, &(0x7f0000001900)=@string={0x1c, 0x3, "84a6cae643da4f6019af11811b61599a82c0cf91e569ffe6fe75"}}, {0x4, &(0x7f0000001940)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f0000001980)=@lang_id={0x4, 0x3, 0x414}}, {0xf, &(0x7f00000019c0)=@string={0xf, 0x3, "9579da287409f0e0b5a95d780e"}}, {0xf9, &(0x7f0000001a00)=@string={0xf9, 0x3, "d9b2dd4ffb4e14c406e5f1f60097d349e8be4ff3a14c01ea35ca34a011961366ccf8dfbe527cbff18f2dfc8ac25bec48e11be91073a6eb33cdc8c6b9ceebaf48ba9c77a0197183034c3d0fde3e988022edc350d815f9dcda6d80df039ae1eb45205f5fea272b81cbcb92a3dd3a0e310e3a896494b712fc4fda1ec20ea845ee142372fdc2027175a919d6c6aa6eeb15b79c73302099965b1399d72a46ab8990bbaa2736a7a837ae3376f500bed60d4f9e4fdc1f76ef7eb02b20d9f39ac548e127e2ce559e18fc4448ccf7c7b3d0c0161a66ba7a8d4c52a2b2d371f5397fff818fa19429883614f95d995e059241eee2761930792989d41f"}}, {0x2c, &(0x7f0000001b00)=@string={0x2c, 0x3, "4ce5d4cb084eec8cf46712fa9049fca0fc68ac02c2750cff1d30423216c85df3e5b38b56590001df2493"}}]}) (async)
eventfd(0x0)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/43, 0x0}) (async)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/80, &(0x7f0000000780)=""/82}) (async)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in=@empty, 0x4f23, 0x0, 0x4e23, 0x2, 0xa, 0x2a11bad3d5f03f04, 0x30, 0x2f}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x100000000, 0xfffffffffffffffb, 0x3, 0x8, 0x7fff}, {0x4, 0xfffffffffffffffe, 0x4, 0x9}, 0x10001, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0xa, @in=@remote, 0xfffffffe, 0x0, 0x0, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe8) (async)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) (async)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) (async)
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) (async)
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1) (async)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000c40)={0xd9, "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"})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)

4.958357505s ago: executing program 3 (id=354):
mkdir(&(0x7f0000000400)='./file0\x00', 0x114)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0xffff, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xdfb435498d672af6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40048c1}, 0x4)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r6)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

4.958002517s ago: executing program 1 (id=355):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
r2 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_disconnect(r2)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd)
dup(r3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r4, 0x0, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
clock_adjtime(0x0, &(0x7f00000001c0)={0x8, 0x9, 0x40000000010, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x7fff, 0x1, 0x0, 0xfffffffd, 0x7, 0x1000000000, 0x0, 0x2000000003, 0x0, 0x82a, 0x8000000, 0x81, 0x7, 0x0, 0x0, 0x5})
syz_clone3(0x0, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x8880, 0x85)
ioctl$TIOCVHANGUP(r3, 0x5437, 0x0)
syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802)
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x18, 0x0, 0x1, 0x4, 0x6, @random="6154565d36f0"}, 0x14)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r7, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0)

4.831046905s ago: executing program 3 (id=356):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0100001600010028bd7000fcdbdf25e0000001000000000000000000000000000000000000000000000000000000004e2100034e220010020080a03b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000004000000000004d432000300200100000000000000000000000000003a3700000000000000000000000000000200000000000000b80a00000000000008000000000000000100000000000000040000000000000003000000000000002200000000000000d2000000000000000400000000000000030000000000000000000000cc000000070000002cbd700004350000b0e801002c0000000000000001000000020000001c00040001004e224e20000020010000000000000000000000000000080061"], 0x11c}, 0x1, 0x0, 0x0, 0x48095}, 0x4000014)

4.789862968s ago: executing program 3 (id=357):
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="100000000914ed37"], 0x10}, 0x1, 0x0, 0x0, 0x40040}, 0x20004080)
recvmsg$can_bcm(r4, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40000000)
sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x3)
connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
creat(&(0x7f00000000c0)='./bus\x00', 0x182)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r5, &(0x7f0000000240)="8a", 0x1, 0x40440c4, &(0x7f0000000080)={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0xe}, 0x6}, 0x1c)

4.42689688s ago: executing program 2 (id=358):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
close(0xffffffffffffffff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/devices/system/memory/memory10/state\x00', 0x1, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$TIOCSETD(r1, 0x5423, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat(0xffffffffffffffff, 0x0, 0x0, 0x48)
ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000040))
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x50000, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x1e1942, 0x0)
r4 = syz_io_uring_setup(0x29d7, &(0x7f0000000540)={0x0, 0x8550, 0x3100, 0x8001, 0x1d5}, &(0x7f0000000100)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0, &(0x7f0000000180)=<r7=>0x0)
syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0xa, 0x0, @fd=r1, 0x0, 0x0, 0x80000002, 0x7, 0x1, {0x0, 0x0, r2}})
io_uring_enter(r4, 0x1, 0x1, 0x61, 0x0, 0x0)
r8 = open$dir(0x0, 0x40000, 0x81)
getdents64(r8, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1002000ff)
write(r0, &(0x7f0000000200)='offline\x00', 0x8)
write(0xffffffffffffffff, &(0x7f0000000240)='online_movable\x00', 0xf)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/memory/memory9/state\x00', 0x1, 0x0)

3.356672585s ago: executing program 0 (id=359):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0}, 0x68)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x2000, &(0x7f0000000140)={&(0x7f0000000180)={0x28, r1, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x1c00000, 0x4, 0x1, 0x40220, 0x1, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x0, 0x4}, 0x50)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r3, 0x58, &(0x7f0000000600)={0x0, <r4=>0x0}}, 0x10)
r5 = timerfd_create(0x1, 0x0)
timerfd_gettime(r5, &(0x7f0000000080))
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={r4}, 0xc)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='mtd0\x00', 0x16d)
mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, &(0x7f0000000140)='compr=none\x00')
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='fd', 0x0, r9)
unlinkat(0xffffffffffffff9c, 0x0, 0x0)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/fillfile\x00', 0x42, 0x1ff)
write(r10, &(0x7f00000005c0)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f", 0x8000)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000ffdbdf251a89001800018014000200647500"/38], 0x2c}, 0x1, 0x0, 0x0, 0x8081}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x1ff, 0x0, 0x0, 0xd17}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x0)

3.02948166s ago: executing program 4 (id=360):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r0, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}})

1.015768644s ago: executing program 0 (id=361):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0xb8, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x0)

1.015124449s ago: executing program 1 (id=362):
mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', 0x0, 0x3f, &(0x7f0000000280)=ANY=[@ANYBLOB="73746174733d299d8e35ca8150858b65195d6c60676c6f62616c2c00"])
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000001040)={0xe, {"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", 0x1040}}, 0x1006)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="f8ff00400400"})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4)
mkdir(&(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
fanotify_mark(r3, 0x2, 0x20, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='dev_mnt\x00', 0x1, 0x78)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='dev_mnt\x00', 0x1ff)
mount(&(0x7f00000001c0)=@filename='none\x00', &(0x7f0000000200)='dev_mnt\x00', &(0x7f0000000240)='devtmpfs\x00', 0x2000008, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r4, &(0x7f0000000380)='zstd', 0x4)
openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000440)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0xfe, &(0x7f00000001c0)=[{&(0x7f00000007c0)="d8000000180081054e81f782db4cb90402200800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x20000800)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x1abe1019, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4008011}, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e000000030100000000040000000000000008001f0001"], 0xd4}}, 0x0)

901.032012ms ago: executing program 0 (id=363):
r0 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000048000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000014000480080001400000000308000240000000000800054000000004"], 0x128}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0)

781.188112ms ago: executing program 3 (id=364):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0xfffff9, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000000000000000000000000000000000000000000000000000000000000000000040c3aef8761e30cff0ed36b2eb00"]}, 0x108)

703.408768ms ago: executing program 2 (id=365):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x29, 0x2, 0x0)
r0 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000180))
r1 = memfd_create(&(0x7f0000000540)='\x02A\xbb\xcc\x96\x0eo\x1f\xe2@\xcc\xb1Yg\x00\x00\x00\x00\x00\x00', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x100000f, 0x8010, r1, 0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x2}, 0x1)

186.512674ms ago: executing program 0 (id=366):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
shutdown(r1, 0x2)
pselect6(0x40, &(0x7f0000000840)={0x7, 0x1ff, 0x4, 0x7, 0x1, 0x2, 0x5, 0x9}, 0x0, &(0x7f00000008c0)={0x9, 0x9, 0x401, 0x9, 0x6, 0x8000000000000001, 0xa94f, 0x2}, &(0x7f0000000900), 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={r2, 0xcc8c, 0x8000, 0x8, 0x6, 0xfffffffc}, 0x14)

141.682973ms ago: executing program 1 (id=367):
mkdir(&(0x7f0000000400)='./file0\x00', 0x114)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0xffff, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xdfb435498d672af6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40048c1}, 0x4)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r6)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

134.554155ms ago: executing program 0 (id=368):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="020e0000180000000000000000000000030005000000002002000000ac1e00010000000000000000030006000007000002000000000000000000000000000000040004000f0000000000000000000000000000000000000000000000000000000800120000000200000000000000000006000000000000000000000000000000ff02000000000000000000000000000100000000000000000000000000000000040003"], 0xc0}}, 0x0)

129.230688ms ago: executing program 4 (id=369):
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="100000000914ed37"], 0x10}, 0x1, 0x0, 0x0, 0x40040}, 0x20004080)
recvmsg$can_bcm(r4, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40000000)
sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x3)
connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10)
creat(&(0x7f00000000c0)='./bus\x00', 0x182)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r6, &(0x7f0000000240)="8a", 0x1, 0x40440c4, &(0x7f0000000080)={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0xe}, 0x6}, 0x1c)

82.356389ms ago: executing program 2 (id=370):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
fanotify_init(0x200, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x4a8602, 0x0)
write(r1, &(0x7f0000000100)='\x00', 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x71d000, 0x0)
syz_ublk_setup_io_uring(0x7fa7, &(0x7f0000000040)={0x0, 0x8, 0x100, 0x3}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000004c0))
r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x2, 0x0)
ioctl(r3, 0x40946400, &(0x7f0000000100)="7063323132650000000000000000000000000000000200"/149)
ioctl$COMEDI_INSN(r3, 0x8028650c, &(0x7f0000000200)={0x3, 0xf, &(0x7f0000000300)=[0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1})
syz_open_dev$ublk_chdev(0x0, 0x0, 0x2)
write$sequencer(r1, &(0x7f0000000180), 0x0)
r4 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000005c0)={{0xa, 0x0, 0xe044}, 0x0, 0x40, 0x6, 0x0, 0x0, 0x4002, 'syz1\x00', 0x0})
ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7)
read$FUSE(r0, &(0x7f0000002040)={0x2020, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x2020)
ptrace$getenv(0x4201, r5, 0x1, &(0x7f0000004080))
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0})
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)

0s ago: executing program 0 (id=371):
socket$netlink(0x10, 0x3, 0xc)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180), 0x4)
syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092df5510ac05269289b201020301090222000100000000090400000103e900000905a1e7", @ANYRESDEC], 0x0)

kernel console output (not intermixed with test programs):

eled_t tclass=dir permissive=1
[  124.115795][   T30] audit: type=1400 audit(1787374101.888:398): avc:  denied  { write } for  pid=6296 comm="syz.2.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  124.146149][ T5704] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  124.310605][ T5704] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  124.346718][ T5704] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  124.375909][ T5704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.629877][ T5704] as10x_usb: device has been detected
[  124.674326][ T5704] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  124.798149][ T5607] Bluetooth: hci2: command 0x0c1a tx timeout
[  124.798337][ T5610] Bluetooth: hci4: command 0x0c1a tx timeout
[  124.882161][ T5610] Bluetooth: hci1: command 0x0c1a tx timeout
[  124.888294][ T5610] Bluetooth: hci3: command 0x0c1a tx timeout
[  125.527365][ T5704] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  125.593678][ T5704] as10x_usb: error during firmware upload part1
[  125.663614][ T5704] Registered device Abilis Systems DVB-Titan
[  125.674677][ T5704] usb 2-1: USB disconnect, device number 8
[  125.743401][ T5704] Unregistered device Abilis Systems DVB-Titan
[  125.749465][   T30] audit: type=1400 audit(1787374103.528:399): avc:  denied  { map } for  pid=6305 comm="syz.0.105" path="socket:[10370]" dev="sockfs" ino=10370 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  125.783159][ T5704] as10x_usb: device has been disconnected
[  125.835519][   T30] audit: type=1400 audit(1787374103.528:400): avc:  denied  { read } for  pid=6305 comm="syz.0.105" path="socket:[10370]" dev="sockfs" ino=10370 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  125.865619][   T30] audit: type=1400 audit(1787374103.638:401): avc:  denied  { bind } for  pid=6312 comm="syz.3.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  125.883931][ T6313] netlink: 44 bytes leftover after parsing attributes in process `syz.3.108'.
[  125.886294][   T30] audit: type=1400 audit(1787374103.638:402): avc:  denied  { listen } for  pid=6312 comm="syz.3.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  125.895315][ T5784] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  125.926922][   T30] audit: type=1400 audit(1787374103.698:403): avc:  denied  { name_connect } for  pid=6309 comm="syz.4.107" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  125.947199][   T30] audit: type=1400 audit(1787374103.718:404): avc:  denied  { accept } for  pid=6312 comm="syz.3.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  125.967116][   T30] audit: type=1400 audit(1787374103.718:405): avc:  denied  { write } for  pid=6312 comm="syz.3.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  126.098538][ T5784] usb 3-1: Using ep0 maxpacket: 8
[  126.106360][ T5784] usb 3-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40
[  126.113398][ T6317] input: syz0 as /devices/virtual/input/input8
[  126.119800][ T5784] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 247, changing to 7
[  126.145812][ T5784] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.153902][ T5784] usb 3-1: Product: 䙗褭롒ᰓ㠯鄻ᖸ듭ꥃ莤渖ʚ淃㲨렡镽牄⻨謮ﳌ䮲瀷ࣃ胫᝹ㅮ੺罩츻ꦂລ鐝鯚莽殕жܣ㜶덕罇⹲뱸묜叮玞턮鮔䔋홪ࡶ㔆᫦ꇉ渃䛶킢篬縫풉ꊵ覬砇紛턵
[  126.167862][ T5720] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  126.178287][ T5784] usb 3-1: Manufacturer: ┈샔흴෽罧㺞ᮊ쟾菑ࣂ针芼㝤ﺺ籂虈홹橖ă帛糑㛢ॡ㿰뭋秎黣Ḁ俗艜뢏◘挟쯝ꅭ蛋莠漻㴨咴뵬㔕뜌ꍶ쭒ݓ➅緄렖ٓ剘ぱ锞ﻗ墂᪘咇钋晬䕰퀇욦諭阱ԯ魻檻◤젠羡᧊೙ᯯ뒂㘣뙴瞟氼촷牑멯峻穴㠻孌嵸笌ᇉᏝ毕⋤쾱䪖偨❢
[  126.218117][ T5784] usb 3-1: SerialNumber: 꾉欱蚈꧔Ҡ뱁橖䇮荥鿿企嘘쬟⥄﫻翧疟쾋ᓌ䇚ﾎɞ黖Ὤ叙ὦ첲꼔䇴橝໏獛ර쬄慺緯擒⊺᎘맆돊활驸卫煎৖뺦琇悽ភ蚡㙫䓪쪞㱿➽Ｗ໣௠몪둗ព䚒瘡ぞ쉁欄ꛧㆬ◵ꈫꢼ웶찍䟌쮒阽莙
[  126.361302][ T5720] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  126.387243][ T5720] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  126.409763][ T5720] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.434755][ T5720] usb 5-1: config 0 descriptor??
[  126.446431][ T5720] pwc: Askey VC010 type 2 USB webcam detected.
[  126.477728][ T5784] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  126.493453][ T5784] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2
[  126.531199][ T5784] usb 3-1: USB disconnect, device number 8
[  126.627904][    T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  126.660446][ T6323] syzkaller0: entered promiscuous mode
[  126.670213][ T6323] syzkaller0: entered allmulticast mode
[  126.695318][ T6323] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  126.750908][ T6323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.111'.
[  126.789346][    T9] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  126.805460][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  126.817852][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.852787][ T5720] pwc: recv_control_msg error -32 req 02 val 2b00
[  126.866440][    T9] as10x_usb: device has been detected
[  126.873055][ T5720] pwc: recv_control_msg error -32 req 02 val 2700
[  126.898364][ T5720] pwc: recv_control_msg error -32 req 02 val 2c00
[  126.898532][    T9] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  126.930262][ T5720] pwc: recv_control_msg error -32 req 04 val 1000
[  126.947656][ T5720] pwc: recv_control_msg error -32 req 04 val 1300
[  126.964638][ T5720] pwc: recv_control_msg error -32 req 04 val 1400
[  127.010521][ T5720] pwc: recv_control_msg error -71 req 02 val 2000
[  127.013060][    T9] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  127.074745][ T5720] pwc: recv_control_msg error -71 req 02 val 2100
[  127.179832][ T5720] pwc: recv_control_msg error -71 req 04 val 1500
[  127.254107][ T5720] pwc: recv_control_msg error -71 req 02 val 2500
[  127.256995][    T9] as10x_usb: error during firmware upload part1
[  127.271914][    T9] Registered device Abilis Systems DVB-Titan
[  127.309289][ T5720] pwc: recv_control_msg error -71 req 02 val 2400
[  127.336276][ T5720] pwc: recv_control_msg error -71 req 02 val 2600
[  127.353579][ T5720] pwc: recv_control_msg error -71 req 02 val 2900
[  127.366375][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  127.374288][ T5720] pwc: recv_control_msg error -71 req 02 val 2800
[  127.378942][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[  127.402647][ T5720] pwc: recv_control_msg error -71 req 04 val 1100
[  127.427957][ T5720] pwc: recv_control_msg error -71 req 04 val 1200
[  127.491741][ T5720] pwc: Registered as video103.
[  127.530849][ T5720] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9
[  127.606340][ T5720] usb 5-1: USB disconnect, device number 8
[  127.768563][   T29] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  128.009150][   T29] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  128.040734][   T29] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4
[  128.101637][   T29] usb 3-1: config 0 interface 0 has no altsetting 0
[  128.145649][   T29] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  128.189504][   T29] usb 3-1: Product: syz
[  128.211150][   T29] usb 3-1: Manufacturer: syz
[  128.238391][   T29] usb 3-1: SerialNumber: syz
[  128.260380][   T29] usb 3-1: config 0 descriptor??
[  128.297864][   T29] usb 3-1: selecting invalid altsetting 0
[  128.593860][ T6339] netlink: 'syz.1.109': attribute type 1 has an invalid length.
[  128.610214][  T981] usb 2-1: USB disconnect, device number 9
[  128.989952][  T981] Unregistered device Abilis Systems DVB-Titan
[  129.001755][  T981] as10x_usb: device has been disconnected
[  129.182866][   T29] usb 3-1: USB disconnect, device number 9
[  129.275754][ T6344] netlink: 24 bytes leftover after parsing attributes in process `syz.2.117'.
[  129.388255][    T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  129.449718][ T6347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  129.473892][ T6347] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  129.509837][ T6325] support for the xor transformation has been removed.
[  129.539201][ T6325] netlink: 'syz.3.112': attribute type 3 has an invalid length.
[  129.578382][    T9] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  129.596504][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  129.607859][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.641516][    T9] as10x_usb: device has been detected
[  129.656652][    T9] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  129.668354][   T29] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[  129.682683][    T9] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  129.695615][    T9] as10x_usb: error during firmware upload part1
[  129.710164][    T9] Registered device Abilis Systems DVB-Titan
[  129.838417][   T29] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  129.861912][   T29] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  129.874402][   T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.888675][   T29] gspca_main: stv0680-2.14.0 probing 041e:4007
[  130.000186][  T981] usb 5-1: USB disconnect, device number 9
[  130.018719][  T981] Unregistered device Abilis Systems DVB-Titan
[  130.019744][  T981] as10x_usb: device has been disconnected
[  130.087174][ T5784] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  130.135027][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  130.135044][   T30] audit: type=1400 audit(1787374107.908:408): avc:  denied  { create } for  pid=6351 comm="syz.1.120" name="#7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  130.162092][   T30] audit: type=1400 audit(1787374107.908:409): avc:  denied  { link } for  pid=6351 comm="syz.1.120" name="#7" dev="tmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  130.184076][   T30] audit: type=1400 audit(1787374107.908:410): avc:  denied  { rename } for  pid=6351 comm="syz.1.120" name="#8" dev="tmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  130.206372][   T30] audit: type=1400 audit(1787374107.918:411): avc:  denied  { bind } for  pid=6351 comm="syz.1.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  130.227160][   T30] audit: type=1400 audit(1787374107.948:412): avc:  denied  { write } for  pid=6351 comm="syz.1.120" path="socket:[10521]" dev="sockfs" ino=10521 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  130.257883][ T5784] usb 4-1: Using ep0 maxpacket: 8
[  130.263777][ T5784] usb 4-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40
[  130.286949][ T5784] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 247, changing to 7
[  130.300683][ T5784] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.309096][ T5784] usb 4-1: Product: 䙗褭롒ᰓ㠯鄻ᖸ듭ꥃ莤渖ʚ淃㲨렡镽牄⻨謮ﳌ䮲瀷ࣃ胫᝹ㅮ੺罩츻ꦂລ鐝鯚莽殕жܣ㜶덕罇⹲뱸묜叮玞턮鮔䔋홪ࡶ㔆᫦ꇉ渃䛶킢篬縫풉ꊵ覬砇紛턵
[  130.332547][ T5784] usb 4-1: Manufacturer: ┈샔흴෽罧㺞ᮊ쟾菑ࣂ针芼㝤ﺺ籂虈홹橖ă帛糑㛢ॡ㿰뭋秎黣Ḁ俗艜뢏◘挟쯝ꅭ蛋莠漻㴨咴뵬㔕뜌ꍶ쭒ݓ➅緄렖ٓ剘ぱ锞ﻗ墂᪘咇钋晬䕰퀇욦諭阱ԯ魻檻◤젠羡᧊೙ᯯ뒂㘣뙴瞟氼촷牑멯峻穴㠻孌嵸笌ᇉᏝ毕⋤쾱䪖偨❢
[  130.365310][ T5784] usb 4-1: SerialNumber: 꾉欱蚈꧔Ҡ뱁橖䇮荥鿿企嘘쬟⥄﫻翧疟쾋ᓌ䇚ﾎɞ黖Ὤ叙ὦ첲꼔䇴橝໏獛ර쬄慺緯擒⊺᎘맆돊활驸卫煎৖뺦琇悽ភ蚡㙫䓪쪞㱿➽Ｗ໣௠몪둗ព䚒瘡ぞ쉁欄ꛧㆬ◵ꈫꢼ웶찍䟌쮒阽莙
[  130.417992][ T5704] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  130.579082][ T5704] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40
[  130.591586][ T5704] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xCE, changing to 0x8E
[  130.615298][ T6360] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57e00
[  130.624421][ T6360] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  130.631938][ T6360] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  130.640815][ T6360] raw: 0000000000000000 ffff8880202ff400 00000001ffffffff 0000000000000000
[  130.649476][ T6360] page dumped because: unmovable page
[  130.654922][ T6360] page_owner tracks the page as allocated
[  130.670336][ T5704] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 999, setting to 64
[  130.692925][ T6360] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12c02(GFP_NOIO|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY), pid 10, tgid 10 (kworker/0:1), ts 67239158594
[  130.712079][ T6360]  post_alloc_hook+0xfd/0x120
[  130.716952][ T6360]  get_page_from_freelist+0x110d/0x35b0
[  130.722693][ T6360]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[  130.728712][ T6360]  alloc_pages_node_noprof+0x93/0x200
[  130.734198][ T6360]  pcpu_populate_chunk+0x17d/0x950
[  130.739462][ T6360]  pcpu_balance_workfn+0x85a/0xe00
[  130.744767][ T6360]  process_one_work+0xac7/0x1b10
[  130.749849][ T6360]  worker_thread+0x5ef/0xe50
[  130.754518][ T6360]  kthread+0x373/0x450
[  130.758946][ T6360]  ret_from_fork+0x730/0xd60
[  130.765165][ T6360]  ret_from_fork_asm+0x1a/0x30
[  130.770170][ T6360] page last free pid 1 tgid 1 ts 16393424815 stack trace:
[  130.777396][ T6360]  free_pages_prepare+0x586/0xe00
[  130.782731][ T6360]  __free_contig_range_common+0x14f/0x250
[  130.789644][ T6360]  destroy_args+0xa8/0x7a0
[  130.794798][ T6360]  debug_vm_pgtable+0x1d69/0x3490
[  130.800112][ T6360]  do_one_initcall+0x11c/0x6f0
[  130.804983][ T6360]  kernel_init_freeable+0x6ea/0x7b0
[  130.810800][ T6360]  kernel_init+0x21/0x1e0
[  130.815662][ T6360]  ret_from_fork+0x730/0xd60
[  130.820576][ T6360]  ret_from_fork_asm+0x1a/0x30
[  130.884727][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.936644][ T5704] usb 2-1: Product: syz
[  130.965070][ T5704] usb 2-1: Manufacturer: syz
[  131.006178][ T5704] usb 2-1: SerialNumber: syz
[  131.036139][   T29] stv0680 3-1:4.0: STV(e): camera ping failed!!
[  131.095697][   T29] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32
[  131.150214][   T29] stv0680 3-1:4.0: last error: 103,  command = 0xfe
[  131.294217][   T29] usb 3-1: USB disconnect, device number 10
[  131.673055][ T5704] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  131.700487][ T5704] usb 2-1: MIDIStreaming interface descriptor not found
[  131.892194][ T5784] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  131.901514][ T5704] usb 2-1: USB disconnect, device number 10
[  131.923349][ T5784] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -2
[  131.999155][   T30] audit: type=1400 audit(1787374109.768:413): avc:  denied  { read write } for  pid=6362 comm="syz.4.123" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  132.043097][ T5784] usb 4-1: USB disconnect, device number 7
[  132.110636][   T30] audit: type=1400 audit(1787374109.768:414): avc:  denied  { open } for  pid=6362 comm="syz.4.123" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  132.177705][   T30] audit: type=1400 audit(1787374109.888:415): avc:  denied  { write } for  pid=6375 comm="syz.0.126" name="ipv6_route" dev="proc" ino=4026533484 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  132.241942][   T30] audit: type=1400 audit(1787374109.938:416): avc:  denied  { write } for  pid=6375 comm="syz.0.126" name="c.1" dev="configfs" ino=9936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  132.768435][ T5704] usb 1-1: USB disconnect, device number 7
[  134.831111][ T6390] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57e00
[  134.858506][ T6390] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  135.055334][ T6390] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  135.077344][ T6390] raw: 0000000000000000 ffff8880202ff400 00000001ffffffff 0000000000000000
[  135.164850][ T6390] page dumped because: unmovable page
[  135.197370][ T6390] page_owner tracks the page as allocated
[  135.248530][ T6390] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12c02(GFP_NOIO|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY), pid 10, tgid 10 (kworker/0:1), ts 67239158594
[  135.265766][ T6390]  post_alloc_hook+0xfd/0x120
[  135.276250][ T6390]  get_page_from_freelist+0x110d/0x35b0
[  135.286877][ T6390]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[  135.303353][ T6390]  alloc_pages_node_noprof+0x93/0x200
[  135.322257][ T6390]  pcpu_populate_chunk+0x17d/0x950
[  135.338432][ T6390]  pcpu_balance_workfn+0x85a/0xe00
[  135.351048][ T6390]  process_one_work+0xac7/0x1b10
[  135.355656][ T6397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  135.364934][ T6390]  worker_thread+0x5ef/0xe50
[  135.375276][ T6390]  kthread+0x373/0x450
[  135.379828][ T6390]  ret_from_fork+0x730/0xd60
[  135.388663][ T6390]  ret_from_fork_asm+0x1a/0x30
[  135.413958][   T30] audit: type=1400 audit(1787374113.188:417): avc:  denied  { listen } for  pid=6400 comm="syz.4.133" lport=38712 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  135.419248][ T6397] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  135.448717][ T6390] page last free pid 1 tgid 1 ts 16393424815 stack trace:
[  135.455900][ T6390]  free_pages_prepare+0x586/0xe00
[  135.466317][ T6390]  __free_contig_range_common+0x14f/0x250
[  135.472231][   T30] audit: type=1400 audit(1787374113.228:418): avc:  denied  { accept } for  pid=6400 comm="syz.4.133" lport=38712 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  135.495094][ T6390]  destroy_args+0xa8/0x7a0
[  135.501669][ T6390]  debug_vm_pgtable+0x1d69/0x3490
[  135.508010][ T6390]  do_one_initcall+0x11c/0x6f0
[  135.513133][ T6390]  kernel_init_freeable+0x6ea/0x7b0
[  135.518759][   T30] audit: type=1400 audit(1787374113.228:419): avc:  denied  { getopt } for  pid=6400 comm="syz.4.133" lport=38712 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  135.542217][ T6390]  kernel_init+0x21/0x1e0
[  135.546638][ T6390]  ret_from_fork+0x730/0xd60
[  135.551595][ T6390]  ret_from_fork_asm+0x1a/0x30
[  135.557058][   T30] audit: type=1400 audit(1787374113.228:420): avc:  denied  { setopt } for  pid=6400 comm="syz.4.133" lport=38712 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  135.603792][   T30] audit: type=1400 audit(1787374113.228:421): avc:  denied  { read } for  pid=6400 comm="syz.4.133" lport=38712 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[  135.647863][  T981] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  135.655571][ T5704] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  135.684683][   T30] audit: type=1400 audit(1787374113.458:422): avc:  denied  { mount } for  pid=6405 comm="syz.2.135" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  135.787407][   T30] audit: type=1400 audit(1787374113.558:423): avc:  denied  { unmount } for  pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  135.918123][  T981] usb 2-1: Using ep0 maxpacket: 16
[  135.923457][ T5704] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02
[  136.387344][  T981] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  136.407203][ T5704] usb 1-1: Dual-Role OTG device on HNP port
[  136.419658][  T981] usb 2-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config
[  136.434969][ T5704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.453938][  T981] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  136.473816][ T5704] gspca_main: spca501-2.14.0 probing 0000:0000
[  136.498070][ T5704] gspca_spca501: reg write: error -32
[  136.511281][  T981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  136.530093][ T5704] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05
[  136.555776][ T5704] spca501 1-1:1.0: probe with driver spca501 failed with error -22
[  136.566023][  T981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  136.600962][  T981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.615422][  T981] usb 2-1: Product: syz
[  136.636109][  T981] usb 2-1: Manufacturer: syz
[  136.655669][  T981] usb 2-1: SerialNumber: syz
[  136.715945][  T981] usb 2-1: config 0 descriptor??
[  136.782200][   T30] audit: type=1400 audit(1787374114.548:424): avc:  denied  { ioctl } for  pid=6414 comm="syz.4.137" path="socket:[10621]" dev="sockfs" ino=10621 ioctlcmd=0x5872 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  136.973586][  T981] appledisplay 2-1:0.0: Error while getting initial brightness: -71
[  137.049660][  T981] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -71
[  137.101829][ T6424] unsupported nla_type 97
[  137.120472][  T981] usb 2-1: USB disconnect, device number 11
[  137.312965][ T6427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.142'.
[  137.322264][ T6427] bridge_slave_1: left allmulticast mode
[  137.328088][ T6427] bridge_slave_1: left promiscuous mode
[  137.335990][ T6427] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.373064][ T6427] bridge_slave_0: left allmulticast mode
[  137.379005][ T6427] bridge_slave_0: left promiscuous mode
[  137.387474][ T6427] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.105139][   T30] audit: type=1400 audit(1787374115.878:425): avc:  denied  { write } for  pid=6428 comm="syz.4.143" name="c.1" dev="configfs" ino=9936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  138.528757][ T5720] usb 1-1: USB disconnect, device number 8
[  138.702517][ T5607] Bluetooth: hci4: unexpected event 0x18 length: 247 > 23
[  138.725338][ T6440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.146'.
[  139.037020][ T6441] jffs2: notice: (6441) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  140.640990][ T6452] jffs2: notice: (6452) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  140.659892][ T6454] 0x000000000007-0x000000020000 : ""
[  140.666367][   T30] audit: type=1400 audit(1787374118.438:426): avc:  denied  { ioctl } for  pid=6451 comm="syz.1.149" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1
[  140.852414][ T6454] ftl_cs: FTL header corrupt!
[  142.404196][   T30] audit: type=1400 audit(1787374119.908:427): avc:  denied  { write } for  pid=6450 comm="syz.2.150" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  142.596085][ T6459] netlink: 16 bytes leftover after parsing attributes in process `syz.3.148'.
[  142.619124][   T30] audit: type=1800 audit(1787374120.398:428): pid=6452 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.150" name="fillfile" dev="jffs2" ino=2 res=0 errno=0
[  142.770899][ T6465] jffs2: notice: (6465) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  142.802504][ T6442] syz.0.145 (6442): drop_caches: 2
[  142.854428][   T30] audit: type=1400 audit(1787374120.628:429): avc:  denied  { write } for  pid=6464 comm="syz.1.151" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  142.888444][ T6465] FAULT_INJECTION: forcing a failure.
[  142.888444][ T6465] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  142.901527][ T6465] CPU: 0 UID: 0 PID: 6465 Comm: syz.1.151 Not tainted syzkaller #0 PREEMPT(full) 
[  142.901541][ T6465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  142.901548][ T6465] Call Trace:
[  142.901552][ T6465]  <TASK>
[  142.901556][ T6465]  dump_stack_lvl+0x100/0x190
[  142.901576][ T6465]  should_fail_ex.cold+0x5/0xa
[  142.901591][ T6465]  _copy_from_user+0x2e/0xd0
[  142.901602][ T6465]  copy_msghdr_from_user+0x9f/0x4c0
[  142.901616][ T6465]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  142.901635][ T6465]  ___sys_sendmsg+0x106/0x1e0
[  142.901648][ T6465]  ? __pfx____sys_sendmsg+0x10/0x10
[  142.901661][ T6465]  ? get_pid_task+0x106/0x250
[  142.901678][ T6465]  ? find_held_lock+0x2b/0x80
[  142.901698][ T6465]  __sys_sendmsg+0x160/0x210
[  142.901715][ T6465]  ? __pfx___sys_sendmsg+0x10/0x10
[  142.901737][ T6465]  do_syscall_64+0x123/0x790
[  142.901761][ T6465]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.901772][ T6465] RIP: 0033:0x7fa6b6d9e0d9
[  142.901781][ T6465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  142.901792][ T6465] RSP: 002b:00007fa6b7bb5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  142.901804][ T6465] RAX: ffffffffffffffda RBX: 00007fa6b7025fa0 RCX: 00007fa6b6d9e0d9
[  142.901810][ T6465] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005
[  142.901817][ T6465] RBP: 00007fa6b7bb5090 R08: 0000000000000000 R09: 0000000000000000
[  142.901823][ T6465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  142.901829][ T6465] R13: 00007fa6b7026038 R14: 00007fa6b7025fa0 R15: 00007ffdf5ec8998
[  142.901842][ T6465]  </TASK>
[  143.280246][ T6475] jffs2: notice: (6475) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  143.301376][   T30] audit: type=1400 audit(1787374121.058:430): avc:  denied  { mount } for  pid=6479 comm="syz.4.157" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  143.402067][   T30] audit: type=1400 audit(1787374121.168:431): avc:  denied  { write } for  pid=6474 comm="syz.2.155" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  143.437275][ T6486] netlink: 48 bytes leftover after parsing attributes in process `syz.3.158'.
[  143.477841][    T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  143.494679][   T30] audit: type=1400 audit(1787374121.268:432): avc:  denied  { write } for  pid=6487 comm="syz.2.159" name="c.1" dev="configfs" ino=9936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  143.638364][    T9] usb 2-1: Using ep0 maxpacket: 16
[  143.645655][    T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  143.684312][    T9] usb 2-1: config index 0 descriptor too short (expected 51443, got 18)
[  143.694645][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.702988][ T5784] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  143.707872][ T5720] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  143.717803][    T9] usb 2-1: Product: syz
[  143.722423][    T9] usb 2-1: Manufacturer: syz
[  143.727490][    T9] usb 2-1: SerialNumber: syz
[  143.887891][ T5720] usb 1-1: Using ep0 maxpacket: 8
[  143.972780][ T5720] usb 1-1: unable to get BOS descriptor or descriptor too short
[  144.068508][ T5720] usb 1-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=5d.24
[  144.133494][    T9] r8152-cfgselector 2-1: Unknown version 0x0000
[  144.142505][    T9] r8152-cfgselector 2-1: config 0 descriptor??
[  144.145717][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.157256][ T5720] usb 1-1: Product: syz
[  144.162235][ T5720] usb 1-1: Manufacturer: syz
[  144.164268][   T30] audit: type=1400 audit(1787374121.938:433): avc:  denied  { unmount } for  pid=5593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  144.166995][ T5720] usb 1-1: SerialNumber: syz
[  144.190266][ T5784] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  144.214835][ T5784] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  144.235396][ T5784] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.250450][ T5784] gspca_main: stv0680-2.14.0 probing 041e:4007
[  144.402598][ T6483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  144.457797][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  144.477797][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  144.517798][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  145.519838][    T9] r8152-cfgselector 2-1: Unknown version 0x0000
[  145.534589][    T9] r8152-cfgselector 2-1: No union descriptors
[  145.543043][ T6483] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  145.555735][   T30] audit: type=1400 audit(1787374123.328:434): avc:  denied  { mount } for  pid=6481 comm="syz.0.153" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  145.570982][  T981] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  145.581555][    T9] r8152-cfgselector 2-1: USB disconnect, device number 12
[  145.595448][ T5784] stv0680 4-1:4.0: STV(e): camera ping failed!!
[  145.641877][ T6498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.161'.
[  145.653450][   T30] audit: type=1400 audit(1787374123.428:435): avc:  denied  { wake_alarm } for  pid=6497 comm="syz.2.161" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  145.674934][   T30] audit: type=1400 audit(1787374123.428:436): avc:  denied  { relabelfrom } for  pid=6497 comm="syz.2.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  145.694917][   T30] audit: type=1400 audit(1787374123.428:437): avc:  denied  { relabelto } for  pid=6497 comm="syz.2.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  145.778508][  T981] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  145.801321][  T981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.818465][  T981] usb 5-1: Product: syz
[  145.820448][ T5784] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32
[  145.828805][  T981] usb 5-1: Manufacturer: syz
[  145.835312][ T5784] stv0680 4-1:4.0: last error: 103,  command = 0xfe
[  145.844717][  T981] usb 5-1: SerialNumber: syz
[  145.862729][ T5784] usb 4-1: USB disconnect, device number 8
[  146.591240][ T6511] syzkaller0: entered promiscuous mode
[  146.596882][ T6511] syzkaller0: entered allmulticast mode
[  146.609001][ T6511] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  146.848261][   T30] audit: type=1400 audit(1787374124.528:438): avc:  denied  { create } for  pid=6507 comm="syz.1.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  146.993295][ T5720] f81534a_ctrl 1-1:117.0: probe with driver f81534a_ctrl failed with error -71
[  147.000029][   T30] audit: type=1400 audit(1787374124.538:439): avc:  denied  { getopt } for  pid=6507 comm="syz.1.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  147.050758][ T5720] usb 1-1: USB disconnect, device number 9
[  147.055672][   T30] audit: type=1400 audit(1787374124.758:440): avc:  denied  { unmount } for  pid=5602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  147.056682][ T6515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.164'.
[  147.141295][ T6520] jffs2: notice: (6520) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  147.170116][  T981] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  147.182070][  T981] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  147.197256][   T30] audit: type=1400 audit(1787374124.968:441): avc:  denied  { write } for  pid=6516 comm="syz.2.166" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  147.298074][  T981] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  147.354856][  T981] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71
[  147.367407][ T6523] mmap: syz.1.167 (6523) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  147.375363][  T981] usb 5-1: USB disconnect, device number 10
[  147.455119][   T30] audit: type=1400 audit(1787374125.228:442): avc:  denied  { write } for  pid=6522 comm="syz.1.167" path="socket:[10946]" dev="sockfs" ino=10946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  147.501900][   T30] audit: type=1400 audit(1787374125.258:443): avc:  denied  { read write } for  pid=6527 comm="syz.2.168" name="mouse0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  147.536607][   T30] audit: type=1400 audit(1787374125.258:444): avc:  denied  { open } for  pid=6527 comm="syz.2.168" path="/dev/input/mouse0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  147.539990][ T6532] input: syz0 as /devices/virtual/input/input10
[  147.789020][   T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  147.845531][   T30] audit: type=1400 audit(1787374125.608:445): avc:  denied  { cmd } for  pid=6527 comm="iou-wrk-6528" path="socket:[11783]" dev="sockfs" ino=11783 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  147.918487][ T6541] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57e00
[  147.927440][ T6541] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  147.935016][ T6541] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  147.943871][ T6541] raw: 0000000000000000 ffff8880202ff400 00000001ffffffff 0000000000000000
[  147.952616][ T6541] page dumped because: unmovable page
[  147.958224][ T6541] page_owner tracks the page as allocated
[  147.964097][ T6541] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12c02(GFP_NOIO|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY), pid 10, tgid 10 (kworker/0:1), ts 67239158594
[  147.981470][ T6541]  post_alloc_hook+0xfd/0x120
[  147.986325][ T6541]  get_page_from_freelist+0x110d/0x35b0
[  147.992102][ T6541]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[  147.998561][ T6541]  alloc_pages_node_noprof+0x93/0x200
[  148.004129][ T6541]  pcpu_populate_chunk+0x17d/0x950
[  148.009570][ T6541]  pcpu_balance_workfn+0x85a/0xe00
[  148.014824][ T6541]  process_one_work+0xac7/0x1b10
[  148.019990][ T6541]  worker_thread+0x5ef/0xe50
[  148.024755][ T6541]  kthread+0x373/0x450
[  148.028987][ T6541]  ret_from_fork+0x730/0xd60
[  148.033758][ T6541]  ret_from_fork_asm+0x1a/0x30
[  148.038705][ T6541] page last free pid 1 tgid 1 ts 16393424815 stack trace:
[  148.045981][ T6541]  free_pages_prepare+0x586/0xe00
[  148.051199][ T6541]  __free_contig_range_common+0x14f/0x250
[  148.057095][ T6541]  destroy_args+0xa8/0x7a0
[  148.061626][ T6541]  debug_vm_pgtable+0x1d69/0x3490
[  148.066795][ T6541]  do_one_initcall+0x11c/0x6f0
[  148.071719][ T6541]  kernel_init_freeable+0x6ea/0x7b0
[  148.077022][ T6541]  kernel_init+0x21/0x1e0
[  148.081484][ T6541]  ret_from_fork+0x730/0xd60
[  148.086227][ T6541]  ret_from_fork_asm+0x1a/0x30
[  148.546108][ T6549] netlink: 'syz.4.171': attribute type 21 has an invalid length.
[  148.977880][    T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  149.007869][  T981] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  149.079722][ T6571] 9p: Bad value for 'rfdno'
[  149.157973][    T9] usb 4-1: Using ep0 maxpacket: 16
[  149.166171][    T9] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  149.177864][  T981] usb 2-1: Using ep0 maxpacket: 16
[  149.185794][    T9] usb 4-1: config index 0 descriptor too short (expected 51443, got 18)
[  149.187739][  T981] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  149.203237][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.203281][    T9] usb 4-1: Product: syz
[  149.203296][    T9] usb 4-1: Manufacturer: syz
[  149.203310][    T9] usb 4-1: SerialNumber: syz
[  149.247124][    T9] r8152-cfgselector 4-1: Unknown version 0x0000
[  149.253680][    T9] r8152-cfgselector 4-1: config 0 descriptor??
[  149.279956][  T981] usb 2-1: config index 0 descriptor too short (expected 51443, got 18)
[  149.282643][ T6578] jffs2: notice: (6578) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  149.305546][  T981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.315317][  T981] usb 2-1: Product: syz
[  149.319784][  T981] usb 2-1: Manufacturer: syz
[  149.330211][  T981] usb 2-1: SerialNumber: syz
[  149.355234][  T981] r8152-cfgselector 2-1: Unknown version 0x0000
[  149.370416][  T981] r8152-cfgselector 2-1: config 0 descriptor??
[  150.637267][    T9] r8152-cfgselector 4-1: Unknown version 0x0000
[  150.647311][ T5607] Bluetooth: hci0: unexpected event for opcode 0x2028
[  151.255031][    T9] r8152-cfgselector 4-1: No union descriptors
[  152.490872][  T981] r8152-cfgselector 2-1: Unknown version 0x0000
[  152.514574][    T9] r8152-cfgselector 4-1: USB disconnect, device number 9
[  152.521448][  T981] r8152-cfgselector 2-1: No union descriptors
[  152.578432][  T981] r8152-cfgselector 2-1: USB disconnect, device number 13
[  152.623623][ T6589] jffs2: notice: (6589) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  152.665603][ T6593] syz.2.182 uses obsolete (PF_INET,SOCK_PACKET)
[  152.723926][   T30] kauditd_printk_skb: 11 callbacks suppressed
[  152.723942][   T30] audit: type=1400 audit(1787374130.498:457): avc:  denied  { write } for  pid=6586 comm="syz.0.180" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  153.085163][ T6604] netlink: 'syz.0.185': attribute type 1 has an invalid length.
[  153.764790][ T6604] 8021q: adding VLAN 0 to HW filter on device bond2
[  153.872380][ T6607] bond2: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms
[  153.921120][ T6605] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57e00
[  153.930306][ T6605] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  153.937639][ T6605] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  153.946471][ T6605] raw: 0000000000000000 ffff8880202ff400 00000001ffffffff 0000000000000000
[  153.955308][ T6605] page dumped because: unmovable page
[  153.960831][ T6605] page_owner tracks the page as allocated
[  153.966584][ T6605] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12c02(GFP_NOIO|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY), pid 10, tgid 10 (kworker/0:1), ts 67239158594
[  153.984467][ T6605]  post_alloc_hook+0xfd/0x120
[  153.989925][ T6605]  get_page_from_freelist+0x110d/0x35b0
[  153.995583][ T6605]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[  154.001771][ T6605]  alloc_pages_node_noprof+0x93/0x200
[  154.007701][ T6605]  pcpu_populate_chunk+0x17d/0x950
[  154.012938][ T6605]  pcpu_balance_workfn+0x85a/0xe00
[  154.019486][ T6605]  process_one_work+0xac7/0x1b10
[  154.024836][ T6605]  worker_thread+0x5ef/0xe50
[  154.029717][ T6605]  kthread+0x373/0x450
[  154.033836][ T6605]  ret_from_fork+0x730/0xd60
[  154.038465][ T6605]  ret_from_fork_asm+0x1a/0x30
[  154.043314][ T6605] page last free pid 1 tgid 1 ts 16393424815 stack trace:
[  154.051164][ T6605]  free_pages_prepare+0x586/0xe00
[  154.056262][ T6605]  __free_contig_range_common+0x14f/0x250
[  154.062044][ T6605]  destroy_args+0xa8/0x7a0
[  154.066469][ T6605]  debug_vm_pgtable+0x1d69/0x3490
[  154.071539][ T6605]  do_one_initcall+0x11c/0x6f0
[  154.076311][ T6605]  kernel_init_freeable+0x6ea/0x7b0
[  154.081543][ T6605]  kernel_init+0x21/0x1e0
[  154.085969][ T6605]  ret_from_fork+0x730/0xd60
[  154.090681][ T6605]  ret_from_fork_asm+0x1a/0x30
[  154.411818][ T6607] bond2: entered allmulticast mode
[  154.457626][ T6609] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[  154.743218][   T30] audit: type=1400 audit(1787374132.518:458): avc:  denied  { map } for  pid=6615 comm="syz.2.189" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  154.844671][ T6622] jffs2: notice: (6622) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  154.913032][ T6622] FAULT_INJECTION: forcing a failure.
[  154.913032][ T6622] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  154.926160][ T6622] CPU: 0 UID: 0 PID: 6622 Comm: syz.0.190 Not tainted syzkaller #0 PREEMPT(full) 
[  154.926177][ T6622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  154.926183][ T6622] Call Trace:
[  154.926188][ T6622]  <TASK>
[  154.926193][ T6622]  dump_stack_lvl+0x100/0x190
[  154.926214][ T6622]  should_fail_ex.cold+0x5/0xa
[  154.926229][ T6622]  _copy_from_iter+0x1f4/0x1690
[  154.926242][ T6622]  ? __asan_memset+0x23/0x50
[  154.926257][ T6622]  ? __pfx__copy_from_iter+0x10/0x10
[  154.926267][ T6622]  ? __pfx___alloc_skb+0x10/0x10
[  154.926287][ T6622]  netlink_sendmsg+0x808/0xda0
[  154.926305][ T6622]  ? __pfx_netlink_sendmsg+0x10/0x10
[  154.926321][ T6622]  ? selinux_socket_sendmsg+0x198/0x2f0
[  154.926338][ T6622]  ____sys_sendmsg+0xa4d/0xbe0
[  154.926350][ T6622]  ? __pfx_netlink_sendmsg+0x10/0x10
[  154.926365][ T6622]  ? __pfx_____sys_sendmsg+0x10/0x10
[  154.926382][ T6622]  ___sys_sendmsg+0x190/0x1e0
[  154.926396][ T6622]  ? __pfx____sys_sendmsg+0x10/0x10
[  154.926409][ T6622]  ? get_pid_task+0x106/0x250
[  154.926426][ T6622]  ? find_held_lock+0x2b/0x80
[  154.926447][ T6622]  __sys_sendmsg+0x160/0x210
[  154.926464][ T6622]  ? __pfx___sys_sendmsg+0x10/0x10
[  154.926486][ T6622]  do_syscall_64+0x123/0x790
[  154.926505][ T6622]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.926516][ T6622] RIP: 0033:0x7effe8b9e0d9
[  154.926527][ T6622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  154.926537][ T6622] RSP: 002b:00007effe9a2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  154.926549][ T6622] RAX: ffffffffffffffda RBX: 00007effe8e25fa0 RCX: 00007effe8b9e0d9
[  154.926556][ T6622] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005
[  154.926562][ T6622] RBP: 00007effe9a2f090 R08: 0000000000000000 R09: 0000000000000000
[  154.926568][ T6622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  154.926574][ T6622] R13: 00007effe8e26038 R14: 00007effe8e25fa0 R15: 00007ffcb162bce8
[  154.926587][ T6622]  </TASK>
[  154.927121][   T30] audit: type=1400 audit(1787374132.688:459): avc:  denied  { write } for  pid=6620 comm="syz.0.190" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  155.219355][ T5728] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  155.287857][    T9] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  155.287878][ T5720] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  155.387832][ T5728] usb 5-1: Using ep0 maxpacket: 16
[  155.427858][    T9] usb 4-1: device descriptor read/64, error -71
[  155.450080][ T5720] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  155.553995][ T5720] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  155.580930][ T5720] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  155.641911][ T5720] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  155.742193][ T5720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.851963][ T5720] usb 2-1: config 0 descriptor??
[  155.975136][ T5728] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  156.117609][ T6635] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  156.187513][ T6635] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  156.266336][ T6635] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  156.354647][ T6635] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  156.404743][   T30] audit: type=1400 audit(1787374134.158:460): avc:  denied  { listen } for  pid=6626 comm="syz.1.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  156.537251][   T30] audit: type=1400 audit(1787374134.158:461): avc:  denied  { connect } for  pid=6626 comm="syz.1.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  156.756734][ T6635] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  156.939901][ T6632] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57e00
[  156.940463][ T5728] usb 5-1: config index 0 descriptor too short (expected 51443, got 18)
[  156.961840][ T5728] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.970043][ T5728] usb 5-1: Product: syz
[  156.974240][ T5728] usb 5-1: Manufacturer: syz
[  156.978887][ T5728] usb 5-1: SerialNumber: syz
[  156.987331][ T5728] r8152-cfgselector 5-1: Unknown version 0x0000
[  156.993753][    T9] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  156.995624][ T5720] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  157.002362][ T5728] r8152-cfgselector 5-1: config 0 descriptor??
[  157.078931][ T5720] usb 2-1: USB disconnect, device number 14
[  157.090276][ T6632] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  157.119325][ T6632] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  157.142496][    T9] usb 4-1: device descriptor read/64, error -71
[  157.159209][ T6632] raw: 0000000000000000 ffff8880202ff400 00000001ffffffff 0000000000000000
[  157.208563][ T6632] page dumped because: unmovable page
[  157.218072][ T6642] fido_id[6642]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  157.221292][ T6632] page_owner tracks the page as allocated
[  157.278578][    T9] usb usb4-port1: attempt power cycle
[  158.332409][ T5728] r8152-cfgselector 5-1: Unknown version 0x0000
[  158.344937][ T5728] r8152-cfgselector 5-1: No union descriptors
[  158.363221][ T6632] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12c02(GFP_NOIO|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY), pid 10, tgid 10 (kworker/0:1), ts 67239158594
[  158.405460][ T5728] r8152-cfgselector 5-1: USB disconnect, device number 11
[  158.420446][ T6632]  post_alloc_hook+0xfd/0x120
[  158.439290][ T6632]  get_page_from_freelist+0x110d/0x35b0
[  158.454884][ T6632]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[  158.463377][ T6632]  alloc_pages_node_noprof+0x93/0x200
[  158.505019][ T6632]  pcpu_populate_chunk+0x17d/0x950
[  158.526916][ T6632]  pcpu_balance_workfn+0x85a/0xe00
[  158.550193][ T6632]  process_one_work+0xac7/0x1b10
[  158.564098][ T6632]  worker_thread+0x5ef/0xe50
[  158.576243][ T6632]  kthread+0x373/0x450
[  158.582279][ T6632]  ret_from_fork+0x730/0xd60
[  158.590608][ T6632]  ret_from_fork_asm+0x1a/0x30
[  158.601288][ T6632] page last free pid 1 tgid 1 ts 16393424815 stack trace:
[  158.663085][ T6632]  free_pages_prepare+0x586/0xe00
[  158.671930][ T6632]  __free_contig_range_common+0x14f/0x250
[  158.682062][ T6632]  destroy_args+0xa8/0x7a0
[  158.697640][ T6632]  debug_vm_pgtable+0x1d69/0x3490
[  158.707815][ T6632]  do_one_initcall+0x11c/0x6f0
[  158.715666][ T6632]  kernel_init_freeable+0x6ea/0x7b0
[  158.751032][ T6632]  kernel_init+0x21/0x1e0
[  158.758882][ T6632]  ret_from_fork+0x730/0xd60
[  158.778185][ T6632]  ret_from_fork_asm+0x1a/0x30
[  158.783082][ T5697] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  158.958073][ T5697] usb 3-1: Using ep0 maxpacket: 8
[  158.963774][ T5697] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  158.975158][ T5697] usb 3-1: config 1 has an invalid descriptor of length 122, skipping remainder of the config
[  158.997909][ T5697] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  159.017830][   T30] audit: type=1400 audit(1787374136.778:462): avc:  denied  { create } for  pid=6654 comm="syz.1.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  159.017887][ T5697] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  159.040177][   T30] audit: type=1400 audit(1787374136.788:463): avc:  denied  { bind } for  pid=6654 comm="syz.1.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  159.068980][   T30] audit: type=1400 audit(1787374136.818:464): avc:  denied  { connect } for  pid=6654 comm="syz.1.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  159.088010][ T5697] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  159.107905][ T5697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.133465][ T5697] hub 3-1:1.0: bad descriptor, ignoring hub
[  159.139768][ T5697] hub 3-1:1.0: probe with driver hub failed with error -5
[  159.148588][ T5697] cdc_wdm 3-1:1.0: skipping garbage
[  159.158655][ T5697] cdc_wdm 3-1:1.0: skipping garbage
[  159.170636][ T5697] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  159.182920][ T5697] cdc_wdm 3-1:1.0: Unknown control protocol
[  159.207973][ T5728] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  159.271266][ T6661] jffs2: notice: (6661) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  159.293868][   T30] audit: type=1400 audit(1787374137.068:465): avc:  denied  { write } for  pid=6660 comm="syz.4.200" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  159.808654][ T6665] netlink: 12 bytes leftover after parsing attributes in process `syz.4.201'.
[  159.818689][ T6665] netlink: 476 bytes leftover after parsing attributes in process `syz.4.201'.
[  160.202415][ T5728] usb 1-1: Using ep0 maxpacket: 16
[  160.252895][ T5728] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  160.277447][ T5728] usb 1-1: config index 0 descriptor too short (expected 51443, got 18)
[  160.288761][   T30] audit: type=1400 audit(1787374138.068:466): avc:  denied  { read write } for  pid=6646 comm="syz.2.194" name="cdc-wdm0" dev="devtmpfs" ino=3112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[  160.299790][ T5728] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.314780][   T30] audit: type=1400 audit(1787374138.068:467): avc:  denied  { open } for  pid=6646 comm="syz.2.194" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[  160.354458][ T5728] usb 1-1: Product: syz
[  160.368632][ T5728] usb 1-1: Manufacturer: syz
[  160.386567][ T5728] usb 1-1: SerialNumber: syz
[  160.426550][ T5728] r8152-cfgselector 1-1: Unknown version 0x0000
[  160.440141][ T5728] r8152-cfgselector 1-1: config 0 descriptor??
[  160.608102][ T5697] usb 3-1: USB disconnect, device number 12
[  160.677897][ T5720] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  161.662580][ T5728] r8152-cfgselector 1-1: Unknown version 0x0000
[  161.688855][ T5728] r8152-cfgselector 1-1: No union descriptors
[  161.702195][ T5728] r8152-cfgselector 1-1: USB disconnect, device number 10
[  161.808023][ T5720] usb 4-1: Using ep0 maxpacket: 16
[  161.831234][ T5720] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  161.874513][ T5720] usb 4-1: config index 0 descriptor too short (expected 51443, got 18)
[  161.921643][ T5720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.931251][ T5720] usb 4-1: Product: syz
[  161.975609][ T5720] usb 4-1: Manufacturer: syz
[  162.015209][ T5720] usb 4-1: SerialNumber: syz
[  162.131096][ T5720] r8152-cfgselector 4-1: Unknown version 0x0000
[  162.174992][ T5720] r8152-cfgselector 4-1: config 0 descriptor??
[  162.344335][   T30] audit: type=1400 audit(1787374140.118:468): avc:  denied  { unmount } for  pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  162.382509][ T6682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.207'.
[  162.454282][ T6682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.207'.
[  163.464763][ T5720] r8152-cfgselector 4-1: Unknown version 0x0000
[  163.474899][ T5720] r8152-cfgselector 4-1: No union descriptors
[  163.485475][   T64] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  163.535576][ T5720] r8152-cfgselector 4-1: USB disconnect, device number 13
[  163.537842][ T5728] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  163.546445][   T64] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  163.590732][   T64] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  163.621666][   T64] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  163.727846][ T5728] usb 2-1: Using ep0 maxpacket: 16
[  163.773154][ T5697] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  163.791401][ T5728] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  163.808869][ T5728] usb 2-1: config index 0 descriptor too short (expected 51443, got 18)
[  163.822410][ T5728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.834384][ T5728] usb 2-1: Product: syz
[  163.843168][ T5728] usb 2-1: Manufacturer: syz
[  163.852541][ T5728] usb 2-1: SerialNumber: syz
[  163.871231][ T5728] r8152-cfgselector 2-1: Unknown version 0x0000
[  163.882946][ T5728] r8152-cfgselector 2-1: config 0 descriptor??
[  163.947997][ T5697] usb 5-1: Using ep0 maxpacket: 32
[  163.969485][ T5697] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  163.987732][ T6697] jffs2: notice: (6697) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  164.012651][ T5697] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[  164.026883][ T5697] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  164.075294][ T5697] usb 5-1: config 0 has no interface number 0
[  164.155740][ T5697] usb 5-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  164.177872][ T5697] usb 5-1: config 0 interface 12 has no altsetting 0
[  164.194649][ T5697] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.203822][ T5697] usb 5-1: Product: syz
[  164.209739][ T5697] usb 5-1: Manufacturer: syz
[  164.214973][ T5697] usb 5-1: SerialNumber: syz
[  164.253800][ T5697] usb 5-1: config 0 descriptor??
[  164.322710][   T30] audit: type=1400 audit(1787374142.088:469): avc:  denied  { write } for  pid=6695 comm="syz.2.211" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  165.308214][ T5728] r8152-cfgselector 2-1: Unknown version 0x0000
[  165.310189][ T5697] f81534 5-1:0.12: required endpoints missing
[  165.323999][ T5728] r8152-cfgselector 2-1: No union descriptors
[  165.363485][ T5728] r8152-cfgselector 2-1: USB disconnect, device number 15
[  165.456028][ T5697] usb 5-1: USB disconnect, device number 12
[  165.792398][ T6711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.216'.
[  166.559349][ T6729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.221'.
[  167.178116][ T5697] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  167.231359][ T6728] netlink: 48 bytes leftover after parsing attributes in process `syz.2.220'.
[  167.319900][ T6732] jffs2: notice: (6732) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  167.365138][ T6736] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19481 sclass=netlink_route_socket pid=6736 comm=syz.4.223
[  167.392946][ T6732] FAULT_INJECTION: forcing a failure.
[  167.392946][ T6732] name failslab, interval 1, probability 0, space 0, times 0
[  167.405606][ T6732] CPU: 1 UID: 0 PID: 6732 Comm: syz.0.222 Not tainted syzkaller #0 PREEMPT(full) 
[  167.405623][ T6732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  167.405629][ T6732] Call Trace:
[  167.405633][ T6732]  <TASK>
[  167.405637][ T6732]  dump_stack_lvl+0x100/0x190
[  167.405658][ T6732]  should_fail_ex.cold+0x5/0xa
[  167.405673][ T6732]  should_failslab+0xc2/0x120
[  167.405690][ T6732]  kmem_cache_alloc_node_noprof+0x94/0x6b0
[  167.405707][ T6732]  ? __alloc_skb+0x140/0x710
[  167.405725][ T6732]  __alloc_skb+0x140/0x710
[  167.405739][ T6732]  ? __alloc_skb+0x5b7/0x710
[  167.405754][ T6732]  ? __pfx___alloc_skb+0x10/0x10
[  167.405768][ T6732]  ? genl_rcv_msg+0x4be/0x800
[  167.405787][ T6732]  netlink_ack+0x117/0xb80
[  167.405805][ T6732]  netlink_rcv_skb+0x333/0x420
[  167.405820][ T6732]  ? __pfx_genl_rcv_msg+0x10/0x10
[  167.405837][ T6732]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  167.405857][ T6732]  ? netlink_deliver_tap+0x1ae/0xcc0
[  167.405872][ T6732]  genl_rcv+0x28/0x40
[  167.405887][ T6732]  netlink_unicast+0x585/0x850
[  167.405903][ T6732]  ? __pfx_netlink_unicast+0x10/0x10
[  167.405921][ T6732]  netlink_sendmsg+0x8b0/0xda0
[  167.405937][ T6732]  ? __pfx_netlink_sendmsg+0x10/0x10
[  167.405953][ T6732]  ? selinux_socket_sendmsg+0x198/0x2f0
[  167.405971][ T6732]  ____sys_sendmsg+0xa4d/0xbe0
[  167.405982][ T6732]  ? __pfx_netlink_sendmsg+0x10/0x10
[  167.406002][ T6732]  ? __pfx_____sys_sendmsg+0x10/0x10
[  167.406020][ T6732]  ___sys_sendmsg+0x190/0x1e0
[  167.406034][ T6732]  ? __pfx____sys_sendmsg+0x10/0x10
[  167.406047][ T6732]  ? get_pid_task+0x106/0x250
[  167.406065][ T6732]  ? find_held_lock+0x2b/0x80
[  167.406086][ T6732]  __sys_sendmsg+0x160/0x210
[  167.406102][ T6732]  ? __pfx___sys_sendmsg+0x10/0x10
[  167.406125][ T6732]  do_syscall_64+0x123/0x790
[  167.406143][ T6732]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.406155][ T6732] RIP: 0033:0x7effe8b9e0d9
[  167.406164][ T6732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  167.406175][ T6732] RSP: 002b:00007effe9a2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  167.406186][ T6732] RAX: ffffffffffffffda RBX: 00007effe8e25fa0 RCX: 00007effe8b9e0d9
[  167.406193][ T6732] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005
[  167.406199][ T6732] RBP: 00007effe9a2f090 R08: 0000000000000000 R09: 0000000000000000
[  167.406205][ T6732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  167.406211][ T6732] R13: 00007effe8e26038 R14: 00007effe8e25fa0 R15: 00007ffcb162bce8
[  167.406224][ T6732]  </TASK>
[  167.458205][   T30] audit: type=1400 audit(1787374145.158:470): avc:  denied  { write } for  pid=6731 comm="syz.0.222" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  167.481756][ T5697] usb 4-1: Using ep0 maxpacket: 16
[  167.706326][ T5697] usb 4-1: New USB device found, idVendor=0db0, idProduct=871a, bcdDevice=6d.00
[  167.734384][ T5697] usb 4-1: config index 0 descriptor too short (asked for 9, got 0)
[  167.742694][ T5697] usb 4-1: can't read configurations, error -22
[  167.757879][  T981] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[  167.833133][ T6745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.225'.
[  167.839367][   T30] audit: type=1400 audit(1787374145.608:471): avc:  denied  { create } for  pid=6746 comm="syz.0.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  167.877998][ T5697] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  167.912342][  T981] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  167.925127][  T981] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  167.938129][  T981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.972807][   T30] audit: type=1400 audit(1787374145.748:472): avc:  denied  { setopt } for  pid=6746 comm="syz.0.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  167.974573][  T981] gspca_main: stv0680-2.14.0 probing 041e:4007
[  168.025534][   T30] audit: type=1400 audit(1787374145.778:473): avc:  denied  { connect } for  pid=6746 comm="syz.0.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  168.039078][ T5697] usb 4-1: Using ep0 maxpacket: 16
[  168.056435][ T6752] ������M�: renamed from vlan0 (while UP)
[  168.060302][ T5697] usb 4-1: New USB device found, idVendor=0db0, idProduct=871a, bcdDevice=6d.00
[  168.084404][ T5697] usb 4-1: config index 0 descriptor too short (asked for 9, got 0)
[  168.092959][ T5697] usb 4-1: can't read configurations, error -22
[  168.099540][   T30] audit: type=1400 audit(1787374145.878:474): avc:  denied  { create } for  pid=6746 comm="syz.0.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  168.139842][ T5697] usb usb4-port1: attempt power cycle
[  168.205109][ T6757] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0)
[  168.557990][ T5728] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  168.818890][ T5697] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  168.868706][ T5697] usb 4-1: Using ep0 maxpacket: 16
[  168.884535][ T5697] usb 4-1: New USB device found, idVendor=0db0, idProduct=871a, bcdDevice=6d.00
[  168.910404][ T5697] usb 4-1: config index 0 descriptor too short (asked for 9, got 0)
[  168.927988][ T5697] usb 4-1: can't read configurations, error -22
[  168.961880][ T6759] netlink: 'syz.1.228': attribute type 3 has an invalid length.
[  168.982056][ T6759] can0: slcan on ttyS3.
[  169.040015][ T6759] can0 (unregistered): slcan off ttyS3.
[  169.050710][  T981] stv0680 3-1:4.0: STV(e): camera ping failed!!
[  169.067958][ T5697] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  169.081841][  T981] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32
[  169.095390][  T981] stv0680 3-1:4.0: last error: 103,  command = 0xfe
[  169.118711][ T5697] usb 4-1: Using ep0 maxpacket: 16
[  169.125990][ T5697] usb 4-1: New USB device found, idVendor=0db0, idProduct=871a, bcdDevice=6d.00
[  169.158689][ T5697] usb 4-1: config index 0 descriptor too short (asked for 9, got 0)
[  169.169946][ T5697] usb 4-1: can't read configurations, error -22
[  169.176682][ T5697] usb usb4-port1: unable to enumerate USB device
[  169.260364][   T10] usb 3-1: USB disconnect, device number 13
[  169.437899][ T5697] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  169.493537][   T30] audit: type=1400 audit(1787374147.268:475): avc:  denied  { write } for  pid=6776 comm="syz.3.233" name="c.1" dev="configfs" ino=9936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  169.657878][ T5697] usb 1-1: Using ep0 maxpacket: 16
[  169.665312][ T5697] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  169.689432][ T5697] usb 1-1: config index 0 descriptor too short (expected 51443, got 18)
[  169.709814][ T5697] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.724917][ T5697] usb 1-1: Product: syz
[  169.733028][ T5697] usb 1-1: Manufacturer: syz
[  169.754646][ T5697] usb 1-1: SerialNumber: syz
[  169.991177][ T5697] r8152-cfgselector 1-1: Unknown version 0x0000
[  170.080835][ T5697] r8152-cfgselector 1-1: config 0 descriptor??
[  170.189300][   T30] audit: type=1400 audit(1787374147.968:476): avc:  denied  { write } for  pid=6780 comm="syz.2.235" path="socket:[12219]" dev="sockfs" ino=12219 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  170.206177][ T6781] input: syz1 as /devices/virtual/input/input11
[  170.308677][ T6781] block2mtd: error: cannot open device ��Ta4G�g��)��_�դ���Evr!4��>=Z{��B�y�<0\��i=�
[  170.308677][ T6781] \���!ug�[
[  171.440355][ T5697] r8152-cfgselector 1-1: Unknown version 0x0000
[  171.449855][ T5697] r8152-cfgselector 1-1: No union descriptors
[  171.464368][ T5697] r8152-cfgselector 1-1: USB disconnect, device number 11
[  171.770055][ T5728] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  171.918010][  T189] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  171.927959][ T5697] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  171.937983][ T5728] usb 4-1: Using ep0 maxpacket: 16
[  171.958417][ T5728] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  171.968959][ T5728] usb 4-1: config index 0 descriptor too short (expected 51443, got 18)
[  171.979833][ T5728] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.988434][ T5728] usb 4-1: Product: syz
[  171.992623][ T5728] usb 4-1: Manufacturer: syz
[  171.997216][ T5728] usb 4-1: SerialNumber: syz
[  172.005355][ T5728] r8152-cfgselector 4-1: Unknown version 0x0000
[  172.011699][ T5728] r8152-cfgselector 4-1: config 0 descriptor??
[  172.037997][ T5720] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  172.067855][  T189] usb 5-1: Using ep0 maxpacket: 16
[  172.078165][ T5697] usb 3-1: Using ep0 maxpacket: 16
[  172.078939][  T189] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  172.087248][ T5697] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  172.104023][ T5697] usb 3-1: config index 0 descriptor too short (expected 51443, got 18)
[  172.104671][  T189] usb 5-1: config index 0 descriptor too short (expected 51443, got 18)
[  172.126402][  T189] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.127324][ T5697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.134978][  T189] usb 5-1: Product: syz
[  172.147120][  T189] usb 5-1: Manufacturer: syz
[  172.147153][ T5697] usb 3-1: Product: syz
[  172.152119][  T189] usb 5-1: SerialNumber: syz
[  172.156203][ T5697] usb 3-1: Manufacturer: syz
[  172.165601][ T5697] usb 3-1: SerialNumber: syz
[  172.172266][  T189] r8152-cfgselector 5-1: Unknown version 0x0000
[  172.175288][ T5697] r8152-cfgselector 3-1: Unknown version 0x0000
[  172.185167][ T5697] r8152-cfgselector 3-1: config 0 descriptor??
[  172.185785][  T189] r8152-cfgselector 5-1: config 0 descriptor??
[  172.208064][ T5720] usb 2-1: Using ep0 maxpacket: 16
[  172.215494][ T5720] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  173.374301][ T5720] usb 2-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config
[  173.378497][ T5728] r8152-cfgselector 4-1: Unknown version 0x0000
[  173.385050][ T5720] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  173.402653][ T5720] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  173.410136][ T5728] r8152-cfgselector 4-1: No union descriptors
[  173.413943][ T5720] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  175.666970][ T5697] r8152-cfgselector 3-1: Unknown version 0x0000
[  175.679122][  T189] r8152-cfgselector 5-1: Unknown version 0x0000
[  175.691640][ T5697] r8152-cfgselector 3-1: No union descriptors
[  175.716166][ T5697] r8152-cfgselector 3-1: USB disconnect, device number 14
[  175.723818][  T189] r8152-cfgselector 5-1: No union descriptors
[  175.740399][ T5728] r8152-cfgselector 4-1: USB disconnect, device number 18
[  175.757961][  T189] r8152-cfgselector 5-1: USB disconnect, device number 13
[  175.816433][ T5720] usb 2-1: string descriptor 0 read error: -71
[  175.842571][ T5720] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.924959][ T5720] usb 2-1: config 0 descriptor??
[  175.935393][ T5720] usb 2-1: can't set config #0, error -71
[  175.956916][   T30] audit: type=1400 audit(1787374153.728:477): avc:  denied  { write } for  pid=6819 comm="syz.1.247" name="c.1" dev="configfs" ino=9936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  175.962703][ T5720] usb 2-1: USB disconnect, device number 17
[  176.187977][    T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  176.807888][    T9] usb 1-1: Using ep0 maxpacket: 16
[  176.824020][    T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  176.922396][    T9] usb 1-1: config index 0 descriptor too short (expected 51443, got 18)
[  176.943902][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.977908][    T9] usb 1-1: Product: syz
[  176.982185][    T9] usb 1-1: Manufacturer: syz
[  177.006054][    T9] usb 1-1: SerialNumber: syz
[  177.328102][    T9] r8152-cfgselector 1-1: Unknown version 0x0000
[  177.334403][    T9] r8152-cfgselector 1-1: config 0 descriptor??
[  177.559185][ T6827] netlink: 48 bytes leftover after parsing attributes in process `syz.3.245'.
[  178.549910][    T9] r8152-cfgselector 1-1: Unknown version 0x0000
[  178.568946][    T9] r8152-cfgselector 1-1: No union descriptors
[  178.603635][    T9] r8152-cfgselector 1-1: USB disconnect, device number 12
[  178.808366][ T5720] usb 4-1: new full-speed USB device number 19 using dummy_hcd
[  178.847839][ T5704] usb 3-1: new low-speed USB device number 15 using dummy_hcd
[  178.867846][ T5697] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  178.997868][ T5704] usb 3-1: Invalid ep0 maxpacket: 16
[  179.003938][ T5720] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  179.020766][ T5720] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  179.033823][ T5720] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.055612][ T5720] gspca_main: stv0680-2.14.0 probing 041e:4007
[  179.064023][ T5697] usb 2-1: Using ep0 maxpacket: 8
[  179.074502][ T5697] usb 2-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40
[  179.096564][ T5697] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 247, changing to 7
[  179.121409][ T5697] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.137964][ T5704] usb 3-1: new low-speed USB device number 16 using dummy_hcd
[  179.146890][ T5697] usb 2-1: Product: 䙗褭롒ᰓ㠯鄻ᖸ듭ꥃ莤渖ʚ淃㲨렡镽牄⻨謮ﳌ䮲瀷ࣃ胫᝹ㅮ੺罩츻ꦂລ鐝鯚莽殕жܣ㜶덕罇⹲뱸묜叮玞턮鮔䔋홪ࡶ㔆᫦ꇉ渃䛶킢篬縫풉ꊵ覬砇紛턵
[  179.197861][ T5697] usb 2-1: Manufacturer: ┈샔흴෽罧㺞ᮊ쟾菑ࣂ针芼㝤ﺺ籂虈홹橖ă帛糑㛢ॡ㿰뭋秎黣Ḁ俗艜뢏◘挟쯝ꅭ蛋莠漻㴨咴뵬㔕뜌ꍶ쭒ݓ➅緄렖ٓ剘ぱ锞ﻗ墂᪘咇钋晬䕰퀇욦諭阱ԯ魻檻◤젠羡᧊೙ᯯ뒂㘣뙴瞟氼촷牑멯峻穴㠻孌嵸笌ᇉᏝ毕⋤쾱䪖偨❢
[  179.260904][ T5697] usb 2-1: SerialNumber: 꾉欱蚈꧔Ҡ뱁橖䇮荥鿿企嘘쬟⥄﫻翧疟쾋ᓌ䇚ﾎɞ黖Ὤ叙ὦ첲꼔䇴橝໏獛ර쬄慺緯擒⊺᎘맆돊활驸卫煎৖뺦琇悽ភ蚡㙫䓪쪞㱿➽Ｗ໣௠몪둗ព䚒瘡ぞ쉁欄ꛧㆬ◵ꈫꢼ웶찍䟌쮒阽莙
[  179.337884][ T5704] usb 3-1: Invalid ep0 maxpacket: 16
[  179.345463][ T5704] usb usb3-port1: attempt power cycle
[  179.569022][ T6841] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  179.598538][ T6841] CIFS: Attempting to mount //127.0.0.1/share
[  179.651056][ T5697] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  179.659519][ T5697] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2
[  179.673377][ T5697] usb 2-1: USB disconnect, device number 18
[  179.697542][ T6841] CIFS: VFS: Error connecting to socket. Aborting operation.
[  179.698030][ T5704] usb 3-1: new low-speed USB device number 17 using dummy_hcd
[  179.717505][ T6841] CIFS: VFS: cifs_mount failed w/return code = -4
[  179.730428][ T5704] usb 3-1: Invalid ep0 maxpacket: 16
[  179.816579][ T6846] jffs2: notice: (6846) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  179.858881][   T30] audit: type=1400 audit(1787374157.628:478): avc:  denied  { write } for  pid=6845 comm="syz.4.253" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  179.867873][ T5704] usb 3-1: new low-speed USB device number 18 using dummy_hcd
[  179.890811][ T6846] FAULT_INJECTION: forcing a failure.
[  179.890811][ T6846] name failslab, interval 1, probability 0, space 0, times 0
[  179.903645][ T6846] CPU: 0 UID: 0 PID: 6846 Comm: syz.4.253 Not tainted syzkaller #0 PREEMPT(full) 
[  179.903660][ T6846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  179.903667][ T6846] Call Trace:
[  179.903671][ T6846]  <TASK>
[  179.903675][ T6846]  dump_stack_lvl+0x100/0x190
[  179.903695][ T6846]  should_fail_ex.cold+0x5/0xa
[  179.903708][ T6846]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  179.903723][ T6846]  should_failslab+0xc2/0x120
[  179.903742][ T6846]  kmem_cache_alloc_noprof+0x91/0x6a0
[  179.903758][ T6846]  ? skb_clone+0x190/0x400
[  179.903776][ T6846]  skb_clone+0x190/0x400
[  179.903793][ T6846]  netlink_deliver_tap+0xaed/0xcc0
[  179.903809][ T6846]  netlink_unicast+0x6a5/0x850
[  179.903826][ T6846]  ? __pfx_netlink_unicast+0x10/0x10
[  179.903839][ T6846]  ? genl_rcv_msg+0x4be/0x800
[  179.903870][ T6846]  netlink_ack+0x655/0xb80
[  179.903888][ T6846]  netlink_rcv_skb+0x333/0x420
[  179.903903][ T6846]  ? __pfx_genl_rcv_msg+0x10/0x10
[  179.903920][ T6846]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  179.903940][ T6846]  ? netlink_deliver_tap+0x1ae/0xcc0
[  179.903955][ T6846]  genl_rcv+0x28/0x40
[  179.903970][ T6846]  netlink_unicast+0x585/0x850
[  179.903986][ T6846]  ? __pfx_netlink_unicast+0x10/0x10
[  179.904004][ T6846]  netlink_sendmsg+0x8b0/0xda0
[  179.904020][ T6846]  ? __pfx_netlink_sendmsg+0x10/0x10
[  179.904036][ T6846]  ? selinux_socket_sendmsg+0x198/0x2f0
[  179.904055][ T6846]  ____sys_sendmsg+0xa4d/0xbe0
[  179.904066][ T6846]  ? __pfx_netlink_sendmsg+0x10/0x10
[  179.904081][ T6846]  ? __pfx_____sys_sendmsg+0x10/0x10
[  179.904099][ T6846]  ___sys_sendmsg+0x190/0x1e0
[  179.904113][ T6846]  ? __pfx____sys_sendmsg+0x10/0x10
[  179.904125][ T6846]  ? get_pid_task+0x106/0x250
[  179.904143][ T6846]  ? find_held_lock+0x2b/0x80
[  179.904164][ T6846]  __sys_sendmsg+0x160/0x210
[  179.904181][ T6846]  ? __pfx___sys_sendmsg+0x10/0x10
[  179.904204][ T6846]  do_syscall_64+0x123/0x790
[  179.904223][ T6846]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.904234][ T6846] RIP: 0033:0x7f921b39e0d9
[  179.904244][ T6846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  179.904255][ T6846] RSP: 002b:00007f921c21c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  179.904265][ T6846] RAX: ffffffffffffffda RBX: 00007f921b625fa0 RCX: 00007f921b39e0d9
[  179.904272][ T6846] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005
[  179.904278][ T6846] RBP: 00007f921c21c090 R08: 0000000000000000 R09: 0000000000000000
[  179.904284][ T6846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  179.904290][ T6846] R13: 00007f921b626038 R14: 00007f921b625fa0 R15: 00007ffd6ccf3b88
[  179.904304][ T6846]  </TASK>
[  180.182227][ T5704] usb 3-1: Invalid ep0 maxpacket: 16
[  180.189102][ T5704] usb usb3-port1: unable to enumerate USB device
[  180.197171][ T5720] stv0680 4-1:4.0: STV(e): camera ping failed!!
[  180.217105][ T5720] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32
[  180.227126][ T5720] stv0680 4-1:4.0: last error: 103,  command = 0xfe
[  180.305527][   T30] audit: type=1400 audit(1787374158.078:479): avc:  denied  { view } for  pid=6855 comm="syz.0.257" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  180.431667][ T5720] usb 4-1: USB disconnect, device number 19
[  181.380546][   T30] audit: type=1400 audit(1787374159.158:480): avc:  denied  { write } for  pid=6862 comm="syz.2.260" name="c.1" dev="configfs" ino=9936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  181.538188][   T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  181.552940][ T6867] jffs2: notice: (6867) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  182.427835][   T10] usb 5-1: Using ep0 maxpacket: 16
[  182.779777][   T30] audit: type=1400 audit(1787374160.558:481): avc:  denied  { write } for  pid=6865 comm="syz.1.261" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  184.420816][   T30] audit: type=1800 audit(1787374162.168:482): pid=6876 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.261" name="fillfile" dev="jffs2" ino=2 res=0 errno=0
[  184.442807][   T10] usb 5-1: device descriptor read/all, error -71
[  184.925510][ T6897] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57e00
[  184.974387][ T6897] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  185.009829][ T6897] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  185.065980][ T6897] raw: 0000000000000000 ffff8880202ff400 00000001ffffffff 0000000000000000
[  185.075706][ T6897] page dumped because: unmovable page
[  185.082928][ T6897] page_owner tracks the page as allocated
[  185.089815][ T6897] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12c02(GFP_NOIO|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY), pid 10, tgid 10 (kworker/0:1), ts 67239158594
[  185.108202][ T6897]  post_alloc_hook+0xfd/0x120
[  185.114700][ T6897]  get_page_from_freelist+0x110d/0x35b0
[  185.121698][ T6897]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[  185.127675][ T6897]  alloc_pages_node_noprof+0x93/0x200
[  185.135214][ T6897]  pcpu_populate_chunk+0x17d/0x950
[  185.143043][ T6897]  pcpu_balance_workfn+0x85a/0xe00
[  185.149477][ T6897]  process_one_work+0xac7/0x1b10
[  185.155910][ T6897]  worker_thread+0x5ef/0xe50
[  185.164041][ T6897]  kthread+0x373/0x450
[  185.169435][ T6897]  ret_from_fork+0x730/0xd60
[  185.176983][ T6897]  ret_from_fork_asm+0x1a/0x30
[  185.183669][ T6897] page last free pid 1 tgid 1 ts 16393424815 stack trace:
[  185.192440][ T6897]  free_pages_prepare+0x586/0xe00
[  185.200362][ T6897]  __free_contig_range_common+0x14f/0x250
[  185.209032][ T6897]  destroy_args+0xa8/0x7a0
[  185.215511][ T6897]  debug_vm_pgtable+0x1d69/0x3490
[  185.222038][ T6897]  do_one_initcall+0x11c/0x6f0
[  185.228478][ T6897]  kernel_init_freeable+0x6ea/0x7b0
[  185.234921][ T6897]  kernel_init+0x21/0x1e0
[  185.240935][ T6897]  ret_from_fork+0x730/0xd60
[  185.247394][ T6897]  ret_from_fork_asm+0x1a/0x30
[  185.504232][ T6894] jffs2: notice: (6894) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  186.396616][ T6903] FAULT_INJECTION: forcing a failure.
[  186.396616][ T6903] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  186.409865][ T6903] CPU: 0 UID: 0 PID: 6903 Comm: syz.2.270 Not tainted syzkaller #0 PREEMPT(full) 
[  186.409882][ T6903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  186.409888][ T6903] Call Trace:
[  186.409892][ T6903]  <TASK>
[  186.409896][ T6903]  dump_stack_lvl+0x100/0x190
[  186.409916][ T6903]  should_fail_ex.cold+0x5/0xa
[  186.409932][ T6903]  _copy_to_user+0x32/0xd0
[  186.409944][ T6903]  simple_read_from_buffer+0xcb/0x170
[  186.409962][ T6903]  proc_fail_nth_read+0x1af/0x230
[  186.409978][ T6903]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  186.409996][ T6903]  ? rw_verify_area+0xce/0x6d0
[  186.410007][ T6903]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  186.410024][ T6903]  vfs_read+0x1e4/0xb40
[  186.410039][ T6903]  ? __pfx_vfs_read+0x10/0x10
[  186.410051][ T6903]  ? find_held_lock+0x2b/0x80
[  186.410065][ T6903]  ? __fget_files+0x215/0x3d0
[  186.410084][ T6903]  ? __fget_files+0x21f/0x3d0
[  186.410103][ T6903]  ksys_read+0x12a/0x250
[  186.410117][ T6903]  ? __pfx_ksys_read+0x10/0x10
[  186.410134][ T6903]  do_syscall_64+0x123/0x790
[  186.410152][ T6903]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.410164][ T6903] RIP: 0033:0x7f1753b5e90e
[  186.410173][ T6903] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  186.410183][ T6903] RSP: 002b:00007f1751df5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  186.410194][ T6903] RAX: ffffffffffffffda RBX: 00007f1751df66c0 RCX: 00007f1753b5e90e
[  186.410201][ T6903] RDX: 000000000000000f RSI: 00007f1751df60a0 RDI: 000000000000000a
[  186.410207][ T6903] RBP: 00007f1751df6090 R08: 0000000000000000 R09: 0000000000000000
[  186.410213][ T6903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  186.410219][ T6903] R13: 00007f1753e26128 R14: 00007f1753e26090 R15: 00007ffe6cc543d8
[  186.410232][ T6903]  </TASK>
[  186.799043][   T30] audit: type=1400 audit(1787374164.168:483): avc:  denied  { write } for  pid=6893 comm="syz.2.270" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  186.906352][ T6907] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57e00
[  187.061881][ T6917] tipc: Started in network mode
[  187.066852][ T6917] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711
[  187.074695][ T6917] tipc: Enabled bearer <eth:syz_tun>, priority 0
[  187.225769][ T6907] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  187.298487][   T30] audit: type=1400 audit(1787374165.068:484): avc:  denied  { read } for  pid=6909 comm="syz.1.273" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  187.385065][ T6907] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  187.406273][ T6907] raw: 0000000000000000 ffff8880202ff400 00000001ffffffff 0000000000000000
[  187.423007][   T30] audit: type=1400 audit(1787374165.068:485): avc:  denied  { read open } for  pid=6909 comm="syz.1.273" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  187.451587][ T6907] page dumped because: unmovable page
[  187.467625][ T6907] page_owner tracks the page as allocated
[  187.477214][ T6907] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12c02(GFP_NOIO|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY), pid 10, tgid 10 (kworker/0:1), ts 67239158594
[  187.524171][ T6907]  post_alloc_hook+0xfd/0x120
[  187.547979][ T6907]  get_page_from_freelist+0x110d/0x35b0
[  187.557851][    T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  187.569609][ T6907]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[  187.590358][ T6907]  alloc_pages_node_noprof+0x93/0x200
[  187.614666][ T6907]  pcpu_populate_chunk+0x17d/0x950
[  187.634909][ T6907]  pcpu_balance_workfn+0x85a/0xe00
[  187.662885][ T6907]  process_one_work+0xac7/0x1b10
[  187.677837][ T6907]  worker_thread+0x5ef/0xe50
[  187.697907][ T6907]  kthread+0x373/0x450
[  187.707909][ T6907]  ret_from_fork+0x730/0xd60
[  187.720748][    T9] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  187.729962][ T6907]  ret_from_fork_asm+0x1a/0x30
[  187.735615][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.752310][ T6907] page last free pid 1 tgid 1 ts 16393424815 stack trace:
[  187.770050][ T6907]  free_pages_prepare+0x586/0xe00
[  187.783170][ T6907]  __free_contig_range_common+0x14f/0x250
[  187.807912][ T6907]  destroy_args+0xa8/0x7a0
[  187.812422][ T6907]  debug_vm_pgtable+0x1d69/0x3490
[  187.822569][ T6907]  do_one_initcall+0x11c/0x6f0
[  187.832114][ T6907]  kernel_init_freeable+0x6ea/0x7b0
[  187.847591][ T6907]  kernel_init+0x21/0x1e0
[  187.853473][ T6907]  ret_from_fork+0x730/0xd60
[  187.867885][ T6907]  ret_from_fork_asm+0x1a/0x30
[  188.014577][    T9] cxacru 3-1:1.0: send of cm 0x90 failed (-71)
[  188.051587][ T6928] cxacru 3-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2
[  188.071630][ T6925] syzkaller0: entered promiscuous mode
[  188.081532][ T6928] cxacru 3-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin
[  188.082628][    T9] usb 3-1: USB disconnect, device number 19
[  188.089755][   T30] audit: type=1400 audit(1787374165.858:486): avc:  denied  { firmware_load } for  pid=6928 comm="cxacru" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  188.099788][ T6929] FAULT_INJECTION: forcing a failure.
[  188.099788][ T6929] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  188.132971][ T6925] syzkaller0: entered allmulticast mode
[  188.171816][ T6929] CPU: 0 UID: 0 PID: 6929 Comm: syz.4.277 Not tainted syzkaller #0 PREEMPT(full) 
[  188.171839][ T6929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  188.171848][ T6929] Call Trace:
[  188.171853][ T6929]  <TASK>
[  188.171860][ T6929]  dump_stack_lvl+0x100/0x190
[  188.171888][ T6929]  should_fail_ex.cold+0x5/0xa
[  188.171909][ T6929]  _copy_to_user+0x32/0xd0
[  188.171926][ T6929]  simple_read_from_buffer+0xcb/0x170
[  188.171950][ T6929]  proc_fail_nth_read+0x1af/0x230
[  188.171976][ T6929]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  188.172000][ T6929]  ? rw_verify_area+0xce/0x6d0
[  188.172017][ T6929]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  188.172042][ T6929]  vfs_read+0x1e4/0xb40
[  188.172065][ T6929]  ? __pfx_vfs_read+0x10/0x10
[  188.172082][ T6929]  ? find_held_lock+0x2b/0x80
[  188.172103][ T6929]  ? __fget_files+0x215/0x3d0
[  188.172130][ T6929]  ? __fget_files+0x21f/0x3d0
[  188.172158][ T6929]  ksys_read+0x12a/0x250
[  188.172175][ T6929]  ? __pfx_ksys_read+0x10/0x10
[  188.172198][ T6929]  do_syscall_64+0x123/0x790
[  188.172224][ T6929]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.172248][ T6929] RIP: 0033:0x7f921b35e90e
[  188.172261][ T6929] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  188.172275][ T6929] RSP: 002b:00007f921c21bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  188.172292][ T6929] RAX: ffffffffffffffda RBX: 00007f921c21c6c0 RCX: 00007f921b35e90e
[  188.172302][ T6929] RDX: 000000000000000f RSI: 00007f921c21c0a0 RDI: 0000000000000004
[  188.172310][ T6929] RBP: 00007f921c21c090 R08: 0000000000000000 R09: 0000000000000000
[  188.172319][ T6929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  188.172328][ T6929] R13: 00007f921b626038 R14: 00007f921b625fa0 R15: 00007ffd6ccf3b88
[  188.172349][ T6929]  </TASK>
[  188.367383][   T10] tipc: Node number set to 43690
[  188.374982][ T6931] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  188.448330][ T6931] netlink: 12 bytes leftover after parsing attributes in process `syz.0.276'.
[  188.487839][ T5728] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  188.637866][ T5728] usb 2-1: Using ep0 maxpacket: 16
[  188.643365][   T30] audit: type=1400 audit(1787374166.418:487): avc:  denied  { ioctl } for  pid=6936 comm="syz.4.281" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x661b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  188.643681][ T5728] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  188.677853][   T30] audit: type=1400 audit(1787374166.448:488): avc:  denied  { create } for  pid=6936 comm="syz.4.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  188.735076][ T5728] usb 2-1: config index 0 descriptor too short (expected 51443, got 18)
[  188.746506][ T5728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.748876][   T30] audit: type=1400 audit(1787374166.448:489): avc:  denied  { read } for  pid=6936 comm="syz.4.281" name="btrfs-control" dev="devtmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  188.789030][ T5728] usb 2-1: Product: syz
[  188.797576][ T5728] usb 2-1: Manufacturer: syz
[  188.811405][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  188.818101][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[  188.826323][   T30] audit: type=1400 audit(1787374166.448:490): avc:  denied  { open } for  pid=6936 comm="syz.4.281" path="/dev/btrfs-control" dev="devtmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  188.857278][ T5728] usb 2-1: SerialNumber: syz
[  188.865389][   T30] audit: type=1400 audit(1787374166.448:491): avc:  denied  { ioctl } for  pid=6936 comm="syz.4.281" path="/dev/btrfs-control" dev="devtmpfs" ino=1313 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  188.892997][ T5728] r8152-cfgselector 2-1: Unknown version 0x0000
[  188.904589][ T5728] r8152-cfgselector 2-1: config 0 descriptor??
[  189.047907][   T29] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  189.115005][ T6950] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57e00
[  189.124079][ T6950] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  189.131734][ T6950] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  189.143299][ T6950] raw: 0000000000000000 ffff8880202ff400 00000001ffffffff 0000000000000000
[  189.163316][ T6950] page dumped because: unmovable page
[  189.171483][ T6950] page_owner tracks the page as allocated
[  189.177321][ T6950] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12c02(GFP_NOIO|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY), pid 10, tgid 10 (kworker/0:1), ts 67239158594
[  189.194569][ T5791] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  189.204086][ T6950]  post_alloc_hook+0xfd/0x120
[  189.207853][   T29] usb 5-1: Using ep0 maxpacket: 16
[  189.209303][ T6950]  get_page_from_freelist+0x110d/0x35b0
[  189.219595][ T6950]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[  189.225706][ T6950]  alloc_pages_node_noprof+0x93/0x200
[  189.231637][ T6950]  pcpu_populate_chunk+0x17d/0x950
[  189.236913][ T6950]  pcpu_balance_workfn+0x85a/0xe00
[  189.238655][   T29] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  189.253354][ T6950]  process_one_work+0xac7/0x1b10
[  189.258505][ T6950]  worker_thread+0x5ef/0xe50
[  189.263294][ T6950]  kthread+0x373/0x450
[  189.268556][ T6950]  ret_from_fork+0x730/0xd60
[  189.273586][ T6950]  ret_from_fork_asm+0x1a/0x30
[  189.279298][ T6950] page last free pid 1 tgid 1 ts 16393424815 stack trace:
[  189.279639][   T29] usb 5-1: config index 0 descriptor too short (expected 51443, got 18)
[  189.294942][ T6950]  free_pages_prepare+0x586/0xe00
[  189.301231][ T6950]  __free_contig_range_common+0x14f/0x250
[  189.310992][ T6950]  destroy_args+0xa8/0x7a0
[  189.315526][ T6950]  debug_vm_pgtable+0x1d69/0x3490
[  189.320763][ T6950]  do_one_initcall+0x11c/0x6f0
[  189.325637][ T6950]  kernel_init_freeable+0x6ea/0x7b0
[  189.330971][ T6950]  kernel_init+0x21/0x1e0
[  189.336512][ T6950]  ret_from_fork+0x730/0xd60
[  189.340489][   T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.349344][ T6950]  ret_from_fork_asm+0x1a/0x30
[  189.364173][   T29] usb 5-1: Product: syz
[  189.376184][   T29] usb 5-1: Manufacturer: syz
[  189.388582][   T29] usb 5-1: SerialNumber: syz
[  189.442992][   T29] r8152-cfgselector 5-1: Unknown version 0x0000
[  189.466808][   T29] r8152-cfgselector 5-1: config 0 descriptor??
[  190.844674][ T5728] r8152-cfgselector 2-1: Unknown version 0x0000
[  191.892859][   T29] r8152-cfgselector 5-1: Unknown version 0x0000
[  191.924531][   T29] r8152-cfgselector 5-1: No union descriptors
[  192.171623][   T29] r8152-cfgselector 5-1: USB disconnect, device number 16
[  192.419218][ T5728] r8152-cfgselector 2-1: No union descriptors
[  192.430215][ T5728] r8152-cfgselector 2-1: USB disconnect, device number 19
[  193.628028][ T5791] usb 1-1: device descriptor read/64, error -71
[  193.898099][ T5791] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  194.069098][ T5791] usb 1-1: Using ep0 maxpacket: 16
[  194.072656][ T6971] netlink: 48 bytes leftover after parsing attributes in process `syz.4.288'.
[  194.094301][ T5791] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  194.126637][ T5791] usb 1-1: config index 0 descriptor too short (expected 51443, got 18)
[  194.154482][ T5791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.172981][ T5791] usb 1-1: Product: syz
[  194.183088][ T5791] usb 1-1: Manufacturer: syz
[  194.195758][ T5791] usb 1-1: SerialNumber: syz
[  194.215058][ T5791] r8152-cfgselector 1-1: Unknown version 0x0000
[  194.233679][ T5791] r8152-cfgselector 1-1: config 0 descriptor??
[  194.377849][   T29] usb 5-1: new full-speed USB device number 17 using dummy_hcd
[  195.458404][ T5791] r8152-cfgselector 1-1: Unknown version 0x0000
[  195.468356][   T29] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  195.470482][ T5728] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  195.488551][ T5791] r8152-cfgselector 1-1: No union descriptors
[  195.497994][   T29] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  195.522082][ T5791] r8152-cfgselector 1-1: USB disconnect, device number 14
[  195.530487][   T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.561748][   T29] gspca_main: stv0680-2.14.0 probing 041e:4007
[  195.628270][ T6983] netlink: 'syz.2.297': attribute type 10 has an invalid length.
[  195.663495][ T6983] team0: Port device dummy0 added
[  195.708114][ T5728] usb 2-1: Using ep0 maxpacket: 8
[  195.713836][ T5728] usb 2-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40
[  195.732472][ T5728] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 247, changing to 7
[  195.746970][ T5728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.756144][ T5728] usb 2-1: Product: 䙗褭롒ᰓ㠯鄻ᖸ듭ꥃ莤渖ʚ淃㲨렡镽牄⻨謮ﳌ䮲瀷ࣃ胫᝹ㅮ੺罩츻ꦂລ鐝鯚莽殕жܣ㜶덕罇⹲뱸묜叮玞턮鮔䔋홪ࡶ㔆᫦ꇉ渃䛶킢篬縫풉ꊵ覬砇紛턵
[  195.780609][ T5728] usb 2-1: Manufacturer: ┈샔흴෽罧㺞ᮊ쟾菑ࣂ针芼㝤ﺺ籂虈홹橖ă帛糑㛢ॡ㿰뭋秎黣Ḁ俗艜뢏◘挟쯝ꅭ蛋莠漻㴨咴뵬㔕뜌ꍶ쭒ݓ➅緄렖ٓ剘ぱ锞ﻗ墂᪘咇钋晬䕰퀇욦諭阱ԯ魻檻◤젠羡᧊೙ᯯ뒂㘣뙴瞟氼촷牑멯峻穴㠻孌嵸笌ᇉᏝ毕⋤쾱䪖偨❢
[  195.858660][ T5728] usb 2-1: SerialNumber: 꾉欱蚈꧔Ҡ뱁橖䇮荥鿿企嘘쬟⥄﫻翧疟쾋ᓌ䇚ﾎɞ黖Ὤ叙ὦ첲꼔䇴橝໏獛ර쬄慺緯擒⊺᎘맆돊활驸卫煎৖뺦琇悽ភ蚡㙫䓪쪞㱿➽Ｗ໣௠몪둗ព䚒瘡ぞ쉁欄ꛧㆬ◵ꈫꢼ웶찍䟌쮒阽莙
[  195.964457][   T30] audit: type=1400 audit(1787374173.738:492): avc:  denied  { bind } for  pid=6990 comm="syz.3.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  195.985350][   T30] audit: type=1400 audit(1787374173.738:493): avc:  denied  { name_bind } for  pid=6990 comm="syz.3.300" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  196.009749][   T30] audit: type=1400 audit(1787374173.738:494): avc:  denied  { node_bind } for  pid=6990 comm="syz.3.300" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  196.034047][   T30] audit: type=1400 audit(1787374173.808:495): avc:  denied  { watch } for  pid=6990 comm="syz.3.300" path="/53" dev="tmpfs" ino=312 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  196.112384][ T5728] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  196.140533][ T5728] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2
[  196.338692][ T5728] usb 2-1: USB disconnect, device number 20
[  196.639039][   T29] stv0680 5-1:4.0: STV(e): camera ping failed!!
[  196.645726][   T29] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32
[  196.653964][   T29] stv0680 5-1:4.0: last error: 103,  command = 0xfe
[  196.787962][ T5791] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  196.827905][ T5704] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  196.845944][ T5728] usb 5-1: USB disconnect, device number 17
[  196.947839][ T5791] usb 4-1: Using ep0 maxpacket: 16
[  196.953503][ T5791] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  196.963705][ T5791] usb 4-1: config index 0 descriptor too short (expected 51443, got 18)
[  196.974294][ T5791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.977870][ T5704] usb 1-1: Using ep0 maxpacket: 16
[  196.982503][ T5791] usb 4-1: Product: syz
[  196.991798][ T5791] usb 4-1: Manufacturer: syz
[  196.996379][ T5704] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  196.997298][ T5704] usb 1-1: config index 0 descriptor too short (expected 51443, got 18)
[  197.006228][ T5791] usb 4-1: SerialNumber: syz
[  197.032236][ T5791] r8152-cfgselector 4-1: Unknown version 0x0000
[  197.036542][ T5704] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.049232][ T5791] r8152-cfgselector 4-1: config 0 descriptor??
[  197.049319][ T5704] usb 1-1: Product: syz
[  197.049333][ T5704] usb 1-1: Manufacturer: syz
[  197.049344][ T5704] usb 1-1: SerialNumber: syz
[  197.073775][ T5704] r8152-cfgselector 1-1: Unknown version 0x0000
[  197.084794][ T5704] r8152-cfgselector 1-1: config 0 descriptor??
[  198.442988][ T5791] r8152-cfgselector 4-1: Unknown version 0x0000
[  198.444718][   T29] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  198.453645][ T5791] r8152-cfgselector 4-1: No union descriptors
[  198.481769][ T5791] r8152-cfgselector 4-1: USB disconnect, device number 20
[  199.623698][ T5704] r8152-cfgselector 1-1: Unknown version 0x0000
[  199.633733][ T5704] r8152-cfgselector 1-1: No union descriptors
[  199.660769][   T30] audit: type=1400 audit(1787374177.438:496): avc:  denied  { append } for  pid=6982 comm="syz.2.297" name="sg0" dev="devtmpfs" ino=784 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  199.696750][ T5704] r8152-cfgselector 1-1: USB disconnect, device number 15
[  199.704471][ T6983] netlink: 'syz.2.297': attribute type 10 has an invalid length.
[  199.724929][   T29] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  199.757350][   T29] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  199.802601][ T6983] team0: Port device dummy0 removed
[  199.802633][   T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.854005][ T7006] jffs2: notice: (7006) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  199.856255][   T29] as10x_usb: device has been detected
[  199.972075][   T30] audit: type=1400 audit(1787374177.748:497): avc:  denied  { write } for  pid=7005 comm="syz.4.304" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  200.002953][   T29] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  200.039917][   T29] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  200.113099][   T29] as10x_usb: error during firmware upload part1
[  200.149007][   T29] Registered device Abilis Systems DVB-Titan
[  200.159673][   T29] usb 2-1: USB disconnect, device number 21
[  200.224152][   T29] Unregistered device Abilis Systems DVB-Titan
[  200.228279][   T29] as10x_usb: device has been disconnected
[  200.458010][ T5706] usb 5-1: new full-speed USB device number 18 using dummy_hcd
[  200.620894][ T5706] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[  200.623392][ T5728] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  200.667610][ T5706] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  200.716957][ T5706] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  200.823182][ T5706] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3
[  200.849653][ T5706] usb 5-1: Product: syz
[  200.864100][ T5706] usb 5-1: Manufacturer: syz
[  200.877958][ T5728] usb 4-1: Using ep0 maxpacket: 16
[  200.884273][ T5706] usb 5-1: SerialNumber: syz
[  200.900844][ T5728] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  200.905723][ T5706] usb 5-1: config 0 descriptor??
[  200.930359][ T5728] usb 4-1: config index 0 descriptor too short (expected 51443, got 18)
[  200.936311][ T5706] imon_raw 5-1:0.0: IR endpoint missing
[  200.977383][ T5728] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.982969][ T7024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.306'.
[  201.002038][ T5728] usb 4-1: Product: syz
[  201.018767][ T5728] usb 4-1: Manufacturer: syz
[  201.033229][ T5728] usb 4-1: SerialNumber: syz
[  201.052843][ T5728] r8152-cfgselector 4-1: Unknown version 0x0000
[  201.061656][ T5728] r8152-cfgselector 4-1: config 0 descriptor??
[  202.385458][ T5728] r8152-cfgselector 4-1: Unknown version 0x0000
[  202.416566][ T5728] r8152-cfgselector 4-1: No union descriptors
[  202.437692][ T5728] r8152-cfgselector 4-1: USB disconnect, device number 21
[  203.517998][ T5704] usb 2-1: new full-speed USB device number 22 using dummy_hcd
[  203.658090][ T5728] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  203.668387][ T5704] usb 2-1: New USB device found, idVendor=04b8, idProduct=02f9, bcdDevice= 0.40
[  203.693168][ T5704] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  203.717538][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.737539][ T5704] usb 2-1: Product: syz
[  203.743476][ T5704] usb 2-1: Manufacturer: syz
[  203.749943][ T5704] usb 2-1: SerialNumber: syz
[  203.829132][ T5728] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  203.839581][ T5728] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  203.850496][ T5728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.866397][ T5728] as10x_usb: device has been detected
[  203.872797][ T5728] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  203.886172][ T5728] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  203.901817][ T5728] as10x_usb: error during firmware upload part1
[  203.909351][ T5728] Registered device Abilis Systems DVB-Titan
[  203.995711][ T5728] usb 5-1: USB disconnect, device number 18
[  204.007730][   T30] audit: type=1326 audit(1787374181.748:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7009 comm="syz.4.307" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921b39e0d9 code=0x7fc00000
[  204.047871][   T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  204.069267][ T5704] usb 2-1: USB disconnect, device number 22
[  204.228443][   T10] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  204.238511][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  204.248780][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.264124][   T10] as10x_usb: device has been detected
[  204.274816][   T10] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  204.292575][   T10] usb 4-1: DVB: registering adapter 2 frontend 0 (Abilis Systems DVB-Titan)...
[  204.310094][   T10] as10x_usb: error during firmware upload part1
[  204.316591][   T10] Registered device Abilis Systems DVB-Titan
[  204.457864][ T5728] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  204.640087][ T5728] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  204.649987][ T5728] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  204.660182][ T5728] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.718922][ T5728] as10x_usb: device has been detected
[  204.729691][ T5728] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  204.748365][ T5728] usb 5-1: DVB: registering adapter 3 frontend 0 (Abilis Systems DVB-Titan)...
[  204.794126][ T5728] as10x_usb: error during firmware upload part1
[  204.800919][ T5728] Registered device Abilis Systems DVB-Titan
[  204.924857][ T5704] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  204.966899][ T7063] netlink: 28 bytes leftover after parsing attributes in process `syz.0.315'.
[  204.983637][   T29] usb 1-1: USB disconnect, device number 16
[  205.117088][ T5704] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  205.241534][ T5704] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  205.256088][   T29] Unregistered device Abilis Systems DVB-Titan
[  205.258042][   T29] as10x_usb: device has been disconnected
[  205.270175][ T5704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.295394][ T5704] as10x_usb: device has been detected
[  205.301640][ T5704] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  205.314943][ T5704] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  205.357441][ T5704] as10x_usb: error during firmware upload part1
[  205.366096][ T5704] Registered device Abilis Systems DVB-Titan
[  205.463572][ T7066] netlink: 12 bytes leftover after parsing attributes in process `syz.3.317'.
[  206.133436][ T7074] netlink: 12 bytes leftover after parsing attributes in process `syz.4.318'.
[  206.835855][ T5704] usb 4-1: USB disconnect, device number 22
[  207.417521][ T5706] usb 5-1: USB disconnect, device number 19
[  207.968056][ T5728] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  208.139852][ T5728] usb 1-1: Using ep0 maxpacket: 16
[  208.146352][ T5728] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  208.171289][ T5728] usb 1-1: config index 0 descriptor too short (expected 51443, got 18)
[  208.190866][ T5728] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.216179][ T5728] usb 1-1: Product: syz
[  208.229320][ T5728] usb 1-1: Manufacturer: syz
[  208.234407][ T5728] usb 1-1: SerialNumber: syz
[  208.260151][ T5728] r8152-cfgselector 1-1: Unknown version 0x0000
[  208.275433][ T5728] r8152-cfgselector 1-1: config 0 descriptor??
[  209.609926][ T5728] r8152-cfgselector 1-1: Unknown version 0x0000
[  209.631440][ T5728] r8152-cfgselector 1-1: No union descriptors
[  209.656706][ T5728] r8152-cfgselector 1-1: USB disconnect, device number 17
[  209.869699][   T29] usb 2-1: USB disconnect, device number 23
[  209.901684][ T5704] Unregistered device Abilis Systems DVB-Titan
[  209.920506][ T5706] Unregistered device Abilis Systems DVB-Titan
[  209.945291][ T5704] as10x_usb: device has been disconnected
[  209.977617][ T5706] as10x_usb: device has been disconnected
[  209.997417][   T29] Unregistered device Abilis Systems DVB-Titan
[  210.026479][   T29] as10x_usb: device has been disconnected
[  210.259331][ T7090] tipc: Started in network mode
[  210.272790][ T7090] tipc: Node identity fe5d265af3f3, cluster identity 4711
[  210.298217][ T7090] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  210.332854][ T7090] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  210.360515][ T7090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.327'.
[  210.371223][ T7092] jffs2: notice: (7092) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  210.425043][ T7090] tipc: Resetting bearer <eth:syzkaller0>
[  210.445344][   T30] audit: type=1400 audit(1787374188.218:499): avc:  denied  { write } for  pid=7091 comm="syz.1.326" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  210.514987][ T7089] tipc: Disabling bearer <eth:syzkaller0>
[  210.546140][ T7097] syzkaller0: entered promiscuous mode
[  210.554131][ T7097] syzkaller0: entered allmulticast mode
[  210.816829][   T30] audit: type=1400 audit(1787374188.588:500): avc:  denied  { getopt } for  pid=7103 comm="syz.3.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  210.836816][ T5728] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  210.845726][ T7105] Bluetooth: MGMT ver 1.23
[  211.020050][ T5728] usb 2-1: Using ep0 maxpacket: 16
[  211.028503][ T5728] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  211.039502][ T5728] usb 2-1: config index 0 descriptor too short (expected 51443, got 18)
[  211.050843][ T5728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.059447][ T5728] usb 2-1: Product: syz
[  211.063651][ T5728] usb 2-1: Manufacturer: syz
[  211.080461][ T5728] usb 2-1: SerialNumber: syz
[  211.100189][ T5728] r8152-cfgselector 2-1: Unknown version 0x0000
[  211.108553][ T5728] r8152-cfgselector 2-1: config 0 descriptor??
[  211.199209][   T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  211.305593][   T30] audit: type=1400 audit(1787374189.078:501): avc:  denied  { write } for  pid=7128 comm="syz.0.339" name="c.1" dev="configfs" ino=9936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  211.308678][ T7130] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  211.377866][   T10] usb 5-1: Using ep0 maxpacket: 16
[  212.466346][ T5784] tipc: Node number set to 229516890
[  212.472042][   T10] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  212.485224][ T5728] r8152-cfgselector 2-1: Unknown version 0x0000
[  212.494673][ T7130] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  212.501819][ T5728] r8152-cfgselector 2-1: No union descriptors
[  212.513972][   T10] usb 5-1: config index 0 descriptor too short (expected 51443, got 18)
[  212.524534][ T7130] netlink: 12 bytes leftover after parsing attributes in process `syz.3.340'.
[  212.526735][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.544382][ T5728] r8152-cfgselector 2-1: USB disconnect, device number 24
[  212.552088][ T7130] tipc: Resetting bearer <eth:syzkaller0>
[  212.555452][   T10] usb 5-1: Product: syz
[  212.562177][   T10] usb 5-1: Manufacturer: syz
[  212.566800][   T10] usb 5-1: SerialNumber: syz
[  212.586653][   T10] r8152-cfgselector 5-1: Unknown version 0x0000
[  212.594308][   T10] r8152-cfgselector 5-1: config 0 descriptor??
[  212.602277][ T7129] tipc: Disabling bearer <eth:syzkaller0>
[  212.672252][ T7138] syzkaller0: entered promiscuous mode
[  212.678777][ T7138] syzkaller0: entered allmulticast mode
[  212.758084][   T29] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  213.825815][   T10] r8152-cfgselector 5-1: Unknown version 0x0000
[  213.840256][   T29] usb 1-1: Using ep0 maxpacket: 8
[  213.846709][   T10] r8152-cfgselector 5-1: No union descriptors
[  213.852288][   T29] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  213.856335][   T10] r8152-cfgselector 5-1: USB disconnect, device number 20
[  213.881988][   T29] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  213.915895][   T29] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  213.940657][   T29] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  213.965424][   T29] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  213.987903][ T5706] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  214.005960][   T29] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  214.018240][   T30] audit: type=1400 audit(1787374191.778:502): avc:  denied  { ioctl } for  pid=7143 comm="syz.2.345" path="socket:[14867]" dev="sockfs" ino=14867 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  214.058375][   T29] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  214.077840][   T29] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  214.111619][   T29] usb 1-1: config 168 interface 0 has no altsetting 0
[  214.128880][   T29] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  214.147975][   T29] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  214.168002][   T29] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  214.188017][   T29] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  214.208005][ T5706] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  214.228045][   T29] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  214.241473][ T5706] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  214.257990][   T29] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  214.269533][ T5706] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.287869][   T29] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  214.355044][ T5706] as10x_usb: device has been detected
[  214.368473][ T5706] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  214.376354][   T29] usb 1-1: config 168 interface 0 has no altsetting 0
[  214.392381][   T29] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  214.411426][ T5706] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  214.434471][   T29] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  214.458492][ T5706] as10x_usb: error during firmware upload part1
[  214.478528][   T29] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  214.490673][ T5706] Registered device Abilis Systems DVB-Titan
[  214.495975][   T29] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  214.529431][   T29] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  214.540811][   T29] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  214.552448][   T29] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  214.565983][   T29] usb 1-1: config 168 interface 0 has no altsetting 0
[  214.575500][   T29] usb 1-1: string descriptor 0 read error: -22
[  214.587534][   T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.657100][   T29] adutux 1-1:168.0: ADU100  now attached to /dev/usb/adutux1
[  214.688784][ T7140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.343'.
[  214.701292][ T5706] usb 4-1: USB disconnect, device number 23
[  214.741094][ T5706] Unregistered device Abilis Systems DVB-Titan
[  214.751799][ T5706] as10x_usb: device has been disconnected
[  214.884088][ T5704] usb 1-1: USB disconnect, device number 18
[  215.408680][ T5704] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  215.425462][ T7175] syzkaller0: entered promiscuous mode
[  215.431996][ T7175] syzkaller0: entered allmulticast mode
[  215.570017][ T5704] usb 5-1: Using ep0 maxpacket: 16
[  215.577716][ T5704] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  215.588965][ T5704] usb 5-1: config index 0 descriptor too short (expected 51443, got 18)
[  215.599365][ T5704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.607473][ T5704] usb 5-1: Product: syz
[  215.612547][ T5704] usb 5-1: Manufacturer: syz
[  215.617161][ T5704] usb 5-1: SerialNumber: syz
[  215.630645][ T5704] r8152-cfgselector 5-1: Unknown version 0x0000
[  215.637232][ T5704] r8152-cfgselector 5-1: config 0 descriptor??
[  215.697882][ T5706] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  215.797833][   T29] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  215.851918][ T5706] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  215.873778][ T5706] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  216.878112][ T5706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.888098][   T29] usb 4-1: Using ep0 maxpacket: 16
[  216.896720][   T29] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  216.906746][ T5704] r8152-cfgselector 5-1: Unknown version 0x0000
[  216.914666][ T5704] r8152-cfgselector 5-1: No union descriptors
[  216.936845][   T29] usb 4-1: config index 0 descriptor too short (expected 51443, got 18)
[  216.951670][ T5704] r8152-cfgselector 5-1: USB disconnect, device number 21
[  216.962885][ T5706] as10x_usb: device has been detected
[  216.970035][   T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.989463][ T5706] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  216.999180][   T29] usb 4-1: Product: syz
[  217.004568][   T29] usb 4-1: Manufacturer: syz
[  217.021104][   T29] usb 4-1: SerialNumber: syz
[  217.241755][   T29] r8152-cfgselector 4-1: Unknown version 0x0000
[  217.273054][ T5706] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  217.292865][   T29] r8152-cfgselector 4-1: config 0 descriptor??
[  217.539588][ T7192] netlink: 24 bytes leftover after parsing attributes in process `syz.0.359'.
[  218.110818][ T5706] as10x_usb: error during firmware upload part1
[  218.138244][ T7186] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57e00
[  219.188182][ T5706] Registered device Abilis Systems DVB-Titan
[  219.190810][   T29] r8152-cfgselector 4-1: Unknown version 0x0000
[  219.220639][ T5704] usb 2-1: USB disconnect, device number 25
[  219.238865][   T29] r8152-cfgselector 4-1: No union descriptors
[  219.276445][ T5704] Unregistered device Abilis Systems DVB-Titan
[  219.281997][ T5704] as10x_usb: device has been disconnected
[  219.312562][   T29] r8152-cfgselector 4-1: USB disconnect, device number 24
[  219.349352][   T30] audit: type=1400 audit(1787374197.128:503): avc:  denied  { remount } for  pid=7196 comm="syz.1.362" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  219.349380][ T7198] binder: Bad value for 'stats'
[  219.373424][ T7186] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  219.411939][ T7186] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  219.453861][ T7186] raw: 0000000000000000 ffff8880202ff400 00000001ffffffff 0000000000000000
[  219.453874][ T7186] page dumped because: unmovable page
[  219.453881][ T7186] page_owner tracks the page as allocated
[  219.453886][ T7186] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12c02(GFP_NOIO|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY), pid 10, tgid 10 (kworker/0:1), ts 67239158594
[  219.453907][ T7186]  post_alloc_hook+0xfd/0x120
[  219.453924][ T7186]  get_page_from_freelist+0x110d/0x35b0
[  219.453938][ T7186]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[  219.453953][ T7186]  alloc_pages_node_noprof+0x93/0x200
[  219.453966][ T7186]  pcpu_populate_chunk+0x17d/0x950
[  219.453979][ T7186]  pcpu_balance_workfn+0x85a/0xe00
[  219.453992][ T7186]  process_one_work+0xac7/0x1b10
[  219.454008][ T7186]  worker_thread+0x5ef/0xe50
[  219.454022][ T7186]  kthread+0x373/0x450
[  219.454043][ T7186]  ret_from_fork+0x730/0xd60
[  219.454060][ T7186]  ret_from_fork_asm+0x1a/0x30
[  219.454071][ T7186] page last free pid 1 tgid 1 ts 16393424815 stack trace:
[  219.454079][ T7186]  free_pages_prepare+0x586/0xe00
[  219.454092][ T7186]  __free_contig_range_common+0x14f/0x250
[  219.454105][ T7186]  destroy_args+0xa8/0x7a0
[  219.454118][ T7186]  debug_vm_pgtable+0x1d69/0x3490
[  219.454130][ T7186]  do_one_initcall+0x11c/0x6f0
[  219.454139][ T7186]  kernel_init_freeable+0x6ea/0x7b0
[  219.454151][ T7186]  kernel_init+0x21/0x1e0
[  219.454163][ T7186]  ret_from_fork+0x730/0xd60
[  219.454179][ T7186]  ret_from_fork_asm+0x1a/0x30
[  219.655784][ T7201] netlink: 'syz.1.362': attribute type 21 has an invalid length.
[  219.655925][ T7201] netlink: 'syz.1.362': attribute type 1 has an invalid length.
[  219.655938][ T7201] netlink: 144 bytes leftover after parsing attributes in process `syz.1.362'.
[  219.669179][ T7201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.362'.
[  220.343849][ T7216] syzkaller0: entered promiscuous mode
[  220.355091][ T7216] syzkaller0: entered allmulticast mode
[  220.530345][ T5728] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  220.648002][   T29] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  220.811176][   T29] usb 1-1: Using ep0 maxpacket: 16
[  220.824383][   T29] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  220.837639][   T29] usb 1-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config
[  220.850275][   T29] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  220.862898][   T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  220.875675][   T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  220.895711][   T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.905918][   T29] usb 1-1: Product: syz
[  220.911564][   T29] usb 1-1: Manufacturer: syz
[  220.916716][   T29] usb 1-1: SerialNumber: syz
[  220.969726][   T29] usb 1-1: config 0 descriptor??
[  220.997074][    C1] ==================================================================
[  221.005172][    C1] BUG: KASAN: slab-use-after-free in find_endpoint+0x2a3/0x2c0
[  221.012726][    C1] Read of size 1 at addr ffff88807cc524e8 by task swapper/1/0
[  221.020172][    C1] 
[  221.022492][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  221.022522][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  221.022534][    C1] Call Trace:
[  221.022541][    C1]  <IRQ>
[  221.022549][    C1]  dump_stack_lvl+0x100/0x190
[  221.022578][    C1]  print_report+0x13d/0x4b0
[  221.022607][    C1]  ? __virt_addr_valid+0x239/0x430
[  221.022638][    C1]  ? find_endpoint+0x2a3/0x2c0
[  221.022660][    C1]  kasan_report+0xdf/0x1c0
[  221.022680][    C1]  ? find_endpoint+0x2a3/0x2c0
[  221.022706][    C1]  find_endpoint+0x2a3/0x2c0
[  221.022730][    C1]  dummy_timer+0x500/0x3700
[  221.022756][    C1]  ? __pv_queued_spin_lock_slowpath+0x284/0xc00
[  221.022794][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  221.022821][    C1]  ? debug_object_deactivate+0x2e4/0x3b0
[  221.022846][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  221.022873][    C1]  ? rcu_is_watching+0x13/0xc0
[  221.022895][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  221.022923][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  221.022949][    C1]  __hrtimer_run_queues+0x462/0x9c0
[  221.022977][    C1]  hrtimer_run_softirq+0x1ca/0x360
[  221.023001][    C1]  handle_softirqs+0x1e6/0x9d0
[  221.023032][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  221.023059][    C1]  ? _raw_spin_unlock+0x28/0x50
[  221.023084][    C1]  ? __hrtimer_rearm_deferred+0x9b/0x7b0
[  221.023109][    C1]  __irq_exit_rcu+0x194/0x210
[  221.023138][    C1]  irq_exit_rcu+0x9/0x30
[  221.023165][    C1]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  221.023193][    C1]  </IRQ>
[  221.023200][    C1]  <TASK>
[  221.023207][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  221.023229][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  221.023258][    C1] Code: 18 a2 02 e9 43 4f 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 80 23 00 fb f4 <c3> cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[  221.023277][    C1] RSP: 0018:ffffc90000197e00 EFLAGS: 00000246
[  221.023294][    C1] RAX: 000000000081bb03 RBX: ffff88801f292580 RCX: ffffffff8bc82115
[  221.023308][    C1] RDX: 0000000000000001 RSI: ffffffff8e3d83e7 RDI: ffffffff8c615f80
[  221.023321][    C1] RBP: ffffed1003e524b0 R08: 0000000000000001 R09: ffffed10170a678d
[  221.023335][    C1] R10: ffff8880b8533c6b R11: 0000000000000001 R12: 0000000000000000
[  221.023347][    C1] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000
[  221.023362][    C1]  ? ct_kernel_exit+0x125/0x180
[  221.023383][    C1]  default_idle+0x9/0x10
[  221.023401][    C1]  default_idle_call+0x6c/0xb0
[  221.023421][    C1]  do_idle+0x3ae/0x5b0
[  221.023441][    C1]  ? __pfx_do_idle+0x10/0x10
[  221.023460][    C1]  ? finish_task_switch.isra.0+0x149/0x10d0
[  221.023483][    C1]  cpu_startup_entry+0x4f/0x60
[  221.023509][    C1]  start_secondary+0x21d/0x2d0
[  221.023536][    C1]  ? __pfx_start_secondary+0x10/0x10
[  221.023565][    C1]  common_startup_64+0x13e/0x158
[  221.023592][    C1]  </TASK>
[  221.023598][    C1] 
[  221.304643][    C1] Allocated by task 4964:
[  221.308962][    C1]  kasan_save_stack+0x30/0x50
[  221.313643][    C1]  kasan_save_track+0x14/0x30
[  221.318320][    C1]  __kasan_kmalloc+0xaa/0xb0
[  221.322907][    C1]  __kmalloc_cache_noprof+0x2e7/0x6b0
[  221.328276][    C1]  kernfs_fop_open+0x23d/0xd50
[  221.333036][    C1]  do_dentry_open+0x6ab/0x14d0
[  221.337796][    C1]  vfs_open+0x82/0x3f0
[  221.341867][    C1]  path_openat+0x19fa/0x2440
[  221.346456][    C1]  do_file_open+0x20e/0x430
[  221.350961][    C1]  do_sys_openat2+0x10f/0x1e0
[  221.355631][    C1]  __x64_sys_openat+0x12d/0x210
[  221.360474][    C1]  do_syscall_64+0x123/0x790
[  221.365078][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.370962][    C1] 
[  221.373273][    C1] Freed by task 4964:
[  221.377246][    C1]  kasan_save_stack+0x30/0x50
[  221.381927][    C1]  kasan_save_track+0x14/0x30
[  221.386601][    C1]  kasan_save_free_info+0x3b/0x70
[  221.391620][    C1]  __kasan_slab_free+0x5f/0x80
[  221.396385][    C1]  kfree+0x22b/0x6c0
[  221.400273][    C1]  kernfs_fop_release+0x12c/0x1f0
[  221.405296][    C1]  __fput+0x3ff/0xb50
[  221.409272][    C1]  fput_close_sync+0x118/0x250
[  221.414028][    C1]  __x64_sys_close+0x8b/0x120
[  221.418696][    C1]  do_syscall_64+0x123/0x790
[  221.423287][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.429172][    C1] 
[  221.431481][    C1] The buggy address belongs to the object at ffff88807cc52400
[  221.431481][    C1]  which belongs to the cache kmalloc-512 of size 512
[  221.445544][    C1] The buggy address is located 232 bytes inside of
[  221.445544][    C1]  freed 512-byte region [ffff88807cc52400, ffff88807cc52600)
[  221.459338][    C1] 
[  221.461651][    C1] The buggy address belongs to the physical page:
[  221.468048][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7cc50
[  221.476797][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  221.485284][    C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  221.492839][    C1] page_type: f5(slab)
[  221.496814][    C1] raw: 00fff00000000040 ffff88801c027c80 dead000000000100 dead000000000122
[  221.505406][    C1] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  221.513984][    C1] head: 00fff00000000040 ffff88801c027c80 dead000000000100 dead000000000122
[  221.522646][    C1] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  221.531311][    C1] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff
[  221.539974][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  221.548643][    C1] page dumped because: kasan: bad access detected
[  221.555042][    C1] page_owner tracks the page as allocated
[  221.560743][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4950, tgid 4950 (S02klogd), ts 19059065702
[  221.579143][    C1]  post_alloc_hook+0xfd/0x120
[  221.583815][    C1]  get_page_from_freelist+0x110d/0x35b0
[  221.589356][    C1]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[  221.595243][    C1]  new_slab+0xa5/0x640
[  221.599308][    C1]  refill_objects+0xe3/0x410
[  221.603909][    C1]  __pcs_replace_empty_main+0x372/0x680
[  221.609447][    C1]  __kmalloc_noprof+0x66b/0x820
[  221.614297][    C1]  tomoyo_init_log+0x1224/0x20c0
[  221.619238][    C1]  tomoyo_supervisor+0x506/0x1340
[  221.624258][    C1]  tomoyo_path_permission+0x270/0x3b0
[  221.629630][    C1]  tomoyo_path_perm+0x364/0x460
[  221.634477][    C1]  security_inode_getattr+0x116/0x280
[  221.639855][    C1]  vfs_fstat+0x4b/0xe0
[  221.643916][    C1]  __do_sys_newfstat+0x8b/0x110
[  221.648755][    C1]  do_syscall_64+0x123/0x790
[  221.653346][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.659230][    C1] page last free pid 1 tgid 1 ts 16998184483 stack trace:
[  221.666322][    C1]  free_pages_prepare+0x586/0xe00
[  221.671340][    C1]  __free_contig_range_common+0x14f/0x250
[  221.677053][    C1]  destroy_args+0xa8/0x7a0
[  221.681464][    C1]  debug_vm_pgtable+0x1d69/0x3490
[  221.686503][    C1]  do_one_initcall+0x11c/0x6f0
[  221.691258][    C1]  kernel_init_freeable+0x6ea/0x7b0
[  221.696458][    C1]  kernel_init+0x21/0x1e0
[  221.700800][    C1]  ret_from_fork+0x730/0xd60
[  221.705381][    C1]  ret_from_fork_asm+0x1a/0x30
[  221.710119][    C1] 
[  221.712416][    C1] Memory state around the buggy address:
[  221.718021][    C1]  ffff88807cc52380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  221.726052][    C1]  ffff88807cc52400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  221.734091][    C1] >ffff88807cc52480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  221.742132][    C1]                                                           ^
[  221.749558][    C1]  ffff88807cc52500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  221.757589][    C1]  ffff88807cc52580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  221.765620][    C1] ==================================================================
[  221.773661][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  221.780824][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  221.789737][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  221.799762][    C1] Call Trace:
[  221.803021][    C1]  <IRQ>
[  221.805840][    C1]  dump_stack_lvl+0x100/0x190
[  221.810509][    C1]  vpanic+0x553/0x970
[  221.814477][    C1]  ? __pfx_vpanic+0x10/0x10
[  221.818970][    C1]  ? __pfx_vprintk_emit+0x10/0x10
[  221.824007][    C1]  ? find_endpoint+0x2a3/0x2c0
[  221.828760][    C1]  panic+0xd1/0xe0
[  221.832467][    C1]  ? __pfx_panic+0x10/0x10
[  221.836876][    C1]  ? end_report.part.0+0x23/0x90
[  221.841792][    C1]  ? rcu_is_watching+0x13/0xc0
[  221.846547][    C1]  ? end_report.part.0+0x23/0x90
[  221.851469][    C1]  check_panic_on_warn.cold+0x19/0x34
[  221.856816][    C1]  end_report.part.0+0x3a/0x90
[  221.861572][    C1]  kasan_report.cold+0xe/0x18
[  221.866228][    C1]  ? find_endpoint+0x2a3/0x2c0
[  221.870990][    C1]  find_endpoint+0x2a3/0x2c0
[  221.875555][    C1]  dummy_timer+0x500/0x3700
[  221.880067][    C1]  ? __pv_queued_spin_lock_slowpath+0x284/0xc00
[  221.886309][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  221.892104][    C1]  ? debug_object_deactivate+0x2e4/0x3b0
[  221.897724][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  221.902660][    C1]  ? rcu_is_watching+0x13/0xc0
[  221.907413][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  221.913197][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  221.918129][    C1]  __hrtimer_run_queues+0x462/0x9c0
[  221.923307][    C1]  hrtimer_run_softirq+0x1ca/0x360
[  221.928407][    C1]  handle_softirqs+0x1e6/0x9d0
[  221.933162][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  221.938426][    C1]  ? _raw_spin_unlock+0x28/0x50
[  221.943254][    C1]  ? __hrtimer_rearm_deferred+0x9b/0x7b0
[  221.948881][    C1]  __irq_exit_rcu+0x194/0x210
[  221.953537][    C1]  irq_exit_rcu+0x9/0x30
[  221.957773][    C1]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  221.963401][    C1]  </IRQ>
[  221.966312][    C1]  <TASK>
[  221.969221][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  221.975187][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  221.980810][    C1] Code: 18 a2 02 e9 43 4f 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 80 23 00 fb f4 <c3> cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[  222.000403][    C1] RSP: 0018:ffffc90000197e00 EFLAGS: 00000246
[  222.006456][    C1] RAX: 000000000081bb03 RBX: ffff88801f292580 RCX: ffffffff8bc82115
[  222.014411][    C1] RDX: 0000000000000001 RSI: ffffffff8e3d83e7 RDI: ffffffff8c615f80
[  222.022385][    C1] RBP: ffffed1003e524b0 R08: 0000000000000001 R09: ffffed10170a678d
[  222.030345][    C1] R10: ffff8880b8533c6b R11: 0000000000000001 R12: 0000000000000000
[  222.038304][    C1] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000
[  222.046259][    C1]  ? ct_kernel_exit+0x125/0x180
[  222.051103][    C1]  default_idle+0x9/0x10
[  222.055331][    C1]  default_idle_call+0x6c/0xb0
[  222.060076][    C1]  do_idle+0x3ae/0x5b0
[  222.064135][    C1]  ? __pfx_do_idle+0x10/0x10
[  222.068704][    C1]  ? finish_task_switch.isra.0+0x149/0x10d0
[  222.074575][    C1]  cpu_startup_entry+0x4f/0x60
[  222.079311][    C1]  start_secondary+0x21d/0x2d0
[  222.084062][    C1]  ? __pfx_start_secondary+0x10/0x10
[  222.089358][    C1]  common_startup_64+0x13e/0x158
[  222.094287][    C1]  </TASK>
[  222.097496][    C1] Kernel Offset: disabled
[  222.101797][    C1] Rebooting in 86400 seconds..