last executing test programs:

6m55.771060228s ago: executing program 0 (id=122):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_int(r0, 0x11, 0x1, 0x0, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000280)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x2000000)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r4)

6m54.807930072s ago: executing program 0 (id=125):
syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x40, &(0x7f0000000500)={[{@lazytime}, {@uqnoenforce}, {@quota}, {@grpquota}, {@sysvgroups}, {@allocsize={'allocsize', 0x3d, [0x30, 0x39, 0x67]}}, {@sysvgroups}], [{@appraise_type}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@subj_type={'subj_type', 0x3d, 'quota'}}, {@dont_appraise}, {@flag='rw'}, {@smackfsdef={'smackfsdef', 0x3d, 'N%,[-'}}, {@pcr={'pcr', 0x3d, 0x21}}]}, 0x4, 0x968d, &(0x7f0000009680)="$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") (async)
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x200000, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$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")
r0 = syz_mount_image$exfat(0x0, &(0x7f0000000200)='./bus\x00', 0x64c48, 0x0, 0x0, 0x0, &(0x7f0000000000)) (async)
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x2200042, 0x0, 0x2, 0x0, 0x0) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x52042, 0x80) (async)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000001c40)={<r2=>r0, &(0x7f0000000040)='[/(#-}%.\x00', 0x40280, &(0x7f0000000080)={@_ha_fsid={[0x0, 0x8]}, {0x4, 0x0, 0xee3, 0xca9}}, 0x1, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000001c00)=0x7})
ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000001c80)={0x14, 0x6, 0x3}) (async)
ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000180)={{}, "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"}) (async)
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00"], 0x22) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e23, 0x4e23}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008005}, 0x0) (async)
write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a)
sendto$phonet(r1, &(0x7f0000000340)="a4bcfd084443bfcc285445f2f40d91bca7635275e36f7b51c3cc3dc5f1c2a1b16b8d45fd583176747feb2074037b395a4a132758ece0d01c1ed6da291010977f8784180bea056f1e02d3798a9f8f453b51e5396f3d45e1c320b6d85311a6d32b48d1c4d98c67021dc481eebb3abfb44804a9180ed2a73f20a4ba233ddadbb1f6a7a37360ae68f13890d84e24719c4c176e7ccc144c8f00a08cd186095c9858e3ddad6d197bf279381e33a7d2195f804d0022bac86b690f30e52a7861a9731943ab6a28a12d90db", 0xc7, 0x24000000, 0x0, 0x0)

6m54.564187728s ago: executing program 0 (id=126):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ptrace$ARCH_MAP_VDSO_64(0x1e, r1, 0x0, 0x2003)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000002900090027bd7000fcdbdf90040000"], 0x14}, 0x1, 0x0, 0x0, 0x4008090}, 0x200c0084)
socket$kcm(0x2c, 0x3, 0x0)
r5 = socket$kcm(0x2c, 0x3, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38)

6m53.552246713s ago: executing program 0 (id=129):
openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file5\x00', 0x82c0, 0x0)
fanotify_init(0xf00, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x56)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x81c0, 0x401)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
linkat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400)
chdir(&(0x7f00000003c0)='./bus\x00')
unlinkat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0)

6m53.221384741s ago: executing program 0 (id=132):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
capset(0x0, &(0x7f0000000200)={0x0, 0x5, 0x5, 0xff, 0xaf26, 0xa0})
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (fail_nth: 7)
linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
r4 = dup(r3)
ioctl$BLKRRPART(r4, 0x125f, 0x0)

6m51.475382294s ago: executing program 0 (id=137):
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x48885)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
unshare(0x60000600)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, 0x0, &(0x7f0000000340))
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$binfmt_misc(r4, &(0x7f0000000000), 0xd)

6m48.597157284s ago: executing program 4 (id=142):
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000400), 0x8)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
unshare(0x60000600)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000180)={'nat\x00', 0x0, [0x40, 0x3a8, 0x1, 0x6, 0x6e8]}, &(0x7f0000000340)=0x54)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$binfmt_misc(r4, &(0x7f0000000000), 0xd)

6m43.527740218s ago: executing program 4 (id=145):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x250}}, 0x0)

6m43.05874265s ago: executing program 4 (id=146):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff038}, {0xb1, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10)
sendmmsg(r2, &(0x7f0000001c00), 0x400000000000159, 0x40840)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c081}, 0x80)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000)

6m39.487723357s ago: executing program 4 (id=151):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000b0808004149014006040800", 0x58}, {&(0x7f0000000180)="4c222e48bd855d38299830f10aae376c975c357e4f47667e6df66f11adcbde8991d75ed09c2569714e6cc01947d885bb273cbb17142012121502c32071d6cf126fa75c96b2cc4922ebcf3046bd581f12465f7ebc4571aaba20f80b4ca91fcdc7697b8e41514fb78ae4701311849da98bf36ca48733a1cd2e72a18fbd70e0a43ed67b012fc9f3f5f86e1d9f29b5c8c26976a25f977fb11b6d6c7458426415cad0eb3dcd88ab80ea4704e908003b8caca66484ac331435d6bf6fd438ca2d20d38e9460d062ce2c1e95ffcf5b25208034cf163762d71d42a91271d89de2", 0xdc}], 0x2)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000006c0), r1)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)={0x28, r2, 0x1, 0x170bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x11, 0x1, 'd\x00\x00\x00\xfa\xc1\x02]I]\xff\xff\xff'}]}, 0x28}, 0x1, 0x0, 0x0, 0x408c0}, 0x10)

6m38.841528653s ago: executing program 4 (id=154):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4000000, &(0x7f0000000a00)={[{@i_version}, {@resuid}, {@commit={'commit', 0x3d, 0x1}}]}, 0x5, 0x4c0, &(0x7f0000000bc0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6)
pread64(0xffffffffffffffff, &(0x7f0000000180)=""/73, 0xfffffdef, 0x55)
lsetxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f0000000080), &(0x7f0000000180)=@v3={0x3000000, [{0x7fffffdf, 0xabda}, {0x5, 0x2}], 0xee00}, 0x18, 0x1)

6m36.942343979s ago: executing program 4 (id=157):
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4)
r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000400), 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x11, 0x6, 0x5, 0x1, 0x10000, 0x1, 0x3, '\x00', 0x0, r0, 0x0, 0x1, 0x5, 0x0, @void, @value, @value=r1}, 0x50)
sched_setscheduler(0x0, 0x2, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
unshare(0x60000600)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f0000000180)={'nat\x00', 0x0, [0x40, 0x3a8, 0x1, 0x6, 0x6e8]}, &(0x7f0000000340)=0x54)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$binfmt_misc(r6, &(0x7f0000000000), 0xd)

6m35.099251394s ago: executing program 32 (id=137):
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x48885)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
unshare(0x60000600)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, 0x0, &(0x7f0000000340))
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$binfmt_misc(r4, &(0x7f0000000000), 0xd)

6m21.707056302s ago: executing program 33 (id=157):
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4)
r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000400), 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x11, 0x6, 0x5, 0x1, 0x10000, 0x1, 0x3, '\x00', 0x0, r0, 0x0, 0x1, 0x5, 0x0, @void, @value, @value=r1}, 0x50)
sched_setscheduler(0x0, 0x2, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
unshare(0x60000600)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f0000000180)={'nat\x00', 0x0, [0x40, 0x3a8, 0x1, 0x6, 0x6e8]}, &(0x7f0000000340)=0x54)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$binfmt_misc(r6, &(0x7f0000000000), 0xd)

9.098839537s ago: executing program 5 (id=2307):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSPASS(r0, 0x40087447, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x5c7, 0xce}]})

8.687780807s ago: executing program 5 (id=2310):
r0 = socket$igmp6(0xa, 0x3, 0x2)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, 0x1c)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r1 = socket(0x2a, 0x2, 0x9)
mmap$IORING_OFF_SQ_RING(0x0, 0xd00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCADDRT(r1, 0x8915, 0x0)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)

8.596064249s ago: executing program 5 (id=2313):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
close_range(r0, 0xffffffffffffffff, 0x0)

8.536888911s ago: executing program 5 (id=2315):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0)

8.219097309s ago: executing program 5 (id=2319):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000600)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x2c, r1, 0xa11, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_PAGE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0)

8.068066992s ago: executing program 5 (id=2321):
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'netpci0\x00'}})
r0 = socket$inet(0x2, 0x3, 0x30)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4})
ioctl$sock_netdev_private(r3, 0x89f2, &(0x7f0000000000))
sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x70, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0xf}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x9}}, @qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x9, 0xe2, 0x7fff}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x1d, 0x407, 0x6, 0x0, 0x3, 0x6}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x21d5}, 0x8840)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$inet(r4, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
bpf$BPF_PROG_TEST_RUN_LIVE(0xa, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket(0x15, 0x5, 0x0)
getsockopt(r5, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)
syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={'bond0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c)

4.714768294s ago: executing program 2 (id=2340):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xffffff, 0x0, 0x0, 0x4}, 0x10)
write(r0, &(0x7f0000000000)="240000001a00590214f9f407000904101f000000ff000000000200000800040001000000", 0x24)

4.171965548s ago: executing program 2 (id=2341):
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id', @ANYBLOB])
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, 0x0, &(0x7f0000000680)='syzkaller\x00'}, 0x94)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0)

3.824123297s ago: executing program 2 (id=2344):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000600)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x2c, r1, 0xa11, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_PAGE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0)

3.647882341s ago: executing program 2 (id=2347):
r0 = socket(0x2a, 0x2, 0x9)
mmap$IORING_OFF_SQ_RING(0x0, 0xd00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x8915, 0x0)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)

3.362683837s ago: executing program 2 (id=2348):
r0 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1ec, 0x0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@arp={@dev, @multicast2, 0x0, 0x0, 0x0, 0x0, {@empty, {[0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x1, 0x0, 0xfffe, 0x0, 'veth0_to_hsr\x00', 'syz_tun\x00', {}, {}, 0x2}, 0xbc, 0xe0}, @unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @empty, @remote}}}, {{@uncond, 0xbc, 0xfc}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "9695d92849c79fac2d070731112f73924a493f1567e5d8b4cd2c5f35f67b"}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x414)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x68}}, 0x20004904)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000400)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000340000000000019078ac1e0001ac1414aa0400907800000000469700070067fffd03020000080000000000000044001660"], 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd)
sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001880)=ANY=[@ANYBLOB="280000000406010800000000000000000100000005000100070000404100000000797a31000071ec"], 0x28}, 0x1, 0x0, 0x0, 0x20008804}, 0xc810)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)

2.956058417s ago: executing program 2 (id=2351):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0)
write(r5, &(0x7f0000000100)='!:m__read_msr1 msr/read_msr', 0x1b)
syz_io_uring_setup(0x278, &(0x7f0000000340)={0x0, 0x0, 0x200}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000000))
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r6, 0x107, 0x5, 0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x4)
write(r7, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6_vti0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)

2.241295005s ago: executing program 6 (id=2357):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000600)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x2c, r2, 0xa11, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_PAGE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0)

2.02792094s ago: executing program 6 (id=2358):
r0 = socket(0x2a, 0x2, 0x9)
mmap$IORING_OFF_SQ_RING(0x0, 0xd00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x8915, 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0)

1.831522095s ago: executing program 6 (id=2361):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015800a00142603600e1208000f0000000406a80016c0050003400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f018951e5277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a468", 0x87}], 0x1}, 0x0)
r0 = socket$kcm(0x29, 0x2, 0x0)
close(r0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0}, 0x30004040)
setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000000c0), 0xfe11)
close(r1)

1.575965912s ago: executing program 6 (id=2362):
r0 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1ec, 0x0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@arp={@dev, @multicast2, 0x0, 0x0, 0x0, 0x0, {@empty, {[0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x1, 0x0, 0xfffe, 0x0, 'veth0_to_hsr\x00', 'syz_tun\x00', {}, {}, 0x2}, 0xbc, 0xe0}, @unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @empty, @remote}}}, {{@uncond, 0xbc, 0xfc}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "9695d92849c79fac2d070731112f73924a493f1567e5d8b4cd2c5f35f67b"}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x414)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x68}}, 0x20004904)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000400)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000340000000000019078ac1e0001ac1414aa0400907800000000469700070067fffd03020000080000000000000044001660"], 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd)
sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001880)=ANY=[@ANYBLOB="280000000406010800000000000000000100000005000100070000404100000000797a31000071ec"], 0x28}, 0x1, 0x0, 0x0, 0x20008804}, 0xc810)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)

1.568725902s ago: executing program 1 (id=2363):
socket$igmp6(0xa, 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040))
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0))
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl(r1, 0x40047438, &(0x7f0000000040))
ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f00000000c0))
pselect6(0x40, &(0x7f00000001c0)={0x10, 0xffffffffffffffff, 0x3, 0xfffffffffffffffd, 0xfffffffffffffffa, 0x5, 0x4}, 0x0, &(0x7f00000002c0)={0x1ff, 0x4, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x8000000}, 0x0, 0x0)

1.355185577s ago: executing program 1 (id=2365):
userfaultfd(0x801)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60)
r0 = eventfd2(0x50, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff})
pipe2$9p(&(0x7f0000001240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}})
write$P9_RVERSION(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r0, @ANYRESHEX=r3], 0x15)

1.198297121s ago: executing program 3 (id=2366):
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id', @ANYBLOB])
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, 0x0, &(0x7f0000000680)='syzkaller\x00'}, 0x94)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0)

1.19489682s ago: executing program 6 (id=2367):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0)

1.032107904s ago: executing program 1 (id=2368):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000600)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x2c, r2, 0xa11, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_PAGE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0)

991.094985ms ago: executing program 3 (id=2369):
r0 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000600)=ANY=[])

968.380366ms ago: executing program 6 (id=2370):
socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x9, 0x81fd, 0x2001, 0x1}, 0x1c)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c)
recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085000000730000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r2}, 0xc)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x7fffffff, 0x88}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x7, 0x4)
ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000280)={0x19, 0x4, 0x4, 0x2, 0x2, 0x27, 0x15, "a3a0b901c35cc82de66ec5391bb711c84fa2ad73", "c9cc39554c963f8cdd2f9688c280acde4e5ffea3"})
recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)

840.20729ms ago: executing program 1 (id=2371):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xd}, {}, {0xfff1, 0xd}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x24004840)
socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
close_range(r0, 0xffffffffffffffff, 0x0)

724.093202ms ago: executing program 3 (id=2372):
r0 = socket(0x2a, 0x2, 0x9)
mmap$IORING_OFF_SQ_RING(0x0, 0xd00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x8915, 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0)

539.064757ms ago: executing program 3 (id=2373):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x49813}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x4}}}]}, 0x34}}, 0x0)
sendto$packet(r0, &(0x7f0000000240)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc9", 0x26, 0x40, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)

485.983268ms ago: executing program 1 (id=2374):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240048e4}, 0x40)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
socket$unix(0x1, 0x1, 0x0)
r4 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="2703", 0x2}], 0x1}, 0x5)

277.279453ms ago: executing program 3 (id=2375):
socket$igmp6(0xa, 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040))
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0))
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl(r1, 0x40047438, &(0x7f0000000040))
ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f00000000c0))
pselect6(0x40, &(0x7f00000001c0)={0x10, 0xffffffffffffffff, 0x3, 0xfffffffffffffffd, 0xfffffffffffffffa, 0x5, 0x4}, 0x0, &(0x7f00000002c0)={0x1ff, 0x4, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x8000000}, 0x0, 0x0)

141.161647ms ago: executing program 3 (id=2376):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0)
lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1)

0s ago: executing program 1 (id=2377):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5111)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000280)={0x14, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC=0x0], 0x0}, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r1, 0x40000000af01, 0x0)
set_mempolicy(0x3, &(0x7f0000000000)=0x80000001, 0x7)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r6)
sendmsg$TIPC_CMD_GET_LINKS(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r7, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x1c, r7, 0x4, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}}, 0x40)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0xc)
sendmmsg(r8, &(0x7f00000002c0), 0x3c, 0x4000880)
syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)

kernel console output (not intermixed with test programs):

95-3726e2b761d6
[  141.816995][ T5669] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm
[  141.818488][ T5669] BTRFS info (device loop6): turning off barriers
[  141.819542][ T5669] BTRFS info (device loop6): turning on async discard
[  141.851401][ T5669] BTRFS info (device loop6): doing ref verification
[  141.876653][ T5669] BTRFS info (device loop6): using free space tree
[  141.968805][ T5706] overlayfs: failed to resolve './file0': -2
[  142.186492][ T5669] BTRFS info (device loop6): enabling ssd optimizations
[  142.480899][ T5732] loop5: detected capacity change from 0 to 2048
[  142.645640][ T5732] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  143.559595][ T5727] device gre1 entered promiscuous mode
[  143.584411][ T5212] BTRFS info (device loop6): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  144.373090][ T5761] netlink: 'syz.6.285': attribute type 11 has an invalid length.
[  144.400453][ T5761] netlink: 20 bytes leftover after parsing attributes in process `syz.6.285'.
[  144.578149][ T5764] FAULT_INJECTION: forcing a failure.
[  144.578149][ T5764] name failslab, interval 1, probability 0, space 0, times 0
[  144.635578][ T5764] CPU: 1 PID: 5764 Comm: syz.5.289 Not tainted syzkaller #0
[  144.636818][ T5764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[  144.638563][ T5764] Call trace:
[  144.639119][ T5764]  dump_backtrace+0x1c4/0x1f0
[  144.639988][ T5764]  show_stack+0x2c/0x3c
[  144.640684][ T5764]  __dump_stack+0x30/0x40
[  144.641432][ T5764]  dump_stack_lvl+0xf4/0x15c
[  144.642219][ T5764]  dump_stack+0x1c/0x5c
[  144.642943][ T5764]  should_fail_ex+0x3cc/0x524
[  144.643749][ T5764]  __should_failslab+0xc0/0x11c
[  144.644586][ T5764]  should_failslab+0x10/0x28
[  144.645383][ T5764]  kmem_cache_alloc+0x88/0x310
[  144.646259][ T5764]  skb_clone+0x194/0x308
[  144.647013][ T5764]  skb_clone_and_charge_r+0x6c/0x390
[  144.647956][ T5764]  tcp_v6_do_rcv+0xf8/0x1128
[  144.648761][ T5764]  __release_sock+0x1b0/0x3b0
[  144.649606][ T5764]  release_sock+0x60/0x1bc
[  144.650328][ T5764]  tcp_sendmsg+0x4c/0x64
[  144.651090][ T5764]  inet6_sendmsg+0xb4/0xd8
[  144.651825][ T5764]  ____sys_sendmsg+0x588/0x90c
[  144.652677][ T5764]  __sys_sendmmsg+0x320/0x7ec
[  144.653471][ T5764]  __arm64_sys_sendmmsg+0xa4/0xc0
[  144.654307][ T5764]  invoke_syscall+0x98/0x290
[  144.655058][ T5764]  el0_svc_common+0x200/0x258
[  144.655841][ T5764]  do_el0_svc+0x5c/0x134
[  144.656534][ T5764]  el0_svc+0x58/0x128
[  144.657231][ T5764]  el0t_64_sync_handler+0x84/0xf0
[  144.658103][ T5764]  el0t_64_sync+0x18c/0x190
[  145.381382][ T4395] device hsr_slave_0 left promiscuous mode
[  145.424278][ T5782] overlayfs: failed to resolve './file0': -2
[  145.430779][ T4395] device hsr_slave_1 left promiscuous mode
[  145.509148][ T5783] loop2: detected capacity change from 0 to 512
[  145.531721][ T4395] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  145.533102][ T4395] batman_adv: batadv0: Removing interface: batadv_slave_0
[  145.536190][ T4395] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  145.537838][ T4395] batman_adv: batadv0: Removing interface: batadv_slave_1
[  145.539252][ T5783] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  145.548725][ T4395] device bridge_slave_1 left promiscuous mode
[  145.549859][ T4395] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.558266][ T5783] UDF-fs: Scanning with blocksize 512 failed
[  145.571329][ T5783] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  145.572641][ T5783] UDF-fs: Scanning with blocksize 1024 failed
[  145.590136][ T5783] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  145.591915][ T5783] UDF-fs: Scanning with blocksize 2048 failed
[  145.634191][ T4395] device bridge_slave_0 left promiscuous mode
[  145.635520][ T4395] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.659041][ T5783] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  145.663963][ T5783] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  145.871723][ T4395] device veth1_macvtap left promiscuous mode
[  145.874042][ T4395] device veth0_macvtap left promiscuous mode
[  145.875553][ T4395] device veth1_vlan left promiscuous mode
[  145.876732][ T4395] device veth0_vlan left promiscuous mode
[  146.145237][ T5757] loop1: detected capacity change from 0 to 32768
[  148.904562][ T5807] netlink: 'syz.5.302': attribute type 11 has an invalid length.
[  148.939791][ T5809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  148.950734][ T5809] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  150.946099][ T4395] team0 (unregistering): Port device team_slave_1 removed
[  151.123850][ T4395] team0 (unregistering): Port device team_slave_0 removed
[  151.312034][ T4395] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  151.514966][ T4395] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  153.054766][ T4395] bond0 (unregistering): Released all slaves
[  153.611398][ T4344] Bluetooth: hci1: command 0x0406 tx timeout
[  153.612548][ T4344] Bluetooth: hci0: command 0x0406 tx timeout
[  153.613611][ T4344] Bluetooth: hci4: command 0x0406 tx timeout
[  154.976848][ T5832] loop3: detected capacity change from 0 to 16
[  154.978825][ T5832] erofs: Unknown parameter '01777777777777777777777ÿÿ'
[  155.246947][ T5817] blk_print_req_error: 11 callbacks suppressed
[  155.246963][ T5817] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  155.254044][ T5832] loop3: detected capacity change from 0 to 16
[  155.255839][ T5832] erofs: Unknown parameter 'Ï‹Eë¿ßð¡b Ÿ®�]]Pÿú8.+]ƒ£t÷•Àð@é'šîÇyÜ
[  155.255839][ T5832] çQ'lá
[  155.255839][ T5832] ã	ãS’žå4¿é+††–Óòë†ízÝ'
[  157.072841][ T5856] netlink: 'syz.3.314': attribute type 11 has an invalid length.
[  160.265272][ T5891] loop2: detected capacity change from 0 to 4096
[  160.296866][ T5901] loop6: detected capacity change from 0 to 1764
[  160.305723][ T5904] 9pnet_virtio: no channels available for device syz
[  160.313620][ T5891] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  160.362508][ T5891] ext4: Unknown parameter ''
[  160.604452][ T4339] EXT4-fs (loop2): unmounting filesystem.
[  161.800901][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  162.029920][ T5937] netlink: 4 bytes leftover after parsing attributes in process `syz.5.335'.
[  162.501199][ T5947] syz.3.338 uses obsolete (PF_INET,SOCK_PACKET)
[  162.943680][ T5954] 9pnet_virtio: no channels available for device syz
[  163.509626][ T5967] device lo entered promiscuous mode
[  163.510411][ T5969] Bluetooth: MGMT ver 1.22
[  163.517676][ T5967] device bond0 entered promiscuous mode
[  163.526678][ T5967] device dummy0 entered promiscuous mode
[  163.532105][ T5967] device eql entered promiscuous mode
[  163.535704][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready
[  163.539432][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready
[  163.554977][ T5967] device ifb0 entered promiscuous mode
[  163.556463][ T5967] device ifb1 entered promiscuous mode
[  163.557967][ T5967] device enp0s0 entered promiscuous mode
[  163.568327][ T5967] device wlan0 entered promiscuous mode
[  163.576146][ T5967] device wlan1 entered promiscuous mode
[  163.578742][ T5967] device hwsim0 entered promiscuous mode
[  163.588743][ T5967] device wpan0 entered promiscuous mode
[  163.599579][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready
[  163.606534][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready
[  163.611891][ T5967] device wpan1 entered promiscuous mode
[  163.620650][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready
[  163.622467][ T5967] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready
[  163.636597][ T5967] device teql0 entered promiscuous mode
[  163.644749][ T5967] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check.
[  163.794552][ T5977] zonefs (nullb0) ERROR: Not a zoned block device
[  164.634986][ T6000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  164.636830][ T6000] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  165.516857][ T6016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  165.560740][ T6016] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  165.840438][ T6027] 9pnet_virtio: no channels available for device syz
[  165.988083][ T6029] zonefs (nullb0) ERROR: Not a zoned block device
[  166.473807][ T6050] jffs2: notice: (6050) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  167.991636][ T6079] zonefs (nullb0) ERROR: Not a zoned block device
[  168.055413][ T6082] netlink: 12 bytes leftover after parsing attributes in process `syz.5.380'.
[  168.130261][ T6082] bridge1: port 1(erspan0) entered blocking state
[  168.131599][ T6082] bridge1: port 1(erspan0) entered disabled state
[  168.141156][ T6082] device erspan0 entered promiscuous mode
[  168.143739][ T6082] bridge1: port 1(erspan0) entered blocking state
[  168.145073][ T6082] bridge1: port 1(erspan0) entered forwarding state
[  168.398988][ T6097] 9pnet_virtio: no channels available for device syz
[  168.629372][ T4492] libceph: connect (1)[c::]:6789 error -101
[  168.630873][ T4492] libceph: mon0 (1)[c::]:6789 connect error
[  168.634633][ T4492] libceph: connect (1)[c::]:6789 error -101
[  168.636350][ T4492] libceph: mon0 (1)[c::]:6789 connect error
[  168.688906][ T4379] libceph: connect (1)[c::]:6789 error -101
[  168.690740][ T4379] libceph: mon0 (1)[c::]:6789 connect error
[  168.702154][ T4379] libceph: connect (1)[c::]:6789 error -101
[  168.704197][ T4379] libceph: mon0 (1)[c::]:6789 connect error
[  168.891336][ T4379] libceph: connect (1)[c::]:6789 error -101
[  168.892695][ T4379] libceph: mon0 (1)[c::]:6789 connect error
[  168.961704][ T4492] libceph: connect (1)[c::]:6789 error -101
[  168.962936][ T4492] libceph: mon0 (1)[c::]:6789 connect error
[  169.400631][ T4492] libceph: connect (1)[c::]:6789 error -101
[  169.401984][ T4492] libceph: mon0 (1)[c::]:6789 connect error
[  169.406484][ T6106] ceph: No mds server is up or the cluster is laggy
[  169.413288][ T6109] ceph: No mds server is up or the cluster is laggy
[  169.481282][ T4379] libceph: connect (1)[c::]:6789 error -101
[  169.483138][ T4379] libceph: mon0 (1)[c::]:6789 connect error
[  170.983081][ T6165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  170.986368][ T6165] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  172.990878][ T6213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  173.024299][ T6213] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  173.180393][ T4332] Bluetooth: hci6: link tx timeout
[  173.183629][ T4332] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa
[  173.391810][ T6213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  173.393654][ T6213] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  175.083773][ T6260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  175.090488][ T6260] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  175.210792][ T4332] Bluetooth: hci6: command 0x0406 tx timeout
[  176.949509][ T6309] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  176.951996][ T6308] Config c/1 of g1 needs at least one function.
[  176.953454][ T6308] udc dummy_udc.0: failed to start g1: -22
[  176.961339][ T6308] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  176.971302][ T6308] UDC core: g1: couldn't find an available UDC or it's busy
[  176.974836][ T6309] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  177.473068][ T6323] device syzkaller0 entered promiscuous mode
[  179.771687][ T6376] Config c/1 of g1 needs at least one function.
[  179.772999][ T6376] udc dummy_udc.0: failed to start g1: -22
[  179.773964][ T6376] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  179.775614][ T6376] UDC core: g1: couldn't find an available UDC or it's busy
[  181.012882][ T6420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  181.031401][ T6420] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  182.750746][ T6459] Config c/1 of g1 needs at least one function.
[  182.752063][ T6459] udc dummy_udc.0: failed to start g1: -22
[  182.753054][ T6459] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  182.754843][ T6459] UDC core: g1: couldn't find an available UDC or it's busy
[  184.319549][ T6494] binder: 6493:6494 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  184.343773][ T6494] binder: 6494 RLIMIT_NICE not set
[  184.372971][ T6499] binder: 6493:6499 tried to acquire reference to desc 0, got 1 instead
[  184.390159][ T6494] binder: 6494 RLIMIT_NICE not set
[  184.399695][ T6496] Config c/1 of g1 needs at least one function.
[  184.413402][ T4375] binder: release 6493:6499 transaction 7 out, still active
[  184.420375][ T6496] udc dummy_udc.0: failed to start g1: -22
[  184.421482][ T6496] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  184.423164][ T6496] UDC core: g1: couldn't find an available UDC or it's busy
[  184.481236][ T4375] binder: undelivered TRANSACTION_COMPLETE
[  184.589126][ T4375] binder: release 6493:6494 transaction 7 in, still active
[  184.590915][ T4375] binder: send failed reply for transaction 7, target dead
[  186.136699][ T6537] binder: 6536:6537 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  186.139269][ T6537] binder: 6537 RLIMIT_NICE not set
[  186.198528][ T6542] binder: 6536:6542 tried to acquire reference to desc 0, got 1 instead
[  186.250186][ T6537] binder: 6537 RLIMIT_NICE not set
[  186.277672][ T4410] binder: release 6536:6542 transaction 12 out, still active
[  186.283292][ T6541] Driver unsupported XDP return value 0 on prog  (id 12) dev N/A, expect packet loss!
[  186.363057][ T4410] binder: undelivered TRANSACTION_COMPLETE
[  186.490225][ T4379] binder: release 6536:6537 transaction 12 in, still active
[  186.491650][ T4379] binder: send failed reply for transaction 12, target dead
[  187.304549][ T6575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  187.306397][ T6575] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  187.372112][ T2065] ieee802154 phy0 wpan0: encryption failed: -22
[  187.373410][ T2065] ieee802154 phy1 wpan1: encryption failed: -22
[  189.012485][ T6621] binder: 6620:6621 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  189.014868][ T6621] binder: 6621 RLIMIT_NICE not set
[  189.116440][ T4375] binder: release 6620:6627 transaction 17 out, still active
[  189.240765][ T4375] binder: undelivered TRANSACTION_COMPLETE
[  190.613380][ T6677] binder_user_error: 2 callbacks suppressed
[  190.613393][ T6677] binder: 6676:6677 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  190.627072][ T6677] binder: 6677 RLIMIT_NICE not set
[  193.480224][ T6744] binder: 6743:6744 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  193.482752][ T6744] binder: 6744 RLIMIT_NICE not set
[  193.607314][ T6748] loop7: detected capacity change from 0 to 7
[  193.621863][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  193.623521][    C0] buffer_io_error: 10 callbacks suppressed
[  193.623534][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  193.639590][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  193.641478][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  193.646563][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  193.648265][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  193.650722][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  193.652362][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  193.669910][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  193.671644][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  193.675308][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  193.676774][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  193.680811][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  193.682477][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  193.685038][ T6748] ldm_validate_partition_table(): Disk read failed.
[  193.698803][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  193.700601][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  193.709115][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  193.710762][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  193.716143][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  193.717975][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  193.724900][ T6748] Dev loop7: unable to read RDB block 0
[  193.782282][ T6748]  loop7: unable to read partition table
[  193.783737][ T6748] loop7: partition table beyond EOD, truncated
[  193.792364][ T6748] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[  195.974928][ T6795] Config c/1 of g1 needs at least one function.
[  196.001909][ T6795] udc dummy_udc.0: failed to start g1: -22
[  196.002875][ T6795] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  196.005816][ T6795] UDC core: g1: couldn't find an available UDC or it's busy
[  196.083698][ T6802] loop7: detected capacity change from 0 to 7
[  196.102870][ T6802] ldm_validate_partition_table(): Disk read failed.
[  196.107989][ T6802] Dev loop7: unable to read RDB block 0
[  196.109938][ T6802]  loop7: unable to read partition table
[  196.121390][ T6802] loop7: partition table beyond EOD, truncated
[  196.122419][ T6802] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[  196.741739][ T6812] binder: 6811:6812 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  196.744102][ T6812] binder: 6812 RLIMIT_NICE not set
[  197.065675][ T6817] netlink: 24 bytes leftover after parsing attributes in process `syz.3.611'.
[  197.774010][ T6837] Config c/1 of g1 needs at least one function.
[  197.775148][ T6837] udc dummy_udc.0: failed to start g1: -22
[  197.776065][ T6837] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  197.777701][ T6837] UDC core: g1: couldn't find an available UDC or it's busy
[  199.346652][ T6858] loop7: detected capacity change from 0 to 7
[  199.348244][    C1] blk_print_req_error: 31 callbacks suppressed
[  199.348255][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  199.351264][    C1] buffer_io_error: 30 callbacks suppressed
[  199.351273][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  199.353977][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  199.355540][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  199.357115][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  199.358753][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  199.370429][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  199.371991][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  199.385797][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  199.387463][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  199.389794][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  199.391687][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  199.393758][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  199.395332][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  199.396675][ T6858] ldm_validate_partition_table(): Disk read failed.
[  199.398163][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  199.399878][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  199.413562][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  199.415269][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  199.423658][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  199.425429][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  199.445356][ T6858] Dev loop7: unable to read RDB block 0
[  199.447352][ T6858]  loop7: unable to read partition table
[  199.448727][ T6858] loop7: partition table beyond EOD, truncated
[  199.454835][ T6858] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[  199.594850][ T6863] netlink: 24 bytes leftover after parsing attributes in process `syz.5.624'.
[  200.286023][ T6878] binder: 6877:6878 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  200.288270][ T6878] binder: 6878 RLIMIT_NICE not set
[  200.344216][ T6880] binder: 6877:6880 tried to acquire reference to desc 0, got 1 instead
[  200.363366][ T6878] binder: 6878 RLIMIT_NICE not set
[  200.400942][ T4375] binder_debug: 2 callbacks suppressed
[  200.400955][ T4375] binder: release 6877:6880 transaction 31 out, still active
[  200.403132][ T4375] binder: undelivered TRANSACTION_COMPLETE
[  200.673940][ T4375] binder: release 6877:6878 transaction 31 in, still active
[  200.675302][ T4375] binder: send failed reply for transaction 31, target dead
[  200.725048][ T6889] Config c/1 of g1 needs at least one function.
[  200.726211][ T6889] udc dummy_udc.0: failed to start g1: -22
[  200.727236][ T6889] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  200.729040][ T6889] UDC core: g1: couldn't find an available UDC or it's busy
[  201.186570][ T6902] netlink: 24 bytes leftover after parsing attributes in process `syz.1.639'.
[  202.657548][ T6919] loop7: detected capacity change from 0 to 7
[  202.662962][ T6919] ldm_validate_partition_table(): Disk read failed.
[  202.687879][ T6919] Dev loop7: unable to read RDB block 0
[  202.689736][ T6919]  loop7: unable to read partition table
[  202.694997][ T6919] loop7: partition table beyond EOD, truncated
[  202.708149][ T6919] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[  202.846994][ T3939] ldm_validate_partition_table(): Disk read failed.
[  202.851060][ T3939] Dev loop7: unable to read RDB block 0
[  202.858800][ T3939]  loop7: unable to read partition table
[  202.861474][ T3939] loop7: partition table beyond EOD, truncated
[  202.920808][ T6925] binder: 6924:6925 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  202.923336][ T6925] binder: 6925 RLIMIT_NICE not set
[  202.975558][ T6928] binder: 6924:6928 tried to acquire reference to desc 0, got 1 instead
[  203.227968][ T6935] Config c/1 of g1 needs at least one function.
[  203.229274][ T6935] udc dummy_udc.0: failed to start g1: -22
[  203.245690][ T6935] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  203.247473][ T6935] UDC core: g1: couldn't find an available UDC or it's busy
[  203.428040][ T6940] netlink: 24 bytes leftover after parsing attributes in process `syz.1.650'.
[  204.633773][ T6972] loop7: detected capacity change from 0 to 7
[  204.637353][    C1] blk_print_req_error: 45 callbacks suppressed
[  204.637365][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  204.640200][    C1] buffer_io_error: 44 callbacks suppressed
[  204.640213][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  204.643756][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  204.645290][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  204.646844][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  204.648360][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  204.649884][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  204.651755][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  204.654472][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  204.656125][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  204.659677][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  204.661088][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  204.663515][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  204.665251][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  204.666947][ T6972] ldm_validate_partition_table(): Disk read failed.
[  204.674674][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  204.676238][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  205.702944][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  205.704703][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  205.762854][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  205.764504][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  205.812460][ T6972] Dev loop7: unable to read RDB block 0
[  205.840893][ T6972]  loop7: unable to read partition table
[  205.842250][ T6972] loop7: partition table beyond EOD, truncated
[  205.843437][ T6972] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[  206.104958][ T6988] Config c/1 of g1 needs at least one function.
[  206.106081][ T6988] udc dummy_udc.0: failed to start g1: -22
[  206.107096][ T6988] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  206.108866][ T6988] UDC core: g1: couldn't find an available UDC or it's busy
[  206.323217][ T6994] netlink: 24 bytes leftover after parsing attributes in process `syz.5.663'.
[  206.394453][ T6999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  206.396142][ T6999] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  206.659409][ T7002] binder: 7001:7002 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  206.680727][ T7002] binder: 7002 RLIMIT_NICE not set
[  206.710610][ T7004] binder: 7001:7004 tried to acquire reference to desc 0, got 1 instead
[  209.245617][ T7042] Config c/1 of g1 needs at least one function.
[  209.246754][ T7042] udc dummy_udc.0: failed to start g1: -22
[  209.247715][ T7042] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  209.271102][ T7042] UDC core: g1: couldn't find an available UDC or it's busy
[  209.322429][ T7048] netlink: 24 bytes leftover after parsing attributes in process `syz.3.680'.
[  209.652372][ T7060] binder: 7058:7060 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  209.665235][ T7060] binder: 7060 RLIMIT_NICE not set
[  209.704545][ T7068] binder: 7058:7068 tried to acquire reference to desc 0, got 1 instead
[  209.883109][ T7069] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(0.0.0), cmd(3)
[  209.937739][ T7065] null_blk: disk nullb1 created
[  211.197626][ T7101] netlink: 16 bytes leftover after parsing attributes in process `syz.2.695'.
[  211.580326][ T7116] binder: 7115:7116 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  211.590228][ T7116] binder: 7116 RLIMIT_NICE not set
[  211.632934][ T7122] binder: 7115:7122 got transaction to invalid handle, 1
[  211.634337][ T7122] binder: 7122:7115 cannot find target node
[  211.635311][ T7122] binder: 7115:7122 transaction call to 0:0 failed 47/29201/-22, size 72-24 line 3062
[  212.358253][ T3901] binder: undelivered TRANSACTION_ERROR: 29201
[  213.090835][ T7151] netlink: 16 bytes leftover after parsing attributes in process `syz.5.710'.
[  213.174180][ T3901] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  213.177150][ T3901] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  213.443427][ T3901] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  213.814987][ T7178] binder: 7177:7178 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  213.826174][ T7178] binder: 7178 RLIMIT_NICE not set
[  213.866556][ T7182] binder: 7177:7182 got transaction to invalid handle, 1
[  213.868234][ T7182] binder: 7182:7177 cannot find target node
[  213.869319][ T7182] binder: 7177:7182 transaction call to 0:0 failed 51/29201/-22, size 72-24 line 3062
[  213.963068][ T3901] libceph: mon0 (1)0.0.0.0:6789 socket closed (con state V1_BANNER)
[  214.260970][ T7154] ceph: No mds server is up or the cluster is laggy
[  214.603362][ T4375] binder: undelivered TRANSACTION_ERROR: 29201
[  215.051087][ T4332] Bluetooth: hci5: command 0x0406 tx timeout
[  215.463077][ T7209] netlink: 16 bytes leftover after parsing attributes in process `syz.1.724'.
[  216.124089][ T7228] binder: 7226:7228 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  216.126203][ T7228] binder: 7228 RLIMIT_NICE not set
[  216.178889][ T7230] binder: 7226:7230 got transaction to invalid handle, 1
[  216.182775][ T7230] binder: 7230:7226 cannot find target node
[  216.184992][ T7230] binder: 7226:7230 transaction call to 0:0 failed 55/29201/-22, size 72-24 line 3062
[  216.899496][ T3901] binder: undelivered TRANSACTION_ERROR: 29201
[  217.274411][ T7245] jffs2: notice: (7245) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  217.326582][ T7253] overlayfs: failed to resolve './file2': -2
[  220.454470][ T7287] binder: 7281:7287 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  220.472639][ T7287] binder: 7287 RLIMIT_NICE not set
[  220.525118][ T7287] binder: tried to use weak ref as strong ref
[  220.526497][ T7287] binder: 7281:7287 Acquire 1 refcount change on invalid ref 0 ret -22
[  220.555767][ T7287] binder: 7281:7287 got transaction to invalid handle, 1
[  220.557080][ T7287] binder: 7287:7281 cannot find target node
[  220.558042][ T7287] binder: 7281:7287 transaction call to 0:0 failed 58/29201/-22, size 72-24 line 3062
[  220.586394][ T4468] binder: undelivered TRANSACTION_ERROR: 29201
[  221.287505][ T4344] Bluetooth: hci1: unexpected subevent 0x06 length: 1 < 10
[  222.674079][ T7335] binder: 7332:7335 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  222.676458][ T7335] binder: 7335 RLIMIT_NICE not set
[  222.751465][ T7335] binder: tried to use weak ref as strong ref
[  222.752616][ T7335] binder: 7332:7335 Acquire 1 refcount change on invalid ref 0 ret -22
[  222.756098][ T7335] binder: 7332:7335 got transaction to invalid handle, 1
[  222.757285][ T7335] binder: 7335:7332 cannot find target node
[  222.758277][ T7335] binder: 7332:7335 transaction call to 0:0 failed 61/29201/-22, size 72-24 line 3062
[  222.774794][ T4375] binder: undelivered TRANSACTION_ERROR: 29201
[  223.790504][ T7373] Config c/1 of g1 needs at least one function.
[  223.791727][ T7373] udc dummy_udc.0: failed to start g1: -22
[  223.792671][ T7373] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  223.810670][ T7373] UDC core: g1: couldn't find an available UDC or it's busy
[  224.038235][ T7379] binder: 7378:7379 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  224.100151][ T7379] binder: 7379 RLIMIT_NICE not set
[  224.101809][ T7379] binder: tried to use weak ref as strong ref
[  224.102910][ T7379] binder: 7378:7379 Acquire 1 refcount change on invalid ref 0 ret -22
[  224.111888][ T7379] binder: 7378:7379 got transaction to invalid handle, 1
[  224.112993][ T7379] binder: 7379:7378 cannot find target node
[  224.113981][ T7379] binder: 7378:7379 transaction call to 0:0 failed 64/29201/-22, size 72-24 line 3062
[  224.134821][ T4492] binder: undelivered TRANSACTION_ERROR: 29201
[  224.864102][ T7395] HTB: quantum of class FFF10001 is small. Consider r2q change.
[  226.358436][ T7423] Config c/1 of g1 needs at least one function.
[  226.359735][ T7423] udc dummy_udc.0: failed to start g1: -22
[  226.378097][ T7423] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  226.389277][ T7423] UDC core: g1: couldn't find an available UDC or it's busy
[  226.635656][ T7434] binder_alloc: 7429: binder_alloc_buf, no vma
[  226.638537][ T7434] binder: cannot allocate buffer: vma cleared, target dead or dying
[  226.639336][ T7434] binder: 7429:7434 transaction call to 7429:0 failed 69/29189/-3, size 72-24 line 3247
[  226.675134][ T7414] bridge1: port 1(erspan0) entered disabled state
[  226.847911][ T7414] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.850412][ T7414] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.393668][ T4543] binder: undelivered TRANSACTION_ERROR: 29189
[  227.468389][ T7414] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  227.490281][ T7414] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  228.309352][ T7414] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  228.311815][ T7414] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  228.313336][ T7414] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  228.314841][ T7414] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  228.872663][ T7467] Config c/1 of g1 needs at least one function.
[  228.873815][ T7467] udc dummy_udc.0: failed to start g1: -22
[  228.893041][ T7467] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  228.894789][ T7467] UDC core: g1: couldn't find an available UDC or it's busy
[  229.258716][ T7473] HTB: quantum of class FFF10001 is small. Consider r2q change.
[  229.397416][ T7487] binder_user_error: 3 callbacks suppressed
[  229.397428][ T7487] binder: 7486:7487 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  229.407128][ T7487] binder: 7487 RLIMIT_NICE not set
[  229.464511][ T7492] binder: 7486:7492 tried to acquire reference to desc 0, got 1 instead
[  229.466737][ T7492] binder_alloc: 7486: binder_alloc_buf, no vma
[  229.468116][ T7492] binder: cannot allocate buffer: vma cleared, target dead or dying
[  229.468180][ T7492] binder: 7486:7492 transaction call to 7486:0 failed 74/29189/-3, size 72-24 line 3247
[  230.195709][ T4380] binder: undelivered TRANSACTION_ERROR: 29189
[  230.967221][ T7530] Config c/1 of g1 needs at least one function.
[  230.969556][ T7530] udc dummy_udc.0: failed to start g1: -22
[  230.983032][ T7530] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  230.987890][ T7530] UDC core: g1: couldn't find an available UDC or it's busy
[  231.976140][ T7562] binder: 7561:7562 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  231.982502][ T7562] binder: 7562 RLIMIT_NICE not set
[  232.028724][ T7564] binder: 7561:7564 tried to acquire reference to desc 0, got 1 instead
[  232.031176][ T7564] binder_alloc: 7561: binder_alloc_buf, no vma
[  232.032590][ T7564] binder: cannot allocate buffer: vma cleared, target dead or dying
[  232.032667][ T7564] binder: 7561:7564 transaction call to 7561:0 failed 79/29189/-3, size 72-24 line 3247
[  232.456602][ T7553] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  232.459273][ T7553] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  232.496181][ T7553] Bluetooth: hci1: Suspend notifier action (1) failed: -4
[  232.501209][ T7553] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  232.506171][ T7553] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  232.514203][ T7553] Bluetooth: hci4: Suspend notifier action (1) failed: -4
[  232.515726][ T7553] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  232.516721][ T7553] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  232.521473][ T7553] Bluetooth: hci5: Suspend notifier action (1) failed: -4
[  232.522831][ T7553] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  232.523827][ T7553] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  232.564322][ T7553] Bluetooth: hci6: Suspend notifier action (1) failed: -4
[  232.779314][ T4476] binder: undelivered TRANSACTION_ERROR: 29189
[  233.780205][ T4344] Bluetooth: hci1: command 0x0c1a tx timeout
[  234.545842][ T7632] Config c/1 of g1 needs at least one function.
[  234.554946][ T7632] udc dummy_udc.0: failed to start g1: -22
[  234.556058][ T7632] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  234.568465][ T7632] UDC core: g1: couldn't find an available UDC or it's busy
[  234.580379][ T4332] Bluetooth: hci6: command 0x0c1a tx timeout
[  234.581438][ T4332] Bluetooth: hci5: command 0x0c1a tx timeout
[  234.582513][ T4332] Bluetooth: hci4: command 0x0c1a tx timeout
[  234.863142][ T7641] binder: tried to use weak ref as strong ref
[  234.864250][ T7641] binder: 7640:7641 Acquire 1 refcount change on invalid ref 0 ret -22
[  234.891785][ T7641] binder: 7640:7641 got transaction to invalid handle, 1
[  234.893064][ T7641] binder: 7641:7640 cannot find target node
[  234.894101][ T7641] binder: 7640:7641 transaction call to 0:0 failed 82/29201/-22, size 72-24 line 3062
[  234.900810][ T3901] binder: undelivered TRANSACTION_ERROR: 29201
[  234.958320][ T7643] using random self ethernet address
[  234.959433][ T7643] using random host ethernet address
[  235.517738][ T7665] HTB: quantum of class FFF10001 is small. Consider r2q change.
[  235.850472][ T4344] Bluetooth: hci1: command 0x0406 tx timeout
[  236.969771][ T7686] binder: tried to use weak ref as strong ref
[  236.981403][ T7686] binder: 7685:7686 Acquire 1 refcount change on invalid ref 0 ret -22
[  236.990845][ T7686] binder: 7685:7686 got transaction to invalid handle, 1
[  236.992404][ T7686] binder: 7686:7685 cannot find target node
[  237.010223][ T7686] binder: 7685:7686 transaction call to 0:0 failed 85/29201/-22, size 72-24 line 3062
[  237.023043][ T4476] binder: undelivered TRANSACTION_ERROR: 29201
[  237.262247][ T4332] Bluetooth: hci4: command 0x0406 tx timeout
[  237.263437][ T4332] Bluetooth: hci5: command 0x0406 tx timeout
[  237.264487][ T4332] Bluetooth: hci6: command 0x0406 tx timeout
[  238.910483][ T7712] capability: warning: `syz.1.868' uses deprecated v2 capabilities in a way that may be insecure
[  238.994680][ T7712] netlink: 12 bytes leftover after parsing attributes in process `syz.1.868'.
[  239.620212][ T7728] usb0: HOST MAC ca:a0:f4:37:e1:53
[  239.621347][ T7728] usb0: MAC 0a:80:59:86:43:3c
[  239.753183][ T7730] binder: tried to use weak ref as strong ref
[  239.754272][ T7730] binder: 7726:7730 Acquire 1 refcount change on invalid ref 0 ret -22
[  239.794849][ T7730] binder: 7726:7730 got transaction to invalid handle, 1
[  239.796246][ T7730] binder: 7730:7726 cannot find target node
[  239.797273][ T7730] binder: 7726:7730 transaction call to 0:0 failed 88/29201/-22, size 72-24 line 3062
[  239.840375][ T4476] binder: undelivered TRANSACTION_ERROR: 29201
[  239.900240][ T4468] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  240.083478][ T4468] usb 1-1: Dual-Role OTG device on HNP port
[  240.085172][ T4468] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01
[  240.087959][ T4468] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.464807][ T4468] cdc_eem 1-1:1.0 usb1: register 'cdc_eem' at usb-dummy_hcd.0-1, CDC EEM Device, 86:76:6e:6a:49:52
[  240.513504][ T7741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  240.580362][ T7741] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  241.806990][ T7790] binder: BINDER_SET_CONTEXT_MGR already set
[  241.813455][ T7790] binder: 7788:7790 ioctl 4018620d 200002c0 returned -16
[  241.817524][ T7790] binder: 7788:7790 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  241.827480][ T7790] binder: 7790 RLIMIT_NICE not set
[  241.869810][ T7791] binder: 7788:7791 got transaction to invalid handle, 1
[  241.872343][ T7791] binder: 7791:7788 cannot find target node
[  241.873580][ T7791] binder: 7788:7791 transaction call to 0:0 failed 91/29201/-22, size 72-24 line 3062
[  242.602711][ T4468] binder: undelivered TRANSACTION_ERROR: 29201
[  242.730186][ T7754] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  243.713230][ T7834] binder: BINDER_SET_CONTEXT_MGR already set
[  243.714372][ T7834] binder: 7830:7834 ioctl 4018620d 200002c0 returned -16
[  243.740561][ T7834] binder: 7830:7834 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  243.742915][ T7834] binder: 7834 RLIMIT_NICE not set
[  243.797298][ T7838] binder: 7830:7838 got transaction to invalid handle, 1
[  243.798662][ T7838] binder: 7838:7830 cannot find target node
[  243.799724][ T7838] binder: 7830:7838 transaction call to 0:0 failed 94/29201/-22, size 72-24 line 3062
[  244.493709][ T4476] binder: undelivered TRANSACTION_ERROR: 29201
[  246.072279][ T7892] binder: BINDER_SET_CONTEXT_MGR already set
[  246.073434][ T7892] binder: 7890:7892 ioctl 4018620d 200002c0 returned -16
[  246.116871][ T7892] binder: 7890:7892 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  246.125217][ T7892] binder: 7892 RLIMIT_NICE not set
[  246.275716][ T7897] binder: 7890:7897 got transaction to invalid handle, 1
[  246.277470][ T7897] binder: 7897:7890 cannot find target node
[  246.278421][ T7897] binder: 7890:7897 transaction call to 0:0 failed 97/29201/-22, size 72-24 line 3062
[  246.834202][ T4468] binder: undelivered TRANSACTION_ERROR: 29201
[  246.980188][ T7915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  246.991182][ T7915] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  247.514827][ T7933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  247.555273][ T7933] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  247.560389][ T7935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  247.562127][ T7935] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  247.602234][ T7933] CIFS: VFS: Unable to allocate memory for devname
[  247.607462][ T7933] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000).
[  247.641117][ T7933] qnx6: wrong signature (magic) in superblock #1.
[  247.642442][ T7933] qnx6: unable to read the first superblock
[  248.633578][ T7962] binder: 7960:7962 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  248.653507][ T7962] binder: 7962 RLIMIT_NICE not set
[  248.685868][ T7963] binder: 7960:7963 got transaction to invalid handle, 1
[  248.687199][ T7963] binder: 7963:7960 cannot find target node
[  248.688255][ T7963] binder: 7960:7963 transaction call to 0:0 failed 101/29201/-22, size 72-24 line 3062
[  248.812024][ T2065] ieee802154 phy0 wpan0: encryption failed: -22
[  248.813370][ T2065] ieee802154 phy1 wpan1: encryption failed: -22
[  249.210348][ T7915] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  249.431646][ T4468] binder: undelivered TRANSACTION_ERROR: 29201
[  249.935944][ T7984] netlink: 32 bytes leftover after parsing attributes in process `syz.6.944'.
[  249.969184][   T27] kauditd_printk_skb: 9 callbacks suppressed
[  249.969197][   T27] audit: type=1326 audit(249.950:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7977 comm="syz.3.942" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d5781a8 code=0x7ffc0000
[  249.992508][   T27] audit: type=1326 audit(249.980:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7977 comm="syz.3.942" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=40 compat=0 ip=0xffff8d5781a8 code=0x7ffc0000
[  249.998001][   T27] audit: type=1326 audit(249.980:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7977 comm="syz.3.942" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d5781a8 code=0x7ffc0000
[  250.007113][   T27] audit: type=1326 audit(249.990:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7977 comm="syz.3.942" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8d5781a8 code=0x7ffc0000
[  250.035567][   T27] audit: type=1326 audit(249.990:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7977 comm="syz.3.942" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d5781a8 code=0x7ffc0000
[  250.039713][   T27] audit: type=1326 audit(249.990:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7977 comm="syz.3.942" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffff8d5781a8 code=0x7ffc0000
[  250.055332][   T27] audit: type=1326 audit(249.990:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7977 comm="syz.3.942" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d5781a8 code=0x7ffc0000
[  250.096020][   T27] audit: type=1326 audit(250.010:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7977 comm="syz.3.942" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=116 compat=0 ip=0xffff8d5781a8 code=0x7ffc0000
[  250.112999][   T27] audit: type=1326 audit(250.010:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7977 comm="syz.3.942" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d5781a8 code=0x7ffc0000
[  250.127777][   T27] audit: type=1326 audit(250.010:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7977 comm="syz.3.942" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d5781a8 code=0x7ffc0000
[  251.483224][ T8012] binder: 8011:8012 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  251.497416][ T8012] binder: 8012 RLIMIT_NICE not set
[  251.535973][ T8016] binder: 8011:8016 got transaction to invalid handle, 1
[  251.537473][ T8016] binder: 8016:8011 cannot find target node
[  251.538872][ T8016] binder: 8011:8016 transaction call to 0:0 failed 105/29201/-22, size 72-24 line 3062
[  251.917287][ T8025] netlink: 32 bytes leftover after parsing attributes in process `syz.6.956'.
[  252.234266][ T4468] binder: undelivered TRANSACTION_ERROR: 29201
[  252.553733][ T8042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  252.555654][ T8042] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  254.091264][ T8081] netlink: 32 bytes leftover after parsing attributes in process `syz.3.969'.
[  254.399420][ T8092] binder: 8090:8092 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  254.408008][ T8092] binder: 8092 RLIMIT_NICE not set
[  254.461138][ T8093] binder: 8090:8093 got transaction to invalid handle, 1
[  254.462639][ T8093] binder: 8093:8090 cannot find target node
[  254.463970][ T8093] binder: 8090:8093 transaction call to 0:0 failed 109/29201/-22, size 72-24 line 3062
[  254.730515][ T8046] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  255.163785][ T4476] binder: undelivered TRANSACTION_ERROR: 29201
[  255.910319][ T8129] netlink: 32 bytes leftover after parsing attributes in process `syz.1.982'.
[  257.330801][ T8148] binder: BINDER_SET_CONTEXT_MGR already set
[  257.332081][ T8148] binder: 8145:8148 ioctl 4018620d 200002c0 returned -16
[  257.351873][ T8148] binder: 8145:8148 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  257.354334][ T8148] binder: 8148 RLIMIT_NICE not set
[  257.865562][ T8159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  257.870637][ T8159] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  258.112281][ T8168] netlink: 32 bytes leftover after parsing attributes in process `syz.6.995'.
[  258.610272][ T8182] serio: Serial port ptm0
[  259.707292][ T8201] 9pnet_virtio: no channels available for device syz
[  259.717077][ T8202] binder: BINDER_SET_CONTEXT_MGR already set
[  259.718318][ T8202] binder: 8200:8202 ioctl 4018620d 200002c0 returned -16
[  259.725538][ T8202] binder: 8200:8202 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  259.728143][ T8202] binder: 8202 RLIMIT_NICE not set
[  260.010311][ T8163] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  260.596085][ T8219] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1008'.
[  262.436041][ T8259] binder: BINDER_SET_CONTEXT_MGR already set
[  262.437212][ T8259] binder: 8257:8259 ioctl 4018620d 200002c0 returned -16
[  262.451990][ T8259] binder: 8257:8259 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  262.464927][ T8259] binder: 8259 RLIMIT_NICE not set
[  263.433183][ T8264] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  263.496596][ T8282] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1025'.
[  265.218044][ T8309] binder: 8307:8309 IncRefs 0 refcount change on invalid ref 0 ret -22
[  265.231281][ T8309] binder: 8307:8309 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  265.233444][ T8309] binder: 8309 RLIMIT_NICE not set
[  265.284161][ T8311] binder: 8307:8311 got transaction to invalid handle, 1
[  265.285502][ T8311] binder: 8311:8307 cannot find target node
[  265.286623][ T8311] binder: 8307:8311 transaction call to 0:0 failed 115/29201/-22, size 72-24 line 3062
[  266.000862][ T4476] binder: undelivered TRANSACTION_ERROR: 29201
[  266.217475][ T8314] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  267.410688][ T8364] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1051'.
[  268.057174][ T8376] binder: 8375:8376 IncRefs 0 refcount change on invalid ref 0 ret -22
[  268.084869][ T8376] binder: 8375:8376 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  268.087184][ T8376] binder: 8376 RLIMIT_NICE not set
[  268.136958][ T8377] binder: 8375:8377 got transaction to invalid handle, 1
[  268.138281][ T8377] binder: 8377:8375 cannot find target node
[  268.139254][ T8377] binder: 8375:8377 transaction call to 0:0 failed 118/29201/-22, size 72-24 line 3062
[  268.862366][ T4476] binder: undelivered TRANSACTION_ERROR: 29201
[  269.803700][ T8387] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  270.723623][ T8423] binder: 8422:8423 IncRefs 0 refcount change on invalid ref 0 ret -22
[  270.748405][ T8423] binder: 8422:8423 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  270.757028][ T8423] binder: 8423 RLIMIT_NICE not set
[  270.800981][ T8425] binder: 8422:8425 got transaction to invalid handle, 1
[  270.802371][ T8425] binder: 8425:8422 cannot find target node
[  270.803328][ T8425] binder: 8422:8425 transaction call to 0:0 failed 121/29201/-22, size 72-24 line 3062
[  271.464791][ T8441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  271.466825][ T8441] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  271.537430][ T4476] binder: undelivered TRANSACTION_ERROR: 29201
[  273.047829][ T8482] binder: 8480:8482 IncRefs 0 refcount change on invalid ref 0 ret -22
[  273.057631][ T8482] binder: 8480:8482 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  273.063480][ T8482] binder: 8482 RLIMIT_NICE not set
[  273.109759][ T8483] binder: 8480:8483 got transaction to invalid handle, 1
[  273.113203][ T8483] binder: 8483:8480 cannot find target node
[  273.114129][ T8483] binder: 8480:8483 transaction call to 0:0 failed 123/29201/-22, size 72-24 line 3062
[  273.189274][ T4468] usb 1-1: USB disconnect, device number 2
[  273.195781][ T4468] cdc_eem 1-1:1.0 usb1: unregister 'cdc_eem' usb-dummy_hcd.0-1, CDC EEM Device
[  273.610328][ T8444] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  273.860093][ T3901] binder: undelivered TRANSACTION_ERROR: 29201
[  274.999276][ T8530] binder: 8528:8530 IncRefs 0 refcount change on invalid ref 0 ret -22
[  275.036405][ T8530] binder: 8528:8530 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  275.089583][ T8531] binder: 8531:8528 cannot find target node
[  275.092753][ T8531] binder: 8528:8531 transaction call to 0:0 failed 125/29201/-22, size 72-24 line 3062
[  275.330368][ T3901] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  275.769617][ T4380] binder: undelivered TRANSACTION_ERROR: 29201
[  275.847408][ T8543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  275.861903][ T8543] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  276.092104][ T8554] UDC core: g1: couldn't find an available UDC or it's busy
[  278.119934][ T8540] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  278.202255][ T8589] binder_user_error: 2 callbacks suppressed
[  278.202268][ T8589] binder: 8586:8589 IncRefs 0 refcount change on invalid ref 0 ret -22
[  278.232338][ T8589] binder: 8586:8589 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  278.238451][ T8589] binder: 8589 RLIMIT_NICE not set
[  278.238658][ T8592] UDC core: g1: couldn't find an available UDC or it's busy
[  278.286830][ T8596] binder: 8586:8596 got transaction to invalid handle, 1
[  278.288034][ T8596] binder: 8596:8586 cannot find target node
[  278.289083][ T8596] binder: 8586:8596 transaction call to 0:0 failed 127/29201/-22, size 72-24 line 3062
[  278.550356][ T4476] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  278.997494][ T4492] binder: undelivered TRANSACTION_ERROR: 29201
[  280.499065][ T8644] UDC core: g1: couldn't find an available UDC or it's busy
[  281.298231][ T4344] Bluetooth: hci6: command 0x0405 tx timeout
[  282.346226][ T8659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  282.348194][ T8659] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  282.819002][ T8678] binder: 8677:8678 IncRefs 0 refcount change on invalid ref 0 ret -22
[  282.822862][ T8678] binder: 8677:8678 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  282.825184][ T8678] binder: 8678 RLIMIT_NICE not set
[  282.874780][ T8679] binder: 8677:8679 got transaction to invalid handle, 1
[  282.876002][ T8679] binder: 8679:8677 cannot find target node
[  282.877056][ T8679] binder: 8677:8679 transaction call to 0:0 failed 129/29201/-22, size 72-24 line 3062
[  283.040295][ T4492] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  283.221599][ T4492] usb 1-1: Dual-Role OTG device on HNP port
[  283.223230][ T4492] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01
[  283.227492][ T4492] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.292762][ T4492] cdc_eem 1-1:1.0 usb1: register 'cdc_eem' at usb-dummy_hcd.0-1, CDC EEM Device, 1a:13:fe:98:6d:88
[  283.612208][ T4381] binder: undelivered TRANSACTION_ERROR: 29201
[  283.884243][ T8705] bridge0: port 2(bridge_slave_1) entered disabled state
[  283.886029][ T8705] bridge0: port 1(bridge_slave_0) entered disabled state
[  283.924346][ T8705] bridge0: port 2(bridge_slave_1) entered blocking state
[  283.925777][ T8705] bridge0: port 2(bridge_slave_1) entered forwarding state
[  283.928637][ T8705] bridge0: port 1(bridge_slave_0) entered blocking state
[  283.930073][ T8705] bridge0: port 1(bridge_slave_0) entered forwarding state
[  283.949912][ T8705] device bridge0 entered promiscuous mode
[  284.092681][ T8705] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1141'.
[  284.241088][ T8720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  284.250468][ T8720] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  284.491045][ T8665] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  285.278143][ T8747] binder: 8746:8747 IncRefs 0 refcount change on invalid ref 0 ret -22
[  285.294717][ T8747] binder: 8746:8747 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  285.308192][ T8747] binder: 8747 RLIMIT_NICE not set
[  285.346624][ T8752] binder: 8746:8752 got transaction to invalid handle, 1
[  285.347875][ T8752] binder: 8752:8746 cannot find target node
[  285.348976][ T8752] binder: 8746:8752 transaction call to 0:0 failed 131/29201/-22, size 72-24 line 3062
[  286.072641][ T4381] binder: undelivered TRANSACTION_ERROR: 29201
[  286.330129][ T4332] Bluetooth: hci6: command 0x0405 tx timeout
[  287.286795][ T8798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  287.294062][ T8798] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  287.783661][ T8812] binder: 8810:8812 IncRefs 0 refcount change on invalid ref 0 ret -22
[  287.787654][ T8812] binder: 8810:8812 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  287.793497][ T8812] binder: 8812 RLIMIT_NICE not set
[  287.840259][ T8814] binder: 8810:8814 got transaction to invalid handle, 1
[  287.841988][ T8814] binder: 8814:8810 cannot find target node
[  287.843374][ T8814] binder: 8810:8814 transaction call to 0:0 failed 133/29201/-22, size 72-24 line 3062
[  288.587324][ T4492] binder: undelivered TRANSACTION_ERROR: 29201
[  289.655816][ T8876] binder: 8873:8876 ioctl 4018620d 0 returned -22
[  289.657730][ T8876] binder: 8873:8876 IncRefs 0 refcount change on invalid ref 0 ret -22
[  289.665550][ T8876] binder: 8873:8876 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  289.717772][ T8879] binder: 8879:8873 cannot find target node
[  289.718816][ T8879] binder: 8873:8879 transaction call to 0:0 failed 136/29201/-22, size 72-24 line 3062
[  289.772583][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  290.395305][ T8892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  290.420327][ T8892] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  290.478165][ T4381] binder: undelivered TRANSACTION_ERROR: 29201
[  290.793612][ T8903] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  290.803788][ T8903] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  290.805986][ T8903] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  290.810343][ T8903] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  292.516429][ T8940] binder_user_error: 2 callbacks suppressed
[  292.516442][ T8940] binder: 8939:8940 tried to acquire reference to desc 0, got 1 instead
[  292.535941][ T8940] binder: 8939:8940 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  292.538326][ T8940] binder: 8940 RLIMIT_NICE not set
[  292.551368][ T4476] binder: undelivered TRANSACTION_COMPLETE
[  292.701975][ T4381] binder: undelivered transaction 141, process died.
[  292.820256][ T4332] Bluetooth: hci6: command 0x0c1a tx timeout
[  292.821427][ T4332] Bluetooth: hci5: command 0x0c1a tx timeout
[  292.822523][ T4332] Bluetooth: hci4: command 0x0c1a tx timeout
[  292.823643][ T4332] Bluetooth: hci1: command 0x0c1a tx timeout
[  293.045832][ T8955] binder: 8953:8955 ioctl 4018620d 0 returned -22
[  293.048451][ T8955] binder: 8953:8955 IncRefs 0 refcount change on invalid ref 0 ret -22
[  293.068498][ T8955] binder: 8953:8955 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  293.071009][ T8955] binder: 8955 RLIMIT_NICE not set
[  293.120844][ T8960] binder: 8953:8960 got transaction to invalid handle, 1
[  293.122066][ T8960] binder: 8960:8953 cannot find target node
[  293.123109][ T8960] binder: 8953:8960 transaction call to 0:0 failed 144/29201/-22, size 72-24 line 3062
[  293.605471][ T8974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  293.608033][ T8974] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  293.857855][ T4476] binder: undelivered TRANSACTION_ERROR: 29201
[  295.569898][ T9022] binder: 9020:9022 ioctl 4018620d 0 returned -22
[  295.593233][ T9022] binder: 9020:9022 IncRefs 0 refcount change on invalid ref 0 ret -22
[  295.604867][ T9022] binder: 9020:9022 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  295.606876][ T9022] binder: 9022 RLIMIT_NICE not set
[  295.656946][ T9023] binder: 9023:9020 cannot find target node
[  295.658118][ T9023] binder: 9020:9023 transaction call to 0:0 failed 147/29201/-22, size 72-24 line 3062
[  296.350494][ T4492] usb 1-1: USB disconnect, device number 5
[  296.352726][ T4492] cdc_eem 1-1:1.0 usb1: unregister 'cdc_eem' usb-dummy_hcd.0-1, CDC EEM Device
[  296.363678][ T4380] binder: undelivered TRANSACTION_ERROR: 29201
[  296.694728][ T9051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  296.696603][ T9051] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  298.060221][ T4492] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  298.139130][ T9088] binder: BINDER_SET_CONTEXT_MGR already set
[  298.151428][ T9088] binder: 9087:9088 ioctl 4018620d 200002c0 returned -16
[  298.153284][ T9088] binder_user_error: 1 callbacks suppressed
[  298.153293][ T9088] binder: 9087:9088 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  298.172157][ T9088] binder: 9088 RLIMIT_NICE not set
[  298.271814][ T4492] usb 1-1: Dual-Role OTG device on HNP port
[  298.273281][ T4492] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01
[  298.274928][ T4492] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  298.324482][ T4492] cdc_eem 1-1:1.0 usb1: register 'cdc_eem' at usb-dummy_hcd.0-1, CDC EEM Device, b2:d4:8a:ff:d5:62
[  298.541226][ T4492] usb 1-1: USB disconnect, device number 6
[  298.543142][ T4492] cdc_eem 1-1:1.0 usb1: unregister 'cdc_eem' usb-dummy_hcd.0-1, CDC EEM Device
[  299.850158][ T4380] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  299.947088][ T9138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  299.949226][ T9138] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  300.051249][ T4380] usb 1-1: Dual-Role OTG device on HNP port
[  300.052594][ T4380] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01
[  300.054712][ T4380] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.105159][ T4380] cdc_eem 1-1:1.0 usb1: register 'cdc_eem' at usb-dummy_hcd.0-1, CDC EEM Device, ee:b0:4d:74:da:a5
[  300.129559][ T4380] usb 1-1: USB disconnect, device number 7
[  300.137716][ T4380] cdc_eem 1-1:1.0 usb1: unregister 'cdc_eem' usb-dummy_hcd.0-1, CDC EEM Device
[  300.761487][ T9155] binder: BINDER_SET_CONTEXT_MGR already set
[  300.762676][ T9155] binder: 9154:9155 ioctl 4018620d 200002c0 returned -16
[  300.764086][ T9155] binder: 9154:9155 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  300.766231][ T9155] binder: 9155 RLIMIT_NICE not set
[  302.060329][ T4476] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  302.241228][ T4476] usb 1-1: Dual-Role OTG device on HNP port
[  302.242738][ T4476] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01
[  302.244554][ T4476] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  302.291294][ T4476] cdc_eem 1-1:1.0 usb1: register 'cdc_eem' at usb-dummy_hcd.0-1, CDC EEM Device, 42:2c:80:7d:7b:e6
[  302.336663][ T4476] usb 1-1: USB disconnect, device number 8
[  302.338720][ T4476] cdc_eem 1-1:1.0 usb1: unregister 'cdc_eem' usb-dummy_hcd.0-1, CDC EEM Device
[  302.972921][ T9219] binder: BINDER_SET_CONTEXT_MGR already set
[  302.974065][ T9218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  302.975542][ T9219] binder: 9217:9219 ioctl 4018620d 200002c0 returned -16
[  302.975800][ T9218] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  303.002505][ T9219] binder: 9217:9219 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  303.004755][ T9219] binder: 9219 RLIMIT_NICE not set
[  303.610473][ T4476] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  303.791026][ T4476] usb 1-1: Dual-Role OTG device on HNP port
[  303.792600][ T4476] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01
[  303.794144][ T4476] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.832577][ T4476] cdc_eem 1-1:1.0 usb1: register 'cdc_eem' at usb-dummy_hcd.0-1, CDC EEM Device, 82:32:a5:d6:a2:c4
[  303.907144][ T4476] usb 1-1: USB disconnect, device number 9
[  303.909238][ T4476] cdc_eem 1-1:1.0 usb1: unregister 'cdc_eem' usb-dummy_hcd.0-1, CDC EEM Device
[  304.932571][ T9277] binder: 9276:9277 ioctl c0306201 0 returned -14
[  304.950195][ T4476] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  304.956752][ T9277] binder: 9276:9277 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  304.971513][ T9277] binder: 9277 RLIMIT_NICE not set
[  305.008728][ T9279] binder: 9276:9279 got transaction to invalid handle, 1
[  305.010437][ T9279] binder: 9279:9276 cannot find target node
[  305.011431][ T9279] binder: 9276:9279 transaction call to 0:0 failed 154/29201/-22, size 72-24 line 3062
[  305.135537][ T4476] usb 1-1: Dual-Role OTG device on HNP port
[  305.136917][ T4476] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01
[  305.138612][ T4476] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  305.171264][ T4476] cdc_eem 1-1:1.0 usb1: register 'cdc_eem' at usb-dummy_hcd.0-1, CDC EEM Device, a6:3d:b5:2b:55:f1
[  305.225475][ T4476] usb 1-1: USB disconnect, device number 10
[  305.227699][ T4476] cdc_eem 1-1:1.0 usb1: unregister 'cdc_eem' usb-dummy_hcd.0-1, CDC EEM Device
[  305.748603][ T4476] binder: undelivered TRANSACTION_ERROR: 29201
[  306.276820][ T9314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  306.287039][ T9314] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  308.081737][ T9350] binder: 9349:9350 ioctl c0306201 0 returned -14
[  308.092960][ T9350] binder: 9349:9350 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  308.101578][ T9350] binder: 9350 RLIMIT_NICE not set
[  308.144743][ T9355] binder: 9349:9355 got transaction to invalid handle, 1
[  308.146107][ T9355] binder: 9355:9349 cannot find target node
[  308.147192][ T9355] binder: 9349:9355 transaction call to 0:0 failed 158/29201/-22, size 72-24 line 3062
[  308.246764][ T9352] nvme_fabrics: missing parameter 'nqn=%s'
[  308.862455][ T4492] binder: undelivered TRANSACTION_ERROR: 29201
[  309.196836][ T9390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  309.209611][ T9390] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  309.917571][ T9403] block device autoloading is deprecated and will be removed.
[  310.253237][ T2065] ieee802154 phy0 wpan0: encryption failed: -22
[  310.254423][ T2065] ieee802154 phy1 wpan1: encryption failed: -22
[  310.862788][ T9426] binder: 9424:9426 ioctl c0306201 0 returned -14
[  310.879080][ T9426] binder: 9424:9426 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  310.888790][ T9426] binder: 9426 RLIMIT_NICE not set
[  310.933586][ T9429] binder: 9424:9429 got transaction to invalid handle, 1
[  310.935237][ T9429] binder: 9429:9424 cannot find target node
[  310.936554][ T9429] binder: 9424:9429 transaction call to 0:0 failed 162/29201/-22, size 72-24 line 3062
[  311.346276][ T9442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  311.348034][ T9442] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  311.662202][ T4476] binder: undelivered TRANSACTION_ERROR: 29201
[  312.892972][ T9484] binder: 9483:9484 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  312.895223][ T9484] binder: 9484 RLIMIT_NICE not set
[  312.945729][ T9490] binder: 9483:9490 got transaction to invalid handle, 1
[  312.947132][ T9490] binder: 9490:9483 cannot find target node
[  312.948152][ T9490] binder: 9483:9490 transaction call to 0:0 failed 166/29201/-22, size 72-24 line 3062
[  313.113226][ T9495] 8021q: VLANs not supported on ipvlan0
[  313.664566][ T4381] binder: undelivered TRANSACTION_ERROR: 29201
[  313.705412][ T9500] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  313.708244][ T9500] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  313.792026][ T9500] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  313.813696][ T9505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  313.826072][ T9505] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  314.316772][ T9497] printk: console [ttyS0] disabled
[  315.278928][ T9538] binder: 9537:9538 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  315.283873][ T9538] binder: 9538 RLIMIT_NICE not set
[  315.329890][ T9539] binder: 9537:9539 got transaction to invalid handle, 1
[  315.350380][ T9539] binder: 9539:9537 cannot find target node
[  315.351801][ T9539] binder: 9537:9539 transaction call to 0:0 failed 170/29201/-22, size 72-24 line 3062
[  316.068000][ T9556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  316.072810][ T9556] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  316.085750][ T4380] binder: undelivered TRANSACTION_ERROR: 29201
[  317.278589][ T9579] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  317.872514][ T9594] binder: 9593:9594 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  317.874808][ T9594] binder: 9594 RLIMIT_NICE not set
[  317.953316][ T9598] binder: 9593:9598 got transaction to invalid handle, 1
[  317.954764][ T9598] binder: 9598:9593 cannot find target node
[  317.955761][ T9598] binder: 9593:9598 transaction call to 0:0 failed 174/29201/-22, size 72-24 line 3062
[  318.020215][ T4468] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  318.202015][ T4468] usb 1-1: Dual-Role OTG device on HNP port
[  318.203484][ T4468] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01
[  318.205308][ T4468] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.241402][ T4468] cdc_eem 1-1:1.0 usb1: register 'cdc_eem' at usb-dummy_hcd.0-1, CDC EEM Device, 9e:26:1e:7f:8b:2a
[  318.677846][ T4468] binder: undelivered TRANSACTION_ERROR: 29201
[  321.526673][ T9622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  321.540357][ T9622] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  322.217184][ T4381] usb 1-1: USB disconnect, device number 11
[  322.219188][ T4381] cdc_eem 1-1:1.0 usb1: unregister 'cdc_eem' usb-dummy_hcd.0-1, CDC EEM Device
[  322.531039][ T9649] binder: 9647:9649 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  322.552525][ T9649] binder: 9649 RLIMIT_NICE not set
[  322.584864][ T9652] binder: 9647:9652 got transaction to invalid handle, 1
[  322.586390][ T9652] binder: 9652:9647 cannot find target node
[  322.587751][ T9652] binder: 9647:9652 transaction call to 0:0 failed 178/29201/-22, size 72-24 line 3062
[  323.011154][ T9660] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  323.321024][ T4381] binder: undelivered TRANSACTION_ERROR: 29201
[  323.604240][ T4344] Bluetooth: hci1: Malformed Event: 0x13
[  323.675945][ T9674] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4)
[  323.677337][ T9674] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  323.685487][ T9674] vhci_hcd vhci_hcd.0: Device attached
[  323.725594][ T9675] vhci_hcd: connection closed
[  323.743744][    T9] vhci_hcd: stop threads
[  323.746011][    T9] vhci_hcd: release socket
[  323.746838][    T9] vhci_hcd: disconnect device
[  324.200543][ T4380] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  325.060920][ T9712] binder: 9711:9712 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  325.063190][ T9712] binder: 9712 RLIMIT_NICE not set
[  325.113102][ T9714] binder: 9711:9714 got transaction to invalid handle, 1
[  325.114626][ T9714] binder: 9714:9711 cannot find target node
[  325.116034][ T9714] binder: 9711:9714 transaction call to 0:0 failed 182/29201/-22, size 72-24 line 3062
[  325.860984][ T4380] binder: undelivered TRANSACTION_ERROR: 29201
[  327.188545][ T9767] binder: 9766:9767 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  327.196924][ T9767] binder: 9767 RLIMIT_NICE not set
[  327.242161][ T9772] binder: 9766:9772 got transaction to invalid handle, 1
[  327.243644][ T9772] binder: 9772:9766 cannot find target node
[  327.244554][ T9772] binder: 9766:9772 transaction call to 0:0 failed 186/29201/-22, size 72-24 line 3062
[  327.974095][ T4468] binder: undelivered TRANSACTION_ERROR: 29201
[  329.932976][ T9829] binder: 9826:9829 got transaction to invalid handle, 1
[  329.934314][ T9829] binder: 9829:9826 cannot find target node
[  329.935250][ T9829] binder: 9826:9829 transaction call to 0:0 failed 189/29201/-22, size 72-24 line 3062
[  329.980347][ T4375] binder: undelivered TRANSACTION_ERROR: 29201
[  332.255926][ T9880] binder: tried to use weak ref as strong ref
[  332.257162][ T9880] binder: 9879:9880 Acquire 1 refcount change on invalid ref 0 ret -22
[  332.292996][ T9880] binder: 9879:9880 got transaction to invalid handle, 1
[  332.299676][ T9880] binder: 9880:9879 cannot find target node
[  332.320396][ T9880] binder: 9879:9880 transaction call to 0:0 failed 192/29201/-22, size 72-24 line 3062
[  332.352109][ T4492] binder: undelivered TRANSACTION_ERROR: 29201
[  332.407475][ T9881] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1455'.
[  334.576640][ T9918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  334.590418][ T9918] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  334.664898][ T9920] binder: tried to use weak ref as strong ref
[  334.666003][ T9920] binder: 9919:9920 Acquire 1 refcount change on invalid ref 0 ret -22
[  334.710711][ T9920] binder: 9919:9920 got transaction to invalid handle, 1
[  334.712033][ T9920] binder: 9920:9919 cannot find target node
[  334.713033][ T9920] binder: 9919:9920 transaction call to 0:0 failed 195/29201/-22, size 72-24 line 3062
[  334.715101][ T4543] binder: undelivered TRANSACTION_ERROR: 29201
[  335.380389][ T4543] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  335.434820][ T9944] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  335.586902][ T4543] usb 1-1: Dual-Role OTG device on HNP port
[  335.588385][ T4543] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01
[  335.596949][ T4543] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  335.693528][ T4543] cdc_eem 1-1:1.0 usb1: register 'cdc_eem' at usb-dummy_hcd.0-1, CDC EEM Device, f2:b0:db:2c:bf:58
[  335.707932][ T9952] binder: 9951:9952 ioctl 4018620d 0 returned -22
[  335.709361][ T9952] binder: 9951:9952 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  335.712839][ T9952] binder: 9952 RLIMIT_NICE not set
[  336.420547][ T9956] binder: tried to use weak ref as strong ref
[  336.427499][ T9956] binder: 9951:9956 Acquire 1 refcount change on invalid ref 0 ret -22
[  338.078793][T10004] binder: 10002:10004 ioctl 4018620d 0 returned -22
[  338.094143][T10004] binder: 10002:10004 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  338.116013][T10004] binder: 10004 RLIMIT_NICE not set
[  338.151019][T10013] binder: tried to use weak ref as strong ref
[  338.152258][T10013] binder: 10002:10013 Acquire 1 refcount change on invalid ref 0 ret -22
[  338.161089][T10013] binder: 10002:10013 got transaction to invalid handle, 1
[  338.162470][T10013] binder: 10013:10002 cannot find target node
[  338.837159][T10013] binder: 10002:10013 transaction call to 0:0 failed 200/29201/-22, size 72-24 line 3062
[  338.981718][ T4380] binder: undelivered TRANSACTION_ERROR: 29201
[  341.725419][T10067] binder: 10066:10067 ioctl 4018620d 0 returned -22
[  341.735746][T10067] binder: 10066:10067 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  341.751664][T10067] binder: 10067 RLIMIT_NICE not set
[  341.787823][T10068] binder: tried to use weak ref as strong ref
[  341.789206][T10068] binder: 10066:10068 Acquire 1 refcount change on invalid ref 0 ret -22
[  341.801571][T10068] binder: 10066:10068 got transaction to invalid handle, 1
[  341.818673][T10068] binder: 10068:10066 cannot find target node
[  341.837241][T10068] binder: 10066:10068 transaction call to 0:0 failed 203/29201/-22, size 72-24 line 3062
[  342.455568][ T4380] binder: undelivered TRANSACTION_ERROR: 29201
[  345.396934][ T4468] usb 1-1: USB disconnect, device number 14
[  345.398949][ T4468] cdc_eem 1-1:1.0 usb1: unregister 'cdc_eem' usb-dummy_hcd.0-1, CDC EEM Device
[  345.701834][T10180] binder: 10179:10180 ioctl c0306201 0 returned -14
[  345.703832][T10180] binder: 10179:10180 tried to acquire reference to desc 0, got 1 instead
[  346.818344][T10212] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1532'.
[  347.040849][T10219] binder: 10216:10219 ioctl c0306201 0 returned -14
[  347.072255][T10219] binder: 10216:10219 tried to acquire reference to desc 0, got 1 instead
[  348.630954][T10264] binder: BINDER_SET_CONTEXT_MGR already set
[  348.636963][T10264] binder: 10261:10264 ioctl 4018620d 20000100 returned -16
[  348.652722][T10264] binder: BINDER_SET_CONTEXT_MGR already set
[  348.666558][T10264] binder: 10261:10264 ioctl 4018620d 200002c0 returned -16
[  348.671360][T10264] binder: 10261:10264 ioctl c0306201 0 returned -14
[  348.677977][T10264] binder: 10261:10264 got transaction to invalid handle, 1
[  348.685282][T10264] binder: 10264:10261 cannot find target node
[  348.686218][T10264] binder: 10261:10264 transaction call to 0:0 failed 215/29201/-22, size 72-24 line 3062
[  348.698569][ T4375] binder: undelivered TRANSACTION_ERROR: 29201
[  350.133713][T10307] binder: 10306:10307 tried to acquire reference to desc 0, got 1 instead
[  350.948268][T10331] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[  350.949422][T10331] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  350.965616][T10331] vhci_hcd vhci_hcd.0: Device attached
[  351.032960][T10331] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1567'.
[  351.034574][T10331] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  351.051946][T10333] vhci_hcd: connection closed
[  351.053700][T10134] vhci_hcd: stop threads
[  351.055353][T10134] vhci_hcd: release socket
[  351.056193][T10134] vhci_hcd: disconnect device
[  351.456187][T10348] binder: BINDER_SET_CONTEXT_MGR already set
[  351.457356][T10348] binder: 10346:10348 ioctl 4018620d 20000100 returned -16
[  351.492716][T10348] binder: BINDER_SET_CONTEXT_MGR already set
[  351.493896][T10348] binder: 10346:10348 ioctl 4018620d 200002c0 returned -16
[  351.501384][T10348] binder: 10346:10348 got transaction to invalid handle, 1
[  351.502788][T10348] binder: 10348:10346 cannot find target node
[  351.503728][T10348] binder: 10346:10348 transaction call to 0:0 failed 222/29201/-22, size 72-24 line 3062
[  351.505859][ T4381] binder: undelivered TRANSACTION_ERROR: 29201
[  353.298732][T10389] binder: 10386:10389 tried to acquire reference to desc 0, got 1 instead
[  355.891190][T10442] binder: BINDER_SET_CONTEXT_MGR already set
[  355.892238][T10442] binder: 10441:10442 ioctl 4018620d 20000100 returned -16
[  355.931462][T10442] binder: BINDER_SET_CONTEXT_MGR already set
[  355.938580][T10442] binder: 10441:10442 ioctl 4018620d 200002c0 returned -16
[  355.949621][T10442] binder: 10441:10442 got transaction to invalid handle, 1
[  355.951711][T10442] binder: 10442:10441 cannot find target node
[  355.959078][T10442] binder: 10441:10442 transaction call to 0:0 failed 229/29201/-22, size 72-24 line 3062
[  355.965520][ T4543] binder: undelivered TRANSACTION_ERROR: 29201
[  357.261851][ T4375] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  357.280706][ T4375] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  361.615325][T10508] binder: BINDER_SET_CONTEXT_MGR already set
[  361.616429][T10508] binder: 10507:10508 ioctl 4018620d 20000100 returned -16
[  361.803225][T10508] binder: BINDER_SET_CONTEXT_MGR already set
[  361.804372][T10508] binder: 10507:10508 ioctl 4018620d 200002c0 returned -16
[  361.857358][T10508] binder: 10507:10508 got transaction to invalid handle, 1
[  361.858770][T10508] binder: 10508:10507 cannot find target node
[  361.859868][T10508] binder: 10507:10508 transaction call to 0:0 failed 231/29201/-22, size 72-24 line 3062
[  361.900855][ T4468] binder: undelivered TRANSACTION_ERROR: 29201
[  363.401900][T10586] binder: BINDER_SET_CONTEXT_MGR already set
[  363.402924][T10586] binder: 10584:10586 ioctl 4018620d 20000100 returned -16
[  363.415720][T10586] binder: BINDER_SET_CONTEXT_MGR already set
[  363.416768][T10586] binder: 10584:10586 ioctl 4018620d 200002c0 returned -16
[  363.435904][T10586] binder: 10584:10586 got transaction to invalid handle, 1
[  363.437209][T10586] binder: 10586:10584 cannot find target node
[  363.438290][T10586] binder: 10584:10586 transaction call to 0:0 failed 233/29201/-22, size 72-24 line 3062
[  363.450250][ T4468] binder: undelivered TRANSACTION_ERROR: 29201
[  364.932707][ T4344] Bluetooth: hci5: unexpected event for opcode 0x0c47
[  365.242123][T10629] binder: BINDER_SET_CONTEXT_MGR already set
[  365.245692][T10629] binder: 10628:10629 ioctl 4018620d 20000100 returned -16
[  365.262913][T10629] binder: BINDER_SET_CONTEXT_MGR already set
[  365.263891][T10629] binder: 10628:10629 ioctl 4018620d 200002c0 returned -16
[  365.273118][T10629] binder: 10628:10629 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  365.275233][T10629] binder: 10629 RLIMIT_NICE not set
[  365.325741][T10632] binder: 10628:10632 got transaction to invalid handle, 1
[  365.327285][T10632] binder: 10632:10628 cannot find target node
[  365.328309][T10632] binder: 10628:10632 transaction call to 0:0 failed 235/29201/-22, size 72-24 line 3062
[  366.042624][ T4381] binder: undelivered TRANSACTION_ERROR: 29201
[  367.539746][T10682] binder: 10681:10682 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  367.542537][T10682] binder: 10682 RLIMIT_NICE not set
[  367.591603][T10684] binder: 10681:10684 tried to acquire reference to desc 0, got 1 instead
[  368.240342][T10700] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800
[  368.591924][T10712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  368.614165][T10712] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  368.831304][T10712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  368.833042][T10712] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  368.952175][T10724] binder: BINDER_SET_CONTEXT_MGR already set
[  368.953327][T10724] binder: 10721:10724 ioctl 4018620d 20000100 returned -16
[  368.962700][T10724] binder: BINDER_SET_CONTEXT_MGR already set
[  368.963774][T10724] binder: 10721:10724 ioctl 4018620d 200002c0 returned -16
[  368.965243][T10724] binder: 10721:10724 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  368.967389][T10724] binder: 10724 RLIMIT_NICE not set
[  369.017790][T10726] binder: 10721:10726 got transaction to invalid handle, 1
[  369.019139][T10726] binder: 10726:10721 cannot find target node
[  369.020734][T10726] binder: 10721:10726 transaction call to 0:0 failed 242/29201/-22, size 72-24 line 3062
[  369.725304][ T4380] binder: undelivered TRANSACTION_ERROR: 29201
[  369.862150][T10747] UDC core: g1: couldn't find an available UDC or it's busy
[  370.680789][T10772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  370.768964][T10776] binder: BINDER_SET_CONTEXT_MGR already set
[  370.778591][T10776] binder: 10775:10776 ioctl 4018620d 20000100 returned -16
[  370.799177][T10776] binder: BINDER_SET_CONTEXT_MGR already set
[  370.801935][T10776] binder: 10775:10776 ioctl 4018620d 200002c0 returned -16
[  370.803596][T10776] binder: 10775:10776 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  370.901878][T10776] binder: 10776 RLIMIT_NICE not set
[  370.956240][T10786] binder: 10775:10786 got transaction to invalid handle, 1
[  370.959060][T10786] binder: 10786:10775 cannot find target node
[  370.983603][T10786] binder: 10775:10786 transaction call to 0:0 failed 244/29201/-22, size 72-24 line 3062
[  371.181519][T10789] UDC core: g1: couldn't find an available UDC or it's busy
[  371.542525][ T4381] binder: undelivered TRANSACTION_ERROR: 29201
[  371.691187][ T2065] ieee802154 phy0 wpan0: encryption failed: -22
[  371.692432][ T2065] ieee802154 phy1 wpan1: encryption failed: -22
[  372.732242][ T4332] Bluetooth: hci1: command 0x0409 tx timeout
[  372.859114][T10825] UDC core: g1: couldn't find an available UDC or it's busy
[  373.118703][T10833] binder: BINDER_SET_CONTEXT_MGR already set
[  373.119778][T10833] binder: 10830:10833 ioctl 4018620d 20000100 returned -16
[  373.159791][T10833] binder: BINDER_SET_CONTEXT_MGR already set
[  373.169911][T10833] binder: 10830:10833 ioctl 4018620d 200002c0 returned -16
[  373.172570][T10833] binder: 10830:10833 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  373.174869][T10833] binder: 10833 RLIMIT_NICE not set
[  373.224846][T10843] binder: 10830:10843 got transaction to invalid handle, 1
[  373.226163][T10843] binder: 10843:10830 cannot find target node
[  373.227191][T10843] binder: 10830:10843 transaction call to 0:0 failed 246/29201/-22, size 72-24 line 3062
[  373.970796][ T4381] binder: undelivered TRANSACTION_ERROR: 29201
[  374.888105][T10868] X25: received unknown 00 with LCI 000
[  374.956776][T10874] UDC core: g1: couldn't find an available UDC or it's busy
[  375.533104][T10889] binder: BINDER_SET_CONTEXT_MGR already set
[  375.540298][T10889] binder: 10887:10889 ioctl 4018620d 20000100 returned -16
[  375.559498][T10889] binder: BINDER_SET_CONTEXT_MGR already set
[  375.580880][T10889] binder: 10887:10889 ioctl 4018620d 200002c0 returned -16
[  375.582710][T10889] binder: 10887:10889 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  375.585246][T10889] binder: 10889 RLIMIT_NICE not set
[  375.637706][T10893] binder: 10887:10893 got transaction to invalid handle, 1
[  375.639029][T10893] binder: 10893:10887 cannot find target node
[  375.641236][T10893] binder: 10887:10893 transaction call to 0:0 failed 248/29201/-22, size 72-24 line 3062
[  375.767420][T10895] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1726'.
[  376.333869][ T4381] binder: undelivered TRANSACTION_ERROR: 29201
[  377.218574][T10904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  377.224977][T10904] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  377.752778][T10921] UDC core: g1: couldn't find an available UDC or it's busy
[  377.802986][T10918] X25: received unknown 00 with LCI 000
[  378.525344][T10937] binder: BINDER_SET_CONTEXT_MGR already set
[  378.526492][T10937] binder: 10935:10937 ioctl 4018620d 20000100 returned -16
[  378.596161][T10937] binder: BINDER_SET_CONTEXT_MGR already set
[  378.597297][T10937] binder: 10935:10937 ioctl 4018620d 200002c0 returned -16
[  378.598869][T10937] binder: 10935:10937 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  378.610446][T10937] binder: 10937 RLIMIT_NICE not set
[  378.651094][T10944] binder: 10935:10944 got transaction to invalid handle, 1
[  378.652350][T10944] binder: 10944:10935 cannot find target node
[  378.653385][T10944] binder: 10935:10944 transaction call to 0:0 failed 250/29201/-22, size 72-24 line 3062
[  379.347967][ T4381] binder: undelivered TRANSACTION_ERROR: 29201
[  379.652592][T10965] UDC core: g1: couldn't find an available UDC or it's busy
[  379.769554][T10967] X25: received unknown 00 with LCI 000
[  380.043955][T10978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  380.045751][T10978] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  380.076032][T10977] UDC core: g1: couldn't find an available UDC or it's busy
[  380.909182][T10998] binder: BINDER_SET_CONTEXT_MGR already set
[  380.941042][T10998] binder: 10997:10998 ioctl 4018620d 200002c0 returned -16
[  380.949935][T10998] binder: 10997:10998 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  380.985943][T10998] binder: 10998 RLIMIT_NICE not set
[  381.000920][T10999] binder: 10997:10999 got transaction to invalid handle, 1
[  381.019789][T10999] binder: 10999:10997 cannot find target node
[  381.030378][T10999] binder: 10997:10999 transaction call to 0:0 failed 252/29201/-22, size 72-24 line 3062
[  381.581976][ T4543] binder: undelivered TRANSACTION_ERROR: 29201
[  382.435343][T11027] UDC core: g1: couldn't find an available UDC or it's busy
[  382.665924][T11037] 9pnet_virtio: no channels available for device syz
[  382.771749][T11040] binder: BINDER_SET_CONTEXT_MGR already set
[  382.772901][T11040] binder: 11038:11040 ioctl 4018620d 20000100 returned -16
[  382.779359][T11040] binder: BINDER_SET_CONTEXT_MGR already set
[  382.788782][T11040] binder: 11038:11040 ioctl 4018620d 200002c0 returned -16
[  382.797814][T11040] binder: 11038:11040 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  382.802555][T11040] binder: 11040 RLIMIT_NICE not set
[  382.849648][T11046] binder: 11038:11046 got transaction to invalid handle, 1
[  382.855211][T11046] binder: 11046:11038 cannot find target node
[  382.856332][T11046] binder: 11038:11046 transaction call to 0:0 failed 254/29201/-22, size 72-24 line 3062
[  383.570281][ T4375] binder: undelivered TRANSACTION_ERROR: 29201
[  383.846187][T11074] UDC core: g1: couldn't find an available UDC or it's busy
[  384.334740][T11085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  384.336534][T11085] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  384.911563][T11107] binder: BINDER_SET_CONTEXT_MGR already set
[  384.920499][T11107] binder: 11106:11107 ioctl 4018620d 20000100 returned -16
[  384.939466][T11107] binder: BINDER_SET_CONTEXT_MGR already set
[  384.960342][T11107] binder: 11106:11107 ioctl 4018620d 200002c0 returned -16
[  384.961991][T11107] binder: 11106:11107 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  384.964387][T11107] binder: 11107 RLIMIT_NICE not set
[  385.013882][T11114] binder: 11106:11114 got transaction to invalid handle, 1
[  385.015075][T11114] binder: 11114:11106 cannot find target node
[  385.016049][T11114] binder: 11106:11114 transaction call to 0:0 failed 256/29201/-22, size 72-24 line 3062
[  385.712788][ T4375] binder: undelivered TRANSACTION_ERROR: 29201
[  386.840176][T11145] IPVS: sync thread started: state = BACKUP, mcast_ifn = syz_tun, syncid = 0, id = 0
[  387.035980][T11153] device syzkaller0 entered promiscuous mode
[  387.252991][T11160] binder: BINDER_SET_CONTEXT_MGR already set
[  387.254064][T11160] binder: 11159:11160 ioctl 4018620d 20000100 returned -16
[  387.282853][T11160] binder: BINDER_SET_CONTEXT_MGR already set
[  387.283859][T11160] binder: 11159:11160 ioctl 4018620d 200002c0 returned -16
[  387.310604][T11160] binder: 11159:11160 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  387.312951][T11160] binder: 11160 RLIMIT_NICE not set
[  387.362982][T11166] binder: 11159:11166 got transaction to invalid handle, 1
[  387.364259][T11166] binder: 11166:11159 cannot find target node
[  387.365228][T11166] binder: 11159:11166 transaction call to 0:0 failed 258/29201/-22, size 72-24 line 3062
[  388.034858][T11183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  388.043795][T11183] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  388.061130][ T4381] binder: undelivered TRANSACTION_ERROR: 29201
[  390.029117][T11219] binder: BINDER_SET_CONTEXT_MGR already set
[  390.030320][T11219] binder: 11218:11219 ioctl 4018620d 20000100 returned -16
[  390.065515][T11219] binder: BINDER_SET_CONTEXT_MGR already set
[  390.066665][T11219] binder: 11218:11219 ioctl 4018620d 200002c0 returned -16
[  390.068271][T11219] binder: 11218:11219 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  390.090470][T11219] binder: 11219 RLIMIT_NICE not set
[  390.121263][T11224] binder: 11218:11224 got transaction to invalid handle, 1
[  390.122518][T11224] binder: 11224:11218 cannot find target node
[  390.123559][T11224] binder: 11218:11224 transaction call to 0:0 failed 260/29201/-22, size 72-24 line 3062
[  390.822584][ T4468] binder: undelivered TRANSACTION_ERROR: 29201
[  391.934201][T11262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  391.936000][T11262] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  392.810506][T11281] binder: BINDER_SET_CONTEXT_MGR already set
[  392.811638][T11281] binder: 11280:11281 ioctl 4018620d 20000100 returned -16
[  392.837126][T11281] binder: BINDER_SET_CONTEXT_MGR already set
[  392.838262][T11281] binder: 11280:11281 ioctl 4018620d 200002c0 returned -16
[  392.851768][T11281] binder: 11280:11281 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  392.853925][T11281] binder: 11281 RLIMIT_NICE not set
[  392.903802][T11284] binder: 11280:11284 got transaction to invalid handle, 1
[  392.905128][T11284] binder: 11284:11280 cannot find target node
[  392.906178][T11284] binder: 11280:11284 transaction call to 0:0 failed 262/29201/-22, size 72-24 line 3062
[  393.592080][ T4380] binder: undelivered TRANSACTION_ERROR: 29201
[  396.620571][T11352] binder: BINDER_SET_CONTEXT_MGR already set
[  396.621622][T11352] binder: 11350:11352 ioctl 4018620d 20000100 returned -16
[  396.647772][T11352] binder: BINDER_SET_CONTEXT_MGR already set
[  396.648931][T11352] binder: 11350:11352 ioctl 4018620d 200002c0 returned -16
[  396.701549][T11357] binder: 11350:11357 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  396.703703][T11357] binder: 11357 RLIMIT_NICE not set
[  396.705805][T11352] binder: 11350:11352 got transaction to invalid handle, 1
[  396.707118][T11352] binder: 11352:11350 cannot find target node
[  396.750560][T11352] binder: 11350:11352 transaction call to 0:0 failed 264/29201/-22, size 72-24 line 3062
[  396.761786][ T4468] binder: undelivered TRANSACTION_ERROR: 29201
[  399.015217][T11415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  399.021692][T11415] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  399.152977][T11417] binder: BINDER_SET_CONTEXT_MGR already set
[  399.154001][T11417] binder: 11416:11417 ioctl 4018620d 20000100 returned -16
[  399.179099][T11417] binder: BINDER_SET_CONTEXT_MGR already set
[  399.196873][T11417] binder: 11416:11417 ioctl 4018620d 200002c0 returned -16
[  399.198643][T11417] binder: 11416:11417 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  399.211945][T11417] binder: 11417 RLIMIT_NICE not set
[  399.269855][T11418] binder: 11416:11418 got transaction to invalid handle, 1
[  399.271492][T11418] binder: 11418:11416 cannot find target node
[  399.272581][T11418] binder: 11416:11418 transaction call to 0:0 failed 266/29201/-22, size 72-24 line 3062
[  399.971432][ T4380] binder: undelivered TRANSACTION_ERROR: 29201
[  402.931465][T11454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  402.942118][T11454] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  403.528452][T11462] binder: BINDER_SET_CONTEXT_MGR already set
[  403.529519][T11462] binder: 11461:11462 ioctl 4018620d 20000100 returned -16
[  403.541866][T11462] binder: BINDER_SET_CONTEXT_MGR already set
[  403.542990][T11462] binder: 11461:11462 ioctl 4018620d 200002c0 returned -16
[  403.550888][T11462] binder: 11461:11462 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  403.557832][T11462] binder: 11462 RLIMIT_NICE not set
[  403.612832][T11463] binder: 11461:11463 got transaction to invalid handle, 1
[  403.614183][T11463] binder: 11463:11461 cannot find target node
[  403.615248][T11463] binder: 11461:11463 transaction call to 0:0 failed 268/29201/-22, size 72-24 line 3062
[  404.329598][ T4380] binder: undelivered TRANSACTION_ERROR: 29201
[  404.650869][T11477] binder: BINDER_SET_CONTEXT_MGR already set
[  404.652153][T11477] binder: 11476:11477 ioctl 4018620d 20000480 returned -16
[  404.679043][T11477] binder: BINDER_SET_CONTEXT_MGR already set
[  404.696689][T11477] binder: 11476:11477 ioctl 4018620d 20000040 returned -16
[  404.698458][T11477] binder: 11476:11477 got transaction to invalid handle, 1
[  404.699674][T11477] binder: 11477:11476 cannot find target node
[  404.753680][T11477] binder: 11476:11477 transaction call to 0:0 failed 270/29201/-22, size 120-24 line 3062
[  404.755419][T11477] binder: 11476:11477 ioctl c0306201 20000180 returned -14
[  404.766936][ T4380] binder: undelivered TRANSACTION_ERROR: 29201
[  405.368958][T11500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  405.395379][T11500] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  405.796814][T11504] binder: BINDER_SET_CONTEXT_MGR already set
[  405.797995][T11504] binder: 11503:11504 ioctl 4018620d 20000100 returned -16
[  405.809626][T11504] binder: BINDER_SET_CONTEXT_MGR already set
[  405.811613][T11504] binder: 11503:11504 ioctl 4018620d 200002c0 returned -16
[  405.813118][T11504] binder: 11503:11504 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  405.815358][T11504] binder: 11504 RLIMIT_NICE not set
[  405.865664][T11507] binder: 11503:11507 got transaction to invalid handle, 1
[  405.866888][T11507] binder: 11507:11503 cannot find target node
[  405.867871][T11507] binder: 11503:11507 transaction call to 0:0 failed 272/29201/-22, size 72-24 line 3062
[  406.603346][ T4375] binder: undelivered TRANSACTION_ERROR: 29201
[  409.246311][T11545] jffs2: notice: (11545) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  409.555108][T11550] binder: BINDER_SET_CONTEXT_MGR already set
[  409.564976][T11550] binder: 11549:11550 ioctl 4018620d 20000100 returned -16
[  409.615955][T11550] binder: BINDER_SET_CONTEXT_MGR already set
[  409.628427][T11550] binder: 11549:11550 ioctl 4018620d 200002c0 returned -16
[  409.829308][T11554] binder: 11549:11554 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  409.844591][T11554] binder: 11554 RLIMIT_NICE not set
[  409.857939][T11550] binder: 11549:11550 got transaction to invalid handle, 1
[  409.869805][T11550] binder: 11550:11549 cannot find target node
[  409.875632][T11550] binder: 11549:11550 transaction call to 0:0 failed 274/29201/-22, size 72-24 line 3062
[  409.888295][ T4543] binder: undelivered TRANSACTION_ERROR: 29201
[  410.613950][T11559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  410.615738][T11559] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  412.283013][ T4380] kernel read not supported for file /dsp1 (pid: 4380 comm: kworker/1:6)
[  412.486177][T11591] binder: BINDER_SET_CONTEXT_MGR already set
[  412.487341][T11591] binder: 11590:11591 ioctl 4018620d 20000100 returned -16
[  412.507445][T11591] binder: BINDER_SET_CONTEXT_MGR already set
[  412.508605][T11591] binder: 11590:11591 ioctl 4018620d 200002c0 returned -16
[  412.518403][T11591] binder: 11590:11591 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  412.528286][T11591] binder: 11591 RLIMIT_NICE not set
[  412.571590][T11594] binder: 11590:11594 ioctl c0306201 0 returned -14
[  412.574183][T11594] binder: 11590:11594 got transaction to invalid handle, 1
[  412.575706][T11594] binder: 11594:11590 cannot find target node
[  412.576968][T11594] binder: 11590:11594 transaction call to 0:0 failed 276/29201/-22, size 72-24 line 3062
[  412.846261][T11598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  412.849363][T11598] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  413.311196][ T4375] binder: undelivered TRANSACTION_ERROR: 29201
[  414.609697][T11621] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  415.327693][T11646] binder: BINDER_SET_CONTEXT_MGR already set
[  415.328750][T11646] binder: 11642:11646 ioctl 4018620d 20000100 returned -16
[  415.360780][T11646] binder: BINDER_SET_CONTEXT_MGR already set
[  415.361930][T11646] binder: 11642:11646 ioctl 4018620d 200002c0 returned -16
[  415.400368][T11646] binder: 11642:11646 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  415.402710][T11646] binder: 11646 RLIMIT_NICE not set
[  415.452579][T11647] binder: 11642:11647 ioctl c0306201 0 returned -14
[  415.453995][T11647] binder: 11642:11647 got transaction to invalid handle, 1
[  415.455239][T11647] binder: 11647:11642 cannot find target node
[  415.456554][T11647] binder: 11642:11647 transaction call to 0:0 failed 278/29201/-22, size 72-24 line 3062
[  416.960367][ T4381] binder: undelivered TRANSACTION_ERROR: 29201
[  419.481878][T11663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  419.483710][T11663] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  420.168664][T11685] binder: BINDER_SET_CONTEXT_MGR already set
[  420.172227][T11685] binder: 11683:11685 ioctl 4018620d 20000100 returned -16
[  420.183559][T11685] binder: BINDER_SET_CONTEXT_MGR already set
[  420.187166][T11685] binder: 11683:11685 ioctl 4018620d 200002c0 returned -16
[  420.192130][T11685] binder: 11683:11685 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  420.196958][T11685] binder: 11685 RLIMIT_NICE not set
[  420.241988][T11687] binder: 11683:11687 ioctl c0306201 0 returned -14
[  420.252987][T11687] binder: 11683:11687 got transaction to invalid handle, 1
[  420.254631][T11687] binder: 11687:11683 cannot find target node
[  420.255731][T11687] binder: 11683:11687 transaction call to 0:0 failed 280/29201/-22, size 72-24 line 3062
[  420.981695][ T4468] binder: undelivered TRANSACTION_ERROR: 29201
[  421.475484][T11707] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4)
[  421.476650][T11707] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  421.483112][T11707] vhci_hcd vhci_hcd.0: Device attached
[  421.531776][T11711] vhci_hcd: connection closed
[  421.532414][T10120] vhci_hcd: stop threads
[  421.534077][T10120] vhci_hcd: release socket
[  421.534960][T10120] vhci_hcd: disconnect device
[  422.278721][T11726] device syzkaller0 entered promiscuous mode
[  422.694284][T11730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  422.696124][T11730] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  422.765097][T11733] binder: BINDER_SET_CONTEXT_MGR already set
[  422.766164][T11733] binder: 11732:11733 ioctl 4018620d 20000100 returned -16
[  422.788098][T11733] binder: BINDER_SET_CONTEXT_MGR already set
[  422.789189][T11733] binder: 11732:11733 ioctl 4018620d 200002c0 returned -16
[  422.792572][T11733] binder: 11732:11733 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  422.794960][T11733] binder: 11733 RLIMIT_NICE not set
[  422.844774][T11737] binder: 11732:11737 got transaction to invalid handle, 1
[  422.845999][T11737] binder: 11737:11732 cannot find target node
[  422.847623][T11737] binder: 11732:11737 transaction call to 0:0 failed 282/29201/-22, size 72-24 line 3062
[  423.699428][ T4381] binder: undelivered TRANSACTION_ERROR: 29201
[  426.790411][T11769] binder: BINDER_SET_CONTEXT_MGR already set
[  426.791478][T11769] binder: 11766:11769 ioctl 4018620d 20000100 returned -16
[  427.296343][T11769] binder: BINDER_SET_CONTEXT_MGR already set
[  427.297387][T11769] binder: 11766:11769 ioctl 4018620d 200002c0 returned -16
[  427.321665][T11777] binder: 11766:11777 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  427.342384][T11777] binder: 11777 RLIMIT_NICE not set
[  427.357793][T11769] binder: 11766:11769 got transaction to invalid handle, 1
[  427.359195][T11769] binder: 11769:11766 cannot find target node
[  427.376018][T11769] binder: 11766:11769 transaction call to 0:0 failed 284/29201/-22, size 72-24 line 3062
[  427.390698][ T4381] binder: undelivered TRANSACTION_ERROR: 29201
[  428.308114][T11792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  428.324964][T11792] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  431.659360][T11818] binder: BINDER_SET_CONTEXT_MGR already set
[  431.660595][T11818] binder: 11817:11818 ioctl 4018620d 20000100 returned -16
[  431.665256][T11818] binder: BINDER_SET_CONTEXT_MGR already set
[  431.666360][T11818] binder: 11817:11818 ioctl 4018620d 200002c0 returned -16
[  431.668056][T11818] binder: 11817:11818 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  431.670414][T11818] binder: 11818 RLIMIT_NICE not set
[  431.720172][T11820] binder: 11817:11820 got transaction to invalid handle, 1
[  431.721539][T11820] binder: 11820:11817 cannot find target node
[  431.722565][T11820] binder: 11817:11820 transaction call to 0:0 failed 286/29201/-22, size 72-24 line 3062
[  432.486102][ T4492] binder: undelivered TRANSACTION_ERROR: 29201
[  433.131222][ T2065] ieee802154 phy0 wpan0: encryption failed: -22
[  433.132343][ T2065] ieee802154 phy1 wpan1: encryption failed: -22
[  434.509025][T11869] binder: BINDER_SET_CONTEXT_MGR already set
[  434.517454][T11869] binder: 11868:11869 ioctl 4018620d 20000100 returned -16
[  434.527778][T11869] binder: BINDER_SET_CONTEXT_MGR already set
[  434.528889][T11869] binder: 11868:11869 ioctl 4018620d 200002c0 returned -16
[  434.541217][T11869] binder: 11868:11869 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  434.543441][T11869] binder: 11869 RLIMIT_NICE not set
[  434.619911][T11870] binder: 11868:11870 got transaction to invalid handle, 1
[  434.621681][T11870] binder: 11870:11868 cannot find target node
[  434.622804][T11870] binder: 11868:11870 transaction call to 0:0 failed 288/29201/-22, size 72-24 line 3062
[  435.320082][ T4375] binder: undelivered TRANSACTION_ERROR: 29201
[  435.605916][T11882] usb usb8: usbfs: process 11882 (syz.6.2048) did not claim interface 0 before use
[  437.037194][T11903] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  438.923990][T11906] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2054'.
[  439.599816][T11918] binder: BINDER_SET_CONTEXT_MGR already set
[  439.601050][T11918] binder: 11915:11918 ioctl 4018620d 20000100 returned -16
[  439.631117][T11918] binder: BINDER_SET_CONTEXT_MGR already set
[  439.647723][T11918] binder: 11915:11918 ioctl 4018620d 200002c0 returned -16
[  439.649263][T11918] binder: 11915:11918 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  439.653640][T11918] binder: 11918 RLIMIT_NICE not set
[  439.707644][T11921] binder: 11915:11921 got transaction to invalid handle, 1
[  439.730194][T11921] binder: 11921:11915 cannot find target node
[  439.731313][T11921] binder: 11915:11921 transaction call to 0:0 failed 290/29201/-22, size 72-24 line 3062
[  440.335521][ T4375] binder: undelivered TRANSACTION_ERROR: 29201
[  441.576380][T11952] MTD: Couldn't look up './dev/mtdblock0': -2
[  442.342628][T11957] binder: BINDER_SET_CONTEXT_MGR already set
[  442.343864][T11957] binder: 11955:11957 ioctl 4018620d 20000100 returned -16
[  442.366078][T11957] binder: BINDER_SET_CONTEXT_MGR already set
[  442.367066][T11957] binder: 11955:11957 ioctl 4018620d 200002c0 returned -16
[  442.420767][T11957] binder: 11955:11957 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  442.422773][T11957] binder: 11957 RLIMIT_NICE not set
[  442.472003][T11959] binder: 11955:11959 got transaction to invalid handle, 1
[  442.473413][T11959] binder: 11959:11955 cannot find target node
[  442.474429][T11959] binder: 11955:11959 transaction call to 0:0 failed 292/29201/-22, size 72-24 line 3062
[  443.091411][ T4492] binder: undelivered TRANSACTION_ERROR: 29201
[  444.475299][T11991] binder: BINDER_SET_CONTEXT_MGR already set
[  444.478994][T11991] binder: 11989:11991 ioctl 4018620d 20000100 returned -16
[  444.491874][T11991] binder: BINDER_SET_CONTEXT_MGR already set
[  444.495467][T11991] binder: 11989:11991 ioctl 4018620d 200002c0 returned -16
[  444.499562][T11991] binder: 11989:11991 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  444.505905][T11991] binder: 11991 RLIMIT_NICE not set
[  444.552781][T11993] binder: 11989:11993 ioctl c0306201 0 returned -14
[  446.516911][T12020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  446.518461][T12020] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  446.564040][T12018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  446.565833][T12018] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  446.594082][T12020] CIFS: VFS: Unable to allocate memory for devname
[  446.596625][T12020] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000).
[  446.598818][T12020] qnx6: wrong signature (magic) in superblock #1.
[  446.599908][T12020] qnx6: unable to read the first superblock
[  446.864959][T12030] binder: BINDER_SET_CONTEXT_MGR already set
[  446.870714][T12030] binder: 12028:12030 ioctl 4018620d 20000100 returned -16
[  446.895138][T12030] binder: BINDER_SET_CONTEXT_MGR already set
[  446.913685][T12030] binder: 12028:12030 ioctl 4018620d 200002c0 returned -16
[  446.921988][T12030] binder: 12028:12030 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  446.935676][T12030] binder: 12030 RLIMIT_NICE not set
[  446.973938][T12033] binder: 12028:12033 ioctl c0306201 0 returned -14
[  449.016035][T12046] binder: 12042:12046 ioctl c0306201 0 returned -14
[  449.451917][T12058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  449.453592][T12058] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  449.467141][T12059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  449.469188][T12059] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  449.650640][T12065] binder: BINDER_SET_CONTEXT_MGR already set
[  449.651795][T12065] binder: 12064:12065 ioctl 4018620d 20000100 returned -16
[  449.700663][T12065] binder: BINDER_SET_CONTEXT_MGR already set
[  449.701850][T12065] binder: 12064:12065 ioctl 4018620d 200002c0 returned -16
[  449.717813][T12065] binder: 12064:12065 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  449.724250][T12065] binder: 12065 RLIMIT_NICE not set
[  449.771562][T12067] binder: 12064:12067 ioctl c0306201 0 returned -14
[  451.720349][T12104] binder: BINDER_SET_CONTEXT_MGR already set
[  451.721644][T12104] binder: 12102:12104 ioctl 4018620d 20000100 returned -16
[  451.729891][T12104] binder: BINDER_SET_CONTEXT_MGR already set
[  451.738626][T12104] binder: 12102:12104 ioctl 4018620d 200002c0 returned -16
[  451.750457][T12104] binder: 12102:12104 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  451.755262][T12104] binder: 12104 RLIMIT_NICE not set
[  452.008006][T12112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  452.029641][T12112] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  453.861772][T12141] binder: BINDER_SET_CONTEXT_MGR already set
[  453.862819][T12141] binder: 12139:12141 ioctl 4018620d 20000100 returned -16
[  453.894528][T12141] binder: BINDER_SET_CONTEXT_MGR already set
[  453.902718][T12141] binder: 12139:12141 ioctl 4018620d 200002c0 returned -16
[  453.911115][T12141] binder: 12139:12141 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  453.925117][T12141] binder: 12141 RLIMIT_NICE not set
[  454.632940][T12154] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  455.318482][T12167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  455.339009][T12167] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  456.556768][T12190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2169'.
[  456.670591][T12193] binder: BINDER_SET_CONTEXT_MGR already set
[  456.671744][T12193] binder: 12192:12193 ioctl 4018620d 20000100 returned -16
[  456.692884][T12193] binder: BINDER_SET_CONTEXT_MGR already set
[  456.693896][T12193] binder: 12192:12193 ioctl 4018620d 200002c0 returned -16
[  456.705617][T12193] binder: 12192:12193 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  456.707875][T12193] binder: 12193 RLIMIT_NICE not set
[  458.371909][   T27] audit: type=1326 audit(458.270:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12224 comm="syz.5.2186" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa03781a8 code=0x7ffc0000
[  458.501432][   T27] audit: type=1326 audit(458.270:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12224 comm="syz.5.2186" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa03781a8 code=0x7ffc0000
[  458.703063][   T27] audit: type=1326 audit(458.280:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12224 comm="syz.5.2186" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=40 compat=0 ip=0xffffa03781a8 code=0x7ffc0000
[  458.838349][   T27] audit: type=1326 audit(458.280:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12224 comm="syz.5.2186" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa03781a8 code=0x7ffc0000
[  458.848165][   T27] audit: type=1326 audit(458.290:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12224 comm="syz.5.2186" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa03781a8 code=0x7ffc0000
[  458.897789][   T27] audit: type=1326 audit(458.300:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12224 comm="syz.5.2186" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa03781a8 code=0x7ffc0000
[  458.934036][   T27] audit: type=1326 audit(458.300:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12224 comm="syz.5.2186" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa03781a8 code=0x7ffc0000
[  458.960217][   T27] audit: type=1326 audit(458.300:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12224 comm="syz.5.2186" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa03781a8 code=0x7ffc0000
[  458.964307][   T27] audit: type=1326 audit(458.310:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12224 comm="syz.5.2186" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffffa03781a8 code=0x7ffc0000
[  459.026942][   T27] audit: type=1326 audit(458.310:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12224 comm="syz.5.2186" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa03781a8 code=0x7ffc0000
[  459.034063][T12235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  459.040683][T12235] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  459.106249][T12239] binder: BINDER_SET_CONTEXT_MGR already set
[  459.107411][T12239] binder: 12237:12239 ioctl 4018620d 20000100 returned -16
[  459.169641][T12239] binder: BINDER_SET_CONTEXT_MGR already set
[  459.170875][T12239] binder: 12237:12239 ioctl 4018620d 200002c0 returned -16
[  459.183807][T12239] binder: 12237:12239 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  459.186040][T12239] binder: 12239 RLIMIT_NICE not set
[  459.471686][T12246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  459.488934][T12246] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  460.957390][T12283] binder: BINDER_SET_CONTEXT_MGR already set
[  460.958669][T12283] binder: 12282:12283 ioctl 4018620d 20000100 returned -16
[  460.964650][T12283] binder: BINDER_SET_CONTEXT_MGR already set
[  460.966140][T12283] binder: 12282:12283 ioctl 4018620d 200002c0 returned -16
[  460.967856][T12283] binder: 12282:12283 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  460.970742][T12283] binder: 12283 RLIMIT_NICE not set
[  462.066616][T12310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  462.082365][T12310] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  463.662949][T12352] binder: BINDER_SET_CONTEXT_MGR already set
[  463.664150][T12352] binder: 12349:12352 ioctl 4018620d 20000100 returned -16
[  463.689199][T12352] binder: BINDER_SET_CONTEXT_MGR already set
[  463.690569][T12352] binder: 12349:12352 ioctl 4018620d 200002c0 returned -16
[  463.699204][T12352] binder: 12349:12352 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  463.710226][T12352] binder: 12352 RLIMIT_NICE not set
[  464.124922][T12366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2233'.
[  464.774712][T12380] ieee802154 phy0 wpan0: encryption failed: -22
[  465.346446][T12400] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2244'.
[  465.598354][T12412] binder: BINDER_SET_CONTEXT_MGR already set
[  465.599542][T12412] binder: 12409:12412 ioctl 4018620d 20000100 returned -16
[  465.609071][T12412] binder: BINDER_SET_CONTEXT_MGR already set
[  465.616953][T12412] binder: 12409:12412 ioctl 4018620d 200002c0 returned -16
[  465.618610][T12412] binder: 12409:12412 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  465.627179][T12412] binder: 12412 RLIMIT_NICE not set
[  465.671329][T12417] binder: 12409:12417 got transaction to invalid handle, 1
[  465.678485][T12417] binder: 12417:12409 cannot find target node
[  465.679610][T12417] binder: 12409:12417 transaction call to 0:0 failed 303/29201/-22, size 0-24 line 3062
[  465.703329][T12418] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  466.414913][ T4375] binder: undelivered TRANSACTION_ERROR: 29201
[  466.876861][T12449] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2259'.
[  467.571357][T12472] binder: BINDER_SET_CONTEXT_MGR already set
[  467.576273][T12472] binder: 12471:12472 ioctl 4018620d 20000100 returned -16
[  467.587617][T12472] binder: BINDER_SET_CONTEXT_MGR already set
[  467.592507][T12472] binder: 12471:12472 ioctl 4018620d 200002c0 returned -16
[  467.595339][T12472] binder: 12471:12472 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  467.603123][T12472] binder: 12472 RLIMIT_NICE not set
[  467.647737][T12477] binder: 12471:12477 got transaction to invalid handle, 1
[  467.649051][T12477] binder: 12477:12471 cannot find target node
[  467.650774][T12477] binder: 12471:12477 transaction call to 0:0 failed 305/29201/-22, size 0-24 line 3062
[  468.344171][ T4380] binder: undelivered TRANSACTION_ERROR: 29201
[  468.825880][T12501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2273'.
[  469.780992][T12517] device syzkaller0 entered promiscuous mode
[  470.196833][T12523] binder: BINDER_SET_CONTEXT_MGR already set
[  470.197810][T12523] binder: 12520:12523 ioctl 4018620d 20000100 returned -16
[  470.205793][T12523] binder: BINDER_SET_CONTEXT_MGR already set
[  470.210667][T12523] binder: 12520:12523 ioctl 4018620d 200002c0 returned -16
[  470.215952][T12523] binder: 12520:12523 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  470.218209][T12523] binder: 12523 RLIMIT_NICE not set
[  470.267803][T12525] binder: 12520:12525 got transaction to invalid handle, 1
[  470.269157][T12525] binder: 12525:12520 cannot find target node
[  470.270420][T12525] binder: 12520:12525 transaction call to 0:0 failed 307/29201/-22, size 0-24 line 3062
[  471.029413][   T22] binder: undelivered TRANSACTION_ERROR: 29201
[  472.092498][T12537] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2287'.
[  473.974119][T12543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2289'.
[  474.675193][T12563] binder: BINDER_SET_CONTEXT_MGR already set
[  474.676401][T12563] binder: 12562:12563 ioctl 4018620d 20000100 returned -16
[  474.684173][T12558] device syzkaller0 entered promiscuous mode
[  474.731772][T12563] binder: BINDER_SET_CONTEXT_MGR already set
[  474.732931][T12563] binder: 12562:12563 ioctl 4018620d 200002c0 returned -16
[  474.746979][T12563] binder: 12562:12563 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  474.749177][T12563] binder: 12563 RLIMIT_NICE not set
[  474.788178][T12568] binder: 12562:12568 got transaction to invalid handle, 1
[  474.789527][T12568] binder: 12568:12562 cannot find target node
[  474.794433][T12568] binder: 12562:12568 transaction call to 0:0 failed 309/29201/-22, size 72-0 line 3062
[  475.062929][T12575] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2302'.
[  475.501658][ T4468] binder: undelivered TRANSACTION_ERROR: 29201
[  476.101998][T12601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  476.103905][T12601] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  476.211451][T12605] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2316'.
[  476.231061][T12604] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2315'.
[  476.338119][T12610] binder: BINDER_SET_CONTEXT_MGR already set
[  476.339309][T12610] binder: 12609:12610 ioctl 4018620d 20000100 returned -16
[  476.340192][T12601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  476.342322][T12601] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  476.359670][T12610] binder: BINDER_SET_CONTEXT_MGR already set
[  476.361099][T12610] binder: 12609:12610 ioctl 4018620d 200002c0 returned -16
[  476.362627][T12610] binder: 12609:12610 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  476.364727][T12610] binder: 12610 RLIMIT_NICE not set
[  476.400289][T12608] device syzkaller0 entered promiscuous mode
[  476.415043][T12612] binder: 12609:12612 got transaction to invalid handle, 1
[  476.416291][T12612] binder: 12612:12609 cannot find target node
[  476.417371][T12612] binder: 12609:12612 transaction call to 0:0 failed 311/29201/-22, size 72-0 line 3062
[  476.696359][T12618] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2320'.
[  477.159445][   T22] binder: undelivered TRANSACTION_ERROR: 29201
[  477.980324][T12635] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2327'.
[  478.181217][T12642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2329'.
[  478.197811][T12638] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2330'.
[  478.910491][T12656] binder: BINDER_SET_CONTEXT_MGR already set
[  478.911599][T12656] binder: 12655:12656 ioctl 4018620d 20000100 returned -16
[  478.938305][T12656] binder: BINDER_SET_CONTEXT_MGR already set
[  478.939506][T12656] binder: 12655:12656 ioctl 4018620d 200002c0 returned -16
[  478.956585][T12656] binder: 12655:12656 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  478.958827][T12656] binder: 12656 RLIMIT_NICE not set
[  479.008862][T12659] binder: 12655:12659 got transaction to invalid handle, 1
[  479.010527][T12659] binder: 12659:12655 cannot find target node
[  479.011544][T12659] binder: 12655:12659 transaction call to 0:0 failed 313/29201/-22, size 72-0 line 3062
[  479.702134][ T4375] binder: undelivered TRANSACTION_ERROR: 29201
[  479.725818][T12667] netlink: 'syz.1.2339': attribute type 1 has an invalid length.
[  479.734505][T12667] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2339'.
[  480.594808][T12671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2341'.
[  481.421472][T12688] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2348'.
[  482.192331][T12701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2354'.
[  483.171706][T12722] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2362'.
[  483.398281][T12728] 9pnet: p9_errstr2errno: server reported unknown error 0x00
[  484.271040][T12748] device syzkaller0 entered promiscuous mode
[  484.513677][T12752] jffs2: notice: (12752) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  484.673091][ T4328] ------------[ cut here ]------------
[  484.674307][ T4328] kernel BUG at fs/jffs2/nodelist.c:462!
[  484.675351][ T4328] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
[  484.676573][ T4328] Modules linked in:
[  484.677192][ T4328] CPU: 1 PID: 4328 Comm: syz-executor Not tainted syzkaller #0
[  484.678436][ T4328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[  484.680003][ T4328] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
[  484.681350][ T4328] pc : jffs2_del_ino_cache+0x2b4/0x2b8
[  484.682303][ T4328] lr : jffs2_del_ino_cache+0x2b4/0x2b8
[  484.683239][ T4328] sp : ffff800020a176c0
[  484.683998][ T4328] x29: ffff800020a176c0 x28: ffff0000e1aa06c8 x27: 1fffe0001c3540cf
[  484.685368][ T4328] x26: 1fffe0001c3540d2 x25: ffff0000e1aa0690 x24: dfff800000000000
[  484.686756][ T4328] x23: 0000000000000000 x22: 0000000000000006 x21: ffff0000ecafc0a0
[  484.688149][ T4328] x20: ffff0000ecafc080 x19: ffff0000dd580000 x18: 1fffe00033e7697e
[  484.689547][ T4328] x17: ffff80001537d000 x16: ffff8000082f2d40 x15: 0000000000000000
[  484.690844][ T4328] x14: 0000000000000001 x13: 1fffe0001bab006d x12: 0000000000000000
[  484.692115][ T4328] x11: ff00800009687878 x10: 0000000000000000 x9 : ffff800009687878
[  484.693423][ T4328] x8 : ffff0000ddd9b800 x7 : 0000000000000000 x6 : 0000000000000000
[  484.694762][ T4328] x5 : ffff800020a17620 x4 : 0000000000000000 x3 : ffff8000082f2e54
[  484.696054][ T4328] x2 : 0000000000000001 x1 : ffff0000ecafc080 x0 : ffff0000dd580000
[  484.697370][ T4328] Call trace:
[  484.697926][ T4328]  jffs2_del_ino_cache+0x2b4/0x2b8
[  484.698757][ T4328]  jffs2_do_clear_inode+0x2cc/0x348
[  484.699622][ T4328]  jffs2_evict_inode+0x7c/0x90
[  484.700392][ T4328]  evict+0x3d8/0x824
[  484.701024][ T4328]  evict_inodes+0x604/0x6a4
[  484.701770][ T4328]  generic_shutdown_super+0xa4/0x32c
[  484.702681][ T4328]  kill_mtd_super+0x2c/0x74
[  484.703421][ T4328]  jffs2_kill_sb+0x94/0xb0
[  484.704157][ T4328]  deactivate_locked_super+0xb4/0x128
[  484.705090][ T4328]  deactivate_super+0xe4/0x104
[  484.705873][ T4328]  cleanup_mnt+0x3a8/0x430
[  484.706621][ T4328]  __cleanup_mnt+0x20/0x30
[  484.707372][ T4328]  task_work_run+0x1f4/0x280
[  484.708163][ T4328]  do_notify_resume+0x20f8/0x2c84
[  484.708971][ T4328]  el0_svc+0x98/0x128
[  484.709643][ T4328]  el0t_64_sync_handler+0x84/0xf0
[  484.710443][ T4328]  el0t_64_sync+0x18c/0x190
[  484.711208][ T4328] Code: 91005320 97c9b423 17ffff8e 97b8acd4 (d4210000) 
[  484.712320][ T4328] ---[ end trace 0000000000000000 ]---
[  484.785149][T12755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  484.787036][T12755] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  484.991724][ T4328] Kernel panic - not syncing: Oops - BUG: Fatal exception
[  484.992873][ T4328] SMP: stopping secondary CPUs
[  484.993671][ T4328] Kernel Offset: disabled
[  484.994366][ T4328] CPU features: 0x0a0000,000f0097,a65bfea7
[  484.995272][ T4328] Memory Limit: none
[  485.259698][ T4328] Rebooting in 86400 seconds..