last executing test programs:

4m54.873413929s ago: executing program 2 (id=3):
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0)
cachestat(r0, &(0x7f0000000040)={0x2, 0x9}, &(0x7f0000000080), 0x0)
quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, 0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x3, 0x2, 0x1, 0x9, 0x4, 0x1, 0xfd, 0xea52})
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
pwritev2(r0, &(0x7f0000001680)=[{&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000001140)="1f679242c2aada97c283cc0bd0eca4b5b5d58150348f475b4f056b55415beb2ec35c72456393bec41779dfda8f01cacd05da1c9752b736addc73fdb1eff1950e8b2677d25b188bcfe75913c1175cadec5e7ffc9f72f07716ca36181c645981656f06eacc7d2bac73c813b9a188b784cd343e6b6302bd2f72ea7481792478e400999ff71e0f4511502ccab95c7739ed5eb1c6fcceafe8dbd5", 0x98}, {&(0x7f0000001200)="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", 0xfe}, {&(0x7f0000001300)="58e0cec70a29f05815823e41e79515af5744ab4a075fef71985cf10a0905a5d7a92ed77f1b0903db48ba9a5ca2e7e881a25ea81e0a1bccd6982acd53869722c6a0bf3878b85276a46ccd67c7c56c1438e7ba3e9b1213a41554c93fe4cdbe3a85472f0c94af73cb61a5c55fcd914662ef43d3a1ee054818acbd2db075881a0128707b2f14a21231c3ff35b388ef7afe5fac2f43d3351086e1a57ce148fe3d436354c078a5886c4598e10591943f937eb656d6ba0372ddd724ad913d8340107b8584f75589083a05136aa6f85ef8d39aef5521d1c8b4d128689e595da6e4f2c8899f5f3957d815c01f9d210bfdfeb63128d14b2e98e234c3f4a551", 0xfa}, {&(0x7f0000001400)="81ac0b5c889cc6a97f4bdd7b8bbbf5583dbac95605cc2c4706c963488d990977ffb17909d8a91b50f12c6d9d44d0ba", 0x2f}, {&(0x7f0000001440)="2d8f2dfc0cbe866c0599772c85d123610df9875e42bd013adb1caa7afa1d40f49a008d1de93eb521268d48a2c4e6c4979f0d60e2b566a117dcd2790b77741959daa07510ab7cd6bf54a6dfda45ab3097fe29c5b0235a46d952aae518b456ad1c3fa41d0f91ff0ea12abea675827131755d2acb484b52c176c8fdd0d9deac8df0be17707fd95199a869b0ee4d746e5e56da6d288ebfea6bbbb5a44c651bc49fa11739656fa79e79", 0xa7}, {&(0x7f0000001500)="c50d63ea105100cc3eacde9f34a2c832119b9ae2528ae46f56ced08a0156aa0f", 0x20}, {&(0x7f0000001540)="f4a6b42531bd4b02094d59ec71690b7e73d08093c9c6284389fa3f173e1600c28477a637e56ae41b047b15da659f6c1f7cbf4425839c534c950dfb90b383caa611b792278f22351438607587a26e33b180ee8e539a350a66bb3f643ac82aa8a5f3d03a4c7ace5527122f0d37a9cc89895afb73eee3b9abe9155513af38c484157c1af1020878f42cb47fb1080f403c7d2c94b23a5cd2e3ba3e261c717c78399f4c7974bcfedc95c7e476b30df7256e3bee", 0xb1}, {&(0x7f0000001600)="1768665a5ff7d7cb913db5a79ce71237ed24042f4c1cfa4e2e10bcdfbad04d99ad0e179308021879e254c1ed36c5c81293687912bacf3d742dd34dfddee970fe2f1012e1ef2616474514599ad726b5dea4e8fc563cd09a37afa1f2c4", 0x5c}], 0x9, 0x3ff, 0x2, 0x2)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000001740)=0x8, 0x8)
close(r0)
r1 = syz_usb_connect$printer(0x4, 0x36, &(0x7f0000001780)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x10, 0x5, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x7, 0x1, 0x1, 0x64, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xd9, 0xf, 0x1f}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x1, 0x5, 0xff}}]}}}]}}]}}, &(0x7f0000001940)={0xa, &(0x7f00000017c0)={0xa, 0x6, 0x0, 0xf7, 0x2, 0x4, 0x8, 0x1}, 0x3a, &(0x7f0000001800)={0x5, 0xf, 0x3a, 0x4, [@generic={0x13, 0x10, 0x2, "9db42ac0f5c1b3adfecf81050c71a12e"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x4, 0x3, 0x2, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "2f53479ac9775c65a365ef14181ff206"}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0x861}}, {0x27, &(0x7f0000001880)=@string={0x27, 0x3, "4b26fc1560239c4cca3389acab2a9c951553e2cab0ec30068e6afac6eeabf3862e6ecb9a60"}}, {0x31, &(0x7f00000018c0)=@string={0x31, 0x3, "3b0695d2ce8ff616c5cf5d28a39b29b83a528d7e2db9ff3cf73770756f11671121bec0c465a2e8c684e4699333b3c1"}}, {0xc, &(0x7f0000001900)=@string={0xc, 0x3, "86ae241e5bf6c545a478"}}]})
syz_usb_control_io$printer(r1, &(0x7f0000001b00)={0x14, &(0x7f00000019c0)={0x40, 0x23, 0x4b, {0x4b, 0x21, "f81a1bda6a09d6d17635beaf8f596b4cd7a36618bd1328a827bab3ed46fb2fe13ce1cc21cfe120b3cb62c49c65271a8d8d439f43d804893e450cdf23444f7374083169e3332210260c"}}, &(0x7f0000001a40)={0x0, 0x3, 0x82, @string={0x82, 0x3, "b2f8c92ba12a8301b71480e16a8782fcc28c2b4943186f98f653d03b989a56910f100348c669dfefd469f12189dd444499b05e0330d1bb5c7a318052cdc78eee3affd1f153520e6aeb33685be2dbcf317136fad84b1db5ae4216786a15d00176b44299f7e40d81bee968b401bcc9784979e54e434ee784f8e4d73c2a1f69344e"}}}, &(0x7f0000001dc0)={0x34, &(0x7f0000001b40)={0x40, 0xd, 0xe0, "fcb6e7cd1c63fde37ca1a5d7a865747030f88389b74ce20136f915bccddc926bbddbc2df863f362ed04f2dfbf6eaba3b8273970ab1b5b50e463cc036708435b5870dd139cfbf955f7f61b868438013da162073f51abd73dd7f07d6ff00784e82c57f13c1abdfd43e3c71b397df0387e2e1ac50c4f03b960565be75e5c11b14ec6b8b558c3328cdb054dda5860294bca77828109f6e4ee65ee5d5e99b2f6fc8aeef7a97a5845a1f0e9be5e58c14bf8b0cdeddc969116e5821fdce333024761e06f78883afeeadd0c0d4581bdb8c6271b14aeb2100e9955809bcf7970206757374"}, &(0x7f0000001c40)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000001c80)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001cc0)={0x20, 0x0, 0x48, {0x46, "56577bf8cc9013afc59fb48aeae8f9ef5c1c2691fc3325c8f1628499af871217acf349205234974fedaa8fa63e3bedfc483f211c2889182246a9f0e2ec9ceb3ca82dcbc6c2e1"}}, &(0x7f0000001d40)={0x20, 0x1, 0x1, 0x6}, &(0x7f0000001d80)={0x20, 0x0, 0x1, 0x40}})
close_range(r0, r0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e40), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001e80)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000002040)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002000)={&(0x7f0000001ec0)={0x140, r2, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x5e}}}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@mesh_chsw={0x76, 0x6, {0x5, 0x9, 0x9, 0x9cfd}}, @channel_switch={0x25, 0x3, {0x1, 0xc}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x66}, @NL80211_ATTR_IE={0xc8, 0x2a, [@chsw_timing={0x68, 0x4, {0x5, 0x2}}, @rann={0x7e, 0x15, {{0x1}, 0x0, 0x9, @device_a, 0x8, 0xd, 0xffff}}, @ibss={0x6, 0x2, 0xd8d}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @mic={0x8c, 0x18, {0xa4, "92892f709a0a", @long="b35711194198d16a230f06532aafcb54"}}, @mesh_chsw={0x76, 0x6, {0x7, 0x1, 0x4, 0x26c4}}, @fast_bss_trans={0x37, 0x7c, {0x77, 0x2, "13c43b9c48d4f9f7c9bcab06a3389575", "819bccf9e779eafad2ed61fb70e91d8e3876d5e7856c4eab544910b75cccac2b", "9dac30a404cb92ac60d14efec660f8360e4726d048cdc1975ecb616972b04f2e", [{0x2, 0xd, "27d74004070636d499364e2759"}, {0x1, 0x19, "faca069f75517eaa5d8dc86da447caa4d8e95c12c519154521"}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x55}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5c}]}, 0x140}, 0x1, 0x0, 0x0, 0x11}, 0x40)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000002140)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x2c, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x4}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
r4 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000002180), 0x801, 0x0)
close_range(r4, r0, 0x2)
fstat(r4, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
r6 = geteuid()
mount$fuseblk(&(0x7f00000021c0), &(0x7f0000002200)='\x00', &(0x7f0000002240), 0x20000, &(0x7f0000002300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xa00}}, {@default_permissions}, {@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x3}}, {@max_read={'max_read', 0x3d, 0x487}}, {@allow_other}], [{@fowner_lt={'fowner<', r6}}, {@obj_type={'obj_type', 0x3d, '/dev/userfaultfd\x00'}}]}})
pipe2$9p(&(0x7f0000002480)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
write$P9_RFSYNC(r7, &(0x7f00000024c0)={0x7, 0x33, 0x2}, 0x7)
ioctl$KVM_SET_XCRS(r0, 0x4188aea7, &(0x7f0000002500)={0xa, 0x9ff, [{0x1, 0x0, 0x9}, {0xffffffff, 0x0, 0x8}, {0x5, 0x0, 0x3}, {0x6, 0x0, 0x70f}, {0xad0, 0x0, 0x4}, {0x7, 0x0, 0x5}, {0xff}, {0x2, 0x0, 0x5}, {0x3c97, 0x0, 0x10001}, {0x7, 0x0, 0xc5}, {0x8000, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x6, 0x0, 0x10}, {0x3, 0x0, 0x8}, {0x1, 0x0, 0x4}, {0x7ff, 0x0, 0x1ff}]})
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000002b00)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002700)={0x364, r2, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x6b}, @NL80211_ATTR_IE={0x3d, 0x2a, [@mesh_chsw={0x76, 0x6, {0x4, 0x8e, 0x34, 0x4}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @supported_rates={0x1, 0x3, [{0x9}, {0x13, 0x1}, {0x60, 0x1}]}, @mesh_id={0x72, 0x6}, @link_id={0x65, 0x12, {@from_mac=@broadcast, @device_a, @device_b}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @channel_switch={0x25, 0x3, {0x0, 0x5, 0xfb}}]}, @NL80211_ATTR_IE={0x248, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0x1, 0x2, 0x9, 0x1}}, @perr={0x84, 0x128, {0x2, 0x12, [{{}, @broadcast, 0x2, @void, 0x33}, {{}, @device_a, 0xab, @void, 0x16}, {{0x0, 0x1}, @device_a, 0xa, @value=@device_b, 0x3c}, {{0x0, 0x1}, @device_a, 0x1, @value, 0x23}, {{0x0, 0x1}, @device_b, 0xb6, @value, 0x8}, {{0x0, 0x1}, @device_b, 0x5e, @value=@broadcast, 0x6}, {{}, @broadcast, 0xd, @void, 0x3a}, {{}, @device_b, 0x1, @void, 0x24}, {{0x0, 0x1}, @broadcast, 0x2, @value=@broadcast, 0x6}, {{}, @broadcast, 0x0, @void, 0x25}, {{}, @device_a, 0xfffffffd, @void, 0x6}, {{0x0, 0x1}, @device_a, 0x80000000, @value, 0x24}, {{0x0, 0x1}, @device_b, 0x5624, @value, 0x15}, {{}, @device_a, 0x5, @void, 0x27}, {{0x0, 0x1}, @device_a, 0x2ad, @value, 0x2a}, {{0x0, 0x1}, @device_b, 0x3, @value=@broadcast, 0x1e}, {{}, @broadcast, 0x400, @void, 0x2d}, {{0x0, 0x1}, @broadcast, 0x2, @value=@device_b, 0x41}]}}, @rann={0x7e, 0x15, {{0x0, 0x67}, 0x4, 0x3, @device_a, 0x8, 0x2, 0x8000}}, @link_id={0x65, 0x12, {@from_mac=@device_b, @device_b, @device_b}}, @ht={0x2d, 0x1a, {0x1000, 0x3, 0x3, 0x0, {0x5, 0x1, 0x0, 0x14e, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x400, 0x1, 0x8}}, @fast_bss_trans={0x37, 0xc8, {0x81, 0x4, "d4063b93cb9162a4cb03d05d5ced73cd", "5a54bf162ed5b9d32e3bf7ff5c667d6ead130409cf6b36162c38a02eb5520cc9", "04ee36b83aa2f86cd6aa8c5bd61d717a5bc32c5172629a753f0e5da598ea0845", [{0x4, 0xf, "151901decb257d17d8514451ac37c7"}, {0x1, 0x1a, "389ab9a1cc4bbe362444541001207c11d4f631f108fe0f6e59b5"}, {0x1, 0x20, "7c669730ca048f30baf14764f50e563118b662da0aa867a2a988d861a14d0ff6"}, {0x4, 0x25, "11c1f77a0e159574d06781f4d1d15d8308679edd7dad79a7e56e267c41c58489638256b5e1"}]}}]}, @NL80211_ATTR_IE={0x9a, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x59, 0x5}}, @rann={0x7e, 0x15, {{0x1, 0x30}, 0x3, 0x5, @device_a, 0x400, 0x4, 0x6}}, @supported_rates={0x1, 0x8, [{0x18, 0x1}, {0x12, 0x1}, {0x1b}, {0xb}, {0x60}, {0x6c}, {0x36, 0x1}, {0x48}]}, @fast_bss_trans={0x37, 0x66, {0x7, 0x2, "d538adc254d7367b4386e3df96e3a2dc", "a1ac95aab47b6ae457beec7c33fe90e101aa0a8babd8c9ff9c49fec9fbc30d36", "1115b3f5c06985a250f1a75ae13a5e4d4bde84a34157538b35e2e89b4fde617b", [{0x2, 0x9, "408670a817b5447180"}, {0x4, 0x7, "6d047a99d69437"}]}}, @cf={0x4, 0x6, {0x5, 0x5, 0x7, 0x81}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x17}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x45}]}, 0x364}, 0x1, 0x0, 0x0, 0x20000004}, 0x880)
r8 = accept4$vsock_stream(r0, &(0x7f0000002b40)={0x28, 0x0, 0x2710, @my=0x1}, 0x10, 0x80800)
preadv(r8, &(0x7f0000003e40)=[{&(0x7f0000002b80)=""/7, 0x7}, {&(0x7f0000002bc0)=""/241, 0xf1}, {&(0x7f0000002cc0)=""/180, 0xb4}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/179, 0xb3}], 0x5, 0x6, 0x100)
sendmmsg(r8, &(0x7f0000004a00)=[{{&(0x7f0000003ec0)=@rc={0x1f, @none}, 0x80, &(0x7f0000003f80)=[{&(0x7f0000003f40)}], 0x1}}, {{&(0x7f0000003fc0)=@ax25={{0x3, @bcast, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @bcast]}, 0x80, &(0x7f0000004480)=[{&(0x7f0000004040)="70bdaacfc1d71886e66fca3334ee2a9c6213d0cbee4a992a0c10b734e360298eb6d987082025567b5b16174eb36fb5a224810d746d45e3df2818bf3e2725547e51e2a35e916df03b7f28d335", 0x4c}, {&(0x7f00000040c0)="8c4a8853f41399cc938f1821516c578f13c9d29ca6eb3ee0cf3bb1e003b001d4a90ed42116ebddaa709b45153cd25fe27b", 0x31}, {&(0x7f0000004100)="017804c772c6464e0fd17a29687182925bde442c706b760cab1cdce69407fa0d339bc76631592df416389b628c86fca2b3833333791605b56022a25f4767268339e706e1d43f142b97bdf1900e7ee67c6e293276eee24b2346307ef4b8b37dbb1530ca956e40a313d4856ff1ec4fd9fafef3c6c67c0aaa0dce9cf4893773417eef09e60476ea0ae8b2bdec9ed7253abd4719bfa11349f3a62f4286003f4f57d43a50919b8ad267f2f19331ac0713591ade5cab5b3864f766f5b02f347b443d8a8cb94a5091db2e262e7ead95fc96062715dfe7895b7682a3d01824b73607e45ee72b639b35e32252f9a2996c1b8adbad461467b49a85a7ea4a5740655e", 0xfd}, {&(0x7f0000004200)="d184fa9e403b079add0d4849264133adf24bcd15c9c8bb6e14b7fa425b0684a16c8e21e4501529111a2b11b9", 0x2c}, {&(0x7f0000004240)="33fc8f394522a2004a265c832798427630be89b0148fcc03aec051af4a4dedb4b384280ead6898b9d84abf8041fb695c2401010af97652e8a6051b89ffe47437013d78334caafc05e0afcd9281ca61003688", 0x52}, {&(0x7f00000042c0)="86ca4543d89c9afc978564eb72a36e6b6ab32fbe5e07ac85452b67fe9869b7a19b252602ba607856282c5591e6500dfb06f0e4978aac043dff1f32b6fe03fcf5c73f91e7c5d533270b15dc888514fd36c9988d400841abfa06ba40d5e8edf76d6fcb41b5d8bf42c01a49d8af4d32c58ea8459a56355acb2822f411e4cd6b6ae210", 0x81}, {&(0x7f0000004380)="9eb90ce389e04ae99a1667dac759fb45c20261c69a08e5923e5f3b0895f29bf15a5fe8868ce45a78b4055bb57469367a7e72bb2482882bf81f3b6f0880d48304fa28312d356d638c1c9c3421afd4e23f8020332a9c17ebb62b88f08074afe7c8a9c4e9e9b37dfcb803452e7b65ed5f94c3e2021d06df826a9c05df64a5d8f01b184b301e08c603b3b9bb9d5f978c7fa6667afce263bd089ed2788543aa7edfc67c4f98bb042ba7d627cbdfa583e7486c3339543009a6e76bc1b1e57b3ba903b81cfa9df08dd91930aac5c978ff714c5f83ba5f6a9a4c94cc926c187421d38140fef4df821f407787efa88f0bb7627171f85fbf8110", 0xf5}], 0x7, &(0x7f0000004500)=[{0x78, 0x109, 0x2, "06d33b7c0ff04079c7a346071693a6cdee8727c76bd7a3e567f9b6f57f2ac46f985e5ca02ffb7125e8967f17956c097f161e8d704342a318a0909896bb301d17ded6af5e35710c86ef098e27becd5b3b8d8f6aaa9a3511173b755db66fbf4dc86a5a6bcfc4dd01"}], 0x78}}, {{&(0x7f0000004580)=@in={0x2, 0x4e24, @multicast2}, 0x80, &(0x7f0000004940)=[{&(0x7f0000004600)="2a7f908efe7ac0d49cb7ac59127ff9d64a0206a62217789c72c9607ff7c23d6acf2d2c9b", 0x24}, {&(0x7f0000004640)="15c449cf17718dc7e025eddb64562985fd9193246050a9d832c456f86c8d4e88bc3839a540a725e3f4fd90784189b286af7c68518e0fa19b9046504345b525fc1eb6f6f0ff37067001d783275092df47ab7925ad873f0ff1a6492a30de652bd170b5e8ae660304620ddad44045a7c339eea405f26d330df43d6e8ee2d7eedc68d9f4f99d0450f0eca11b30914336876b6f6a9f189d7618e869935861c1cd6d2b4b4031686520907468a649d633edf18ae84001cbc14202dd7769ffba2b1d5c86681e1670b594344c79f102ce58fc31c2af8e05625161023c3d0133ace520785b682a93294aafd26ea2da9fe8c7097cec7bf81f3fd75132", 0xf7}, {&(0x7f0000004740)="cbd68aab1d40a9c9a736c40b145f728b7e010edbba612b3f6060bacd9c16b761999dc32dffee6ee64411211853ee07ad2a43570151318ada3f1827ab442bc359a368685ca2fdb6cd852e5541c95d39f0dedcc2eb1c9ff80019b4f99e097ef544820106160e2fe0667d51555d67dad14ccd11794a986526a1be8e96d1c4b54789157d43fdc4bdd7de32df0c9eded3beb56e002f377297c7438f4531d1e25d05153d041283347c4bf189df902465c178754bbbd232c5cdeacd51a28677206f43b807580fc0d75890bc7b7ddbb2837ba41aaf07d1bec42a75f045dedb8d3819", 0xde}, {&(0x7f0000004840)="f74e82c0a15a0deba6924cd32825d3814b425129f87287b7046c8c53ea0f327335a3f72694cb52a87d75495db8a9726df395570758cd393352d1fa1d2b9be7e83571ce2883cc85ab302498cf95b571abc9bbbfada3f4b4d67b2f8a5f7819863eb842d2c225cd4286982ba6a51a75c5604a8b80d53e70802e0426187f332c661c7a1703e3316442d031258665eaa3e320e757309c0bc0738bdda1fe36999f28443a9fc8d2559d5f", 0xa7}, {&(0x7f0000004900)="bbb5b9b3d7015707f683733a3f2fc0eeae396e190ef8b4b65434904ebe348e7d3741e435883d8d96f2cbe0f5709f101f9f160c0ba3a6", 0x36}], 0x5, &(0x7f00000049c0)=[{0x40, 0x118, 0x3, "4917f94c00d2fac5fd96afe9b1e9a6c0ea33fd87f5ae269d1f6e8d4a2ecc7ad935e303eb2ed6ee2f0bfa26881d"}], 0x40}}], 0x3, 0x88c0)
r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x14)
ioctl$KVM_IRQFD(r9, 0x4020ae76, &(0x7f0000004ac0)={r0, 0x7, 0x3, r0})
ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000004f00)={0x2, 0x8, @start={0x0, 0x0, "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", "57d48d7b36b93925378b6a040ad9fa0a6f5f27135b47eb0e1ee2904b6bd163bc1fca8d017d00f0d82d48652295caf3beec0927eb0c7d2c49878bc14f348bf4182fc0feedab2250398983c6bbd8dd3cd8972a9b9058a4ad9aca0843a0deed3d8e478e4dfb41a757150fe4f586a7d77aac99d58c915e6508b1a5169636afcf097f7cbafb1d07364a22e40be7b3924d7e08340ec236eca2d9301048ade89e499269ad773079f5a9db5327899b09ce39beb7a043925f4a2e956a4852c1b47cc60736d2030627d0c392faa018b5e544f714f1d8112c918438ad9160501214ef0c866d69573ff53001b7a238e9a48e5e8328ea1d90ed2acfa05afdbc413a907f41c82c38bc6a31985b7973262d33ed78ca137d1a4a41e265ac665b27b1fc53ccd0fd19319c4b69f91a0a1f26b20fe75f1cef34e6ae9158f0f50129cce13d1539a620c8cb819cec64ac2678b7ea24cd5a99364a347035ca21e008ebaa38b092051e71e9dd59a0d7f5d29c108709fbfea84dfca892e4dac248698df040b31a810d551d04da5b8c5a8d7c7dc556bc97742b82dba911f2f3bc48ee319a241b32340658671f4e5e63e9c9ff7ce998c1eced9e3c2162dfe11c3be65e0191f0ee7240f835646707fcedd6539dd236a4f063b66066cd1629ff8fc90f1ed8886da8c7c2bd8557fd2199e0bc7e1befa58e8b57c17aa5816b523f6443523cd0605bdad46013c4dd8ad83efd19334fd5f8083874c5734bcea529e702ae6aa0df1cf6afa3ccd7bde7ae8921d15a4c8c540ada1d8a7569951529739c11e16c86d32217cdbe8c97a427147e253c95e3225a03d1334b8d33366962ff9800d82e1748b3862a2cbdc6bfa58e1ec2eb6b835b063f77153cbb6cff29e049046cfb1ee1e1bbf3175566cf0b091c721fe558c33941bb39a6d6b04b00140a0e024698d7bac60550180ccc001f9b0a6910e09fde9828bb1dead60b114230ff49e9efbc8e769947f1dc61cadadcca69f02ddc5ee23e731175e5741a1873e2fd3c948e4b3c5b4e774d3b27128669e649d0251c96005941bc93545b5a0f3c8d8c0be4cfcd5e574cffed3b73f50b0d0f2ee283b95aec2d90f8eaf6e3a39ad27c7dce6b9d4748c8ba1d4ac9edf18b7b81a0a92f0ed272fd9a7f34ac94e7c4ebaebfc0b5b35593f91db55bec317a82ef037f81b29241e324280b0cbc5c1c0fc08f45a56b4f0b353d2016440cc3cacffb62a21e6ac99834a78b6ee0ba18a487da3cbfd95fa45118eab62df07468098c69185b7c956e66152900076d02ffb483bf40f0ca0477d64ec5620e9c76bc10566cc9df8baaeeab45fe337ef075e66666376acf7a9fda027fe684d2f3ce7ddb29832c0e59e9c1e48e2b872151edda0917d7845c4ecbf025c7702eb4c59067816f3577bc59c9ee1cc8ba21a534e4af53946113f83cc4e1648531f466d7c68961b2775bdcea"}, [0xfffffffffffffc01, 0x2, 0xb7f, 0x1, 0x3, 0xc, 0x10000, 0xa, 0x9, 0x703f, 0x7e, 0x0, 0x100000001, 0xf, 0x0, 0x4, 0x2, 0x401, 0x0, 0x3, 0x5, 0x1, 0x0, 0x2, 0x50ef, 0x3, 0x46, 0xfb5, 0x4bca, 0xb, 0x8000000000000000, 0x7, 0x3, 0xff, 0x77, 0x0, 0x0, 0x7fffffff, 0x3, 0x6, 0x8, 0x7, 0xb, 0x80, 0x2, 0x9, 0x5, 0x4, 0x8, 0xf, 0xe, 0xf7, 0x10000, 0x8, 0x9, 0x4, 0x7fff, 0x9, 0x9, 0x3, 0x80000000, 0x607, 0x30, 0x5]})

4m54.296877025s ago: executing program 2 (id=16):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x800)
lsetxattr$security_capability(0x0, 0x0, &(0x7f0000000180)=@v3={0x3000000, [{0x0, 0x8}, {0x2, 0x70000000}], r0}, 0x18, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000001180)='./bus\x00')
rmdir(&(0x7f0000000440)='./file0\x00')
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800, &(0x7f0000000240)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r0, @ANYBLOB="2c667375642d361133642d003232632d39383030380134632c00"/42])
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002a00010a000000000051e63490f45f0008"], 0x24}}, 0x0)
read$FUSE(r1, &(0x7f00000029c0)={0x2020}, 0x2020)

4m54.296740775s ago: executing program 2 (id=17):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000040)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x4}}]}})
r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3)
setresuid(0xee01, 0xee01, 0x0)
utimensat(r2, 0x0, 0x0, 0x0)
ioctl$VHOST_VDPA_SET_CONFIG(r1, 0x4008af74, &(0x7f0000000100)={0x3, 0xc0, "c8b82016ff1a3507bfaca7c220c3e22bd05e51dee9376a83fbecd5e6480b79d835a7948f808be12e852cdbd2cb4a6a5a92c53b7cdc573caf66de85876f1ba6fcb103f3195c8a779af6cd50883e65699f5233e77d2631ce0951111c855e5ca753595d66f3704c46ae4b031bb88788d03154f03921d0de89e835e8d4dafe0be67de1be4ed0d522cd15f30cb28b6c0b918c28ea0fb7c4ab33441863b2b85895b7bac0d18115e73f65ff5aeb20167186ac2ce62e7657cc1695c5751c671d27791664"})
read$FUSE(r1, &(0x7f0000000980)={0x2020}, 0x2020)

4m54.203465293s ago: executing program 2 (id=18):
mount(&(0x7f0000000000)=@rnullb, 0x0, 0x0, 0x220000, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
fremovexattr(r3, &(0x7f0000000140)=@random={'security.', '/dev/fuse\x00'})
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600)

4m54.141738728s ago: executing program 32 (id=18):
mount(&(0x7f0000000000)=@rnullb, 0x0, 0x0, 0x220000, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
fremovexattr(r3, &(0x7f0000000140)=@random={'security.', '/dev/fuse\x00'})
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600)

1m13.540784979s ago: executing program 1 (id=2901):
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x8001)
open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x101000, 0x10)

1m12.608875105s ago: executing program 1 (id=2908):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket(0x28, 0x6, 0xc)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}})
r2 = socket(0x10, 0x803, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
r3 = socket$inet(0x2, 0x3, 0x4)
timerfd_create(0x4, 0x80000)
close_range(r3, 0xffffffffffffffff, 0x2)
memfd_create(0x0, 0x2)
r4 = socket(0x18, 0x1, 0x0)
sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
mount$fuseblk(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0xce0ea8eb954b847f, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0)
recvmmsg(r4, &(0x7f0000000300), 0x0, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}})
ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
syz_pidfd_open(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2001, 0x34)
r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r6, &(0x7f0000000100)=ANY=[@ANYRES8=r6, @ANYRESDEC=r2], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r6, 0x1000)

1m12.332014637s ago: executing program 1 (id=2911):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="09030000000000fdff072000adce04000280"], 0x18}, 0x1, 0xf000000}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)
preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000240), 0x3af4701e)
sendfile(r5, r3, 0x0, 0x10000a007)
sendmmsg$inet(r1, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000dc0)="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", 0x2de}, {&(0x7f0000000bc0)="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", 0x1de}, {&(0x7f0000000540)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df4130d43d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9dffcbd6120262f89f77e1810fbbd86ae21f58af3bd7b012f706baf6532e483ed1106f9b920450", 0xc6}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000fc0)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r0}, @flat=@handle={0x73682a85, 0x1009, 0x3}, @fda={0x66646185, 0x2, 0x2, 0x32}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

1m12.274145122s ago: executing program 1 (id=2912):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x0, 0x1})
r2 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x220})
close_range(r0, r0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8})
fcntl$setflags(r1, 0x2, 0x1)
openat$cgroup_ro(r3, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

1m12.200592317s ago: executing program 1 (id=2913):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313, 0x20}], 0x0, 0x1000000, 0x0})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0)
close(r4)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000340)={0x2e}, 0x8)
setsockopt$inet6_opts(r5, 0x29, 0x3b, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2)
sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)={0x374, r6, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9d0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6059}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd01}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x67}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}]}, @TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcb000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8230}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x386}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4f}]}]}, @TIPC_NLA_LINK={0x134, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5364}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe95}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x90e}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x400000}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x60}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1c01}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}]}, 0x374}, 0x1, 0x0, 0x0, 0x20040000}, 0xc000)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r8 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r7, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000940)={0x60, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)={0x30, 0x30, 0x30}}, 0x400}, @decrefs={0x40046307, 0x3}, @free_buffer={0x40086303, r8}], 0x0, 0x0, &(0x7f0000000540)})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000940)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303, r8}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x64, 0x0, &(0x7f0000000340)=[@dead_binder_done, @free_buffer={0x40086303, r8}, @increfs={0x40046304, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/222, 0xde, 0x1, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/77, 0x4d, 0x0, 0x16}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0xf8, 0x0, &(0x7f0000000680)="51714362f4cf81ad30b08d50a95d5fc9eb922c4ca2d65075ea25c6a04dc56ae5f4fba6101a3f6fa5d794b8a3dc15f98162e5b328bde6f041384d71dcbb28cc623ec0d0241ed697bf45128c366bd298676ad836138ce07eb143bc7d98c79fe2a81dda018706cd5c66a76149ea0d35e84013ca74b4b109f9d0c2b2aabf38378fa3f095ecff54872415718fac030178a1af819b0556e108be5315533c8db4d5050739e2996dd9cca4250c4d1f1557112233d95125101549565d6c4e010de692df68ae2764b72c18d325512b8d3118786c01ea56b77e643946e6016d9631092eed3c93575bf02fbeaf444bdf56f376988feeea18d55fe169af82"})

1m12.139170433s ago: executing program 1 (id=2914):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
writev(r1, &(0x7f0000001540)=[{&(0x7f0000000300)="5d1b72799ce84b64a8d251a116e20eda4fe07c9d97d223fcabfec942e9097e1287759fc5480a62b8a8964c711bdb3263cfee", 0x32}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000000380)='n', 0x1}, {&(0x7f0000001400)="32976972962d506ff3ae340876a5a370c6d3cfa620bf71be8a505611a3529530c18cd25febff0fe8add074c152beace5d6ecd1427906b1f22cb1a54c6c6670f9ca94b679db2e84154410eb87d2fc84669c00c3244daa4a21d31824be", 0x5c}, {&(0x7f00000021c0)="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", 0xffffff67}, {&(0x7f0000001500)="f75a82a0306ed5019342"}], 0x5)
setsockopt(r1, 0x1, 0x20, &(0x7f0000000340)="b5057018", 0x4)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000600)="dd3dcb8ed3596fb60a52f56e1a2d06c921decd52342f658f94085fea462fbe4380e50f0d78e28babedd9607a2d2769cd2b76b86d7a93bd5d36a28631a10f3ca9e13d62b95ef3d9eafed8e5b5bd73f5f4"})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001480)={0x60, r6, 0x800, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffd1d}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008010}, 0x4044)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x5c, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "dccd5995f6a0c7e8074ce379ef54cb9419ede0b067a95b2d189a043e"}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040800}, 0x0)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080))
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs})
socket$netlink(0x10, 0x3, 0x0)
sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000015c0)={0x16c, r6, 0x400, 0x20, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010101}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x5, @remote, 0x7}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @local}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8, @local, 0xfffffffe}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x4, @mcast2, 0x7}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe37d}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4000000}, 0x14)
syz_genetlink_get_family_id$smc(&(0x7f0000000000), r3)
prctl$PR_SET_VMA(0x23, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0)
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0)

1m12.083949657s ago: executing program 33 (id=2914):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
writev(r1, &(0x7f0000001540)=[{&(0x7f0000000300)="5d1b72799ce84b64a8d251a116e20eda4fe07c9d97d223fcabfec942e9097e1287759fc5480a62b8a8964c711bdb3263cfee", 0x32}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000000380)='n', 0x1}, {&(0x7f0000001400)="32976972962d506ff3ae340876a5a370c6d3cfa620bf71be8a505611a3529530c18cd25febff0fe8add074c152beace5d6ecd1427906b1f22cb1a54c6c6670f9ca94b679db2e84154410eb87d2fc84669c00c3244daa4a21d31824be", 0x5c}, {&(0x7f00000021c0)="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", 0xffffff67}, {&(0x7f0000001500)="f75a82a0306ed5019342"}], 0x5)
setsockopt(r1, 0x1, 0x20, &(0x7f0000000340)="b5057018", 0x4)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000600)="dd3dcb8ed3596fb60a52f56e1a2d06c921decd52342f658f94085fea462fbe4380e50f0d78e28babedd9607a2d2769cd2b76b86d7a93bd5d36a28631a10f3ca9e13d62b95ef3d9eafed8e5b5bd73f5f4"})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001480)={0x60, r6, 0x800, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffd1d}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008010}, 0x4044)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x5c, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "dccd5995f6a0c7e8074ce379ef54cb9419ede0b067a95b2d189a043e"}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040800}, 0x0)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080))
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs})
socket$netlink(0x10, 0x3, 0x0)
sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000015c0)={0x16c, r6, 0x400, 0x20, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010101}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x5, @remote, 0x7}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @local}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8, @local, 0xfffffffe}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x4, @mcast2, 0x7}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe37d}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4000000}, 0x14)
syz_genetlink_get_family_id$smc(&(0x7f0000000000), r3)
prctl$PR_SET_VMA(0x23, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0)
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0)

3.593039867s ago: executing program 4 (id=3578):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newsa={0x158, 0x10, 0x633, 0x0, 0x0, {{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x7ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x39}, {@in=@rand_addr=0x64010102, 0x4d2, 0x32}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0xfffffffffffffffc, 0x0, 0xb, 0x5, 0xfffffffffffffffc, 0x0, 0x1, 0xc}, {0x0, 0x7fff, 0x0, 0xadb8}, {0x5, 0x0, 0x1}, 0x0, 0x0, 0x2, 0x4, 0x0, 0xb0}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2c, 0x70bd27, 0x70bd29, 0x70bd25, 0x5, [0x80]}}]}, 0x158}, 0x1, 0x0, 0x0, 0x90}, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_TSC_KHZ_vm(r7, 0xaea2, 0xb)
ioctl$KVM_CAP_EXIT_HYPERCALL(r7, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0xc})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000bc0)={"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"})
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000001c0)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000ba000000000f300fc79d53bf0000c4e16dd3010f2202", 0x4f}], 0x1, 0xc, 0x0, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r9, &(0x7f0000000080)={0xa, 0x0, 0x7}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f0000000280), 0x14)
write$binfmt_script(r9, &(0x7f00000000c0)={'#! ', './file0'}, 0xb)
setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "2a4001011f891d5b", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "fd6ed24e", "d4e9e1c90d89691c"}, 0x38)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r10, 0x541b, &(0x7f0000000000)={<r11=>0xffffffffffffffff})
close_range(r11, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000178000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x32, 0x3, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
socket$xdp(0x2c, 0x3, 0x0)

3.285542702s ago: executing program 4 (id=3581):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x11, 0x6, 0xe0ff, 0x5, 0x0})

3.168633611s ago: executing program 4 (id=3583):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x41)
mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x101091, 0x0)
chdir(0x0)
rmdir(0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda')
mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c26001, 0x13, r0, 0x22e7c000)

3.091443378s ago: executing program 4 (id=3584):
io_submit(0x0, 0x1, &(0x7f0000001b00)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x7, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x5}])
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000004a00010200000000000000000a"], 0x164}}, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
chroot(&(0x7f0000000000)='./file0\x00')

3.034223612s ago: executing program 4 (id=3586):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190040000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, &(0x7f0000000140))
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$incfs(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB='r0000000000001,\x00\x00\x00\x00\x00\x00\x00\x00\x00'])
r2 = creat(&(0x7f0000000240)='./file0\x00', 0x1f)
quotactl_fd$Q_SYNC(r2, 0xffffffff80000102, 0x0, 0x0)
read$FUSE(r2, &(0x7f0000002080)={0x2020, 0x0, 0x0, <r3=>0x0}, 0x2020)
getresuid(&(0x7f00000013c0), &(0x7f0000001400)=<r4=>0x0, &(0x7f0000001440))
r5 = socket$inet6(0xa, 0x403, 0x4)
r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
timerfd_gettime(r6, 0x0)
r7 = memfd_secret(0x0)
r8 = accept4$packet(r2, &(0x7f0000001980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000019c0)=0x14, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
mkdir(&(0x7f0000000180)='./file1\x00', 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r9, 0x40086602, &(0x7f0000000140)={0x10})
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0)
ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f00000000c0)={0x0, "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"})
sendmsg$netlink(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001ac0)=ANY=[@ANYBLOB="f0000000200001002bbd700004000000467fe560fc8d1a8fb657443a0bf98d1544e6282f6e9ed2573cd4258f8b17aec3277d837ba03485610d48074f889b68f2f386f05bcf6dc4cd6b0a89743f4509b225512d0600700ee45206b359f62427a302d995b01bb40c75ef2324c973df731dbb8d15b9d8ef031041445a86ea3dc71f7114159da1159b07410877521e7589a30b849c40ecf3b4ce68a6a840a164b25565b986c69e9192f3466137dd5d32c0ac7d097cbadb5f38835d89519064d10a5e64aff66a910c00b58008005300", @ANYRES32=r3, @ANYBLOB="0500246c2152684279d27004012200080071002981cf4c51475f524f54f3cb05bc7f6157ad05eb69441e264fdf61a4ae3504f10951df9c77c4877fde9fff6cdc0af5044dd72d31519e73d3dbc83cb3cb7d09ed0e0e1fe474da127114317cb97c76081fe99ebcefe32e814f1cda0349a159e5353a999c88860f69e7c246719d7ac310e586a7512e82a6dae42c0fe59d716700eba27fbf5a7ea14451edf5cb90fcbb37873a68dd143c34ebc109c54f9e29f629d33915996e2380c6289ce60d2cd12b8317fd8025e888dbf1a05cf1c60cae22fa", @ANYRES32=r2, @ANYBLOB="0800b400", @ANYRES32=r0, @ANYBLOB], 0xf0}, {&(0x7f0000000380)=ANY=[@ANYBLOB="34000000370020002cbd7000fbdbdf2508001900ffffffff080035800400080000003700fc000000000000000000000000fec335"], 0x34}, {&(0x7f0000001480)={0x37c, 0x2c, 0x100, 0x70bd2c, 0x25dfdbfb, "", [@generic='f', @typed={0x8, 0x136, 0x0, 0x0, @uid=0xee01}, @typed={0x4, 0x35}, @nested={0x1ae, 0x8d, 0x0, 0x1, [@nested={0x4, 0x113}, @typed={0x8, 0x1, 0x0, 0x0, @u32=0x6}, @nested={0x4, 0xb}, @nested={0x4, 0x14d}, @generic="9244f06af86f6a96e1c094d8454d308caf3a8d35c18c2154c3b1eaec4f06ac41d634bf0ec5ff9b73d6021f1c46f1ce1ebe2a853b144987cf35591f839c75e2e7380aa6564d29a971a6addc911bf4181dec578f90a6553e775fdd2b5643ee0ff5b87f8edd5358f932cc099da65a4c2265e3f7a15649ec8f9a480b4e22a9057c30879524dc0236bf78283dc181bb141cd29639a06e7831414ed78ec5a18609e96203767c55a2fe7217945433ba1748b2223f2d1ad5f485337a68cfa0d9cefb6d5b9de7221c5b52b1b6889b057d9eafec7dd432b174d53d4d37a6212faa81f30065c6dc3c4144579e4380923801172537df", @typed={0x8, 0x7e, 0x0, 0x0, @uid=r4}, @generic="13b7c8ab490808f3c238b0cc5802e66f396558d54a5049576c383051ebab64e91aecb8c2baa3654c227b2e0a1005e66c49922e6b99627fd07980049b82b8f083cac7980563124c22c019aa3ccc7eada21fbb8b7dc5c8cababeb636acafbbf748d313a47ab5345abd7ce68b40d962d81948c96a4f3ffd619e1a8713d10d1509783b617a2bd4a043a2199de68719e3dc0dad6c467a8972728a14b8f8d3c73a"]}, @typed={0x8, 0x426, 0x0, 0x0, @fd=r5}, @typed={0x8, 0x5d, 0x0, 0x0, @u32=0x5}, @nested={0x9d, 0x8a, 0x0, 0x1, [@typed={0x8, 0x110, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xa}}, @generic="ea949f2f3a44152e14e555a68feaba2e49a152f6567dfc13c99810ab4d66f3f17731279bb4fa1ff159ca2074ed24f78a6caf57380f900ad83bcdaf0a893abc1ad56916ae97ee847c8c2fc897c40b018e726ae1bdd73af690d0f15be5a978c8919e786ae69c3db4040915353ce94484df5064c312f85669f8446b6e3bdc4c0c85fd90c9bce19c93b0a69905d9fd", @nested={0x4, 0x8d}]}, @typed={0x14, 0xa5, 0x0, 0x0, @ipv6=@mcast2}, @generic="4db35a48d8967e8b8f776b47897a1d7947420db37b39c45f9de5a2fd9c3759a3765f95e9837b495f6ae3814de97e8536d560aafe228e4feeb3f4f530e4a6d84b0b8a1d236f8a44a98b39d7fbe791bc9f7e0b13a798ce28ac5119e36c1f45c50d4fbb33c1a4abe7e15d844349eadadbda0a538ace22704d64b21ae436e6f4625c04ee8ef7f4d0d68832cf51a3", @generic="c225ca19ba17314a387556e6157d1107a9ccba4f53d6813ce576caacf8a52bb3f7a00436ffd1285cadc12915b2625e8183bc2f913ce88072da5e7664d162181bab22a9dcb59bb40d6a658e994a2f17d324f738c447b8342f080317c1bbb7"]}, 0x37c}, {&(0x7f0000001840)={0xf8, 0x17, 0x4, 0x70bd29, 0x25dfdbff, "", [@generic="ac093fd80da160384946ad18f74472664d5ae68769af9381db8371e2d7fe0f73eb40c9e52880dde879f1f7525afe87fd7137dbd6d2c2d1f20750db7c49c782e5f877d198ace2fccebd4432aac322619fce0630097ce97656cfc1d8c76dc88858999c9855bee1b0e76b081777e29114f379b9536f1894f3bac4bf2287d77286c53c65dc5d27828a79258c486a2d2bcf924607c261dada2060a5652089dc184a2d885aa4e3f205bc80faa5df924e4cbb9eb1ce4ed751c87fdaa9d4f2adc20eabe877aea6c26383356df950cf2ff1d60640a3ad158c0cd3c49d743eca67fa3aa00de1110d2d5d66"]}, 0xf8}], 0x4, &(0x7f0000001a00)=[@rights={{0x34, 0x1, 0x1, [r0, r2, r6, r2, r0, r7, r0, r8, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r2, r2, r2, r2, r2, r0]}}], 0x60}, 0x40010)
syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080))
r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0)
open_tree(r10, &(0x7f0000000040)='./file0/../file0\x00', 0x1001)

2.880729645s ago: executing program 4 (id=3587):
ftruncate(0xffffffffffffffff, 0x398a0bdb)
r0 = socket$nl_audit(0x10, 0x3, 0x9)
mkdir(0x0, 0x0)
mkdir(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
fsync(r1)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x48080)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20010000)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x3}, 0x4)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x40, 0x0)
lseek(r4, 0x55, 0x1)
syz_usb_connect(0x2, 0xd7a, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000001280)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x310, 0x6, 0x8, 0x8, 0xff, 0x20}, 0x30, &(0x7f0000000240)={0x5, 0xf, 0x30, 0x4, [@ptm_cap={0x3}, @generic={0x9, 0x10, 0xb, "085f036dec7e"}, @wireless={0xb, 0x10, 0x1, 0x4, 0xce, 0x7, 0x6, 0x0, 0x8}, @ssp_cap={0x14, 0x10, 0xa, 0x9, 0x2, 0x3, 0xf00f, 0x80, [0xff00ff, 0x30]}]}, 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2009}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x3052}}, {0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0x4001}}, {0xc3, &(0x7f0000001180)=@string={0xc3, 0x3, "85f5a4a8186bb900bb4a6fa35d95c3384ea5e59dea09248a9a64e17ed70fb69a8917f8d5db56905fc3ec7c5edc3b3fa182e17f401ffd920d00b949bb031763a71a0bf299651d3353a52db37d1c640fe8928b5bffbdfb0aaf9c721fdad7d4085fe3ce11e39e8bc28c675a332a222e2443c663365fee67120a190ee3c361b7aee0b46039316b8aadcd5eef96100f39f088e5c8feeb39d2a4a27d03ab8242301fe0c5e6b3f9447f9f9b7eef9bb301a96756e15c3e9bb43d6996c4540dcba9c56d3bee"}}]})
keyctl$read(0xb, r3, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0x40087707, 0x2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x8010, r1, 0x98764000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x7, &(0x7f0000000180)=[{0x7, 0x2, 0xc8, 0x6}, {0x57b, 0x97, 0xfb, 0x6}, {0xff7f, 0x80, 0x40, 0x7}, {0x5, 0x8, 0x7, 0x10001}, {0x7, 0x3, 0x2, 0x1aa}, {0x5, 0x5, 0x2, 0x101}, {0x8, 0x81, 0xfb, 0x4}]})
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0)
socket$inet(0x2, 0xa, 0x9)

642.894288ms ago: executing program 0 (id=3625):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x11, 0x6, 0xffe0, 0x5, 0x0})

549.366205ms ago: executing program 3 (id=3627):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12)
recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, 0x0}, 0x94}, {{0x0, 0x0, &(0x7f0000000600)}, 0x8}], 0x2, 0x40012003, 0x0)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
close_range(r0, 0xffffffffffffffff, 0x0)

548.608555ms ago: executing program 5 (id=3628):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xb, 0x45680)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)={0x1c, 0x6a, 0x15, 0x8000000, 0xffffffff, "", [@generic="894150da2e", @generic="15c76bc0"]}, 0x1c}], 0x1}, 0x4000080)
mkdir(&(0x7f0000000980)='./file0\x00', 0x0)
mount$cgroup(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000480)={[{@name}, {@name={'name', 0x3d, 'cpuset_v2_mode'}}, {@none}]})
r2 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000180)=@ethtool_coalesce={0xf, 0x5, 0x1, 0xfffffffe, 0xfffffe00, 0x1b026af4, 0x4, 0x8001, 0x5, 0x8, 0x0, 0x0, 0x0, 0x5, 0x9, 0x6, 0x4, 0x9, 0x3, 0xf, 0x1, 0x5, 0x5}})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="ffff16c8", @ANYRES16=r4, @ANYBLOB="010027bd7000fbdbdf25050000001800018014000200766c616e30000000000000000000000005000700a1000000"], 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x18, 0x6, 0x0, 0x5, 0x0})

492.90544ms ago: executing program 0 (id=3629):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, 0x0)
ioctl$TCFLSH(r1, 0x400455c8, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r2, 0x800448d5, &(0x7f0000000100)="674014bfb560122670a0be25cc3e65f15664ebe03a2a8a1025ec0ba22c9d128f8415ac100f51df152658148ac904620a92e2799f0f5d18c68d56df62208c320f66160ed9f3d8e2d368bde5a061a884f92d3d830fd0dc92fa2887f35f9e8ec35efeebf379b5616adf39a96752f73b317ca54d19587b6312d1bdfaa2e7faf7843bf3b886e449127d13e4d5df25ce681090c2be898ff9f227868304526fe3603a0ca201ed01d0a9bb6d8caeab6785c63f5451a25c1efce4c2954fdca5f48f1a235228b49ae92930e1da27fb47e8fa38f5e58dab85a8ba285b9a0b53983e5abf16")

452.361743ms ago: executing program 3 (id=3630):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000000)=0xfffffffe, 0x4)
r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="84010000100013070000000000020000ac1e0101000000000000000000000000fe8000000000000000000000000000bb0043000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8=r0], 0x184}}, 0x0)
ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x17, 0x6, 0x0, 0x5, 0x0})

431.409465ms ago: executing program 0 (id=3631):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000005, 0x4010, r0, 0x2000)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil)

352.839871ms ago: executing program 5 (id=3632):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000380)=0x5)
mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x4000000000000)
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
socket$inet6(0xa, 0x1, 0x0)
futex_waitv(&(0x7f0000002040)=[{0x9b9, 0x0, 0x82}], 0x1, 0x0, &(0x7f0000002c00)={0x0, 0x989680}, 0x1)
memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1\xbf\x00nh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\xe5\x00\x00\x00', 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_GET_TSC_KHZ_vm(0xffffffffffffffff, 0xaea3)

352.528741ms ago: executing program 0 (id=3633):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)
io_setup(0x80000001, &(0x7f0000000100)=<r1=>0x0)
r2 = eventfd2(0x3, 0x801)
r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
io_cancel(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x8, r0, &(0x7f00000002c0)="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", 0x10b, 0x1000, 0x0, 0x1, r2}, &(0x7f00000000c0))
sendmmsg$inet(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000dc0)="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", 0x243}, {0x0}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0)

340.863592ms ago: executing program 3 (id=3634):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c)
sendmmsg$inet(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000dc0)="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", 0x243}, {0x0}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0)

294.321306ms ago: executing program 3 (id=3635):
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
execve(0x0, 0x0, 0x0) (async)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) (async)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) (async)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) (async)
syz_io_uring_setup(0x40832, &(0x7f0000000300)={0x0, 0x0, 0x200, 0x0, 0xfffffffc}, 0x0, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0)
r2 = dup(r1)
ioctl$PTP_EXTTS_REQUEST2(r2, 0x40603d10, &(0x7f00000002c0)={0x1, 0x9}) (async)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)

240.93958ms ago: executing program 5 (id=3636):
io_submit(0x0, 0x1, &(0x7f0000001b00)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x7, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x5}])
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
chroot(&(0x7f0000000000)='./file0\x00')

188.378065ms ago: executing program 0 (id=3637):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x200000001494)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$incfs(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"])
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

187.955975ms ago: executing program 3 (id=3638):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c)
sendmmsg$inet(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000dc0)="2fae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dea658eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff2408", 0x243}, {0x0}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0) (fail_nth: 2)

174.817326ms ago: executing program 5 (id=3639):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, 0x0)
ioctl$TCFLSH(r1, 0x400455c8, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r2, 0x800448d5, &(0x7f0000000100)="674014bfb560122670a0be25cc3e65f15664ebe03a2a8a1025ec0ba22c9d128f8415ac100f51df152658148ac904620a92e2799f0f5d18c68d56df62208c320f66160ed9f3d8e2d368bde5a061a884f92d3d830fd0dc92fa2887f35f9e8ec35efeebf379b5616adf39a96752f73b317ca54d19587b6312d1bdfaa2e7faf7843bf3b886e449127d13e4d5df25ce681090c2be898ff9f227868304526fe3603a0ca201ed01d0a9bb6d8caeab6785c63f5451a25c1efce4c2954fdca5f48f1a235228b49ae92930e1da27fb47e8fa38f5e58dab85a8ba285b9a0b53983e5abf16")

60.869055ms ago: executing program 0 (id=3640):
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0)
write$selinux_attr(r0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000001c40)=0x1)
ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000000)=0x9)
close_range(r1, 0xffffffffffffffff, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x40802, 0x0)

60.663855ms ago: executing program 3 (id=3641):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$incfs(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2, &(0x7f0000000180)={[{@rlog_pages={'rlog_pages', 0x3d, 0xfffffffffffffa89}}]})
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0x80080)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x1, &(0x7f00000001c0)=""/219, &(0x7f00000002c0)=""/106, &(0x7f0000000340)=""/179, 0x8000000})

60.574125ms ago: executing program 5 (id=3642):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x14, 0x6, 0xffe0, 0x5, 0x0})

0s ago: executing program 5 (id=3643):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000031c0)={0x24, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x2, 0x0, 0x0, @uid}, @nested={0x9, 0x2, 0x0, 0x1, [@generic="976b640868"]}]}, 0x24}], 0x1}, 0xcc000)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r2, 0x89b0, &(0x7f0000000080)={'veth0_virt_wifi\x00', &(0x7f00000000c0)=@ethtool_channels={0x1, 0x300, 0x4000000, 0x0, 0x0, 0x5}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x26052, r0, 0xfffff000)

kernel console output (not intermixed with test programs):

266.687277][   T10] usb 4-1: config 5 interface 166 altsetting 1 endpoint 0x5 has invalid maxpacket 512, setting to 64
[  266.699036][   T10] usb 4-1: config 5 interface 166 altsetting 1 endpoint 0x83 has an invalid bInterval 27, changing to 4
[  266.710211][   T10] usb 4-1: config 5 interface 166 altsetting 1 has a duplicate endpoint with address 0xF, skipping
[  266.720942][   T10] usb 4-1: config 5 interface 166 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  266.731845][   T10] usb 4-1: config 5 interface 166 altsetting 1 endpoint 0xC has invalid maxpacket 512, setting to 64
[  266.742807][   T10] usb 4-1: config 5 interface 2 altsetting 0 endpoint 0x8A has invalid maxpacket 512, setting to 64
[  266.753658][   T10] usb 4-1: config 5 interface 2 altsetting 0 has a duplicate endpoint with address 0x5, skipping
[  266.764249][   T10] usb 4-1: config 5 interface 2 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64
[  266.775016][   T10] usb 4-1: config 5 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  266.785784][   T10] usb 4-1: config 5 interface 2 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[  266.796977][   T10] usb 4-1: config 5 interface 2 altsetting 0 has a duplicate endpoint with address 0xE, skipping
[  266.807658][   T10] usb 4-1: config 5 interface 2 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64
[  266.818500][   T10] usb 4-1: config 5 interface 2 altsetting 0 has a duplicate endpoint with address 0xC, skipping
[  266.829068][   T10] usb 4-1: config 5 interface 2 altsetting 0 has a duplicate endpoint with address 0xA, skipping
[  266.839639][   T10] usb 4-1: config 5 interface 2 altsetting 0 has a duplicate endpoint with address 0xD, skipping
[  266.850195][   T10] usb 4-1: config 5 interface 2 altsetting 0 has a duplicate endpoint with address 0x9, skipping
[  266.860737][   T10] usb 4-1: config 5 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  266.871530][   T10] usb 4-1: config 5 interface 75 altsetting 151 has a duplicate endpoint with address 0x5, skipping
[  266.882385][   T10] usb 4-1: config 5 interface 75 altsetting 151 has a duplicate endpoint with address 0x8, skipping
[  266.893239][   T10] usb 4-1: config 5 interface 75 altsetting 151 has a duplicate endpoint with address 0xE, skipping
[  266.904056][   T10] usb 4-1: config 5 interface 75 altsetting 151 endpoint 0xB has invalid maxpacket 1024, setting to 64
[  266.915138][   T10] usb 4-1: config 5 interface 75 altsetting 151 has a duplicate endpoint with address 0xF, skipping
[  266.925990][   T10] usb 4-1: config 5 interface 75 altsetting 151 has a duplicate endpoint with address 0x4, skipping
[  266.936822][   T10] usb 4-1: config 5 interface 230 altsetting 0 has a duplicate endpoint with address 0xA, skipping
[  266.947591][   T10] usb 4-1: config 5 interface 230 altsetting 0 has a duplicate endpoint with address 0x8, skipping
[  266.958325][   T10] usb 4-1: config 5 interface 230 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  266.969225][   T10] usb 4-1: config 5 interface 230 altsetting 0 has a duplicate endpoint with address 0x8, skipping
[  266.979963][   T10] usb 4-1: config 5 interface 230 altsetting 0 has a duplicate endpoint with address 0xE, skipping
[  266.990696][   T10] usb 4-1: config 5 interface 230 altsetting 0 has an endpoint descriptor with address 0x1E, changing to 0xE
[  267.002305][   T10] usb 4-1: config 5 interface 230 altsetting 0 has a duplicate endpoint with address 0xE, skipping
[  267.013220][   T10] usb 4-1: config 5 interface 230 altsetting 0 has a duplicate endpoint with address 0x4, skipping
[  267.024054][   T10] usb 4-1: config 5 interface 230 altsetting 0 has a duplicate endpoint with address 0x3, skipping
[  267.034812][   T10] usb 4-1: config 5 interface 230 altsetting 0 has 8 endpoint descriptors, different from the interface descriptor's value: 11
[  267.048074][   T10] usb 4-1: config 5 interface 100 altsetting 185 has an endpoint descriptor with address 0xBF, changing to 0x8F
[  267.059945][   T10] usb 4-1: config 5 interface 100 altsetting 185 has a duplicate endpoint with address 0x8F, skipping
[  267.070938][   T10] usb 4-1: config 5 interface 100 altsetting 185 has a duplicate endpoint with address 0xF, skipping
[  267.081877][   T10] usb 4-1: config 5 interface 100 altsetting 185 has a duplicate endpoint with address 0x8B, skipping
[  267.092877][   T10] usb 4-1: config 5 interface 100 altsetting 185 has a duplicate endpoint with address 0x7, skipping
[  267.103862][   T10] usb 4-1: config 5 interface 100 altsetting 185 has a duplicate endpoint with address 0x3, skipping
[  267.114882][   T10] usb 4-1: config 5 interface 100 altsetting 185 has 5 endpoint descriptors, different from the interface descriptor's value: 7
[  267.128665][   T10] usb 4-1: config 5 interface 166 has no altsetting 0
[  267.135487][   T10] usb 4-1: config 5 interface 75 has no altsetting 0
[  267.143624][   T10] usb 4-1: config 5 interface 100 has no altsetting 0
[  267.155721][   T10] usb 4-1: Dual-Role OTG device on HNP port
[  267.163101][   T10] usb 4-1: New USB device found, idVendor=12d1, idProduct=3f61, bcdDevice=e3.ba
[  267.173082][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.181951][   T10] usb 4-1: Product: げ
[  267.187637][   T10] usb 4-1: Manufacturer:  
[  267.192287][   T10] usb 4-1: SerialNumber: 䀁
[  267.200412][   T10] usb 4-1: Interface #166 referenced by multiple IADs
[  267.209238][ T9366] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  267.222360][ T9380] netlink: 25 bytes leftover after parsing attributes in process `syz.4.3042'.
[  267.449679][   T10] usb 4-1: USB disconnect, device number 35
[  268.027246][ T9385] FAULT_INJECTION: forcing a failure.
[  268.027246][ T9385] name failslab, interval 1, probability 0, space 0, times 0
[  268.040003][ T9385] CPU: 0 UID: 0 PID: 9385 Comm: syz.3.3044 Not tainted 6.12.38-syzkaller-gc98acaeb71d4 #0 12f313afd6af6cbe2ef80fd9c185925320fe8e2c
[  268.040047][ T9385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  268.040063][ T9385] Call Trace:
[  268.040072][ T9385]  <TASK>
[  268.040082][ T9385]  __dump_stack+0x21/0x30
[  268.040116][ T9385]  dump_stack_lvl+0x10c/0x190
[  268.040144][ T9385]  ? __cfi_dump_stack_lvl+0x10/0x10
[  268.040174][ T9385]  ? stack_depot_save_flags+0x38/0x800
[  268.040219][ T9385]  dump_stack+0x19/0x20
[  268.040248][ T9385]  should_fail_ex+0x3d9/0x530
[  268.040280][ T9385]  should_failslab+0xac/0x100
[  268.040317][ T9385]  __kmalloc_noprof+0x69/0x450
[  268.040349][ T9385]  ? usb_hcd_submit_urb+0x7c4/0x1a20
[  268.040375][ T9385]  ? usb_hcd_link_urb_to_ep+0x284/0x360
[  268.040401][ T9385]  usb_hcd_submit_urb+0x7c4/0x1a20
[  268.040428][ T9385]  usb_submit_urb+0x111b/0x1800
[  268.040460][ T9385]  usbfs_start_wait_urb+0x14d/0x400
[  268.040491][ T9385]  ? snoop_urb+0x220/0x220
[  268.040518][ T9385]  ? __cfi_mutex_unlock+0x10/0x10
[  268.040556][ T9385]  do_proc_control+0x809/0xfd0
[  268.040588][ T9385]  proc_control+0xc9/0x120
[  268.040613][ T9385]  ? destroy_async+0x210/0x210
[  268.040637][ T9385]  ? mutex_lock+0x92/0x1c0
[  268.040671][ T9385]  ? __cfi_vfs_write+0x10/0x10
[  268.040706][ T9385]  usbdev_ioctl+0xc5b/0x20a0
[  268.040733][ T9385]  ? __cfi_usbdev_ioctl+0x10/0x10
[  268.040757][ T9385]  ? __fget_files+0x2c5/0x340
[  268.040794][ T9385]  ? bpf_lsm_file_ioctl+0xd/0x20
[  268.040825][ T9385]  ? security_file_ioctl+0x34/0xd0
[  268.040862][ T9385]  ? __cfi_usbdev_ioctl+0x10/0x10
[  268.040886][ T9385]  __se_sys_ioctl+0x132/0x1b0
[  268.040910][ T9385]  __x64_sys_ioctl+0x7f/0xa0
[  268.040932][ T9385]  x64_sys_call+0x1878/0x2ee0
[  268.040963][ T9385]  do_syscall_64+0x58/0xf0
[  268.040993][ T9385]  ? clear_bhb_loop+0x50/0xa0
[  268.041016][ T9385]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  268.041052][ T9385] RIP: 0033:0x7f46ffb8eb69
[  268.041073][ T9385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  268.041094][ T9385] RSP: 002b:00007f4700a9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  268.041120][ T9385] RAX: ffffffffffffffda RBX: 00007f46ffdb5fa0 RCX: 00007f46ffb8eb69
[  268.041138][ T9385] RDX: 0000200000000040 RSI: 00000000c0185500 RDI: 0000000000000003
[  268.041155][ T9385] RBP: 00007f4700a9d090 R08: 0000000000000000 R09: 0000000000000000
[  268.041172][ T9385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  268.041189][ T9385] R13: 0000000000000000 R14: 00007f46ffdb5fa0 R15: 00007ffc2cacf108
[  268.041219][ T9385]  </TASK>
[  268.297679][ T3691] Bluetooth: hci0: command 0x1003 tx timeout
[  268.308424][ T5406] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  268.717633][  T587] usb 4-1: new full-speed USB device number 36 using dummy_hcd
[  268.870034][  T587] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  268.881050][  T587] usb 4-1: config 1 interface 0 has no altsetting 0
[  268.891561][  T587] usb 4-1: New USB device found, idVendor=0b05, idProduct=184a, bcdDevice= 0.40
[  268.900714][  T587] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.908872][  T587] usb 4-1: Product: syz
[  268.913073][  T587] usb 4-1: Manufacturer: 抈恊㤙鹧醈없䘗䬽蛇渄位鿡㩬狙䟅犡빱齝챿躤蔅โ윪₯Ⲩ㨟鴰喷
[  268.925589][  T587] usb 4-1: SerialNumber: syz
[  268.935471][ T9397] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  268.967871][   T10] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  269.006263][ T9406] netlink: 25 bytes leftover after parsing attributes in process `syz.4.3053'.
[  269.121831][   T10] usb 6-1: not running at top speed; connect to a high speed hub
[  269.132149][   T10] usb 6-1: config 5 has an invalid interface number: 166 but max is 3
[  269.140773][   T10] usb 6-1: config 5 contains an unexpected descriptor of type 0x1, skipping
[  269.149643][   T10] usb 6-1: config 5 has an invalid interface number: 75 but max is 3
[  269.157965][   T10] usb 6-1: config 5 has an invalid interface number: 230 but max is 3
[  269.166175][   T10] usb 6-1: config 5 has an invalid interface number: 100 but max is 3
[  269.174494][   T10] usb 6-1: config 5 contains an unexpected descriptor of type 0x2, skipping
[  269.183317][   T10] usb 6-1: config 5 has 5 interfaces, different from the descriptor's value: 4
[  269.192418][   T10] usb 6-1: config 5 has no interface number 0
[  269.198602][   T10] usb 6-1: config 5 has no interface number 1
[  269.204715][   T10] usb 6-1: config 5 has no interface number 3
[  269.210896][   T10] usb 6-1: config 5 has no interface number 4
[  269.217037][   T10] usb 6-1: config 5 interface 166 altsetting 1 endpoint 0xF has invalid maxpacket 512, setting to 64
[  269.227988][   T10] usb 6-1: config 5 interface 166 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  269.239097][   T10] usb 6-1: config 5 interface 166 altsetting 1 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[  269.250183][   T10] usb 6-1: config 5 interface 166 altsetting 1 endpoint 0x5 has invalid maxpacket 512, setting to 64
[  269.261437][   T10] usb 6-1: config 5 interface 166 altsetting 1 endpoint 0x83 has an invalid bInterval 27, changing to 4
[  269.272649][   T10] usb 6-1: config 5 interface 166 altsetting 1 has a duplicate endpoint with address 0xF, skipping
[  269.283828][   T10] usb 6-1: config 5 interface 166 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  269.294864][   T10] usb 6-1: config 5 interface 166 altsetting 1 endpoint 0xC has invalid maxpacket 512, setting to 64
[  269.305803][   T10] usb 6-1: config 5 interface 2 altsetting 0 endpoint 0x8A has invalid maxpacket 512, setting to 64
[  269.316803][   T10] usb 6-1: config 5 interface 2 altsetting 0 has a duplicate endpoint with address 0x5, skipping
[  269.327388][   T10] usb 6-1: config 5 interface 2 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64
[  269.338155][   T10] usb 6-1: config 5 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  269.349138][   T10] usb 6-1: config 5 interface 2 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[  269.360006][   T10] usb 6-1: config 5 interface 2 altsetting 0 has a duplicate endpoint with address 0xE, skipping
[  269.360907][  T587] usbhid 4-1:1.0: can't add hid device: -71
[  269.370607][   T10] usb 6-1: config 5 interface 2 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64
[  269.394334][   T10] usb 6-1: config 5 interface 2 altsetting 0 has a duplicate endpoint with address 0xC, skipping
[  269.403373][  T587] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[  269.418336][   T10] usb 6-1: config 5 interface 2 altsetting 0 has a duplicate endpoint with address 0xA, skipping
[  269.440901][   T10] usb 6-1: config 5 interface 2 altsetting 0 has a duplicate endpoint with address 0xD, skipping
[  269.445438][  T587] usb 4-1: USB disconnect, device number 36
[  269.464946][   T10] usb 6-1: config 5 interface 2 altsetting 0 has a duplicate endpoint with address 0x9, skipping
[  269.484720][   T10] usb 6-1: config 5 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  269.507638][   T10] usb 6-1: config 5 interface 75 altsetting 151 has a duplicate endpoint with address 0x5, skipping
[  269.519492][   T10] usb 6-1: config 5 interface 75 altsetting 151 has a duplicate endpoint with address 0x8, skipping
[  269.531393][   T10] usb 6-1: config 5 interface 75 altsetting 151 has a duplicate endpoint with address 0xE, skipping
[  269.543207][   T10] usb 6-1: config 5 interface 75 altsetting 151 endpoint 0xB has invalid maxpacket 1024, setting to 64
[  269.555348][   T10] usb 6-1: config 5 interface 75 altsetting 151 has a duplicate endpoint with address 0xF, skipping
[  269.567328][   T13] Bluetooth: hci0: Frame reassembly failed (-84)
[  269.574668][   T10] usb 6-1: config 5 interface 75 altsetting 151 has a duplicate endpoint with address 0x4, skipping
[  269.588392][   T10] usb 6-1: config 5 interface 230 altsetting 0 has a duplicate endpoint with address 0xA, skipping
[  269.599385][   T10] usb 6-1: config 5 interface 230 altsetting 0 has a duplicate endpoint with address 0x8, skipping
[  269.610148][   T10] usb 6-1: config 5 interface 230 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  269.621089][   T10] usb 6-1: config 5 interface 230 altsetting 0 has a duplicate endpoint with address 0x8, skipping
[  269.631822][   T10] usb 6-1: config 5 interface 230 altsetting 0 has a duplicate endpoint with address 0xE, skipping
[  269.642549][   T10] usb 6-1: config 5 interface 230 altsetting 0 has an endpoint descriptor with address 0x1E, changing to 0xE
[  269.654159][   T10] usb 6-1: config 5 interface 230 altsetting 0 has a duplicate endpoint with address 0xE, skipping
[  269.664889][   T10] usb 6-1: config 5 interface 230 altsetting 0 has a duplicate endpoint with address 0x4, skipping
[  269.675635][   T10] usb 6-1: config 5 interface 230 altsetting 0 has a duplicate endpoint with address 0x3, skipping
[  269.686451][   T10] usb 6-1: config 5 interface 230 altsetting 0 has 8 endpoint descriptors, different from the interface descriptor's value: 11
[  269.699637][   T10] usb 6-1: config 5 interface 100 altsetting 185 has an endpoint descriptor with address 0xBF, changing to 0x8F
[  269.711498][   T10] usb 6-1: config 5 interface 100 altsetting 185 has a duplicate endpoint with address 0x8F, skipping
[  269.722485][   T10] usb 6-1: config 5 interface 100 altsetting 185 has a duplicate endpoint with address 0xF, skipping
[  269.733397][   T10] usb 6-1: config 5 interface 100 altsetting 185 has a duplicate endpoint with address 0x8B, skipping
[  269.744393][   T10] usb 6-1: config 5 interface 100 altsetting 185 has a duplicate endpoint with address 0x7, skipping
[  269.755300][   T10] usb 6-1: config 5 interface 100 altsetting 185 has a duplicate endpoint with address 0x3, skipping
[  269.766224][   T10] usb 6-1: config 5 interface 100 altsetting 185 has 5 endpoint descriptors, different from the interface descriptor's value: 7
[  269.779504][   T10] usb 6-1: config 5 interface 166 has no altsetting 0
[  269.786320][   T10] usb 6-1: config 5 interface 75 has no altsetting 0
[  269.793053][   T10] usb 6-1: config 5 interface 100 has no altsetting 0
[  269.802963][   T10] usb 6-1: Dual-Role OTG device on HNP port
[  269.809925][   T10] usb 6-1: New USB device found, idVendor=12d1, idProduct=3f61, bcdDevice=e3.ba
[  269.819150][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.827244][   T10] usb 6-1: Product: げ
[  269.831559][   T10] usb 6-1: Manufacturer:  
[  269.836234][   T10] usb 6-1: SerialNumber: 䀁
[  269.843221][   T10] usb 6-1: Interface #166 referenced by multiple IADs
[  269.868104][ T9404] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  270.044845][ T9421] FAULT_INJECTION: forcing a failure.
[  270.044845][ T9421] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  270.058408][ T9421] CPU: 0 UID: 0 PID: 9421 Comm: syz.4.3059 Not tainted 6.12.38-syzkaller-gc98acaeb71d4 #0 12f313afd6af6cbe2ef80fd9c185925320fe8e2c
[  270.058455][ T9421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  270.058471][ T9421] Call Trace:
[  270.058479][ T9421]  <TASK>
[  270.058489][ T9421]  __dump_stack+0x21/0x30
[  270.058522][ T9421]  dump_stack_lvl+0x10c/0x190
[  270.058550][ T9421]  ? __cfi_dump_stack_lvl+0x10/0x10
[  270.058581][ T9421]  dump_stack+0x19/0x20
[  270.058607][ T9421]  should_fail_ex+0x3d9/0x530
[  270.058639][ T9421]  should_fail+0xf/0x20
[  270.058668][ T9421]  should_fail_usercopy+0x1e/0x30
[  270.058700][ T9421]  _copy_to_user+0x24/0xa0
[  270.058722][ T9421]  simple_read_from_buffer+0xed/0x160
[  270.058749][ T9421]  proc_fail_nth_read+0x19e/0x210
[  270.058777][ T9421]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  270.058804][ T9421]  ? bpf_lsm_file_permission+0xd/0x20
[  270.058833][ T9421]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  270.058865][ T9421]  vfs_read+0x27b/0xb60
[  270.058896][ T9421]  ? __cfi_mutex_unlock+0x10/0x10
[  270.058930][ T9421]  ? __cfi_vfs_read+0x10/0x10
[  270.058958][ T9421]  ? __kasan_check_write+0x18/0x20
[  270.058988][ T9421]  ? mutex_lock+0x92/0x1c0
[  270.059021][ T9421]  ? __cfi_mutex_lock+0x10/0x10
[  270.059054][ T9421]  ? __fget_files+0x2c5/0x340
[  270.059091][ T9421]  ksys_read+0x141/0x250
[  270.059122][ T9421]  ? __cfi_ksys_read+0x10/0x10
[  270.059153][ T9421]  ? __kasan_check_write+0x18/0x20
[  270.059181][ T9421]  ? fpregs_restore_userregs+0x11d/0x260
[  270.059208][ T9421]  __x64_sys_read+0x7f/0x90
[  270.059239][ T9421]  x64_sys_call+0x2638/0x2ee0
[  270.059270][ T9421]  do_syscall_64+0x58/0xf0
[  270.059299][ T9421]  ? clear_bhb_loop+0x50/0xa0
[  270.059327][ T9421]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  270.059366][ T9421] RIP: 0033:0x7f73cbf8d57c
[  270.059387][ T9421] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  270.059409][ T9421] RSP: 002b:00007f73ccd9e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  270.059435][ T9421] RAX: ffffffffffffffda RBX: 00007f73cc1b5fa0 RCX: 00007f73cbf8d57c
[  270.059454][ T9421] RDX: 000000000000000f RSI: 00007f73ccd9e0a0 RDI: 0000000000000004
[  270.059470][ T9421] RBP: 00007f73ccd9e090 R08: 0000000000000000 R09: 0000000000000000
[  270.059485][ T9421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  270.059506][ T9421] R13: 0000000000000000 R14: 00007f73cc1b5fa0 R15: 00007ffcde47efd8
[  270.059525][ T9421]  </TASK>
[  270.331876][   T10] usb 6-1: USB disconnect, device number 5
[  270.680582][ T9434] input: syz0 as /devices/virtual/input/input27
[  270.879800][ T9436] netlink: 25 bytes leftover after parsing attributes in process `syz.5.3064'.
[  271.306452][   T36] kauditd_printk_skb: 417 callbacks suppressed
[  271.306474][   T36] audit: type=1400 audit(1753988875.236:7300): avc:  denied  { append } for  pid=9456 comm="syz.5.3071" name="001" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  271.386425][   T36] audit: type=1400 audit(1753988875.276:7301): avc:  denied  { append } for  pid=9456 comm="syz.5.3071" path="/dev/bus/usb/001/001" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  271.412509][   T36] audit: type=1400 audit(1753988875.286:7302): avc:  denied  { read write } for  pid=9030 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  271.437488][   T36] audit: type=1400 audit(1753988875.286:7303): avc:  denied  { read write open } for  pid=9030 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  271.468150][   T36] audit: type=1400 audit(1753988875.286:7304): avc:  denied  { ioctl } for  pid=9030 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  271.495268][   T36] audit: type=1400 audit(1753988875.316:7305): avc:  denied  { read write } for  pid=9458 comm="syz.5.3073" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  271.519775][   T36] audit: type=1400 audit(1753988875.316:7306): avc:  denied  { read write open } for  pid=9458 comm="syz.5.3073" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  271.545089][   T36] audit: type=1400 audit(1753988875.316:7307): avc:  denied  { ioctl } for  pid=9458 comm="syz.5.3073" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  271.572966][   T36] audit: type=1400 audit(1753988875.316:7308): avc:  denied  { ioctl } for  pid=9458 comm="syz.5.3073" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  271.577658][ T5406] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  271.599154][   T36] audit: type=1400 audit(1753988875.316:7309): avc:  denied  { ioctl } for  pid=9458 comm="syz.5.3073" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  271.604314][ T3691] Bluetooth: hci0: command 0x1003 tx timeout
[  271.630055][  T402] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[  271.786381][ T9470] netlink: 25 bytes leftover after parsing attributes in process `syz.3.3077'.
[  271.792100][  T402] usb 6-1: not running at top speed; connect to a high speed hub
[  271.814495][  T402] usb 6-1: config 5 has an invalid interface number: 166 but max is 3
[  271.830250][ T9472] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9472 comm=syz.0.3079
[  271.842797][  T402] usb 6-1: config 5 contains an unexpected descriptor of type 0x1, skipping
[  271.852490][  T402] usb 6-1: config 5 has an invalid interface number: 75 but max is 3
[  271.893472][  T402] usb 6-1: config 5 has an invalid interface number: 230 but max is 3
[  271.911953][  T402] usb 6-1: config 5 has an invalid interface number: 100 but max is 3
[  271.937655][  T402] usb 6-1: config 5 contains an unexpected descriptor of type 0x2, skipping
[  271.960065][ T9476] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:285
[  271.960632][  T402] usb 6-1: config 5 has 5 interfaces, different from the descriptor's value: 4
[  271.979150][  T402] usb 6-1: config 5 has no interface number 0
[  271.985276][  T402] usb 6-1: config 5 has no interface number 1
[  271.992384][  T402] usb 6-1: config 5 has no interface number 3
[  271.999177][  T402] usb 6-1: config 5 has no interface number 4
[  272.005449][  T402] usb 6-1: config 5 interface 166 altsetting 1 endpoint 0xF has invalid maxpacket 512, setting to 64
[  272.026829][  T402] usb 6-1: config 5 interface 166 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  272.039248][ T9477] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:285
[  272.044811][  T402] usb 6-1: config 5 interface 166 altsetting 1 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[  272.066226][  T402] usb 6-1: config 5 interface 166 altsetting 1 endpoint 0x5 has invalid maxpacket 512, setting to 64
[  272.077949][  T402] usb 6-1: config 5 interface 166 altsetting 1 endpoint 0x83 has an invalid bInterval 27, changing to 4
[  272.089937][  T402] usb 6-1: config 5 interface 166 altsetting 1 has a duplicate endpoint with address 0xF, skipping
[  272.101381][  T402] usb 6-1: config 5 interface 166 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  272.112370][  T402] usb 6-1: config 5 interface 166 altsetting 1 endpoint 0xC has invalid maxpacket 512, setting to 64
[  272.123322][  T402] usb 6-1: config 5 interface 2 altsetting 0 endpoint 0x8A has invalid maxpacket 512, setting to 64
[  272.134186][  T402] usb 6-1: config 5 interface 2 altsetting 0 has a duplicate endpoint with address 0x5, skipping
[  272.144768][  T402] usb 6-1: config 5 interface 2 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64
[  272.155503][  T402] usb 6-1: config 5 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  272.166240][  T402] usb 6-1: config 5 interface 2 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[  272.177092][  T402] usb 6-1: config 5 interface 2 altsetting 0 has a duplicate endpoint with address 0xE, skipping
[  272.187686][  T402] usb 6-1: config 5 interface 2 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64
[  272.198519][  T402] usb 6-1: config 5 interface 2 altsetting 0 has a duplicate endpoint with address 0xC, skipping
[  272.209133][  T402] usb 6-1: config 5 interface 2 altsetting 0 has a duplicate endpoint with address 0xA, skipping
[  272.219813][  T402] usb 6-1: config 5 interface 2 altsetting 0 has a duplicate endpoint with address 0xD, skipping
[  272.230568][  T402] usb 6-1: config 5 interface 2 altsetting 0 has a duplicate endpoint with address 0x9, skipping
[  272.241144][  T402] usb 6-1: config 5 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  272.252751][  T402] usb 6-1: config 5 interface 75 altsetting 151 has a duplicate endpoint with address 0x5, skipping
[  272.263568][  T402] usb 6-1: config 5 interface 75 altsetting 151 has a duplicate endpoint with address 0x8, skipping
[  272.274378][  T402] usb 6-1: config 5 interface 75 altsetting 151 has a duplicate endpoint with address 0xE, skipping
[  272.285189][  T402] usb 6-1: config 5 interface 75 altsetting 151 endpoint 0xB has invalid maxpacket 1024, setting to 64
[  272.296337][  T402] usb 6-1: config 5 interface 75 altsetting 151 has a duplicate endpoint with address 0xF, skipping
[  272.307190][  T402] usb 6-1: config 5 interface 75 altsetting 151 has a duplicate endpoint with address 0x4, skipping
[  272.318225][  T402] usb 6-1: config 5 interface 230 altsetting 0 has a duplicate endpoint with address 0xA, skipping
[  272.328982][  T402] usb 6-1: config 5 interface 230 altsetting 0 has a duplicate endpoint with address 0x8, skipping
[  272.339718][  T402] usb 6-1: config 5 interface 230 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  272.351326][  T402] usb 6-1: config 5 interface 230 altsetting 0 has a duplicate endpoint with address 0x8, skipping
[  272.362325][  T402] usb 6-1: config 5 interface 230 altsetting 0 has a duplicate endpoint with address 0xE, skipping
[  272.373434][  T402] usb 6-1: config 5 interface 230 altsetting 0 has an endpoint descriptor with address 0x1E, changing to 0xE
[  272.385183][  T402] usb 6-1: config 5 interface 230 altsetting 0 has a duplicate endpoint with address 0xE, skipping
[  272.396014][  T402] usb 6-1: config 5 interface 230 altsetting 0 has a duplicate endpoint with address 0x4, skipping
[  272.406876][  T402] usb 6-1: config 5 interface 230 altsetting 0 has a duplicate endpoint with address 0x3, skipping
[  272.417670][  T402] usb 6-1: config 5 interface 230 altsetting 0 has 8 endpoint descriptors, different from the interface descriptor's value: 11
[  272.430875][  T402] usb 6-1: config 5 interface 100 altsetting 185 has an endpoint descriptor with address 0xBF, changing to 0x8F
[  272.442750][  T402] usb 6-1: config 5 interface 100 altsetting 185 has a duplicate endpoint with address 0x8F, skipping
[  272.453792][  T402] usb 6-1: config 5 interface 100 altsetting 185 has a duplicate endpoint with address 0xF, skipping
[  272.464705][  T402] usb 6-1: config 5 interface 100 altsetting 185 has a duplicate endpoint with address 0x8B, skipping
[  272.475732][  T402] usb 6-1: config 5 interface 100 altsetting 185 has a duplicate endpoint with address 0x7, skipping
[  272.486668][  T402] usb 6-1: config 5 interface 100 altsetting 185 has a duplicate endpoint with address 0x3, skipping
[  272.497600][  T402] usb 6-1: config 5 interface 100 altsetting 185 has 5 endpoint descriptors, different from the interface descriptor's value: 7
[  272.510867][  T402] usb 6-1: config 5 interface 166 has no altsetting 0
[  272.517691][  T402] usb 6-1: config 5 interface 75 has no altsetting 0
[  272.524408][  T402] usb 6-1: config 5 interface 100 has no altsetting 0
[  272.535294][  T402] usb 6-1: Dual-Role OTG device on HNP port
[  272.541709][  T402] usb 6-1: New USB device found, idVendor=12d1, idProduct=3f61, bcdDevice=e3.ba
[  272.550889][  T402] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  272.559056][  T402] usb 6-1: Product: げ
[  272.563242][  T402] usb 6-1: Manufacturer:  
[  272.567904][  T402] usb 6-1: SerialNumber: 䀁
[  272.574432][  T402] usb 6-1: Interface #166 referenced by multiple IADs
[  272.583229][ T9459] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  272.857802][  T402] usb 6-1: USB disconnect, device number 6
[  272.948836][  T329] Bluetooth: hci0: Frame reassembly failed (-84)
[  273.481496][ T9493] netlink: 25 bytes leftover after parsing attributes in process `syz.3.3089'.
[  275.007636][ T3691] Bluetooth: hci0: command 0x1003 tx timeout
[  275.007628][ T5406] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  275.427194][   T13] Bluetooth: hci0: Frame reassembly failed (-84)
[  275.527672][   T45] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  275.680483][   T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  275.690428][   T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7
[  275.704665][   T45] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  275.713814][   T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.721868][   T45] usb 6-1: Product: syz
[  275.726094][   T45] usb 6-1: Manufacturer: syz
[  275.730800][   T45] usb 6-1: SerialNumber: syz
[  275.737320][   T45] usb 6-1: config 0 descriptor??
[  275.912753][ T9537] netlink: 25 bytes leftover after parsing attributes in process `syz.3.3106'.
[  275.963935][   T45] usb 6-1: USB disconnect, device number 7
[  276.023199][ T4311] udevd[4311]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  276.358228][   T36] kauditd_printk_skb: 376 callbacks suppressed
[  276.358244][   T36] audit: type=1400 audit(1753988880.296:7686): avc:  denied  { ioctl } for  pid=9546 comm="syz.3.3110" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  276.428091][   T36] audit: type=1400 audit(1753988880.366:7687): avc:  denied  { ioctl } for  pid=9546 comm="syz.3.3110" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  276.465505][   T36] audit: type=1400 audit(1753988880.396:7688): avc:  denied  { read write } for  pid=9030 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  276.507672][   T45] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  276.529427][   T36] audit: type=1400 audit(1753988880.396:7689): avc:  denied  { read write open } for  pid=9030 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  276.637619][   T36] audit: type=1400 audit(1753988880.396:7690): avc:  denied  { ioctl } for  pid=9030 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  276.675882][   T36] audit: type=1400 audit(1753988880.446:7691): avc:  denied  { read write } for  pid=9030 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  276.712757][   T45] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  276.724637][   T36] audit: type=1400 audit(1753988880.446:7692): avc:  denied  { read write open } for  pid=9030 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  276.757659][   T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.773090][   T36] audit: type=1400 audit(1753988880.446:7693): avc:  denied  { ioctl } for  pid=9030 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  276.790584][   T45] usb 4-1: config 0 descriptor??
[  276.805786][   T36] audit: type=1400 audit(1753988880.456:7694): avc:  denied  { ioctl } for  pid=9546 comm="syz.3.3110" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  276.862863][   T36] audit: type=1400 audit(1753988880.456:7695): avc:  denied  { ioctl } for  pid=9546 comm="syz.3.3110" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  276.898395][ T9561] netlink: 25 bytes leftover after parsing attributes in process `syz.5.3116'.
[  277.027011][   T45] usb 4-1: Cannot read MAC address
[  277.039390][   T45] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  277.053619][   T45] usb 4-1: USB disconnect, device number 37
[  277.284874][ T9576] overlayfs: conflicting options: metacopy=on,redirect_dir=follow
[  277.445469][ T9587] rust_binder: Read failure Err(EAGAIN) in pid:329
[  277.447544][ T9587] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  277.454938][ T9587] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:329
[  277.487766][ T3691] Bluetooth: hci0: command 0x1003 tx timeout
[  277.488034][ T5406] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  277.520543][ T9590] netlink: 25 bytes leftover after parsing attributes in process `syz.5.3127'.
[  278.037620][  T329] Bluetooth: hci0: Frame reassembly failed (-84)
[  278.228256][ T9618] netlink: 25 bytes leftover after parsing attributes in process `syz.3.3140'.
[  279.423065][ T9640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3148'.
[  279.482131][ T9640] fuse: Unknown parameter ''
[  279.530339][ T9642] netlink: 25 bytes leftover after parsing attributes in process `syz.3.3149'.
[  279.805295][ T9648] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  280.047914][ T3691] Bluetooth: hci0: command 0x1003 tx timeout
[  280.049044][ T5406] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  280.317660][   T45] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  280.403201][ T9669] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3160'.
[  280.521606][   T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  280.542980][   T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  280.563070][   T45] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  280.583419][   T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.609046][   T45] usb 4-1: config 0 descriptor??
[  281.117630][ T9690] can0: slcan on ttyS3.
[  281.128582][ T9690] rust_binder: 219: no such ref 3
[  281.143826][ T9690] rust_binder: Write failure EFAULT in pid:219
[  281.143827][ T9691] rust_binder: 219: no such ref 3
[  281.197645][ T9691] rust_binder: Write failure EFAULT in pid:219
[  281.234265][ T9689] can0 (unregistered): slcan off ttyS3.
[  281.414887][   T36] kauditd_printk_skb: 415 callbacks suppressed
[  281.414910][   T36] audit: type=1400 audit(1753988885.346:8111): avc:  denied  { append } for  pid=9694 comm="syz.5.3172" name="001" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  281.467615][   T36] audit: type=1400 audit(1753988885.346:8112): avc:  denied  { append } for  pid=9694 comm="syz.5.3172" path="/dev/bus/usb/001/001" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  281.525055][   T36] audit: type=1400 audit(1753988885.366:8113): avc:  denied  { read write } for  pid=9030 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  281.549385][   T36] audit: type=1400 audit(1753988885.366:8114): avc:  denied  { read write open } for  pid=9030 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  281.584842][   T36] audit: type=1400 audit(1753988885.366:8115): avc:  denied  { ioctl } for  pid=9030 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  281.655233][   T36] audit: type=1400 audit(1753988885.396:8116): avc:  denied  { ioctl } for  pid=9659 comm="syz.3.3157" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  281.691446][   T45] input: HID 256c:006d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.000A/input/input28
[  281.717647][   T36] audit: type=1400 audit(1753988885.396:8117): avc:  denied  { ioctl } for  pid=9659 comm="syz.3.3157" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  281.728857][   T45] input: HID 256c:006d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.000A/input/input29
[  281.800751][   T36] audit: type=1400 audit(1753988885.456:8118): avc:  denied  { append } for  pid=9696 comm="syz.5.3173" name="001" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  281.826011][   T45] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.000A/input/input30
[  281.878584][   T45] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.000A/input/input31
[  281.880000][   T36] audit: type=1400 audit(1753988885.456:8119): avc:  denied  { append } for  pid=9696 comm="syz.5.3173" path="/dev/bus/usb/001/001" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  281.968241][   T45] uclogic 0003:256C:006D.000A: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0
[  281.990405][   T45] usb 4-1: USB disconnect, device number 38
[  281.996808][   T36] audit: type=1400 audit(1753988885.486:8120): avc:  denied  { read write } for  pid=9030 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  282.047636][  T587] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[  282.198096][  T587] usb 6-1: device descriptor read/64, error -71
[  282.272262][ T9702] fido_id[9702]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  282.447698][  T587] usb 6-1: device descriptor read/64, error -71
[  282.592881][ T9712] FAULT_INJECTION: forcing a failure.
[  282.592881][ T9712] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  282.607459][ T9712] CPU: 0 UID: 0 PID: 9712 Comm: syz.3.3179 Not tainted 6.12.38-syzkaller-gc98acaeb71d4 #0 12f313afd6af6cbe2ef80fd9c185925320fe8e2c
[  282.607500][ T9712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  282.607516][ T9712] Call Trace:
[  282.607525][ T9712]  <TASK>
[  282.607535][ T9712]  __dump_stack+0x21/0x30
[  282.607587][ T9712]  dump_stack_lvl+0x10c/0x190
[  282.607615][ T9712]  ? __cfi_dump_stack_lvl+0x10/0x10
[  282.607645][ T9712]  dump_stack+0x19/0x20
[  282.607669][ T9712]  should_fail_ex+0x3d9/0x530
[  282.607698][ T9712]  should_fail+0xf/0x20
[  282.607725][ T9712]  should_fail_usercopy+0x1e/0x30
[  282.607757][ T9712]  _copy_from_user+0x22/0xb0
[  282.607779][ T9712]  proc_control+0x9b/0x120
[  282.607804][ T9712]  ? destroy_async+0x210/0x210
[  282.607828][ T9712]  ? mutex_lock+0x92/0x1c0
[  282.607864][ T9712]  ? __cfi_vfs_write+0x10/0x10
[  282.607893][ T9712]  usbdev_ioctl+0xc5b/0x20a0
[  282.607915][ T9712]  ? __cfi_usbdev_ioctl+0x10/0x10
[  282.607938][ T9712]  ? __fget_files+0x2c5/0x340
[  282.607972][ T9712]  ? bpf_lsm_file_ioctl+0xd/0x20
[  282.607999][ T9712]  ? security_file_ioctl+0x34/0xd0
[  282.608037][ T9712]  ? __cfi_usbdev_ioctl+0x10/0x10
[  282.608061][ T9712]  __se_sys_ioctl+0x132/0x1b0
[  282.608084][ T9712]  __x64_sys_ioctl+0x7f/0xa0
[  282.608105][ T9712]  x64_sys_call+0x1878/0x2ee0
[  282.608137][ T9712]  do_syscall_64+0x58/0xf0
[  282.608165][ T9712]  ? clear_bhb_loop+0x50/0xa0
[  282.608188][ T9712]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  282.608223][ T9712] RIP: 0033:0x7f46ffb8eb69
[  282.608244][ T9712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  282.608265][ T9712] RSP: 002b:00007f4700a9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  282.608291][ T9712] RAX: ffffffffffffffda RBX: 00007f46ffdb5fa0 RCX: 00007f46ffb8eb69
[  282.608308][ T9712] RDX: 0000200000000040 RSI: 00000000c0185500 RDI: 0000000000000003
[  282.608324][ T9712] RBP: 00007f4700a9d090 R08: 0000000000000000 R09: 0000000000000000
[  282.608339][ T9712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  282.608355][ T9712] R13: 0000000000000000 R14: 00007f46ffdb5fa0 R15: 00007ffc2cacf108
[  282.608376][ T9712]  </TASK>
[  282.659344][   T45] rust_binder: 9709: removing orphan mapping 0:1048
[  282.841355][  T587] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[  282.977654][  T587] usb 6-1: device descriptor read/64, error -71
[  283.218515][  T587] usb 6-1: device descriptor read/64, error -71
[  283.358117][  T587] usb usb6-port1: attempt power cycle
[  283.707635][  T587] usb 6-1: new full-speed USB device number 10 using dummy_hcd
[  283.735341][  T587] usb 6-1: device descriptor read/8, error -71
[  283.870045][  T587] usb 6-1: device descriptor read/8, error -71
[  284.108646][  T587] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[  284.126690][ T9734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3184'.
[  284.159460][  T587] usb 6-1: device descriptor read/8, error -71
[  284.175958][ T9734] fuse: Unknown parameter ''
[  284.325360][  T587] usb 6-1: device descriptor read/8, error -71
[  284.437723][  T587] usb usb6-port1: unable to enumerate USB device
[  284.697715][  T587] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  284.794698][ T9753] rust_binder: Read failure Err(EFAULT) in pid:323
[  284.823890][ T9759] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3197'.
[  284.868861][  T587] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  284.889257][  T587] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7
[  284.922449][  T587] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  284.942058][  T587] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.957623][  T587] usb 4-1: Product: syz
[  284.969460][  T587] usb 4-1: Manufacturer: syz
[  284.984383][  T587] usb 4-1: SerialNumber: syz
[  284.999242][  T587] usb 4-1: config 0 descriptor??
[  285.161320][  T328] Bluetooth: hci0: Frame reassembly failed (-84)
[  285.202253][ T9771] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 112, size: 185)
[  285.202282][ T9771] rust_binder: Error while translating object.
[  285.227617][ T9771] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  285.243410][ T9771] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:331
[  285.282353][  T587] usb 4-1: USB disconnect, device number 39
[  285.440574][ T5728] udevd[5728]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  286.076021][ T9780] rust_binder: Read failure Err(EFAULT) in pid:407
[  286.170663][ T9790] kvm: kvm [9789]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7
[  286.185984][ T9790] kvm: kvm [9789]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7
[  286.202742][ T9790] kvm_intel: kvm [9789]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x1
[  286.213833][ T9790] kvm: kvm [9789]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x1
[  286.222491][ T9790] kvm: kvm [9789]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x1
[  286.234915][ T9790] kvm: kvm [9789]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x1
[  286.246833][ T9790] kvm: kvm [9789]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x1
[  286.255924][ T9790] kvm: kvm [9789]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x1
[  286.273904][ T9790] kvm_intel: kvm [9789]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x1
[  286.285526][ T9790] kvm: kvm [9789]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x1
[  286.295328][ T9790] kvm: kvm [9789]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x1
[  286.307978][ T9790] kvm: kvm [9789]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x1
[  286.328325][ T9790] kvm_intel: kvm [9789]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x1
[  286.354398][ T9790] kvm_intel: kvm [9789]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x1
[  286.379789][ T9790] kvm_intel: kvm [9789]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x1
[  286.464183][   T36] kauditd_printk_skb: 467 callbacks suppressed
[  286.464205][   T36] audit: type=1400 audit(1753988890.396:8588): avc:  denied  { read write } for  pid=8109 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  286.536502][   T36] audit: type=1400 audit(1753988890.396:8589): avc:  denied  { read write open } for  pid=8109 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  286.566363][   T36] audit: type=1400 audit(1753988890.396:8590): avc:  denied  { ioctl } for  pid=8109 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  286.593661][   T36] audit: type=1400 audit(1753988890.426:8591): avc:  denied  { append } for  pid=9793 comm="syz.3.3209" name="001" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  286.617445][   T36] audit: type=1400 audit(1753988890.426:8592): avc:  denied  { append } for  pid=9793 comm="syz.3.3209" path="/dev/bus/usb/001/001" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  286.643529][   T36] audit: type=1400 audit(1753988890.446:8593): avc:  denied  { read write } for  pid=8109 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  286.669756][   T36] audit: type=1400 audit(1753988890.446:8594): avc:  denied  { read write open } for  pid=8109 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  286.698106][   T36] audit: type=1400 audit(1753988890.446:8595): avc:  denied  { ioctl } for  pid=8109 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  286.736425][   T36] audit: type=1400 audit(1753988890.666:8596): avc:  denied  { read write } for  pid=8109 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  286.798551][   T36] audit: type=1400 audit(1753988890.676:8597): avc:  denied  { read write open } for  pid=8109 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  286.864926][ T9802] FAULT_INJECTION: forcing a failure.
[  286.864926][ T9802] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  286.880883][ T9802] CPU: 1 UID: 0 PID: 9802 Comm: syz.3.3212 Not tainted 6.12.38-syzkaller-gc98acaeb71d4 #0 12f313afd6af6cbe2ef80fd9c185925320fe8e2c
[  286.880929][ T9802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  286.880946][ T9802] Call Trace:
[  286.880955][ T9802]  <TASK>
[  286.880964][ T9802]  __dump_stack+0x21/0x30
[  286.880999][ T9802]  dump_stack_lvl+0x10c/0x190
[  286.881030][ T9802]  ? __cfi_dump_stack_lvl+0x10/0x10
[  286.881062][ T9802]  dump_stack+0x19/0x20
[  286.881089][ T9802]  should_fail_ex+0x3d9/0x530
[  286.881121][ T9802]  should_fail_alloc_page+0xeb/0x110
[  286.881158][ T9802]  __alloc_pages_noprof+0x19d/0x6c0
[  286.881186][ T9802]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  286.881214][ T9802]  ? __kasan_check_write+0x18/0x20
[  286.881243][ T9802]  ? _raw_spin_lock_irqsave+0xaf/0x150
[  286.881283][ T9802]  ? has_cap_mac_admin+0xd0/0xd0
[  286.881307][ T9802]  get_free_pages_noprof+0x14/0x40
[  286.881334][ T9802]  do_proc_control+0x1c7/0xfd0
[  286.881365][ T9802]  ? __kasan_check_write+0x18/0x20
[  286.881396][ T9802]  proc_control+0xc9/0x120
[  286.881421][ T9802]  ? destroy_async+0x210/0x210
[  286.881447][ T9802]  ? mutex_lock+0x92/0x1c0
[  286.881481][ T9802]  ? __cfi_vfs_write+0x10/0x10
[  286.881515][ T9802]  usbdev_ioctl+0xc5b/0x20a0
[  286.881542][ T9802]  ? __cfi_usbdev_ioctl+0x10/0x10
[  286.881566][ T9802]  ? __fget_files+0x2c5/0x340
[  286.881603][ T9802]  ? bpf_lsm_file_ioctl+0xd/0x20
[  286.881633][ T9802]  ? security_file_ioctl+0x34/0xd0
[  286.881670][ T9802]  ? __cfi_usbdev_ioctl+0x10/0x10
[  286.881695][ T9802]  __se_sys_ioctl+0x132/0x1b0
[  286.881719][ T9802]  __x64_sys_ioctl+0x7f/0xa0
[  286.881741][ T9802]  x64_sys_call+0x1878/0x2ee0
[  286.881773][ T9802]  do_syscall_64+0x58/0xf0
[  286.881804][ T9802]  ? clear_bhb_loop+0x50/0xa0
[  286.881825][ T9802]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  286.881860][ T9802] RIP: 0033:0x7f46ffb8eb69
[  286.881880][ T9802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  286.881902][ T9802] RSP: 002b:00007f4700a9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  286.881928][ T9802] RAX: ffffffffffffffda RBX: 00007f46ffdb5fa0 RCX: 00007f46ffb8eb69
[  286.881948][ T9802] RDX: 0000200000000040 RSI: 00000000c0185500 RDI: 0000000000000003
[  286.881966][ T9802] RBP: 00007f4700a9d090 R08: 0000000000000000 R09: 0000000000000000
[  286.881983][ T9802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  286.881999][ T9802] R13: 0000000000000000 R14: 00007f46ffdb5fa0 R15: 00007ffc2cacf108
[  286.882021][ T9802]  </TASK>
[  286.889374][ T9804] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3213'.
[  287.167679][ T5406] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  287.207648][   T64] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  287.371449][   T64] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  287.404780][   T64] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7
[  287.422071][   T64] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  287.432950][   T64] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.442344][   T64] usb 4-1: Product: syz
[  287.446580][   T64] usb 4-1: Manufacturer: syz
[  287.452851][   T64] usb 4-1: SerialNumber: syz
[  287.460839][   T64] usb 4-1: config 0 descriptor??
[  287.717662][   T64] usb 4-1: USB disconnect, device number 40
[  287.807516][ T5728] udevd[5728]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  288.266719][ T9833] FAULT_INJECTION: forcing a failure.
[  288.266719][ T9833] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  288.292011][ T9833] CPU: 0 UID: 0 PID: 9833 Comm: syz.0.3223 Not tainted 6.12.38-syzkaller-gc98acaeb71d4 #0 12f313afd6af6cbe2ef80fd9c185925320fe8e2c
[  288.292053][ T9833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  288.292070][ T9833] Call Trace:
[  288.292078][ T9833]  <TASK>
[  288.292088][ T9833]  __dump_stack+0x21/0x30
[  288.292122][ T9833]  dump_stack_lvl+0x10c/0x190
[  288.292151][ T9833]  ? __cfi_dump_stack_lvl+0x10/0x10
[  288.292179][ T9833]  dump_stack+0x19/0x20
[  288.292203][ T9833]  should_fail_ex+0x3d9/0x530
[  288.292233][ T9833]  should_fail+0xf/0x20
[  288.292259][ T9833]  should_fail_usercopy+0x1e/0x30
[  288.292290][ T9833]  _copy_from_user+0x22/0xb0
[  288.292312][ T9833]  proc_control+0x9b/0x120
[  288.292337][ T9833]  ? destroy_async+0x210/0x210
[  288.292362][ T9833]  ? mutex_lock+0x92/0x1c0
[  288.292396][ T9833]  ? __cfi_vfs_write+0x10/0x10
[  288.292429][ T9833]  usbdev_ioctl+0xc5b/0x20a0
[  288.292455][ T9833]  ? __cfi_usbdev_ioctl+0x10/0x10
[  288.292479][ T9833]  ? __fget_files+0x2c5/0x340
[  288.292515][ T9833]  ? bpf_lsm_file_ioctl+0xd/0x20
[  288.292544][ T9833]  ? security_file_ioctl+0x34/0xd0
[  288.292580][ T9833]  ? __cfi_usbdev_ioctl+0x10/0x10
[  288.292604][ T9833]  __se_sys_ioctl+0x132/0x1b0
[  288.292626][ T9833]  __x64_sys_ioctl+0x7f/0xa0
[  288.292648][ T9833]  x64_sys_call+0x1878/0x2ee0
[  288.292679][ T9833]  do_syscall_64+0x58/0xf0
[  288.292707][ T9833]  ? clear_bhb_loop+0x50/0xa0
[  288.292729][ T9833]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  288.292763][ T9833] RIP: 0033:0x7fc4b0b8eb69
[  288.292783][ T9833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  288.292804][ T9833] RSP: 002b:00007fc4b1a45038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  288.292830][ T9833] RAX: ffffffffffffffda RBX: 00007fc4b0db5fa0 RCX: 00007fc4b0b8eb69
[  288.292849][ T9833] RDX: 0000200000000040 RSI: 00000000c0185500 RDI: 0000000000000003
[  288.292867][ T9833] RBP: 00007fc4b1a45090 R08: 0000000000000000 R09: 0000000000000000
[  288.292890][ T9833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  288.292906][ T9833] R13: 0000000000000000 R14: 00007fc4b0db5fa0 R15: 00007ffe03761b78
[  288.292926][ T9833]  </TASK>
[  288.356251][ T9822] rust_binder: Read failure Err(EFAULT) in pid:245
[  288.637625][  T434] usb 4-1: new low-speed USB device number 41 using dummy_hcd
[  288.823170][  T434] usb 4-1: config 0 has an invalid descriptor of length 227, skipping remainder of the config
[  288.851303][  T434] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 138, using maximum allowed: 30
[  288.885046][  T434] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  288.925087][  T434] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 138
[  288.958208][  T434] usb 4-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00
[  288.987624][  T434] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.035169][  T434] usb 4-1: config 0 descriptor??
[  289.108027][ T9866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  289.118440][ T9866] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  289.247947][   T64] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[  289.387720][   T64] usb 6-1: device descriptor read/64, error -71
[  289.627714][   T64] usb 6-1: device descriptor read/64, error -71
[  289.740814][  T434] usbhid 4-1:0.0: can't add hid device: -71
[  289.746883][  T434] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  289.760320][  T434] usb 4-1: USB disconnect, device number 41
[  289.867680][   T64] usb 6-1: new full-speed USB device number 13 using dummy_hcd
[  290.007707][   T64] usb 6-1: device descriptor read/64, error -71
[  290.247635][   T64] usb 6-1: device descriptor read/64, error -71
[  290.250624][ T9876] FAULT_INJECTION: forcing a failure.
[  290.250624][ T9876] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  290.268382][ T9876] CPU: 0 UID: 0 PID: 9876 Comm: syz.4.3242 Not tainted 6.12.38-syzkaller-gc98acaeb71d4 #0 12f313afd6af6cbe2ef80fd9c185925320fe8e2c
[  290.268421][ T9876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  290.268438][ T9876] Call Trace:
[  290.268449][ T9876]  <TASK>
[  290.268458][ T9876]  __dump_stack+0x21/0x30
[  290.268569][ T9876]  dump_stack_lvl+0x10c/0x190
[  290.268590][ T9876]  ? __cfi_dump_stack_lvl+0x10/0x10
[  290.268613][ T9876]  dump_stack+0x19/0x20
[  290.268633][ T9876]  should_fail_ex+0x3d9/0x530
[  290.268657][ T9876]  should_fail+0xf/0x20
[  290.268677][ T9876]  should_fail_usercopy+0x1e/0x30
[  290.268702][ T9876]  _copy_from_user+0x22/0xb0
[  290.268717][ T9876]  proc_control+0x9b/0x120
[  290.268860][ T9876]  ? destroy_async+0x210/0x210
[  290.268891][ T9876]  ? mutex_lock+0x92/0x1c0
[  290.268918][ T9876]  ? __cfi_vfs_write+0x10/0x10
[  290.268943][ T9876]  usbdev_ioctl+0xc5b/0x20a0
[  290.268964][ T9876]  ? __cfi_usbdev_ioctl+0x10/0x10
[  290.268981][ T9876]  ? __fget_files+0x2c5/0x340
[  290.269007][ T9876]  ? bpf_lsm_file_ioctl+0xd/0x20
[  290.269028][ T9876]  ? security_file_ioctl+0x34/0xd0
[  290.269055][ T9876]  ? __cfi_usbdev_ioctl+0x10/0x10
[  290.269072][ T9876]  __se_sys_ioctl+0x132/0x1b0
[  290.269087][ T9876]  __x64_sys_ioctl+0x7f/0xa0
[  290.269102][ T9876]  x64_sys_call+0x1878/0x2ee0
[  290.269127][ T9876]  do_syscall_64+0x58/0xf0
[  290.269147][ T9876]  ? clear_bhb_loop+0x50/0xa0
[  290.269163][ T9876]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  290.269188][ T9876] RIP: 0033:0x7f73cbf8eb69
[  290.269203][ T9876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  290.269219][ T9876] RSP: 002b:00007f73ccd9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  290.269238][ T9876] RAX: ffffffffffffffda RBX: 00007f73cc1b5fa0 RCX: 00007f73cbf8eb69
[  290.269251][ T9876] RDX: 0000200000000040 RSI: 00000000c0185500 RDI: 0000000000000003
[  290.269264][ T9876] RBP: 00007f73ccd9e090 R08: 0000000000000000 R09: 0000000000000000
[  290.269275][ T9876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  290.269286][ T9876] R13: 0000000000000000 R14: 00007f73cc1b5fa0 R15: 00007ffcde47efd8
[  290.269300][ T9876]  </TASK>
[  290.397998][   T64] usb usb6-port1: attempt power cycle
[  290.587339][  T328] Bluetooth: hci0: Frame reassembly failed (-84)
[  290.957683][   T64] usb 6-1: new full-speed USB device number 14 using dummy_hcd
[  290.980506][   T64] usb 6-1: device descriptor read/8, error -71
[  291.110651][   T64] usb 6-1: device descriptor read/8, error -71
[  291.347873][   T64] usb 6-1: new full-speed USB device number 15 using dummy_hcd
[  291.370832][   T64] usb 6-1: device descriptor read/8, error -71
[  291.496586][   T36] kauditd_printk_skb: 449 callbacks suppressed
[  291.496607][   T36] audit: type=1400 audit(1753988895.426:9047): avc:  denied  { read write } for  pid=7721 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  291.558696][   T36] audit: type=1400 audit(1753988895.426:9048): avc:  denied  { read write open } for  pid=7721 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  291.585824][   T64] usb 6-1: device descriptor read/8, error -71
[  291.590522][   T36] audit: type=1400 audit(1753988895.426:9049): avc:  denied  { ioctl } for  pid=7721 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  291.620185][   T36] audit: type=1400 audit(1753988895.446:9050): avc:  denied  { append } for  pid=9890 comm="syz.4.3249" name="001" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  291.644470][   T36] audit: type=1400 audit(1753988895.446:9051): avc:  denied  { append } for  pid=9890 comm="syz.4.3249" path="/dev/bus/usb/001/001" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  291.669514][   T36] audit: type=1400 audit(1753988895.476:9052): avc:  denied  { read write } for  pid=7721 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  291.694300][   T36] audit: type=1400 audit(1753988895.476:9053): avc:  denied  { read write open } for  pid=7721 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  291.720044][   T64] usb usb6-port1: unable to enumerate USB device
[  291.723993][   T36] audit: type=1400 audit(1753988895.476:9054): avc:  denied  { ioctl } for  pid=7721 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  291.752345][   T36] audit: type=1400 audit(1753988895.486:9055): avc:  denied  { ioctl } for  pid=9860 comm="syz.5.3236" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  291.753571][ T9896] 9pnet_fd: Insufficient options for proto=fd
[  291.778235][   T36] audit: type=1400 audit(1753988895.496:9056): avc:  denied  { ioctl } for  pid=9860 comm="syz.5.3236" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  291.911429][ T9902] FAULT_INJECTION: forcing a failure.
[  291.911429][ T9902] name failslab, interval 1, probability 0, space 0, times 0
[  291.924402][ T9902] CPU: 1 UID: 0 PID: 9902 Comm: syz.4.3254 Not tainted 6.12.38-syzkaller-gc98acaeb71d4 #0 12f313afd6af6cbe2ef80fd9c185925320fe8e2c
[  291.924442][ T9902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  291.924453][ T9902] Call Trace:
[  291.924460][ T9902]  <TASK>
[  291.924469][ T9902]  __dump_stack+0x21/0x30
[  291.924495][ T9902]  dump_stack_lvl+0x10c/0x190
[  291.924633][ T9902]  ? __cfi_dump_stack_lvl+0x10/0x10
[  291.924661][ T9902]  dump_stack+0x19/0x20
[  291.924793][ T9902]  should_fail_ex+0x3d9/0x530
[  291.924818][ T9902]  should_failslab+0xac/0x100
[  291.924849][ T9902]  __kmalloc_noprof+0x69/0x450
[  291.924873][ T9902]  ? usb_alloc_urb+0x5f/0x200
[  291.924896][ T9902]  usb_alloc_urb+0x5f/0x200
[  291.924916][ T9902]  ? do_proc_control+0x1e9/0xfd0
[  291.924936][ T9902]  do_proc_control+0x1fe/0xfd0
[  291.924958][ T9902]  proc_control+0xc9/0x120
[  291.924976][ T9902]  ? destroy_async+0x210/0x210
[  291.924993][ T9902]  ? mutex_lock+0x92/0x1c0
[  291.925020][ T9902]  ? __cfi_vfs_write+0x10/0x10
[  291.925045][ T9902]  usbdev_ioctl+0xc5b/0x20a0
[  291.925064][ T9902]  ? __cfi_usbdev_ioctl+0x10/0x10
[  291.925080][ T9902]  ? __fget_files+0x2c5/0x340
[  291.925107][ T9902]  ? bpf_lsm_file_ioctl+0xd/0x20
[  291.925129][ T9902]  ? security_file_ioctl+0x34/0xd0
[  291.925157][ T9902]  ? __cfi_usbdev_ioctl+0x10/0x10
[  291.925174][ T9902]  __se_sys_ioctl+0x132/0x1b0
[  291.925190][ T9902]  __x64_sys_ioctl+0x7f/0xa0
[  291.925206][ T9902]  x64_sys_call+0x1878/0x2ee0
[  291.925229][ T9902]  do_syscall_64+0x58/0xf0
[  291.925250][ T9902]  ? clear_bhb_loop+0x50/0xa0
[  291.925267][ T9902]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  291.925293][ T9902] RIP: 0033:0x7f73cbf8eb69
[  291.925310][ T9902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  291.925326][ T9902] RSP: 002b:00007f73ccd9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  291.925344][ T9902] RAX: ffffffffffffffda RBX: 00007f73cc1b5fa0 RCX: 00007f73cbf8eb69
[  291.925358][ T9902] RDX: 0000200000000040 RSI: 00000000c0185500 RDI: 0000000000000003
[  291.925370][ T9902] RBP: 00007f73ccd9e090 R08: 0000000000000000 R09: 0000000000000000
[  291.925382][ T9902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  291.925393][ T9902] R13: 0000000000000000 R14: 00007f73cc1b5fa0 R15: 00007ffcde47efd8
[  291.925408][ T9902]  </TASK>
[  292.344260][ T9919] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  292.508962][ T9925] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  292.607630][ T3691] Bluetooth: hci0: command 0x1003 tx timeout
[  292.614429][ T5406] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  292.761194][ T9932] FAULT_INJECTION: forcing a failure.
[  292.761194][ T9932] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  292.774997][ T9932] CPU: 0 UID: 0 PID: 9932 Comm: syz.5.3266 Not tainted 6.12.38-syzkaller-gc98acaeb71d4 #0 12f313afd6af6cbe2ef80fd9c185925320fe8e2c
[  292.775042][ T9932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  292.775059][ T9932] Call Trace:
[  292.775067][ T9932]  <TASK>
[  292.775078][ T9932]  __dump_stack+0x21/0x30
[  292.775113][ T9932]  dump_stack_lvl+0x10c/0x190
[  292.775142][ T9932]  ? __cfi_dump_stack_lvl+0x10/0x10
[  292.775173][ T9932]  dump_stack+0x19/0x20
[  292.775200][ T9932]  should_fail_ex+0x3d9/0x530
[  292.775235][ T9932]  should_fail_alloc_page+0xeb/0x110
[  292.775275][ T9932]  __alloc_pages_noprof+0x19d/0x6c0
[  292.775304][ T9932]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  292.775332][ T9932]  ? __kasan_check_write+0x18/0x20
[  292.775375][ T9932]  ? _raw_spin_lock_irqsave+0xaf/0x150
[  292.775409][ T9932]  ? has_cap_mac_admin+0xd0/0xd0
[  292.775434][ T9932]  get_free_pages_noprof+0x14/0x40
[  292.775461][ T9932]  do_proc_control+0x1c7/0xfd0
[  292.775494][ T9932]  ? __kasan_check_write+0x18/0x20
[  292.775525][ T9932]  proc_control+0xc9/0x120
[  292.775551][ T9932]  ? destroy_async+0x210/0x210
[  292.775576][ T9932]  ? mutex_lock+0x92/0x1c0
[  292.775611][ T9932]  ? __cfi_vfs_write+0x10/0x10
[  292.775645][ T9932]  usbdev_ioctl+0xc5b/0x20a0
[  292.775672][ T9932]  ? __cfi_usbdev_ioctl+0x10/0x10
[  292.775697][ T9932]  ? __fget_files+0x2c5/0x340
[  292.775735][ T9932]  ? bpf_lsm_file_ioctl+0xd/0x20
[  292.775765][ T9932]  ? security_file_ioctl+0x34/0xd0
[  292.775804][ T9932]  ? __cfi_usbdev_ioctl+0x10/0x10
[  292.775829][ T9932]  __se_sys_ioctl+0x132/0x1b0
[  292.775853][ T9932]  __x64_sys_ioctl+0x7f/0xa0
[  292.775875][ T9932]  x64_sys_call+0x1878/0x2ee0
[  292.775908][ T9932]  do_syscall_64+0x58/0xf0
[  292.775938][ T9932]  ? clear_bhb_loop+0x50/0xa0
[  292.775961][ T9932]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  292.775998][ T9932] RIP: 0033:0x7f7a23d8eb69
[  292.776018][ T9932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  292.776040][ T9932] RSP: 002b:00007f7a24c30038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  292.776066][ T9932] RAX: ffffffffffffffda RBX: 00007f7a23fb5fa0 RCX: 00007f7a23d8eb69
[  292.776085][ T9932] RDX: 0000200000000040 RSI: 00000000c0185500 RDI: 0000000000000003
[  292.776102][ T9932] RBP: 00007f7a24c30090 R08: 0000000000000000 R09: 0000000000000000
[  292.776120][ T9932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  292.776137][ T9932] R13: 0000000000000000 R14: 00007f7a23fb5fa0 R15: 00007fffb8d43d18
[  292.776158][ T9932]  </TASK>
[  293.118503][ T9935] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  293.119147][ T9935] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  293.126905][ T9935] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  293.135339][ T9935] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  293.148073][ T9935] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  293.161045][ T9935] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  293.167629][  T434] usb 4-1: new full-speed USB device number 42 using dummy_hcd
[  293.175731][   T64] rust_binder: 9917: removing orphan mapping 0:1024
[  293.278423][ T9944] FAULT_INJECTION: forcing a failure.
[  293.278423][ T9944] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  293.304196][   T13] Bluetooth: hci0: Frame reassembly failed (-84)
[  293.307654][  T434] usb 4-1: device descriptor read/64, error -71
[  293.334289][ T9944] CPU: 1 UID: 0 PID: 9944 Comm: syz.4.3270 Not tainted 6.12.38-syzkaller-gc98acaeb71d4 #0 12f313afd6af6cbe2ef80fd9c185925320fe8e2c
[  293.334329][ T9944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  293.334345][ T9944] Call Trace:
[  293.334352][ T9944]  <TASK>
[  293.334362][ T9944]  __dump_stack+0x21/0x30
[  293.334395][ T9944]  dump_stack_lvl+0x10c/0x190
[  293.334424][ T9944]  ? __cfi_dump_stack_lvl+0x10/0x10
[  293.334454][ T9944]  dump_stack+0x19/0x20
[  293.334481][ T9944]  should_fail_ex+0x3d9/0x530
[  293.334512][ T9944]  should_fail+0xf/0x20
[  293.334548][ T9944]  should_fail_usercopy+0x1e/0x30
[  293.334582][ T9944]  _copy_from_user+0x22/0xb0
[  293.334604][ T9944]  proc_control+0x9b/0x120
[  293.334630][ T9944]  ? destroy_async+0x210/0x210
[  293.334655][ T9944]  ? mutex_lock+0x92/0x1c0
[  293.334690][ T9944]  ? __cfi_vfs_write+0x10/0x10
[  293.334723][ T9944]  usbdev_ioctl+0xc5b/0x20a0
[  293.334750][ T9944]  ? __cfi_usbdev_ioctl+0x10/0x10
[  293.334774][ T9944]  ? __fget_files+0x2c5/0x340
[  293.334809][ T9944]  ? bpf_lsm_file_ioctl+0xd/0x20
[  293.334838][ T9944]  ? security_file_ioctl+0x34/0xd0
[  293.334874][ T9944]  ? __cfi_usbdev_ioctl+0x10/0x10
[  293.334898][ T9944]  __se_sys_ioctl+0x132/0x1b0
[  293.334921][ T9944]  __x64_sys_ioctl+0x7f/0xa0
[  293.334943][ T9944]  x64_sys_call+0x1878/0x2ee0
[  293.334980][ T9944]  do_syscall_64+0x58/0xf0
[  293.335008][ T9944]  ? clear_bhb_loop+0x50/0xa0
[  293.335036][ T9944]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  293.335075][ T9944] RIP: 0033:0x7f73cbf8eb69
[  293.335094][ T9944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  293.335114][ T9944] RSP: 002b:00007f73ccd9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  293.335137][ T9944] RAX: ffffffffffffffda RBX: 00007f73cc1b5fa0 RCX: 00007f73cbf8eb69
[  293.335155][ T9944] RDX: 0000200000000040 RSI: 00000000c0185500 RDI: 0000000000000003
[  293.335172][ T9944] RBP: 00007f73ccd9e090 R08: 0000000000000000 R09: 0000000000000000
[  293.335187][ T9944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  293.335202][ T9944] R13: 0000000000000000 R14: 00007f73cc1b5fa0 R15: 00007ffcde47efd8
[  293.335221][ T9944]  </TASK>
[  293.557689][  T434] usb 4-1: device descriptor read/64, error -71
[  293.683917][ T9953] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:416
[  293.745932][ T9961] fuse: Bad value for 'user_id'
[  293.761904][ T9961] fuse: Bad value for 'user_id'
[  293.770621][ T9962] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:285
[  293.847619][  T434] usb 4-1: new full-speed USB device number 43 using dummy_hcd
[  293.925040][ T9968] FAULT_INJECTION: forcing a failure.
[  293.925040][ T9968] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  293.939295][ T9968] CPU: 1 UID: 0 PID: 9968 Comm: syz.4.3280 Not tainted 6.12.38-syzkaller-gc98acaeb71d4 #0 12f313afd6af6cbe2ef80fd9c185925320fe8e2c
[  293.939377][ T9968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  293.939394][ T9968] Call Trace:
[  293.939402][ T9968]  <TASK>
[  293.939413][ T9968]  __dump_stack+0x21/0x30
[  293.939459][ T9968]  dump_stack_lvl+0x10c/0x190
[  293.939489][ T9968]  ? __cfi_dump_stack_lvl+0x10/0x10
[  293.939523][ T9968]  dump_stack+0x19/0x20
[  293.939552][ T9968]  should_fail_ex+0x3d9/0x530
[  293.939586][ T9968]  should_fail_alloc_page+0xeb/0x110
[  293.939627][ T9968]  __alloc_pages_noprof+0x19d/0x6c0
[  293.939656][ T9968]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  293.939686][ T9968]  ? __kasan_check_write+0x18/0x20
[  293.939716][ T9968]  ? _raw_spin_lock_irqsave+0xaf/0x150
[  293.939751][ T9968]  ? has_cap_mac_admin+0xd0/0xd0
[  293.939778][ T9968]  get_free_pages_noprof+0x14/0x40
[  293.939807][ T9968]  do_proc_control+0x1c7/0xfd0
[  293.939837][ T9968]  ? __kasan_check_write+0x18/0x20
[  293.939873][ T9968]  proc_control+0xc9/0x120
[  293.939899][ T9968]  ? destroy_async+0x210/0x210
[  293.939926][ T9968]  ? mutex_lock+0x92/0x1c0
[  293.939964][ T9968]  ? __cfi_vfs_write+0x10/0x10
[  293.939999][ T9968]  usbdev_ioctl+0xc5b/0x20a0
[  293.940027][ T9968]  ? __cfi_usbdev_ioctl+0x10/0x10
[  293.940051][ T9968]  ? __fget_files+0x2c5/0x340
[  293.940079][ T9968]  ? bpf_lsm_file_ioctl+0xd/0x20
[  293.940102][ T9968]  ? security_file_ioctl+0x34/0xd0
[  293.940130][ T9968]  ? __cfi_usbdev_ioctl+0x10/0x10
[  293.940148][ T9968]  __se_sys_ioctl+0x132/0x1b0
[  293.940166][ T9968]  __x64_sys_ioctl+0x7f/0xa0
[  293.940186][ T9968]  x64_sys_call+0x1878/0x2ee0
[  293.940214][ T9968]  do_syscall_64+0x58/0xf0
[  293.940237][ T9968]  ? clear_bhb_loop+0x50/0xa0
[  293.940253][ T9968]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  293.940280][ T9968] RIP: 0033:0x7f73cbf8eb69
[  293.940296][ T9968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  293.940313][ T9968] RSP: 002b:00007f73ccd9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  293.940333][ T9968] RAX: ffffffffffffffda RBX: 00007f73cc1b5fa0 RCX: 00007f73cbf8eb69
[  293.940347][ T9968] RDX: 0000200000000040 RSI: 00000000c0185500 RDI: 0000000000000003
[  293.940361][ T9968] RBP: 00007f73ccd9e090 R08: 0000000000000000 R09: 0000000000000000
[  293.940373][ T9968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  293.940386][ T9968] R13: 0000000000000000 R14: 00007f73cc1b5fa0 R15: 00007ffcde47efd8
[  293.940402][ T9968]  </TASK>
[  293.997796][  T434] usb 4-1: device descriptor read/64, error -71
[  294.063553][ T9970] rust_binder: Failed copying remainder into alloc: EFAULT
[  294.217667][ T9970] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[  294.225082][ T9970] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  294.233455][ T9970] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:429
[  294.307633][  T434] usb 4-1: device descriptor read/64, error -71
[  294.442455][  T434] usb usb4-port1: attempt power cycle
[  294.622893][ T9985] FAULT_INJECTION: forcing a failure.
[  294.622893][ T9985] name failslab, interval 1, probability 0, space 0, times 0
[  294.636208][ T9985] CPU: 1 UID: 0 PID: 9985 Comm: syz.5.3288 Not tainted 6.12.38-syzkaller-gc98acaeb71d4 #0 12f313afd6af6cbe2ef80fd9c185925320fe8e2c
[  294.636247][ T9985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  294.636262][ T9985] Call Trace:
[  294.636273][ T9985]  <TASK>
[  294.636282][ T9985]  __dump_stack+0x21/0x30
[  294.636308][ T9985]  dump_stack_lvl+0x10c/0x190
[  294.636379][ T9985]  ? __cfi_dump_stack_lvl+0x10/0x10
[  294.636402][ T9985]  dump_stack+0x19/0x20
[  294.636421][ T9985]  should_fail_ex+0x3d9/0x530
[  294.636444][ T9985]  should_failslab+0xac/0x100
[  294.636471][ T9985]  __kmalloc_cache_noprof+0x41/0x3c0
[  294.636495][ T9985]  ? __kasan_check_write+0x18/0x20
[  294.636516][ T9985]  ? do_proc_control+0x24b/0xfd0
[  294.636537][ T9985]  ? usb_alloc_urb+0x9b/0x200
[  294.636559][ T9985]  do_proc_control+0x24b/0xfd0
[  294.636581][ T9985]  proc_control+0xc9/0x120
[  294.636598][ T9985]  ? destroy_async+0x210/0x210
[  294.636616][ T9985]  ? mutex_lock+0x92/0x1c0
[  294.636642][ T9985]  ? __cfi_vfs_write+0x10/0x10
[  294.636665][ T9985]  usbdev_ioctl+0xc5b/0x20a0
[  294.636684][ T9985]  ? __cfi_usbdev_ioctl+0x10/0x10
[  294.636701][ T9985]  ? __fget_files+0x2c5/0x340
[  294.636727][ T9985]  ? bpf_lsm_file_ioctl+0xd/0x20
[  294.636748][ T9985]  ? security_file_ioctl+0x34/0xd0
[  294.636775][ T9985]  ? __cfi_usbdev_ioctl+0x10/0x10
[  294.636791][ T9985]  __se_sys_ioctl+0x132/0x1b0
[  294.636807][ T9985]  __x64_sys_ioctl+0x7f/0xa0
[  294.636823][ T9985]  x64_sys_call+0x1878/0x2ee0
[  294.636845][ T9985]  do_syscall_64+0x58/0xf0
[  294.636866][ T9985]  ? clear_bhb_loop+0x50/0xa0
[  294.636882][ T9985]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  294.636907][ T9985] RIP: 0033:0x7f7a23d8eb69
[  294.636922][ T9985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  294.636936][ T9985] RSP: 002b:00007f7a24c30038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  294.636955][ T9985] RAX: ffffffffffffffda RBX: 00007f7a23fb5fa0 RCX: 00007f7a23d8eb69
[  294.636968][ T9985] RDX: 0000200000000040 RSI: 00000000c0185500 RDI: 0000000000000003
[  294.636980][ T9985] RBP: 00007f7a24c30090 R08: 0000000000000000 R09: 0000000000000000
[  294.636991][ T9985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  294.637002][ T9985] R13: 0000000000000000 R14: 00007f7a23fb5fa0 R15: 00007fffb8d43d18
[  294.637016][ T9985]  </TASK>
[  294.817770][  T434] usb 4-1: new full-speed USB device number 44 using dummy_hcd
[  294.951052][  T434] usb 4-1: device descriptor read/8, error -71
[  295.081196][  T434] usb 4-1: device descriptor read/8, error -71
[  295.327685][ T5406] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  295.327698][ T3691] Bluetooth: hci0: command 0x1003 tx timeout
[  295.340299][  T434] usb 4-1: new full-speed USB device number 45 using dummy_hcd
[  295.379588][  T434] usb 4-1: device descriptor read/8, error -71
[  295.542344][  T434] usb 4-1: device descriptor read/8, error -71
[  295.650780][T10001] veth0_vlan: entered allmulticast mode
[  295.661735][T10002] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:296
[  295.667700][  T434] usb usb4-port1: unable to enumerate USB device
[  295.791910][T10006] FAULT_INJECTION: forcing a failure.
[  295.791910][T10006] name failslab, interval 1, probability 0, space 0, times 0
[  295.806280][T10006] CPU: 1 UID: 0 PID: 10006 Comm: syz.3.3297 Not tainted 6.12.38-syzkaller-gc98acaeb71d4 #0 12f313afd6af6cbe2ef80fd9c185925320fe8e2c
[  295.806324][T10006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  295.806341][T10006] Call Trace:
[  295.806349][T10006]  <TASK>
[  295.806359][T10006]  __dump_stack+0x21/0x30
[  295.806394][T10006]  dump_stack_lvl+0x10c/0x190
[  295.806424][T10006]  ? __cfi_dump_stack_lvl+0x10/0x10
[  295.806455][T10006]  dump_stack+0x19/0x20
[  295.806483][T10006]  should_fail_ex+0x3d9/0x530
[  295.806515][T10006]  should_failslab+0xac/0x100
[  295.806549][T10006]  __kmalloc_noprof+0x69/0x450
[  295.806580][T10006]  ? usb_alloc_urb+0x5f/0x200
[  295.806610][T10006]  usb_alloc_urb+0x5f/0x200
[  295.806637][T10006]  ? do_proc_control+0x1e9/0xfd0
[  295.806665][T10006]  do_proc_control+0x1fe/0xfd0
[  295.806696][T10006]  proc_control+0xc9/0x120
[  295.806721][T10006]  ? destroy_async+0x210/0x210
[  295.806745][T10006]  ? mutex_lock+0x92/0x1c0
[  295.806782][T10006]  ? __cfi_vfs_write+0x10/0x10
[  295.806815][T10006]  usbdev_ioctl+0xc5b/0x20a0
[  295.806842][T10006]  ? __cfi_usbdev_ioctl+0x10/0x10
[  295.806867][T10006]  ? __fget_files+0x2c5/0x340
[  295.806904][T10006]  ? bpf_lsm_file_ioctl+0xd/0x20
[  295.806934][T10006]  ? security_file_ioctl+0x34/0xd0
[  295.806970][T10006]  ? __cfi_usbdev_ioctl+0x10/0x10
[  295.807002][T10006]  __se_sys_ioctl+0x132/0x1b0
[  295.807026][T10006]  __x64_sys_ioctl+0x7f/0xa0
[  295.807047][T10006]  x64_sys_call+0x1878/0x2ee0
[  295.807080][T10006]  do_syscall_64+0x58/0xf0
[  295.807110][T10006]  ? clear_bhb_loop+0x50/0xa0
[  295.807133][T10006]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  295.807168][T10006] RIP: 0033:0x7f46ffb8eb69
[  295.807189][T10006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  295.807209][T10006] RSP: 002b:00007f4700a9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  295.807236][T10006] RAX: ffffffffffffffda RBX: 00007f46ffdb5fa0 RCX: 00007f46ffb8eb69
[  295.807256][T10006] RDX: 0000200000000040 RSI: 00000000c0185500 RDI: 0000000000000003
[  295.807279][T10006] RBP: 00007f4700a9d090 R08: 0000000000000000 R09: 0000000000000000
[  295.807297][T10006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  295.807313][T10006] R13: 0000000000000000 R14: 00007f46ffdb5fa0 R15: 00007ffc2cacf108
[  295.807335][T10006]  </TASK>
[  296.201250][  T329] Bluetooth: hci0: Frame reassembly failed (-84)
[  296.211726][T10008] kvm: pic: non byte read
[  296.217339][T10008] kvm: pic: single mode not supported
[  296.218589][T10008] kvm: pic: level sensitive irq not supported
[  296.224506][T10008] kvm: pic: level sensitive irq not supported
[  296.231957][T10008] kvm: pic: single mode not supported
[  296.238138][T10008] kvm: pic: level sensitive irq not supported
[  296.244313][T10008] kvm: pic: single mode not supported
[  296.251189][T10008] kvm: pic: level sensitive irq not supported
[  296.256835][T10008] kvm: pic: level sensitive irq not supported
[  296.263769][T10008] kvm: pic: single mode not supported
[  296.269908][T10008] kvm: pic: level sensitive irq not supported
[  296.275835][T10008] kvm: pic: level sensitive irq not supported
[  296.282551][T10008] kvm: pic: single mode not supported
[  296.289164][T10008] kvm: pic: single mode not supported
[  296.294663][T10008] kvm: pic: single mode not supported
[  296.300098][T10008] kvm: pic: level sensitive irq not supported
[  296.305803][T10008] kvm: pic: single mode not supported
[  296.312007][T10008] kvm: pic: level sensitive irq not supported
[  296.317769][T10008] kvm: pic: single mode not supported
[  296.323860][T10008] kvm: pic: level sensitive irq not supported
[  296.329652][T10008] kvm: pic: single mode not supported
[  296.517660][   T36] kauditd_printk_skb: 524 callbacks suppressed
[  296.517685][   T36] audit: type=1400 audit(1753988900.446:9581): avc:  denied  { read write } for  pid=10007 comm="syz.3.3299" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  296.554116][   T36] audit: type=1400 audit(1753988900.446:9582): avc:  denied  { read write open } for  pid=10007 comm="syz.3.3299" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  296.578803][   T36] audit: type=1400 audit(1753988900.446:9583): avc:  denied  { ioctl } for  pid=10007 comm="syz.3.3299" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  296.604098][   T36] audit: type=1400 audit(1753988900.456:9584): avc:  denied  { ioctl } for  pid=10007 comm="syz.3.3299" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  296.629379][   T36] audit: type=1400 audit(1753988900.456:9585): avc:  denied  { ioctl } for  pid=10007 comm="syz.3.3299" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  296.654621][   T36] audit: type=1400 audit(1753988900.456:9586): avc:  denied  { ioctl } for  pid=10007 comm="syz.3.3299" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  296.679974][   T36] audit: type=1400 audit(1753988900.526:9587): avc:  denied  { setopt } for  pid=10016 comm="syz.5.3301" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  296.700820][   T36] audit: type=1400 audit(1753988900.526:9588): avc:  denied  { create } for  pid=10016 comm="syz.5.3301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  296.721555][   T36] audit: type=1400 audit(1753988900.526:9589): avc:  denied  { getopt } for  pid=10016 comm="syz.5.3301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  296.741823][   T36] audit: type=1400 audit(1753988900.566:9590): avc:  denied  { ioctl } for  pid=10007 comm="syz.3.3299" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  296.777718][   T10] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  296.927728][   T10] usb 4-1: Using ep0 maxpacket: 16
[  296.936765][   T10] usb 4-1: unable to get BOS descriptor or descriptor too short
[  296.946481][   T10] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  296.955536][   T10] usb 4-1: config 1 has no interface number 1
[  296.962496][   T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  296.975738][   T10] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 7
[  296.987425][   T10] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 9205, setting to 1024
[  297.004118][   T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  297.013397][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  297.021913][   T10] usb 4-1: Product: syz
[  297.026173][   T10] usb 4-1: Manufacturer: syz
[  297.030853][   T10] usb 4-1: SerialNumber: syz
[  297.756643][T10035] FAULT_INJECTION: forcing a failure.
[  297.756643][T10035] name failslab, interval 1, probability 0, space 0, times 0
[  297.769666][T10035] CPU: 1 UID: 0 PID: 10035 Comm: syz.4.3307 Not tainted 6.12.38-syzkaller-gc98acaeb71d4 #0 12f313afd6af6cbe2ef80fd9c185925320fe8e2c
[  297.769709][T10035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  297.769725][T10035] Call Trace:
[  297.769734][T10035]  <TASK>
[  297.769744][T10035]  __dump_stack+0x21/0x30
[  297.769783][T10035]  dump_stack_lvl+0x10c/0x190
[  297.769815][T10035]  ? __cfi_dump_stack_lvl+0x10/0x10
[  297.769926][T10035]  dump_stack+0x19/0x20
[  297.769968][T10035]  should_fail_ex+0x3d9/0x530
[  297.770000][T10035]  should_failslab+0xac/0x100
[  297.770036][T10035]  kmem_cache_alloc_noprof+0x42/0x3a0
[  297.770062][T10035]  ? getname_flags+0xc6/0x710
[  297.770094][T10035]  getname_flags+0xc6/0x710
[  297.770125][T10035]  ? build_open_flags+0x487/0x600
[  297.770152][T10035]  getname+0x1b/0x30
[  297.770184][T10035]  do_sys_openat2+0xcb/0x1c0
[  297.770273][T10035]  ? fput+0x1a5/0x240
[  297.770294][T10035]  ? do_sys_open+0x100/0x100
[  297.770386][T10035]  ? ksys_write+0x1ef/0x250
[  297.770417][T10035]  ? __cfi_ksys_write+0x10/0x10
[  297.770446][T10035]  __x64_sys_open+0x120/0x150
[  297.770466][T10035]  x64_sys_call+0x131a/0x2ee0
[  297.770494][T10035]  do_syscall_64+0x58/0xf0
[  297.770534][T10035]  ? clear_bhb_loop+0x50/0xa0
[  297.770555][T10035]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  297.770587][T10035] RIP: 0033:0x7f73cbf8eb69
[  297.770603][T10035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  297.770618][T10035] RSP: 002b:00007f73ccd9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  297.770640][T10035] RAX: ffffffffffffffda RBX: 00007f73cc1b5fa0 RCX: 00007f73cbf8eb69
[  297.770661][T10035] RDX: 0000000000000010 RSI: 0000000000101000 RDI: 00002000000000c0
[  297.770678][T10035] RBP: 00007f73ccd9e090 R08: 0000000000000000 R09: 0000000000000000
[  297.770695][T10035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  297.770726][T10035] R13: 0000000000000000 R14: 00007f73cc1b5fa0 R15: 00007ffcde47efd8
[  297.770741][T10035]  </TASK>
[  298.050916][T10038] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  298.050945][T10038] rust_binder: Read failure Err(EFAULT) in pid:451
[  298.059756][T10038] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[  298.076701][T10038] rust_binder: Write failure EINVAL in pid:451
[  298.140731][T10043] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  298.202492][T10044] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:456
[  298.209450][ T5406] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  298.209802][ T3691] Bluetooth: hci0: command 0x1003 tx timeout
[  298.587421][T10070] FAULT_INJECTION: forcing a failure.
[  298.587421][T10070] name failslab, interval 1, probability 0, space 0, times 0
[  298.600619][T10070] CPU: 0 UID: 0 PID: 10070 Comm: syz.0.3318 Not tainted 6.12.38-syzkaller-gc98acaeb71d4 #0 12f313afd6af6cbe2ef80fd9c185925320fe8e2c
[  298.600660][T10070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  298.600676][T10070] Call Trace:
[  298.600685][T10070]  <TASK>
[  298.600695][T10070]  __dump_stack+0x21/0x30
[  298.600734][T10070]  dump_stack_lvl+0x10c/0x190
[  298.600762][T10070]  ? __cfi_dump_stack_lvl+0x10/0x10
[  298.600805][T10070]  dump_stack+0x19/0x20
[  298.600832][T10070]  should_fail_ex+0x3d9/0x530
[  298.600868][T10070]  should_failslab+0xac/0x100
[  298.600901][T10070]  __kmalloc_noprof+0x69/0x450
[  298.600929][T10070]  ? usb_alloc_urb+0x5f/0x200
[  298.600957][T10070]  usb_alloc_urb+0x5f/0x200
[  298.600981][T10070]  ? do_proc_control+0x1e9/0xfd0
[  298.601011][T10070]  do_proc_control+0x1fe/0xfd0
[  298.601040][T10070]  proc_control+0xc9/0x120
[  298.601064][T10070]  ? destroy_async+0x210/0x210
[  298.601093][T10070]  ? mutex_lock+0x92/0x1c0
[  298.601127][T10070]  ? __cfi_vfs_write+0x10/0x10
[  298.601159][T10070]  usbdev_ioctl+0xc5b/0x20a0
[  298.601185][T10070]  ? __cfi_usbdev_ioctl+0x10/0x10
[  298.601208][T10070]  ? __fget_files+0x2c5/0x340
[  298.601244][T10070]  ? bpf_lsm_file_ioctl+0xd/0x20
[  298.601272][T10070]  ? security_file_ioctl+0x34/0xd0
[  298.601308][T10070]  ? __cfi_usbdev_ioctl+0x10/0x10
[  298.601331][T10070]  __se_sys_ioctl+0x132/0x1b0
[  298.601353][T10070]  __x64_sys_ioctl+0x7f/0xa0
[  298.601373][T10070]  x64_sys_call+0x1878/0x2ee0
[  298.601404][T10070]  do_syscall_64+0x58/0xf0
[  298.601433][T10070]  ? clear_bhb_loop+0x50/0xa0
[  298.601455][T10070]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  298.601488][T10070] RIP: 0033:0x7fc4b0b8eb69
[  298.601509][T10070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  298.601529][T10070] RSP: 002b:00007fc4b1a45038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  298.601556][T10070] RAX: ffffffffffffffda RBX: 00007fc4b0db5fa0 RCX: 00007fc4b0b8eb69
[  298.601575][T10070] RDX: 0000200000000040 RSI: 00000000c0185500 RDI: 0000000000000003
[  298.601592][T10070] RBP: 00007fc4b1a45090 R08: 0000000000000000 R09: 0000000000000000
[  298.601607][T10070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  298.601623][T10070] R13: 0000000000000000 R14: 00007fc4b0db5fa0 R15: 00007ffe03761b78
[  298.601644][T10070]  </TASK>
[  298.889256][  T328] Bluetooth: hci0: Frame reassembly failed (-84)
[  298.899947][  T328] Bluetooth: hci0: Frame reassembly failed (-84)
[  298.907358][  T328] Bluetooth: hci0: Frame reassembly failed (-84)
[  299.063010][T10076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3322'.
[  299.185755][   T10] usb 4-1: found format II with max.bitrate = 2, frame size=16
[  299.199591][   T10] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  299.215645][   T10] usb 4-1: USB disconnect, device number 46
[  299.414201][ T5727] udevd[5727]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  299.601033][T10095] rust_binder: Read failure Err(EFAULT) in pid:445
[  299.735364][T10118] rust_binder: Write failure EFAULT in pid:449
[  299.750825][T10118] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=59 sclass=netlink_xfrm_socket pid=10118 comm=syz.3.3335
[  300.609555][T10140] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2856151591 (22849212728 ns) > initial count (5743301600 ns). Using initial count to start timer.
[  300.628205][T10140] kvm: Disabled LAPIC found during irq injection
[  300.689292][T10140] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  300.927612][ T5406] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  300.927617][ T3691] Bluetooth: hci0: command 0x1003 tx timeout
[  301.187102][T10162] overlayfs: failed to clone upperpath
[  301.243996][T10152] rust_binder: Read failure Err(EFAULT) in pid:412
[  301.488504][  T329] Bluetooth: hci0: Frame reassembly failed (-84)
[  301.546013][   T36] kauditd_printk_skb: 417 callbacks suppressed
[  301.546035][   T36] audit: type=1400 audit(1753988905.476:10008): avc:  denied  { map } for  pid=10179 comm="syz.5.3363" path="/153" dev="tmpfs" ino=885 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  301.578565][   T36] audit: type=1400 audit(1753988905.476:10009): avc:  denied  { create } for  pid=10179 comm="syz.5.3363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  301.599613][   T36] audit: type=1400 audit(1753988905.496:10010): avc:  denied  { write } for  pid=10172 comm="syz.0.3360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  301.627605][   T36] audit: type=1400 audit(1753988905.496:10011): avc:  denied  { read } for  pid=10172 comm="syz.0.3360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  301.677856][   T36] audit: type=1400 audit(1753988905.496:10012): avc:  denied  { read } for  pid=10172 comm="syz.0.3360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  301.719549][   T36] audit: type=1400 audit(1753988905.496:10013): avc:  denied  { write } for  pid=10172 comm="syz.0.3360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  301.741146][   T36] audit: type=1400 audit(1753988905.536:10014): avc:  denied  { read write } for  pid=7309 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  301.766933][   T36] audit: type=1400 audit(1753988905.536:10015): avc:  denied  { read write open } for  pid=7309 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  301.792414][   T36] audit: type=1400 audit(1753988905.536:10016): avc:  denied  { ioctl } for  pid=7309 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  301.825818][   T36] audit: type=1400 audit(1753988905.756:10017): avc:  denied  { create } for  pid=10182 comm="syz.0.3364" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  301.899602][T10189] FAULT_INJECTION: forcing a failure.
[  301.899602][T10189] name failslab, interval 1, probability 0, space 0, times 0
[  301.912825][T10189] CPU: 0 UID: 0 PID: 10189 Comm: syz.0.3365 Not tainted 6.12.38-syzkaller-gc98acaeb71d4 #0 12f313afd6af6cbe2ef80fd9c185925320fe8e2c
[  301.912869][T10189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  301.912885][T10189] Call Trace:
[  301.912893][T10189]  <TASK>
[  301.912903][T10189]  __dump_stack+0x21/0x30
[  301.912939][T10189]  dump_stack_lvl+0x10c/0x190
[  301.912969][T10189]  ? __cfi_dump_stack_lvl+0x10/0x10
[  301.913000][T10189]  dump_stack+0x19/0x20
[  301.913027][T10189]  should_fail_ex+0x3d9/0x530
[  301.913060][T10189]  should_failslab+0xac/0x100
[  301.913097][T10189]  __kmalloc_cache_noprof+0x41/0x3c0
[  301.913130][T10189]  ? __kasan_check_write+0x18/0x20
[  301.913160][T10189]  ? do_proc_control+0x24b/0xfd0
[  301.913189][T10189]  ? usb_alloc_urb+0x9b/0x200
[  301.913218][T10189]  do_proc_control+0x24b/0xfd0
[  301.913248][T10189]  proc_control+0xc9/0x120
[  301.913275][T10189]  ? destroy_async+0x210/0x210
[  301.913299][T10189]  ? mutex_lock+0x92/0x1c0
[  301.913348][T10189]  ? __cfi_vfs_write+0x10/0x10
[  301.913383][T10189]  usbdev_ioctl+0xc5b/0x20a0
[  301.913409][T10189]  ? __cfi_usbdev_ioctl+0x10/0x10
[  301.913434][T10189]  ? __fget_files+0x2c5/0x340
[  301.913472][T10189]  ? bpf_lsm_file_ioctl+0xd/0x20
[  301.913502][T10189]  ? security_file_ioctl+0x34/0xd0
[  301.913539][T10189]  ? __cfi_usbdev_ioctl+0x10/0x10
[  301.913564][T10189]  __se_sys_ioctl+0x132/0x1b0
[  301.913587][T10189]  __x64_sys_ioctl+0x7f/0xa0
[  301.913608][T10189]  x64_sys_call+0x1878/0x2ee0
[  301.913641][T10189]  do_syscall_64+0x58/0xf0
[  301.913670][T10189]  ? clear_bhb_loop+0x50/0xa0
[  301.913693][T10189]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  301.913728][T10189] RIP: 0033:0x7fc4b0b8eb69
[  301.913749][T10189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  301.913771][T10189] RSP: 002b:00007fc4b1a45038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  301.913798][T10189] RAX: ffffffffffffffda RBX: 00007fc4b0db5fa0 RCX: 00007fc4b0b8eb69
[  301.913817][T10189] RDX: 0000200000000040 RSI: 00000000c0185500 RDI: 0000000000000003
[  301.913834][T10189] RBP: 00007fc4b1a45090 R08: 0000000000000000 R09: 0000000000000000
[  301.913852][T10189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  301.913868][T10189] R13: 0000000000000000 R14: 00007fc4b0db5fa0 R15: 00007ffe03761b78
[  301.913889][T10189]  </TASK>
[  302.535849][T10217] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3376'.
[  302.554337][T10219] incfs: Options parsing error. -22
[  302.567106][T10219] incfs: mount failed -22
[  302.615679][T10220] overlayfs: maximum fs stacking depth exceeded
[  303.567627][ T3691] Bluetooth: hci0: command 0x1003 tx timeout
[  303.567626][ T5406] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  303.682152][T10278] overlay: Unknown parameter 'mask'
[  303.689020][  T328] Bluetooth: hci0: Frame reassembly failed (-84)
[  303.901927][T10294] fuse: Invalid gid '00000000000037777777777'
[  303.947644][   T64] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  304.102093][   T64] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  304.117831][   T64] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  304.134657][   T64] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  304.148880][   T64] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  304.158237][   T64] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.168644][   T64] usb 4-1: config 0 descriptor??
[  304.559739][T10302] netlink: 140 bytes leftover after parsing attributes in process `syz.5.3410'.
[  304.787640][   T64] usbhid 4-1:0.0: can't add hid device: -71
[  304.800422][   T64] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  304.815846][   T64] usb 4-1: USB disconnect, device number 47
[  305.602520][T10312] incfs: Options parsing error. -22
[  305.609284][T10312] incfs: mount failed -22
[  305.609627][T10311] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  305.727669][ T5406] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  305.730293][ T3691] Bluetooth: hci0: command 0x1003 tx timeout
[  305.758995][  T329] Bluetooth: hci0: Frame reassembly failed (-84)
[  305.842937][T10311] rust_binder: Read failure Err(EFAULT) in pid:480
[  306.433649][T10344] 9pnet: Could not find request transport: xen
[  306.852911][   T36] kauditd_printk_skb: 356 callbacks suppressed
[  306.852933][   T36] audit: type=1400 audit(1753988910.786:10374): avc:  denied  { mounton } for  pid=10361 comm="syz.5.3434" path="/204/file0" dev="tmpfs" ino=1181 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  306.853299][T10362] fuse: Bad value for 'fd'
[  307.167802][   T36] audit: type=1400 audit(1753988911.106:10375): avc:  denied  { unmount } for  pid=8109 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  307.209355][   T36] audit: type=1400 audit(1753988911.146:10376): avc:  denied  { read write } for  pid=8109 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  307.249865][   T36] audit: type=1400 audit(1753988911.146:10377): avc:  denied  { read write open } for  pid=8109 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  307.282805][   T36] audit: type=1400 audit(1753988911.146:10378): avc:  denied  { ioctl } for  pid=8109 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  307.315553][   T36] audit: type=1400 audit(1753988911.176:10379): avc:  denied  { read write } for  pid=10364 comm="syz.3.3435" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  307.351841][   T36] audit: type=1400 audit(1753988911.176:10380): avc:  denied  { read write open } for  pid=10364 comm="syz.3.3435" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  307.384789][   T36] audit: type=1400 audit(1753988911.176:10381): avc:  denied  { ioctl } for  pid=10364 comm="syz.3.3435" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  307.421433][   T36] audit: type=1400 audit(1753988911.176:10382): avc:  denied  { ioctl } for  pid=10364 comm="syz.3.3435" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  307.457940][   T36] audit: type=1400 audit(1753988911.186:10383): avc:  denied  { ioctl } for  pid=10364 comm="syz.3.3435" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  307.517750][   T64] usb 4-1: new full-speed USB device number 48 using dummy_hcd
[  307.687657][   T64] usb 4-1: not running at top speed; connect to a high speed hub
[  307.703428][   T64] usb 4-1: config 5 has an invalid interface number: 166 but max is 3
[  307.712952][   T64] usb 4-1: config 5 contains an unexpected descriptor of type 0x1, skipping
[  307.723328][   T64] usb 4-1: config 5 has an invalid interface number: 75 but max is 3
[  307.732366][   T64] usb 4-1: config 5 has an invalid interface number: 230 but max is 3
[  307.748831][   T64] usb 4-1: config 5 has an invalid interface number: 100 but max is 3
[  307.758901][   T64] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[  307.773506][   T64] usb 4-1: config 5 has 5 interfaces, different from the descriptor's value: 4
[  307.788952][   T64] usb 4-1: config 5 has no interface number 0
[  307.796180][   T64] usb 4-1: config 5 has no interface number 1
[  307.807610][ T5406] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  307.807614][ T3691] Bluetooth: hci0: command 0x1003 tx timeout
[  307.810876][   T64] usb 4-1: config 5 has no interface number 3
[  307.854728][   T64] usb 4-1: config 5 has no interface number 4
[  307.868440][   T64] usb 4-1: config 5 interface 166 altsetting 1 endpoint 0xF has invalid maxpacket 512, setting to 64
[  307.887630][   T64] usb 4-1: config 5 interface 166 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  307.903856][   T64] usb 4-1: config 5 interface 166 altsetting 1 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[  307.918609][   T64] usb 4-1: config 5 interface 166 altsetting 1 endpoint 0x5 has invalid maxpacket 512, setting to 64
[  307.933720][   T64] usb 4-1: config 5 interface 166 altsetting 1 endpoint 0x83 has an invalid bInterval 27, changing to 4
[  307.953815][   T64] usb 4-1: config 5 interface 166 altsetting 1 has a duplicate endpoint with address 0xF, skipping
[  307.969032][   T64] usb 4-1: config 5 interface 166 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  307.994459][   T64] usb 4-1: config 5 interface 166 altsetting 1 endpoint 0xC has invalid maxpacket 512, setting to 64
[  308.010790][   T64] usb 4-1: config 5 interface 2 altsetting 0 endpoint 0x8A has invalid maxpacket 512, setting to 64
[  308.025295][   T64] usb 4-1: config 5 interface 2 altsetting 0 has a duplicate endpoint with address 0x5, skipping
[  308.040531][   T64] usb 4-1: config 5 interface 2 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64
[  308.054775][   T64] usb 4-1: config 5 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  308.069906][   T64] usb 4-1: config 5 interface 2 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[  308.084560][   T64] usb 4-1: config 5 interface 2 altsetting 0 has a duplicate endpoint with address 0xE, skipping
[  308.098705][   T64] usb 4-1: config 5 interface 2 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64
[  308.115367][   T64] usb 4-1: config 5 interface 2 altsetting 0 has a duplicate endpoint with address 0xC, skipping
[  308.132563][   T64] usb 4-1: config 5 interface 2 altsetting 0 has a duplicate endpoint with address 0xA, skipping
[  308.147143][   T64] usb 4-1: config 5 interface 2 altsetting 0 has a duplicate endpoint with address 0xD, skipping
[  308.161804][   T64] usb 4-1: config 5 interface 2 altsetting 0 has a duplicate endpoint with address 0x9, skipping
[  308.175789][T10379] TCP: TCP_TX_DELAY enabled
[  308.182056][T10379] fuse: Unknown parameter 'g��s'
[  308.185457][   T64] usb 4-1: config 5 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  308.205613][   T64] usb 4-1: config 5 interface 75 altsetting 151 has a duplicate endpoint with address 0x5, skipping
[  308.223303][   T64] usb 4-1: config 5 interface 75 altsetting 151 has a duplicate endpoint with address 0x8, skipping
[  308.237809][   T64] usb 4-1: config 5 interface 75 altsetting 151 has a duplicate endpoint with address 0xE, skipping
[  308.251954][   T64] usb 4-1: config 5 interface 75 altsetting 151 endpoint 0xB has invalid maxpacket 1024, setting to 64
[  308.274402][T10373] rust_binder: Read failure Err(EFAULT) in pid:444
[  308.274959][   T64] usb 4-1: config 5 interface 75 altsetting 151 has a duplicate endpoint with address 0xF, skipping
[  308.326832][   T64] usb 4-1: config 5 interface 75 altsetting 151 has a duplicate endpoint with address 0x4, skipping
[  308.344248][   T64] usb 4-1: config 5 interface 230 altsetting 0 has a duplicate endpoint with address 0xA, skipping
[  308.363513][   T64] usb 4-1: config 5 interface 230 altsetting 0 has a duplicate endpoint with address 0x8, skipping
[  308.383511][   T64] usb 4-1: config 5 interface 230 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  308.398219][   T64] usb 4-1: config 5 interface 230 altsetting 0 has a duplicate endpoint with address 0x8, skipping
[  308.411943][   T64] usb 4-1: config 5 interface 230 altsetting 0 has a duplicate endpoint with address 0xE, skipping
[  308.425481][   T64] usb 4-1: config 5 interface 230 altsetting 0 has an endpoint descriptor with address 0x1E, changing to 0xE
[  308.440125][   T64] usb 4-1: config 5 interface 230 altsetting 0 has a duplicate endpoint with address 0xE, skipping
[  308.454982][   T64] usb 4-1: config 5 interface 230 altsetting 0 has a duplicate endpoint with address 0x4, skipping
[  308.469106][   T64] usb 4-1: config 5 interface 230 altsetting 0 has a duplicate endpoint with address 0x3, skipping
[  308.482374][   T64] usb 4-1: config 5 interface 230 altsetting 0 has 8 endpoint descriptors, different from the interface descriptor's value: 11
[  308.497989][   T64] usb 4-1: config 5 interface 100 altsetting 185 has an endpoint descriptor with address 0xBF, changing to 0x8F
[  308.515056][   T64] usb 4-1: config 5 interface 100 altsetting 185 has a duplicate endpoint with address 0x8F, skipping
[  308.530464][   T64] usb 4-1: config 5 interface 100 altsetting 185 has 1 endpoint descriptor, different from the interface descriptor's value: 7
[  308.548282][   T64] usb 4-1: config 5 interface 166 has no altsetting 0
[  308.556138][   T64] usb 4-1: config 5 interface 75 has no altsetting 0
[  308.563989][   T64] usb 4-1: config 5 interface 100 has no altsetting 0
[  308.584565][   T64] usb 4-1: Dual-Role OTG device on HNP port
[  308.595077][   T64] usb 4-1: New USB device found, idVendor=12d1, idProduct=3f61, bcdDevice=e3.ba
[  308.614843][   T64] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.626429][   T64] usb 4-1: Product: げ
[  308.632747][   T64] usb 4-1: Manufacturer:  
[  308.639641][   T64] usb 4-1: SerialNumber: 䀁
[  308.648460][   T64] usb 4-1: Interface #166 referenced by multiple IADs
[  308.659882][T10365] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  308.911557][   T64] usb 4-1: USB disconnect, device number 48
[  309.491682][T10431] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  309.646624][T10442] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10442 comm=syz.3.3465
[  309.732943][T10431] rust_binder: Read failure Err(EFAULT) in pid:503
[  309.904885][T10454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3470'.
[  309.932238][  T333] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  309.949422][  T333] hid-generic 0000:0000:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  310.221432][  T329] Bluetooth: hci0: Frame reassembly failed (-84)
[  310.872007][T10479] netlink: 'syz.4.3482': attribute type 28 has an invalid length.
[  311.016643][T10487] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  311.231474][T10487] rust_binder: Read failure Err(EFAULT) in pid:519
[  311.876546][   T36] kauditd_printk_skb: 321 callbacks suppressed
[  311.876570][   T36] audit: type=1400 audit(1753988915.806:10705): avc:  denied  { map } for  pid=10520 comm="syz.5.3499" path="/245" dev="tmpfs" ino=1404 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  311.921590][   T36] audit: type=1400 audit(1753988915.816:10706): avc:  denied  { create } for  pid=10520 comm="syz.5.3499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  312.287606][ T5406] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  312.287616][ T3661] Bluetooth: hci0: command 0x1003 tx timeout
[  312.290949][   T36] audit: type=1400 audit(1753988916.226:10707): avc:  denied  { read write } for  pid=7309 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  312.339567][   T36] audit: type=1400 audit(1753988916.276:10708): avc:  denied  { read write open } for  pid=7309 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  312.374256][   T36] audit: type=1400 audit(1753988916.276:10709): avc:  denied  { ioctl } for  pid=7309 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  312.415989][   T36] audit: type=1400 audit(1753988916.286:10710): avc:  denied  { read write } for  pid=8109 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  312.508087][   T36] audit: type=1400 audit(1753988916.286:10711): avc:  denied  { read write open } for  pid=8109 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  312.608307][   T36] audit: type=1400 audit(1753988916.286:10712): avc:  denied  { ioctl } for  pid=8109 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  312.642002][   T36] audit: type=1400 audit(1753988916.366:10713): avc:  denied  { create } for  pid=10523 comm="syz.3.3501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  312.670897][   T36] audit: type=1400 audit(1753988916.366:10714): avc:  denied  { connect } for  pid=10523 comm="syz.3.3501" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  312.797642][   T45] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  312.985685][   T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  312.999413][   T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  313.010959][   T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  313.030173][   T45] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  313.045475][   T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  313.059882][   T45] usb 4-1: config 0 descriptor??
[  313.488011][ T3691] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  313.527788][   T45] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving
[  313.572851][   T45] plantronics 0003:047F:FFFF.000C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  314.957646][   T64] usb 4-1: reset high-speed USB device number 49 using dummy_hcd
[  315.629694][  T328] Bluetooth: hci0: Frame reassembly failed (-84)
[  315.637432][  T328] Bluetooth: hci0: Frame reassembly failed (-84)
[  316.368154][   T45] usb 4-1: USB disconnect, device number 49
[  316.774401][T10630] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  316.995637][T10630] rust_binder: Read failure Err(EFAULT) in pid:536
[  317.025424][   T36] kauditd_printk_skb: 222 callbacks suppressed
[  317.025448][   T36] audit: type=1400 audit(1753988920.956:10937): avc:  denied  { read write } for  pid=7721 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  317.140725][   T36] audit: type=1400 audit(1753988920.956:10938): avc:  denied  { read write open } for  pid=7721 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  317.205356][   T36] audit: type=1400 audit(1753988920.956:10939): avc:  denied  { ioctl } for  pid=7721 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  317.244234][   T36] audit: type=1400 audit(1753988921.066:10940): avc:  denied  { read write } for  pid=7721 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  317.275045][   T36] audit: type=1400 audit(1753988921.066:10941): avc:  denied  { read write open } for  pid=7721 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  317.308361][   T36] audit: type=1400 audit(1753988921.066:10942): avc:  denied  { ioctl } for  pid=7721 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  317.338727][   T36] audit: type=1400 audit(1753988921.136:10943): avc:  denied  { read } for  pid=10635 comm="syz.4.3546" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  317.364950][   T36] audit: type=1400 audit(1753988921.136:10944): avc:  denied  { read open } for  pid=10635 comm="syz.4.3546" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  317.393099][   T36] audit: type=1400 audit(1753988921.136:10945): avc:  denied  { read write } for  pid=10635 comm="syz.4.3546" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  317.424492][   T36] audit: type=1400 audit(1753988921.136:10946): avc:  denied  { read write open } for  pid=10635 comm="syz.4.3546" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  317.647697][ T5406] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  317.647729][ T3691] Bluetooth: hci0: command 0x1003 tx timeout
[  317.987720][  T333] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  318.164935][  T333] usb 4-1: config index 0 descriptor too short (expected 4114, got 18)
[  318.180410][  T333] usb 4-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94
[  318.193517][  T333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  318.209814][  T333] usb 4-1: Product: syz
[  318.214287][  T333] usb 4-1: Manufacturer: syz
[  318.221069][  T333] usb 4-1: SerialNumber: syz
[  318.228813][  T333] usb 4-1: config 0 descriptor??
[  318.857666][  T333] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  319.035690][T10656] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  319.072946][  T333] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  319.097824][  T333] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  319.111473][  T333] asix 4-1:0.0: probe with driver asix failed with error -71
[  319.126204][  T333] usb 4-1: USB disconnect, device number 50
[  319.270144][T10656] rust_binder: Read failure Err(EFAULT) in pid:556
[  319.695118][  T328] Bluetooth: hci0: Frame reassembly failed (-84)
[  319.731080][T10683] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:567
[  319.815819][T10687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  320.046856][T10687] rust_binder: Read failure Err(EFAULT) in pid:571
[  320.298775][T10710] netlink: 'syz.4.3577': attribute type 1 has an invalid length.
[  320.540211][T10714] kvm: user requested TSC rate below hardware speed
[  320.549222][T10714] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer.
[  321.056877][T10732] netlink: 'syz.4.3586': attribute type 64 has an invalid length.
[  321.069473][T10732] incfs: Options parsing error. -22
[  321.076739][T10732] incfs: mount failed -22
[  321.707852][T10723] rust_binder: Read failure Err(EFAULT) in pid:482
[  321.727621][ T5406] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  321.740898][ T3691] Bluetooth: hci0: command 0x1003 tx timeout
[  321.780519][T10747] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  321.780565][T10747] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:485
[  321.964262][T10755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3597'.
[  322.028000][   T36] kauditd_printk_skb: 428 callbacks suppressed
[  322.028021][   T36] audit: type=1400 audit(1753988925.956:11375): avc:  denied  { create } for  pid=10756 comm="syz.0.3596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  322.057934][   T36] audit: type=1400 audit(1753988925.966:11376): avc:  denied  { write } for  pid=10756 comm="syz.0.3596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  322.083628][   T36] audit: type=1400 audit(1753988925.966:11377): avc:  denied  { read } for  pid=10756 comm="syz.0.3596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  322.107654][   T36] audit: type=1400 audit(1753988925.966:11378): avc:  denied  { create } for  pid=10756 comm="syz.0.3596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  322.137068][   T36] audit: type=1400 audit(1753988925.966:11379): avc:  denied  { write } for  pid=10756 comm="syz.0.3596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  322.173297][   T36] audit: type=1400 audit(1753988925.966:11380): avc:  denied  { read } for  pid=10756 comm="syz.0.3596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  322.205134][   T36] audit: type=1400 audit(1753988925.966:11381): avc:  denied  { create } for  pid=10756 comm="syz.0.3596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  322.255392][   T36] audit: type=1400 audit(1753988925.966:11382): avc:  denied  { write } for  pid=10756 comm="syz.0.3596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  322.336046][   T36] audit: type=1400 audit(1753988925.966:11383): avc:  denied  { read } for  pid=10756 comm="syz.0.3596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  322.385397][ T7309] audit: audit_backlog=65 > audit_backlog_limit=64
[  322.843498][T10798] FAULT_INJECTION: forcing a failure.
[  322.843498][T10798] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  322.858535][T10798] CPU: 1 UID: 0 PID: 10798 Comm: syz.3.3613 Not tainted 6.12.38-syzkaller-gc98acaeb71d4 #0 12f313afd6af6cbe2ef80fd9c185925320fe8e2c
[  322.858578][T10798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  322.858594][T10798] Call Trace:
[  322.858602][T10798]  <TASK>
[  322.858612][T10798]  __dump_stack+0x21/0x30
[  322.858647][T10798]  dump_stack_lvl+0x10c/0x190
[  322.858675][T10798]  ? __cfi_dump_stack_lvl+0x10/0x10
[  322.858703][T10798]  ? kernel_text_address+0xa9/0xe0
[  322.858732][T10798]  dump_stack+0x19/0x20
[  322.858758][T10798]  should_fail_ex+0x3d9/0x530
[  322.858789][T10798]  should_fail+0xf/0x20
[  322.858817][T10798]  should_fail_usercopy+0x1e/0x30
[  322.858849][T10798]  _copy_from_user+0x22/0xb0
[  322.858872][T10798]  ___sys_sendmsg+0x159/0x2a0
[  322.858904][T10798]  ? __sys_sendmsg+0x280/0x280
[  322.858935][T10798]  ? kstrtouint+0x78/0xf0
[  322.858970][T10798]  __sys_sendmmsg+0x271/0x470
[  322.859004][T10798]  ? __cfi___sys_sendmmsg+0x10/0x10
[  322.859055][T10798]  ? __cfi_ksys_write+0x10/0x10
[  322.859089][T10798]  __x64_sys_sendmmsg+0xa4/0xc0
[  322.859123][T10798]  x64_sys_call+0xfec/0x2ee0
[  322.859155][T10798]  do_syscall_64+0x58/0xf0
[  322.859185][T10798]  ? clear_bhb_loop+0x50/0xa0
[  322.859206][T10798]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  322.859240][T10798] RIP: 0033:0x7f46ffb8eb69
[  322.859260][T10798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  322.859279][T10798] RSP: 002b:00007f4700a9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  322.859303][T10798] RAX: ffffffffffffffda RBX: 00007f46ffdb5fa0 RCX: 00007f46ffb8eb69
[  322.859321][T10798] RDX: 0000000000000001 RSI: 0000200000000780 RDI: 0000000000000003
[  322.859337][T10798] RBP: 00007f4700a9d090 R08: 0000000000000000 R09: 0000000000000000
[  322.859352][T10798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  322.859367][T10798] R13: 0000000000000000 R14: 00007f46ffdb5fa0 R15: 00007ffc2cacf108
[  322.859387][T10798]  </TASK>
[  323.584418][T10833] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3628'.
[  323.609578][T10833] cgroup: Bad value for 'name'
[  323.666906][T10836] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3630'.
[  324.026395][T10861] ------------[ cut here ]------------
[  324.032782][T10861] WARNING: CPU: 0 PID: 10861 at mm/page_alloc.c:5174 __alloc_pages_noprof+0xe4/0x6c0
[  324.044085][T10861] Modules linked in:
[  324.048952][T10861] CPU: 0 UID: 0 PID: 10861 Comm: syz.3.3641 Not tainted 6.12.38-syzkaller-gc98acaeb71d4 #0 12f313afd6af6cbe2ef80fd9c185925320fe8e2c
[  324.063461][T10861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  324.074492][T10861] RIP: 0010:__alloc_pages_noprof+0xe4/0x6c0
[  324.081253][T10861] Code: 0f 1f 44 00 00 41 83 fd 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 35 0e ee 05 00 0f 85 c4 00 00 00 c6 05 28 0e ee 05 01 <0f> 0b 31 c0 e9 b6 00 00 00 41 83 fd 0a 0f 87 aa 00 00 00 44 89 6c
[  324.103148][T10861] RSP: 0018:ffffc900025cf880 EFLAGS: 00010246
[  324.110654][T10861] RAX: 0000000000000000 RBX: 1ffff920004b9f14 RCX: 0000000000000000
[  324.120579][T10861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900025cf928
[  324.129967][T10861] RBP: ffffc900025cf9b0 R08: ffffc900025cf927 R09: 0000000000000000
[  324.139595][T10861] R10: ffffc900025cf910 R11: fffff520004b9f25 R12: ffffc900025cf8c0
[  324.148707][T10861] R13: 0000000000000020 R14: dffffc0000000000 R15: 0000000000000000
[  324.157609][T10861] FS:  00007f4700a9d6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  324.168762][T10861] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  324.176190][T10861] CR2: 0000200000001000 CR3: 000000012daea000 CR4: 00000000003526b0
[  324.185931][T10861] Call Trace:
[  324.190976][T10861]  <TASK>
[  324.194345][T10861]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  324.202529][T10861]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  324.208732][T10861]  ? incfs_realloc_mount_info+0xa7/0x4d0
[  324.215084][T10861]  ___kmalloc_large_node+0x9c/0x1d0
[  324.220692][T10861]  ? incfs_realloc_mount_info+0xa7/0x4d0
[  324.227254][T10861]  __kmalloc_large_node_noprof+0x1e/0xe0
[  324.233440][T10861]  ? incfs_realloc_mount_info+0xa7/0x4d0
[  324.239803][T10861]  __kmalloc_noprof+0x26d/0x450
[  324.245246][T10861]  incfs_realloc_mount_info+0xa7/0x4d0
[  324.251252][T10861]  ? incfs_add_sysfs_node+0x118/0x240
[  324.257687][T10861]  incfs_alloc_mount_info+0x479/0x600
[  324.263570][T10861]  incfs_mount_fs+0x3ca/0x960
[  324.268924][T10861]  ? __cfi_incfs_mount_fs+0x10/0x10
[  324.276021][T10861]  ? vfs_parse_fs_string+0x102/0x170
[  324.281766][T10861]  ? selinux_capable+0x38/0x50
[  324.286774][T10861]  legacy_get_tree+0x103/0x1b0
[  324.292041][T10861]  ? __cfi_incfs_mount_fs+0x10/0x10
[  324.298466][T10861]  vfs_get_tree+0xa1/0x290
[  324.303337][T10861]  do_new_mount+0x251/0xb40
[  324.307980][T10861]  ? security_capable+0xcf/0xf0
[  324.312887][T10861]  path_mount+0x688/0x1050
[  324.317433][T10861]  ? putname+0x113/0x150
[  324.322106][T10861]  __se_sys_mount+0x2bd/0x480
[  324.327015][T10861]  ? __x64_sys_mount+0xf0/0xf0
[  324.332230][T10861]  ? __kasan_check_write+0x18/0x20
[  324.338676][T10861]  ? fpregs_restore_userregs+0x11d/0x260
[  324.344906][T10861]  __x64_sys_mount+0xc3/0xf0
[  324.350093][T10861]  x64_sys_call+0x2021/0x2ee0
[  324.354866][T10861]  do_syscall_64+0x58/0xf0
[  324.360131][T10861]  ? clear_bhb_loop+0x50/0xa0
[  324.365566][T10861]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  324.373194][T10861] RIP: 0033:0x7f46ffb8eb69
[  324.377828][T10861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  324.401037][T10861] RSP: 002b:00007f4700a9d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  324.410229][T10861] RAX: ffffffffffffffda RBX: 00007f46ffdb5fa0 RCX: 00007f46ffb8eb69
[  324.418986][T10861] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000200000000080
[  324.427181][T10861] RBP: 00007f46ffc11df1 R08: 0000200000000180 R09: 0000000000000000
[  324.435833][T10861] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  324.446573][T10861] R13: 0000000000000000 R14: 00007f46ffdb5fa0 R15: 00007ffc2cacf108
[  324.455902][T10861]  </TASK>
[  324.459361][T10861] ---[ end trace 0000000000000000 ]---
[  324.467462][T10861] incfs: Error allocating mount info. -12
[  324.474963][T10861] incfs: mount failed -12