last executing test programs: 7m18.77054004s ago: executing program 1 (id=401): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x3c, r0, 0x801, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2040005}, 0x0) 7m18.449740241s ago: executing program 1 (id=404): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000400)=""/236, 0x46, 0xec, 0x6}, 0x28) 7m18.360491925s ago: executing program 3 (id=405): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000206050400000000000000000a00000005000100070000000900020073797a30000000000d000300686173683a6e6574000000000500040000000000050005000a"], 0x48}}, 0x0) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)={0x2c, 0xa, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) 7m18.305896767s ago: executing program 1 (id=406): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, 0x0}, 0xa2a}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x4, 0x84) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x10, r2, 0x9b2cb000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000005c0)={0x0, 0x8, 0x7, 0x9, 0x40, 0x72f, 0x3, 0x40000000, {0x0, @in6={{0xa, 0x4e21, 0x4, @mcast2, 0xfff}}, 0x8, 0x10000, 0xb20b, 0xfffffbff, 0x4}}, 0x0) syz_emit_ethernet(0x288, &(0x7f00000033c0)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x6, 0x6, "f52b50", 0x252, 0x11, 0x0, @private1, @mcast1, {[@hopopts={0x2c, 0x8, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @pad1, @calipso={0x7, 0x38, {0x1, 0xc, 0x2, 0x832, [0x3, 0x6, 0x8, 0x567, 0x101853b5, 0x100000001]}}, @pad1]}, @srh={0x1d, 0x6, 0x4, 0x3, 0x6, 0x38, 0xc, [@private0, @private0, @ipv4={'\x00', '\xff\xff', @multicast1}]}, @srh={0x3c, 0xe, 0x4, 0x7, 0xa, 0x8, 0xf3a0, [@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @loopback}, @empty, @local, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @mcast1]}, @hopopts={0x16, 0x1e, '\x00', [@ra={0x5, 0x2, 0x6}, @enc_lim={0x4, 0x1, 0x5}, @generic={0x3, 0xba, "78446994713057280151c7632522c51d9dd9c38fd780ebb505601887c8dc64ad191a00eb61a00f96885bf5de401c1dfdd1ca71f07c688f8b225027f6d447545ae8ce650ff537b86b1102f1e7ab3e429b20c4b088efccdfe79e009e61b746de64fea6592045a7433a7598715b514bbc232826df7fcfff6fa3e3ebdd90376ebadf017d419fb43646fb6784ce8543b518cb5f72ba33e46f37f0f7da7e90408fb451963a32480611961b0f25708d9042f1f5387293b41943c2d548a1"}, @hao={0xc9, 0x10, @private0}, @enc_lim={0x4, 0x1, 0x3}, @calipso={0x7, 0x18, {0x0, 0x4, 0x3, 0x9, [0x100, 0x2]}}]}], {0x4e22, 0x4e24, 0x52, 0x0, @opaque="fc473f91ed275b78fbb4013ef173bf506640e6fb7c8f6295c334e38fa2d7d0b6c57aee9c1a1a9cc3ae93931823e0f37da345e011188998151bfbc24252f1e466129d28000ed97a782f1c"}}}}}}, &(0x7f0000004780)={0x1, 0x2, [0x58f, 0x742, 0x6db, 0x209]}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x430, 0x130, 0x130, 0x98, 0x130, 0x98, 0x398, 0x398, 0x398, 0x398, 0x398, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0xff, 'macvlan0\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x2, 0x71}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x23}, 0x0, 0xffffffff, 'vlan1\x00', 'nr0\x00', {0xff}}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6tnl0\x00', {0x42, 0x21800000, 0x7fff, 0x1, 0x0, 0x0, 0x101, 0x78, 0x40}, {0x8001}}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x11}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xc, 0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a31000000000500010007000000"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 7m18.099550656s ago: executing program 3 (id=408): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000300)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5) socket$inet6_sctp(0xa, 0x1, 0x84) 7m16.892602081s ago: executing program 1 (id=412): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000003340)=[{{&(0x7f00000003c0)={0xa, 0x4e22, 0x7fff, @loopback, 0x5}, 0x1c, &(0x7f0000001b00)=[{&(0x7f0000001a80)='g', 0x1}], 0x1}}, {{&(0x7f0000001bc0)={0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000001c00)="1b", 0x1}], 0x1}}], 0x2, 0x40) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000300)='.', 0x1}], 0x1) 7m16.47731294s ago: executing program 2 (id=413): migrate_pages(0x0, 0x6fb8, 0x0, &(0x7f0000000300)=0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80000) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='\v', 0x1, 0x200408c4, 0x0, 0x0) 7m16.136380054s ago: executing program 3 (id=414): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x44004) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 7m16.048937196s ago: executing program 1 (id=415): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(0x0, r0) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x14, r1, 0x3d810686a7d95765, 0x70bd2a, 0x25dbdbf9}, 0x14}, 0x1, 0x0, 0x0, 0x40488d1}, 0x0) 7m15.555331367s ago: executing program 2 (id=416): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000400)=""/236, 0x46, 0xec, 0x6}, 0x28) 7m15.554147875s ago: executing program 3 (id=417): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0xa, 0x4e23, 0x180000, @local, 0xffffffff}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000"], 0x18}, 0x30000004) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xfff3}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xfff2, 0x7}}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 7m15.553771385s ago: executing program 1 (id=418): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)="89e7ee0c7cd338e1897380c988cafb", 0xf}, {&(0x7f0000000440)="448b7c0acf8bc0cefe833487be07", 0xe}, {&(0x7f0000000500)="376003dcb73e81b084f12c639db12908bded62e2dd4ae60ca712edc1460b", 0x1e}], 0x3) 7m15.552538249s ago: executing program 2 (id=420): setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0xa}, &(0x7f0000000140)=0x8) 7m15.498754575s ago: executing program 2 (id=421): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) 7m15.306543703s ago: executing program 2 (id=423): ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write(r0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}, 0x0) 7m15.188564874s ago: executing program 2 (id=424): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="7c01000013000101000000000000000064010102000000000000000000000000640101020000000000000000000000000100000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"/292], 0x17c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 7m14.355662592s ago: executing program 3 (id=427): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000001e00)={0x20, 0x2, 0x2, 0x5, 0x0, 0x0, {0xa}, [@CTA_EXPECT_HELP_NAME={0xa, 0x6, 'Q.931\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 7m14.197875818s ago: executing program 3 (id=430): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0108000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0xccd21cca, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) getpeername(r2, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h'], 0x68}, 0x9}, 0x0) 7m0.493305981s ago: executing program 32 (id=418): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)="89e7ee0c7cd338e1897380c988cafb", 0xf}, {&(0x7f0000000440)="448b7c0acf8bc0cefe833487be07", 0xe}, {&(0x7f0000000500)="376003dcb73e81b084f12c639db12908bded62e2dd4ae60ca712edc1460b", 0x1e}], 0x3) 7m0.0112052s ago: executing program 33 (id=424): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="7c01000013000101000000000000000064010102000000000000000000000000640101020000000000000000000000000100000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"/292], 0x17c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 6m58.475291706s ago: executing program 34 (id=430): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0108000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0xccd21cca, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) getpeername(r2, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h'], 0x68}, 0x9}, 0x0) 1m51.706070868s ago: executing program 7 (id=1298): prctl$PR_SET_MM(0x23, 0xb, &(0x7f00002d5000/0x2000)=nil) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$vicodec0(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000180)={{0x87, @remote, 0x4e24, 0x3, 'rr\x00', 0x1b, 0x1, 0x5f}, {@multicast1, 0x4e23, 0x1, 0x5, 0x3, 0x8}}, 0x44) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r1, 0x379c5000) r2 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r2, 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f00000002c0)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0xd}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) clock_nanosleep(0x2, 0x0, 0x0, 0xfffffffffffffffe) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007cc0)=[{{0x0, 0x0, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x4008050}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000010}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10008000}}], 0x4, 0x1) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x2, 0x86, 0x2}) 1m47.819491466s ago: executing program 7 (id=1300): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[], 0x48) socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e24, 0x2, @empty, 0x4}, 0x1c) sendto$inet6(r3, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) sched_getscheduler(r0) 1m44.503045015s ago: executing program 7 (id=1302): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000940)="350ed1871726b5ad4f44da88d4e6d6b1f17217c38a3418909a508cec60ec73e2ab286245ded56fd4bb93db8cef041ac8901cf7fa0171bc6c8778368c89776f4a0bb5446d423e805f9626dfd56a936915f5b671523b633ec3be455e31904a4d4bf66fe47a151ac5d3f27e6652cade7078194ce7dcdf18081557b930dcbcd11dddb73025102dca2baef0fb96fc6ce652ec419dbf21c2f339f1565073f97d7839dffd2ab6c5165a0c19268fd0339ea230703346ddf0c71ca2112ecbb107ab6c5fe95fa98a5b8a", 0xc5}], 0x1}}], 0x1, 0x20002090) sendto$inet(r0, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) 1m43.436178751s ago: executing program 7 (id=1306): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={0x70, 0x0, 0x80000}, 0x20) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x454a83, 0x5c, 0x8}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001000000"], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000200c8000000"], 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000110001000300000000000000000000006400000000000000"], 0x20}}, 0x0) 1m33.177750401s ago: executing program 7 (id=1308): prctl$PR_SET_MM(0x23, 0xb, &(0x7f00002d5000/0x2000)=nil) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$vicodec0(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000180)={{0x87, @remote, 0x4e24, 0x3, 'rr\x00', 0x1b, 0x1, 0x5f}, {@multicast1, 0x4e23, 0x1, 0x5, 0x3, 0x8}}, 0x44) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r1, 0x379c5000) r2 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r2, 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f00000002c0)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0xd}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) clock_nanosleep(0x2, 0x0, 0x0, 0xfffffffffffffffe) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007cc0)=[{{0x0, 0x0, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x4008050}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000010}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10008000}}], 0x4, 0x1) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x2, 0x86, 0x2}) 1m30.353827426s ago: executing program 7 (id=1312): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c000180"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x1c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TIMEOUT={0x8}]}, 0x1c}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x3, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m13.966133243s ago: executing program 35 (id=1312): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c000180"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x1c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TIMEOUT={0x8}]}, 0x1c}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x3, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m1.914640533s ago: executing program 4 (id=1340): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0xc058) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x6, @mcast2, 0x6}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) 58.770443559s ago: executing program 4 (id=1341): r0 = socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000a0)) r1 = socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r2, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 48.681611615s ago: executing program 4 (id=1344): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0xffffffff) 42.442122745s ago: executing program 4 (id=1345): syz_usb_connect(0x0, 0x2b, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) 41.180498195s ago: executing program 4 (id=1346): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000440)={0x1c, &(0x7f0000000380)={0x20, 0xe}, 0x0, 0x0}) 36.086751096s ago: executing program 4 (id=1349): syz_open_dev$tty1(0xc, 0x4, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) socket(0x10, 0x3, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYRES32=r0]) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x4058040, &(0x7f0000000500)={0x11, 0x1, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 32.569971475s ago: executing program 0 (id=1350): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x75, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000001080)="f43945ca98acb8a9b3ee48f6f16a864918caf5375823337eb7c72fc5b6b5161a2ce6e88a00a5000000000000004b1b3cdcb28fd85496523b195bda9430cfbcad76b5cee9b66a06ef4297ec9f702ab73353ba1b855ee0a82dce61ad54871cbe6d457fc54dfcffffff95318b02fd4a21807e0fd41f3ec3516fc52943fe9eebdfa052e8c6d0eccc7c6c63fddaf55802b9761767841feb96e012de72eb4e74ae565ab68b45000eebfe7585c156ceb22b76886b5ca630032da03f45562116ba97363da2fabe3dc0918799e023d788e86530343d8b15e5d5816f1411d3b215910bb77787cbcee78413c9ccc1d3e03f6a55fb84b0014539bcff9e7c2c7bc01b", 0xfc, 0x0, 0x0, 0x0) close(0x3) 31.129144208s ago: executing program 0 (id=1351): r0 = socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000a0)) r1 = socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r2, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 30.23009851s ago: executing program 0 (id=1352): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0xffffffff) 22.755425305s ago: executing program 0 (id=1353): syz_usb_connect(0x0, 0x2b, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) 20.943329956s ago: executing program 36 (id=1349): syz_open_dev$tty1(0xc, 0x4, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) socket(0x10, 0x3, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYRES32=r0]) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x4058040, &(0x7f0000000500)={0x11, 0x1, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 20.786861175s ago: executing program 0 (id=1355): openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, &(0x7f00000001c0)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') accept4(r2, 0x0, 0x0, 0x80000) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}}) 15.749912832s ago: executing program 0 (id=1356): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="035a02003537a940280012800b00010065727370616e000018000280060010004e210000050016000200"], 0x48}, 0x1, 0x0, 0x0, 0x4000015}, 0x60) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x10270000}]}}]}, 0x48}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x80c0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r4, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a00000000040000020000000200000000000000010000000000000000000000000000000000000000000000000000000201000000") ioctl(r4, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006") ioctl(r4, 0x400c0930, 0x0) ioctl(r4, 0x933, &(0x7f0000000440)="02") ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f00000001c0)) 0s ago: executing program 37 (id=1356): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="035a02003537a940280012800b00010065727370616e000018000280060010004e210000050016000200"], 0x48}, 0x1, 0x0, 0x0, 0x4000015}, 0x60) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x10270000}]}}]}, 0x48}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x80c0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r4, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a00000000040000020000000200000000000000010000000000000000000000000000000000000000000000000000000201000000") ioctl(r4, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006") ioctl(r4, 0x400c0930, 0x0) ioctl(r4, 0x933, &(0x7f0000000440)="02") ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f00000001c0)) kernel console output (not intermixed with test programs): ock(): Magic bitmask 0x1985 not found at 0x00012024: 0xec5d instead [ 373.313968][ T9433] jffs2: Further such events for this erase block will not be printed [ 373.314340][ T9433] jffs2: Old JFFS2 bitmask found at 0x0001221c [ 373.314373][ T9433] jffs2: You cannot use older JFFS2 filesystems with newer kernels [ 373.316657][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x00c0 instead [ 373.316702][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x97eb instead [ 373.316739][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013008: 0x2ef0 instead [ 373.316782][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001300c: 0xa119 instead [ 373.316820][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013010: 0x79c8 instead [ 373.316858][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013014: 0x78c1 instead [ 373.316896][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x0378 instead [ 373.316933][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001301c: 0x8624 instead [ 373.316971][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013020: 0x1ca6 instead [ 373.317009][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013024: 0x2072 instead [ 373.317046][ T9433] jffs2: Further such events for this erase block will not be printed [ 373.319194][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0xe7d0 instead [ 373.319235][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x5fae instead [ 373.319280][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014008: 0x3132 instead [ 373.319318][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001400c: 0xdcfd instead [ 373.319356][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014010: 0x0447 instead [ 373.319398][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014014: 0xb18e instead [ 373.319437][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xc84d instead [ 373.319475][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001401c: 0x347e instead [ 373.319513][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014020: 0x2ff4 instead [ 373.319551][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014024: 0xd911 instead [ 373.319589][ T9433] jffs2: Further such events for this erase block will not be printed [ 373.322066][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x97ed instead [ 373.322106][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x9844 instead [ 373.322144][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015008: 0x0568 instead [ 373.322181][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001500c: 0x71f0 instead [ 373.322219][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015010: 0x6d8b instead [ 373.322257][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015014: 0xd88d instead [ 373.322302][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x17ef instead [ 373.322340][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001501c: 0x6bda instead [ 373.322378][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015020: 0x5b1d instead [ 373.322416][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015024: 0x6d93 instead [ 373.322453][ T9433] jffs2: Further such events for this erase block will not be printed [ 373.325111][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0xbdb2 instead [ 373.325151][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0xf6a3 instead [ 373.325190][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016008: 0xd4b2 instead [ 373.325227][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001600c: 0xac9e instead [ 373.325270][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016010: 0x4b56 instead [ 373.325308][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016014: 0x8ca3 instead [ 373.325346][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x6ebd instead [ 373.325384][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001601c: 0xbbf0 instead [ 373.325422][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016020: 0x53da instead [ 373.325460][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016024: 0x517a instead [ 373.325497][ T9433] jffs2: Further such events for this erase block will not be printed [ 373.328006][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0xa893 instead [ 373.328045][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0xae2a instead [ 373.328083][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017008: 0x5690 instead [ 373.328121][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001700c: 0xd92c instead [ 373.328159][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017010: 0xa15b instead [ 373.328197][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017014: 0xbe2f instead [ 373.328235][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xbb04 instead [ 373.328280][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001701c: 0x7931 instead [ 373.328318][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017020: 0xc437 instead [ 373.328356][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017024: 0x58f0 instead [ 373.328394][ T9433] jffs2: Further such events for this erase block will not be printed [ 373.330546][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x9531 instead [ 373.330586][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0xd9a6 instead [ 373.330624][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018008: 0xb8fb instead [ 373.330662][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001800c: 0x5585 instead [ 373.330699][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018010: 0x24be instead [ 373.330737][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018014: 0x10ce instead [ 373.330773][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xd5ea instead [ 373.330810][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001801c: 0x0975 instead [ 373.330848][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018020: 0x5a0e instead [ 373.330886][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018024: 0x199f instead [ 373.330923][ T9433] jffs2: Further such events for this erase block will not be printed [ 373.333441][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x7b85 instead [ 373.333480][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0xf227 instead [ 373.333518][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019008: 0x2007 instead [ 373.333560][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001900c: 0x526d instead [ 373.333598][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019010: 0x886c instead [ 373.333636][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019014: 0x1cb8 instead [ 373.333674][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xc94b instead [ 373.333712][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001901c: 0xfacc instead [ 373.333750][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019020: 0xa037 instead [ 373.333787][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019024: 0x3821 instead [ 373.333825][ T9433] jffs2: Further such events for this erase block will not be printed [ 373.336422][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x7045 instead [ 373.336461][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x6d31 instead [ 373.336507][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a008: 0xbbf3 instead [ 373.336545][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a00c: 0x7ec1 instead [ 373.336587][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a010: 0x88cb instead [ 373.336625][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a014: 0xe949 instead [ 373.336663][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xc6cb instead [ 373.336701][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a01c: 0x91a8 instead [ 373.336744][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a020: 0x0a86 instead [ 373.336782][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a024: 0xd1b3 instead [ 373.336819][ T9433] jffs2: Further such events for this erase block will not be printed [ 373.339387][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x8022 instead [ 373.339426][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x60cc instead [ 373.339463][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b008: 0x1e5d instead [ 373.339502][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b00c: 0xe2ec instead [ 373.339539][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b010: 0xc812 instead [ 373.339577][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b014: 0xba66 instead [ 373.339615][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x92b3 instead [ 373.339653][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b01c: 0xd8f8 instead [ 373.339691][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b020: 0x17c4 instead [ 373.339729][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b024: 0xfff5 instead [ 373.339766][ T9433] jffs2: Further such events for this erase block will not be printed [ 373.347662][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0xbb50 instead [ 373.347741][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0xe254 instead [ 373.347788][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c008: 0x5882 instead [ 373.347826][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c00c: 0xe6ad instead [ 373.347864][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c010: 0x7202 instead [ 373.347901][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c014: 0x2092 instead [ 373.347939][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xafa1 instead [ 373.347977][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c01c: 0x0b2f instead [ 373.348015][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c020: 0xdbbc instead [ 373.348053][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c024: 0xcdbc instead [ 373.348090][ T9433] jffs2: Further such events for this erase block will not be printed [ 373.350624][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x1dcf instead [ 373.350663][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x6b2a instead [ 373.350701][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d008: 0xff81 instead [ 373.350739][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d00c: 0x68db instead [ 373.350776][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d010: 0xad02 instead [ 373.350814][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d014: 0x5dc8 instead [ 373.350852][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xe096 instead [ 373.350890][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d01c: 0xb56a instead [ 373.350928][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d020: 0xcd46 instead [ 373.350966][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d024: 0xa7ca instead [ 373.351003][ T9433] jffs2: Further such events for this erase block will not be printed [ 373.353382][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x269c instead [ 373.353421][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0ed2 instead [ 373.353459][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e008: 0x4fbf instead [ 373.353497][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e00c: 0x4a9b instead [ 373.353535][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e010: 0x5ca4 instead [ 373.353573][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e014: 0xe916 instead [ 373.353610][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xdba6 instead [ 373.353648][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e01c: 0x6ce1 instead [ 373.353686][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e020: 0xe4fa instead [ 373.353724][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e024: 0xc159 instead [ 373.353761][ T9433] jffs2: Further such events for this erase block will not be printed [ 373.356284][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0xb2ff instead [ 373.356324][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0xe019 instead [ 373.356362][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f008: 0x45e9 instead [ 373.356400][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f00c: 0x3e54 instead [ 373.356438][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f010: 0x3700 instead [ 373.356475][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f014: 0x4c9a instead [ 373.356513][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x6d39 instead [ 373.356551][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f01c: 0xe357 instead [ 373.356629][ T9433] jffs2: jffs2_scan_eraseblock(): Node at 0x0001f020 {0x1985, 0xba8f, 0xe72785c1) has invalid CRC 0x050e78a9 (calculated 0x91a871ad) [ 373.356675][ T9433] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f024: 0x85c1 instead [ 373.356713][ T9433] jffs2: Further such events for this erase block will not be printed [ 373.359068][ T9433] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 373.359100][ T9433] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 374.384077][ T31] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 374.914197][ T31] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 374.925699][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.925744][ T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.634258][ T31] usb 8-1: config 0 descriptor?? [ 376.639279][ T31] usb 8-1: can't set config #0, error -71 [ 377.164287][ T31] usb 8-1: USB disconnect, device number 13 [ 378.127868][ T9475] netlink: 'syz.7.917': attribute type 4 has an invalid length. [ 378.400868][ T9484] tipc: Started in network mode [ 378.406979][ T9484] tipc: Node identity 7a2a1822ad67, cluster identity 4711 [ 378.407158][ T9484] tipc: Enabled bearer , priority 0 [ 378.410934][ T9484] syzkaller0: entered promiscuous mode [ 378.410957][ T9484] syzkaller0: entered allmulticast mode [ 378.645562][ T9484] tipc: Resetting bearer [ 378.734688][ T5741] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 378.758283][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.818572][ T9482] tipc: Resetting bearer [ 378.895165][ T5741] usb 5-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 378.896805][ T5741] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.028045][ T9482] tipc: Disabling bearer [ 379.461645][ T9499] syzkaller0: entered promiscuous mode [ 379.472024][ T9499] syzkaller0: entered allmulticast mode [ 379.664143][ T5591] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 379.824100][ T5591] usb 8-1: Using ep0 maxpacket: 32 [ 379.831396][ T5591] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 379.832852][ T5591] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 379.832876][ T5591] usb 8-1: config 0 has no interface number 0 [ 379.832913][ T5591] usb 8-1: config 0 interface 184 has no altsetting 0 [ 379.866236][ T5591] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.866301][ T5591] usb 8-1: Product: syz [ 379.866316][ T5591] usb 8-1: Manufacturer: syz [ 379.866328][ T5591] usb 8-1: SerialNumber: syz [ 379.878236][ T5591] usb 8-1: config 0 descriptor?? [ 379.958684][ T5741] usb 5-1: NFC: Unable to get FW version [ 380.005767][ T5741] pn533_usb 5-1:1.0: probe with driver pn533_usb failed with error -71 [ 380.055934][ T5741] usb 5-1: USB disconnect, device number 21 [ 380.272875][ T8822] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 380.474670][ T8822] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 380.527767][ T8822] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 380.759132][ T8822] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 380.785137][ T8822] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 380.916575][ T8822] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 380.926794][ T8822] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 380.937745][ T5591] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 380.937825][ T5591] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 381.009117][ T5591] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 381.009200][ T5591] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 381.009218][ T5591] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 381.009234][ T5591] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 381.009487][ T5591] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71 [ 381.058230][ T8822] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 381.166081][ T5591] usb 8-1: USB disconnect, device number 14 [ 382.083409][ T8829] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 382.168206][ T8829] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 382.190179][ T9552] syzkaller0: entered promiscuous mode [ 382.190243][ T9552] syzkaller0: entered allmulticast mode [ 382.262719][ T5607] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 382.308203][ T5607] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 382.325802][ T5607] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 382.340940][ T5607] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 382.341927][ T5607] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 382.624493][ T8829] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 382.663518][ T8829] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 382.682492][ T8829] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 382.789664][ T8829] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 383.227735][ T8829] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 383.280084][ T8829] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 383.364354][ T5591] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 383.559602][ T5591] usb 8-1: Using ep0 maxpacket: 8 [ 383.570198][ T5591] usb 8-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 383.574731][ T5591] usb 8-1: config index 0 descriptor too short (expected 6427, got 27) [ 383.574758][ T5591] usb 8-1: config 0 has an invalid interface number: 21 but max is 0 [ 383.574776][ T5591] usb 8-1: config 0 has no interface number 0 [ 383.574815][ T5591] usb 8-1: config 0 interface 21 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 383.584856][ T5591] usb 8-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 383.584881][ T5591] usb 8-1: Product: syz [ 383.584895][ T5591] usb 8-1: Manufacturer: syz [ 383.618322][ T5591] usb 8-1: config 0 descriptor?? [ 383.875656][ T5619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 383.916423][ T5740] usb 8-1: USB disconnect, device number 15 [ 383.938563][ T5619] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 383.952095][ T5619] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 383.990560][ T5619] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 383.996552][ T5619] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 384.293189][ T8829] kthread_run failed with err -4 [ 384.564144][ T5619] Bluetooth: hci0: command tx timeout [ 386.084169][ T5619] Bluetooth: hci1: command tx timeout [ 386.647036][ T5619] Bluetooth: hci0: command tx timeout [ 386.850486][ T9641] syz_tun: entered allmulticast mode [ 386.873008][ T9632] configfs-gadget.g1 gadget.32: HOST MAC aa:5e:f0:77:29:68 [ 386.894905][ T9632] configfs-gadget.g1 gadget.32: MAC 86:e9:b8:ae:45:2c [ 386.952536][ T9642] dvmrp6: entered allmulticast mode [ 387.175278][ T36] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 387.402031][ T36] usb 1-1: not running at top speed; connect to a high speed hub [ 387.402075][ T36] usb 1-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.40 [ 387.408488][ T36] usb 1-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 387.408532][ T36] usb 1-1: config 1 interface 0 has no altsetting 0 [ 387.418089][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.418115][ T36] usb 1-1: Product: syz [ 387.418128][ T36] usb 1-1: Manufacturer: Э [ 387.418141][ T36] usb 1-1: SerialNumber: syz [ 387.427146][ T9653] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 387.671840][ T9653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.681665][ T9653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.756446][ T36] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input12 [ 387.828853][ T4954] bcm5974 1-1:1.0: could not read from device [ 387.917805][ T9639] syz_tun: left allmulticast mode [ 387.944526][ T36] usb 1-1: USB disconnect, device number 19 [ 387.947413][ T4954] bcm5974 1-1:1.0: could not read from device [ 388.165714][ T5619] Bluetooth: hci1: command tx timeout [ 388.712932][ T9675] netlink: 4 bytes leftover after parsing attributes in process `syz.7.970'. [ 388.724134][ T5619] Bluetooth: hci0: command tx timeout [ 389.293003][ T9683] Set syz1 is full, maxelem 2076 reached [ 390.024164][ T5591] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 390.192082][ T5591] usb 8-1: not running at top speed; connect to a high speed hub [ 390.192171][ T5591] usb 8-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.40 [ 390.199497][ T5591] usb 8-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 390.199530][ T5591] usb 8-1: config 1 interface 0 has no altsetting 0 [ 390.205475][ T5591] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.205501][ T5591] usb 8-1: Product: syz [ 390.205514][ T5591] usb 8-1: Manufacturer: Э [ 390.205527][ T5591] usb 8-1: SerialNumber: syz [ 390.244247][ T5619] Bluetooth: hci1: command tx timeout [ 390.262355][ T9696] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 390.498016][ T9696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.515150][ T9696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.608189][ T5591] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/input/input13 [ 390.644641][ T4954] bcm5974 8-1:1.0: could not read from device [ 390.700976][ T5591] usb 8-1: USB disconnect, device number 16 [ 390.718082][ T4954] bcm5974 8-1:1.0: could not read from device [ 390.940313][ T5619] Bluetooth: hci0: command tx timeout [ 392.728708][ T5619] Bluetooth: hci1: command tx timeout [ 392.734338][ T5619] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 392.734720][ T5619] Bluetooth: hci3: Injecting HCI hardware error event [ 392.739191][ T5619] Bluetooth: hci3: hardware error 0x00 [ 393.335952][ T162] bridge_slave_1: left allmulticast mode [ 393.336037][ T162] bridge_slave_1: left promiscuous mode [ 393.336297][ T162] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.485773][ T162] bridge_slave_0: left allmulticast mode [ 393.491573][ T162] bridge_slave_0: left promiscuous mode [ 393.491865][ T162] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.974541][ T9770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.992'. [ 394.058563][ T162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.166236][ T162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.260185][ T162] bond0 (unregistering): Released all slaves [ 394.391671][ T9557] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.393019][ T9557] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.393250][ T9557] bridge_slave_0: entered allmulticast mode [ 394.441859][ T9557] bridge_slave_0: entered promiscuous mode [ 394.516837][ T9557] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.517008][ T9557] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.517201][ T9557] bridge_slave_1: entered allmulticast mode [ 394.519494][ T9557] bridge_slave_1: entered promiscuous mode [ 394.950304][ T9778] netlink: 'syz.7.993': attribute type 8 has an invalid length. [ 394.950374][ T9778] netlink: 48 bytes leftover after parsing attributes in process `syz.7.993'. [ 394.951318][ T9778] bridge_slave_0: left allmulticast mode [ 394.951349][ T9778] bridge_slave_0: left promiscuous mode [ 394.951611][ T9778] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.048291][ T5619] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 395.308890][ T9557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.648102][ T162] hsr_slave_0: left promiscuous mode [ 395.728190][ T162] hsr_slave_1: left promiscuous mode [ 395.730083][ T162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.765172][ T162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.605047][ T162] team0 (unregistering): Port device team_slave_1 removed [ 396.686211][ T162] team0 (unregistering): Port device team_slave_0 removed [ 396.920809][ T9557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.996501][ T9581] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.003951][ T9581] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.011443][ T9581] bridge_slave_0: entered allmulticast mode [ 397.022086][ T9581] bridge_slave_0: entered promiscuous mode [ 397.079408][ T9581] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.079562][ T9581] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.079758][ T9581] bridge_slave_1: entered allmulticast mode [ 397.083334][ T9581] bridge_slave_1: entered promiscuous mode [ 397.347186][ T9557] team0: Port device team_slave_0 added [ 397.368726][ T9557] team0: Port device team_slave_1 added [ 397.372467][ T9581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.392737][ T9581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.549341][ T9557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.561713][ T9557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.561745][ T9557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.644734][ T9557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.652014][ T9557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.652046][ T9557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.663683][ T9581] team0: Port device team_slave_0 added [ 397.714481][ T9581] team0: Port device team_slave_1 added [ 397.898983][ T9581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.899044][ T9581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.899068][ T9581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.115172][ T9849] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1011'. [ 398.840928][ T9581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.840989][ T9581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.841015][ T9581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.852241][ T9557] hsr_slave_0: entered promiscuous mode [ 398.853640][ T9557] hsr_slave_1: entered promiscuous mode [ 399.332484][ T9581] hsr_slave_0: entered promiscuous mode [ 399.339902][ T9581] hsr_slave_1: entered promiscuous mode [ 399.340776][ T9581] debugfs: 'hsr0' already exists in 'hsr' [ 399.340798][ T9581] Cannot create hsr debugfs directory [ 400.007522][ T5733] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 400.187518][ T5733] usb 8-1: Using ep0 maxpacket: 32 [ 400.194321][ T5733] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 400.219017][ T5733] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 400.220105][ T5733] usb 8-1: config 0 has no interface number 0 [ 400.220154][ T5733] usb 8-1: config 0 interface 184 has no altsetting 0 [ 400.243569][ T5733] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.244116][ T5733] usb 8-1: Product: syz [ 400.244132][ T5733] usb 8-1: Manufacturer: syz [ 400.244145][ T5733] usb 8-1: SerialNumber: syz [ 400.288179][ T5733] usb 8-1: config 0 descriptor?? [ 400.416125][ T9880] syz_tun: entered allmulticast mode [ 400.538350][ T5264] 8021q: adding VLAN 0 to HW filter on device eth13 [ 400.792411][ T9897] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 401.351557][ T5733] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 401.351625][ T5733] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 401.566583][ T5733] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 401.569537][ T5733] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 401.569563][ T5733] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 401.569581][ T5733] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 401.569831][ T5733] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71 [ 401.684297][ T5733] usb 8-1: USB disconnect, device number 17 [ 405.928229][ T9988] ======================================================= [ 405.928229][ T9988] WARNING: The mand mount option has been deprecated and [ 405.928229][ T9988] and is ignored by this kernel. Remove the mand [ 405.928229][ T9988] option from the mount to silence this warning. [ 405.928229][ T9988] ======================================================= [ 406.559169][ T9987] lo: entered promiscuous mode [ 406.601402][ T9987] tunl0: entered promiscuous mode [ 406.614926][ T9987] gre0: entered promiscuous mode [ 406.702037][ T9987] gretap0: entered promiscuous mode [ 406.748302][ T9987] erspan0: entered promiscuous mode [ 406.777910][ T9987] ip_vti0: entered promiscuous mode [ 406.817705][ T9987] ip6_vti0: entered promiscuous mode [ 406.864826][ T9987] sit0: entered promiscuous mode [ 406.879553][ T9987] ip6tnl0: entered promiscuous mode [ 406.907057][ T9987] ip6gre0: entered promiscuous mode [ 406.954900][ T9987] syz_tun: entered promiscuous mode [ 407.070195][ T9987] ip6gretap0: entered promiscuous mode [ 407.087642][ T9987] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.097847][ T9987] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.098941][ T9987] bridge0: entered promiscuous mode [ 411.305371][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 411.448894][ T162] bridge_slave_1: left allmulticast mode [ 411.454698][ T162] bridge_slave_1: left promiscuous mode [ 411.454972][ T162] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.495428][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 411.497735][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 411.500578][ T9] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 411.500628][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 411.500650][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 411.500672][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 411.500694][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 411.500732][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.608790][ T162] bridge_slave_0: left allmulticast mode [ 411.609769][ T162] bridge_slave_0: left promiscuous mode [ 411.636733][ T162] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.759984][T10051] netlink: 'syz.4.1059': attribute type 4 has an invalid length. [ 411.773429][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 411.773533][ T9] usbtmc 1-1:16.0: can't read capabilities [ 412.047109][T10035] usbtmc 1-1:16.0: stb usb_control_msg returned -32 [ 412.089869][ T5741] usb 1-1: USB disconnect, device number 20 [ 412.729658][ T162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.771705][T10053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.074507][ T162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.968975][ T162] bond0 (unregistering): Released all slaves [ 417.099491][ T162] hsr_slave_0: left promiscuous mode [ 417.934241][ T162] hsr_slave_1: left promiscuous mode [ 417.938234][ T162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.626317][ T162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.632741][T10109] netlink: 'syz.0.1073': attribute type 4 has an invalid length. [ 419.244646][ T162] team0 (unregistering): Port device team_slave_1 removed [ 419.304819][ T162] team0 (unregistering): Port device team_slave_0 removed [ 422.864129][ T9] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 422.964358][T10163] netlink: 'syz.4.1087': attribute type 4 has an invalid length. [ 423.065991][ T9] usb 1-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=fe.e6 [ 423.080584][ T9] usb 1-1: config 10 has an invalid interface number: 8 but max is 0 [ 423.080612][ T9] usb 1-1: config 10 has no interface number 0 [ 423.080670][ T9] usb 1-1: config 10 interface 8 altsetting 8 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 423.080694][ T9] usb 1-1: config 10 interface 8 has no altsetting 0 [ 423.083847][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.083871][ T9] usb 1-1: Product: syz [ 423.083885][ T9] usb 1-1: Manufacturer: syz [ 423.083899][ T9] usb 1-1: SerialNumber: syz [ 423.507718][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 423.653096][T10172] 9p: Bad value for 'rfdno' [ 426.356064][T10197] netlink: 'syz.4.1096': attribute type 4 has an invalid length. [ 426.492170][ T9557] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 427.414375][ T9557] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 427.490515][ T9557] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 427.683399][ T9557] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 427.693569][ T9557] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 427.850874][ T9557] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 427.956890][ T9557] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 428.064088][ T9] usb 1-1: USB disconnect, device number 21 [ 428.121099][ T9557] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 428.332481][T10225] udevd[10225]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:10.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 429.713431][ T9581] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 429.833383][ T9581] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 429.875789][ T9581] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 430.002706][ T9581] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 430.161403][ T9581] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 430.242468][ T9581] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 430.895484][ T9581] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 431.788184][ T9581] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 434.793666][ T9557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.889030][ T9557] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.908055][ T3067] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.909851][ T3067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.020401][ T3047] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.020642][ T3047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.261228][ T9581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.567983][ T9581] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.588787][T10314] lo: entered promiscuous mode [ 435.626978][T10314] tunl0: entered promiscuous mode [ 435.637225][T10314] gre0: entered promiscuous mode [ 435.693559][T10314] gretap0: entered promiscuous mode [ 435.735167][T10314] erspan0: entered promiscuous mode [ 435.745839][T10314] ip_vti0: entered promiscuous mode [ 435.755142][T10314] ip6_vti0: entered promiscuous mode [ 435.781188][T10314] sit0: entered promiscuous mode [ 435.806264][T10314] ip6tnl0: entered promiscuous mode [ 435.816934][T10314] ip6gre0: entered promiscuous mode [ 435.872435][T10314] syz_tun: entered promiscuous mode [ 435.924887][T10314] ip6gretap0: entered promiscuous mode [ 435.933511][T10314] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.933863][T10314] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.949200][T10314] bridge0: entered promiscuous mode [ 436.109083][ T3047] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.109356][ T3047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.293117][ T3047] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.293403][ T3047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.625268][ T9557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.229428][ T9581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.297441][T10394] md: could not open device unknown-block(1,1). [ 439.387726][ T5619] Bluetooth: hci1: link tx timeout [ 439.396530][ T5619] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 439.457106][ T5619] Bluetooth: hci1: link tx timeout [ 439.457169][ T5619] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 439.864552][ T5619] Bluetooth: hci1: link tx timeout [ 439.864617][ T5619] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 440.172817][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.404948][ T5619] Bluetooth: hci1: link tx timeout [ 440.405011][ T5619] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 440.426136][ T9557] veth0_vlan: entered promiscuous mode [ 440.504335][ T9557] veth1_vlan: entered promiscuous mode [ 440.567286][ T5619] Bluetooth: hci1: link tx timeout [ 440.567349][ T5619] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 440.584291][ T5798] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 440.720338][ T9557] veth0_macvtap: entered promiscuous mode [ 440.745078][ T5798] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 440.747284][ T9557] veth1_macvtap: entered promiscuous mode [ 440.770802][ T5798] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.774228][ T5798] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.797271][ T5798] usb 1-1: config 0 descriptor?? [ 440.881400][ T9557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.947334][ T5619] Bluetooth: hci1: link tx timeout [ 440.947390][ T5619] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 440.956070][ T9557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.020686][ T9581] veth0_vlan: entered promiscuous mode [ 441.030546][ T5798] usbhid 1-1:0.0: can't add hid device: -71 [ 441.032382][ T5798] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 441.054209][ T5798] usb 1-1: USB disconnect, device number 22 [ 441.154220][ T5619] Bluetooth: hci1: link tx timeout [ 441.154271][ T5619] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 441.247268][ T9581] veth1_vlan: entered promiscuous mode [ 441.406045][ T3044] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.448559][ T5619] Bluetooth: hci1: command 0x0406 tx timeout [ 441.662778][ T5798] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 441.844131][ T5798] usb 1-1: Using ep0 maxpacket: 32 [ 441.845142][ T5798] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 441.846917][ T5798] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.846960][ T5798] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.883338][ T5798] usb 1-1: config 0 descriptor?? [ 441.905798][ T5798] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 441.934179][ T5619] Bluetooth: hci1: link tx timeout [ 441.955245][ T5798] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 442.327040][ T3044] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.481549][ T5337] usb 1-1: USB disconnect, device number 23 [ 442.499511][ T5337] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 442.536179][ T9581] veth0_macvtap: entered promiscuous mode [ 442.596524][ T3067] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.616881][ T9581] veth1_macvtap: entered promiscuous mode [ 442.660560][ T9581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.703315][ T9581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.826406][ T162] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.849085][ T3067] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.854182][ T50] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.891955][T10446] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1148'. [ 442.892060][T10446] nbd: must specify at least one socket [ 443.102410][ T3047] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.126510][ T3044] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.183041][ T5619] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 443.361605][ T5619] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 443.382309][ T5619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 443.399612][ T5619] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 443.439822][ T5619] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 443.764769][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.773064][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.978349][ T5619] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 445.030042][ T5619] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 445.040022][ T5619] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 445.061952][ T5619] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 445.067773][ T5619] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 445.613409][ T5607] Bluetooth: hci2: command tx timeout [ 446.712683][T10501] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1157'. [ 446.713605][T10501] nbd: must specify at least one socket [ 447.284342][ T5607] Bluetooth: hci0: command tx timeout [ 447.539553][T10521] netlink: 'syz.4.1161': attribute type 4 has an invalid length. [ 447.737541][ T5607] Bluetooth: hci2: command tx timeout [ 448.368984][ T3098] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.360753][T10553] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1166'. [ 449.365231][ T5607] Bluetooth: hci0: command tx timeout [ 449.435114][T10553] nbd: must specify at least one socket [ 449.974442][ T5607] Bluetooth: hci2: command tx timeout [ 451.186922][ T3098] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.564852][ T5607] Bluetooth: hci0: command tx timeout [ 452.048950][ T5607] Bluetooth: hci2: command tx timeout [ 452.501832][ T3098] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.670683][T10598] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1175'. [ 452.670772][T10598] nbd: must specify at least one socket [ 453.254432][T10432] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 453.960946][ T5607] Bluetooth: hci0: command tx timeout [ 454.051444][ T3098] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.054122][T10432] usb 5-1: Using ep0 maxpacket: 8 [ 454.054998][T10432] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 454.057675][T10432] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 454.057762][T10432] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 454.057784][T10432] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 454.057806][T10432] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 454.057828][T10432] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 454.057868][T10432] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.322554][T10432] usb 5-1: GET_CAPABILITIES returned 0 [ 454.322650][T10432] usbtmc 5-1:16.0: can't read capabilities [ 456.378078][T10650] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1185'. [ 456.378156][T10650] nbd: must specify at least one socket [ 457.551284][T10449] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.562911][T10449] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.563224][T10449] bridge_slave_0: entered allmulticast mode [ 457.581350][T10449] bridge_slave_0: entered promiscuous mode [ 457.711910][ T3098] bridge_slave_1: left allmulticast mode [ 457.717801][ T3098] bridge_slave_1: left promiscuous mode [ 457.718160][ T3098] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.837482][ T3098] bridge_slave_0: left allmulticast mode [ 457.840634][ T3098] bridge_slave_0: left promiscuous mode [ 457.850781][ T3098] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.607753][T10600] usbtmc 5-1:16.0: stb usb_control_msg returned -110 [ 459.689531][ T5733] usb 5-1: USB disconnect, device number 22 [ 460.088348][ T3098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 460.165181][ T3098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 460.188541][ T3098] bond0 (unregistering): Released all slaves [ 460.230567][T10449] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.230747][T10449] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.230913][T10449] bridge_slave_1: entered allmulticast mode [ 460.233715][T10449] bridge_slave_1: entered promiscuous mode [ 460.758633][T10684] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1197'. [ 460.758709][T10684] nbd: must specify at least one socket [ 462.085969][T10449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.115119][T10449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.334471][ T3098] hsr_slave_0: left promiscuous mode [ 462.504441][ T3098] hsr_slave_1: left promiscuous mode [ 462.505699][ T3098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.505723][ T3098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.526166][ T3098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.526241][ T3098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.829237][ T3098] veth1_macvtap: left promiscuous mode [ 462.829358][ T3098] veth0_macvtap: left promiscuous mode [ 462.829544][ T3098] veth1_vlan: left promiscuous mode [ 462.853556][ T3098] veth0_vlan: left promiscuous mode [ 463.144203][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xc7b8 instead [ 463.149906][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0e55 instead [ 463.149934][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x1297 instead [ 463.149950][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0xf6ba instead [ 463.149966][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x8a85 instead [ 463.149981][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0xe9db instead [ 463.149997][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x336d instead [ 463.150012][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0xab49 instead [ 463.150027][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x8a05 instead [ 463.150042][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x82d7 instead [ 463.150058][T10706] jffs2: Further such events for this erase block will not be printed [ 463.150384][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x0597 instead [ 463.150408][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x42da instead [ 463.150423][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001008: 0x431b instead [ 463.150438][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000100c: 0xbaa2 instead [ 463.150453][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001010: 0xf8a4 instead [ 463.150467][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001014: 0xa203 instead [ 463.150482][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xce37 instead [ 463.150498][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000101c: 0xe21b instead [ 463.150512][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001020: 0xb04e instead [ 463.150527][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001024: 0xb4de instead [ 463.150542][T10706] jffs2: Further such events for this erase block will not be printed [ 463.150846][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x899e instead [ 463.150861][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0xae18 instead [ 463.150876][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002008: 0x1a20 instead [ 463.150891][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000200c: 0xf021 instead [ 463.150905][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002010: 0x10fe instead [ 463.150919][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002014: 0xafb8 instead [ 463.150934][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xf998 instead [ 463.150948][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000201c: 0x1150 instead [ 463.150962][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002020: 0x5752 instead [ 463.150977][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002024: 0xd1e2 instead [ 463.150991][T10706] jffs2: Further such events for this erase block will not be printed [ 463.151293][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x8f39 instead [ 463.151309][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x9a6a instead [ 463.151323][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003008: 0xfa1f instead [ 463.151338][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000300c: 0x7bb3 instead [ 463.151352][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003010: 0x1e38 instead [ 463.151367][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003014: 0xc645 instead [ 463.151381][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x72f9 instead [ 463.151397][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000301c: 0x2ae1 instead [ 463.151419][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003020: 0xd077 instead [ 463.151434][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003024: 0xb90e instead [ 463.151449][T10706] jffs2: Further such events for this erase block will not be printed [ 463.151761][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x7a17 instead [ 463.151776][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0xf823 instead [ 463.151791][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004008: 0xa07d instead [ 463.151805][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000400c: 0xab24 instead [ 463.151819][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004010: 0x8639 instead [ 463.151834][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004014: 0x536a instead [ 463.151848][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x09e3 instead [ 463.151867][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000401c: 0x8713 instead [ 463.151882][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004020: 0x85ab instead [ 463.151898][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004024: 0x9209 instead [ 463.151912][T10706] jffs2: Further such events for this erase block will not be printed [ 463.152214][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0xec15 instead [ 463.152229][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x95bb instead [ 463.152243][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005008: 0x8f09 instead [ 463.152258][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000500c: 0x103d instead [ 463.152273][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005010: 0x7d68 instead [ 463.152287][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005014: 0x78fc instead [ 463.152301][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xc37f instead [ 463.152316][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000501c: 0xb3c8 instead [ 463.152330][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005020: 0x6294 instead [ 463.152344][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005024: 0x6ea3 instead [ 463.152358][T10706] jffs2: Further such events for this erase block will not be printed [ 463.152677][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x1fd9 instead [ 463.152693][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0eb1 instead [ 463.152707][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006008: 0x3b91 instead [ 463.152722][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000600c: 0xb8c5 instead [ 463.152736][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006010: 0x4b64 instead [ 463.152750][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006014: 0x565c instead [ 463.152765][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x6b84 instead [ 463.152780][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000601c: 0xfb98 instead [ 463.152794][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006020: 0xea9e instead [ 463.152809][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006024: 0x42c4 instead [ 463.152823][T10706] jffs2: Further such events for this erase block will not be printed [ 463.153128][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x22eb instead [ 463.153144][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x9ec6 instead [ 463.153157][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007008: 0x4f86 instead [ 463.153172][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000700c: 0x706b instead [ 463.153186][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007010: 0xf455 instead [ 463.153201][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007014: 0x0dbe instead [ 463.153216][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xf3cd instead [ 463.153231][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000701c: 0x3485 instead [ 463.153246][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007020: 0xff64 instead [ 463.153260][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007024: 0x3701 instead [ 463.153274][T10706] jffs2: Further such events for this erase block will not be printed [ 463.153590][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x1a55 instead [ 463.153606][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0xd969 instead [ 463.153620][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008008: 0xf40e instead [ 463.153634][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000800c: 0x61ed instead [ 463.153648][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008010: 0x1c1d instead [ 463.153664][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008014: 0xd88c instead [ 463.153679][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x4a10 instead [ 463.153694][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000801c: 0xf788 instead [ 463.153709][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008020: 0xadb2 instead [ 463.153724][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008024: 0x48af instead [ 463.153739][T10706] jffs2: Further such events for this erase block will not be printed [ 463.186202][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x86cd instead [ 463.186227][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0ed8 instead [ 463.186243][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009008: 0x1152 instead [ 463.186258][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000900c: 0xe77b instead [ 463.186273][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009010: 0xfeb5 instead [ 463.186288][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009014: 0xc4a9 instead [ 463.186301][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x3e1b instead [ 463.186314][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000901c: 0xf2c5 instead [ 463.186327][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009020: 0xe630 instead [ 463.186341][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009024: 0x5708 instead [ 463.186354][T10706] jffs2: Further such events for this erase block will not be printed [ 463.186687][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x9806 instead [ 463.186704][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0xbea1 instead [ 463.186719][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a008: 0xe70a instead [ 463.186735][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a00c: 0x1cf1 instead [ 463.186750][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a010: 0x929b instead [ 463.186765][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a014: 0xaf01 instead [ 463.186780][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x98f1 instead [ 463.186795][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a01c: 0x8b03 instead [ 463.186810][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a020: 0x663e instead [ 463.186824][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a024: 0xfab3 instead [ 463.186839][T10706] jffs2: Further such events for this erase block will not be printed [ 463.187143][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x411d instead [ 463.187159][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0xf3ce instead [ 463.187173][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b008: 0xd094 instead [ 463.187188][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b00c: 0xdbd0 instead [ 463.187202][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b010: 0xc4b0 instead [ 463.187217][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b014: 0x7af3 instead [ 463.187231][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x5558 instead [ 463.187245][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b01c: 0x8814 instead [ 463.187259][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b020: 0x7e9f instead [ 463.187275][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b024: 0x8299 instead [ 463.187289][T10706] jffs2: Further such events for this erase block will not be printed [ 463.189640][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0xa13a instead [ 463.189661][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0xd85e instead [ 463.189677][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c008: 0x5fff instead [ 463.189692][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c00c: 0x5a8c instead [ 463.189707][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c010: 0x0cb7 instead [ 463.189722][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c014: 0x9117 instead [ 463.189736][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x45fd instead [ 463.189751][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c01c: 0x451b instead [ 463.189765][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c020: 0x252b instead [ 463.189780][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c024: 0x854b instead [ 463.189794][T10706] jffs2: Further such events for this erase block will not be printed [ 463.190001][T10706] jffs2: Old JFFS2 bitmask found at 0x0000cb70 [ 463.190010][T10706] jffs2: You cannot use older JFFS2 filesystems with newer kernels [ 463.190114][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x1c73 instead [ 463.190128][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0xc5bc instead [ 463.190142][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d008: 0xbb71 instead [ 463.190157][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d00c: 0x9542 instead [ 463.190172][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d010: 0x37d1 instead [ 463.190186][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d014: 0x5fd1 instead [ 463.190201][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xd0e3 instead [ 463.190216][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d01c: 0x9bc4 instead [ 463.190230][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d020: 0xe8b2 instead [ 463.190245][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d024: 0x9ace instead [ 463.190260][T10706] jffs2: Further such events for this erase block will not be printed [ 463.190593][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x6c9e instead [ 463.190609][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0xc203 instead [ 463.190624][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e008: 0xd923 instead [ 463.190638][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e00c: 0xf1f2 instead [ 463.190652][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e010: 0xfe55 instead [ 463.190667][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e014: 0x3d09 instead [ 463.190681][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x9888 instead [ 463.190696][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e01c: 0x21b9 instead [ 463.190710][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e020: 0xa3d7 instead [ 463.190725][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e024: 0xc4a0 instead [ 463.190739][T10706] jffs2: Further such events for this erase block will not be printed [ 463.207342][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x5bf0 instead [ 463.207366][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x1f1e instead [ 463.207382][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f008: 0xed10 instead [ 463.207408][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f00c: 0x0414 instead [ 463.207423][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f010: 0xfb73 instead [ 463.207438][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f014: 0x1a7f instead [ 463.207453][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x8a62 instead [ 463.207469][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f01c: 0x28a2 instead [ 463.207484][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f020: 0x85c6 instead [ 463.207499][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f024: 0xe80a instead [ 463.207513][T10706] jffs2: Further such events for this erase block will not be printed [ 463.207786][T10706] jffs2: Old JFFS2 bitmask found at 0x0000fdb0 [ 463.207796][T10706] jffs2: You cannot use older JFFS2 filesystems with newer kernels [ 463.207862][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x9478 instead [ 463.207877][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0xb398 instead [ 463.207892][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010008: 0xf5a1 instead [ 463.207906][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001000c: 0x7baa instead [ 463.207922][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010010: 0x74c9 instead [ 463.207937][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010014: 0x048f instead [ 463.207952][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x3585 instead [ 463.207967][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001001c: 0x5ff7 instead [ 463.207983][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010020: 0xa6e0 instead [ 463.207997][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010024: 0xc325 instead [ 463.208011][T10706] jffs2: Further such events for this erase block will not be printed [ 463.208312][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x3e49 instead [ 463.208328][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0xf8f0 instead [ 463.208342][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011008: 0xcb59 instead [ 463.208356][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001100c: 0x1424 instead [ 463.208371][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011010: 0x6837 instead [ 463.208385][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011014: 0x1fa0 instead [ 463.208407][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x2187 instead [ 463.208423][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001101c: 0x1878 instead [ 463.208438][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011020: 0x6bc0 instead [ 463.208452][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011024: 0xf86d instead [ 463.208467][T10706] jffs2: Further such events for this erase block will not be printed [ 463.213802][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x1fed instead [ 463.213825][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x799d instead [ 463.213841][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012008: 0xa558 instead [ 463.213857][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001200c: 0x06a2 instead [ 463.213871][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012010: 0xe08f instead [ 463.213887][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012014: 0x9bbc instead [ 463.213901][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x6ab7 instead [ 463.213916][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001201c: 0x4fc2 instead [ 463.213931][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012020: 0x892b instead [ 463.213945][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012024: 0x2af2 instead [ 463.213959][T10706] jffs2: Further such events for this erase block will not be printed [ 463.221312][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4b18 instead [ 463.221335][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x05fe instead [ 463.221351][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013008: 0xfdc0 instead [ 463.221365][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001300c: 0x5b8f instead [ 463.221381][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013010: 0x4cf8 instead [ 463.221402][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013014: 0x587b instead [ 463.221418][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xc4ec instead [ 463.221434][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001301c: 0x2731 instead [ 463.221449][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013020: 0x30a4 instead [ 463.221464][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013024: 0x04ed instead [ 463.221478][T10706] jffs2: Further such events for this erase block will not be printed [ 463.221797][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x9f05 instead [ 463.221813][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x2dea instead [ 463.221828][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014008: 0x5bd1 instead [ 463.221842][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001400c: 0x5d67 instead [ 463.221856][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014010: 0x7b0b instead [ 463.221871][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014014: 0xc0ce instead [ 463.221885][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x5ebe instead [ 463.221899][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001401c: 0xa39f instead [ 463.221914][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014020: 0x6f42 instead [ 463.221929][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014024: 0x5392 instead [ 463.221943][T10706] jffs2: Further such events for this erase block will not be printed [ 463.228710][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0xd3e6 instead [ 463.228732][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x5d0e instead [ 463.228748][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015008: 0xa143 instead [ 463.228763][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001500c: 0x3283 instead [ 463.228779][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015010: 0x292e instead [ 463.228795][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015014: 0xb0d6 instead [ 463.228810][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x2915 instead [ 463.228826][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001501c: 0xf182 instead [ 463.228840][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015020: 0x92ee instead [ 463.228853][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015024: 0xc763 instead [ 463.228867][T10706] jffs2: Further such events for this erase block will not be printed [ 463.229185][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0xc52c instead [ 463.229202][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x3fca instead [ 463.229217][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016008: 0xd705 instead [ 463.229233][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001600c: 0x46bf instead [ 463.229247][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016010: 0xdb33 instead [ 463.229263][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016014: 0x83dc instead [ 463.229278][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x2bf9 instead [ 463.229293][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001601c: 0xae38 instead [ 463.229307][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016020: 0x673b instead [ 463.229322][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016024: 0xc8ce instead [ 463.229336][T10706] jffs2: Further such events for this erase block will not be printed [ 463.229667][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x89f3 instead [ 463.229683][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x9883 instead [ 463.229699][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017008: 0xa4d4 instead [ 463.229714][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001700c: 0xfc4c instead [ 463.229730][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017010: 0x5bf4 instead [ 463.229745][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017014: 0x4d4f instead [ 463.229760][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x5966 instead [ 463.229774][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001701c: 0x46ac instead [ 463.229789][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017020: 0x83c3 instead [ 463.229804][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017024: 0x4f8d instead [ 463.229818][T10706] jffs2: Further such events for this erase block will not be printed [ 463.233075][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x50ea instead [ 463.233097][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x4416 instead [ 463.233113][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018008: 0x9602 instead [ 463.233128][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001800c: 0xb441 instead [ 463.233143][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018010: 0x8c55 instead [ 463.233158][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018014: 0xf4d2 instead [ 463.233173][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xfa0c instead [ 463.233188][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001801c: 0x0aee instead [ 463.233203][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018020: 0xb824 instead [ 463.233217][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018024: 0x726c instead [ 463.233231][T10706] jffs2: Further such events for this erase block will not be printed [ 463.233547][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x836a instead [ 463.233563][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0b53 instead [ 463.233579][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019008: 0x9850 instead [ 463.233593][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001900c: 0x6be0 instead [ 463.233608][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019010: 0x3bb9 instead [ 463.233624][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019014: 0xc49f instead [ 463.233639][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x7151 instead [ 463.233654][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001901c: 0xe180 instead [ 463.233669][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019020: 0x43b3 instead [ 463.233684][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019024: 0x8f13 instead [ 463.233699][T10706] jffs2: Further such events for this erase block will not be printed [ 463.236555][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0xd3b9 instead [ 463.236576][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0xbea3 instead [ 463.236592][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a008: 0x7d40 instead [ 463.236608][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a00c: 0x6e94 instead [ 463.236622][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a010: 0x8137 instead [ 463.236637][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a014: 0xca0c instead [ 463.236653][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xe5da instead [ 463.236669][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a01c: 0xbcd6 instead [ 463.236684][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a020: 0x5998 instead [ 463.236700][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a024: 0xa352 instead [ 463.236714][T10706] jffs2: Further such events for this erase block will not be printed [ 463.238050][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0xa3a9 instead [ 463.238068][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x29b3 instead [ 463.238083][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b008: 0x0fb2 instead [ 463.238098][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b00c: 0xe097 instead [ 463.238114][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b010: 0xe371 instead [ 463.238130][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b014: 0x9b3a instead [ 463.238145][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xc1a9 instead [ 463.238160][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b01c: 0x5b08 instead [ 463.238174][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b020: 0xb8ea instead [ 463.238188][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b024: 0x04fa instead [ 463.238203][T10706] jffs2: Further such events for this erase block will not be printed [ 463.238521][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x0541 instead [ 463.238541][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0xca28 instead [ 463.238555][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c008: 0x07ef instead [ 463.238570][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c00c: 0x86f3 instead [ 463.238585][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c010: 0x579c instead [ 463.238599][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c014: 0x28f4 instead [ 463.238614][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x5885 instead [ 463.238629][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c01c: 0x3a11 instead [ 463.238644][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c020: 0xb342 instead [ 463.238659][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c024: 0xf673 instead [ 463.238674][T10706] jffs2: Further such events for this erase block will not be printed [ 463.238790][T10706] jffs2: Old JFFS2 bitmask found at 0x0001c648 [ 463.238798][T10706] jffs2: You cannot use older JFFS2 filesystems with newer kernels [ 463.238991][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0xad9d instead [ 463.239006][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x9b47 instead [ 463.239020][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d008: 0x27cc instead [ 463.239032][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d00c: 0xb790 instead [ 463.239046][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d010: 0x59fa instead [ 463.239059][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d014: 0x2b3f instead [ 463.239072][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xc0c5 instead [ 463.239085][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d01c: 0x74e6 instead [ 463.239099][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d020: 0xde1b instead [ 463.239111][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d024: 0xae75 instead [ 463.239127][T10706] jffs2: Further such events for this erase block will not be printed [ 463.273903][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x64bc instead [ 463.273926][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x1e92 instead [ 463.273941][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e008: 0x4ea7 instead [ 463.273956][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e00c: 0x73a1 instead [ 463.273970][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e010: 0xa4d5 instead [ 463.274560][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e014: 0xafb1 instead [ 463.274578][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x1f45 instead [ 463.274593][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e01c: 0x27d6 instead [ 463.274608][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e020: 0xb6c6 instead [ 463.274623][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e024: 0xa634 instead [ 463.274637][T10706] jffs2: Further such events for this erase block will not be printed [ 463.279493][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0xe638 instead [ 463.279516][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x5a5f instead [ 463.279531][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f008: 0xab4a instead [ 463.279546][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f00c: 0x1b2b instead [ 463.279560][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f010: 0xa3a9 instead [ 463.279575][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f014: 0x49a5 instead [ 463.279589][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xd272 instead [ 463.279604][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f01c: 0x2804 instead [ 463.279619][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f020: 0x900f instead [ 463.279634][T10706] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f024: 0x581d instead [ 463.279648][T10706] jffs2: Further such events for this erase block will not be printed [ 463.279925][T10706] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 463.279935][T10706] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 467.926397][T10714] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1206'. [ 467.926456][T10714] nbd: must specify at least one socket [ 468.264302][T10440] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 468.396392][ T3098] team0 (unregistering): Port device team_slave_1 removed [ 468.434379][T10440] usb 1-1: Using ep0 maxpacket: 16 [ 468.436675][ T3098] team0 (unregistering): Port device team_slave_0 removed [ 468.451406][T10440] usb 1-1: unable to get BOS descriptor or descriptor too short [ 468.451547][T10440] usb 1-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 468.469601][T10440] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 468.469675][T10440] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 468.479839][T10440] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.479864][T10440] usb 1-1: Product: syz [ 468.479876][T10440] usb 1-1: Manufacturer: syz [ 468.479890][T10440] usb 1-1: SerialNumber: syz [ 468.980499][T10726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.983845][T10726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.064723][T10449] team0: Port device team_slave_0 added [ 469.164299][T10449] team0: Port device team_slave_1 added [ 469.186708][T10730] md: could not open device unknown-block(1,1). [ 469.274967][T10440] usb 1-1: USB disconnect, device number 24 [ 469.818983][T10449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.819089][T10449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.819116][T10449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.152196][T10449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.159288][T10449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.159322][T10449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.513152][ T3035] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.513859][ T3035] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.513921][ T3035] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.803653][T10475] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.803875][T10475] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.804262][T10475] bridge_slave_0: entered allmulticast mode [ 470.810783][T10475] bridge_slave_0: entered promiscuous mode [ 470.818658][T10475] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.818867][T10475] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.819035][T10475] bridge_slave_1: entered allmulticast mode [ 470.840767][T10475] bridge_slave_1: entered promiscuous mode [ 470.994282][T10449] hsr_slave_0: entered promiscuous mode [ 471.004688][T10449] hsr_slave_1: entered promiscuous mode [ 471.109612][T10475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.414477][T10475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.612552][T10773] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1216'. [ 471.613914][T10773] nbd: must specify at least one socket [ 471.999385][T10475] team0: Port device team_slave_0 added [ 472.009902][T10475] team0: Port device team_slave_1 added [ 472.248018][T10475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.255882][T10475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.255908][T10475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.315796][T10475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.322883][T10475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.322915][T10475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.324759][ T3045] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.808298][T10475] hsr_slave_0: entered promiscuous mode [ 472.811145][T10475] hsr_slave_1: entered promiscuous mode [ 472.811954][T10475] debugfs: 'hsr0' already exists in 'hsr' [ 472.811977][T10475] Cannot create hsr debugfs directory [ 474.360285][ T3098] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.423439][T10810] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1226'. [ 474.432523][T10810] nbd: must specify at least one socket [ 474.744349][ T9] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 474.934943][ T9] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 475.887507][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.887581][ T9] usb 8-1: Product: syz [ 475.887595][ T9] usb 8-1: Manufacturer: syz [ 475.887607][ T9] usb 8-1: SerialNumber: syz [ 475.892817][ T9] usb 8-1: config 0 descriptor?? [ 476.211715][ T3098] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.391584][ T9] usb 8-1: Firmware: major: 88, minor: 99, hardware type: ATUSB (0) [ 476.600376][ T9] usb 8-1: failed to fetch extended address, random address set [ 476.819613][ T9] usb 8-1: USB disconnect, device number 18 [ 477.470413][ T3098] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.851679][T10852] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1236'. [ 478.851715][T10852] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1236'. [ 478.851729][T10852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1236'. [ 480.172310][ T3098] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.569725][T10858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1240'. [ 481.284852][ T31] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 481.484232][ T31] usb 8-1: Using ep0 maxpacket: 16 [ 481.490435][ T31] usb 8-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 481.492150][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.492225][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.492260][ T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.548641][ T31] usb 8-1: config 0 descriptor?? [ 482.069702][ T31] hid (null): report_id 0 is invalid [ 482.076841][ T31] hid (null): report_id 4252247276 is invalid [ 482.076896][ T31] hid (null): unknown global tag 0xe [ 482.076920][ T31] hid (null): global environment stack underflow [ 482.079822][ T31] hid (null): usage index exceeded [ 482.180864][ T31] usb 8-1: string descriptor 0 read error: -71 [ 482.214805][ T31] usb 8-1: Max retries (5) exceeded reading string descriptor 200 [ 482.221411][ T31] letsketch 0003:6161:4D15.0001: probe with driver letsketch failed with error -32 [ 482.278459][ T31] usb 8-1: USB disconnect, device number 19 [ 482.385868][ T3098] bridge_slave_1: left allmulticast mode [ 482.391787][ T3098] bridge_slave_1: left promiscuous mode [ 482.392059][ T3098] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.565139][ T3098] bridge_slave_0: left allmulticast mode [ 482.565218][ T3098] bridge_slave_0: left promiscuous mode [ 482.565460][ T3098] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.215984][T10901] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1249'. [ 484.227575][T10901] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1249'. [ 484.227598][T10901] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1249'. [ 484.794892][ T3098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 484.856263][ T3098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 484.902076][ T3098] bond0 (unregistering): Released all slaves [ 485.083358][T10905] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1251'. [ 487.166296][T10925] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1257'. [ 488.818610][T10946] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1258'. [ 488.849062][T10946] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1258'. [ 488.849087][T10946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1258'. [ 488.940422][ T5264] 8021q: adding VLAN 0 to HW filter on device eth13 [ 489.386872][ T3098] hsr_slave_0: left promiscuous mode [ 489.428454][ T3098] hsr_slave_1: left promiscuous mode [ 489.440304][ T3098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.440384][ T3098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.465646][ T3098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.465744][ T3098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.556158][ T3098] veth1_macvtap: left promiscuous mode [ 489.557597][ T3098] veth0_macvtap: left promiscuous mode [ 489.557805][ T3098] veth1_vlan: left promiscuous mode [ 489.557929][ T3098] veth0_vlan: left promiscuous mode [ 490.374689][ T3098] team0 (unregistering): Port device team_slave_1 removed [ 490.415341][ T3098] team0 (unregistering): Port device team_slave_0 removed [ 490.635437][ T5607] Bluetooth: hci0: link tx timeout [ 490.644422][ T5607] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 490.742126][T10955] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1261'. [ 491.961575][T10984] netlink: 'syz.4.1266': attribute type 4 has an invalid length. [ 492.045745][ T5607] Bluetooth: hci0: link tx timeout [ 492.045766][ T5607] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 492.391975][T11000] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1270'. [ 492.746750][ T5607] Bluetooth: hci0: command 0x0406 tx timeout [ 494.355907][T11010] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1268'. [ 494.357513][T11010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1268'. [ 494.357531][T11010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1268'. [ 495.394504][T10449] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 495.578680][T10449] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 495.611885][T10449] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 495.682728][T10449] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 496.523567][T10449] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 496.571407][T10449] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 496.602385][T10449] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 496.664229][T10449] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 497.264166][ T5733] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 497.448717][ T5733] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 497.449236][T11048] netlink: 'syz.4.1278': attribute type 4 has an invalid length. [ 497.466871][ T5733] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 497.466898][ T5733] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 497.466916][ T5733] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 497.466964][ T5733] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.485145][ T5733] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 497.485171][ T5733] usb 8-1: Product: syz [ 497.485184][ T5733] usb 8-1: Manufacturer: syz [ 497.547562][ T5733] cdc_wdm 8-1:1.0: skipping garbage [ 497.553617][ T5733] cdc_wdm 8-1:1.0: skipping garbage [ 497.631502][ T5733] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 497.638490][ T5733] cdc_wdm 8-1:1.0: Unknown control protocol [ 497.791053][T10475] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 497.906251][T10475] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 497.917634][T10475] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 498.178229][T10475] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 498.235706][T10475] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 498.280517][T11062] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1280'. [ 498.886297][T10475] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 498.951751][T10475] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 499.067830][T10475] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 499.390593][T10449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.687234][T10449] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.839267][ T3046] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.839551][ T3046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.286072][ T3051] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.286289][ T3051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.607553][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.836367][ T5798] usb 8-1: USB disconnect, device number 20 [ 502.845468][T10475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.135809][T10475] 8021q: adding VLAN 0 to HW filter on device team0 [ 503.171105][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.172863][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 503.205832][ T3051] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.206181][ T3051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 503.699712][T11115] netlink: 'syz.7.1287': attribute type 4 has an invalid length. [ 503.899106][ T31] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 504.007127][ T5607] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 504.059347][ T31] usb 1-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 504.068494][ T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 504.068523][ T31] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 504.068560][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.104224][ T5607] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 504.114770][ T31] usb 1-1: NFC: Reader power on cmd error -90 [ 504.114793][ T31] pn533_usb 1-1:1.0: NFC: Couldn't poweron the reader (error -90) [ 504.114920][ T31] pn533_usb 1-1:1.0: probe with driver pn533_usb failed with error -90 [ 504.120231][ T5607] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 504.217901][ T5607] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 504.252847][ T5607] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 504.509127][T11117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.523444][T11117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.752917][T11136] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1290'. [ 504.944743][T11117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.023669][T11117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.178959][T10440] usb 1-1: USB disconnect, device number 25 [ 506.033704][T11155] syzkaller0: entered promiscuous mode [ 506.587787][ T5607] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 506.633243][ T27] numa_remove_cpu cpu 1 node 0: mask now 0 [ 506.633269][ T27] numa_remove_cpu cpu 1 node 1: mask now 0 [ 506.693237][ T5607] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 506.696370][ T5607] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 506.700727][ T5607] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 506.701628][ T5607] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 506.843341][T11153] smpboot: CPU 1 is now offline [ 506.855198][ T5607] Bluetooth: hci1: command tx timeout [ 507.569454][T11176] process 'syz.4.1294' launched '/dev/fd/4' with NULL argv: empty string added [ 508.884472][ T5607] Bluetooth: hci1: command tx timeout [ 508.884529][ T5607] Bluetooth: hci2: command tx timeout [ 510.964339][ T5607] Bluetooth: hci2: command tx timeout [ 510.964365][ T5607] Bluetooth: hci1: command tx timeout [ 515.076807][ T5619] Bluetooth: hci1: command tx timeout [ 515.076833][ T5619] Bluetooth: hci2: command tx timeout [ 515.274140][ T5798] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 516.167874][ T5918] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 516.362515][ T5918] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 516.365184][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.365199][ T5918] usb 5-1: Product: syz [ 516.365206][ T5918] usb 5-1: Manufacturer: syz [ 516.365213][ T5918] usb 5-1: SerialNumber: syz [ 516.368081][ T5918] usb 5-1: config 0 descriptor?? [ 516.519482][T11231] MTRR 1 not used [ 516.610674][ T5918] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 517.334285][ T5607] Bluetooth: hci2: command tx timeout [ 523.041466][ T5918] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 523.257716][ T5798] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 525.056394][ T9] usb 5-1: USB disconnect, device number 23 [ 538.474263][T11121] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.474336][T11121] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.474477][T11121] bridge_slave_0: entered allmulticast mode [ 538.486123][T11121] bridge_slave_0: entered promiscuous mode [ 538.495636][T11121] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.563347][T11121] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.563498][T11121] bridge_slave_1: entered allmulticast mode [ 538.576871][T11121] bridge_slave_1: entered promiscuous mode [ 539.393180][T11121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.410569][T11121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.944814][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 542.541274][T11121] team0: Port device team_slave_0 added [ 542.618396][T11121] team0: Port device team_slave_1 added [ 542.718610][ T9] usb 5-1: device descriptor read/all, error -71 [ 542.964667][T11121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.964678][T11121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.964693][T11121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.063433][T11121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.063446][T11121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.063461][T11121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.224448][T11333] 9p: Bad value for 'rfdno' [ 546.800000][T11161] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.800079][T11161] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.800207][T11161] bridge_slave_0: entered allmulticast mode [ 546.809913][T11161] bridge_slave_0: entered promiscuous mode [ 547.287354][T11161] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.399391][T11161] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.399535][T11161] bridge_slave_1: entered allmulticast mode [ 547.400979][T11161] bridge_slave_1: entered promiscuous mode [ 547.497999][T11121] hsr_slave_0: entered promiscuous mode [ 547.666497][T11121] hsr_slave_1: entered promiscuous mode [ 547.667115][T11121] debugfs: 'hsr0' already exists in 'hsr' [ 547.667131][T11121] Cannot create hsr debugfs directory [ 548.632668][ T5619] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 548.673307][ T5619] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 548.681377][ T5619] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 548.683152][ T5619] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 548.701583][ T5619] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 548.854566][T11161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.918261][T11161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.937608][T11161] team0: Port device team_slave_0 added [ 550.080694][T11161] team0: Port device team_slave_1 added [ 550.491921][T11161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.491933][T11161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.491947][T11161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.882705][T11161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.882717][T11161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.882732][T11161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.239233][ T5619] Bluetooth: hci0: command tx timeout [ 551.797900][T11161] hsr_slave_0: entered promiscuous mode [ 551.847403][T11161] hsr_slave_1: entered promiscuous mode [ 551.848856][T11161] debugfs: 'hsr0' already exists in 'hsr' [ 551.848876][T11161] Cannot create hsr debugfs directory [ 552.584180][ T5798] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 552.883169][ T5798] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 552.892307][ T5798] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.892333][ T5798] usb 5-1: Product: syz [ 552.892341][ T5798] usb 5-1: Manufacturer: syz [ 552.892348][ T5798] usb 5-1: SerialNumber: syz [ 552.935240][ T5798] usb 5-1: config 0 descriptor?? [ 553.281626][ T5798] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 553.284409][ T5619] Bluetooth: hci0: command tx timeout [ 554.637428][ T5798] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 555.637825][ T5619] Bluetooth: hci0: command tx timeout [ 555.958434][ T5733] usb 5-1: USB disconnect, device number 26 [ 557.574146][ T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 557.744120][ T5619] Bluetooth: hci0: command tx timeout [ 557.851050][ T9] usb 1-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 557.853702][ T9] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.853735][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 557.853755][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.862948][ T9] usb 1-1: config 0 descriptor?? [ 562.047348][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 562.047427][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 562.136231][ T9] usb 1-1: USB disconnect, device number 28 [ 563.156412][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 570.241740][ T5607] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 570.736850][ T5607] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 570.846937][ T5607] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 570.847804][ T5607] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 570.854648][ T5607] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 573.016051][ T5619] Bluetooth: hci5: command tx timeout [ 573.086169][T11411] netlink: 'syz.0.1343': attribute type 1 has an invalid length. [ 575.867329][ T5619] Bluetooth: hci5: command tx timeout [ 577.240043][T11411] 8021q: adding VLAN 0 to HW filter on device bond1 [ 577.462115][ T5607] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 577.492076][ T5607] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 577.499659][ T5607] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 577.501582][ T5607] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 577.511009][ T5607] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 577.924759][ T5607] Bluetooth: hci5: command tx timeout [ 578.333477][T11414] bond1: (slave veth3): Enslaving as an active interface with a down link [ 578.384578][T11416] bond1: (slave dummy0): making interface the new active one [ 578.385525][T11416] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 579.764129][ T5607] Bluetooth: hci6: command tx timeout [ 580.005257][ T5607] Bluetooth: hci5: command tx timeout [ 580.584117][T10440] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 580.940321][T10440] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 580.949036][T10440] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.949052][T10440] usb 5-1: Product: syz [ 580.949059][T10440] usb 5-1: Manufacturer: syz [ 580.949066][T10440] usb 5-1: SerialNumber: syz [ 581.084739][T10440] usb 5-1: config 0 descriptor?? [ 581.877196][ T5607] Bluetooth: hci6: command tx timeout [ 583.437048][T10440] dvb_usb_rtl28xxu 5-1:0.0: chip type detection failed -110 [ 583.437113][T10440] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 583.591489][T10440] usb 5-1: USB disconnect, device number 27 [ 584.167111][ T5607] Bluetooth: hci6: command tx timeout [ 586.244664][ T5607] Bluetooth: hci6: command tx timeout [ 588.553512][T11338] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.553583][T11338] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.553712][T11338] bridge_slave_0: entered allmulticast mode [ 588.650443][T11338] bridge_slave_0: entered promiscuous mode [ 588.706164][T11338] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.706233][T11338] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.706334][T11338] bridge_slave_1: entered allmulticast mode [ 588.715627][T11338] bridge_slave_1: entered promiscuous mode [ 591.855691][T11338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 592.967245][T11338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 597.732303][T11338] team0: Port device team_slave_0 added [ 598.832451][T11338] team0: Port device team_slave_1 added [ 602.770811][T11338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 602.770823][T11338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 602.770837][T11338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 602.802360][T11338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 602.802372][T11338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 602.802386][T11338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.116054][ T5619] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 605.158342][ T5619] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 605.173806][ T5619] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 605.191642][ T5619] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 605.198256][ T5619] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 606.338249][T11484] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 608.324427][ T5619] Bluetooth: hci8: command tx timeout [ 609.922129][T11338] hsr_slave_0: entered promiscuous mode [ 609.976058][T11338] hsr_slave_1: entered promiscuous mode [ 609.976553][T11338] debugfs: 'hsr0' already exists in 'hsr' [ 609.976567][T11338] Cannot create hsr debugfs directory [ 609.992823][T11490] md/raid1:md0: active with 1 out of 2 mirrors [ 610.489800][ T5619] Bluetooth: hci8: command tx timeout [ 611.638510][T11497] md_update_sb: can't update sb for read-only array md0 [ 611.740790][ T5607] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 611.791694][ T5607] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 611.798840][ T5607] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 611.813578][ T5607] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 611.838433][ T5607] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 612.564231][ T5619] Bluetooth: hci8: command tx timeout [ 614.484177][ T5619] Bluetooth: hci4: command tx timeout [ 614.644320][ T5619] Bluetooth: hci8: command tx timeout [ 616.564145][ T5619] Bluetooth: hci4: command tx timeout [ 618.644150][ T5619] Bluetooth: hci4: command tx timeout [ 620.724868][ T5619] Bluetooth: hci4: command tx timeout [ 624.946193][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 626.980458][ T5607] Bluetooth: hci1: command 0x0406 tx timeout [ 630.836165][T11524] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 630.872617][T11524] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 630.879163][T11524] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 630.888914][T11524] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 630.889663][T11524] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 631.689803][T11524] Bluetooth: hci2: command 0x0406 tx timeout [ 633.087659][ T5607] Bluetooth: hci0: command tx timeout [ 633.136757][T11524] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 633.153570][T11524] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 633.172981][T11524] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 633.178038][T11524] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 633.182632][T11524] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 635.423063][ T5607] Bluetooth: hci0: command tx timeout [ 635.423120][ T5607] Bluetooth: hci9: command tx timeout [ 637.271491][ T5607] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 637.292130][ T5607] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 637.309167][ T5607] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 637.313408][ T5607] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 637.316154][ T5607] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 637.444159][ T5607] Bluetooth: hci0: command tx timeout [ 637.444228][T11524] Bluetooth: hci9: command tx timeout [ 639.453856][T11524] Bluetooth: hci10: command tx timeout [ 639.526454][T11524] Bluetooth: hci9: command tx timeout [ 639.526481][T11524] Bluetooth: hci0: command tx timeout [ 642.674108][ T5607] Bluetooth: hci10: command tx timeout [ 642.674135][ T5607] Bluetooth: hci9: command tx timeout [ 644.871846][T11524] Bluetooth: hci10: command tx timeout [ 646.964250][T11524] Bluetooth: hci10: command tx timeout [ 663.387078][ T5607] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 663.419734][ T5607] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 663.423208][ T5607] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 663.429371][ T5607] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 663.430263][ T5607] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 665.524179][ T5607] Bluetooth: hci5: command tx timeout [ 668.424089][ T5607] Bluetooth: hci5: command tx timeout [ 669.812125][T11524] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 669.852183][T11524] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 669.862399][T11524] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 669.868752][T11524] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 669.875509][T11524] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 670.485028][T11524] Bluetooth: hci5: command tx timeout [ 672.414199][T11524] Bluetooth: hci6: command tx timeout [ 672.834059][T11524] Bluetooth: hci5: command tx timeout [ 674.484142][T11524] Bluetooth: hci6: command tx timeout [ 676.564162][T11524] Bluetooth: hci6: command tx timeout [ 681.009673][T11524] Bluetooth: hci6: command tx timeout [ 687.475647][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 688.267379][ C0] sched: DL replenish lagged too much [ 691.271918][T11524] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 691.307210][T11524] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 691.309463][T11524] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 694.235918][ T5619] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 694.269900][ T5619] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 696.404131][T11524] Bluetooth: hci4: command tx timeout [ 696.842656][ T5619] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 696.880152][ T5619] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 696.882985][ T5619] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 696.893647][ T5619] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 696.904139][ T5619] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 698.484118][ T5619] Bluetooth: hci4: command tx timeout [ 700.180411][ T5619] Bluetooth: hci7: command tx timeout [ 700.564137][ T5619] Bluetooth: hci4: command tx timeout [ 700.968042][T11524] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 701.025542][T11524] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 701.026890][T11524] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 701.029245][T11524] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 701.030963][T11524] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 702.261321][ T5619] Bluetooth: hci7: command tx timeout [ 702.644090][ T5619] Bluetooth: hci4: command tx timeout [ 703.124147][ T5619] Bluetooth: hci8: command tx timeout [ 704.354979][ T5619] Bluetooth: hci7: command tx timeout [ 705.248753][ T5619] Bluetooth: hci8: command tx timeout [ 708.224142][ T5619] Bluetooth: hci7: command tx timeout [ 708.224179][ T5619] Bluetooth: hci8: command tx timeout [ 710.247012][T11524] Bluetooth: hci8: command tx timeout [ 714.850913][ T38] INFO: task syz-executor:11121 blocked for more than 144 seconds. [ 714.850940][ T38] Tainted: G L syzkaller #0 [ 714.850948][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 714.850954][ T38] task:syz-executor state:D stack:18536 pid:11121 tgid:11121 ppid:1 task_flags:0x400140 flags:0x00080002 [ 714.850996][ T38] Call Trace: [ 714.851001][ T38] [ 714.851009][ T38] __schedule+0x16d9/0x5700 [ 714.851043][ T38] ? __pfx___schedule+0x10/0x10 [ 714.851061][ T38] rt_mutex_schedule+0x76/0xf0 [ 714.851075][ T38] rt_mutex_slowlock_block+0x55e/0x690 [ 714.851094][ T38] ? rt_mutex_slowlock_block+0x33c/0x690 [ 714.851110][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 714.851125][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 714.851139][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 714.851162][ T38] ? device_del+0xa9/0x8f0 [ 714.851179][ T38] ? device_del+0xa9/0x8f0 [ 714.851190][ T38] mutex_lock_nested+0x168/0x1d0 [ 714.851207][ T38] device_del+0xa9/0x8f0 [ 714.851219][ T38] ? ida_free+0x2ac/0x310 [ 714.851232][ T38] ? __pfx_ida_free+0x10/0x10 [ 714.851244][ T38] ? __pfx_device_del+0x10/0x10 [ 714.851258][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 714.851271][ T38] device_unregister+0x21/0xf0 [ 714.851284][ T38] del_device_store+0x2b5/0x370 [ 714.851299][ T38] ? __pfx_del_device_store+0x10/0x10 [ 714.851311][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 714.851322][ T38] ? sysfs_kf_write+0x166/0x260 [ 714.851334][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 714.851343][ T38] kernfs_fop_write_iter+0x3a5/0x540 [ 714.851361][ T38] vfs_write+0x61e/0xbb0 [ 714.851371][ T38] ? __lock_acquire+0x6df/0x2e40 [ 714.851394][ T38] ? __pfx_vfs_write+0x10/0x10 [ 714.851417][ T38] ksys_write+0x156/0x270 [ 714.851429][ T38] ? __pfx_ksys_write+0x10/0x10 [ 714.851440][ T38] ? trace_syscall_enter+0x58/0x110 [ 714.851456][ T38] ? rcu_is_watching+0x16/0xb0 [ 714.851470][ T38] ? trace_syscall_enter+0x58/0x110 [ 714.851485][ T38] do_syscall_64+0x166/0x520 [ 714.851497][ T38] ? trace_irq_disable+0x3b/0x140 [ 714.851510][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.851520][ T38] ? clear_bhb_loop+0x70/0xc0 [ 714.851532][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.851546][ T38] RIP: 0033:0x7ff484fbe98e [ 714.851556][ T38] RSP: 002b:00007ffecdeccdd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 714.851567][ T38] RAX: ffffffffffffffda RBX: 00005555815ec500 RCX: 00007ff484fbe98e [ 714.851574][ T38] RDX: 0000000000000001 RSI: 00007ffecdecce60 RDI: 0000000000000005 [ 714.851580][ T38] RBP: 00007ff4850958a7 R08: 0000000000000000 R09: 0000000000000000 [ 714.851587][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 714.851593][ T38] R13: 00007ffecdecce60 R14: 00007ff485db4620 R15: 0000000000000003 [ 714.851609][ T38] [ 714.851614][ T38] INFO: task syz-executor:11161 blocked for more than 144 seconds. [ 714.851622][ T38] Tainted: G L syzkaller #0 [ 714.851628][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 714.851632][ T38] task:syz-executor state:D stack:17608 pid:11161 tgid:11161 ppid:1 task_flags:0x400140 flags:0x00080002 [ 714.851655][ T38] Call Trace: [ 714.851658][ T38] [ 714.851664][ T38] __schedule+0x16d9/0x5700 [ 714.851683][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 714.851699][ T38] ? __pfx___schedule+0x10/0x10 [ 714.851717][ T38] rt_mutex_schedule+0x76/0xf0 [ 714.851728][ T38] rt_mutex_slowlock_block+0x55e/0x690 [ 714.851747][ T38] ? rt_mutex_slowlock_block+0x33c/0x690 [ 714.851762][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 714.851778][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 714.851792][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 714.851815][ T38] ? del_device_store+0xd6/0x370 [ 714.851830][ T38] ? del_device_store+0xd6/0x370 [ 714.851840][ T38] mutex_lock_nested+0x168/0x1d0 [ 714.851853][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 714.851865][ T38] del_device_store+0xd6/0x370 [ 714.851876][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 714.851885][ T38] ? __pfx_del_device_store+0x10/0x10 [ 714.851897][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 714.851907][ T38] ? sysfs_kf_write+0x166/0x260 [ 714.851918][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 714.851927][ T38] kernfs_fop_write_iter+0x3a5/0x540 [ 714.851944][ T38] vfs_write+0x61e/0xbb0 [ 714.851953][ T38] ? __lock_acquire+0x6df/0x2e40 [ 714.851970][ T38] ? __pfx_vfs_write+0x10/0x10 [ 714.851992][ T38] ksys_write+0x156/0x270 [ 714.852004][ T38] ? __pfx_ksys_write+0x10/0x10 [ 714.852015][ T38] ? trace_syscall_enter+0x58/0x110 [ 714.852029][ T38] ? rcu_is_watching+0x16/0xb0 [ 714.852042][ T38] ? trace_syscall_enter+0x58/0x110 [ 714.852057][ T38] do_syscall_64+0x166/0x520 [ 714.852067][ T38] ? trace_irq_disable+0x3b/0x140 [ 714.852079][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.852088][ T38] ? clear_bhb_loop+0x70/0xc0 [ 714.852100][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.852110][ T38] RIP: 0033:0x7f9dc56de98e [ 714.852118][ T38] RSP: 002b:00007fff07a1e338 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 714.852128][ T38] RAX: ffffffffffffffda RBX: 0000555565ad3500 RCX: 00007f9dc56de98e [ 714.852135][ T38] RDX: 0000000000000001 RSI: 00007fff07a1e3c0 RDI: 0000000000000005 [ 714.852141][ T38] RBP: 00007f9dc57b58a7 R08: 0000000000000000 R09: 0000000000000000 [ 714.852147][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 714.852153][ T38] R13: 00007fff07a1e3c0 R14: 00007f9dc64d4620 R15: 0000000000000003 [ 714.852169][ T38] [ 714.852191][ T38] [ 714.852191][ T38] Showing all locks held in the system: [ 714.852199][ T38] locks held by kworker/0:0/9: 5, last CPU#0: [ 714.852207][ T38] #0: ffff888036cf9138 ((wq_completion)wg-kex-wg1#10){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 714.852239][ T38] #1: ffffc900000e7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 714.852272][ T38] #2: ffffffff8e0594c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 714.852299][ T38] #3: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 714.852324][ T38] #4: ffffffff8e1c3b20 (rcu_read_lock_bh){....}-{1:3}, at: wg_packet_send_staged_packets+0x132/0x14f0 [ 714.852352][ T38] locks held by ksoftirqd/0/15: 5, last CPU#0: [ 714.852359][ T38] #0: ffffffff8e0594c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 714.852385][ T38] #1: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 714.852415][ T38] #2: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x261/0xc50 [ 714.852440][ T38] #3: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 714.852464][ T38] #4: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: __inet_dev_addr_type+0x159/0x560 [ 714.852492][ T38] locks held by khungtaskd/38: 1, last CPU#0: [ 714.852500][ T38] #0: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 714.852525][ T38] locks held by kworker/u8:2/48: 4, last CPU#0: [ 714.852532][ T38] #0: ffff888031ae9938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 714.852558][ T38] #1: ffffc90000ba7c40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 714.852585][ T38] #2: ffffffff8e0594c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 714.852611][ T38] #3: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 714.852639][ T38] locks held by kworker/u8:8/160: 2, last CPU#0: [ 714.852646][ T38] #0: ffff88801f3c8938 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 714.852673][ T38] #1: ffffc9000425fc40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 714.852711][ T38] locks held by kworker/u8:13/3035: 2, on CPU#0: [ 714.852718][ T38] #0: ffff88801f3c8938 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 714.852744][ T38] #1: ffffc9000e43fc40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 714.852770][ T38] locks held by kworker/u8:14/3040: 3, on CPU#0: [ 714.852777][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 714.852802][ T38] #1: ffffc9000e52fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 714.852828][ T38] #2: ffffffff8f5d1a78 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 714.852856][ T38] locks held by kworker/u8:18/3044: 6, on CPU#0: [ 714.852863][ T38] #0: ffff88801aeb0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 714.852888][ T38] #1: ffffc9000e6f7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 714.852914][ T38] #2: ffffffff8f5c3220 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 714.852939][ T38] #3: ffff88805e758160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 714.852963][ T38] #4: ffff88803158c310 (&devlink->lock_key#11){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 714.852989][ T38] #5: ffffffff8e1c9d30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 714.853013][ T38] locks held by kworker/u8:31/3185: 3, on CPU#0: [ 714.853020][ T38] #0: ffff8880326c3138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 714.853046][ T38] #1: ffffc9000ec57c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 714.853087][ T38] #2: ffffffff8f5d1a78 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x123/0x16e0 [ 714.853116][ T38] locks held by getty/5359: 2, on CPU#1: [ 714.855162][ T38] #0: ffff888029b4d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 714.855197][ T38] #1: ffffc900044c32e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 714.855223][ T38] locks held by syz-executor/5605: 1, on CPU#0: [ 714.855230][ T38] #0: ffffffff8e1c9d30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 714.855256][ T38] locks held by kworker/0:5/5733: 5, last CPU#0: [ 714.855263][ T38] #0: ffff888060986538 ((wq_completion)wg-kex-wg2#10){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 714.855293][ T38] #1: ffffc90005f5fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 714.855325][ T38] #2: ffff8880695663e0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0 [ 714.855349][ T38] #3: ffffffff8e310ff0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 714.855375][ T38] #4: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 714.855412][ T38] locks held by syz-executor/11121: 5, on CPU#0: [ 714.855419][ T38] #0: ffff8880355b8510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 714.855445][ T38] #1: ffff888060e4f878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 714.855472][ T38] #2: ffff888029cb25a8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 714.855501][ T38] #3: ffffffff8ee425f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 714.855526][ T38] #4: ffff88805e758160 (&dev->mutex){....}-{4:4}, at: device_del+0xa9/0x8f0 [ 714.855552][ T38] locks held by syz-executor/11161: 4, on CPU#0: [ 714.855559][ T38] #0: ffff8880355b8510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 714.855584][ T38] #1: ffff888025bbe878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 714.855610][ T38] #2: ffff888029cb25a8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 714.855639][ T38] #3: ffffffff8ee425f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 714.855664][ T38] locks held by syz.7.1312/11262: 1, on CPU#0: [ 714.855670][ T38] #0: ffffffff8e1c9d30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 714.855694][ T38] locks held by syz-executor/11338: 1, on CPU#0: [ 714.855700][ T38] #0: ffffffff8e1c9d30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 714.855723][ T38] locks held by syz-executor/11402: 1, on CPU#0: [ 714.855730][ T38] #0: ffffffff8e1c9d30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 714.855752][ T38] locks held by syz-executor/11423: 1, on CPU#0: [ 714.855759][ T38] #0: ffffffff8e1c9d30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 714.855781][ T38] locks held by syz.4.1349/11453: 1, on CPU#0: [ 714.855788][ T38] #0: ffffffff8e1c9d30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 714.855811][ T38] locks held by syz-executor/11481: 1, on CPU#0: [ 714.855818][ T38] #0: ffffffff8e1c9d30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 714.855840][ T38] locks held by syz.0.1356/11484: 1, on CPU#0: [ 714.855847][ T38] #0: ffff888037208098 (&mddev->suspend_mutex){+.+.}-{4:4}, at: mddev_suspend+0x10f/0x6f0 [ 714.855870][ T38] locks held by syz-executor/11495: 1, on CPU#0: [ 714.855877][ T38] #0: ffffffff8f5d1a78 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 714.855902][ T38] locks held by syz-executor/11523: 2, on CPU#0: [ 714.855909][ T38] #0: ffffffff8f5c3220 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780 [ 714.855933][ T38] #1: ffffffff8e1c9d30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 714.855956][ T38] locks held by syz-executor/11539: 2, on CPU#0: [ 714.855963][ T38] #0: ffffffff8f5c3220 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780 [ 714.855986][ T38] #1: ffffffff8f5d1a78 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x28e/0x8d0 [ 714.856011][ T38] locks held by syz-executor/11574: 1, on CPU#0: [ 714.856018][ T38] #0: ffffffff8f5d1a78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 714.856045][ T38] locks held by syz-executor/11586: 1, on CPU#0: [ 714.856052][ T38] #0: ffffffff8f5d1a78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 714.856077][ T38] locks held by syz-executor/11597: 1, on CPU#0: [ 714.856084][ T38] #0: ffffffff8f5d1a78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 714.856109][ T38] locks held by syz-executor/11605: 1, on CPU#0: [ 714.856116][ T38] #0: ffffffff8f5d1a78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 714.856142][ T38] locks held by syz-executor/11609: 1, on CPU#0: [ 714.856149][ T38] #0: ffffffff8f5d1a78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 714.856175][ T38] [ 714.856178][ T38] ============================================= [ 714.856178][ T38] [ 714.856183][ T38] NMI backtrace for cpu 0 [ 714.856201][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 714.856215][ T38] Tainted: [L]=SOFTLOCKUP [ 714.856218][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 714.856224][ T38] Call Trace: [ 714.856228][ T38] [ 714.856233][ T38] dump_stack_lvl+0xe8/0x150 [ 714.856248][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 714.856263][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 714.856280][ T38] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 714.856295][ T38] sys_info+0x135/0x170 [ 714.856308][ T38] watchdog+0xfd7/0x1030 [ 714.856324][ T38] ? watchdog+0x1c7/0x1030 [ 714.856339][ T38] kthread+0x38b/0x470 [ 714.856349][ T38] ? __pfx_watchdog+0x10/0x10 [ 714.856360][ T38] ? __pfx_kthread+0x10/0x10 [ 714.856370][ T38] ret_from_fork+0x514/0xb70 [ 714.856381][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 714.856395][ T38] ? __switch_to+0xc89/0x1420 [ 714.856410][ T38] ? __pfx_kthread+0x10/0x10 [ 714.856420][ T38] ret_from_fork_asm+0x1a/0x30 [ 714.856436][ T38] [ 714.856448][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 718.197474][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 718.208650][ T38] Tainted: [L]=SOFTLOCKUP [ 718.212950][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 718.222981][ T38] Call Trace: [ 718.226245][ T38] [ 718.229155][ T38] vpanic+0x56d/0xa60 [ 718.233128][ T38] ? __pfx_vpanic+0x10/0x10 [ 718.237606][ T38] ? console_srcu_read_unlock+0x3a/0x60 [ 718.243134][ T38] panic+0xc5/0xd0 [ 718.246830][ T38] ? __pfx_panic+0x10/0x10 [ 718.251220][ T38] ? nmi_cpu_backtrace+0x2b0/0x2d0 [ 718.256319][ T38] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 718.262458][ T38] watchdog+0x1030/0x1030 [ 718.266773][ T38] ? watchdog+0x1c7/0x1030 [ 718.271173][ T38] kthread+0x38b/0x470 [ 718.275218][ T38] ? __pfx_watchdog+0x10/0x10 [ 718.279893][ T38] ? __pfx_kthread+0x10/0x10 [ 718.284468][ T38] ret_from_fork+0x514/0xb70 [ 718.289120][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 718.294223][ T38] ? __switch_to+0xc89/0x1420 [ 718.298907][ T38] ? __pfx_kthread+0x10/0x10 [ 718.303476][ T38] ret_from_fork_asm+0x1a/0x30 [ 718.308230][ T38] [ 718.311292][ T38] Kernel Offset: disabled [ 718.315602][ T38] Rebooting in 86400 seconds..