last executing test programs:

12m41.671532781s ago: executing program 1 (id=825):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x34}, 0x2, 0x34005}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x3, 0x4)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0xfffc, @broadcast}, 0x2}}, 0x2e)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x400000000000002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$evdev(0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="796100000000000000027e000000"], 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@any, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xffffffffffffffff})
openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000)
socket$inet6_sctp(0xa, 0x801, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1b6}}], 0x2, 0x0)

12m39.249292816s ago: executing program 1 (id=829):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$udambuf(0xffffffffffffff9c, 0x0, 0x2)
socket$netlink(0x10, 0x3, 0x14)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffdb7, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x6, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x395, 0xffffffffffffffff, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xffffffff, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x2002c810)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2000000000002)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/meminfo\x00', 0x0, 0x0)
pread64(r3, &(0x7f0000000a00)=""/126, 0x7e, 0x7)
bind$netlink(r3, &(0x7f0000000500)={0x10, 0x0, 0x25dfdbfc, 0x2000000}, 0xc)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00')
preadv(r4, &(0x7f0000001400), 0x0, 0xc002a0, 0x0)
dup(0xffffffffffffffff)
syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x25b}, &(0x7f0000ffe000), &(0x7f0000ffe000))
syz_open_procfs(0x0, 0x0)

12m38.806893195s ago: executing program 1 (id=832):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r1, &(0x7f0000004580)=[{{&(0x7f0000000a00)={0xa, 0x4e20, 0x7992, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000290000003200000000000000000000000000ffffac141430d3"], 0x20}}], 0x1, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x5, 0xc}, 0xc)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000400000005"], 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r3, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000003c0)={'syztnl0\x00', <r5=>0x0, 0x7, 0x7800, 0x6, 0x9, {{0xe, 0x4, 0x0, 0x3, 0x38, 0x65, 0x0, 0x7, 0x4, 0x0, @local, @remote, {[@generic={0x7, 0x5, "f02951"}, @timestamp_prespec={0x44, 0x14, 0xe1, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5f7bfd8b}, {@remote, 0xdc6}]}, @generic={0x94, 0x9, "2d0d3344306497"}]}}}}})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e00000004000000810000000200000020200400", @ANYRES32=r4, @ANYBLOB='\a\x00'/19, @ANYRES32=r5, @ANYRES32, @ANYBLOB="1eade8e902000000020000000f000000000000ebb22bb6678dedbc"], 0x50)
r7 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000100))
openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
r8 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r8, 0x4144, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000060000000000000000000000850000004100000018110000", @ANYRES32=r6, @ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000002640)=0x1, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0xa0280, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x83, 0x7fff8000}]})
close_range(r10, 0xffffffffffffffff, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40081, 0x0)

12m38.46089168s ago: executing program 1 (id=834):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8, 0x395, 0x5, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r3 = io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0x21e, 0x10})
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)

12m36.011610406s ago: executing program 1 (id=838):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x2, 0x7fffffff}]})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000805}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3b, 0x301, 0x70bd25, 0x25dfdbfa, {0x1}}, 0x14}}, 0x4000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES16=r1], 0x48)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e1d, 0x4, @loopback, 0x40}, 0x1c)
bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @private2}, 0x1c)

12m32.24781431s ago: executing program 1 (id=845):
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000980000007b8af8ff00000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xffff, 0xfd, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1)
mkdirat(0xffffffffffffffff, 0x0, 0x67)
r2 = socket(0x15, 0x2, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$sock_TIOCINQ(r2, 0x541b, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
close(0x3)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
r6 = socket$kcm(0x2b, 0x1, 0x0)
r7 = syz_io_uring_setup(0x68ba, &(0x7f0000000140)={0x0, 0xd030, 0x20000, 0x0, 0x209, 0x0, r0}, &(0x7f0000000040), &(0x7f0000000280))
io_uring_enter(r7, 0x47f6, 0x0, 0x2, 0x0, 0x0)
sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d)
shutdown(r6, 0x1)

12m16.210644704s ago: executing program 32 (id=845):
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000980000007b8af8ff00000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xffff, 0xfd, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1)
mkdirat(0xffffffffffffffff, 0x0, 0x67)
r2 = socket(0x15, 0x2, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$sock_TIOCINQ(r2, 0x541b, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
close(0x3)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
r6 = socket$kcm(0x2b, 0x1, 0x0)
r7 = syz_io_uring_setup(0x68ba, &(0x7f0000000140)={0x0, 0xd030, 0x20000, 0x0, 0x209, 0x0, r0}, &(0x7f0000000040), &(0x7f0000000280))
io_uring_enter(r7, 0x47f6, 0x0, 0x2, 0x0, 0x0)
sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d)
shutdown(r6, 0x1)

5m58.166359004s ago: executing program 2 (id=1615):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="440000001800010a2cbd7000fbdbdf250a201000fd00c800002000000c00090008000808", @ANYBLOB="140005000000000000000000000000000000db"], 0x44}, 0x1, 0x2}, 0x10)

5m53.783166643s ago: executing program 2 (id=1620):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000440)='./file0\x00', &(0x7f0000000400), 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x110}}, 0x24004085)
r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1})
io_setup(0x5, &(0x7f0000000240))
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000340)='.\x00', 0xa50003d1)
readv(r2, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)

5m48.369157407s ago: executing program 2 (id=1625):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0xc0505405, &(0x7f0000000140)={0x1})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f00000003c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010101}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e23, 0x1ff1, @local, 0x7ff}, @in6={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x3}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e20, 0xffffff15, @local, 0x9}, @in6={0xa, 0x4e23, 0x0, @remote, 0x1}, @in={0x2, 0x4e23, @broadcast}], 0xc0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xfffffffd, @local, 0x1}], 0x1c)

5m47.209953417s ago: executing program 2 (id=1628):
r0 = syz_usbip_server_init(0x5)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\b\x00'], 0x18c0}}, 0x0)
openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xf}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7c000000000b03000000000000000000030000060500010000000000080003400000000108000340000000000500010000000000"], 0x7c}}, 0x4814)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0xffe, 0xffff, 0x1000, 0x3a, 0x1000, 0x0, 0x7}, 0x1c)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
gettid()
ioctl$VHOST_VDPA_GET_GROUP_NUM(0xffffffffffffffff, 0x8004af81, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
sendfile(r6, r5, &(0x7f0000002080)=0x64, 0x21c)
r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000000a40)={&(0x7f0000000080)=[{0x6, 0xdc01, 0x27, &(0x7f0000000040)="07b6d043f476b34f422f85e8a05dabf37289511d2b8b743e18eb4acf8c6ae160787a3cfb260f44"}], 0x1})
write$usbip_server(r0, &(0x7f00000001c0)=@ret_unlink={{0x4, 0xfffffff7, 0x0, 0x0, 0x9}}, 0x30)
ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000200))

5m44.250600614s ago: executing program 2 (id=1633):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x1, 0x0, 0x5, 0x7e01, 0x9}, &(0x7f0000000080)=0x20)

5m41.932222005s ago: executing program 2 (id=1635):
syz_emit_ethernet(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000004300)=""/102400, 0x19000)
readv(0xffffffffffffffff, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0})
write(r1, &(0x7f0000000000)="fa", 0xfffffdef)
socket$nl_route(0x10, 0x3, 0x0)

5m26.73007646s ago: executing program 33 (id=1635):
syz_emit_ethernet(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000004300)=""/102400, 0x19000)
readv(0xffffffffffffffff, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0})
write(r1, &(0x7f0000000000)="fa", 0xfffffdef)
socket$nl_route(0x10, 0x3, 0x0)

21.768850281s ago: executing program 5 (id=2149):
socket$igmp(0x2, 0x3, 0x2)
syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x2002)
ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6)
eventfd(0x80200003)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x38, r2, 0x1, 0x10000, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xc9, 0x18}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40045}, 0xc0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0)
pread64(r5, &(0x7f0000000a00)=""/126, 0x7e, 0x7)
socket$inet6_tcp(0xa, 0x1, 0x0)
lseek(0xffffffffffffffff, 0xfffffffc, 0x4)
r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, 0x0)
r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000000)=0x200000000)
write$vhost_msg_v2(r7, &(0x7f0000000200)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x2}}, 0x48)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x48, 0x4000, @fd_index=0x3, 0x5, &(0x7f0000001440), 0x0, 0x2})

19.177347492s ago: executing program 5 (id=2152):
mkdir(0x0, 0x82)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
syz_open_dev$vcsa(&(0x7f00000005c0), 0xe7, 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x193}, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)

19.030421369s ago: executing program 3 (id=2154):
r0 = syz_usbip_server_init(0x5)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="c01800002000010a0000000000000000020000002c01018028014880ed00a90013466820cd76bb221fbb4acd690c6a8b9c760a61eeec7793b579aefdb936d00f403d3f04637cdb9ac70e28c5dd66ddedde2d0930650e6821f9a26a4a193c1d06a3e75523f901e44fe087ae32c836c6d6ddba3af8e9a2beae8936168f9fa38c395f5cf7408df69c60bf584bee86a6312e9ce866e456c3eda6f2924082d78a2f385bdbd0c9afb54758c102bf13094645fb6aa34d424ec776691fee3d25307f61fed2752babf7c686e8a3d9b59a8343bcf4121bf5cf400a0c1070855fac565cad8968a97ce0a12a1161054d82d0a240b7dedf9ba3cc63e9d1c3b9a8402f7d5b4cafcd48928a3d4a76498900000014007c00ff01000000000000000000000000000108003d00", @ANYRES32=0x0, @ANYBLOB="08001a"], 0x18c0}}, 0x0)
openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xf}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7c000000000b03000000000000000000030000060500010000000000080003400000000108000340000000000500010000"], 0x7c}}, 0x4814)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0xffe, 0xffff, 0x1000, 0x3a, 0x1000, 0x0, 0x7}, 0x1c)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
gettid()
ioctl$VHOST_VDPA_GET_GROUP_NUM(0xffffffffffffffff, 0x8004af81, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
sendfile(r6, r5, &(0x7f0000002080)=0x64, 0x21c)
sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={0x0, 0x138}, 0x1, 0x0, 0x0, 0x40040}, 0x40004)
r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000000a40)={&(0x7f0000000080)=[{0x6, 0xdc01, 0x27, &(0x7f0000000040)="07b6d043f476b34f422f85e8a05dabf37289511d2b8b743e18eb4acf8c6ae160787a3cfb260f44"}], 0x1})
write$usbip_server(r0, &(0x7f00000001c0)=@ret_unlink={{0x4, 0xfffffff7, 0x0, 0x0, 0x9}}, 0x30)
ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000200))

17.542010473s ago: executing program 5 (id=2158):
openat$udambuf(0xffffffffffffff9c, 0x0, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x707cb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2000000000002)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/meminfo\x00', 0x0, 0x0)
pread64(r3, &(0x7f0000000a00)=""/126, 0x7e, 0x7)
bind$netlink(r3, &(0x7f0000000500)={0x10, 0x0, 0x25dfdbfc, 0x2000000}, 0xc)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00')
preadv(r4, &(0x7f0000001400), 0x0, 0xc002a0, 0x0)
dup(0xffffffffffffffff)
syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x25b}, 0x0, &(0x7f0000ffe000))
syz_open_procfs(0x0, 0x0)

16.46061531s ago: executing program 3 (id=2160):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000805}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e1d, 0x4, @loopback, 0x40}, 0x1c)
bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @private2}, 0x1c)

14.14881481s ago: executing program 3 (id=2165):
io_setup(0x2, &(0x7f0000000000))
r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00')
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0)
userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x21d})
syz_emit_ethernet(0x2a, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_io_uring_setup(0x1c09, &(0x7f0000000140)={0x0, 0xfa25, 0x1, 0x3, 0x2d1}, &(0x7f0000000080), &(0x7f00000001c0))
syz_io_uring_setup(0xc8f, &(0x7f0000000000)={0x0, 0x7030, 0x10000, 0x1, 0x8000018, 0x0, r1}, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xe45, 0x100008b}, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

13.014685279s ago: executing program 0 (id=2167):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x34}, 0x2, 0x34005}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x3, 0x4)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0xfffc, @broadcast}, 0x2}}, 0x2e)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x400000000000002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$evdev(0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8}, 0x4040800)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@any, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xffffffffffffffff})
openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000)
socket$inet6_sctp(0xa, 0x801, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x90)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r5, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1b6}}], 0x2, 0x0)

12.892931814s ago: executing program 4 (id=2168):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4/file6\x00', 0xe0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0xfc, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x3, 0x4, 0x7d, 0x2, @vifc_lcl_addr=@private=0xa010102, @multicast2}, 0x10)
setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c)

12.27780019s ago: executing program 4 (id=2169):
mkdir(0x0, 0x82)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
syz_open_dev$vcsa(&(0x7f00000005c0), 0xe7, 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x193}, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)

10.43651751s ago: executing program 3 (id=2171):
socket$igmp(0x2, 0x3, 0x2)
syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x2002)
ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6)
eventfd(0x80200003)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x38, r2, 0x1, 0x10000, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xc9, 0x18}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40045}, 0xc0)
pread64(0xffffffffffffffff, &(0x7f0000000a00)=""/126, 0x7e, 0x7)
socket$inet6_tcp(0xa, 0x1, 0x0)
lseek(0xffffffffffffffff, 0xfffffffc, 0x4)
r5 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, 0x0)
r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000000)=0x200000000)
write$vhost_msg_v2(r6, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000340)=""/185, 0xb9, 0x0, 0x1, 0x2}}, 0x48)

10.410049501s ago: executing program 4 (id=2172):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x34}, 0x2, 0x34005}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x3, 0x4)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0xfffc, @broadcast}, 0x2}}, 0x2e)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x400000000000002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$evdev(0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="796100000000000000027e000000"], 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@any, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xffffffffffffffff})
openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000)
socket$inet6_sctp(0xa, 0x801, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x90)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r6, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1b6}}], 0x2, 0x0)

10.354769333s ago: executing program 0 (id=2173):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x2, 0x32314742, 0x2, @discrete={0x7, 0xbe78}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000180)=@default_ibss_ssid, 0x6, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f00000000c0)={0x4000000, 0x71, 0x8000000009})
pread64(r2, 0x0, 0x0, 0xce2)

10.285540316s ago: executing program 6 (id=2174):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
epoll_create1(0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, &(0x7f0000000100))
shutdown(r1, 0x1)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x41dc, 0x4)
recvmmsg(r1, &(0x7f0000000840), 0x0, 0x406, 0x0)
syz_io_uring_setup(0xc97, &(0x7f0000000700)={0x0, 0x6015, 0x800, 0xff7fffff, 0x11c}, &(0x7f00000003c0), &(0x7f0000000140))
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/585], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5722780b6c2a7", 0x0, 0x48e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000000340)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0)
sendfile(r4, r4, 0x0, 0xc92)
r5 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4)
sendmsg$TIPC_NL_BEARER_DISABLE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4dd11876d04ce31a}, 0x20040800)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x1, 0xfffffffd}]}, 0x8)
socket$nl_rdma(0x10, 0x3, 0x14)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)

7.585815343s ago: executing program 0 (id=2175):
io_setup(0x3ff, &(0x7f0000000500)=<r0=>0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0)
io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r2 = socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0)
r3 = openat$cachefiles(0xffffff9c, 0x0, 0x90200, 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x401c800}, 0x24000000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0)
r4 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x40800, 0x58)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000002000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000880)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0x600, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0)
sendfile(r6, r6, &(0x7f0000000080), 0x7f03)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x121}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xa1}]}}}, @IFLA_ADDRESS={0xa, 0x1, @random="14fd06cfb0c1"}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

6.02582731s ago: executing program 5 (id=2176):
bpf$PROG_LOAD(0x4, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000100ffff0000000000000000850000007b0000009500000000000000d1e524ba11c83308a36f246bab92ed869df1923b96aa12dbd576184ac4e1993884b0ae1aebcd296b0f557447e0aac82a46864117f2406a231a0d730e9a3e11839cb036d7d64e0eaad40de3c655b7d299d53c920d94735a7f15fdded791fa3ad8ab40c2a2df649e40c2e7d9455b5fd3598355d6d86017121bea25cd6a1aaf4c2a126dd73d01f685a1928082aaff03000000000000fc4138e41478944d1f5b2c0d32ea02b5d18d8a7279eb70d8abe5de9bddc01829d4cdbeb544ff346860576dfb95b46dcd3fa6969e53d67b9bf9a5049a8ad66c9f580db9eaee17eb79f0c18966bfd8e58e0e1822af1f723fd922026739d2c431415b3d4186dd6e06f490b1fdbff1379608a83d9772bbcf0dc9fd6d5c5b238c03e4d3217ec531a85fd4538a46"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_khugepaged_scan_pmd\x00', r0}, 0x18)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r2 = socket(0x169b85273c6f8108, 0x5, 0x0)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0xfffffffd, @loopback, 0x3}, 0x1c)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x200100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000140)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

5.986791092s ago: executing program 4 (id=2177):
syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xc)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
unshare(0x64000600)

5.921727784s ago: executing program 6 (id=2178):
socket$inet_udplite(0x2, 0x2, 0x88)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x5, 0xc}, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x50)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000100))
openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
r0 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x4144, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000002640)=0x1, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0xa0280, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x161902)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
close_range(r2, 0xffffffffffffffff, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40081, 0x0)

5.921085215s ago: executing program 3 (id=2179):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4/file6\x00', 0xe0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0xfc, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x3, 0x4, 0x7d, 0x2, @vifc_lcl_addr=@private=0xa010102, @multicast2}, 0x10)
setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c)

5.832520788s ago: executing program 0 (id=2180):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x10001, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_io_uring_setup(0x8d2, &(0x7f0000001400)={0x0, 0xd80e, 0x3010, 0xfffffffc}, &(0x7f00000001c0)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0, 0x14008045, 0x1})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0xc0505405, &(0x7f0000000140)={0x1})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f00000003c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010101}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e23, 0x1ff1, @local, 0x7ff}, @in6={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x3}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e20, 0xffffff15, @local, 0x9}, @in={0x2, 0x4e23, @broadcast}], 0x94)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, 0x0, 0x0)

4.045581785s ago: executing program 5 (id=2181):
syz_usb_connect(0x5, 0x3f, &(0x7f0000000200)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
symlink(&(0x7f0000000880)='.\x00', &(0x7f00000008c0)='./file0\x00')
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18)
r1 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2)
r2 = dup2(r1, r1)
read$char_usb(r2, &(0x7f00000000c0)=""/192, 0xc0)

4.044614885s ago: executing program 0 (id=2182):
io_setup(0x2, &(0x7f0000000000))
r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00')
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0)
userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x21d})
syz_emit_ethernet(0x2a, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_io_uring_setup(0x1c09, &(0x7f0000000140)={0x0, 0xfa25, 0x1, 0x3, 0x2d1}, &(0x7f0000000080), &(0x7f00000001c0))
syz_io_uring_setup(0xc8f, &(0x7f0000000000)={0x0, 0x7030, 0x10000, 0x1, 0x8000018, 0x0, r1}, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xe45, 0x100008b}, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

3.885774592s ago: executing program 6 (id=2183):
mkdir(0x0, 0x82)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
syz_open_dev$vcsa(&(0x7f00000005c0), 0xe7, 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x193}, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)

3.785821756s ago: executing program 3 (id=2184):
mknod$loop(&(0x7f0000000400)='./file0\x00', 0x10, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, 0x0, 0xc000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000001001000001"], 0x10}, 0x8000)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x1f)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0x40}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r6}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000280)='rxrpc_local\x00', r4, 0x0, 0x5}, 0xfffffe2e)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x320000)
socket$inet6(0xa, 0x80002, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80882, 0x0)

2.116359479s ago: executing program 6 (id=2185):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x2, 0x32314742, 0x2, @discrete={0x7, 0xbe78}})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000180)=@default_ibss_ssid, 0x6, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f00000000c0)={0x4000000, 0x71, 0x8000000009})
pread64(r2, 0x0, 0x0, 0xce2)

1.930423947s ago: executing program 4 (id=2186):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x18)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$lock(r2, 0x26, &(0x7f00000031c0)={0x1})
close_range(r1, 0xffffffffffffffff, 0x0)

1.577970412s ago: executing program 4 (id=2187):
openat$udambuf(0xffffffffffffff9c, 0x0, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x707cb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2000000000002)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/meminfo\x00', 0x0, 0x0)
pread64(r3, &(0x7f0000000a00)=""/126, 0x7e, 0x7)
bind$netlink(r3, &(0x7f0000000500)={0x10, 0x0, 0x25dfdbfc, 0x2000000}, 0xc)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00')
preadv(r4, &(0x7f0000001400), 0x0, 0xc002a0, 0x0)
dup(0xffffffffffffffff)
syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x25b}, &(0x7f0000ffe000), 0x0)
syz_open_procfs(0x0, 0x0)

1.471232997s ago: executing program 6 (id=2188):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
epoll_create1(0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, &(0x7f0000000100))
shutdown(r1, 0x1)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x41dc, 0x4)
recvmmsg(r1, &(0x7f0000000840), 0x0, 0x406, 0x0)
syz_io_uring_setup(0xc97, &(0x7f0000000700)={0x0, 0x6015, 0x800, 0xff7fffff, 0x11c}, &(0x7f00000003c0), &(0x7f0000000140))
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/585], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5722780b6c2a7", 0x0, 0x48e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000000340)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0)
sendfile(r4, r4, 0x0, 0xc92)
r5 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4)
sendmsg$TIPC_NL_BEARER_DISABLE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4dd11876d04ce31a}, 0x20040800)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x1, 0xfffffffd}]}, 0x8)
socket$nl_rdma(0x10, 0x3, 0x14)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)

951.815869ms ago: executing program 0 (id=2189):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x34}, 0x2, 0x34005}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x3, 0x4)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0xfffc, @broadcast}, 0x2}}, 0x2e)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x400000000000002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$evdev(0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="796100000000000000027e000000"], 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@any, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xffffffffffffffff})
openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000)
socket$inet6_sctp(0xa, 0x801, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x90)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r6, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1b6}}], 0x2, 0x0)

882.257752ms ago: executing program 5 (id=2190):
socket$igmp(0x2, 0x3, 0x2)
syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x2002)
ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6)
eventfd(0x80200003)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x38, r2, 0x1, 0x10000, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xc9, 0x18}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40045}, 0xc0)
pread64(0xffffffffffffffff, &(0x7f0000000a00)=""/126, 0x7e, 0x7)
socket$inet6_tcp(0xa, 0x1, 0x0)
lseek(0xffffffffffffffff, 0xfffffffc, 0x4)
r5 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, 0x0)
r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000000)=0x200000000)
write$vhost_msg_v2(r6, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000340)=""/185, 0xb9, 0x0, 0x1, 0x2}}, 0x48)

0s ago: executing program 6 (id=2191):
bpf$PROG_LOAD(0x4, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_khugepaged_scan_pmd\x00', r0}, 0x18)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r2 = socket(0x169b85273c6f8108, 0x5, 0x0)
getsockname$netrom(r2, 0x0, &(0x7f0000000280))
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x200100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000140)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

8092] 8021q: adding VLAN 0 to HW filter on device bond0
[  473.317216][ T8092] 8021q: adding VLAN 0 to HW filter on device team0
[  473.440468][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  473.460902][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  474.487623][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  475.402692][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  475.464828][ T4466] bridge0: port 1(bridge_slave_0) entered blocking state
[  475.472024][ T4466] bridge0: port 1(bridge_slave_0) entered forwarding state
[  476.923470][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  476.932729][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  476.941273][ T4466] bridge0: port 2(bridge_slave_1) entered blocking state
[  476.948471][ T4466] bridge0: port 2(bridge_slave_1) entered forwarding state
[  476.959969][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  476.969382][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  476.999409][ T5344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  477.066212][ T5344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  477.578254][ T5344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  477.627717][ T5344] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  477.655717][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  477.676549][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  477.697988][ T5344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  477.715326][ T5344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  477.762044][ T8384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.944'.
[  477.795438][ T5344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  477.820728][ T5344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  478.594906][ T8092] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  478.701503][ T8391] 9pnet_virtio: no channels available for device syz
[  481.588173][ T5344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  481.597328][ T5344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  481.616981][ T8092] 8021q: adding VLAN 0 to HW filter on device batadv0
[  481.699827][ T8395] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  481.717885][ T8395] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  481.737246][ T8395] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  481.749715][ T8395] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  481.778972][ T8395] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  481.801725][ T8429] netlink: 12 bytes leftover after parsing attributes in process `syz.4.955'.
[  481.803031][ T8395] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  482.912795][ T8395] Bluetooth: hci5: Suspend notifier action (1) failed: -4
[  483.114020][ T8438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.957'.
[  483.582137][ T4281] Bluetooth: hci0: command 0x0c1a tx timeout
[  483.742865][ T4281] Bluetooth: hci2: command 0x0c1a tx timeout
[  483.742924][ T4280] Bluetooth: hci1: command 0x0c1a tx timeout
[  483.821994][ T4281] Bluetooth: hci5: command 0x0c1a tx timeout
[  483.822061][ T4280] Bluetooth: hci4: command 0x0c1a tx timeout
[  484.425538][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  484.445192][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  484.518300][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  484.564775][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  484.602270][ T8092] device veth0_vlan entered promiscuous mode
[  484.618976][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  484.719558][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  484.788213][ T8092] device veth1_vlan entered promiscuous mode
[  484.968086][ T5344] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  484.980031][ T5344] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  485.431839][ T5344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  485.644563][ T5344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  485.725224][ T8092] device veth0_macvtap entered promiscuous mode
[  485.756006][ T5344] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  485.902180][ T4280] Bluetooth: hci5: command 0x0406 tx timeout
[  487.334695][ T8092] device veth1_macvtap entered promiscuous mode
[  487.350236][ T8092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  487.361807][ T8092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  487.372265][ T8092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  487.383106][ T8092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  487.393190][ T8092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  487.403947][ T8092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  487.415604][ T8092] batman_adv: batadv0: Interface activated: batadv_slave_0
[  487.426648][ T8092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  487.437925][ T8092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  487.451972][ T8092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  487.462998][ T8092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  487.473128][ T8092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  487.499553][ T8092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  487.689281][ T8092] batman_adv: batadv0: Interface activated: batadv_slave_1
[  487.740416][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  487.814436][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  487.870108][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  489.394020][   T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  489.405545][ T8092] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  489.414697][ T8092] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  489.432415][ T8092] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  489.441311][ T8092] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  489.458223][ T8497] netlink: 12 bytes leftover after parsing attributes in process `syz.2.966'.
[  489.752282][ T5363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  489.760414][ T5363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  489.796830][ T8506] netlink: 12 bytes leftover after parsing attributes in process `syz.2.968'.
[  489.852145][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  490.052247][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  490.060562][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  490.138985][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  491.288178][ T8499] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  491.466263][ T8499] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  491.476557][ T8499] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  491.483141][ T8499] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  491.489494][ T8499] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  491.803606][ T8499] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  492.238777][ T8499] Bluetooth: hci5: Suspend notifier action (1) failed: -4
[  493.261980][ T4281] Bluetooth: hci0: command 0x0c1a tx timeout
[  493.524208][ T4280] Bluetooth: hci5: command 0x0c1a tx timeout
[  493.524644][ T4281] Bluetooth: hci4: command 0x0c1a tx timeout
[  493.530251][ T4280] Bluetooth: hci2: command 0x0c1a tx timeout
[  493.536435][ T4276] Bluetooth: hci1: command 0x0c1a tx timeout
[  495.605729][ T8596] Bluetooth: hci5: command 0x0406 tx timeout
[  496.492464][ T8598] ubi: mtd0 is already attached to ubi31
[  496.908961][ T8611] 9pnet_virtio: no channels available for device syz
[  501.264714][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  501.271099][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  503.550050][ T8650] ubi: mtd0 is already attached to ubi31
[  504.871267][ T8641] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  504.896041][ T8641] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  504.927300][ T8641] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  504.972203][ T8641] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  505.010989][ T8641] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  505.260703][ T8672] 9pnet_virtio: no channels available for device syz
[  506.285766][ T8662] loop0: detected capacity change from 0 to 32768
[  506.465416][ T8662] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  506.489032][ T8687] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.997'.
[  506.640924][ T8691] binder: 8684:8691 ioctl 40046629 200000000200 returned -22
[  506.669833][ T8685] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  506.676403][ T8685] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  506.684412][ T8685] vhci_hcd vhci_hcd.0: Device attached
[  506.695008][ T8690] syz.2.997 (8690): drop_caches: 2
[  506.704275][ T8690] syz.2.997 (8690): drop_caches: 2
[  506.782074][ T8596] Bluetooth: hci0: command 0x0c1a tx timeout
[  506.952057][ T8596] Bluetooth: hci2: command 0x0c1a tx timeout
[  506.952140][ T4278] Bluetooth: hci1: command 0x0c1a tx timeout
[  507.032174][ T8596] Bluetooth: hci4: command 0x0c1a tx timeout
[  507.038439][ T4278] Bluetooth: hci5: command 0x0c1a tx timeout
[  507.268769][ T8688] vhci_hcd: connection closed
[  507.269585][ T5359] vhci_hcd: stop threads
[  507.820528][ T8662] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  507.830734][ T5359] vhci_hcd: release socket
[  507.836294][ T5359] vhci_hcd: disconnect device
[  507.852029][ T6030] usb 38-1: enqueue for inactive port 0
[  507.890881][ T8662] BTRFS info (device loop0): using free space tree
[  508.392754][ T6030] usb usb38-port1: attempt power cycle
[  509.703070][ T8662] BTRFS error (device loop0): open_ctree failed: -12
[  509.807089][ T8642] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by udevd (8642)
[  510.212867][ T6030] usb usb38-port1: unable to enumerate USB device
[  512.628476][ T8736] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  512.652496][ T8736] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  512.732446][ T8736] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  512.772352][ T8736] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  512.806265][ T8736] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  512.814527][ T8759] ubi: mtd0 is already attached to ubi31
[  514.552068][ T4278] Bluetooth: hci0: command 0x0c1a tx timeout
[  514.701990][ T4278] Bluetooth: hci1: command 0x0c1a tx timeout
[  514.782055][ T4278] Bluetooth: hci4: command 0x0c1a tx timeout
[  514.788143][ T4278] Bluetooth: hci2: command 0x0c1a tx timeout
[  514.862028][ T4278] Bluetooth: hci5: command 0x0c1a tx timeout
[  517.031177][ T8772] loop4: detected capacity change from 0 to 32768
[  517.142495][ T8772] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  517.192563][ T8772] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  517.238101][ T8772] BTRFS info (device loop4): using free space tree
[  517.840047][ T8772] BTRFS error (device loop4): open_ctree failed: -12
[  524.142023][ T8878] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  524.148293][ T4278] Bluetooth: hci0: command 0x0c1a tx timeout
[  524.314574][ T8878] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  524.332348][ T8878] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  524.362155][ T8878] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  524.405866][ T8878] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  525.675622][ T8913] netlink: 6032 bytes leftover after parsing attributes in process `syz.5.1032'.
[  525.756080][ T8914] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1032'.
[  525.789516][ T8914] syz.5.1032 (8914): drop_caches: 2
[  525.796746][ T8914] syz.5.1032 (8914): drop_caches: 2
[  525.806757][ T8914] binder: 8904:8914 ioctl 40046629 200000000200 returned -22
[  526.222063][ T4278] Bluetooth: hci1: command 0x0c1a tx timeout
[  526.382075][ T8596] Bluetooth: hci4: command 0x0c1a tx timeout
[  526.388217][ T4280] Bluetooth: hci2: command 0x0c1a tx timeout
[  526.394418][ T4278] Bluetooth: hci5: command 0x0c1a tx timeout
[  528.263967][ T8926] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1037'.
[  529.358760][ T8935] netlink: 6032 bytes leftover after parsing attributes in process `syz.5.1039'.
[  529.436617][ T8939] binder: 8933:8939 ioctl 40046629 200000000200 returned -22
[  534.489688][ T8964] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.1045'.
[  534.519914][ T8962] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  534.526489][ T8962] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  534.534676][ T8962] vhci_hcd vhci_hcd.0: Device attached
[  534.556038][ T8962] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1045'.
[  534.631797][ T8965] vhci_hcd: cannot find the pending unlink 4294967287
[  534.639129][ T8968] binder: 8961:8968 ioctl 40046629 200000000200 returned -22
[  534.679078][ T8962] syz.0.1045 (8962): drop_caches: 2
[  534.689169][ T8962] syz.0.1045 (8962): drop_caches: 2
[  534.842372][ T6122] usb 34-1: SetAddress Request (18) to port 0
[  535.302358][ T8965] vhci_hcd: connection closed
[  535.303550][ T5359] vhci_hcd: stop threads
[  535.460079][ T6122] usb 34-1: new SuperSpeed USB device number 18 using vhci_hcd
[  535.518847][ T5359] vhci_hcd: release socket
[  535.715901][ T5359] vhci_hcd: disconnect device
[  536.674905][ T8960] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  537.092357][ T8960] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  537.111754][ T8960] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  537.132209][ T8960] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  537.147643][ T8960] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  537.242335][ T8996] 9pnet_virtio: no channels available for device syz
[  537.342122][ T4278] Bluetooth: hci0: command 0x0c1a tx timeout
[  539.112455][ T4278] Bluetooth: hci1: command 0x0c1a tx timeout
[  539.182245][ T4280] Bluetooth: hci5: command 0x0c1a tx timeout
[  539.188397][ T8596] Bluetooth: hci2: command 0x0c1a tx timeout
[  539.194555][ T4278] Bluetooth: hci4: command 0x0c1a tx timeout
[  540.609957][ T6122] usb 34-1: device descriptor read/8, error -110
[  540.737324][ T9008] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  541.102961][ T6122] usb usb34-port1: attempt power cycle
[  541.164791][ T9040] netlink: 6040 bytes leftover after parsing attributes in process `syz.2.1059'.
[  541.178705][ T9036] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  541.185269][ T9036] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  541.338540][ T9043] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[  541.345168][ T9043] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  541.359770][ T9036] vhci_hcd vhci_hcd.0: Device attached
[  541.416818][ T9043] vhci_hcd vhci_hcd.0: Device attached
[  541.458882][ T9036] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1059'.
[  541.496824][ T9036] syz.2.1059 (9036): drop_caches: 2
[  541.508100][ T9036] syz.2.1059 (9036): drop_caches: 2
[  541.518319][ T9037] vhci_hcd: cannot find the pending unlink 4294967287
[  541.525947][ T9036] binder: 9035:9036 ioctl 40046629 200000000200 returned -22
[  541.664557][ T6120] usb 38-1: SetAddress Request (27) to port 0
[  541.735029][ T6125] usb 40-1: SetAddress Request (34) to port 0
[  541.764440][ T6122] usb usb34-port1: unable to enumerate USB device
[  541.911650][ T9037] vhci_hcd: connection closed
[  541.933266][ T4396] vhci_hcd: stop threads
[  542.419294][ T6120] usb 38-1: new SuperSpeed USB device number 27 using vhci_hcd
[  542.420295][ T6125] usb 40-1: new SuperSpeed USB device number 34 using vhci_hcd
[  542.425422][ T4396] vhci_hcd: release socket
[  542.435690][ T4396] vhci_hcd: disconnect device
[  542.590975][ T9043] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.1060'.
[  542.666412][ T9044] vhci_hcd: cannot find the pending unlink 4294967287
[  542.673684][ T9048] binder: 9042:9048 ioctl 40046629 200000000200 returned -22
[  542.909177][ T9044] vhci_hcd: connection closed
[  542.924209][ T4886] vhci_hcd: stop threads
[  543.402500][ T6120] usb 38-1: enqueue for inactive port 0
[  543.515730][ T4886] vhci_hcd: release socket
[  543.940636][ T4886] vhci_hcd: disconnect device
[  544.322928][ T6120] usb usb38-port1: attempt power cycle
[  544.335103][ T9064] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1065'.
[  544.579278][ T9064] bridge0: port 2(bridge_slave_1) entered disabled state
[  544.588126][ T9064] bridge0: port 1(bridge_slave_0) entered disabled state
[  544.972658][ T6120] usb usb38-port1: unable to enumerate USB device
[  546.302063][ T4278] Bluetooth: hci0: command 0x0c1a tx timeout
[  546.309532][ T9058] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  546.813372][ T9058] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  546.827280][ T9058] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  546.918062][ T9058] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  547.107706][ T9058] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  547.319249][ T9098] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  547.325820][ T9098] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  547.342985][ T9098] vhci_hcd vhci_hcd.0: Device attached
[  547.692346][ T6120] usb 34-1: SetAddress Request (22) to port 0
[  548.261981][ T6120] usb 34-1: new SuperSpeed USB device number 22 using vhci_hcd
[  548.292762][ T9098] netlink: 6040 bytes leftover after parsing attributes in process `syz.0.1072'.
[  548.381952][ T4278] Bluetooth: hci1: command 0x0c1a tx timeout
[  548.401699][ T9105] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1072'.
[  548.444073][ T9105] syz.0.1072 (9105): drop_caches: 2
[  548.451355][ T9105] syz.0.1072 (9105): drop_caches: 2
[  548.461820][ T9099] vhci_hcd: cannot find the pending unlink 4294967287
[  548.461995][ T6125] usb 40-1: device descriptor read/8, error -110
[  548.475765][ T9105] binder: 9097:9105 ioctl 40046629 200000000200 returned -22
[  548.861976][ T4278] Bluetooth: hci2: command 0x0c1a tx timeout
[  548.941961][ T4278] Bluetooth: hci4: command 0x0c1a tx timeout
[  549.101959][ T4278] Bluetooth: hci5: command 0x0c1a tx timeout
[  549.188502][ T9099] vhci_hcd: connection reset by peer
[  549.194263][ T4353] vhci_hcd: stop threads
[  549.198616][ T4353] vhci_hcd: release socket
[  549.203365][ T4353] vhci_hcd: disconnect device
[  549.411794][ T9119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1077'.
[  549.561250][ T9121] 9pnet_virtio: no channels available for device syz
[  549.866382][ T6125] usb usb40-port1: attempt power cycle
[  550.585581][ T6125] usb usb40-port1: unable to enumerate USB device
[  552.464866][ T9145] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  552.471440][ T9145] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  552.481328][ T9145] vhci_hcd vhci_hcd.0: Device attached
[  552.548062][ T9145] netlink: 6040 bytes leftover after parsing attributes in process `syz.2.1085'.
[  552.619196][ T9148] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1085'.
[  552.656923][ T9148] syz.2.1085 (9148): drop_caches: 2
[  552.664074][ T9148] syz.2.1085 (9148): drop_caches: 2
[  552.674051][ T9146] vhci_hcd: cannot find the pending unlink 4294967287
[  552.685713][ T9148] binder: 9143:9148 ioctl 40046629 200000000200 returned -22
[  553.072119][ T4308] usb 38-1: SetAddress Request (31) to port 0
[  553.342409][ T6120] usb 34-1: device descriptor read/8, error -110
[  553.704856][ T9146] vhci_hcd: connection closed
[  553.719794][ T5047] vhci_hcd: stop threads
[  553.740900][ T4308] usb 38-1: new SuperSpeed USB device number 31 using vhci_hcd
[  554.154699][ T6120] usb usb34-port1: attempt power cycle
[  554.631114][ T5047] vhci_hcd: release socket
[  554.915733][ T5047] vhci_hcd: disconnect device
[  555.004776][ T9170] 9pnet_virtio: no channels available for device syz
[  555.395441][ T6120] usb usb34-port1: unable to enumerate USB device
[  555.828603][ T9171] netlink: 6032 bytes leftover after parsing attributes in process `syz.5.1090'.
[  555.920881][ T9177] syz.5.1090 (9177): drop_caches: 2
[  555.928203][ T9177] syz.5.1090 (9177): drop_caches: 2
[  555.938253][ T9177] binder: 9167:9177 ioctl 40046629 200000000200 returned -22
[  559.891034][ T4308] usb 38-1: device descriptor read/8, error -110
[  560.199109][ T6031] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  560.346795][ T9195] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  560.392539][ T6031] usb 1-1: too many configurations: 9, using maximum allowed: 8
[  560.424696][ T6031] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  560.478062][ T6031] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  560.502739][ T4308] usb usb38-port1: attempt power cycle
[  560.591029][ T6031] usb 1-1: config 0 interface 0 has no altsetting 0
[  560.619754][ T6031] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  560.666942][ T6031] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  560.717592][ T6031] usb 1-1: config 0 interface 0 has no altsetting 0
[  560.808950][ T6031] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  560.926003][ T6031] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  561.143147][ T6031] usb 1-1: config 0 interface 0 has no altsetting 0
[  561.182480][ T4308] usb usb38-port1: unable to enumerate USB device
[  561.662898][ T6031] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  561.916635][ T6031] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  562.029234][ T6031] usb 1-1: config 0 interface 0 has no altsetting 0
[  562.078643][ T6031] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  562.704027][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  562.711153][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  562.935427][ T6031] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  562.949171][ T6031] usb 1-1: config 0 interface 0 has no altsetting 0
[  563.060215][ T6031] usb 1-1: unable to read config index 5 descriptor/start: -71
[  563.091615][ T6031] usb 1-1: can't read configurations, error -71
[  563.335829][ T9242] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  563.342484][ T9242] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  563.351556][ T9242] vhci_hcd vhci_hcd.0: Device attached
[  563.365044][ T9242] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.1107'.
[  563.590928][ T9245] syz.0.1107 (9245): drop_caches: 2
[  563.596630][ T9245] syz.0.1107 (9245): drop_caches: 2
[  563.830246][ T9243] vhci_hcd: cannot find the pending unlink 4294967287
[  563.831064][ T9245] binder: 9241:9245 ioctl 40046629 200000000200 returned -22
[  563.894647][ T6122] usb 34-1: SetAddress Request (26) to port 0
[  564.069124][ T6122] usb 34-1: new SuperSpeed USB device number 26 using vhci_hcd
[  564.985992][ T9243] vhci_hcd: connection closed
[  564.990579][ T4886] vhci_hcd: stop threads
[  565.090869][ T4886] vhci_hcd: release socket
[  565.120311][ T4886] vhci_hcd: disconnect device
[  568.582271][ T4354] Bluetooth: (null): Too short H5 packet
[  568.588750][ T4354] Bluetooth: (null): Invalid header checksum
[  569.262494][ T4354] Bluetooth: (null): Invalid header checksum
[  569.268575][ T4354] Bluetooth: (null): Invalid header checksum
[  569.274797][ T4354] Bluetooth: (null): Invalid header checksum
[  569.280865][ T4354] Bluetooth: (null): Invalid header checksum
[  569.287033][ T4354] Bluetooth: (null): Invalid header checksum
[  569.293190][ T4354] Bluetooth: (null): Invalid header checksum
[  569.299604][ T4354] Bluetooth: (null): Invalid header checksum
[  569.356757][ T4886] Bluetooth: (null): Invalid header checksum
[  570.152371][ T6122] usb 34-1: device descriptor read/8, error -110
[  570.735893][ T6122] usb usb34-port1: attempt power cycle
[  571.447980][ T9299] binder: 9298:9299 ioctl c0306201 200000000300 returned -11
[  571.532397][ T6122] usb usb34-port1: unable to enumerate USB device
[  576.720027][ T9354] binder: 9347:9354 ioctl c0306201 200000000300 returned -11
[  577.004985][ T9359] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1134'.
[  591.497574][ T9443] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  607.611048][ T9595] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  607.617704][ T9595] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  609.263120][ T9595] vhci_hcd vhci_hcd.0: Device attached
[  609.303449][ T9595] netlink: 6040 bytes leftover after parsing attributes in process `syz.0.1189'.
[  609.373382][ T9600] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1189'.
[  609.416752][ T9600] syz.0.1189 (9600): drop_caches: 2
[  609.447359][ T9596] vhci_hcd: cannot find the pending unlink 4294967287
[  609.455246][ T9606] binder: 9594:9606 ioctl 40046629 200000000200 returned -22
[  609.465701][ T9600] syz.0.1189 (9600): drop_caches: 2
[  609.578252][ T4308] usb 34-1: SetAddress Request (30) to port 0
[  610.151978][ T9596] vhci_hcd: connection closed
[  610.152292][ T5047] vhci_hcd: stop threads
[  610.176095][ T4308] usb 34-1: new SuperSpeed USB device number 30 using vhci_hcd
[  610.279156][ T5047] vhci_hcd: release socket
[  610.295483][ T5047] vhci_hcd: disconnect device
[  615.342063][ T4308] usb 34-1: device descriptor read/8, error -110
[  615.588576][ T9644] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  615.595122][ T9644] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  615.616512][ T9651] binder_alloc: 9650: binder_alloc_buf, no vma
[  615.627835][ T9644] vhci_hcd vhci_hcd.0: Device attached
[  615.636550][ T9651] binder: 9650:9651 ioctl c0306201 200000000300 returned -11
[  615.707948][ T9644] netlink: 6040 bytes leftover after parsing attributes in process `syz.2.1203'.
[  615.789504][ T9652] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1203'.
[  615.830635][ T9652] syz.2.1203 (9652): drop_caches: 2
[  615.852427][ T9652] syz.2.1203 (9652): drop_caches: 2
[  615.864270][ T9645] vhci_hcd: cannot find the pending unlink 4294967287
[  615.872126][ T9652] binder: 9643:9652 ioctl 40046629 200000000200 returned -22
[  615.923834][ T4308] usb usb34-port1: attempt power cycle
[  616.011956][   T14] usb 38-1: SetAddress Request (35) to port 0
[  616.941714][   T14] usb 38-1: new SuperSpeed USB device number 35 using vhci_hcd
[  616.982187][ T9647] vhci_hcd: sendmsg failed!, ret=-32 for 48
[  616.994296][ T5359] vhci_hcd: stop threads
[  616.998630][ T5359] vhci_hcd: release socket
[  617.010134][ T5359] vhci_hcd: disconnect device
[  617.331048][ T9669] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1208'.
[  617.392191][ T9669] IPv6: NLM_F_CREATE should be specified when creating new route
[  617.450384][ T9669] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  617.458201][ T9669] IPv6: NLM_F_CREATE should be set when creating new route
[  617.465620][ T9669] IPv6: NLM_F_CREATE should be set when creating new route
[  617.472891][ T9669] IPv6: NLM_F_CREATE should be set when creating new route
[  617.654711][ T4308] usb usb34-port1: unable to enumerate USB device
[  620.947411][ T9701] netlink: 6040 bytes leftover after parsing attributes in process `syz.3.1216'.
[  621.015939][ T9704] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1216'.
[  621.060038][ T9704] syz.3.1216 (9704): drop_caches: 2
[  621.070311][ T9704] syz.3.1216 (9704): drop_caches: 2
[  621.081500][ T9704] binder: 9691:9704 ioctl 40046629 200000000200 returned -22
[  622.061943][   T14] usb 38-1: device descriptor read/8, error -110
[  622.877501][   T14] usb usb38-port1: attempt power cycle
[  623.012386][ T9692] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  623.641291][   T14] usb usb38-port1: unable to enumerate USB device
[  624.145150][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  624.151703][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  628.772688][ T9768] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3)
[  628.779456][ T9768] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  628.814436][ T9768] vhci_hcd vhci_hcd.0: Device attached
[  629.122115][   T14] usb 44-1: SetAddress Request (2) to port 0
[  629.622817][   T14] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd
[  629.705289][ T9775] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1229'.
[  629.749313][ T9775] syz.5.1229 (9775): drop_caches: 2
[  629.762241][ T9775] syz.5.1229 (9775): drop_caches: 2
[  629.774613][ T9769] vhci_hcd: cannot find the pending unlink 4294967287
[  629.782205][ T9775] binder: 9767:9775 ioctl 40046629 200000000200 returned -22
[  630.452196][ T9771] vhci_hcd: sendmsg failed!, ret=-32 for 48
[  630.606714][ T5047] vhci_hcd: stop threads
[  630.611061][ T5047] vhci_hcd: release socket
[  630.656977][ T5047] vhci_hcd: disconnect device
[  635.501937][   T14] usb 44-1: device descriptor read/8, error -110
[  635.924951][   T14] usb usb44-port1: attempt power cycle
[  636.565724][   T14] usb usb44-port1: unable to enumerate USB device
[  637.006295][ T9837] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3)
[  637.012852][ T9837] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  637.108354][ T9837] vhci_hcd vhci_hcd.0: Device attached
[  637.189574][ T9837] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1242'.
[  637.218708][ T9837] syz.5.1242 (9837): drop_caches: 2
[  637.238137][ T9837] syz.5.1242 (9837): drop_caches: 2
[  637.249774][ T9841] vhci_hcd: cannot find the pending unlink 4294967287
[  637.422139][ T6120] usb 44-1: SetAddress Request (6) to port 0
[  637.518764][ T9841] vhci_hcd: connection closed
[  637.522090][ T5361] vhci_hcd: stop threads
[  638.045415][ T6120] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd
[  638.071408][ T5361] vhci_hcd: release socket
[  638.154237][ T5361] vhci_hcd: disconnect device
[  638.192130][ T6120] usb 44-1: enqueue for inactive port 0
[  638.622602][ T6120] usb usb44-port1: attempt power cycle
[  638.720804][ T9856] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  639.322773][ T6120] usb usb44-port1: unable to enumerate USB device
[  641.945432][ T9887] binder: BINDER_SET_CONTEXT_MGR already set
[  641.964564][ T9887] binder: 9884:9887 ioctl 4018620d 200000000040 returned -16
[  642.159215][ T9887] binder: 9884:9887 ioctl c0306201 200000000300 returned -11
[  645.398083][ T9935] 9pnet_virtio: no channels available for device syz
[  646.237398][ T9953] netlink: 6068 bytes leftover after parsing attributes in process `syz.4.1268'.
[  646.246993][ T9945] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  646.253539][ T9945] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  646.261697][ T9945] vhci_hcd vhci_hcd.0: Device attached
[  646.328175][ T9945] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1268'.
[  646.350265][ T9945] syz.4.1268 (9945): drop_caches: 2
[  646.375799][ T9945] syz.4.1268 (9945): drop_caches: 2
[  646.390361][ T9945] binder: 9944:9945 ioctl 40046629 200000000200 returned -22
[  646.410018][ T9950] vhci_hcd: cannot find the pending unlink 4294967287
[  646.572130][   T14] usb 42-1: SetAddress Request (26) to port 0
[  647.511640][   T14] usb 42-1: new SuperSpeed USB device number 26 using vhci_hcd
[  647.514418][ T9950] vhci_hcd: connection closed
[  647.534676][ T4394] vhci_hcd: stop threads
[  647.611890][ T4394] vhci_hcd: release socket
[  647.616479][ T4394] vhci_hcd: disconnect device
[  650.723625][ T9987] 9pnet_virtio: no channels available for device syz
[  652.702359][   T14] usb 42-1: device descriptor read/8, error -110
[  653.465565][   T14] usb usb42-port1: attempt power cycle
[  653.535522][T10005] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[  653.537467][T10009] netlink: 6068 bytes leftover after parsing attributes in process `syz.3.1284'.
[  653.542271][T10005] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  653.542533][T10005] vhci_hcd vhci_hcd.0: Device attached
[  653.854698][T10009] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1284'.
[  653.872014][ T6122] usb 40-1: SetAddress Request (38) to port 0
[  653.878252][ T6122] usb 40-1: new SuperSpeed USB device number 38 using vhci_hcd
[  654.183083][   T14] usb usb42-port1: unable to enumerate USB device
[  655.814724][T10005] syz.3.1284 (10005): drop_caches: 2
[  655.885188][T10006] vhci_hcd: cannot find the pending unlink 4294967287
[  655.892508][T10009] binder: 10004:10009 ioctl 40046629 200000000200 returned -22
[  655.897196][T10005] syz.3.1284 (10005): drop_caches: 2
[  655.939461][T10006] vhci_hcd: connection reset by peer
[  655.946204][ T4354] vhci_hcd: stop threads
[  655.950515][ T4354] vhci_hcd: release socket
[  655.958306][ T4354] vhci_hcd: disconnect device
[  658.338185][T10041] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  658.344791][T10041] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  658.444908][T10041] vhci_hcd vhci_hcd.0: Device attached
[  658.495905][T10041] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.1295'.
[  658.656364][T10046] syz.2.1295 (10046): drop_caches: 2
[  658.673256][T10046] syz.2.1295 (10046): drop_caches: 2
[  658.684347][T10042] vhci_hcd: cannot find the pending unlink 4294967287
[  658.691536][T10046] binder: 10040:10046 ioctl 40046629 200000000200 returned -22
[  659.022175][ T6122] usb 40-1: device descriptor read/8, error -110
[  659.168544][T10042] vhci_hcd: connection closed
[  659.169232][ T4394] vhci_hcd: stop threads
[  659.794678][ T4394] vhci_hcd: release socket
[  659.803384][ T4394] vhci_hcd: disconnect device
[  659.822368][ T6030] usb 38-1: SetAddress Request (39) to port 0
[  660.017439][ T6122] usb usb40-port1: attempt power cycle
[  661.373649][ T6030] usb 38-1: new SuperSpeed USB device number 39 using vhci_hcd
[  662.582262][T10059] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1301'.
[  662.892903][ T6122] usb usb40-port1: unable to enumerate USB device
[  663.595504][T10070] netlink: 6068 bytes leftover after parsing attributes in process `syz.2.1303'.
[  663.617830][T10066] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  663.624416][T10066] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  663.632549][T10066] vhci_hcd vhci_hcd.0: Device attached
[  663.707451][T10066] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1303'.
[  663.725947][T10066] syz.2.1303 (10066): drop_caches: 2
[  663.744456][T10066] syz.2.1303 (10066): drop_caches: 2
[  663.756035][T10067] vhci_hcd: cannot find the pending unlink 4294967287
[  663.763676][T10066] binder: 10065:10066 ioctl 40046629 200000000200 returned -22
[  664.451106][T10067] vhci_hcd: connection reset by peer
[  664.546079][ T5361] vhci_hcd: stop threads
[  664.550467][ T5361] vhci_hcd: release socket
[  664.569196][ T5361] vhci_hcd: disconnect device
[  666.189569][T10087] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  666.197235][T10087] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  666.216050][T10087] vhci_hcd vhci_hcd.0: Device attached
[  666.284883][T10087] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.1309'.
[  666.446226][T10087] syz.0.1309 (10087): drop_caches: 2
[  666.461350][T10087] syz.0.1309 (10087): drop_caches: 2
[  666.461993][ T6030] usb 38-1: device descriptor read/8, error -110
[  666.479446][T10088] vhci_hcd: cannot find the pending unlink 4294967287
[  666.486846][T10087] binder: 10085:10087 ioctl 40046629 200000000200 returned -22
[  666.533582][ T6120] usb 34-1: SetAddress Request (34) to port 0
[  666.847395][ T6120] usb 34-1: new SuperSpeed USB device number 34 using vhci_hcd
[  666.946054][T10088] vhci_hcd: connection closed
[  666.946808][ T4396] vhci_hcd: stop threads
[  667.504373][T10095] binder: BINDER_SET_CONTEXT_MGR already set
[  667.510652][T10095] binder: 10094:10095 ioctl 4018620d 200000000040 returned -16
[  667.564505][T10097] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1312'.
[  667.574996][ T4396] vhci_hcd: release socket
[  667.579565][ T4396] vhci_hcd: disconnect device
[  667.631966][ T6120] usb 34-1: enqueue for inactive port 0
[  667.872535][ T6030] usb usb38-port1: attempt power cycle
[  668.035566][T10100] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  668.140359][ T6120] usb usb34-port1: attempt power cycle
[  668.582870][ T6030] usb usb38-port1: unable to enumerate USB device
[  668.882930][ T6120] usb usb34-port1: unable to enumerate USB device
[  672.549290][T10150] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1324'.
[  674.430550][T10169] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1330'.
[  675.401282][T10157] lo speed is unknown, defaulting to 1000
[  675.438888][T10157] lo speed is unknown, defaulting to 1000
[  679.064622][T10222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1343'.
[  685.584295][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  685.590687][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  688.050511][T10266] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  689.402336][T10281] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  689.408911][T10281] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  689.458483][T10281] vhci_hcd vhci_hcd.0: Device attached
[  689.548501][T10281] netlink: 6048 bytes leftover after parsing attributes in process `syz.2.1358'.
[  689.616987][T10290] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1358'.
[  689.656923][T10290] syz.2.1358 (10290): drop_caches: 2
[  689.664312][T10290] syz.2.1358 (10290): drop_caches: 2
[  689.675889][T10282] vhci_hcd: cannot find the pending unlink 4294967287
[  689.683254][T10290] binder: 10277:10290 ioctl 40046629 200000000200 returned -22
[  689.691006][ T6122] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  689.792316][   T14] usb 38-1: SetAddress Request (43) to port 0
[  690.737285][   T14] usb 38-1: new SuperSpeed USB device number 43 using vhci_hcd
[  690.781235][T10282] vhci_hcd: connection closed
[  690.781277][T10284] vhci_hcd: sendmsg failed!, ret=-32 for 48
[  690.888125][ T5361] vhci_hcd: stop threads
[  690.892468][ T5361] vhci_hcd: release socket
[  690.921894][ T5361] vhci_hcd: disconnect device
[  690.981910][ T6122] usb 1-1: Using ep0 maxpacket: 16
[  691.005852][ T6122] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  691.053792][ T6122] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  691.102080][ T6122] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  691.154266][ T6122] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  691.171344][ T6122] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  691.263021][ T6122] usb 1-1: config 0 descriptor??
[  691.399036][ T6122] usbhid 1-1:0.0: can't add hid device: -71
[  691.408295][ T6122] usbhid: probe of 1-1:0.0 failed with error -71
[  691.485655][ T6122] usb 1-1: USB disconnect, device number 6
[  695.821967][   T14] usb 38-1: device descriptor read/8, error -110
[  696.545125][   T14] usb usb38-port1: attempt power cycle
[  696.985600][T10351] binder: BINDER_SET_CONTEXT_MGR already set
[  697.073491][T10351] binder: 10350:10351 ioctl 4018620d 200000000040 returned -16
[  697.398590][   T14] usb usb38-port1: unable to enumerate USB device
[  703.616355][T10402] binder: BINDER_SET_CONTEXT_MGR already set
[  703.649755][T10402] binder: 10399:10402 ioctl 4018620d 200000000040 returned -16
[  709.872651][T10436] 9pnet_virtio: no channels available for device syz
[  710.965309][T10456] ubi: mtd0 is already attached to ubi31
[  715.077316][T10499] binder: 10497:10499 ioctl c0306201 200000000300 returned -11
[  724.682390][T10560] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1435'.
[  726.073046][T10564] ubi: mtd0 is already attached to ubi31
[  726.080310][T10568] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.1439'.
[  726.195179][T10570] syz.4.1439 (10570): drop_caches: 2
[  726.203458][T10570] syz.4.1439 (10570): drop_caches: 2
[  726.214127][T10570] binder: 10565:10570 ioctl 40046629 200000000200 returned -22
[  727.528235][T10575] binder: 10573:10575 ioctl c0306201 200000000300 returned -11
[  731.215603][T10599] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1449'.
[  732.452045][ T5794] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  732.646990][ T5794] usb 3-1: config index 0 descriptor too short (expected 39, got 27)
[  732.688488][ T5794] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  732.754017][ T5794] usb 3-1: config 0 interface 0 has no altsetting 0
[  732.835407][ T5794] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  732.902037][ T5794] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  732.922117][ T5794] usb 3-1: Product: syz
[  732.927168][ T5794] usb 3-1: Manufacturer: syz
[  732.937475][ T5794] usb 3-1: SerialNumber: syz
[  732.958157][ T5794] usb 3-1: config 0 descriptor??
[  732.988309][ T5794] hub 3-1:0.0: bad descriptor, ignoring hub
[  733.061943][ T5794] hub: probe of 3-1:0.0 failed with error -5
[  733.128535][ T5794] usb 3-1: selecting invalid altsetting 0
[  733.323041][ T5794] usb 3-1: USB disconnect, device number 4
[  733.629004][T10614] binder: 10613:10614 ioctl c0306201 200000000300 returned -11
[  733.781926][ T5794] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  734.589714][ T5794] usb 3-1: config index 0 descriptor too short (expected 39, got 27)
[  734.712384][ T5794] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  734.970677][ T5794] usb 3-1: config 0 interface 0 has no altsetting 0
[  735.367733][ T5794] usb 3-1: string descriptor 0 read error: -71
[  735.461183][ T5794] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  735.498689][ T5794] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  735.524838][ T5794] usb 3-1: config 0 descriptor??
[  735.558645][ T5794] usb 3-1: can't set config #0, error -71
[  735.619501][ T5794] usb 3-1: USB disconnect, device number 5
[  737.690683][T10646] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1461'.
[  742.733384][T10680] binder: 10678:10680 ioctl 4018620d 0 returned -22
[  742.856528][T10680] binder: 10678:10680 ioctl c0306201 200000000300 returned -11
[  742.938683][T10687] 9pnet_virtio: no channels available for device syz
[  743.472235][T10698] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1478'.
[  747.024641][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  747.035311][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  748.911706][T10739] binder: 10737:10739 ioctl 4018620d 0 returned -22
[  749.750416][T10739] binder: 10737:10739 ioctl c0306201 200000000300 returned -11
[  750.459354][T10760] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  750.472165][T10760] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  750.561126][T10760] vhci_hcd vhci_hcd.0: Device attached
[  750.610428][T10760] netlink: 6048 bytes leftover after parsing attributes in process `syz.4.1492'.
[  750.699131][T10763] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1492'.
[  750.803572][T10761] vhci_hcd: cannot find the pending unlink 4294967287
[  750.814437][T10766] binder: 10758:10766 ioctl 40046629 200000000200 returned -22
[  750.835944][T10763] syz.4.1492 (10763): drop_caches: 2
[  750.895485][T10763] syz.4.1492 (10763): drop_caches: 2
[  751.722222][T10761] vhci_hcd: connection closed
[  751.747184][ T5047] vhci_hcd: stop threads
[  752.023217][ T5782] usb 42-1: SetAddress Request (30) to port 0
[  752.023435][ T5782] usb 42-1: new SuperSpeed USB device number 30 using vhci_hcd
[  752.331722][ T5047] vhci_hcd: release socket
[  752.335599][ T5047] vhci_hcd: disconnect device
[  754.215760][T10792] ubi: mtd0 is already attached to ubi31
[  754.288992][T10799] binder: BINDER_SET_CONTEXT_MGR already set
[  754.324366][T10799] binder: 10798:10799 ioctl 4018620d 200000000040 returned -16
[  754.396958][T10799] binder: 10798:10799 ioctl c0306201 200000000300 returned -11
[  754.881036][T10819] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  754.888253][T10819] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  754.929018][T10819] vhci_hcd vhci_hcd.0: Device attached
[  755.052574][T10819] netlink: 6048 bytes leftover after parsing attributes in process `syz.0.1504'.
[  755.127054][T10824] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1504'.
[  755.166320][T10824] syz.0.1504 (10824): drop_caches: 2
[  755.180535][T10824] syz.0.1504 (10824): drop_caches: 2
[  755.193586][T10821] vhci_hcd: cannot find the pending unlink 4294967287
[  755.201059][T10824] binder: 10818:10824 ioctl 40046629 200000000200 returned -22
[  755.472480][ T6122] usb 34-1: SetAddress Request (38) to port 0
[  755.478797][ T6122] usb 34-1: new SuperSpeed USB device number 38 using vhci_hcd
[  756.226962][T10821] vhci_hcd: connection closed
[  756.228081][ T4392] vhci_hcd: stop threads
[  756.238172][ T4392] vhci_hcd: release socket
[  756.244471][ T4392] vhci_hcd: disconnect device
[  756.337315][T10828] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  757.114439][ T5782] usb 42-1: device descriptor read/8, error -110
[  757.532455][ T5782] usb usb42-port1: attempt power cycle
[  758.832728][ T5782] usb usb42-port1: unable to enumerate USB device
[  759.694178][T10855] binder: BINDER_SET_CONTEXT_MGR already set
[  759.811712][T10855] binder: 10854:10855 ioctl 4018620d 200000000040 returned -16
[  761.039453][T10874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1519'.
[  761.101992][T10874] IPv6: NLM_F_CREATE should be specified when creating new route
[  761.261887][ T6122] usb 34-1: device descriptor read/8, error -110
[  761.712456][ T6122] usb usb34-port1: attempt power cycle
[  762.393973][ T6122] usb usb34-port1: unable to enumerate USB device
[  765.830602][T10926] netlink: 6048 bytes leftover after parsing attributes in process `syz.3.1531'.
[  765.936572][T10927] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1531'.
[  766.078364][T10928] binder: 10921:10928 ioctl 40046629 200000000200 returned -22
[  766.132717][T10927] syz.3.1531 (10927): drop_caches: 2
[  766.143911][T10927] syz.3.1531 (10927): drop_caches: 2
[  767.425425][T10930] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1532'.
[  773.449515][T10989] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[  773.471959][T10989] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  773.638612][T10989] vhci_hcd vhci_hcd.0: Device attached
[  774.811988][ T6031] usb 40-1: SetAddress Request (42) to port 0
[  774.820913][ T6031] usb 40-1: new SuperSpeed USB device number 42 using vhci_hcd
[  775.351397][T10989] netlink: 6048 bytes leftover after parsing attributes in process `syz.3.1545'.
[  775.754518][T10997] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  775.766461][T10997] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  775.779186][    C0] vkms_vblank_simulate: vblank timer overrun
[  775.898975][T11002] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1545'.
[  776.016232][T11002] syz.3.1545 (11002): drop_caches: 2
[  776.036343][T10991] vhci_hcd: cannot find the pending unlink 4294967287
[  776.047683][T11004] binder: 10987:11004 ioctl 40046629 200000000200 returned -22
[  776.113501][T11002] syz.3.1545 (11002): drop_caches: 2
[  776.740876][T10997] vhci_hcd vhci_hcd.0: Device attached
[  776.808541][T10991] vhci_hcd: connection reset by peer
[  776.844220][T10997] syz.4.1547 (10997): drop_caches: 2
[  776.860543][T10997] syz.4.1547 (10997): drop_caches: 2
[  776.888143][T10999] vhci_hcd: cannot find the pending unlink 4294967287
[  776.905605][T10997] binder: 10996:10997 ioctl 40046629 200000000200 returned -22
[  777.022335][ T5782] usb 42-1: SetAddress Request (34) to port 0
[  777.079137][ T5782] usb 42-1: new SuperSpeed USB device number 34 using vhci_hcd
[  777.679820][ T4886] vhci_hcd: stop threads
[  777.692121][T10999] vhci_hcd: connection closed
[  777.724470][T11008] binder: BINDER_SET_CONTEXT_MGR already set
[  777.754723][ T4886] vhci_hcd: release socket
[  777.811975][T11000] vhci_hcd: sendmsg failed!, ret=-32 for 48
[  777.855741][ T4886] vhci_hcd: disconnect device
[  778.346307][ T4886] vhci_hcd: stop threads
[  778.377325][T11008] binder: 11007:11008 ioctl 4018620d 200000000040 returned -16
[  778.686686][ T4886] vhci_hcd: release socket
[  778.976558][ T4886] vhci_hcd: disconnect device
[  780.382405][ T6031] usb 40-1: device descriptor read/8, error -110
[  781.842684][ T6031] usb usb40-port1: attempt power cycle
[  782.598832][ T6031] usb usb40-port1: unable to enumerate USB device
[  782.873873][ T5782] usb 42-1: device descriptor read/8, error -110
[  783.284673][T11096] binder: 11093:11096 ioctl c0306201 0 returned -14
[  783.537334][ T5782] usb usb42-port1: attempt power cycle
[  783.582252][T11096] binder: 11093:11096 ioctl c0306201 200000000300 returned -11
[  784.225296][ T5782] usb usb42-port1: unable to enumerate USB device
[  785.570257][T11112] 9pnet_virtio: no channels available for device syz
[  786.365378][T11120] netlink: 6012 bytes leftover after parsing attributes in process `syz.0.1561'.
[  786.466223][T11121] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1561'.
[  786.555615][T11121] syz.0.1561 (11121): drop_caches: 2
[  786.647312][T11122] binder: 11115:11122 ioctl 40046629 200000000200 returned -22
[  786.669272][T11121] syz.0.1561 (11121): drop_caches: 2
[  789.929181][T11138] ubi: mtd0 is already attached to ubi31
[  791.629613][T11145] binder: BINDER_SET_CONTEXT_MGR already set
[  791.650835][T11145] binder: 11144:11145 ioctl 4018620d 200000000040 returned -16
[  795.496718][T11160] binder: 11158:11160 ioctl c0306201 200000000300 returned -11
[  801.706490][T11241] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  801.717160][T11241] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  801.775253][T11241] vhci_hcd vhci_hcd.0: Device attached
[  801.842436][T11241] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.1583'.
[  802.764041][T11241] syz.2.1583 (11241): drop_caches: 2
[  802.787398][T11241] syz.2.1583 (11241): drop_caches: 2
[  802.809992][T11252] binder: 11251:11252 ioctl c0306201 200000000300 returned -11
[  802.842469][ T6031] usb 38-1: SetAddress Request (47) to port 0
[  802.864677][ T6031] usb 38-1: new SuperSpeed USB device number 47 using vhci_hcd
[  802.912528][T11244] binder: 11240:11244 ioctl 40046629 200000000200 returned -22
[  802.924960][T11242] vhci_hcd: cannot find the pending unlink 4294967287
[  802.982005][T11242] vhci_hcd: connection closed
[  803.005691][ T5359] vhci_hcd: stop threads
[  804.573025][ T5359] vhci_hcd: release socket
[  804.747247][ T5359] vhci_hcd: disconnect device
[  805.588968][T11261] batman_adv: batadv0: Adding interface: dummy0
[  805.692434][T11261] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  805.840558][T11261] batman_adv: batadv0: Interface activated: dummy0
[  806.297104][T11262] batadv0: mtu less than device minimum
[  806.369797][T11268] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  806.379196][T11268] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  806.402367][T11262] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  806.423305][T11262] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  806.445637][T11262] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  806.462495][T11262] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  806.482653][T11262] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  806.500305][T11262] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  806.517194][T11262] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  806.534279][T11262] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  806.550700][T11262] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  806.672004][T11268] vhci_hcd vhci_hcd.0: Device attached
[  807.157300][T11269] netlink: 6040 bytes leftover after parsing attributes in process `syz.2.1591'.
[  807.283799][T11268] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1591'.
[  807.297507][T11258] lo speed is unknown, defaulting to 1000
[  807.330810][T11258] lo speed is unknown, defaulting to 1000
[  807.355625][T11268] syz.2.1591 (11268): drop_caches: 2
[  807.658351][T11270] vhci_hcd: cannot find the pending unlink 4294967287
[  807.693661][T11269] binder: 11266:11269 ioctl 40046629 200000000200 returned -22
[  808.464113][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  808.471406][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  808.926927][T11268] syz.2.1591 (11268): drop_caches: 2
[  809.725858][T11270] vhci_hcd: connection reset by peer
[  809.737471][ T4354] vhci_hcd: stop threads
[  809.743165][ T4354] vhci_hcd: release socket
[  809.755410][ T6031] usb 38-1: device descriptor read/8, error -110
[  809.763133][ T4354] vhci_hcd: disconnect device
[  810.010537][T11284] binder: 11283:11284 ioctl c0306201 0 returned -14
[  810.026418][T11280] 9pnet_virtio: no channels available for device syz
[  810.239615][ T6031] usb usb38-port1: attempt power cycle
[  810.528038][T11294] 9pnet_virtio: no channels available for device syz
[  811.310763][T11298] binder: 11295:11298 ioctl c0306201 200000000300 returned -11
[  811.481862][ T6031] usb usb38-port1: unable to enumerate USB device
[  811.772196][T11302] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  811.780491][T11302] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  811.842622][T11302] vhci_hcd vhci_hcd.0: Device attached
[  812.153582][   T41] usb 38-1: SetAddress Request (51) to port 0
[  813.431216][   T41] usb 38-1: new SuperSpeed USB device number 51 using vhci_hcd
[  813.707861][T11302] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.1601'.
[  813.778526][T11302] syz.2.1601 (11302): drop_caches: 2
[  813.786374][T11302] syz.2.1601 (11302): drop_caches: 2
[  813.825939][T11303] vhci_hcd: cannot find the pending unlink 4294967287
[  813.851203][T11302] binder: 11301:11302 ioctl 40046629 200000000200 returned -22
[  814.148693][T11303] vhci_hcd: connection closed
[  814.148956][ T5344] vhci_hcd: stop threads
[  814.801946][ T5344] vhci_hcd: release socket
[  814.852407][ T5344] vhci_hcd: disconnect device
[  818.136918][T11335] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  818.153766][T11335] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  818.177358][T11335] vhci_hcd vhci_hcd.0: Device attached
[  818.692189][   T14] usb 34-1: SetAddress Request (42) to port 0
[  818.699192][T11338] netlink: 6040 bytes leftover after parsing attributes in process `syz.0.1609'.
[  818.726993][    C1] vkms_vblank_simulate: vblank timer overrun
[  818.895536][   T14] usb 34-1: new SuperSpeed USB device number 42 using vhci_hcd
[  819.327428][   T41] usb 38-1: device descriptor read/8, error -110
[  819.407761][T11338] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1609'.
[  819.712915][T11348] 9pnet_virtio: no channels available for device syz
[  819.777006][   T41] usb usb38-port1: attempt power cycle
[  820.864466][T11338] syz.0.1609 (11338): drop_caches: 2
[  820.879151][T11338] syz.0.1609 (11338): drop_caches: 2
[  820.968819][T11336] vhci_hcd: cannot find the pending unlink 4294967287
[  820.984749][T11335] binder: 11334:11335 ioctl 40046629 200000000200 returned -22
[  822.150592][T11336] vhci_hcd: connection reset by peer
[  822.158433][ T5365] vhci_hcd: stop threads
[  822.198422][ T5365] vhci_hcd: release socket
[  822.794086][   T41] usb usb38-port1: unable to enumerate USB device
[  823.178101][ T5365] vhci_hcd: disconnect device
[  823.262635][T11356] binder: 11352:11356 ioctl c0306201 200000000300 returned -11
[  823.726468][T11360] 9pnet_virtio: no channels available for device syz
[  824.066376][T11360] netlink: 'syz.5.1614': attribute type 21 has an invalid length.
[  824.151076][T11360] cgroup: No subsys list or none specified
[  824.162697][   T14] usb 34-1: device descriptor read/8, error -110
[  824.702000][T11361] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1615'.
[  824.744509][T11361] IPv6: NLM_F_CREATE should be specified when creating new route
[  825.162977][   T14] usb usb34-port1: attempt power cycle
[  828.390286][   T14] usb usb34-port1: unable to enumerate USB device
[  830.151303][T11375] 9pnet_virtio: no channels available for device syz
[  831.085870][T11380] 9pnet_virtio: no channels available for device syz
[  832.356678][T11390] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1623'.
[  834.883677][T11404] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  834.895659][T11404] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  834.965398][T11404] vhci_hcd vhci_hcd.0: Device attached
[  835.055167][T11404] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1628'.
[  835.274113][T11405] vhci_hcd: cannot find the pending unlink 4294967287
[  835.328307][   T14] usb 38-1: SetAddress Request (55) to port 0
[  835.344102][   T14] usb 38-1: new SuperSpeed USB device number 55 using vhci_hcd
[  835.344300][T11410] binder: 11401:11410 ioctl 40046629 200000000200 returned -22
[  835.347381][T11404] syz.2.1628 (11404): drop_caches: 2
[  836.287662][T11408] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.1628'.
[  836.290168][T11404] syz.2.1628 (11404): drop_caches: 2
[  836.429313][T11405] vhci_hcd: connection reset by peer
[  836.459210][ T5359] vhci_hcd: stop threads
[  836.581832][ T5359] vhci_hcd: release socket
[  836.639861][ T5359] vhci_hcd: disconnect device
[  836.861084][T11415] binder: 11414:11415 ioctl c0306201 200000000300 returned -11
[  839.843689][T11425] lo speed is unknown, defaulting to 1000
[  840.119150][T11425] lo speed is unknown, defaulting to 1000
[  840.462460][   T14] usb 38-1: device descriptor read/8, error -110
[  841.698885][   T14] usb usb38-port1: attempt power cycle
[  842.391219][   T14] usb usb38-port1: unable to enumerate USB device
[  845.667407][T11465] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.1643'.
[  845.689923][T11465] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1643'.
[  845.720853][T11465] syz.0.1643 (11465): drop_caches: 2
[  845.739766][T11465] syz.0.1643 (11465): drop_caches: 2
[  845.826809][T11463] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  845.845813][T11463] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  845.868726][T11463] vhci_hcd vhci_hcd.0: Device attached
[  845.869257][T11465] binder: 11462:11465 ioctl 40046629 200000000200 returned -22
[  845.921877][T11464] vhci_hcd: connection closed
[  845.922089][ T4490] vhci_hcd: stop threads
[  846.027220][ T4490] vhci_hcd: release socket
[  846.102151][ T4490] vhci_hcd: disconnect device
[  853.828790][T11485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  858.362327][T11522] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  858.375185][T11522] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  858.434782][T11522] vhci_hcd vhci_hcd.0: Device attached
[  858.762141][ T6122] usb 42-1: SetAddress Request (38) to port 0
[  858.762356][ T6122] usb 42-1: new SuperSpeed USB device number 38 using vhci_hcd
[  859.349545][ T4490] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  859.427535][T11525] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.1656'.
[  859.535826][T11522] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1656'.
[  859.561690][T11522] syz.4.1656 (11522): drop_caches: 2
[  859.568523][T11522] syz.4.1656 (11522): drop_caches: 2
[  859.591511][T11524] vhci_hcd: cannot find the pending unlink 4294967287
[  859.603815][T11522] binder: 11521:11522 ioctl 40046629 200000000200 returned -22
[  859.641988][T11524] vhci_hcd: connection reset by peer
[  859.662363][ T5369] vhci_hcd: stop threads
[  859.681012][ T5369] vhci_hcd: release socket
[  859.731043][ T5369] vhci_hcd: disconnect device
[  859.846720][ T4490] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  860.131121][T11538] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1660'.
[  860.341249][T11545] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  860.369322][T11545] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  860.389345][T11545] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  860.403622][T11545] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  860.484339][T11545] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  860.502429][T11545] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  860.526382][ T4278] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  860.542356][ T4278] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  860.562194][ T4278] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  860.576159][ T4278] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  860.577552][ T4490] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  860.604263][ T4278] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  860.622132][ T4278] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  860.988225][ T4490] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  861.106312][T11544] lo speed is unknown, defaulting to 1000
[  861.146867][T11544] lo speed is unknown, defaulting to 1000
[  862.702321][ T4278] Bluetooth: hci2: command 0x0409 tx timeout
[  863.803129][T11544] chnl_net:caif_netlink_parms(): no params data found
[  863.821960][ T6122] usb 42-1: device descriptor read/8, error -110
[  863.911855][T11584] 9pnet_virtio: no channels available for device syz
[  864.329848][ T6122] usb usb42-port1: attempt power cycle
[  864.782032][ T4278] Bluetooth: hci2: command 0x041b tx timeout
[  865.005562][ T6122] usb usb42-port1: unable to enumerate USB device
[  865.120636][T11590] input: syz1 as /devices/virtual/input/input6
[  865.426495][T11583] netlink: 'syz.4.1666': attribute type 21 has an invalid length.
[  866.668737][T11544] bridge0: port 1(bridge_slave_0) entered blocking state
[  866.862039][ T4278] Bluetooth: hci2: command 0x040f tx timeout
[  867.682117][T11544] bridge0: port 1(bridge_slave_0) entered disabled state
[  867.723792][T11544] device bridge_slave_0 entered promiscuous mode
[  868.901093][T11544] bridge0: port 2(bridge_slave_1) entered blocking state
[  868.941914][ T4278] Bluetooth: hci2: command 0x0419 tx timeout
[  869.081883][T11544] bridge0: port 2(bridge_slave_1) entered disabled state
[  869.127451][T11544] device bridge_slave_1 entered promiscuous mode
[  869.376561][T11617] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  869.384230][T11617] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  869.492661][T11617] vhci_hcd vhci_hcd.0: Device attached
[  869.669789][    C1] vkms_vblank_simulate: vblank timer overrun
[  869.904243][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  869.912220][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  870.095252][ T4330] usb 42-1: SetAddress Request (42) to port 0
[  870.722485][T11625] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1671'.
[  870.782271][ T4330] usb 42-1: new SuperSpeed USB device number 42 using vhci_hcd
[  871.702108][T11622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1672'.
[  871.745452][T11618] vhci_hcd: cannot find the pending unlink 4294967287
[  871.766605][T11627] binder: 11615:11627 ioctl 40046629 200000000200 returned -22
[  871.769677][T11625] syz.4.1671 (11625): drop_caches: 2
[  871.880258][T11617] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.1671'.
[  871.889025][T11625] syz.4.1671 (11625): drop_caches: 2
[  871.904953][    C1] vkms_vblank_simulate: vblank timer overrun
[  871.907431][T11544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  872.376284][T11635] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  872.388766][T11635] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  872.440962][T11618] vhci_hcd: connection reset by peer
[  872.457712][T11635] vhci_hcd vhci_hcd.0: Device attached
[  872.469077][ T4353] vhci_hcd: stop threads
[  872.503368][ T4353] vhci_hcd: release socket
[  872.527528][ T4353] vhci_hcd: disconnect device
[  872.684813][    C1] vkms_vblank_simulate: vblank timer overrun
[  872.707040][T11639] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1676'.
[  872.760922][T11544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  872.775826][   T41] usb 34-1: SetAddress Request (47) to port 0
[  872.799387][   T41] usb 34-1: new SuperSpeed USB device number 47 using vhci_hcd
[  872.815005][T11635] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.1676'.
[  872.823564][T11639] syz.0.1676 (11639): drop_caches: 2
[  872.868555][T11636] vhci_hcd: cannot find the pending unlink 4294967287
[  872.883106][T11635] binder: 11634:11635 ioctl 40046629 200000000200 returned -22
[  872.908117][T11639] syz.0.1676 (11639): drop_caches: 2
[  873.179989][T11636] vhci_hcd: connection reset by peer
[  873.200768][ T4886] vhci_hcd: stop threads
[  873.212534][ T4886] vhci_hcd: release socket
[  873.249104][ T4886] vhci_hcd: disconnect device
[  873.438238][T11544] team0: Port device team_slave_0 added
[  873.629595][T11544] team0: Port device team_slave_1 added
[  873.863751][ T4490] device hsr_slave_0 left promiscuous mode
[  873.963124][ T4490] device hsr_slave_1 left promiscuous mode
[  874.069934][ T4490] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  874.142511][ T4490] batman_adv: batadv0: Removing interface: batadv_slave_0
[  874.195634][ T4490] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  874.209883][T11650] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1679'.
[  874.241888][ T4490] batman_adv: batadv0: Removing interface: batadv_slave_1
[  874.315091][T11652] syz.0.1679 uses obsolete (PF_INET,SOCK_PACKET)
[  874.322500][ T4490] device bridge_slave_1 left promiscuous mode
[  874.426961][ T4490] bridge0: port 2(bridge_slave_1) entered disabled state
[  874.506069][ T4490] device bridge_slave_0 left promiscuous mode
[  874.534338][ T4490] bridge0: port 1(bridge_slave_0) entered disabled state
[  874.925803][ T4490] device veth1_macvtap left promiscuous mode
[  875.000015][ T4490] device veth0_macvtap left promiscuous mode
[  875.049417][ T4490] device veth1_vlan left promiscuous mode
[  875.083834][ T4490] device veth0_vlan left promiscuous mode
[  875.162835][T11658] ubi: mtd0 is already attached to ubi31
[  876.782091][ T4330] usb 42-1: device descriptor read/8, error -110
[  877.263798][ T4330] usb usb42-port1: attempt power cycle
[  877.908370][   T41] usb 34-1: device descriptor read/8, error -110
[  878.342917][T11689] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3)
[  878.355384][T11689] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  878.396910][   T41] usb usb34-port1: attempt power cycle
[  878.398617][T11689] vhci_hcd vhci_hcd.0: Device attached
[  878.422003][ T4330] usb usb42-port1: unable to enumerate USB device
[  878.523129][T11692] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1686'.
[  878.544621][T11692] syz.5.1686 (11692): drop_caches: 2
[  878.556681][T11692] syz.5.1686 (11692): drop_caches: 2
[  878.587845][T11690] vhci_hcd: cannot find the pending unlink 4294967287
[  878.601066][T11692] binder: 11688:11692 ioctl 40046629 200000000200 returned -22
[  878.741916][   T14] usb 44-1: SetAddress Request (10) to port 0
[  878.761886][   T14] usb 44-1: new SuperSpeed USB device number 10 using vhci_hcd
[  879.162367][   T41] usb usb34-port1: unable to enumerate USB device
[  879.179271][T11690] vhci_hcd: connection reset by peer
[  879.202893][ T5359] vhci_hcd: stop threads
[  879.208546][ T5359] vhci_hcd: release socket
[  879.241871][ T5359] vhci_hcd: disconnect device
[  879.594333][ T4490] team0 (unregistering): Port device team_slave_1 removed
[  879.774992][ T4490] team0 (unregistering): Port device team_slave_0 removed
[  879.974826][ T4490] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  880.102786][ T4490] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  881.326646][ T4490] bond0 (unregistering): Released all slaves
[  881.506684][T11650] device bridge0 entered promiscuous mode
[  881.526506][T11650] bridge0: port 3(macvtap1) entered blocking state
[  881.536889][T11650] bridge0: port 3(macvtap1) entered disabled state
[  881.551383][T11650] device bridge0 left promiscuous mode
[  881.594159][T11652] netdevsim netdevsim0: Direct firmware load for . failed with error -2
[  881.602718][ T4308] lo speed is unknown, defaulting to 1000
[  881.608297][T11652] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  881.670100][T11686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1685'.
[  881.689634][T11689] netlink: 6032 bytes leftover after parsing attributes in process `syz.5.1686'.
[  881.768557][T11544] batman_adv: batadv0: Adding interface: batadv_slave_0
[  881.793516][T11544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  881.924777][T11544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  882.029658][T11544] batman_adv: batadv0: Adding interface: batadv_slave_1
[  882.081807][T11544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  882.109504][T11705] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  882.155823][T11705] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  882.201108][T11544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  882.241521][T11705] vhci_hcd vhci_hcd.0: Device attached
[  882.618318][T11544] device hsr_slave_0 entered promiscuous mode
[  882.653308][T11708] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1688'.
[  882.675801][   T41] usb 34-1: SetAddress Request (51) to port 0
[  882.687770][   T41] usb 34-1: new SuperSpeed USB device number 51 using vhci_hcd
[  882.739454][T11544] device hsr_slave_1 entered promiscuous mode
[  882.822721][T11708] syz.0.1688 (11708): drop_caches: 2
[  882.845588][T11544] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  882.889429][T11706] vhci_hcd: cannot find the pending unlink 4294967287
[  882.921408][T11713] binder: 11704:11713 ioctl 40046629 200000000200 returned -22
[  882.925426][T11708] syz.0.1688 (11708): drop_caches: 2
[  882.949911][T11544] Cannot create hsr debugfs directory
[  883.001799][T11705] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.1688'.
[  883.244918][T11706] vhci_hcd: connection reset by peer
[  883.261005][ T4886] vhci_hcd: stop threads
[  883.273893][ T4886] vhci_hcd: release socket
[  883.356039][ T4886] vhci_hcd: disconnect device
[  883.730217][T11721] 9pnet_virtio: no channels available for device syz
[  883.902265][   T14] usb 44-1: device descriptor read/8, error -110
[  884.575412][   T14] usb usb44-port1: attempt power cycle
[  884.906029][T11734] 9pnet_virtio: no channels available for device syz
[  885.964659][T11544] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  886.172388][   T14] usb usb44-port1: unable to enumerate USB device
[  886.440034][T11544] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  886.617855][T11544] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  886.741158][T11544] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  887.646176][T11544] 8021q: adding VLAN 0 to HW filter on device bond0
[  887.864441][ T5367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  887.925981][ T5367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  887.995206][   T41] usb 34-1: device descriptor read/8, error -110
[  888.089411][T11544] 8021q: adding VLAN 0 to HW filter on device team0
[  888.140823][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  888.243540][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  888.265698][ T4353] bridge0: port 1(bridge_slave_0) entered blocking state
[  888.280993][ T4353] bridge0: port 1(bridge_slave_0) entered forwarding state
[  888.430435][   T41] usb usb34-port1: attempt power cycle
[  888.533931][T11763] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3)
[  888.544768][T11763] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  888.567633][T11763] vhci_hcd vhci_hcd.0: Device attached
[  888.590621][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  888.617826][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  888.620033][T11763] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1698'.
[  888.642604][ T4353] bridge0: port 2(bridge_slave_1) entered blocking state
[  888.659159][ T4353] bridge0: port 2(bridge_slave_1) entered forwarding state
[  888.680836][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  888.876372][T11765] netlink: 6032 bytes leftover after parsing attributes in process `syz.5.1698'.
[  888.884543][T11763] syz.5.1698 (11763): drop_caches: 2
[  888.900160][T11084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  888.922348][ T4308] usb 44-1: SetAddress Request (14) to port 0
[  888.981301][ T4308] usb 44-1: new SuperSpeed USB device number 14 using vhci_hcd
[  889.040869][ T5359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  889.065804][T11764] vhci_hcd: cannot find the pending unlink 4294967287
[  889.069619][T11763] syz.5.1698 (11763): drop_caches: 2
[  889.142738][ T5359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  889.149308][T11763] binder: 11761:11763 ioctl 40046629 200000000200 returned -22
[  889.184219][   T41] usb usb34-port1: unable to enumerate USB device
[  890.854907][T11764] vhci_hcd: connection reset by peer
[  890.885845][ T5359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  890.946815][ T5359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  890.958454][T11084] vhci_hcd: stop threads
[  890.969808][ T5359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  890.975805][T11084] vhci_hcd: release socket
[  890.990370][ T5359] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  891.074728][T11084] vhci_hcd: disconnect device
[  891.086644][ T5359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  891.118912][ T5359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  891.156883][T11776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1699'.
[  891.269286][ T5359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  891.322566][T11780] 9pnet_virtio: no channels available for device syz
[  891.325627][ T5359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  891.617531][T11544] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  891.691046][T11783] cgroup: No subsys list or none specified
[  891.726276][T11781] netlink: 'syz.4.1701': attribute type 21 has an invalid length.
[  893.222111][T11797] ubi: mtd0 is already attached to ubi31
[  894.142170][ T4308] usb 44-1: device descriptor read/8, error -110
[  894.789444][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  894.834390][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  894.898570][T11544] 8021q: adding VLAN 0 to HW filter on device batadv0
[  895.002907][ T4308] usb usb44-port1: attempt power cycle
[  895.675452][ T4308] usb usb44-port1: unable to enumerate USB device
[  897.254916][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  897.324183][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  897.948715][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  898.043567][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  898.092654][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  898.174144][ T5369] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  898.229633][T11544] device veth0_vlan entered promiscuous mode
[  898.301172][T11544] device veth1_vlan entered promiscuous mode
[  898.352330][T11848] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  898.367110][T11848] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  898.413866][T11848] vhci_hcd vhci_hcd.0: Device attached
[  898.444859][T11848] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.1711'.
[  898.528888][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  898.535075][T11848] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1711'.
[  898.592326][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  898.664660][T11845] lo speed is unknown, defaulting to 1000
[  898.677339][T11544] device veth0_macvtap entered promiscuous mode
[  898.688509][T11849] vhci_hcd: cannot find the pending unlink 4294967287
[  898.703435][T11852] binder: 11846:11852 ioctl 40046629 200000000200 returned -22
[  898.732510][ T5794] usb 42-1: SetAddress Request (46) to port 0
[  898.741396][T11848] syz.4.1711 (11848): drop_caches: 2
[  898.761952][ T5794] usb 42-1: new SuperSpeed USB device number 46 using vhci_hcd
[  898.806632][T11544] device veth1_macvtap entered promiscuous mode
[  899.006720][T11848] syz.4.1711 (11848): drop_caches: 2
[  899.034526][T11849] vhci_hcd: connection reset by peer
[  899.062197][T11544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  899.080243][ T5369] vhci_hcd: stop threads
[  899.086561][ T5369] vhci_hcd: release socket
[  899.107869][ T5369] vhci_hcd: disconnect device
[  899.140956][T11544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  899.208594][T11544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  899.264783][T11544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  899.305673][T11544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  899.340824][T11544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  899.379699][T11544] batman_adv: batadv0: Interface activated: batadv_slave_0
[  899.417638][T11856] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1712'.
[  899.449519][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  899.485275][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  899.507572][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  899.555370][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  899.648141][T11544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  899.691548][T11544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  899.779126][T11544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  899.863182][T11544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  899.948321][T11544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  900.075854][T11544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  900.131278][T11544] batman_adv: batadv0: Interface activated: batadv_slave_1
[  900.209066][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  900.303522][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  900.448017][T11544] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  900.509651][ T5359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  900.525348][T11544] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  900.666135][ T5359] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  900.729340][T11544] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  900.910552][T11544] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  901.006207][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  903.507138][ T4490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  903.917901][ T5794] usb 42-1: device descriptor read/8, error -110
[  905.162084][ T5367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  905.226121][T11891] ubi: mtd0 is already attached to ubi31
[  905.327749][ T4490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  905.389370][ T5367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  905.409736][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  905.553369][ T5794] usb usb42-port1: attempt power cycle
[  905.646210][ T5359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  906.262324][ T5794] usb usb42-port1: unable to enumerate USB device
[  907.006444][T11905] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1723'.
[  907.343939][T11908] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3)
[  907.360197][T11908] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  907.452767][T11908] vhci_hcd vhci_hcd.0: Device attached
[  907.500252][T11912] netlink: 6032 bytes leftover after parsing attributes in process `syz.6.1724'.
[  907.538517][T11912] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1724'.
[  907.648400][T11908] syz.6.1724 (11908): drop_caches: 2
[  907.784684][T11909] vhci_hcd: cannot find the pending unlink 4294967287
[  907.801815][T11912] binder: 11907:11912 ioctl 40046629 200000000200 returned -22
[  907.805869][T11908] syz.6.1724 (11908): drop_caches: 2
[  907.829641][ T6120] usb 46-1: SetAddress Request (2) to port 0
[  907.849048][ T6120] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd
[  907.905734][T11909] vhci_hcd: connection closed
[  907.905996][ T5367] vhci_hcd: stop threads
[  907.969234][ T5367] vhci_hcd: release socket
[  908.003598][ T5367] vhci_hcd: disconnect device
[  908.061828][ T6120] usb 46-1: enqueue for inactive port 0
[  908.642797][ T6120] usb usb46-port1: attempt power cycle
[  909.331279][T11917] lo speed is unknown, defaulting to 1000
[  909.343915][ T6120] usb usb46-port1: unable to enumerate USB device
[  912.302544][T11964] ubi: mtd0 is already attached to ubi31
[  912.359090][T11959] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1736'.
[  912.504690][T11966] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3)
[  912.518976][T11966] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  912.685853][T11966] vhci_hcd vhci_hcd.0: Device attached
[  912.708431][T11969] netlink: 6032 bytes leftover after parsing attributes in process `syz.5.1738'.
[  912.939949][T11966] syz.5.1738 (11966): drop_caches: 2
[  912.992831][ T6030] usb 44-1: SetAddress Request (18) to port 0
[  913.012307][ T6030] usb 44-1: new SuperSpeed USB device number 18 using vhci_hcd
[  913.062931][T11968] vhci_hcd: cannot find the pending unlink 4294967287
[  913.071418][T11969] binder: 11965:11969 ioctl 40046629 200000000200 returned -22
[  913.111365][T11966] syz.5.1738 (11966): drop_caches: 2
[  913.128789][T11968] vhci_hcd: connection closed
[  913.129441][ T5359] vhci_hcd: stop threads
[  913.225559][ T5359] vhci_hcd: release socket
[  913.258415][ T5359] vhci_hcd: disconnect device
[  914.874064][T11996] 9pnet_virtio: no channels available for device syz
[  915.211213][T11996] netlink: 'syz.3.1743': attribute type 21 has an invalid length.
[  915.282164][T11996] cgroup: No subsys list or none specified
[  916.350024][T12001] lo speed is unknown, defaulting to 1000
[  918.222184][ T6030] usb 44-1: device descriptor read/8, error -110
[  918.943892][ T6030] usb usb44-port1: attempt power cycle
[  919.267354][T12024] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1749'.
[  919.753649][ T6030] usb usb44-port1: unable to enumerate USB device
[  919.793356][T12033] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3)
[  919.803561][T12033] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  919.863914][T12041] netlink: 6032 bytes leftover after parsing attributes in process `syz.6.1752'.
[  919.899612][T12033] vhci_hcd vhci_hcd.0: Device attached
[  919.962903][T12033] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1752'.
[  920.128013][T12033] syz.6.1752 (12033): drop_caches: 2
[  920.250253][ T6125] usb 46-1: SetAddress Request (6) to port 0
[  920.310136][ T5367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  920.326788][ T6125] usb 46-1: new SuperSpeed USB device number 6 using vhci_hcd
[  920.349177][T12034] vhci_hcd: cannot find the pending unlink 4294967287
[  920.368790][T12037] binder: 12032:12037 ioctl 40046629 200000000200 returned -22
[  920.668200][ T5367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  920.777735][T12033] syz.6.1752 (12033): drop_caches: 2
[  920.788617][T12034] vhci_hcd: connection reset by peer
[  920.823090][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  920.838713][ T4350] vhci_hcd: stop threads
[  920.879569][ T4350] vhci_hcd: release socket
[  920.902901][ T4350] vhci_hcd: disconnect device
[  923.055816][T12071] trusted_key: encrypted_key: insufficient parameters specified
[  924.987457][T12074] trusted_key: encrypted_key: keylen parameter is missing
[  925.422229][ T6125] usb 46-1: device descriptor read/8, error -110
[  926.183322][ T6125] usb usb46-port1: attempt power cycle
[  926.756322][T12075] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  926.966780][ T6125] usb usb46-port1: unable to enumerate USB device
[  928.801836][T12075] usb 5-1: Using ep0 maxpacket: 8
[  928.861246][T12075] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  928.940611][T12075] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  928.981552][T12075] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  929.002177][T12075] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  929.100987][T12075] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  929.203119][T12075] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  931.010757][T12075] usb 5-1: usb_control_msg returned -71
[  931.022418][T12075] usbtmc 5-1:16.0: can't read capabilities
[  931.056126][T12075] usb 5-1: USB disconnect, device number 3
[  931.344968][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  931.356692][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  931.615755][T12106] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[  931.623218][T12106] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  931.707505][T12106] vhci_hcd vhci_hcd.0: Device attached
[  932.642367][T12106] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.1767'.
[  932.812409][T12109] syz.3.1767 (12109): drop_caches: 2
[  932.889234][T12109] syz.3.1767 (12109): drop_caches: 2
[  932.922733][T12107] vhci_hcd: cannot find the pending unlink 4294967287
[  933.645964][T12107] vhci_hcd: connection closed
[  933.646759][ T4865] vhci_hcd: stop threads
[  933.675941][ T4865] vhci_hcd: release socket
[  933.683240][ T4865] vhci_hcd: disconnect device
[  935.104737][T12137] ubi: mtd0 is already attached to ubi31
[  938.061815][T11545] Bluetooth: hci2: command 0x0406 tx timeout
[  941.812271][T12171] trusted_key: encrypted_key: insufficient parameters specified
[  942.320696][T12175] trusted_key: encrypted_key: insufficient parameters specified
[  942.910099][T12177] binder: 12176:12177 ioctl c0306201 200000000300 returned -11
[  945.602504][ T4865] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  945.701224][ T4865] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  945.816093][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  947.425162][T12198] lo speed is unknown, defaulting to 1000
[  947.444989][T12221] binder: 12220:12221 ioctl c0306201 200000000300 returned -11
[  949.943591][T12238] trusted_key: encrypted_key: insufficient parameters specified
[  950.236877][T12239] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus
[  950.666967][T12236] lo speed is unknown, defaulting to 1000
[  950.762819][T12249] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3)
[  950.780859][T12249] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  950.972875][T12249] vhci_hcd vhci_hcd.0: Device attached
[  951.280090][T12256] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1799'.
[  951.300850][ T5782] usb 46-1: SetAddress Request (10) to port 0
[  951.424405][ T5782] usb 46-1: new SuperSpeed USB device number 10 using vhci_hcd
[  951.525871][T12256] syz.6.1799 (12256): drop_caches: 2
[  951.569691][T12256] syz.6.1799 (12256): drop_caches: 2
[  951.590606][T12250] vhci_hcd: cannot find the pending unlink 4294967287
[  951.606794][T12256] binder: 12248:12256 ioctl 40046629 200000000200 returned -22
[  952.364286][T12250] vhci_hcd: connection closed
[  952.364517][T11084] vhci_hcd: stop threads
[  952.412453][T11084] vhci_hcd: release socket
[  952.451980][T11084] vhci_hcd: disconnect device
[  952.469336][ T5782] usb 46-1: enqueue for inactive port 0
[  952.852183][T12249] netlink: 6032 bytes leftover after parsing attributes in process `syz.6.1799'.
[  953.002559][ T5782] usb usb46-port1: attempt power cycle
[  953.880274][ T5782] usb usb46-port1: unable to enumerate USB device
[  957.475349][T12285] binder: 12284:12285 ioctl c0306201 200000000300 returned -11
[  959.829780][T12295] trusted_key: encrypted_key: insufficient parameters specified
[  962.365195][T12299] lo speed is unknown, defaulting to 1000
[  965.088067][T12318] 9pnet_virtio: no channels available for device syz
[  965.603773][T12322] cgroup: No subsys list or none specified
[  966.366590][T12331] netlink: 6032 bytes leftover after parsing attributes in process `syz.5.1817'.
[  966.621598][T12334] binder: 12327:12334 ioctl 40046629 200000000200 returned -22
[  966.653470][T12332] syz.5.1817 (12332): drop_caches: 2
[  966.687440][T12332] syz.5.1817 (12332): drop_caches: 2
[  967.333395][T12330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  967.650041][ T4353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  967.761926][ T4353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  967.903882][T12341] trusted_key: encrypted_key: insufficient parameters specified
[  967.957410][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  974.733869][T12368] 9pnet_virtio: no channels available for device syz
[  977.283063][T12395] 9pnet_virtio: no channels available for device syz
[  979.866747][T12389] cgroup: No subsys list or none specified
[  981.791370][T12406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  984.701841][ T4278] Bluetooth: hci2: command 0x0406 tx timeout
[  988.647102][T11086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  990.472472][T11086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  990.986859][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  992.584131][T12472] ubi: mtd0 is already attached to ubi31
[  992.784981][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  992.798062][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  992.949073][T12475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  994.904401][T12491] ubi: mtd0 is already attached to ubi31
[  996.735314][    C1] hrtimer: interrupt took 3797993 ns
[  997.192351][T12502] trusted_key: encrypted_key: keylen parameter is missing
[ 1004.548942][ T4865] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1005.027052][T12529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1006.882683][ T4865] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1006.973950][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1007.109445][T12549] program syz.6.1871 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1008.492504][T12551] ubi: mtd0 is already attached to ubi31
[ 1016.453233][T12583] trusted_key: encrypted_key: insufficient parameters specified
[ 1017.710113][T12598] trusted_key: encrypted_key: keylen parameter is missing
[ 1024.570894][T12628] ubi: mtd0 is already attached to ubi31
[ 1035.937671][ T5365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1036.741911][ T5365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1036.856757][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1037.105889][T12693] trusted_key: encrypted_key: keylen parameter is missing
[ 1038.725745][T12691] ubi: mtd0 is already attached to ubi31
[ 1041.403792][T12709] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3)
[ 1041.405660][T12713] netlink: 6032 bytes leftover after parsing attributes in process `syz.5.1914'.
[ 1041.410862][T12709] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1041.709066][T12709] vhci_hcd vhci_hcd.0: Device attached
[ 1041.863287][T12709] syz.5.1914 (12709): drop_caches: 2
[ 1041.871943][T12709] syz.5.1914 (12709): drop_caches: 2
[ 1041.885724][T12710] vhci_hcd: cannot find the pending unlink 4294967287
[ 1041.894804][T12709] binder: 12708:12709 ioctl 40046629 200000000200 returned -22
[ 1042.400433][T12710] vhci_hcd: connection closed
[ 1042.402841][ T5359] vhci_hcd: stop threads
[ 1042.659323][ T5359] vhci_hcd: release socket
[ 1042.681844][ T4308] usb 44-1: SetAddress Request (22) to port 0
[ 1042.696330][ T4308] usb 44-1: new SuperSpeed USB device number 22 using vhci_hcd
[ 1042.699872][ T5359] vhci_hcd: disconnect device
[ 1044.584959][T12739] trusted_key: encrypted_key: keylen parameter is missing
[ 1047.821885][ T4308] usb 44-1: device descriptor read/8, error -110
[ 1049.370926][ T4308] usb usb44-port1: attempt power cycle
[ 1050.915758][ T4308] usb usb44-port1: unable to enumerate USB device
[ 1052.732083][T12769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1054.224510][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.233555][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[ 1063.919829][T12823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1067.726177][T12844] can0: slcan on pty26.
[ 1069.132276][T12860] 9pnet_virtio: no channels available for device syz
[ 1070.327649][T12869] overlayfs: failed to resolve './file0': -2
[ 1070.389776][T12870] device bridge2 entered promiscuous mode
[ 1071.002721][T12830] can0 (unregistered): slcan off pty26.
[ 1072.991732][T12889] ubi: mtd0 is already attached to ubi31
[ 1075.788982][T12906] 9pnet_virtio: no channels available for device syz
[ 1075.915739][T12907] netlink: 'syz.4.1970': attribute type 21 has an invalid length.
[ 1075.982660][T12907] cgroup: No subsys list or none specified
[ 1078.525861][T12917] 9pnet_virtio: no channels available for device syz
[ 1078.725086][T12917] netlink: 'syz.5.1973': attribute type 21 has an invalid length.
[ 1078.775895][T12917] cgroup: No subsys list or none specified
[ 1079.360494][T12920] device bridge0 entered promiscuous mode
[ 1079.409857][T12920] device bridge0 left promiscuous mode
[ 1081.117391][T12941] trusted_key: encrypted_key: keylen parameter is missing
[ 1081.817700][T12956] ubi: mtd0 is already attached to ubi31
[ 1081.969041][T12950] lo speed is unknown, defaulting to 1000
[ 1083.354958][T12990] 9pnet_virtio: no channels available for device syz
[ 1083.752104][T12990] netlink: 'syz.3.1988': attribute type 21 has an invalid length.
[ 1083.852165][T12989] cgroup: No subsys list or none specified
[ 1084.403958][T12992] can0: slcan on pty32.
[ 1087.306118][T12981] can0 (unregistered): slcan off pty32.
[ 1087.343483][T12994] ubi: mtd0 is already attached to ubi31
[ 1087.907907][T13004] ubi: mtd0 is already attached to ubi31
[ 1088.081787][ T6031] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 1089.071749][ T6031] usb 6-1: Using ep0 maxpacket: 32
[ 1089.845054][ T6031] usb 6-1: config 4 has an invalid descriptor of length 49, skipping remainder of the config
[ 1089.866352][ T6031] usb 6-1: config 4 has 0 interfaces, different from the descriptor's value: 9
[ 1089.908140][ T6031] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1089.937086][ T6031] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1089.970760][ T6031] usb 6-1: Product: syz
[ 1089.983302][ T6031] usb 6-1: Manufacturer: syz
[ 1090.803202][ T6031] usb 6-1: SerialNumber: syz
[ 1090.847105][ T6031] usb 6-1: can't set config #4, error -71
[ 1090.872075][ T6031] usb 6-1: USB disconnect, device number 2
[ 1093.358901][T13039] ubi: mtd0 is already attached to ubi31
[ 1093.453106][T13043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1093.541917][ T6120] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[ 1093.751757][ T6120] usb 1-1: Using ep0 maxpacket: 8
[ 1093.764685][ T6120] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1093.780851][ T6120] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1093.802107][ T6120] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1093.812601][ T6120] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1093.827978][ T6120] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1093.838150][ T6120] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1094.128062][ T6120] usb 1-1: usb_control_msg returned -71
[ 1094.134791][ T6120] usbtmc 1-1:16.0: can't read capabilities
[ 1094.204339][ T6120] usb 1-1: USB disconnect, device number 7
[ 1097.366631][T13072] fuse: Bad value for 'fd'
[ 1097.588255][T13076] syz.0.2012 (13076): drop_caches: 2
[ 1097.611810][T13076] syz.0.2012 (13076): drop_caches: 2
[ 1097.623208][T13076] binder: 13069:13076 ioctl 40046629 200000000200 returned -22
[ 1098.786292][T13078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1101.413684][T13106] fuse: Bad value for 'fd'
[ 1101.489525][T13107] ubi: mtd0 is already attached to ubi31
[ 1103.771812][T13115] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3)
[ 1103.778390][T13115] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1103.791275][T13115] vhci_hcd vhci_hcd.0: Device attached
[ 1103.851125][T13116] vhci_hcd: cannot find the pending unlink 4294967287
[ 1103.858397][T13117] binder: 13114:13117 ioctl 40046629 200000000200 returned -22
[ 1103.861106][T13115] syz.5.2030 (13115): drop_caches: 2
[ 1104.088370][T13115] syz.5.2030 (13115): drop_caches: 2
[ 1104.093979][ T6031] usb 44-1: SetAddress Request (26) to port 0
[ 1104.101899][ T6031] usb 44-1: new SuperSpeed USB device number 26 using vhci_hcd
[ 1104.113628][T13126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1104.130004][T13116] vhci_hcd: connection closed
[ 1104.130252][   T46] vhci_hcd: stop threads
[ 1104.162622][   T46] vhci_hcd: release socket
[ 1104.174591][   T46] vhci_hcd: disconnect device
[ 1105.897204][T13133] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1105.927251][T13133] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1106.777552][T13133] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1106.787080][T13133] net_ratelimit: 10 callbacks suppressed
[ 1106.787094][T13133] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check.
[ 1108.717626][T13148] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3)
[ 1108.724268][T13148] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1108.796828][T13148] vhci_hcd vhci_hcd.0: Device attached
[ 1108.882063][T13155] 9pnet_virtio: no channels available for device syz
[ 1109.008778][T13148] netlink: 6032 bytes leftover after parsing attributes in process `syz.6.2040'.
[ 1109.310587][ T6031] usb 44-1: device descriptor read/8, error -110
[ 1109.334590][T13154] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2040'.
[ 1109.358521][T13154] syz.6.2040 (13154): drop_caches: 2
[ 1109.383337][T13154] syz.6.2040 (13154): drop_caches: 2
[ 1109.394768][T13149] vhci_hcd: cannot find the pending unlink 4294967287
[ 1109.402995][T13154] binder: 13146:13154 ioctl 40046629 200000000200 returned -22
[ 1109.582383][ T4341] usb 46-1: SetAddress Request (14) to port 0
[ 1109.588552][ T4341] usb 46-1: new SuperSpeed USB device number 14 using vhci_hcd
[ 1110.061928][T13150] vhci_hcd: sendmsg failed!, ret=-32 for 48
[ 1110.172765][T13153] netlink: 'syz.3.2042': attribute type 21 has an invalid length.
[ 1110.188387][T12964] vhci_hcd: stop threads
[ 1110.193687][T13153] cgroup: No subsys list or none specified
[ 1110.204054][T12964] vhci_hcd: release socket
[ 1110.254923][T12964] vhci_hcd: disconnect device
[ 1110.452242][ T6031] usb usb44-port1: attempt power cycle
[ 1111.152288][ T6031] usb usb44-port1: unable to enumerate USB device
[ 1114.421413][T13197] syz.0.2049 (13197): drop_caches: 2
[ 1114.434112][T13197] syz.0.2049 (13197): drop_caches: 2
[ 1114.447613][T13197] binder: 13190:13197 ioctl 40046629 200000000200 returned -22
[ 1114.637024][T13192] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[ 1114.643598][T13192] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1114.651568][T13192] vhci_hcd vhci_hcd.0: Device attached
[ 1114.966081][ T5794] usb 34-1: SetAddress Request (55) to port 0
[ 1115.085483][T13193] vhci_hcd: connection closed
[ 1115.086518][ T4354] vhci_hcd: stop threads
[ 1115.102202][ T4341] usb 46-1: device descriptor read/8, error -110
[ 1115.633600][ T4354] vhci_hcd: release socket
[ 1115.640937][ T4354] vhci_hcd: disconnect device
[ 1115.653215][ T5794] usb 34-1: new SuperSpeed USB device number 55 using vhci_hcd
[ 1115.663746][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.670047][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[ 1115.732026][ T5794] usb 34-1: enqueue for inactive port 0
[ 1116.069221][ T4341] usb usb46-port1: attempt power cycle
[ 1116.162812][ T5794] usb usb34-port1: attempt power cycle
[ 1116.265744][T13210] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.2055'.
[ 1116.336313][T13213] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2055'.
[ 1116.362856][T13213] syz.3.2055 (13213): drop_caches: 2
[ 1116.373934][T13213] syz.3.2055 (13213): drop_caches: 2
[ 1116.385788][T13213] binder: 13206:13213 ioctl 40046629 200000000200 returned -22
[ 1116.732403][ T4341] usb usb46-port1: unable to enumerate USB device
[ 1117.050719][T13207] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[ 1117.057316][T13207] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1117.065389][T13207] vhci_hcd vhci_hcd.0: Device attached
[ 1117.075959][T13208] vhci_hcd: connection closed
[ 1117.076827][ T4396] vhci_hcd: stop threads
[ 1117.372056][ T4308] usb 40-1: SetAddress Request (47) to port 0
[ 1117.429445][ T4308] usb 40-1: new SuperSpeed USB device number 47 using vhci_hcd
[ 1117.441999][ T4396] vhci_hcd: release socket
[ 1117.446669][ T4396] vhci_hcd: disconnect device
[ 1117.592218][ T4308] usb 40-1: enqueue for inactive port 0
[ 1118.223737][ T4308] usb usb40-port1: attempt power cycle
[ 1118.272200][ T5794] usb usb34-port1: unable to enumerate USB device
[ 1118.609773][T13230] trusted_key: encrypted_key: keylen parameter is missing
[ 1119.428803][ T4308] usb usb40-port1: unable to enumerate USB device
[ 1119.650207][T13238] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[ 1119.656761][T13238] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1119.687905][T13238] vhci_hcd vhci_hcd.0: Device attached
[ 1119.688388][T13241] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.2063'.
[ 1120.001893][ T4308] usb 42-1: SetAddress Request (50) to port 0
[ 1120.047512][T13241] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2063'.
[ 1120.085485][T13241] syz.4.2063 (13241): drop_caches: 2
[ 1120.091142][T13241] syz.4.2063 (13241): drop_caches: 2
[ 1120.096627][ T4308] usb 42-1: new SuperSpeed USB device number 50 using vhci_hcd
[ 1120.157920][T13239] vhci_hcd: cannot find the pending unlink 4294967287
[ 1120.181496][T13241] binder: 13237:13241 ioctl 40046629 200000000200 returned -22
[ 1120.304620][T13239] vhci_hcd: connection reset by peer
[ 1120.358225][ T4350] vhci_hcd: stop threads
[ 1120.573871][T13252] trusted_key: encrypted_key: insufficient parameters specified
[ 1120.774150][ T4350] vhci_hcd: release socket
[ 1121.284584][ T4350] vhci_hcd: disconnect device
[ 1125.261945][ T4308] usb 42-1: device descriptor read/8, error -110
[ 1125.425690][T13284] trusted_key: encrypted_key: keylen parameter is missing
[ 1125.735314][ T4308] usb usb42-port1: attempt power cycle
[ 1126.423711][ T4308] usb usb42-port1: unable to enumerate USB device
[ 1127.549462][T13307] 9pnet_virtio: no channels available for device syz
[ 1127.658482][T13307] netlink: 'syz.4.2083': attribute type 21 has an invalid length.
[ 1127.724899][T13307] cgroup: No subsys list or none specified
[ 1128.761990][ T4341] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[ 1129.001853][ T4341] usb 5-1: Using ep0 maxpacket: 8
[ 1129.010555][ T4341] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1130.553514][ T4341] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1130.673846][ T4341] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1130.774801][ T4341] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1131.038738][ T4341] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1131.115655][ T4341] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1131.573231][ T4341] usb 5-1: usb_control_msg returned -71
[ 1131.578856][ T4341] usbtmc 5-1:16.0: can't read capabilities
[ 1133.078497][T13339] syz.5.2092 invoked oom-killer: gfp_mask=0x442dc0(GFP_KERNEL_ACCOUNT|__GFP_NOWARN|__GFP_COMP|__GFP_ZERO), order=3, oom_score_adj=1000
[ 1133.092644][T13339] CPU: 1 PID: 13339 Comm: syz.5.2092 Not tainted syzkaller #0
[ 1133.100116][T13339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1133.110275][T13339] Call Trace:
[ 1133.113583][T13339]  <TASK>
[ 1133.116506][T13339]  dump_stack_lvl+0x168/0x22e
[ 1133.121230][T13339]  ? ___ratelimit+0x147/0x5f0
[ 1133.125902][T13339]  ? show_regs_print_info+0x12/0x12
[ 1133.131088][T13339]  ? load_image+0x3b0/0x3b0
[ 1133.135589][T13339]  ? ___ratelimit+0x44b/0x5f0
[ 1133.140248][T13339]  ? radix_tree_cpu_dead+0x160/0x160
[ 1133.145517][T13339]  dump_header+0xd7/0x820
[ 1133.149838][T13339]  oom_kill_process+0x361/0x550
[ 1133.154783][T13339]  out_of_memory+0xf45/0x12e0
[ 1133.159472][T13339]  ? mem_cgroup_out_of_memory+0x9c/0x340
[ 1133.165148][T13339]  ? unregister_oom_notifier+0x20/0x20
[ 1133.170599][T13339]  mem_cgroup_out_of_memory+0x273/0x340
[ 1133.176135][T13339]  ? mem_cgroup_oom_trylock+0x210/0x210
[ 1133.181678][T13339]  ? do_raw_spin_unlock+0x11d/0x230
[ 1133.186882][T13339]  try_charge_memcg+0xc99/0x17f0
[ 1133.191806][T13339]  ? page_ext_put+0x98/0xb0
[ 1133.196347][T13339]  ? percpu_ref_put+0x180/0x180
[ 1133.201178][T13339]  ? get_mem_cgroup_from_objcg+0x19/0x150
[ 1133.206904][T13339]  ? get_mem_cgroup_from_objcg+0x19/0x150
[ 1133.212623][T13339]  ? get_mem_cgroup_from_objcg+0x19/0x150
[ 1133.218338][T13339]  ? get_mem_cgroup_from_objcg+0x13c/0x150
[ 1133.224143][T13339]  __memcg_kmem_charge_page+0x220/0x380
[ 1133.229675][T13339]  __alloc_pages+0x215/0x4e0
[ 1133.234323][T13339]  ? zone_statistics+0x170/0x170
[ 1133.239242][T13339]  ? __kmem_cache_alloc_node+0x140/0x260
[ 1133.244871][T13339]  ? rcu_is_watching+0x11/0xa0
[ 1133.249680][T13339]  ? kvmalloc_node+0x6c/0x180
[ 1133.254408][T13339]  ? alloc_pages+0x4d8/0x740
[ 1133.259068][T13339]  io_pages_map+0xd8/0x4d0
[ 1133.263519][T13339]  ? apparmor_capable+0x12c/0x190
[ 1133.268563][T13339]  io_allocate_scq_urings+0xeb/0x446
[ 1133.273848][T13339]  io_uring_create+0x56b/0xd5a
[ 1133.278602][T13339]  __x64_sys_io_uring_setup+0x1be/0x1d0
[ 1133.284175][T13339]  ? __ia32_sys_io_uring_enter+0xf0/0xf0
[ 1133.289802][T13339]  ? lockdep_hardirqs_on+0x94/0x140
[ 1133.294986][T13339]  do_syscall_64+0x4c/0xa0
[ 1133.299388][T13339]  ? clear_bhb_loop+0x60/0xb0
[ 1133.304093][T13339]  ? clear_bhb_loop+0x60/0xb0
[ 1133.308755][T13339]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1133.314630][T13339] RIP: 0033:0x7ff10978f749
[ 1133.319053][T13339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1133.338664][T13339] RSP: 002b:00007ff10a6d3fc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 1133.347092][T13339] RAX: ffffffffffffffda RBX: 00007ff1099e5fa0 RCX: 00007ff10978f749
[ 1133.355064][T13339] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000111
[ 1133.363037][T13339] RBP: 0000200000000340 R08: 0000000000000000 R09: 0000000000000000
[ 1133.371015][T13339] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[ 1133.378968][T13339] R13: 0000000000000000 R14: 0000000000000111 R15: 0000000000000000
[ 1133.386932][T13339]  </TASK>
[ 1133.391054][T13339] memory: usage 307196kB, limit 307200kB, failcnt 52
[ 1133.397775][T13339] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0
[ 1133.405744][T13339] kmem: usage 307140kB, limit 9007199254740988kB, failcnt 0
[ 1133.413056][T13339] Memory cgroup stats for /syz5:
[ 1133.413439][T13339] anon 0
[ 1133.413439][T13339] file 0
[ 1133.413439][T13339] kernel 314511360
[ 1133.413439][T13339] kernel_stack 65536
[ 1133.413439][T13339] pagetables 122880
[ 1133.413439][T13339] sec_pagetables 0
[ 1133.413439][T13339] percpu 11216
[ 1133.413439][T13339] sock 0
[ 1133.413439][T13339] vmalloc 4096
[ 1133.413439][T13339] shmem 0
[ 1133.413439][T13339] zswap 0
[ 1133.413439][T13339] zswapped 0
[ 1133.413439][T13339] file_mapped 0
[ 1133.413439][T13339] file_dirty 0
[ 1133.413439][T13339] file_writeback 0
[ 1133.413439][T13339] swapcached 233472
[ 1133.413439][T13339] anon_thp 0
[ 1133.413439][T13339] file_thp 0
[ 1133.413439][T13339] shmem_thp 0
[ 1133.413439][T13339] inactive_anon 0
[ 1133.413439][T13339] active_anon 0
[ 1133.413439][T13339] inactive_file 0
[ 1133.413439][T13339] active_file 0
[ 1133.413439][T13339] unevictable 0
[ 1133.413439][T13339] slab_reclaimable 15416
[ 1133.413439][T13339] slab_unreclaimable 1474888
[ 1133.413439][T13339] slab 1490304
[ 1133.507682][T13339] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2092,pid=13338,uid=0
[ 1133.523977][T13339] Memory cgroup out of memory: Killed process 13338 (syz.5.2092) total-vm:102024kB, anon-rss:1104kB, file-rss:21988kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[ 1134.048528][ T4341] usb 5-1: USB disconnect, device number 4
[ 1136.353751][T13376] 9pnet_virtio: no channels available for device syz
[ 1136.480433][T13376] netlink: 'syz.3.2097': attribute type 21 has an invalid length.
[ 1136.543462][T13376] cgroup: No subsys list or none specified
[ 1139.602990][T13396] trusted_key: encrypted_key: insufficient parameters specified
[ 1141.055285][T13394] syz.6.2104 invoked oom-killer: gfp_mask=0x442dc0(GFP_KERNEL_ACCOUNT|__GFP_NOWARN|__GFP_COMP|__GFP_ZERO), order=3, oom_score_adj=1000
[ 1141.069163][T13394] CPU: 1 PID: 13394 Comm: syz.6.2104 Not tainted syzkaller #0
[ 1141.076606][T13394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1141.086641][T13394] Call Trace:
[ 1141.089903][T13394]  <TASK>
[ 1141.092819][T13394]  dump_stack_lvl+0x168/0x22e
[ 1141.097482][T13394]  ? ___ratelimit+0x147/0x5f0
[ 1141.102168][T13394]  ? show_regs_print_info+0x12/0x12
[ 1141.107348][T13394]  ? load_image+0x3b0/0x3b0
[ 1141.111834][T13394]  ? ___ratelimit+0x44b/0x5f0
[ 1141.116496][T13394]  ? radix_tree_cpu_dead+0x160/0x160
[ 1141.121767][T13394]  dump_header+0xd7/0x820
[ 1141.126103][T13394]  oom_kill_process+0x361/0x550
[ 1141.130961][T13394]  out_of_memory+0xf45/0x12e0
[ 1141.135626][T13394]  ? mem_cgroup_out_of_memory+0x9c/0x340
[ 1141.141242][T13394]  ? unregister_oom_notifier+0x20/0x20
[ 1141.146708][T13394]  mem_cgroup_out_of_memory+0x273/0x340
[ 1141.152283][T13394]  ? mem_cgroup_oom_trylock+0x210/0x210
[ 1141.157852][T13394]  ? do_raw_spin_unlock+0x11d/0x230
[ 1141.163040][T13394]  try_charge_memcg+0xc99/0x17f0
[ 1141.167981][T13394]  ? page_ext_put+0x98/0xb0
[ 1141.172501][T13394]  ? percpu_ref_put+0x180/0x180
[ 1141.177351][T13394]  ? get_mem_cgroup_from_objcg+0x19/0x150
[ 1141.183064][T13394]  ? get_mem_cgroup_from_objcg+0x19/0x150
[ 1141.188768][T13394]  ? get_mem_cgroup_from_objcg+0x19/0x150
[ 1141.194470][T13394]  ? get_mem_cgroup_from_objcg+0x13c/0x150
[ 1141.200259][T13394]  __memcg_kmem_charge_page+0x220/0x380
[ 1141.205791][T13394]  __alloc_pages+0x215/0x4e0
[ 1141.210368][T13394]  ? zone_statistics+0x170/0x170
[ 1141.215286][T13394]  ? __kmem_cache_alloc_node+0x140/0x260
[ 1141.221190][T13394]  ? rcu_is_watching+0x11/0xa0
[ 1141.225949][T13394]  ? kvmalloc_node+0x6c/0x180
[ 1141.230638][T13394]  ? alloc_pages+0x4d8/0x740
[ 1141.235231][T13394]  io_pages_map+0xd8/0x4d0
[ 1141.239638][T13394]  ? apparmor_capable+0x12c/0x190
[ 1141.244654][T13394]  io_allocate_scq_urings+0xeb/0x446
[ 1141.249934][T13394]  io_uring_create+0x56b/0xd5a
[ 1141.254701][T13394]  __x64_sys_io_uring_setup+0x1be/0x1d0
[ 1141.260232][T13394]  ? __ia32_sys_io_uring_enter+0xf0/0xf0
[ 1141.265858][T13394]  ? lockdep_hardirqs_on+0x94/0x140
[ 1141.271040][T13394]  do_syscall_64+0x4c/0xa0
[ 1141.275439][T13394]  ? clear_bhb_loop+0x60/0xb0
[ 1141.280096][T13394]  ? clear_bhb_loop+0x60/0xb0
[ 1141.284754][T13394]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1141.290628][T13394] RIP: 0033:0x7f5eaab8f749
[ 1141.295028][T13394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1141.314621][T13394] RSP: 002b:00007f5eab980fc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 1141.323019][T13394] RAX: ffffffffffffffda RBX: 00007f5eaade5fa0 RCX: 00007f5eaab8f749
[ 1141.331084][T13394] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000111
[ 1141.339138][T13394] RBP: 0000200000000340 R08: 0000000000000000 R09: 0000000000000000
[ 1141.347097][T13394] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[ 1141.355051][T13394] R13: 0000000000000000 R14: 0000000000000111 R15: 0000000000000000
[ 1141.363013][T13394]  </TASK>
[ 1141.366021][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1141.373016][T13394] memory: usage 307172kB, limit 307200kB, failcnt 34
[ 1141.379701][T13394] memory+swap: usage 307364kB, limit 9007199254740988kB, failcnt 0
[ 1141.387618][T13394] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0
[ 1141.394918][T13394] Memory cgroup stats for /syz6:
[ 1141.395040][T13394] anon 0
[ 1141.395040][T13394] file 0
[ 1141.395040][T13394] kernel 314544128
[ 1141.395040][T13394] kernel_stack 65536
[ 1141.395040][T13394] pagetables 118784
[ 1141.395040][T13394] sec_pagetables 0
[ 1141.395040][T13394] percpu 11360
[ 1141.395040][T13394] sock 0
[ 1141.395040][T13394] vmalloc 8192
[ 1141.395040][T13394] shmem 0
[ 1141.395040][T13394] zswap 0
[ 1141.395040][T13394] zswapped 0
[ 1141.395040][T13394] file_mapped 0
[ 1141.395040][T13394] file_dirty 0
[ 1141.395040][T13394] file_writeback 0
[ 1141.395040][T13394] swapcached 11882496
[ 1141.395040][T13394] anon_thp 0
[ 1141.395040][T13394] file_thp 0
[ 1141.395040][T13394] shmem_thp 0
[ 1141.395040][T13394] inactive_anon 0
[ 1141.395040][T13394] active_anon 0
[ 1141.395040][T13394] inactive_file 0
[ 1141.395040][T13394] active_file 0
[ 1141.395040][T13394] unevictable 0
[ 1141.395040][T13394] slab_reclaimable 15488
[ 1141.395040][T13394] slab_unreclaimable 1474600
[ 1141.395040][T13394] slab 1490088
[ 1141.489358][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1141.495764][T13394] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0-1,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.2104,pid=13393,uid=0
[ 1141.511069][T13394] Memory cgroup out of memory: Killed process 13393 (syz.6.2104) total-vm:102024kB, anon-rss:1116kB, file-rss:21988kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[ 1145.493088][T13464] 9pnet_virtio: no channels available for device syz
[ 1145.627714][T13465] netlink: 'syz.5.2113': attribute type 21 has an invalid length.
[ 1145.863004][T13464] cgroup: No subsys list or none specified
[ 1146.040612][T13467] ubi: mtd0 is already attached to ubi31
[ 1146.114783][T13471] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[ 1146.121346][T13471] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1146.129542][T13471] vhci_hcd vhci_hcd.0: Device attached
[ 1146.131148][T13475] trusted_key: encrypted_key: keylen parameter is missing
[ 1146.248110][T13476] syz.3.2115 (13476): drop_caches: 2
[ 1146.280395][T13476] syz.3.2115 (13476): drop_caches: 2
[ 1146.293426][T13472] vhci_hcd: cannot find the pending unlink 4294967287
[ 1146.301269][T13479] binder: 13468:13479 ioctl 40046629 200000000200 returned -22
[ 1146.461747][ T4308] usb 40-1: SetAddress Request (51) to port 0
[ 1146.468192][ T4308] usb 40-1: new SuperSpeed USB device number 51 using vhci_hcd
[ 1147.020200][T13472] vhci_hcd: connection closed
[ 1147.033642][T13404] vhci_hcd: stop threads
[ 1147.202700][T13404] vhci_hcd: release socket
[ 1147.322523][T13404] vhci_hcd: disconnect device
[ 1147.975614][T13490] trusted_key: encrypted_key: insufficient parameters specified
[ 1150.574441][T13519] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[ 1150.580976][T13519] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1150.733019][T13519] vhci_hcd vhci_hcd.0: Device attached
[ 1151.512433][ T6120] usb 42-1: SetAddress Request (54) to port 0
[ 1151.541734][ T6120] usb 42-1: new SuperSpeed USB device number 54 using vhci_hcd
[ 1151.908860][T13519] syz.4.2131 (13519): drop_caches: 2
[ 1151.915735][T13519] syz.4.2131 (13519): drop_caches: 2
[ 1151.934460][T13520] vhci_hcd: cannot find the pending unlink 4294967287
[ 1151.941436][T13519] binder: 13517:13519 ioctl 40046629 200000000200 returned -22
[ 1152.024876][T13520] vhci_hcd: connection reset by peer
[ 1152.030470][T12959] vhci_hcd: stop threads
[ 1152.037576][T12959] vhci_hcd: release socket
[ 1152.621828][ T4308] usb 40-1: device descriptor read/8, error -110
[ 1153.669320][T12959] vhci_hcd: disconnect device
[ 1154.013640][ T4308] usb usb40-port1: attempt power cycle
[ 1155.262560][ T4308] usb usb40-port1: unable to enumerate USB device
[ 1155.400250][T13559] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[ 1155.406797][T13559] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1155.419183][T13559] vhci_hcd vhci_hcd.0: Device attached
[ 1155.421043][T13563] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.2140'.
[ 1155.565552][T13559] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2140'.
[ 1155.721790][ T4341] usb 34-1: SetAddress Request (59) to port 0
[ 1155.735205][T13559] syz.0.2140 (13559): drop_caches: 2
[ 1155.742943][T13559] syz.0.2140 (13559): drop_caches: 2
[ 1155.758526][T13560] vhci_hcd: cannot find the pending unlink 4294967287
[ 1155.766186][T13559] binder: 13558:13559 ioctl 40046629 200000000200 returned -22
[ 1156.463490][T13560] vhci_hcd: connection closed
[ 1156.466723][ T4341] usb 34-1: new SuperSpeed USB device number 59 using vhci_hcd
[ 1156.468499][T13402] vhci_hcd: stop threads
[ 1156.791757][ T6120] usb 42-1: device descriptor read/8, error -110
[ 1156.862165][T13402] vhci_hcd: release socket
[ 1156.864036][T13570] 9pnet_virtio: no channels available for device syz
[ 1156.866765][T13402] vhci_hcd: disconnect device
[ 1157.214924][ T6120] usb usb42-port1: attempt power cycle
[ 1158.007963][T13585] ubi: mtd0 is already attached to ubi31
[ 1158.052718][ T6120] usb usb42-port1: unable to enumerate USB device
[ 1158.256437][T13587] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3)
[ 1158.263092][T13587] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1158.309045][T13587] vhci_hcd vhci_hcd.0: Device attached
[ 1158.372655][T13587] netlink: 6040 bytes leftover after parsing attributes in process `syz.5.2148'.
[ 1158.456802][T13587] syz.5.2148 (13587): drop_caches: 2
[ 1158.508124][T13588] vhci_hcd: cannot find the pending unlink 4294967287
[ 1158.516211][T13592] binder: 13586:13592 ioctl 40046629 200000000200 returned -22
[ 1158.734971][T13587] syz.5.2148 (13587): drop_caches: 2
[ 1159.606550][ T6030] usb 44-1: SetAddress Request (30) to port 0
[ 1159.691713][T13588] vhci_hcd: connection closed
[ 1159.691914][T13346] vhci_hcd: stop threads
[ 1159.711038][T13346] vhci_hcd: release socket
[ 1159.721103][ T6030] usb 44-1: new SuperSpeed USB device number 30 using vhci_hcd
[ 1159.751785][T13346] vhci_hcd: disconnect device
[ 1159.801895][ T6030] usb 44-1: enqueue for inactive port 0
[ 1160.688102][ T6030] usb usb44-port1: attempt power cycle
[ 1161.581884][ T4341] usb 34-1: device descriptor read/8, error -110
[ 1163.096187][ T4341] usb usb34-port1: attempt power cycle
[ 1163.314554][ T6030] usb usb44-port1: unable to enumerate USB device
[ 1163.447664][T13616] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[ 1163.454222][T13616] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1163.466625][T13616] vhci_hcd vhci_hcd.0: Device attached
[ 1163.508433][T13616] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.2154'.
[ 1163.742647][ T4341] usb usb34-port1: unable to enumerate USB device
[ 1163.770493][T13620] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2154'.
[ 1163.830367][ T6120] usb 40-1: SetAddress Request (55) to port 0
[ 1163.903528][T13620] syz.3.2154 (13620): drop_caches: 2
[ 1163.910966][T13620] syz.3.2154 (13620): drop_caches: 2
[ 1163.916448][ T6120] usb 40-1: new SuperSpeed USB device number 55 using vhci_hcd
[ 1163.961954][T13617] vhci_hcd: cannot find the pending unlink 4294967287
[ 1164.002400][T13620] binder: 13612:13620 ioctl 40046629 200000000200 returned -22
[ 1164.066165][T13617] vhci_hcd: connection closed
[ 1164.071806][T13618] vhci_hcd: sendmsg failed!, ret=-32 for 48
[ 1164.106732][T13402] vhci_hcd: stop threads
[ 1164.111031][T13402] vhci_hcd: release socket
[ 1164.157194][T13402] vhci_hcd: disconnect device
[ 1165.791698][ T4341] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 1166.836846][T13646] 9pnet_virtio: no channels available for device syz
[ 1167.211772][ T4341] usb 7-1: Using ep0 maxpacket: 8
[ 1167.226508][ T4341] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1167.251836][ T4341] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
Stopping sshd: [ 1167.316112][ T4341] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1167.389644][ T4341] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1167.527448][ T4341] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1167.552088][ T4341] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
stopped /usr/sbin/sshd (pid 4023)
OK
[ 1168.490060][ T4341] usb 7-1: usb_control_msg returned -71
[ 1168.496247][ T4341] usbtmc 7-1:16.0: can't read capabilities
[ 1168.529974][ T4341] usb 7-1: USB disconnect, device number 2
[ 1169.224194][ T6120] usb 40-1: device descriptor read/8, error -110
Stopping crond: [ 1169.663010][ T6120] usb usb40-port1: attempt power cycle
stopped /usr/sbin/crond (pid 4009)
OK
[ 1171.570002][ T6120] usb usb40-port1: unable to enumerate USB device
[ 1175.498340][T13688] overlayfs: failed to resolve './file0': -2
[ 1175.525270][T13688] device bridge3 entered promiscuous mode
[ 1175.727675][T13695] lo speed is unknown, defaulting to 1000
[ 1177.103129][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.109532][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
Stopping dhcpcd...
[ 1178.031710][ T6120] usb 6-1: new high-speed USB device number 3 using dummy_hcd
no /sbin/dhcpcd found; none killed
[ 1179.641846][ T6120] usb 6-1: Using ep0 maxpacket: 8
[ 1179.648384][ T6120] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1179.691700][ T6120] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1179.702601][ T6120] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1179.719021][ T6120] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1179.732592][ T6120] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1179.781717][ T6120] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1179.917241][T13729] ubi: mtd0 is already attached to ubi31
[ 1180.027802][ T6120] usb 6-1: usb_control_msg returned -71
[ 1180.034627][ T6120] usbtmc 6-1:16.0: can't read capabilities
[ 1180.190080][ T6120] usb 6-1: USB disconnect, device number 3
Stopping network: serialport: VM disconnected.