last executing test programs:

18m31.926188281s ago: executing program 2 (id=386):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000c80)=[{{&(0x7f0000000980)={0xa, 0x4e21, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000022c0)='t', 0x1}], 0x1}}], 0x1, 0x40800)
sendmsg(r0, &(0x7f0000001000)={&(0x7f0000001040)=@l2tp6={0xa, 0x0, 0x9, @private1, 0x0, 0x4}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000ec0)="c130", 0x2}], 0x1}, 0x0)
shutdown(r0, 0x1)
getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000002300)=""/4113, &(0x7f00000000c0)=0x1011)

18m31.830614569s ago: executing program 2 (id=388):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000340)={0x1, 0x9})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_script(r2, &(0x7f00000002c0)={'#! ', './file0'}, 0xb)
r3 = fsopen(&(0x7f0000000040)='fuse\x00', 0x0)
r4 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f0000000040)='\x04]{!\x00', 0x5)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='user_id', 0x0, 0xffffffffffffff9c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008031, 0xffffffffffffffff, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x0, 0x0, 0x0, 0x8, 0x2}]}}, 0x0, 0x26, 0x0, 0x1, 0x4}, 0x28)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(r2)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r5)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r5, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x815)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003f3fdc20221802324a130102030109021b0001000010000904cdf100d3"], 0x0)

18m28.702123585s ago: executing program 2 (id=405):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x94, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x63, 0xe, {{{}, {}, @device_a, @device_a, @from_mac}, 0x8, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @val={0x4, 0x6, {0xb3, 0x2, 0x1d, 0x1ff}}, @void, @val={0x5, 0x3, {0x7, 0xc7, 0x6}}, @void, @void, @void, @val={0x2d, 0x1a, {0x2ff, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4010}, 0x20000014)

18m28.698626911s ago: executing program 2 (id=406):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0)
chroot(&(0x7f00000000c0)='./file0/../file0/../file0\x00')
pivot_root(&(0x7f0000000000)='./file0/../file0/../file0\x00', &(0x7f0000000140)='./file0/../file0/../file0\x00')

18m28.607897837s ago: executing program 2 (id=407):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x2c, 0x10, 0x40d, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, 0x0, 0x12502}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8084}, 0xc000)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x40)

18m28.110387469s ago: executing program 2 (id=409):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000700)={0x2, 0x4e24, @empty}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000800)={0x2, 0x4e24, @loopback}, 0x10)
close(0x3)

18m27.971914871s ago: executing program 32 (id=409):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000700)={0x2, 0x4e24, @empty}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000800)={0x2, 0x4e24, @loopback}, 0x10)
close(0x3)

6.683975185s ago: executing program 4 (id=6225):
r0 = socket(0x10, 0x3, 0xc)
write(r0, 0x0, 0x0)

6.663866452s ago: executing program 4 (id=6226):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292b00cc7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f00000004c0)=[{0x0, 0x0, 0x0}], 0x1, 0x40800)
recvmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}], 0x1}, 0x10150)

6.584344171s ago: executing program 4 (id=6228):
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0)
write(r0, &(0x7f00000001c0)='off', 0x3)
write(r0, &(0x7f0000000180)='on', 0x2)

6.53398883s ago: executing program 4 (id=6229):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x64, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xb, 0x8}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0xd, 0x6, 0x2, 0xfffd, 0x7, 0x9, 0x200, 0x8, [{0x80, 0x575e, 0x0, 0x9}, {0x1, 0xf, 0x80, 0xd5bd}]}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x20a201, 0x0)
close(r6)
socket$tipc(0x1e, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x4)
sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x36}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000640)="442ea407603a16ff", 0x8}], 0x2}, 0x20000085)

6.214442819s ago: executing program 1 (id=6234):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
ioctl$TCXONC(r0, 0x540a, 0x2)

4.949109052s ago: executing program 1 (id=6235):
fcntl$addseals(0xffffffffffffffff, 0x409, 0xc)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
syz_emit_ethernet(0x5a, &(0x7f0000000000)={@random='e\t[Uqo', @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x4c, 0x65, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0xf7, 0x4020, {0xc, 0x4, 0x3, 0x14, 0x7ff, 0x65, 0x1ce2, 0xd9, 0x1, 0x6, @rand_addr=0x64010102, @loopback, {[@timestamp_addr={0x44, 0x1c, 0x89, 0x1, 0x0, [{@private=0xa010102, 0xf7fffffd}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x329}, {@multicast2, 0x4}]}]}}}}}}}, 0x0)
sendmmsg$inet(r0, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000003c0)="0f2f", 0xffa6}], 0x1}}, {{0x0, 0x0, &(0x7f0000005c40)=[{&(0x7f00000000c0)='_', 0xfe3c}], 0x1}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000100)="19", 0x1}], 0x1}}, {{0x0, 0xfffffffffffffe7c, &(0x7f00000025c0), 0x1}}], 0x4, 0x608d850)

4.891545878s ago: executing program 1 (id=6236):
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000140)={'pimreg0\x00', 0x78})
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
setns(0xc9, 0x0)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x27b, 0x4)
connect$inet6(r0, 0x0, 0x0)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYRES16], 0x58)
close(0xffffffffffffffff)
r1 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000500)="960910", 0x3}], 0x1}, 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xffffffffffffffff)
ioctl$MEMREADOOB64(0xffffffffffffffff, 0xc0184d16, 0x0)
r2 = socket$inet6(0xa, 0x80802, 0x0)
sendmmsg$inet6(r2, 0x0, 0x0, 0x401c040)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000027c0), 0x0, 0x20048011}, 0x800)
r3 = fsopen(&(0x7f0000000280)='hugetlbfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x82)
fchdir(r4)
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x0, [0x7, 0xc, 0x9]}, &(0x7f00000000c0)=0x44)

4.822570719s ago: executing program 1 (id=6238):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40002)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x81, 0x21004040, 0x10, 0xd658, 0xffffffff, 0x1850c00, 0x0, 0x0, 0x40, 0x2}}, 0x50)

4.693285925s ago: executing program 1 (id=6239):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
ioctl$FICLONE(r1, 0x40049409, 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x8994, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, 0x0, &(0x7f00000002c0)='GPL\x00'}, 0x94)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0)

4.632409006s ago: executing program 3 (id=6241):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r3, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r3, 0x0, &(0x7f0000343000/0x3000)=nil, 0x3000, 0x8})
ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, &(0x7f00000001c0)={0x28, 0x3, r3, r3, 0x20, 0xfffbfffffffffffa, 0x3ffe})
write(r1, &(0x7f00000001c0), 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x50, 0x11, 0x0, 0x0)
munmap(&(0x7f0000011000/0x3000)=nil, 0x3000)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0)
clock_adjtime(0x0, &(0x7f0000004dc0)={0xb, 0x400000000045, 0xffffffff80000000, 0x2, 0x80000002, 0x3, 0x6, 0x5, 0x1000000000002, 0x8000000000000000, 0x38000000000000, 0x6, 0x7ff, 0x8c, 0xd01, 0x0, 0x4, 0x6b, 0x774, 0xfffffffffffffeff, 0x2, 0x9, 0x1, 0x9014, 0x11, 0x2})
ioctl$KVM_RUN(r6, 0xae80, 0x0)

4.103007532s ago: executing program 3 (id=6242):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = userfaultfd(0x1)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000364000/0x1000)=nil, 0x400000, 0x2, 0x2})
syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)

2.855026831s ago: executing program 3 (id=6243):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff00"/131], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000)
close_range(r0, 0xffffffffffffffff, 0x0)

1.962178779s ago: executing program 3 (id=6244):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
clock_gettime(0x0, &(0x7f0000000400)={<r3=>0x0, <r4=>0x0})
nanosleep(&(0x7f0000000340)={r3, r4+60000000}, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000200)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @val={0x10, 0x1, 0x21}}, 0x21)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="10000000080211000001080211000000080211000000200001000000d35d01"], 0x20)
syz_open_procfs$userns(0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})

1.121913058s ago: executing program 0 (id=6246):
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000002280)="ed", 0x1}], 0x1}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)

1.060602371s ago: executing program 0 (id=6247):
r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, &(0x7f0000000280)='L', 0x1)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_disconnect(r0)
read$char_usb(r1, 0x0, 0x0)

248.679376ms ago: executing program 0 (id=6248):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, r2, 0x321, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4048010)
ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, 0x0)
ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100))

171.3381ms ago: executing program 0 (id=6249):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0x7, '.\x00'}})

171.131105ms ago: executing program 0 (id=6250):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292b00cc7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa69358400000000884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f", 0xb4}], 0x3}], 0x1, 0x40800)
recvmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150)

90.820349ms ago: executing program 1 (id=6251):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040))

90.375112ms ago: executing program 0 (id=6252):
landlock_create_ruleset(&(0x7f00000002c0)={0x7f2e, 0x0, 0x3}, 0x18, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfda6", 0x38}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e357", 0x61}, {&(0x7f0000000440)}], 0x4, 0x0, 0x0, 0xc40}], 0x1, 0x24000040)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

89.965319ms ago: executing program 3 (id=6253):
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000140)={'pimreg0\x00', 0x78})
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
setns(0xc9, 0x0)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x27b, 0x4)
connect$inet6(r0, 0x0, 0x0)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYRES16, @ANYRES32=r0], 0x58)
close(0xffffffffffffffff)
r1 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r1, 0x0, 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xffffffffffffffff)
ioctl$MEMREADOOB64(0xffffffffffffffff, 0xc0184d16, 0x0)
r2 = socket$inet6(0xa, 0x80802, 0x0)
sendmmsg$inet6(r2, 0x0, 0x0, 0x401c040)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000027c0), 0x0, 0x20048011}, 0x800)
r3 = fsopen(&(0x7f0000000280)='hugetlbfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x82)
fchdir(r4)
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x0, [0x7, 0xc, 0x9]}, &(0x7f00000000c0)=0x44)

89.349747ms ago: executing program 4 (id=6254):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/36, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x18, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xa8}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

74.802125ms ago: executing program 3 (id=6255):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x8000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0)
write(r0, &(0x7f00000001c0)='off', 0x3)
write(r0, &(0x7f0000000180)='on', 0x2)

0s ago: executing program 4 (id=6256):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$sndctrl(0x0, 0x0, 0x40080)
socket$inet_mptcp(0x2, 0x1, 0x106)
fsopen(&(0x7f00000003c0)='gfs2\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, 0x0)
fanotify_init(0x0, 0x80000)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, 0x36, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x6, 0x1, 0x0, 0x1, [@generic="7d88"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)

kernel console output (not intermixed with test programs):

1146.461466][T22822] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4802'.
[ 1146.617281][T22857] syzkaller0: entered promiscuous mode
[ 1146.619417][T22857] syzkaller0: entered allmulticast mode
[ 1146.667366][T22861] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4820'.
[ 1146.882664][T19309] usb 6-1: new high-speed USB device number 84 using dummy_hcd
[ 1146.901758][T22895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1146.918187][T22895] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1146.928600][T22895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1146.932106][T22895] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1146.954624][T22902] fuse: Bad value for 'fd'
[ 1146.993278][T22905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1146.997677][T22905] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1147.004391][T22905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1147.010386][T22905] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1147.046025][T19309] usb 6-1: config 0 has an invalid interface number: 50 but max is 0
[ 1147.048867][T19309] usb 6-1: config 0 has no interface number 0
[ 1147.050847][T19309] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1147.056453][T19309] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 1147.059340][T19309] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1147.063774][T19309] usb 6-1: Product: syz
[ 1147.065179][T19309] usb 6-1: Manufacturer: syz
[ 1147.072729][T19309] usb 6-1: SerialNumber: syz
[ 1147.076311][T19309] usb 6-1: config 0 descriptor??
[ 1147.090599][T19309] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0
[ 1147.345320][T22929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1147.348397][T22929] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1147.556755][ T5085] usb 6-1: USB disconnect, device number 84
[ 1147.968706][T22945] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4855'.
[ 1148.038941][T22951] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4858'.
[ 1148.141220][T22954] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4859'.
[ 1148.175978][T22965] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4865'.
[ 1148.265207][T22976] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4869'.
[ 1148.302141][T22981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1148.305759][T22981] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1148.432671][ T5824] usb 9-1: new high-speed USB device number 73 using dummy_hcd
[ 1148.511654][T22981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1148.514758][T22981] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1148.582929][ T5824] usb 9-1: Using ep0 maxpacket: 8
[ 1148.586570][ T5824] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1148.590068][ T5824] usb 9-1: config 1 has an invalid interface number: 211 but max is 0
[ 1148.593453][ T5824] usb 9-1: config 1 has no interface number 0
[ 1148.595457][ T5824] usb 9-1: too many endpoints for config 1 interface 211 altsetting 3: 250, using maximum allowed: 30
[ 1148.598917][ T5824] usb 9-1: config 1 interface 211 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 250
[ 1148.603150][ T5824] usb 9-1: config 1 interface 211 has no altsetting 0
[ 1148.606927][ T5824] usb 9-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=5a.54
[ 1148.610131][ T5824] usb 9-1: New USB device strings: Mfr=7, Product=0, SerialNumber=3
[ 1148.613403][ T5824] usb 9-1: Manufacturer: syz
[ 1148.614906][ T5824] usb 9-1: SerialNumber: syz
[ 1149.030185][ T5824] usb 9-1: USB disconnect, device number 73
[ 1149.122477][T22981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1149.126631][T22981] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1149.348344][ T5085] yurex 6-1:0.50: USB YUREX #0 now disconnected
[ 1149.825137][T23012] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4886'.
[ 1150.450652][T23029] bond4: entered allmulticast mode
[ 1150.461876][T23029] macvlan2: entered promiscuous mode
[ 1150.464058][T23029] macvlan2: entered allmulticast mode
[ 1150.468329][T23029] bond4: (slave macvlan2): Opening slave failed
[ 1150.898860][T23061] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4908'.
[ 1150.993278][T19309] usb 9-1: new high-speed USB device number 74 using dummy_hcd
[ 1151.144413][T19309] usb 9-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[ 1151.147705][T19309] usb 9-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6
[ 1151.154623][T19309] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1151.157743][T19309] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1151.160726][T19309] usb 9-1: Product: syz
[ 1151.162111][T19309] usb 9-1: Manufacturer: syz
[ 1151.163986][T19309] usb 9-1: SerialNumber: syz
[ 1151.179856][ T5879] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1151.293073][ T5824] usb 6-1: new full-speed USB device number 85 using dummy_hcd
[ 1151.392863][T23044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1151.396769][T23044] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1151.445620][ T5824] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1151.448623][ T5824] usb 6-1: not running at top speed; connect to a high speed hub
[ 1151.452503][ T5824] usb 6-1: config 8 has an invalid interface number: 173 but max is 0
[ 1151.455473][ T5824] usb 6-1: config 8 has no interface number 0
[ 1151.458042][ T5824] usb 6-1: config 8 interface 173 has no altsetting 0
[ 1151.463289][ T5824] usb 6-1: New USB device found, idVendor=12d1, idProduct=ebed, bcdDevice=36.f5
[ 1151.467283][ T5824] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1151.469927][ T5824] usb 6-1: Product: syz
[ 1151.471340][ T5824] usb 6-1: Manufacturer: syz
[ 1151.472991][ T5824] usb 6-1: SerialNumber: syz
[ 1151.613712][ T7521] usb 9-1: USB disconnect, device number 74
[ 1151.774753][T23074] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4914'.
[ 1151.892500][T23070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1151.896243][T23070] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1151.901360][T23070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1151.906405][T23070] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1152.115293][T23070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1152.121439][T23070] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1152.126223][T23070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1152.132410][T23070] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1152.140277][ T5824] option 6-1:8.173: GSM modem (1-port) converter detected
[ 1152.146408][ T5824] usb 6-1: USB disconnect, device number 85
[ 1152.150152][ T5824] option 6-1:8.173: device disconnected
[ 1152.222831][ T5879] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive
[ 1152.228943][ T5879] ath9k_htc: Failed to initialize the device
[ 1152.236626][ T7521] usb 9-1: ath9k_htc: USB layer deinitialized
[ 1152.284037][T23092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1152.287585][T23092] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1152.532966][ T7521] usb 9-1: new high-speed USB device number 75 using dummy_hcd
[ 1152.553363][T23094] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4923'.
[ 1152.682926][ T7521] usb 9-1: Using ep0 maxpacket: 32
[ 1152.689809][ T7521] usb 9-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[ 1152.695603][ T7521] usb 9-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6
[ 1152.710071][ T7521] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 1.08
[ 1152.713061][ T7521] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1152.715539][ T7521] usb 9-1: Product: syz
[ 1152.716847][ T7521] usb 9-1: Manufacturer: syz
[ 1152.719450][ T7521] usb 9-1: SerialNumber: syz
[ 1152.729295][ T7521] ldusb 9-1:1.0: LD USB Device #0 now attached to major 180 minor 0
[ 1152.844405][T23116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1152.848015][T23116] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1152.854967][T23116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1152.858139][T23116] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1152.930857][ T5085] usb 9-1: USB disconnect, device number 75
[ 1152.930955][    C2] ldusb 9-1:1.0: usb_submit_urb failed (-19)
[ 1152.942356][ T5085] ldusb 9-1:1.0: LD USB Device #0 now disconnected
[ 1153.052732][ T7521] usb 6-1: new full-speed USB device number 86 using dummy_hcd
[ 1153.214523][ T7521] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1153.218271][ T7521] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1153.221765][ T7521] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[ 1153.227193][ T7521] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[ 1153.230168][ T7521] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1153.233275][ T7521] usb 6-1: Product: syz
[ 1153.234574][ T7521] usb 6-1: Manufacturer: syz
[ 1153.236045][ T7521] usb 6-1: SerialNumber: syz
[ 1153.239306][ T7521] usb 6-1: config 0 descriptor??
[ 1153.243537][T23114] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1153.303053][ T7521] rc_core: IR keymap rc-streamzap not found
[ 1153.305604][ T7521] Registered IR keymap rc-empty
[ 1153.309107][ T7521] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0
[ 1153.315927][ T7521] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input134
[ 1153.422871][ T5824] usb 9-1: new high-speed USB device number 76 using dummy_hcd
[ 1153.453591][T23114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1153.456471][T23114] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1153.462464][T23114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1153.468843][T23114] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1153.477555][T23114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1153.481283][T23114] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1153.488962][T23114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1153.492000][T23114] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1153.496936][T23114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1153.499874][T23114] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1153.573288][ T5824] usb 9-1: Using ep0 maxpacket: 8
[ 1153.583760][ T5824] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1153.587131][ T5824] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[ 1153.591179][ T5824] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1153.595539][ T5824] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1153.605525][ T5824] usb 9-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[ 1153.608791][ T5824] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1153.611369][ T5824] usb 9-1: Product: syz
[ 1153.615020][ T5824] usb 9-1: Manufacturer: syz
[ 1153.616523][ T5824] usb 9-1: SerialNumber: syz
[ 1153.620004][ T5824] usb 9-1: config 0 descriptor??
[ 1153.629086][ T5824] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input135
[ 1153.835240][T23044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1153.839590][T23044] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1153.848078][    C0] kbtab 9-1:0.0: kbtab_irq - usb_submit_urb failed with result -1
[ 1153.852331][ T5823] usb 9-1: USB disconnect, device number 76
[ 1153.908256][ T7521] usb 6-1: USB disconnect, device number 86
[ 1154.598413][T23142] bond2: entered allmulticast mode
[ 1154.722830][ T5880] usb 9-1: new high-speed USB device number 77 using dummy_hcd
[ 1154.884556][ T5880] usb 9-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[ 1154.887736][ T5880] usb 9-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6
[ 1154.893478][ T5880] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1154.896161][ T5880] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1154.898593][ T5880] usb 9-1: Product: syz
[ 1154.899850][ T5880] usb 9-1: Manufacturer: syz
[ 1154.901237][ T5880] usb 9-1: SerialNumber: syz
[ 1154.918416][T18416] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1155.340537][ T5880] usb 9-1: USB disconnect, device number 77
[ 1155.564474][T23158] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1155.610053][T23160] netlink: 6208 bytes leftover after parsing attributes in process `syz.1.4953'.
[ 1155.697460][T23166] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4956'.
[ 1155.738025][T23168] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4957'.
[ 1155.891061][T23176] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4961'.
[ 1155.940115][T23181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1155.946596][T23181] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1155.982905][T18416] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive
[ 1155.985626][T18416] ath9k_htc: Failed to initialize the device
[ 1155.990932][ T5880] usb 9-1: ath9k_htc: USB layer deinitialized
[ 1156.312777][ T5880] usb 9-1: new high-speed USB device number 78 using dummy_hcd
[ 1156.463895][ T5880] usb 9-1: Using ep0 maxpacket: 32
[ 1156.468641][ T5880] usb 9-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[ 1156.475349][ T5880] usb 9-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6
[ 1156.484226][ T5880] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 1.08
[ 1156.492670][ T5880] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1156.495443][ T5880] usb 9-1: Product: syz
[ 1156.496906][ T5880] usb 9-1: Manufacturer: syz
[ 1156.498691][ T5880] usb 9-1: SerialNumber: syz
[ 1156.510495][T23183] netlink: 6208 bytes leftover after parsing attributes in process `syz.0.4963'.
[ 1156.510882][ T5880] ldusb 9-1:1.0: LD USB Device #0 now attached to major 180 minor 0
[ 1156.555177][T23187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1156.558182][T23187] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1156.675488][T23194] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4968'.
[ 1156.765391][T23187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1156.769556][T23187] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1156.770969][    C3] ldusb 9-1:1.0: usb_submit_urb failed (-19)
[ 1156.770997][ T5880] usb 9-1: USB disconnect, device number 78
[ 1156.777697][ T5880] ldusb 9-1:1.0: LD USB Device #0 now disconnected
[ 1156.846042][T23199] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4970'.
[ 1157.112807][T18416] usb 6-1: new high-speed USB device number 87 using dummy_hcd
[ 1157.275047][T18416] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1157.279571][T18416] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1157.283660][T18416] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1157.287148][T18416] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1157.289981][T18416] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1157.294532][T18416] usb 6-1: config 0 descriptor??
[ 1157.324522][T23203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1157.327541][T23203] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1157.335672][T23203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1157.338607][T23203] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1157.344659][T23203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1157.347591][T23203] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1157.355044][T23203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1157.357952][T23203] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1157.363172][T23203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1157.365915][T23203] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1157.371032][T23203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1157.374348][T23203] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1157.676403][T23211] netlink: 6208 bytes leftover after parsing attributes in process `syz.3.4976'.
[ 1157.738734][T18416] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[ 1157.824645][T23218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4979'.
[ 1157.920808][T23201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1157.928896][T23201] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1157.937928][T23201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1157.945134][T23201] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1157.952903][T23224] syzkaller0: entered promiscuous mode
[ 1157.954900][T23224] syzkaller0: entered allmulticast mode
[ 1157.963518][T23224] tipc: Started in network mode
[ 1157.969434][T23224] tipc: Node identity b295c314ef16, cluster identity 4711
[ 1157.973093][T23224] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1157.978490][T23224] tipc: Resetting bearer <eth:syzkaller0>
[ 1157.984356][T23223] tipc: Resetting bearer <eth:syzkaller0>
[ 1158.015327][T23223] tipc: Disabling bearer <eth:syzkaller0>
[ 1158.154748][T23201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1158.158758][T23201] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1158.206605][T23239] fuse: fd is not a fuse device
[ 1158.367103][T23201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1158.375717][T23201] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1158.480935][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead
[ 1158.489607][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead
[ 1158.499890][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x9cff instead
[ 1158.506994][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x55c2 instead
[ 1158.521168][T23256] jffs2: Empty flash at 0x00000040 ends at 0x00000e3c
[ 1158.523400][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000e3c: 0xffff instead
[ 1158.526602][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000e40: 0x4942 instead
[ 1158.529925][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000e44: 0x0001 instead
[ 1158.534325][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000e48: 0xefff instead
[ 1158.553293][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000e7c: 0xbdb3 instead
[ 1158.557463][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000f28: 0xc316 instead
[ 1158.561504][T23256] jffs2: Further such events for this erase block will not be printed
[ 1158.564827][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead
[ 1158.572670][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead
[ 1158.576003][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x9cff instead
[ 1158.579416][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x55c2 instead
[ 1158.582726][T23256] jffs2: Empty flash at 0x00001040 ends at 0x00001e3c
[ 1158.584308][T23201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1158.584821][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001e3c: 0xffff instead
[ 1158.584847][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001e40: 0x4942 instead
[ 1158.584864][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001e44: 0x0001 instead
[ 1158.589577][T23201] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1158.592051][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001e48: 0xefff instead
[ 1158.595597][T23263] fuse: fd is not a fuse device
[ 1158.599108][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001e7c: 0xf9ef instead
[ 1158.609924][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001f28: 0xc316 instead
[ 1158.613845][T23256] jffs2: Further such events for this erase block will not be printed
[ 1158.616647][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead
[ 1158.619958][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead
[ 1158.623888][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x9cff instead
[ 1158.629574][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x55c2 instead
[ 1158.633606][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead
[ 1158.636995][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead
[ 1158.640226][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x9cff instead
[ 1158.643804][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x55c2 instead
[ 1158.647246][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead
[ 1158.650607][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead
[ 1158.653974][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x9cff instead
[ 1158.657224][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x55c2 instead
[ 1158.660758][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead
[ 1158.667565][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead
[ 1158.670842][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x9cff instead
[ 1158.674249][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x55c2 instead
[ 1158.677706][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead
[ 1158.681199][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead
[ 1158.684646][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x9cff instead
[ 1158.687878][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x55c2 instead
[ 1158.691410][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead
[ 1158.694578][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead
[ 1158.697656][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x9cff instead
[ 1158.701536][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x55c2 instead
[ 1158.708282][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead
[ 1158.712377][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead
[ 1158.716263][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x9cff instead
[ 1158.720281][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x55c2 instead
[ 1158.727751][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead
[ 1158.731865][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead
[ 1158.736107][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x9cff instead
[ 1158.740127][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x55c2 instead
[ 1158.744694][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead
[ 1158.748074][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead
[ 1158.751363][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x9cff instead
[ 1158.755366][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x55c2 instead
[ 1158.759177][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead
[ 1158.763250][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead
[ 1158.767162][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x9cff instead
[ 1158.771154][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x55c2 instead
[ 1158.775612][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead
[ 1158.779654][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead
[ 1158.783933][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x9cff instead
[ 1158.787111][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x55c2 instead
[ 1158.790436][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead
[ 1158.793846][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead
[ 1158.796908][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x9cff instead
[ 1158.800476][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x55c2 instead
[ 1158.803856][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead
[ 1158.806950][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead
[ 1158.810144][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x9cff instead
[ 1158.813870][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x55c2 instead
[ 1158.816862][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead
[ 1158.820410][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead
[ 1158.824504][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x9cff instead
[ 1158.827803][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x55c2 instead
[ 1158.831073][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead
[ 1158.834411][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead
[ 1158.837582][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x9cff instead
[ 1158.841157][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x55c2 instead
[ 1158.845253][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead
[ 1158.849252][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead
[ 1158.853346][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x9cff instead
[ 1158.857507][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x55c2 instead
[ 1158.861812][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead
[ 1158.866036][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead
[ 1158.869864][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x9cff instead
[ 1158.874314][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x55c2 instead
[ 1158.877494][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead
[ 1158.881198][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead
[ 1158.885969][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x9cff instead
[ 1158.889795][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x55c2 instead
[ 1158.893588][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead
[ 1158.897582][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead
[ 1158.901647][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x9cff instead
[ 1158.905837][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x55c2 instead
[ 1158.909891][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead
[ 1158.913643][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead
[ 1158.917720][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x9cff instead
[ 1158.921902][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x55c2 instead
[ 1158.926115][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead
[ 1158.930081][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead
[ 1158.934107][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x9cff instead
[ 1158.938138][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x55c2 instead
[ 1158.942252][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead
[ 1158.946367][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead
[ 1158.950316][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x9cff instead
[ 1158.954378][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x55c2 instead
[ 1158.958420][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead
[ 1158.962440][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead
[ 1158.966572][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x9cff instead
[ 1158.970669][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x55c2 instead
[ 1158.974996][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead
[ 1158.979102][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead
[ 1158.983473][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x9cff instead
[ 1158.987586][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x55c2 instead
[ 1158.991662][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead
[ 1158.995499][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead
[ 1158.999033][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x9cff instead
[ 1159.005441][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x55c2 instead
[ 1159.009809][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead
[ 1159.014113][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead
[ 1159.018189][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x9cff instead
[ 1159.022382][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x55c2 instead
[ 1159.026623][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead
[ 1159.030735][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead
[ 1159.035600][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x9cff instead
[ 1159.039793][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x55c2 instead
[ 1159.044860][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead
[ 1159.049098][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead
[ 1159.052807][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x9cff instead
[ 1159.055872][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x55c2 instead
[ 1159.059332][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead
[ 1159.064023][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead
[ 1159.068492][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x9cff instead
[ 1159.074031][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x55c2 instead
[ 1159.078233][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead
[ 1159.082317][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead
[ 1159.086961][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x9cff instead
[ 1159.091020][T23256] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x55c2 instead
[ 1159.094372][T23256] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[ 1159.097277][T23256] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32
[ 1159.181365][T23280] syzkaller0: entered promiscuous mode
[ 1159.188233][T23280] syzkaller0: entered allmulticast mode
[ 1159.599400][T23290] bond5: entered allmulticast mode
[ 1160.112610][T23302] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5015'.
[ 1160.260526][T23314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5019'.
[ 1160.440545][T18416] usb 6-1: USB disconnect, device number 87
[ 1160.616127][T23338] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5029'.
[ 1160.999895][T23363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5038'.
[ 1161.003345][T23363] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5038'.
[ 1161.043177][T11328] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1161.050955][T11328] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1161.061837][T11328] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1161.065112][T11328] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1161.098348][T23367] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1161.650960][T23404] bond3: entered allmulticast mode
[ 1162.161772][T23419] syzkaller0: entered promiscuous mode
[ 1162.165073][T23419] syzkaller0: entered allmulticast mode
[ 1162.791833][T23455] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1162.813488][T23462] Illegal XDP return value 4294967282 on prog  (id 542) dev syz_tun, expect packet loss!
[ 1162.851613][   T42] kauditd_printk_skb: 20 callbacks suppressed
[ 1162.851627][   T42] audit: type=1326 audit(1786113080.708:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23463 comm="syz.4.5079" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7fec code=0x7ffc0000
[ 1162.865504][   T42] audit: type=1326 audit(1786113080.708:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23463 comm="syz.4.5079" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7fec code=0x7ffc0000
[ 1162.875195][   T42] audit: type=1326 audit(1786113080.728:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23463 comm="syz.4.5079" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7fec code=0x7ffc0000
[ 1162.885138][   T42] audit: type=1326 audit(1786113080.728:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23463 comm="syz.4.5079" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7fec code=0x7ffc0000
[ 1162.891616][   T42] audit: type=1326 audit(1786113080.728:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23463 comm="syz.4.5079" exe="/syz-executor" sig=0 arch=40000003 syscall=283 compat=1 ip=0xf7fd7fec code=0x7ffc0000
[ 1162.902782][   T42] audit: type=1326 audit(1786113080.728:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23463 comm="syz.4.5079" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7fec code=0x7ffc0000
[ 1162.920320][   T42] audit: type=1326 audit(1786113080.728:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23463 comm="syz.4.5079" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7fec code=0x7ffc0000
[ 1162.931205][   T42] audit: type=1326 audit(1786113080.728:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23463 comm="syz.4.5079" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7fd7fec code=0x7ffc0000
[ 1162.939144][   T42] audit: type=1326 audit(1786113080.728:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23463 comm="syz.4.5079" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7fd7fec code=0x7ffc0000
[ 1162.998619][T23472] bond6: entered allmulticast mode
[ 1163.008767][T23477] syzkaller0: entered promiscuous mode
[ 1163.010514][T23477] syzkaller0: entered allmulticast mode
[ 1164.020122][T23508] bond4: entered allmulticast mode
[ 1164.031451][T23509] syzkaller0: entered promiscuous mode
[ 1164.034711][T23509] syzkaller0: entered allmulticast mode
[ 1164.044700][T23509] tipc: Started in network mode
[ 1164.046666][T23509] tipc: Node identity 2a3fd465836b, cluster identity 4711
[ 1164.049534][T23509] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1164.057101][T23507] tipc: Resetting bearer <eth:syzkaller0>
[ 1164.095404][T23507] tipc: Disabling bearer <eth:syzkaller0>
[ 1164.193701][T23522] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5103'.
[ 1164.409530][T23538] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1164.415475][T23538] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1164.421113][T23538] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1164.426105][T23538] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1164.433349][ T5085] wg1 speed is unknown, defaulting to 1000
[ 1164.660532][T23552] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5117'.
[ 1164.693506][T23558] sg_write: process 737 (syz.0.5119) changed security contexts after opening file descriptor, this is not allowed.
[ 1164.698962][T23558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5119'.
[ 1164.739703][T23562] random: crng reseeded on system resumption
[ 1164.820078][T23570] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5125'.
[ 1165.001099][T23578] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5128'.
[ 1165.292250][T23597] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5135'.
[ 1165.300579][T23596] syzkaller0: entered promiscuous mode
[ 1165.305590][T23596] syzkaller0: entered allmulticast mode
[ 1165.411290][T23601] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5138'.
[ 1165.598019][T23605] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1165.774986][T23613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5144'.
[ 1165.853982][T23619] syzkaller0: entered promiscuous mode
[ 1165.855842][T23619] syzkaller0: entered allmulticast mode
[ 1166.017333][T23621] syzkaller0: entered promiscuous mode
[ 1166.019260][T23621] syzkaller0: entered allmulticast mode
[ 1166.026854][T23621] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1166.031397][T23620] tipc: Resetting bearer <eth:syzkaller0>
[ 1166.054944][T23620] tipc: Disabling bearer <eth:syzkaller0>
[ 1166.845730][T23660] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5162'.
[ 1166.993019][ T5085] usb 9-1: new high-speed USB device number 79 using dummy_hcd
[ 1167.019254][T23671] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1167.023083][T18416] usb 6-1: new high-speed USB device number 88 using dummy_hcd
[ 1167.144845][ T5085] usb 9-1: config 0 has an invalid interface number: 50 but max is 0
[ 1167.147522][ T5085] usb 9-1: config 0 has no interface number 0
[ 1167.149512][ T5085] usb 9-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1167.155260][ T5085] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 1167.158391][ T5085] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1167.160968][ T5085] usb 9-1: Product: syz
[ 1167.162335][ T5085] usb 9-1: Manufacturer: syz
[ 1167.163998][ T5085] usb 9-1: SerialNumber: syz
[ 1167.167972][ T5085] usb 9-1: config 0 descriptor??
[ 1167.173949][T18416] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[ 1167.177410][T18416] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6
[ 1167.178183][ T5085] yurex 9-1:0.50: USB YUREX device now attached to Yurex #0
[ 1167.183615][T18416] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1167.189297][T18416] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1167.191981][T18416] usb 6-1: Product: syz
[ 1167.193531][T18416] usb 6-1: Manufacturer: syz
[ 1167.195029][T18416] usb 6-1: SerialNumber: syz
[ 1167.213800][T20793] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1167.424698][T23659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1167.427873][T23659] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1167.685123][ T5085] usb 6-1: USB disconnect, device number 88
[ 1168.305107][T20793] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 1168.308121][T20793] ath9k_htc: Failed to initialize the device
[ 1168.311621][ T5085] usb 6-1: ath9k_htc: USB layer deinitialized
[ 1168.360156][T23701] fuse: fd is not a fuse device
[ 1168.652664][ T5085] usb 6-1: new high-speed USB device number 89 using dummy_hcd
[ 1168.813749][ T5085] usb 6-1: Using ep0 maxpacket: 32
[ 1168.817552][ T5085] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[ 1168.821103][ T5085] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6
[ 1168.828088][ T5085] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 1.08
[ 1168.831033][ T5085] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1168.834485][ T5085] usb 6-1: Product: syz
[ 1168.835899][ T5085] usb 6-1: Manufacturer: syz
[ 1168.837435][ T5085] usb 6-1: SerialNumber: syz
[ 1168.901858][T23729] bond4: entered allmulticast mode
[ 1169.423539][    C3] usb 9-1: yurex_control_callback - control failed: -2
[ 1169.428947][ T5823] usb 9-1: USB disconnect, device number 79
[ 1169.436346][ T5085] ldusb 6-1:1.0: LD USB Device #1 now attached to major 180 minor 1
[ 1169.443428][ T5823] yurex 9-1:0.50: USB YUREX #0 now disconnected
[ 1169.462126][ T5085] usb 6-1: USB disconnect, device number 89
[ 1169.484908][ T5085] ldusb 6-1:1.0: LD USB Device #1 now disconnected
[ 1169.989916][T23766] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5203'.
[ 1170.234029][T23781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5209'.
[ 1170.242886][T23781] netlink: 73 bytes leftover after parsing attributes in process `syz.1.5209'.
[ 1170.477891][T23796] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5212'.
[ 1171.530638][T23833] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5222'.
[ 1171.817188][T23861] fuse: Bad value for 'fd'
[ 1171.919913][T23863] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5236'.
[ 1172.056740][T23872] fuse: fd is not a fuse device
[ 1172.429380][T23885] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5245'.
[ 1172.500394][T23889] syzkaller0: entered promiscuous mode
[ 1172.503486][T23889] syzkaller0: entered allmulticast mode
[ 1172.828851][T23915] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5254'.
[ 1172.905668][T23921] syzkaller0: entered promiscuous mode
[ 1172.907943][T23921] syzkaller0: entered allmulticast mode
[ 1173.019157][T23927] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5262'.
[ 1173.137019][T23935] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5266'.
[ 1173.396738][   T42] audit: type=1326 audit(1786113091.258:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23960 comm="syz.3.5276" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17fec code=0x7ffc0000
[ 1173.404601][   T42] audit: type=1326 audit(1786113091.258:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23960 comm="syz.3.5276" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17fec code=0x7ffc0000
[ 1173.411534][   T42] audit: type=1326 audit(1786113091.258:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23960 comm="syz.3.5276" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17fec code=0x7ffc0000
[ 1173.419393][   T42] audit: type=1326 audit(1786113091.258:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23960 comm="syz.3.5276" exe="/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf7f17fec code=0x7ffc0000
[ 1173.427477][   T42] audit: type=1326 audit(1786113091.258:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23960 comm="syz.3.5276" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17fec code=0x7ffc0000
[ 1173.435711][   T42] audit: type=1326 audit(1786113091.258:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23960 comm="syz.3.5276" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17fec code=0x7ffc0000
[ 1173.444580][   T42] audit: type=1326 audit(1786113091.258:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23960 comm="syz.3.5276" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17fec code=0x7ffc0000
[ 1173.451638][   T42] audit: type=1326 audit(1786113091.258:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23960 comm="syz.3.5276" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f17fec code=0x7ffc0000
[ 1173.459476][   T42] audit: type=1326 audit(1786113091.258:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23960 comm="syz.3.5276" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7f17fec code=0x7ffc0000
[ 1173.511533][T23967] fuse: fd is not a fuse device
[ 1173.702164][T23973] syzkaller0: entered promiscuous mode
[ 1173.705637][T23973] syzkaller0: entered allmulticast mode
[ 1173.997771][T23986] fuse: Bad value for 'rootmode'
[ 1174.175774][T23997] 0: reclassify loop, rule prio 0, protocol 03
[ 1174.248629][T24010] fuse: fd is not a fuse device
[ 1175.431035][T24043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1175.489927][T24046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1175.495462][T24046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1175.580070][T24049] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1176.085907][T24072] tipc: Started in network mode
[ 1176.087557][T24072] tipc: Node identity d6066a492b21, cluster identity 4711
[ 1176.092459][T24072] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1176.098969][T24072] tipc: Resetting bearer <eth:syzkaller0>
[ 1176.107527][T24071] tipc: Disabling bearer <eth:syzkaller0>
[ 1176.275284][T24088] __nla_validate_parse: 2 callbacks suppressed
[ 1176.275306][T24088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5326'.
[ 1176.281255][T24088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5326'.
[ 1176.285645][T24088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5326'.
[ 1176.289639][T24088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5326'.
[ 1176.293232][T24088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5326'.
[ 1177.118277][T24131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1177.124595][T24131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1177.128912][T24131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1177.658147][T24164] netlink: 136 bytes leftover after parsing attributes in process `syz.1.5360'.
[ 1177.679548][T24167] fuse: fd is not a fuse device
[ 1178.616532][T24207] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1181.178901][T22675] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[ 1181.193306][T22675] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1181.636288][T24275] tc action pedit offset 0 out of bounds
[ 1181.796052][T24286] geneve2: entered promiscuous mode
[ 1181.969473][T24300] wg1 speed is unknown, defaulting to 1000
[ 1182.089014][T24311] fuse: Bad value for 'fd'
[ 1182.121194][T24313] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5411'.
[ 1182.346020][T24330] syzkaller0: entered promiscuous mode
[ 1182.347950][T24330] syzkaller0: entered allmulticast mode
[ 1182.626183][T24335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5419'.
[ 1183.141082][T24363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1183.144526][T24363] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1183.154958][T24363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1183.160344][T24363] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1183.567804][T24363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1183.573521][T24363] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1184.030885][T24413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5453'.
[ 1184.038243][T24413] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5453'.
[ 1184.100281][T24413] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1184.105439][T24413] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1184.119019][T24415] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5454'.
[ 1184.163355][T24413] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1184.169102][T24413] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1184.324110][T18922] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1184.326956][T18922] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1184.329711][T18922] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1184.332417][T18922] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1184.570595][T24435] syzkaller0: entered promiscuous mode
[ 1184.572377][T24435] syzkaller0: entered allmulticast mode
[ 1185.316001][T24441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1185.374508][T24442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1185.379271][T24442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1189.076220][T24480] syzkaller0: entered promiscuous mode
[ 1189.078897][T24480] syzkaller0: entered allmulticast mode
[ 1189.091662][T24480] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1189.098105][T24480] tipc: Resetting bearer <eth:syzkaller0>
[ 1189.102809][ T5880] usb 9-1: new high-speed USB device number 80 using dummy_hcd
[ 1189.113551][T24479] tipc: Resetting bearer <eth:syzkaller0>
[ 1189.164095][T24479] tipc: Disabling bearer <eth:syzkaller0>
[ 1189.274268][ T5880] usb 9-1: config 0 has an invalid interface number: 50 but max is 0
[ 1189.277258][ T5880] usb 9-1: config 0 has no interface number 0
[ 1189.279462][ T5880] usb 9-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1189.286411][ T5880] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 1189.289774][ T5880] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1189.292837][ T5880] usb 9-1: Product: syz
[ 1189.294285][ T5880] usb 9-1: Manufacturer: syz
[ 1189.295973][ T5880] usb 9-1: SerialNumber: syz
[ 1189.299519][ T5880] usb 9-1: config 0 descriptor??
[ 1189.307895][ T5880] yurex 9-1:0.50: USB YUREX device now attached to Yurex #0
[ 1189.457442][T24493] netlink: 'syz.1.5483': attribute type 4 has an invalid length.
[ 1189.469546][T24493] netlink: 'syz.1.5483': attribute type 4 has an invalid length.
[ 1189.554258][T24491] infiniband syz0: set active
[ 1189.555881][T24491] infiniband syz0: added batadv_slave_1
[ 1189.566996][T24491] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[ 1189.567218][T24497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1189.575248][T24491] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[ 1189.578682][T24497] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1189.582664][T24491] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[ 1189.616016][T24491] RDS/IB: syz0: added
[ 1189.618238][T24491] smc: adding ib device syz0 with port count 1
[ 1189.620563][T24491] smc:    ib device syz0 port 1 has no pnetid
[ 1189.803013][ T5085] usb 9-1: USB disconnect, device number 80
[ 1190.877426][T24533] syzkaller0: entered promiscuous mode
[ 1190.879882][T24533] syzkaller0: entered allmulticast mode
[ 1190.888137][T24533] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1190.894388][T24533] tipc: Resetting bearer <eth:syzkaller0>
[ 1190.901279][T24532] tipc: Resetting bearer <eth:syzkaller0>
[ 1190.934710][T24532] tipc: Disabling bearer <eth:syzkaller0>
[ 1191.585738][ T5085] yurex 9-1:0.50: USB YUREX #0 now disconnected
[ 1192.331856][T24584] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1192.479130][T24601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1192.551177][T24604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1192.561104][T24604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1192.567701][T24606] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5523'.
[ 1192.690068][T24610] pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 conventional PCI endpoint
[ 1192.724769][T24610] pci 0000:00:00.0: Adding to iommu group 0
[ 1192.740772][T24610] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[ 1192.778855][T24610] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[ 1192.784766][T24610] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[ 1192.787963][T24610] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[ 1192.794405][T24610] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[ 1192.810913][T24610] pci 0000:00:01.0: Adding to iommu group 1
[ 1192.819036][T24610] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[ 1192.821594][T24610] pci 0000:00:01.0: vgaarb: bridge control possible
[ 1192.823779][T24610] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[ 1192.864126][T24610] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[ 1192.867427][T24610] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[ 1192.881434][T24610] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[ 1192.896889][T24610] [drm] Found bochs VGA, ID 0xb0c5.
[ 1192.899155][T24610] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[ 1192.920566][T24610] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1
[ 1192.933796][ T5879] usb 9-1: new high-speed USB device number 81 using dummy_hcd
[ 1192.999237][T24618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5527'.
[ 1193.056521][T24610] Console: switching to colour frame buffer device 160x50
[ 1193.061997][T24610] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device
[ 1193.087876][ T5879] usb 9-1: config 0 has an invalid interface number: 50 but max is 0
[ 1193.092696][ T5879] usb 9-1: config 0 has no interface number 0
[ 1193.096967][ T5879] usb 9-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1193.120092][ T5879] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 1193.123215][ T5879] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1193.125781][ T5879] usb 9-1: Product: syz
[ 1193.127171][ T5879] usb 9-1: Manufacturer: syz
[ 1193.130739][ T5879] usb 9-1: SerialNumber: syz
[ 1193.142674][ T5879] usb 9-1: config 0 descriptor??
[ 1193.169820][ T5879] yurex 9-1:0.50: USB YUREX device now attached to Yurex #0
[ 1193.411893][T24634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1193.417578][T24634] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1193.419321][T24626] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1193.452948][T24637] netlink: 'syz.0.5533': attribute type 1 has an invalid length.
[ 1193.565349][T24645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1193.569651][T24645] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1193.577961][T24645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1193.581420][T24645] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1193.625191][T20793] usb 9-1: USB disconnect, device number 81
[ 1193.792612][T24645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1193.798237][T24645] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1193.917865][T24655] pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 conventional PCI endpoint
[ 1193.928571][T24655] pci 0000:00:00.0: Adding to iommu group 0
[ 1195.062628][ T5824] usb 6-1: new high-speed USB device number 90 using dummy_hcd
[ 1195.185914][T24692] pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 conventional PCI endpoint
[ 1195.214767][T24692] pci 0000:00:00.0: Adding to iommu group 0
[ 1195.235174][ T5824] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[ 1195.239599][ T5824] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6
[ 1195.251099][ T5824] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1195.256758][ T5824] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1195.259651][ T5824] usb 6-1: Product: syz
[ 1195.261126][ T5824] usb 6-1: Manufacturer: syz
[ 1195.264530][ T5824] usb 6-1: SerialNumber: syz
[ 1195.291516][ T5824] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1195.427646][T20793] yurex 9-1:0.50: USB YUREX #0 now disconnected
[ 1195.508560][T24684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1195.520309][T24684] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1195.732680][T24684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1195.738807][T24684] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1195.750721][T20793] usb 6-1: USB disconnect, device number 90
[ 1196.237171][T24743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5575'.
[ 1196.285946][ T5879] IPVS: starting estimator thread 0...
[ 1196.320150][T24752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5578'.
[ 1196.347099][T24758] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1196.389081][T24748] IPVS: using max 43 ests per chain, 103200 per kthread
[ 1196.395283][ T5824] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 1196.397578][ T5824] ath9k_htc: Failed to initialize the device
[ 1196.421647][T20793] usb 6-1: ath9k_htc: USB layer deinitialized
[ 1196.638532][T24781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5587'.
[ 1196.991219][T24801] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1197.259346][T24814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5599'.
[ 1198.005756][   T42] audit: type=1326 audit(1786113115.868:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24847 comm="syz.1.5610" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000
[ 1198.037849][   T42] audit: type=1326 audit(1786113115.868:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24847 comm="syz.1.5610" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000
[ 1198.050246][   T42] audit: type=1326 audit(1786113115.888:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24847 comm="syz.1.5610" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000
[ 1198.059183][   T42] audit: type=1326 audit(1786113115.888:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24847 comm="syz.1.5610" exe="/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf702efec code=0x7ffc0000
[ 1198.067786][   T42] audit: type=1326 audit(1786113115.888:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24847 comm="syz.1.5610" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000
[ 1198.074819][   T42] audit: type=1326 audit(1786113115.888:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24847 comm="syz.1.5610" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000
[ 1198.081933][   T42] audit: type=1326 audit(1786113115.888:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24847 comm="syz.1.5610" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000
[ 1198.088950][   T42] audit: type=1326 audit(1786113115.908:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24847 comm="syz.1.5610" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf702efec code=0x7ffc0000
[ 1198.096011][   T42] audit: type=1326 audit(1786113115.908:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24847 comm="syz.1.5610" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf702efec code=0x7ffc0000
[ 1198.315141][T24853] ip6erspan0: entered allmulticast mode
[ 1199.011167][T24901] netlink: 136 bytes leftover after parsing attributes in process `syz.0.5628'.
[ 1199.016478][T24901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5628'.
[ 1199.046245][T24903] pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 conventional PCI endpoint
[ 1199.088949][T24903] pci 0000:00:00.0: Adding to iommu group 0
[ 1199.812309][T24899] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1199.816333][T24899] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1199.831605][T24899] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1199.837075][T24899] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1199.860724][T24899] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1199.872833][T24899] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1199.874831][T24899] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1199.884633][T24899] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1199.957400][T24944] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5643'.
[ 1200.109581][T24965] usb usb8: usbfs: process 24965 (syz.1.5651) did not claim interface 0 before use
[ 1200.731672][T24998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1200.735077][T24998] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1200.740720][T24998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1200.743757][T24998] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1201.102870][T15481] Bluetooth: hci4: command 0x0405 tx timeout
[ 1201.149290][T24998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1201.156071][T24998] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1201.443691][T25020] ip6erspan0: entered allmulticast mode
[ 1201.752666][T25034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1201.828994][T25028] pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 conventional PCI endpoint
[ 1201.829227][T25039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1201.849703][T25039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1201.862290][T25028] pci 0000:00:00.0: Adding to iommu group 0
[ 1201.902740][T15481] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1201.905201][T15481] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1202.261905][T25056] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1203.108767][T25088] pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 conventional PCI endpoint
[ 1203.130948][T25088] pci 0000:00:00.0: Adding to iommu group 0
[ 1203.182827][T15481] Bluetooth: hci4: command 0x0405 tx timeout
[ 1203.908570][   T42] audit: type=1107 audit(1786113121.768:241): pid=25130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[ 1203.982733][T15481] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1203.982764][ T5731] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1204.091765][T25140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1204.095775][T25140] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1204.109349][T25140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1204.113664][T25140] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1204.219328][T25149] syz_tun: entered allmulticast mode
[ 1204.227351][T25148] syz_tun: left allmulticast mode
[ 1204.418157][T25160] pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 conventional PCI endpoint
[ 1204.443526][T25160] pci 0000:00:00.0: Adding to iommu group 0
[ 1205.425824][T25198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5749'.
[ 1205.628227][T25212] pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 conventional PCI endpoint
[ 1205.647971][T25212] pci 0000:00:00.0: Adding to iommu group 0
[ 1205.870834][T25220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1205.928918][T25223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1205.934315][T25223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1206.062782][ T5731] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1206.062847][T15481] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1208.612642][ T5824] usb 9-1: new high-speed USB device number 82 using dummy_hcd
[ 1208.795634][ T5824] usb 9-1: config 0 has an invalid interface number: 50 but max is 0
[ 1208.799476][ T5824] usb 9-1: config 0 has no interface number 0
[ 1208.802903][ T5824] usb 9-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1208.809049][ T5824] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 1208.812407][ T5824] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1208.815136][ T5824] usb 9-1: Product: syz
[ 1208.816582][ T5824] usb 9-1: Manufacturer: syz
[ 1208.818223][ T5824] usb 9-1: SerialNumber: syz
[ 1208.822350][ T5824] usb 9-1: config 0 descriptor??
[ 1208.835867][ T5824] yurex 9-1:0.50: USB YUREX device now attached to Yurex #0
[ 1208.939670][T25333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1208.950077][T25333] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1208.960071][T25333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1208.973045][T25333] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1209.083865][T25338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1209.087414][T25338] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1209.281338][T25345] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5809'.
[ 1209.285449][T25345] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5809'.
[ 1209.295994][T25345] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5809'.
[ 1209.298701][T20793] usb 9-1: USB disconnect, device number 82
[ 1209.431387][T25342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1209.436804][T25342] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1210.002723][ T5823] usb 6-1: new high-speed USB device number 91 using dummy_hcd
[ 1210.155978][ T5823] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1210.160124][ T5823] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1210.164198][ T5823] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00
[ 1210.167916][ T5823] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1210.274803][T25354] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5813'.
[ 1210.598719][ T5823] gud 6-1:1.0: probe with driver gud failed with error -121
[ 1210.801518][T18416] usb 6-1: USB disconnect, device number 91
[ 1211.104859][T20793] yurex 9-1:0.50: USB YUREX #0 now disconnected
[ 1211.271107][T25362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1211.329242][T25363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1211.335359][T25363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1212.533625][ T5823] usb 6-1: new high-speed USB device number 92 using dummy_hcd
[ 1212.694118][ T5823] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[ 1212.697484][ T5823] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6
[ 1212.704134][ T5823] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1212.711767][ T5823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1212.723840][ T5823] usb 6-1: Product: syz
[ 1212.725265][ T5823] usb 6-1: Manufacturer: syz
[ 1212.729985][ T5823] usb 6-1: SerialNumber: syz
[ 1212.761856][ T5824] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1212.979663][T25387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1212.984770][T25387] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1213.196576][ T5823] usb 6-1: USB disconnect, device number 92
[ 1213.455661][T25406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1213.516609][T25407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1213.523147][T25407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1213.818084][T25414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5837'.
[ 1213.823020][ T5824] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 1213.825225][ T5824] ath9k_htc: Failed to initialize the device
[ 1213.840138][ T5823] usb 6-1: ath9k_htc: USB layer deinitialized
[ 1214.152671][ T5823] usb 6-1: new high-speed USB device number 93 using dummy_hcd
[ 1214.302712][ T5823] usb 6-1: Using ep0 maxpacket: 32
[ 1214.307570][ T5823] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[ 1214.312176][ T5823] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6
[ 1214.321275][ T5823] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 1.08
[ 1214.328810][ T5823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1214.331398][ T5823] usb 6-1: Product: syz
[ 1214.333533][ T5823] usb 6-1: Manufacturer: syz
[ 1214.335074][ T5823] usb 6-1: SerialNumber: syz
[ 1214.347499][ T5823] ldusb 6-1:1.0: LD USB Device #0 now attached to major 180 minor 0
[ 1214.551607][ T5824] usb 6-1: USB disconnect, device number 93
[ 1214.560144][ T5824] ldusb 6-1:1.0: LD USB Device #0 now disconnected
[ 1215.572597][ T5879] usb 9-1: new full-speed USB device number 83 using dummy_hcd
[ 1215.724603][ T5879] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1215.728141][ T5879] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1215.733640][ T5879] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1215.737079][ T5879] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1215.740738][ T5879] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1215.746988][ T5879] usb 9-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[ 1215.750016][ T5879] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1215.752647][ T5879] usb 9-1: Product: syz
[ 1215.753971][ T5879] usb 9-1: Manufacturer: syz
[ 1215.755532][ T5879] usb 9-1: SerialNumber: syz
[ 1215.758496][ T5879] usb 9-1: config 0 descriptor??
[ 1215.763442][ T5879] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input137
[ 1215.967244][ T5879] usb 9-1: USB disconnect, device number 83
[ 1216.245089][T25480] syzkaller0: entered promiscuous mode
[ 1216.246899][T25480] syzkaller0: entered allmulticast mode
[ 1217.269566][T25476] ceph: No mds server is up or the cluster is laggy
[ 1217.825993][   T10] usb 9-1: new high-speed USB device number 84 using dummy_hcd
[ 1218.034642][   T10] usb 9-1: config 0 has no interfaces?
[ 1218.036355][   T10] usb 9-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[ 1218.039040][   T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1218.042919][   T10] usb 9-1: config 0 descriptor??
[ 1218.256442][   T10] usb 9-1: USB disconnect, device number 84
[ 1219.123088][ T5824] usb 9-1: new high-speed USB device number 85 using dummy_hcd
[ 1219.307528][ T5824] usb 9-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[ 1219.311286][ T5824] usb 9-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6
[ 1219.318726][ T5824] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1219.322029][ T5824] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1219.325341][ T5824] usb 9-1: Product: syz
[ 1219.326899][ T5824] usb 9-1: Manufacturer: syz
[ 1219.328786][ T5824] usb 9-1: SerialNumber: syz
[ 1219.390390][ T5085] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1219.597792][T25514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1219.603233][T25514] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1219.808829][   T10] usb 9-1: USB disconnect, device number 85
[ 1220.076397][T25485] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1220.464163][ T5085] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive
[ 1220.467682][ T5085] ath9k_htc: Failed to initialize the device
[ 1220.471331][   T10] usb 9-1: ath9k_htc: USB layer deinitialized
[ 1220.772634][   T10] usb 9-1: new high-speed USB device number 86 using dummy_hcd
[ 1220.922627][   T10] usb 9-1: Using ep0 maxpacket: 32
[ 1220.926792][   T10] usb 9-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[ 1220.930761][   T10] usb 9-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6
[ 1220.936962][   T10] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 1.08
[ 1220.940238][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1220.943308][   T10] usb 9-1: Product: syz
[ 1220.944730][   T10] usb 9-1: Manufacturer: syz
[ 1220.946328][   T10] usb 9-1: SerialNumber: syz
[ 1220.959203][   T10] ldusb 9-1:1.0: LD USB Device #0 now attached to major 180 minor 0
[ 1221.151107][T25575] zero sized request
[ 1221.156036][   T10] usb 9-1: USB disconnect, device number 86
[ 1221.170764][   T10] ldusb 9-1:1.0: LD USB Device #0 now disconnected
[ 1221.453196][T20793] usb 6-1: new high-speed USB device number 94 using dummy_hcd
[ 1221.603878][T20793] usb 6-1: config 0 has an invalid interface number: 50 but max is 0
[ 1221.606491][T20793] usb 6-1: config 0 has no interface number 0
[ 1221.608451][T20793] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1221.614211][T20793] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 1221.617601][T20793] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1221.620699][T20793] usb 6-1: Product: syz
[ 1221.622646][T20793] usb 6-1: Manufacturer: syz
[ 1221.624481][T20793] usb 6-1: SerialNumber: syz
[ 1221.627989][T20793] usb 6-1: config 0 descriptor??
[ 1221.634037][T20793] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0
[ 1221.887618][T25601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1221.890606][T25601] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1222.353277][T25607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5909'.
[ 1222.362930][T25607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5909'.
[ 1222.710734][T25607] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1222.725940][T25607] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1222.859293][   T10] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[ 1222.871044][   T10] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1223.123013][T13561] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1223.127297][T13561] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1223.132227][T13561] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1223.138081][T13561] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1223.144450][T13561] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1223.149541][T13561] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1223.911356][ T5085] usb 6-1: USB disconnect, device number 94
[ 1223.979929][ T5085] yurex 6-1:0.50: USB YUREX #0 now disconnected
[ 1226.856524][T25645] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1226.882582][T11328] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1226.885893][T11328] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1227.001254][   T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[ 1227.014586][   T10] hid-generic 0000:0000:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1227.050601][T22675] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[ 1227.060446][T22675] hid-generic 0000:0000:0000.000C: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1227.154667][T25680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5922'.
[ 1227.183259][T25680] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5922'.
[ 1227.355562][T25680] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1227.361794][T25680] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1227.508041][T25693] usb usb8: usbfs: process 25693 (syz.4.5928) did not claim interface 0 before use
[ 1227.600440][T25690] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1227.606640][T25690] 8021q: adding VLAN 0 to HW filter on device team0
[ 1227.615246][T25690] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1227.689301][T25690] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1227.694588][T25690] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1227.701036][T25690] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1227.705141][T25690] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1227.714226][T25690] veth1_macvtap: left promiscuous mode
[ 1227.716974][T25690] veth0_macvtap: left promiscuous mode
[ 1227.719743][T25690] veth0_macvtap: entered promiscuous mode
[ 1227.731684][T25690] veth1_macvtap: entered promiscuous mode
[ 1227.742389][T25690] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1227.756853][T25690] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1227.769316][T25690] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1227.777232][T25690] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1227.787221][T25690] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1227.793259][T25690] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1227.801261][T25690] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1227.804456][T25690] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1227.807515][T25690] geneve2: left promiscuous mode
[ 1227.825006][T19260] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1227.832286][T19309] syz0: Port: 1 Link DOWN
[ 1227.839507][   T62] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1227.842579][   T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1227.864977][   T62] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1227.867897][   T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1227.976558][T14103] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1227.996178][T14103] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1228.002030][T14103] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1228.008073][T14103] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1228.020978][T14103] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1228.032087][T14103] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1228.041484][T14103] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1228.129358][T25713] syzkaller0: entered promiscuous mode
[ 1228.135772][T25713] syzkaller0: entered allmulticast mode
[ 1228.152554][T25713] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1228.158189][T25713] tipc: Resetting bearer <eth:syzkaller0>
[ 1228.167004][T25712] tipc: Resetting bearer <eth:syzkaller0>
[ 1228.381005][T25712] tipc: Disabling bearer <eth:syzkaller0>
[ 1228.389053][T25717] pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 conventional PCI endpoint
[ 1228.443940][T25717] pci 0000:00:00.0: Adding to iommu group 0
[ 1228.760491][T25729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1228.824728][T25732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1228.829931][T25732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1229.155113][T25753] usb usb8: usbfs: process 25753 (syz.0.5946) did not claim interface 0 before use
[ 1229.670357][T22675] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[ 1229.694303][T22675] hid-generic 0000:0000:0000.000D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1229.962413][T25767] syzkaller0: entered promiscuous mode
[ 1229.966348][T25767] syzkaller0: entered allmulticast mode
[ 1229.970997][T25767] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1229.978304][T25767] tipc: Resetting bearer <eth:syzkaller0>
[ 1229.981543][T25766] tipc: Resetting bearer <eth:syzkaller0>
[ 1230.003359][T25766] tipc: Disabling bearer <eth:syzkaller0>
[ 1231.130508][T25821] rdma_rxe: rxe_newlink: failed to add batadv_slave_1
[ 1233.186818][T25916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1233.244458][T25920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1233.249214][T25920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1233.977954][T25954] pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 conventional PCI endpoint
[ 1233.990329][T25954] pci 0000:00:00.0: Adding to iommu group 0
[ 1234.135646][T25985] fuse: fd is not a fuse device
[ 1234.164629][T25987] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6022'.
[ 1234.672877][T26026] pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 conventional PCI endpoint
[ 1234.705440][T26026] pci 0000:00:00.0: Adding to iommu group 0
[ 1234.925949][T26045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1234.941185][T26047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1234.944873][T26047] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1234.984266][T26052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1234.990598][T26052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1235.492034][T26068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1235.497714][T26068] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1236.132901][T22675] usb 6-1: new high-speed USB device number 95 using dummy_hcd
[ 1236.285235][T22675] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[ 1236.289059][T22675] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6
[ 1236.296522][T22675] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1236.299524][T22675] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1236.301896][T22675] usb 6-1: Product: syz
[ 1236.304459][T22675] usb 6-1: Manufacturer: syz
[ 1236.305910][T22675] usb 6-1: SerialNumber: syz
[ 1236.322289][ T5824] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1236.531957][T26101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1236.538250][T26101] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1236.542198][   T10] usb 6-1: USB disconnect, device number 95
[ 1236.975066][T26140] loop5: detected capacity change from 0 to 10271
[ 1236.994690][T26140] loop5: detected capacity change from 10271 to 13911
[ 1237.068766][T20551] buffer_io_error: 5 callbacks suppressed
[ 1237.068788][T20551] Buffer I/O error on dev loop5, logical block 1738, async page read
[ 1237.264934][T26146] smpboot: CPU 3 is now offline
[ 1237.347965][ T5824] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 1237.354544][ T5824] ath9k_htc: Failed to initialize the device
[ 1237.367700][   T10] usb 6-1: ath9k_htc: USB layer deinitialized
[ 1237.534179][T26147] smpboot: Booting Node 0 Processor 1 APIC 0x1
[ 1237.578717][T26147] smpboot: Booting Node 0 Processor 3 APIC 0x3
[ 1237.692727][   T10] usb 6-1: new high-speed USB device number 96 using dummy_hcd
[ 1237.703284][T26157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1237.707135][T26157] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1237.717160][T26157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1237.721434][T26157] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1237.843813][   T10] usb 6-1: Using ep0 maxpacket: 32
[ 1237.849385][   T10] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[ 1237.854821][   T10] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6
[ 1237.865334][   T10] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 1.08
[ 1237.869109][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1237.872673][   T10] usb 6-1: Product: syz
[ 1237.874593][   T10] usb 6-1: Manufacturer: syz
[ 1237.876754][   T10] usb 6-1: SerialNumber: syz
[ 1237.888104][   T10] ldusb 6-1:1.0: LD USB Device #0 now attached to major 180 minor 0
[ 1238.091026][   T10] usb 6-1: USB disconnect, device number 96
[ 1238.106904][   T10] ldusb 6-1:1.0: LD USB Device #0 now disconnected
[ 1238.481321][ T5808] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[ 1238.491617][ T5808] hid-generic 0000:0000:0000.000E: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1238.844569][T26188] tipc: Enabled bearer <ib:wg2>, priority 10
[ 1239.290831][T26205] netlink: 428 bytes leftover after parsing attributes in process `syz.4.6094'.
[ 1239.298052][T26205] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6094'.
[ 1239.459201][T26200] syz.0.6092 (26200): drop_caches: 2
[ 1239.960463][T26224] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[ 1239.963502][T26224] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[ 1239.966263][T26224] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[ 1239.975067][   T10] tipc: Node number set to 4247218761
[ 1240.007558][   T10] IPVS: starting estimator thread 0...
[ 1240.092848][T26225] IPVS: using max 43 ests per chain, 103200 per kthread
[ 1240.199368][T26228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6103'.
[ 1240.390571][ T5731] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1240.402998][ T5731] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1240.411918][ T5731] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1240.417114][ T5731] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1240.420551][ T5731] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1240.765737][T26236] wg1 speed is unknown, defaulting to 1000
[ 1241.208252][T26236] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1241.210753][T26236] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1241.214528][T26236] bridge_slave_0: entered allmulticast mode
[ 1241.219318][T26236] bridge_slave_0: entered promiscuous mode
[ 1241.229497][T26236] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1241.235252][T26269] pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 conventional PCI endpoint
[ 1241.253800][T26236] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1241.257240][T26236] bridge_slave_1: entered allmulticast mode
[ 1241.264043][T26269] pci 0000:00:00.0: Adding to iommu group 0
[ 1241.267095][T26236] bridge_slave_1: entered promiscuous mode
[ 1241.428060][T26236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1241.437360][T26236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1241.479264][T26236] team0: Port device team_slave_0 added
[ 1241.486257][T26236] team0: Port device team_slave_1 added
[ 1241.510195][T26236] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1241.514621][T26236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1241.525518][T26236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1241.531709][T26236] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1241.534753][T26236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1241.544367][T26236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1241.588433][T26236] hsr_slave_0: entered promiscuous mode
[ 1241.590987][T26236] hsr_slave_1: entered promiscuous mode
[ 1242.272608][T22675] usb 6-1: new high-speed USB device number 97 using dummy_hcd
[ 1242.351954][T26236] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1242.422863][T22675] usb 6-1: Using ep0 maxpacket: 8
[ 1242.425035][T26236] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1242.426849][T22675] usb 6-1: config 6 has an invalid interface number: 2 but max is 0
[ 1242.428497][T26236] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1242.431141][T22675] usb 6-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[ 1242.438717][T22675] usb 6-1: config 6 has no interface number 0
[ 1242.440532][T26236] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1242.442582][T22675] usb 6-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1242.444682][T26236] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1242.453702][T26236] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1242.459349][T26236] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1242.462779][T22675] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[ 1242.466271][T22675] usb 6-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3
[ 1242.469195][T22675] usb 6-1: Product: syz
[ 1242.470679][T22675] usb 6-1: Manufacturer: syz
[ 1242.471992][T26236] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1242.472205][T22675] usb 6-1: SerialNumber: syz
[ 1242.478675][T22675] hso 6-1:6.2: Failed to find INT IN ep
[ 1242.549920][T26236] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1242.552752][ T5731] Bluetooth: hci3: command tx timeout
[ 1242.577226][T26236] 8021q: adding VLAN 0 to HW filter on device team0
[ 1242.586345][  T712] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1242.589498][  T712] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1242.611643][  T712] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1242.614294][  T712] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1242.707795][   T10] usb 6-1: USB disconnect, device number 97
[ 1242.978848][T26236] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1243.024819][T26236] veth0_vlan: entered promiscuous mode
[ 1243.031884][T26236] veth1_vlan: entered promiscuous mode
[ 1243.049436][T26236] veth0_macvtap: entered promiscuous mode
[ 1243.054773][T26236] veth1_macvtap: entered promiscuous mode
[ 1243.067459][T26236] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1243.080035][T26236] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1243.145119][T19260] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1243.169973][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1243.178606][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1243.198459][T19260] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1243.205407][T19260] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1243.231723][  T712] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1243.234704][  T712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1243.242575][T19260] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1243.278486][T26324] ip6erspan0: entered allmulticast mode
[ 1243.651678][T26344] binder: 26343:26344 ioctl 4018620d 0 returned -22
[ 1243.938447][T26349] netlink: 220 bytes leftover after parsing attributes in process `syz.1.6133'.
[ 1243.941424][T26349] netlink: 220 bytes leftover after parsing attributes in process `syz.1.6133'.
[ 1244.085086][ T5880] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[ 1244.089920][ T5880] hid-generic 0000:0000:0000.000F: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1244.248030][T26366] netlink: 'syz.0.6139': attribute type 1 has an invalid length.
[ 1244.286546][T26365] smpboot: CPU 1 is now offline
[ 1244.360712][T26365] smpboot: CPU 3 is now offline
[ 1244.496781][T26372] syzkaller0: entered promiscuous mode
[ 1244.498850][T26372] syzkaller0: entered allmulticast mode
[ 1244.508244][T26367] smpboot: Booting Node 0 Processor 1 APIC 0x1
[ 1244.530652][T26367] smpboot: Booting Node 0 Processor 3 APIC 0x3
[ 1244.535754][T26376] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6144'.
[ 1244.565733][ T5731] Bluetooth: hci3: command 0x041b tx timeout
[ 1244.943480][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead
[ 1244.947803][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead
[ 1244.952137][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x9cff instead
[ 1244.956979][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x55c2 instead
[ 1244.960246][T26409] jffs2: Empty flash at 0x00000040 ends at 0x00000e3c
[ 1244.962413][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000e3c: 0xffff instead
[ 1244.965746][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000e40: 0x4942 instead
[ 1244.969074][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000e44: 0x0001 instead
[ 1244.972419][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000e48: 0xefff instead
[ 1244.976025][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000e7c: 0xbdb3 instead
[ 1244.979326][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000f28: 0xc316 instead
[ 1244.982710][T26409] jffs2: Further such events for this erase block will not be printed
[ 1244.985325][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead
[ 1244.988687][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead
[ 1244.992002][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x9cff instead
[ 1244.995289][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x55c2 instead
[ 1244.998541][T26409] jffs2: Empty flash at 0x00001040 ends at 0x00001e3c
[ 1245.000653][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001e3c: 0xffff instead
[ 1245.003996][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001e40: 0x4942 instead
[ 1245.007186][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001e44: 0x0001 instead
[ 1245.010665][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001e48: 0xefff instead
[ 1245.014102][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001e7c: 0xf9ef instead
[ 1245.017312][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001f28: 0xc316 instead
[ 1245.020560][T26409] jffs2: Further such events for this erase block will not be printed
[ 1245.023860][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead
[ 1245.027110][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead
[ 1245.030339][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x9cff instead
[ 1245.033818][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x55c2 instead
[ 1245.037158][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead
[ 1245.040458][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead
[ 1245.044287][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x9cff instead
[ 1245.048583][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x55c2 instead
[ 1245.053269][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead
[ 1245.057535][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead
[ 1245.061145][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x9cff instead
[ 1245.064444][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x55c2 instead
[ 1245.067634][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead
[ 1245.071021][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead
[ 1245.074237][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x9cff instead
[ 1245.077318][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x55c2 instead
[ 1245.080581][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead
[ 1245.083946][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead
[ 1245.087122][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x9cff instead
[ 1245.090231][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x55c2 instead
[ 1245.093553][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead
[ 1245.096637][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead
[ 1245.099863][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x9cff instead
[ 1245.103457][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x55c2 instead
[ 1245.106713][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead
[ 1245.110016][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead
[ 1245.113448][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x9cff instead
[ 1245.116635][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x55c2 instead
[ 1245.119888][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead
[ 1245.123259][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead
[ 1245.126458][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x9cff instead
[ 1245.129740][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x55c2 instead
[ 1245.133164][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead
[ 1245.136354][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead
[ 1245.139538][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x9cff instead
[ 1245.142963][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x55c2 instead
[ 1245.146736][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead
[ 1245.150589][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead
[ 1245.154045][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x9cff instead
[ 1245.157345][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x55c2 instead
[ 1245.160722][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead
[ 1245.164361][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead
[ 1245.167725][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x9cff instead
[ 1245.171287][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x55c2 instead
[ 1245.174676][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead
[ 1245.177979][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead
[ 1245.181314][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x9cff instead
[ 1245.184644][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x55c2 instead
[ 1245.188001][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead
[ 1245.191397][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead
[ 1245.194817][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x9cff instead
[ 1245.198188][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x55c2 instead
[ 1245.201653][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead
[ 1245.205020][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead
[ 1245.208396][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x9cff instead
[ 1245.211749][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x55c2 instead
[ 1245.215181][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead
[ 1245.218514][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead
[ 1245.222138][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x9cff instead
[ 1245.225538][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x55c2 instead
[ 1245.228838][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead
[ 1245.232078][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead
[ 1245.235325][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x9cff instead
[ 1245.238571][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x55c2 instead
[ 1245.241825][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead
[ 1245.245052][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead
[ 1245.248438][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x9cff instead
[ 1245.251543][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x55c2 instead
[ 1245.254801][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead
[ 1245.258126][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead
[ 1245.261369][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x9cff instead
[ 1245.265587][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x55c2 instead
[ 1245.268995][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead
[ 1245.272535][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead
[ 1245.275831][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x9cff instead
[ 1245.279080][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x55c2 instead
[ 1245.283035][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead
[ 1245.286700][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead
[ 1245.290362][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x9cff instead
[ 1245.293741][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x55c2 instead
[ 1245.296968][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead
[ 1245.300195][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead
[ 1245.303999][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x9cff instead
[ 1245.307288][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x55c2 instead
[ 1245.310724][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead
[ 1245.314190][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead
[ 1245.317382][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x9cff instead
[ 1245.320581][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x55c2 instead
[ 1245.323859][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead
[ 1245.327032][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead
[ 1245.330444][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x9cff instead
[ 1245.333862][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x55c2 instead
[ 1245.337083][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead
[ 1245.340297][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead
[ 1245.343810][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x9cff instead
[ 1245.347110][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x55c2 instead
[ 1245.350340][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead
[ 1245.353623][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead
[ 1245.356795][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x9cff instead
[ 1245.359989][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x55c2 instead
[ 1245.363257][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead
[ 1245.366675][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead
[ 1245.369895][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x9cff instead
[ 1245.373194][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x55c2 instead
[ 1245.376862][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead
[ 1245.380927][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead
[ 1245.385443][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x9cff instead
[ 1245.389612][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x55c2 instead
[ 1245.393977][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead
[ 1245.397750][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead
[ 1245.401009][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x9cff instead
[ 1245.404250][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x55c2 instead
[ 1245.407834][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead
[ 1245.412101][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead
[ 1245.416450][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x9cff instead
[ 1245.420641][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x55c2 instead
[ 1245.423908][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead
[ 1245.427338][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead
[ 1245.430524][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x9cff instead
[ 1245.433718][T26409] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x55c2 instead
[ 1245.436861][T26409] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[ 1245.439738][T26409] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32
[ 1246.109310][T26466] ip6erspan0: entered allmulticast mode
[ 1246.142962][T26468] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6173'.
[ 1246.146131][T26468] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6173'.
[ 1246.154241][ T5880] usb 6-1: new high-speed USB device number 98 using dummy_hcd
[ 1246.186190][T26474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1246.192894][T26474] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1246.260455][T26478] syzkaller0: entered promiscuous mode
[ 1246.262313][T26478] syzkaller0: entered allmulticast mode
[ 1246.314957][ T5880] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1246.319224][ T5880] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1246.323099][ T5880] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01
[ 1246.326692][ T5880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1246.331782][ T5880] usb 6-1: config 0 descriptor??
[ 1246.461253][T26484] fuse: fd is not a fuse device
[ 1246.602629][T26496] syzkaller0: entered promiscuous mode
[ 1246.605209][T26496] syzkaller0: entered allmulticast mode
[ 1246.633563][ T5731] Bluetooth: hci3: command 0x041b tx timeout
[ 1246.742250][ T5880] arvo 0003:1E7D:30D4.0010: unknown main item tag 0x0
[ 1246.746182][ T5880] arvo 0003:1E7D:30D4.0010: unknown main item tag 0x0
[ 1246.748843][ T5880] arvo 0003:1E7D:30D4.0010: unknown main item tag 0x0
[ 1246.750968][ T5880] arvo 0003:1E7D:30D4.0010: unknown main item tag 0x0
[ 1246.753823][ T5880] arvo 0003:1E7D:30D4.0010: unknown main item tag 0x0
[ 1246.756251][ T5880] arvo 0003:1E7D:30D4.0010: unknown main item tag 0x0
[ 1246.758551][ T5880] arvo 0003:1E7D:30D4.0010: unknown main item tag 0x0
[ 1246.767216][ T5880] arvo 0003:1E7D:30D4.0010: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0
[ 1246.814251][T26502] random: crng reseeded on system resumption
[ 1247.014775][ T5880] arvo 0003:1E7D:30D4.0010: couldn't init struct arvo_device
[ 1247.018718][ T5880] arvo 0003:1E7D:30D4.0010: couldn't install keyboard
[ 1247.021888][ T5880] arvo 0003:1E7D:30D4.0010: probe with driver arvo failed with error -71
[ 1247.034174][ T5880] usb 6-1: USB disconnect, device number 98
[ 1247.134446][T20793] usb 9-1: new high-speed USB device number 87 using dummy_hcd
[ 1247.286660][T20793] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1247.293889][T20793] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1247.297061][T20793] usb 9-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00
[ 1247.299966][T20793] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1247.452775][T15481] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1247.456788][T15481] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1247.460099][T15481] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1247.463415][T15481] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1247.468784][T15481] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1247.710719][T26517] wg1 speed is unknown, defaulting to 1000
[ 1247.912812][T20793] gud 9-1:1.0: Failed to add properties (error=-5)
[ 1247.915333][T20793] gud 9-1:1.0: probe with driver gud failed with error -5
[ 1248.017443][T26517] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1248.020662][T26517] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1248.023845][T26517] bridge_slave_0: entered allmulticast mode
[ 1248.029833][T26517] bridge_slave_0: entered promiscuous mode
[ 1248.033227][T26517] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1248.038968][T26517] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1248.041387][T26517] bridge_slave_1: entered allmulticast mode
[ 1248.044318][T26517] bridge_slave_1: entered promiscuous mode
[ 1248.062152][T26517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1248.068578][T26517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1248.092066][T26517] team0: Port device team_slave_0 added
[ 1248.096226][T26517] team0: Port device team_slave_1 added
[ 1248.113088][T26517] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1248.113612][T22675] usb 9-1: USB disconnect, device number 87
[ 1248.115941][T26517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1248.126179][T26517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1248.133664][T26517] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1248.136627][T26517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1248.145056][T26517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1248.199526][T26517] hsr_slave_0: entered promiscuous mode
[ 1248.201858][T26517] hsr_slave_1: entered promiscuous mode
[ 1248.204044][T26517] debugfs: 'hsr0' already exists in 'hsr'
[ 1248.206084][T26517] Cannot create hsr debugfs directory
[ 1248.337198][T26543] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6199'.
[ 1248.553412][T26552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1248.611590][T26553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1248.625173][T26553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1248.706822][ T5731] Bluetooth: hci3: command 0x041b tx timeout
[ 1248.813408][T26517] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1248.819474][T26517] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1248.823435][T26517] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1248.829641][T26517] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1248.833159][T26517] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1248.841892][T26517] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1248.845202][T26517] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1248.852232][T26517] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1248.915905][T26517] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1248.928756][T26517] 8021q: adding VLAN 0 to HW filter on device team0
[ 1248.934392][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1248.936748][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1248.945714][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1248.948048][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1248.973472][T26571] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6208'.
[ 1249.209711][T26517] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1249.239819][T26585] pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 conventional PCI endpoint
[ 1249.241796][T26517] veth0_vlan: entered promiscuous mode
[ 1249.248565][T26585] pci 0000:00:00.0: Adding to iommu group 0
[ 1249.249947][T26517] veth1_vlan: entered promiscuous mode
[ 1249.269978][T26517] veth0_macvtap: entered promiscuous mode
[ 1249.275620][T26517] veth1_macvtap: entered promiscuous mode
[ 1249.285890][T26517] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1249.292648][T26517] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1249.323110][T11346] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1249.350044][T11346] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1249.400242][  T712] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1249.404833][  T712] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1249.421716][T13225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1249.424733][T13225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1249.425049][T19260] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1249.429756][T19260] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1249.505057][ T5731] Bluetooth: hci0: command tx timeout
[ 1249.530228][T26592] syzkaller0: entered promiscuous mode
[ 1249.532234][T26592] syzkaller0: entered allmulticast mode
[ 1250.785601][ T5731] Bluetooth: hci3: command 0x041b tx timeout
[ 1250.911302][T26602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1250.916636][T26602] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1251.584139][T26608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1251.588037][T26608] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1251.593154][T26608] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6217'.
[ 1251.596048][ T5731] Bluetooth: hci0: command tx timeout
[ 1253.414047][T26616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1253.471975][T26618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1253.478209][T26618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1253.667471][ T5731] Bluetooth: hci0: command tx timeout
[ 1254.253409][T26624] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[ 1254.260108][T26624] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[ 1254.263687][T26624] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[ 1254.999354][T26636] syzkaller0: entered promiscuous mode
[ 1255.001317][T26636] syzkaller0: entered allmulticast mode
[ 1255.170875][T26642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6233'.
[ 1255.529231][T26646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1255.532511][T26646] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1255.766181][ T5731] Bluetooth: hci0: command tx timeout
[ 1259.577524][T26675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1259.635743][T26676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1259.641913][T26676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1260.430158][T26682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1260.433389][T26682] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1261.484514][T26699] smpboot: CPU 1 is now offline
[ 1261.528939][T26699] smpboot: CPU 3 is now offline
[ 1261.543582][T26703] smpboot: Booting Node 0 Processor 1 APIC 0x1
[ 1261.554182][T26701] ------------[ cut here ]------------
[ 1261.556977][T26701] 
[ 1261.556988][T26701] ======================================================
[ 1261.556994][T26701] WARNING: possible circular locking dependency detected
[ 1261.557002][T26701] syzkaller #0 Tainted: G             L     
[ 1261.557011][T26701] ------------------------------------------------------
[ 1261.557015][T26701] syz.4.6256/26701 is trying to acquire lock:
[ 1261.557023][T26701] ffffffff8eaf3f60 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x61/0x80
[ 1261.557178][T26701] 
[ 1261.557178][T26701] but task is already holding lock:
[ 1261.557183][T26701] ffff88802b23b660 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140
[ 1261.557214][T26701] 
[ 1261.557214][T26701] which lock already depends on the new lock.
[ 1261.557214][T26701] 
[ 1261.557219][T26701] 
[ 1261.557219][T26701] the existing dependency chain (in reverse order) is:
[ 1261.557224][T26701] 
[ 1261.557224][T26701] -> #4 (&rq->__lock){-.-.}-{2:2}:
[ 1261.557240][T26701]        lock_acquire+0x1b9/0x370
[ 1261.557261][T26701]        _raw_spin_lock_nested+0x31/0x40
[ 1261.557343][T26701]        raw_spin_rq_lock_nested+0x2c/0x140
[ 1261.557357][T26701]        _task_rq_lock+0xcf/0x500
[ 1261.557371][T26701]        cgroup_move_task+0x81/0x320
[ 1261.557388][T26701]        css_set_move_task+0x285/0x600
[ 1261.557402][T26701]        cgroup_post_fork+0x1f9/0x9a0
[ 1261.557420][T26701]        copy_process+0x6b7a/0x8030
[ 1261.557437][T26701]        kernel_clone+0x176/0x9d0
[ 1261.557452][T26701]        user_mode_thread+0xcc/0x110
[ 1261.557467][T26701]        rest_init+0x21/0x260
[ 1261.557479][T26701]        start_kernel+0x48e/0x490
[ 1261.557532][T26701]        x86_64_start_reservations+0x24/0x30
[ 1261.557554][T26701]        x86_64_start_kernel+0x12b/0x130
[ 1261.557574][T26701]        common_startup_64+0x13e/0x158
[ 1261.557607][T26701] 
[ 1261.557607][T26701] -> #3 (&p->pi_lock){-.-.}-{2:2}:
[ 1261.557625][T26701]        lock_acquire+0x1b9/0x370
[ 1261.557645][T26701]        _raw_spin_lock_irqsave+0x3a/0x60
[ 1261.557659][T26701]        try_to_wake_up+0xbd/0x1c90
[ 1261.557673][T26701]        __wake_up_common+0x135/0x1f0
[ 1261.557692][T26701]        __wake_up+0x31/0x60
[ 1261.557708][T26701]        tty_port_default_wakeup+0x47/0x60
[ 1261.557788][T26701]        serial8250_tx_chars+0x68f/0x860
[ 1261.557809][T26701]        serial8250_handle_irq_locked+0x770/0x9a0
[ 1261.557829][T26701]        serial8250_handle_irq.part.0+0xb4/0x530
[ 1261.557848][T26701]        serial8250_default_handle_irq+0xc2/0x280
[ 1261.557868][T26701]        serial8250_interrupt+0xf8/0x1b0
[ 1261.557880][T26701]        __handle_irq_event_percpu+0x232/0x880
[ 1261.557897][T26701]        handle_irq_event+0xab/0x1e0
[ 1261.557912][T26701]        handle_edge_irq+0x34c/0x950
[ 1261.557926][T26701]        __common_interrupt+0xd8/0x2f0
[ 1261.557940][T26701]        common_interrupt+0xb9/0xe0
[ 1261.557953][T26701]        asm_common_interrupt+0x26/0x40
[ 1261.557976][T26701]        pv_native_safe_halt+0xf/0x20
[ 1261.557993][T26701]        default_idle+0x9/0x10
[ 1261.558012][T26701]        default_idle_call+0x6c/0xb0
[ 1261.558031][T26701]        do_idle+0x3a7/0x5b0
[ 1261.558045][T26701]        cpu_startup_entry+0x4f/0x60
[ 1261.558059][T26701]        start_secondary+0x21d/0x2d0
[ 1261.558073][T26701]        common_startup_64+0x13e/0x158
[ 1261.558092][T26701] 
[ 1261.558092][T26701] -> #2 (&tty->write_wait){-...}-{3:3}:
[ 1261.558110][T26701]        lock_acquire+0x1b9/0x370
[ 1261.558130][T26701]        _raw_spin_lock_irqsave+0x3a/0x60
[ 1261.558146][T26701]        __wake_up+0x1c/0x60
[ 1261.558162][T26701]        tty_port_default_wakeup+0x47/0x60
[ 1261.558181][T26701]        serial8250_tx_chars+0x68f/0x860
[ 1261.558199][T26701]        serial8250_handle_irq_locked+0x770/0x9a0
[ 1261.558218][T26701]        serial8250_handle_irq.part.0+0xb4/0x530
[ 1261.558238][T26701]        serial8250_default_handle_irq+0xc2/0x280
[ 1261.558257][T26701]        serial8250_interrupt+0xf8/0x1b0
[ 1261.558269][T26701]        __handle_irq_event_percpu+0x232/0x880
[ 1261.558285][T26701]        handle_irq_event+0xab/0x1e0
[ 1261.558301][T26701]        handle_edge_irq+0x34c/0x950
[ 1261.558320][T26701]        __common_interrupt+0xd8/0x2f0
[ 1261.558333][T26701]        common_interrupt+0xb9/0xe0
[ 1261.558345][T26701]        asm_common_interrupt+0x26/0x40
[ 1261.558358][T26701]        pv_native_safe_halt+0xf/0x20
[ 1261.558375][T26701]        default_idle+0x9/0x10
[ 1261.558393][T26701]        default_idle_call+0x6c/0xb0
[ 1261.558412][T26701]        do_idle+0x3a7/0x5b0
[ 1261.558425][T26701]        cpu_startup_entry+0x4f/0x60
[ 1261.558439][T26701]        start_secondary+0x21d/0x2d0
[ 1261.558453][T26701]        common_startup_64+0x13e/0x158
[ 1261.558471][T26701] 
[ 1261.558471][T26701] -> #1 (&port_lock_key){-.-.}-{3:3}:
[ 1261.558489][T26701]        lock_acquire+0x1b9/0x370
[ 1261.558509][T26701]        _raw_spin_lock_irqsave+0x3a/0x60
[ 1261.558523][T26701]        serial8250_console_write+0x177/0x1a50
[ 1261.558544][T26701]        console_flush_one_record+0x790/0xe50
[ 1261.558561][T26701]        console_unlock+0x103/0x260
[ 1261.558576][T26701]        vprintk_emit+0x407/0x6b0
[ 1261.558591][T26701]        _printk+0xcf/0x110
[ 1261.558603][T26701]        register_console.cold+0xc0/0x248
[ 1261.558616][T26701]        univ8250_console_init+0x6f/0x80
[ 1261.558649][T26701]        console_init+0x3d5/0x5b0
[ 1261.558669][T26701]        start_kernel+0x314/0x490
[ 1261.558688][T26701]        x86_64_start_reservations+0x24/0x30
[ 1261.558709][T26701]        x86_64_start_kernel+0x12b/0x130
[ 1261.558728][T26701]        common_startup_64+0x13e/0x158
[ 1261.558746][T26701] 
[ 1261.558746][T26701] -> #0 (console_owner){-.-.}-{0:0}:
[ 1261.558764][T26701]        check_prev_add+0xeb/0xe60
[ 1261.558782][T26701]        __lock_acquire+0x136c/0x1a40
[ 1261.558802][T26701]        lock_acquire+0x1b9/0x370
[ 1261.558821][T26701]        console_lock_spinning_enable+0x72/0x80
[ 1261.558836][T26701]        console_flush_one_record+0x739/0xe50
[ 1261.558852][T26701]        console_unlock+0x103/0x260
[ 1261.558866][T26701]        vprintk_emit+0x407/0x6b0
[ 1261.558881][T26701]        _printk+0xcf/0x110
[ 1261.558893][T26701]        __report_bug.cold+0x34/0x141
[ 1261.558913][T26701]        report_bug+0xb2/0x220
[ 1261.558940][T26701]        handle_bug+0x16a/0x2a0
[ 1261.558961][T26701]        exc_invalid_op+0x17/0x50
[ 1261.558980][T26701]        asm_exc_invalid_op+0x1a/0x20
[ 1261.558993][T26701]        update_rq_clock+0x40a/0xd20
[ 1261.559008][T26701]        __schedule+0x1e2d/0x6730
[ 1261.559024][T26701]        schedule+0xdd/0x2c0
[ 1261.559038][T26701]        irqentry_exit+0x37f/0xa00
[ 1261.559055][T26701]        asm_sysvec_reschedule_ipi+0x1a/0x20
[ 1261.559070][T26701] 
[ 1261.559070][T26701] other info that might help us debug this:
[ 1261.559070][T26701] 
[ 1261.559074][T26701] Chain exists of:
[ 1261.559074][T26701]   console_owner --> &p->pi_lock --> &rq->__lock
[ 1261.559074][T26701] 
[ 1261.559094][T26701]  Possible unsafe locking scenario:
[ 1261.559094][T26701] 
[ 1261.559098][T26701]        CPU0                    CPU1
[ 1261.559102][T26701]        ----                    ----
[ 1261.559106][T26701]   lock(&rq->__lock);
[ 1261.559114][T26701]                                lock(&p->pi_lock);
[ 1261.559124][T26701]                                lock(&rq->__lock);
[ 1261.559133][T26701]   lock(console_owner);
[ 1261.559142][T26701] 
[ 1261.559142][T26701]  *** DEADLOCK ***
[ 1261.559142][T26701] 
[ 1261.559145][T26701] 3 locks held by syz.4.6256/26701:
[ 1261.559154][T26701]  #0: ffff88802b23b660 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140
[ 1261.559187][T26701]  #1: ffffffff8ebd43a0 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x110
[ 1261.559217][T26701]  #2: ffffffff8ebd4418 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfd/0xe50
[ 1261.559251][T26701] 
[ 1261.559251][T26701] stack backtrace:
[ 1261.559262][T26701] CPU: 0 UID: 0 PID: 26701 Comm: syz.4.6256 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1261.559283][T26701] Tainted: [L]=SOFTLOCKUP
[ 1261.559288][T26701] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1261.559298][T26701] Call Trace:
[ 1261.559304][T26701]  <TASK>
[ 1261.559316][T26701]  dump_stack_lvl+0x100/0x190
[ 1261.559332][T26701]  print_circular_bug.cold+0x178/0x1c7
[ 1261.559355][T26701]  check_noncircular+0x146/0x160
[ 1261.559377][T26701]  check_prev_add+0xeb/0xe60
[ 1261.559398][T26701]  __lock_acquire+0x136c/0x1a40
[ 1261.559422][T26701]  lock_acquire+0x1b9/0x370
[ 1261.559442][T26701]  ? console_lock_spinning_enable+0x61/0x80
[ 1261.559458][T26701]  ? console_lock_spinning_enable+0x4a/0x80
[ 1261.559476][T26701]  console_lock_spinning_enable+0x72/0x80
[ 1261.559492][T26701]  ? console_lock_spinning_enable+0x61/0x80
[ 1261.559507][T26701]  console_flush_one_record+0x739/0xe50
[ 1261.559525][T26701]  ? __pfx_console_flush_one_record+0x10/0x10
[ 1261.559544][T26701]  ? is_printk_cpu_sync_owner+0x32/0x40
[ 1261.559564][T26701]  console_unlock+0x103/0x260
[ 1261.559579][T26701]  ? __pfx_console_unlock+0x10/0x10
[ 1261.559596][T26701]  ? do_raw_spin_unlock+0x145/0x1e0
[ 1261.559612][T26701]  ? _printk+0xcf/0x110
[ 1261.559626][T26701]  vprintk_emit+0x407/0x6b0
[ 1261.559643][T26701]  ? __pfx_vprintk_emit+0x10/0x10
[ 1261.559661][T26701]  _printk+0xcf/0x110
[ 1261.559674][T26701]  ? __pfx__printk+0x10/0x10
[ 1261.559687][T26701]  ? timerqueue_linked_add+0x260/0x430
[ 1261.559703][T26701]  ? __report_bug.cold+0x24/0x141
[ 1261.559717][T26701]  ? __report_bug+0x2ab/0x440
[ 1261.559735][T26701]  __report_bug.cold+0x34/0x141
[ 1261.559748][T26701]  ? update_rq_clock+0x40a/0xd20
[ 1261.559763][T26701]  ? __pfx___report_bug+0x10/0x10
[ 1261.559781][T26701]  ? rcu_is_watching+0x12/0xc0
[ 1261.559798][T26701]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1261.559816][T26701]  ? lockdep_hardirqs_on+0x78/0x100
[ 1261.559834][T26701]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1261.559853][T26701]  ? update_rq_clock+0x40a/0xd20
[ 1261.559867][T26701]  report_bug+0xb2/0x220
[ 1261.559885][T26701]  ? update_rq_clock+0x40a/0xd20
[ 1261.559900][T26701]  handle_bug+0x16a/0x2a0
[ 1261.559920][T26701]  exc_invalid_op+0x17/0x50
[ 1261.559941][T26701]  asm_exc_invalid_op+0x1a/0x20
[ 1261.559954][T26701] RIP: 0010:update_rq_clock+0x40a/0xd20
[ 1261.559971][T26701] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 58 60 e5 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00
[ 1261.559985][T26701] RSP: 0000:ffffc9000368fd28 EFLAGS: 00010046
[ 1261.559997][T26701] RAX: 0000000000000000 RBX: ffff88802b33b600 RCX: 0000000000000001
[ 1261.560006][T26701] RDX: 0000000000000046 RSI: ffffffff8e17c819 RDI: ffffffff8c3fe580
[ 1261.560015][T26701] RBP: ffffc9000368fed0 R08: 0000000000000001 R09: 0000000000000001
[ 1261.560024][T26701] R10: ffffffff9121b7d7 R11: 0000000000000000 R12: ffffffff9121eb84
[ 1261.560033][T26701] R13: ffff88802b33c4e0 R14: ffff88801c744a80 R15: ffff88802b23c198
[ 1261.560046][T26701]  ? update_rq_clock+0x9c/0xd20
[ 1261.560063][T26701]  __schedule+0x1e2d/0x6730
[ 1261.560083][T26701]  ? __pfx___schedule+0x10/0x10
[ 1261.560127][T26701]  ? preempt_schedule_notrace_thunk+0x16/0x30
[ 1261.560151][T26701]  ? trace_irq_enable.constprop.0+0x2f/0x160
[ 1261.560167][T26701]  schedule+0xdd/0x2c0
[ 1261.560183][T26701]  irqentry_exit+0x37f/0xa00
[ 1261.560203][T26701]  asm_sysvec_reschedule_ipi+0x1a/0x20
[ 1261.560217][T26701] RIP: 0023:0xf70db3d8
[ 1261.560230][T26701] Code: d8 72 ef 39 54 24 08 73 39 8b 44 24 08 8b 4c 24 10 89 58 04 8b 5c 24 14 83 c0 08 89 70 f8 89 0a 89 7a 04 8b 38 8b 0b 8b 6b 04 <89> d3 89 7c 24 10 8b 78 04 89 44 24 08 e9 66 ff ff ff 8d b6 00 00
[ 1261.560243][T26701] RSP: 002b:00000000ffbabde0 EFLAGS: 00000292
[ 1261.560255][T26701] RAX: 00000000f6cd4680 RBX: 00000000f6cd45e0 RCX: 0000000081fd1ebc
[ 1261.560263][T26701] RDX: 00000000f6cd4740 RSI: 0000000081fd1ebc RDI: 0000000081fd1ebc
[ 1261.560272][T26701] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000
[ 1261.560280][T26701] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[ 1261.560289][T26701] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1261.560302][T26701]  </TASK>
[ 1261.913660][T26701] debug_locks && !(lock_is_held(&(__rq_lockp(rq))->dep_map) != 0)
[ 1261.913673][T26701] WARNING: kernel/sched/sched.h:1641 at update_rq_clock+0x40a/0xd20, CPU#0: syz.4.6256/26701
[ 1261.919343][T26701] Modules linked in:
[ 1261.920604][T26701] CPU: 0 UID: 0 PID: 26701 Comm: syz.4.6256 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1261.923989][T26701] Tainted: [L]=SOFTLOCKUP
[ 1261.925343][T26701] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1261.928401][T26701] RIP: 0010:update_rq_clock+0x40a/0xd20
[ 1261.930125][T26701] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 58 60 e5 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00
[ 1261.936061][T26701] RSP: 0000:ffffc9000368fd28 EFLAGS: 00010046
[ 1261.937956][T26701] RAX: 0000000000000000 RBX: ffff88802b33b600 RCX: 0000000000000001
[ 1261.940405][T26701] RDX: 0000000000000046 RSI: ffffffff8e17c819 RDI: ffffffff8c3fe580
[ 1261.942873][T26701] RBP: ffffc9000368fed0 R08: 0000000000000001 R09: 0000000000000001
[ 1261.945309][T26701] R10: ffffffff9121b7d7 R11: 0000000000000000 R12: ffffffff9121eb84
[ 1261.947753][T26701] R13: ffff88802b33c4e0 R14: ffff88801c744a80 R15: ffff88802b23c198
[ 1261.950198][T26701] FS:  0000000000000000(0000) GS:ffff888096bf4000(0063) knlGS:0000000057b18480
[ 1261.952979][T26701] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[ 1261.955003][T26701] CR2: 00000000f5464ff4 CR3: 000000005a294000 CR4: 0000000000352ef0
[ 1261.957465][T26701] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1261.959905][T26701] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1261.962397][T26701] Call Trace:
[ 1261.963457][T26701]  <TASK>
[ 1261.964398][T26701]  __schedule+0x1e2d/0x6730
[ 1261.965843][T26701]  ? __pfx___schedule+0x10/0x10
[ 1261.967363][T26701]  ? preempt_schedule_notrace_thunk+0x16/0x30
[ 1261.969299][T26701]  ? trace_irq_enable.constprop.0+0x2f/0x160
[ 1261.971165][T26701]  schedule+0xdd/0x2c0
[ 1261.972471][T26701]  irqentry_exit+0x37f/0xa00
[ 1261.973925][T26701]  asm_sysvec_reschedule_ipi+0x1a/0x20
[ 1261.975619][T26701] RIP: 0023:0xf70db3d8
[ 1261.976906][T26701] Code: d8 72 ef 39 54 24 08 73 39 8b 44 24 08 8b 4c 24 10 89 58 04 8b 5c 24 14 83 c0 08 89 70 f8 89 0a 89 7a 04 8b 38 8b 0b 8b 6b 04 <89> d3 89 7c 24 10 8b 78 04 89 44 24 08 e9 66 ff ff ff 8d b6 00 00
[ 1261.982791][T26701] RSP: 002b:00000000ffbabde0 EFLAGS: 00000292
[ 1261.984694][T26701] RAX: 00000000f6cd4680 RBX: 00000000f6cd45e0 RCX: 0000000081fd1ebc
[ 1261.987135][T26701] RDX: 00000000f6cd4740 RSI: 0000000081fd1ebc RDI: 0000000081fd1ebc
[ 1261.989591][T26701] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000
[ 1261.992031][T26701] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[ 1261.994523][T26701] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1261.996959][T26701]  </TASK>
[ 1261.997944][T26701] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1262.000201][T26701] CPU: 0 UID: 0 PID: 26701 Comm: syz.4.6256 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1262.003592][T26701] Tainted: [L]=SOFTLOCKUP
[ 1262.004955][T26701] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 1262.008048][T26701] Call Trace:
[ 1262.009109][T26701]  <TASK>
[ 1262.010044][T26701]  dump_stack_lvl+0x100/0x190
[ 1262.011522][T26701]  vpanic+0x552/0x970
[ 1262.012807][T26701]  ? __pfx_vpanic+0x10/0x10
[ 1262.014233][T26701]  ? lock_release+0x24d/0x310
[ 1262.015715][T26701]  panic+0xd1/0xe0
[ 1262.016904][T26701]  ? __pfx_panic+0x10/0x10
[ 1262.018305][T26701]  ? check_panic_on_warn+0x1f/0x90
[ 1262.019906][T26701]  check_panic_on_warn.cold+0x19/0x34
[ 1262.021582][T26701]  ? update_rq_clock+0x40a/0xd20
[ 1262.023164][T26701]  __warn.cold+0x191/0x318
[ 1262.024571][T26701]  __report_bug+0x30f/0x440
[ 1262.025999][T26701]  ? update_rq_clock+0x40a/0xd20
[ 1262.027605][T26701]  ? __pfx___report_bug+0x10/0x10
[ 1262.029261][T26701]  ? rcu_is_watching+0x12/0xc0
[ 1262.030766][T26701]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1262.032615][T26701]  ? lockdep_hardirqs_on+0x78/0x100
[ 1262.034241][T26701]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1262.036067][T26701]  ? update_rq_clock+0x40a/0xd20
[ 1262.037613][T26701]  report_bug+0xb2/0x220
[ 1262.038985][T26701]  ? update_rq_clock+0x40a/0xd20
[ 1262.040550][T26701]  handle_bug+0x16a/0x2a0
[ 1262.041904][T26701]  exc_invalid_op+0x17/0x50
[ 1262.043347][T26701]  asm_exc_invalid_op+0x1a/0x20
[ 1262.044852][T26701] RIP: 0010:update_rq_clock+0x40a/0xd20
[ 1262.046567][T26701] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 58 60 e5 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00
[ 1262.052484][T26701] RSP: 0000:ffffc9000368fd28 EFLAGS: 00010046
[ 1262.054364][T26701] RAX: 0000000000000000 RBX: ffff88802b33b600 RCX: 0000000000000001
[ 1262.056808][T26701] RDX: 0000000000000046 RSI: ffffffff8e17c819 RDI: ffffffff8c3fe580
[ 1262.059234][T26701] RBP: ffffc9000368fed0 R08: 0000000000000001 R09: 0000000000000001
[ 1262.061681][T26701] R10: ffffffff9121b7d7 R11: 0000000000000000 R12: ffffffff9121eb84
[ 1262.064170][T26701] R13: ffff88802b33c4e0 R14: ffff88801c744a80 R15: ffff88802b23c198
[ 1262.066624][T26701]  ? update_rq_clock+0x9c/0xd20
[ 1262.068154][T26701]  __schedule+0x1e2d/0x6730
[ 1262.069584][T26701]  ? __pfx___schedule+0x10/0x10
[ 1262.071108][T26701]  ? preempt_schedule_notrace_thunk+0x16/0x30
[ 1262.073047][T26701]  ? trace_irq_enable.constprop.0+0x2f/0x160
[ 1262.074906][T26701]  schedule+0xdd/0x2c0
[ 1262.076198][T26701]  irqentry_exit+0x37f/0xa00
[ 1262.077642][T26701]  asm_sysvec_reschedule_ipi+0x1a/0x20
[ 1262.079332][T26701] RIP: 0023:0xf70db3d8
[ 1262.080621][T26701] Code: d8 72 ef 39 54 24 08 73 39 8b 44 24 08 8b 4c 24 10 89 58 04 8b 5c 24 14 83 c0 08 89 70 f8 89 0a 89 7a 04 8b 38 8b 0b 8b 6b 04 <89> d3 89 7c 24 10 8b 78 04 89 44 24 08 e9 66 ff ff ff 8d b6 00 00
[ 1262.086561][T26701] RSP: 002b:00000000ffbabde0 EFLAGS: 00000292
[ 1262.088471][T26701] RAX: 00000000f6cd4680 RBX: 00000000f6cd45e0 RCX: 0000000081fd1ebc
[ 1262.090905][T26701] RDX: 00000000f6cd4740 RSI: 0000000081fd1ebc RDI: 0000000081fd1ebc
[ 1262.093363][T26701] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000
[ 1262.095801][T26701] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[ 1262.098252][T26701] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1262.100632][T26701]  </TASK>
[ 1263.179528][T26701] Shutting down cpus with NMI
[ 1263.181704][T26701] Kernel Offset: disabled
[ 1263.183113][T26701] Rebooting in 86400 seconds..