last executing test programs: 5.333334787s ago: executing program 3 (id=645): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='sessname=s0 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) 5.191210861s ago: executing program 3 (id=649): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x1d0, 0x138, 0x1, 0x0, 0x80000, 0x0, 0x0, @by_dev, [@raid={0x0, 0x2440, 0x0, 0x98, 'raid\x00', {'raid5_rs', 0x20, '2 64 raid10_use_near_sets', 0x20, 0x2, [{0x20, @none, 0x20, @ram_num={'1:', 0x1}}, {0x20, @none, 0x20, @ram_num={'1:', 0x0}}]}}]}) 5.159299091s ago: executing program 3 (id=651): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000140)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x40040) 4.45036218s ago: executing program 0 (id=668): r0 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000b40)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000080)='proc\x00', 0x1c9, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r2 = syz_open_procfs(r0, &(0x7f0000000100)='map_files\x00') fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) 4.42304788s ago: executing program 0 (id=669): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x8, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xe, 0xb}, {0x7, 0x5}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x40}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0xc}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240048e4}, 0x40) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x40480, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000004c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000580)=[{&(0x7f00000005c0)="27030200e61114120600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 4.281439414s ago: executing program 1 (id=670): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='27', 0x2) socket$kcm(0x10, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x121301, 0x0) 4.280426324s ago: executing program 1 (id=671): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$dvb_dvr(&(0x7f0000000840), 0xb4, 0x127d40) ioctl$DVB_DVR_DMX_EXPBUF(r2, 0xc00c6f3e, &(0x7f0000000880)={0x80, 0x0, r0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000540)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000580)={'pcl816\x00', [0x300, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}) ioctl$COMEDI_CMD(r3, 0x80506409, &(0x7f0000000640)={0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x10, 0x2710, 0x20, 0x1, 0x1, 0x0, &(0x7f00000006c0)=[0x0], 0x1, 0x0}) ioctl$COMEDI_BUFINFO(r3, 0xc02c640e, &(0x7f0000000700)={0x0, 0x80}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000280)={r0, &(0x7f0000000180)='wlan0\x00', 0x204040, &(0x7f00000001c0)={@align=0x5, {0xd, 0x4, 0x8a0c, 0x9f7b}}, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x1}) r5 = syz_open_dev$video(&(0x7f0000000400), 0x3, 0x80000) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000440)={0xa, @raw_data="6950ebba2a586e459ab08a3ce6fd0087688e8c9f7c30af985a1d13a1385fb41daf5dc95711be4aab90bf4b76d52e6802b3a0ae21458635a43a410c0cd2901915e248e63ab6c0683a31f01024e3747abbbf4a5de939ac0df25db083ee94b51ac8e8464e55249a5e2bae1e4d447b10de9e2915ae80e955b33bea4b4962a0170b0b32d7579166d53ca7c2229ea1cd6d37a04cb7ba9db8ac79274f86509a6902410b64ece912783a250e488efc61beb8034f79d8a67ed9309eff06bfaa043008baa43b606b1acf3670f7"}) r6 = socket$inet_icmp(0x2, 0x2, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="300e0000240001050000000000000000000000000100000000000100ffffffff00000000090001007072696f00000000180002000300000000000000000000000000000000000000e80d08001c0001000000000000000000000000000000000000000000e2060000c80d02"], 0xe30}}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x110) write(r8, &(0x7f0000000300)='27', 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000340)={r6, r8}) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x7) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f00000003c0), 0x6) ioctl$sock_bt_hci(r9, 0x400448e6, &(0x7f0000000400)) ioctl$sock_bt_hci(r9, 0x400448e7, &(0x7f0000000440)) 4.207335975s ago: executing program 0 (id=672): r0 = syz_usb_connect$uac1(0x4, 0xac, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000080)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r2, &(0x7f0000000240)='7', 0x1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) write$char_usb(r2, &(0x7f00000002c0)="be", 0x1) syz_usb_disconnect(r1) syz_usb_connect$uac2(0x0, 0xa9, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x58ee1e94) syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x84, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000200006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090b0002"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) 3.002558516s ago: executing program 2 (id=682): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x8, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xe, 0xb}, {0x7, 0x5}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x40}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0xc}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240048e4}, 0x40) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x40480, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000004c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000580)=[{&(0x7f00000005c0)="27030200e61114120600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 2.80817127s ago: executing program 2 (id=683): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) listen(r0, 0x5) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x42, 0xa}, {0x80, 0x40, 0x100, 0x100, 0xa}}}}, 0x17) close(0xffffffffffffffff) 2.289601363s ago: executing program 2 (id=684): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x80) 2.273039224s ago: executing program 2 (id=685): socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x0, &(0x7f0000000380), 0x1, 0x50f, &(0x7f0000000a00)="$eJzs3UFsI1cZAODfTpw42bRJSw8FQbu0hQWt1km8bVT1AOWEEKqE6BGkbUi8URQ7jmKnNGEP6ZkrEpU4wZELN849ceeC4MalHJAWiEAbJA5GM54k3qy9sTaJncbfJ41m3ryx//9tMu+tX2y/AEbWzYjYj4iJiPggImaz87lsi3fbW3Ldo4MHK4cHD1Zy0Wq9/89cWp+ci47HJG5kz1mMiB9+N+InuSfjNnb3Npar1cp2Vp5v1rbmG7t7d9Zry2uVtcpmuby0uLTw9t23yhfW1ldrE9nRVz774/43f5akNZOd6WzHRWo3vXAcJzEeEd+/jGBDMJa1Z2LYifBM8hHxYkS8lt7/szGW/jQBgOus1ZqN1mxnGQC47vLpHFguX8rmAmYiny+V2nN4L8V0vlpvNG/fr+9srrbnyuaikL+/Xq0sZHOFc1HIJeXF9PikXD5VvhsRL0TELyan0nJppV5dHeZ/fABghN04Nf7/Z7I9/gMA11xx2AkAAANn/AeA0WP8B4DRY/wHgNHTHv+nhp0GADBAXv8DwOgx/gPASPnBe+8lW+sw+/7r1Q93dzbqH95ZrTQ2SrWdldJKfXurtFavr6Xf2VM76/mq9frW4pux89Hct7YazfnG7t69Wn1ns3kv/V7ve5VCetX+AFoGAPTywquf/iWXjMjvTKVbdKzlUBhqZsBlyw87AWBoxoadADA0VvuC0XWO1/imB+DzrsvavN0Uu31AqNVqtS4hJWAwbn3R/D+Mqo75f+8ChhFj/h9Gl/l/GF2tVq7fNf+j3wsBgKvNHD/Q420AL2b732Z/HPjx6ukrPrnMrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBqO1r/t5StBT4T+XypFPFcRMxFIXd/vVpZiIjnI+LPk4XJpLw45JwBgPPK/z2Xrf91a/aNmceqXrlxfDgRET/91fu//Gi52dz+U8RE7l+TR+ebn2Tny4PPHgA429E4ne47Xsg/OniwcrQNMp+H34mIYjv+4cFEHB7HH4/xdF+MQkRM/zuXldtyHXMX57H/cUS83K39uZhJ50DaK5+ejp/Efm6g8fOPxc+nde198m/xhQvIBUbNp0n/8263+y8fN9N95/1/slp6Me2hzi/r/5KnWjlM+8CT+Ef931iP/u9mvzHe/MP32kdT2YNPVnt++HHEl8YjjmIfdvQ/R/FzPeK/0Wf8v375ldd61bV+HXErusfvjDXfrG3NN3b37qzXltcqa5XNcnlpcWnh7btvlefTOer53qPBP965/XyvuqT90z3iF89o/9f6bP9v/vfBj776lPjfeL1b/Hy89JT4yW/i1/uMvzz9+2KvuiT+ao/2n/Xzv91n/M/+tvfEsuEAwPA0dvc2lqvVyvaIHvzuaqQxYgfj8YwPT35lh518r4Nv93/xy+eKNRHdq37+evuePlXVaj1TrF49xkXMugFXwfFNHxH/HXYyAAAAAAAAAAAAAABAV4P4dNSw2wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD19f8AAAD//+7Mzkc=") prlimit64(0x0, 0xe, &(0x7f0000000280)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000001000)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000010c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000001140), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001180), 0x4000087, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x20) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 1.376498786s ago: executing program 1 (id=686): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x80003, 0xff) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r0 = fanotify_init(0x0, 0x400) pipe2(&(0x7f00000000c0), 0x80000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x65, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) userfaultfd(0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 1.375524176s ago: executing program 4 (id=687): ioctl$DM_DEV_CREATE(0xffffffffffffffff, 0xc138fd03, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(0xffffffffffffffff, 0xc138fd09, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x1d0, 0x138, 0x1, 0x0, 0x80000, 0x0, 0x0, @by_dev={r0}, [@raid={0x0, 0x2440, 0x0, 0x98, 'raid\x00', {'raid5_rs', 0x20, '2 64 raid10_use_near_sets', 0x20, 0x2, [{0x20, @none, 0x20, @ram_num={'1:', 0x1}}, {0x20, @none, 0x20, @ram_num={'1:', 0x0}}]}}]}) 1.344351957s ago: executing program 3 (id=688): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='sessname=s0 device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) 1.272070169s ago: executing program 4 (id=689): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x101301) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, 0x0) 1.271535149s ago: executing program 1 (id=690): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000100)=[@increfs]}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000200)=[@acquire]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}]}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000400)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0xa4, 0x0, &(0x7f0000000740)}) 1.271290649s ago: executing program 3 (id=691): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000100)=[@increfs]}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000200)=[@acquire]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}]}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000400)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000840)={0x4c, 0x0, &(0x7f0000000880)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}]}) 1.186529581s ago: executing program 4 (id=692): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000540)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000005c0), 0x40000000000035d, 0x20000084) recvmmsg(r3, &(0x7f0000000600), 0x191d1f8, 0x10042, 0x0) memfd_create(&(0x7f0000000640)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0}, &(0x7f0000000600)=0xc) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1=0xe0000002, @in=@remote, 0x3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x6, 0x0, r5}, {0x5, 0x0, 0xffffffffffffffff, 0x5, 0x8, 0x8, 0x1, 0xfffffffffffffffd}, {0xf90, 0xfffffffffffffffd}, 0x2, 0x6e6bb5, 0x0, 0x0, 0x0, 0x1}, [@mark={0xc, 0x15, {0x35075a, 0x5}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x95047903f1c38c89) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x20004850) sendmsg$nl_xfrm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd25, 0x25dfdbff, {{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x20, 0x87}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x1000, 0x200000000000000}, 0x800, 0x6e6bb0, 0x0, 0x1, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x8008010) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}}, 0x0) 1.186273971s ago: executing program 1 (id=693): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1000800, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x2, 0x5524, &(0x7f00000108c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="020000000100030000000000040001000000010020"], 0x1c, 0x2) chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x183341, 0x0) 1.167024691s ago: executing program 0 (id=694): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) listen(r0, 0x5) r1 = accept4(r0, 0x0, 0x0, 0x0) close(r1) 1.103444633s ago: executing program 2 (id=695): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x80) 299.646743ms ago: executing program 3 (id=696): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000640)={0x24, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="002290"], 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f00000006c0), 0x0, 0x8000) syz_usb_disconnect(r0) r1 = syz_usb_connect$uac3(0x5, 0x86, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x582, 0x23, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x3, 0x1, 0x9e, 0x0, 0xb, {0x8, 0xb, 0x0, 0x2, 0x1, 0x26, 0x30, 0xc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xff, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x2, 0x9, 0xc, {0xa, 0x25, 0x25, 0x4, 0x5, 0xe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xff, 0xff, 0x3, {0xa, 0x25, 0x25, 0x5, 0x9d, 0x5}}}}}}}}]}}, 0x0) syz_usb_control_io$uac3(r1, &(0x7f0000000440)={0x14, &(0x7f0000000480)={0x20, 0xc, 0x2, {0x2, 0x1}}, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) 280.286044ms ago: executing program 2 (id=697): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x8, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xe, 0xb}, {0x7, 0x5}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x40}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0xc}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240048e4}, 0x40) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x40480, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000480), 0x56) sendmsg$kcm(r4, &(0x7f00000004c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x80, &(0x7f0000000580)=[{&(0x7f00000005c0)="27030200e61114120600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 174.583946ms ago: executing program 0 (id=698): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000cc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000f00)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x8a35e4275461c863}, 0xc, &(0x7f0000000f80)={&(0x7f0000000fc0)={0x58, r1, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x69}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x399}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x27b}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x58}}, 0x24000000) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000010c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="0a00180003030303030300004ffff691c440273a7de8f85899c4822be7882007b1c951180f0ad531127346693d80892808d4c583f30e49eb2b43d64fe642c3dcfea2944e"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000011c0)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000001400)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r3, &(0x7f0000001440)="0802110000010802110000000800", 0xe) 86.225748ms ago: executing program 0 (id=699): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000140)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x40040) write$nci(r0, &(0x7f0000000380)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x1, 0x3, 0x0, 0x5, {0x1, 0x9, "189bcc"}}, 0x8) write$nci(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="500404"], 0x7) write$nci(r0, &(0x7f0000000cc0)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x70bd28, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffff3d}]}, 0x24}, 0x1, 0x0, 0x0, 0x4851}, 0x0) 41.11449ms ago: executing program 4 (id=700): r0 = openat$dm_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x1d0, 0x138, 0x1, 0x0, 0x80000, 0x0, 0x0, @by_dev={r1}, [@raid={0x0, 0x2440, 0x0, 0x98, 'raid\x00', {'raid5_rs', 0x20, '2 64 raid10_use_near_sets', 0x20, 0x2, [{0x20, @none, 0x20, @ram_num={'1:', 0x1}}, {0x20, @none, 0x20, @ram_num={'1:', 0x0}}]}}]}) 1.13542ms ago: executing program 4 (id=701): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x80003, 0xff) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r0 = fanotify_init(0x0, 0x400) pipe2(&(0x7f00000000c0), 0x80000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x65, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) userfaultfd(0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) 970.011µs ago: executing program 4 (id=702): r0 = openat$dm_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000018c0)={0x4, 0x0, 0x0, 0x1b0, 0x138, 0x1, 0x0, 0x80000, 0x0, 0x0, @by_dev={r1}, [@raid={0x0, 0x3fffffffffffff, 0x0, 0x78, 'raid\x00', {'raid5_rs', 0x20, '2 64 nosync', 0x20, 0x2, [{0x20, @none, 0x20, @ram_num={'1:', 0x1}}, {0x20, @none, 0x20, @ram={'/dev/ram', 0x0}}]}}]}) 0s ago: executing program 1 (id=703): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x75d, &(0x7f0000000d00)={[{@oldalloc}, {@noblock_validity}, {@discard}, {@errors_remount}, {@lazytime, 0x0}, {@sb={'sb', 0x3d, 0x80000000}}, {@noload}, {@journal_checksum}, {@mblk_io_submit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@init_itable}, {@data_ordered}, {@journal_dev={'journal_dev', 0x3d, 0x769}}, {@norecovery}, {@bh}, {@dax_never}, {@dax_inode}], [{@subj_user={'subj_user', 0x3d, 'audit'}}, {@hash}, {@smackfshat={'smackfshat', 0x3d, '\xc6\x92\f\f\xc2\x8d\xaeaUj\xecR]O\xe7\x802p\xeb\xd6\\\xa8\x17_\x98\x85>\x1d\xa7\xfd@\xad\fs*n|\x9eQ|\'\x06r\x81\xdd\x80*\xb8Di\xc9\xdc\xd6\xcf\x9f\'L\xc8\x84E$\xce\x84\x12\xb1\xd1\x87N\xacN7\v\x03p\x96\xb2\xcd\x18\x87.\xd2\x81$\x85\xac\xd3\x8fj\xc8\x16\xcf\x16\xaf\xb2\xa5\x8c]\xd9N\x92\x06\xe9\xbd\xd1\x04\xee\xe5U\x91Y\xfa&$z\xb4\xb2J\xcbP\x88\xad,\xfb\x85\x16\x05\x95\x85>\xa3\xd0\x9fPd\x82\xafS\xef,\xa5\xd7\x12\xbc'}}, {@obj_role={'obj_role', 0x3d, '\xf9'}}, {@measure}], 0x2c}, 0xa, 0x526, &(0x7f00000007c0)="$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") syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000980)=ANY=[], 0x4, 0x291, &(0x7f0000000600)="$eJzs281qE1EYxvGn6Yf9sJ1otdqKeNCNboY23oChtCAGlNqIHyBM7URDpknJhEpEbHduvY7i0p0g3kA3XoELd9247EIc6WTaJnFaqmBG4/+3mTeceSZneM+Es8hs33+zUir4dsGpKdVj1CcNaEdKK6VeNfREx1RYD6jZhq6N5z5fvPvg4a1sLje3YMx8dvF6xhgzdunD85dvL3+sjdx7N/b+hLbSj7e/Zr5sTWxNbn9ffFb0TdE35UrNOGapUqk5S55rlot+yTbmjuc6vmuKZd+ttowXvMrqat045eXR4dWq6/vGKddNya2bWsXUqnXjPHWKZWPbthkdFo7Wn/QE0BHVataZlTT100h+M5EJAQCARMXs/zcS2f/fiC7I/r+D8psLC0426Vngz9rd/z+Knt9W7P8BAAAAAAAAAAAAAAAAAAAAAPgX7ASBFQSBtXfsl8I3fILo85CkYUnr0fmjksYkWZLSkk5JOi1pXNIZSWclTUg6J+m8pMmmayV8q4hxWP972/o/Iukk/e86O8He+3xHP//0vzsd9/ef/nenphd3B6WV12v5tXzj2BjPFlSUJ1fTsvQt7GWkUc/fzM1Nm1BaF1bWo/z6Wr63NT8ja3fBxOVnGnnTmk+F624/n5G1u8Di8pnY/KCuXmnK27L06Ykq8rQcrsmD/KsZY2Zv59ryU+F53c42+2L7Z9uHjTfyx1gfwXRsf/o01ZfsvUPy6y9Kjue51Q4WQ0l8KcVvFvo7pkHR6b7jP3DQ9KRnAgAAAAAAAAAAAAAAAAD4FZ34O2HS9wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLsfAQAA//8ubFQg") socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x37}, 0xfffffffd}, 0x1c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(r0, &(0x7f0000002080)={0xfc, {"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", 0xff7d}}, 0x1006) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) quotactl$Q_SYNC(0xffffffff80000100, 0xd00, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.5' (ED25519) to the list of known hosts. syzkaller login: [ 28.509788][ T4316] cgroup: Unknown subsys name 'net' [ 28.750203][ T4316] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.045900][ T4316] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 29.767809][ T4334] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.769815][ T4334] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.771359][ T4334] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.777804][ T4332] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.780238][ T4341] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.782218][ T4341] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.783982][ T4341] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.785606][ T4341] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.786930][ T4341] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.788681][ T4341] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.790379][ T4341] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.791729][ T4341] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.793014][ T4341] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.794352][ T4341] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.795760][ T4341] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.797711][ T4341] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 29.799148][ T4341] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.800533][ T4341] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.801965][ T4341] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.803570][ T4341] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 29.805377][ T4341] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.806751][ T4341] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 29.807799][ T4342] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.808633][ T4341] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.809809][ T4345] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.811028][ T4341] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.812397][ T4345] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 29.814461][ T4341] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 29.815015][ T4345] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.817027][ T4341] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.872702][ T4337] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.875635][ T4329] rdma_rxe: rxe_register_device failed with error -23 [ 29.877015][ T4329] rdma_rxe: failed to add rxe_eth0 [ 29.878460][ T4336] rdma_rxe: rxe_register_device failed with error -23 [ 29.878986][ T4335] rdma_rxe: rxe_register_device failed with error -23 [ 29.880203][ T4336] rdma_rxe: failed to add rxe_eth0 [ 29.881001][ T4335] rdma_rxe: failed to add rxe_eth0 [ 29.908919][ T4337] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.910432][ T4337] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.931248][ T4328] rdma_rxe: rxe_register_device failed with error -23 [ 29.932544][ T4328] rdma_rxe: failed to add rxe_eth0 [ 29.956486][ T4337] infiniband rxe0: set active [ 29.962652][ T112] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.967613][ T4337] infiniband rxe0: added rxe_eth0 [ 29.995431][ T4337] RDS/IB: rxe0: added [ 29.996246][ T4337] smc: adding ib device rxe0 with port count 1 [ 29.997376][ T4337] smc: ib device rxe0 port 1 has pnetid [ 30.014399][ T3901] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.029435][ T4337] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.040406][ T4329] chnl_net:caif_netlink_parms(): no params data found [ 30.079004][ T4335] chnl_net:caif_netlink_parms(): no params data found [ 30.089407][ T4337] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.099537][ T4336] chnl_net:caif_netlink_parms(): no params data found [ 30.101589][ T4328] chnl_net:caif_netlink_parms(): no params data found [ 30.139162][ T4337] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.147589][ T4335] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.148862][ T4335] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.150548][ T4335] device bridge_slave_0 entered promiscuous mode [ 30.153101][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.154322][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.155870][ T4329] device bridge_slave_0 entered promiscuous mode [ 30.181219][ T4335] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.182548][ T4335] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.184312][ T4335] device bridge_slave_1 entered promiscuous mode [ 30.185736][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.187132][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.191084][ T4329] device bridge_slave_1 entered promiscuous mode [ 30.192815][ T4337] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.215137][ T4336] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.220389][ T4336] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.225056][ T4336] device bridge_slave_0 entered promiscuous mode [ 30.235060][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.236324][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.238208][ T4328] device bridge_slave_0 entered promiscuous mode [ 30.241362][ T4337] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.253527][ T4335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.255223][ T4336] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.256447][ T4336] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.258351][ T4336] device bridge_slave_1 entered promiscuous mode [ 30.267034][ T4335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.271131][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.272427][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.274337][ T4328] device bridge_slave_1 entered promiscuous mode [ 30.278881][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.291006][ T4336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.295207][ T3994] infiniband rxe0: set active [ 30.310274][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.319065][ T4328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.321923][ T4335] team0: Port device team_slave_0 added [ 30.324231][ T4335] team0: Port device team_slave_1 added [ 30.325173][ T3901] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.329782][ T4336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.335171][ T4329] team0: Port device team_slave_0 added [ 30.339668][ T4328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.345624][ T4329] team0: Port device team_slave_1 added [ 30.351951][ T4336] team0: Port device team_slave_0 added [ 30.353949][ T4336] team0: Port device team_slave_1 added [ 30.364023][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.365346][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.370292][ T4335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.375106][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.376313][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.382880][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.386425][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.387897][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.392564][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.395804][ T4328] team0: Port device team_slave_0 added [ 30.397182][ T4336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.400441][ T4336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.404781][ T4336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.407156][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.408792][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.413056][ T4335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.430030][ T4328] team0: Port device team_slave_1 added [ 30.431512][ T4336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.432819][ T4336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.439486][ T4336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.450209][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.451525][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.456493][ T4328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.509209][ T4329] device hsr_slave_0 entered promiscuous mode [ 30.547684][ T4329] device hsr_slave_1 entered promiscuous mode [ 30.587839][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.589138][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.593667][ T4328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.668536][ T4335] device hsr_slave_0 entered promiscuous mode [ 30.717562][ T4335] device hsr_slave_1 entered promiscuous mode [ 30.757390][ T4335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.758745][ T4335] Cannot create hsr debugfs directory [ 30.808414][ T4336] device hsr_slave_0 entered promiscuous mode [ 30.847440][ T4336] device hsr_slave_1 entered promiscuous mode [ 30.897499][ T4336] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.898869][ T4336] Cannot create hsr debugfs directory [ 30.980151][ T4328] device hsr_slave_0 entered promiscuous mode [ 31.017611][ T4328] device hsr_slave_1 entered promiscuous mode [ 31.060923][ T4328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.062437][ T4328] Cannot create hsr debugfs directory [ 31.119080][ T4337] chnl_net:caif_netlink_parms(): no params data found [ 31.160193][ T4337] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.161561][ T4337] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.163308][ T4337] device bridge_slave_0 entered promiscuous mode [ 31.168109][ T4337] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.169524][ T4337] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.171190][ T4337] device bridge_slave_1 entered promiscuous mode [ 31.186998][ T4337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.189843][ T4337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.196175][ T4337] team0: Port device team_slave_0 added [ 31.198463][ T4337] team0: Port device team_slave_1 added [ 31.208797][ T4336] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.239046][ T4336] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.278566][ T4337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.279769][ T4337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.284190][ T4337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.290398][ T4336] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.328826][ T4337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.330116][ T4337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.335054][ T4337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.342236][ T4336] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.388964][ T4329] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.431311][ T4329] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.468825][ T4329] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.509224][ T4329] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.578443][ T4337] device hsr_slave_0 entered promiscuous mode [ 31.617531][ T4337] device hsr_slave_1 entered promiscuous mode [ 31.657389][ T4337] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.658683][ T4337] Cannot create hsr debugfs directory [ 31.682548][ T4335] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.724800][ T4335] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.765487][ T4335] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.809043][ T4335] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.857549][ T4345] Bluetooth: hci0: command 0x0409 tx timeout [ 31.857553][ T4334] Bluetooth: hci4: command 0x0409 tx timeout [ 31.858631][ T4345] Bluetooth: hci1: command 0x0409 tx timeout [ 31.859658][ T4334] Bluetooth: hci3: command 0x0409 tx timeout [ 31.891064][ T4328] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.918679][ T4328] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.947579][ T4334] Bluetooth: hci2: command 0x0409 tx timeout [ 31.968990][ T4328] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.002624][ T4328] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.071976][ T4337] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.099336][ T4337] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.144017][ T4337] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.195598][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.202330][ T4336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.204791][ T4337] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.266105][ T4335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.268910][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.270883][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.274301][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.278582][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.280472][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.286329][ T4336] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.290284][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.292458][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.294414][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.295684][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.298386][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.310250][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.312429][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.314359][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.315680][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.317236][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.319745][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.321373][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.323126][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.325139][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.326386][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.330059][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.336278][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.338833][ T4335] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.343178][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.345111][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.346563][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.348302][ T1613] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.349465][ T1613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.361066][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.363708][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.365444][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.368574][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.375421][ T4328] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.378225][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.380099][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.381704][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.382932][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.384453][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.386202][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.389546][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.390792][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.392305][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.393806][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.395241][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.399497][ T1613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.406403][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.408338][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.410085][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.411827][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.413492][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.416612][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.418564][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.421362][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.422593][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.435386][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.437118][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.440156][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.441886][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.443727][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.445306][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.446910][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.449959][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.451249][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.452797][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.454590][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.456241][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.459226][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.460944][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.462690][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.464492][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.466043][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.468196][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.469838][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.484170][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.486365][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.488648][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.490551][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.492140][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.493717][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.495267][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.496876][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.499013][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.500700][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.502354][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.504065][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.505637][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.509360][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.514099][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.516769][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.519644][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.521328][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.522854][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.532588][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.537184][ T4337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.541097][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.542918][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.556621][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.562310][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.564011][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.569584][ T4337] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.579135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.580928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.582406][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.583637][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.585347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.604328][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.606168][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.611552][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.612784][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.624792][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.627042][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.639312][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.642191][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.643947][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.646175][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.658668][ T4335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.660169][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.661915][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.664120][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.665600][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.676893][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.679739][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.681102][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.694588][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.699280][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.701130][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.702698][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.704115][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.711905][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.713295][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.717059][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.723835][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.725203][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.728904][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.735589][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.737879][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.745591][ T4336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.760702][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.762559][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.767127][ T4335] device veth0_vlan entered promiscuous mode [ 32.780175][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.781872][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.783400][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.785059][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.787114][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.789711][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.802910][ T4329] device veth0_vlan entered promiscuous mode [ 32.806360][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.808234][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.809974][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.811644][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.813674][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.815586][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.820139][ T4329] device veth1_vlan entered promiscuous mode [ 32.826902][ T4337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.833066][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.834684][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.836285][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.838587][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.842353][ T4336] device veth0_vlan entered promiscuous mode [ 32.844836][ T4335] device veth1_vlan entered promiscuous mode [ 32.859745][ T4336] device veth1_vlan entered promiscuous mode [ 32.864520][ T4329] device veth0_macvtap entered promiscuous mode [ 32.867038][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.868929][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.870490][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.872153][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.873762][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.875757][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.885530][ T4337] device veth0_vlan entered promiscuous mode [ 32.888160][ T4336] device veth0_macvtap entered promiscuous mode [ 32.894374][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.896230][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.899491][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.901269][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.902956][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.904576][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.906227][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.908533][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.910219][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.912763][ T4329] device veth1_macvtap entered promiscuous mode [ 32.921651][ T4335] device veth0_macvtap entered promiscuous mode [ 32.925689][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.929034][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.930726][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.932141][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.933757][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.935435][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.946713][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.949325][ T4335] device veth1_macvtap entered promiscuous mode [ 32.953509][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.955453][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.957132][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.959984][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.964137][ T4328] device veth0_vlan entered promiscuous mode [ 32.968631][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.971114][ T4336] device veth1_macvtap entered promiscuous mode [ 32.973288][ T4337] device veth1_vlan entered promiscuous mode [ 32.974958][ T4328] device veth1_vlan entered promiscuous mode [ 32.976458][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.980801][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.982384][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.983995][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.985610][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.987086][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.989269][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.990861][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.992386][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.994986][ T4329] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.996556][ T4329] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.999062][ T4329] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.000591][ T4329] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.026931][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.030519][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.033169][ T4336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.036019][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.038796][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.040595][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.042568][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.045249][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.049793][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.052336][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.053795][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.055661][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.060050][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.061821][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.066943][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.070070][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.072580][ T4336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.084434][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.086455][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.091216][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.093024][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.094747][ T4335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.096534][ T4335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.100234][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.102822][ T4336] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.104436][ T4336] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.106014][ T4336] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.107830][ T4336] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.111847][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.113726][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.115337][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.117044][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.118996][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.120557][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.122063][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.123752][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.125536][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.129591][ T4337] device veth0_macvtap entered promiscuous mode [ 33.132933][ T4335] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.134305][ T4335] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.135739][ T4335] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.137223][ T4335] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.146310][ T4337] device veth1_macvtap entered promiscuous mode [ 33.151171][ T4328] device veth0_macvtap entered promiscuous mode [ 33.155340][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.157025][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.159311][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.163968][ T4328] device veth1_macvtap entered promiscuous mode [ 33.169990][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.171358][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.173242][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.206113][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.208496][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.210349][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.212309][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.214137][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.216047][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.220040][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.221463][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.223377][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.226665][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.230208][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.232036][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.233831][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.235553][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.238186][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.240009][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.241856][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.244295][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.248153][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.250179][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.251859][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.253889][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.255682][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.257938][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.260355][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.264426][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.266107][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.268755][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.270977][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.272802][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.274573][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.276167][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.277983][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.280524][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.285295][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.286978][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.289822][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.291969][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.294804][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.296538][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.303848][ T4328] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.305482][ T4328] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.307043][ T4328] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.310278][ T4328] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.323772][ T4337] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.325295][ T4337] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.326826][ T4337] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.332331][ T4337] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.336443][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.338404][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.343448][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.345041][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.354091][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.355763][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.382298][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.383804][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.385224][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.392355][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.394713][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.409497][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.424521][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.425948][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.429452][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.442992][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.444493][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.445942][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.475376][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.475755][ T4452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8'. [ 33.476870][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.477017][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.486686][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.491016][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.551695][ T4462] device-mapper: table: 248:0: raid: max_write_behind option is only valid for RAID1 (-EINVAL) [ 33.553587][ T4462] device-mapper: ioctl: error adding target to table [ 33.558648][ T79] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.654493][ T4479] binder: 4475:4479 tried to acquire reference to desc 0, got 1 instead [ 33.656840][ T4479] binder: 4475:4479 got transaction with too large buffer [ 33.658983][ T4479] binder: 4475:4479 transaction call to 4475:0 failed 5/29201/-22, size 88-24 line 3521 [ 33.661084][ T4409] binder: undelivered TRANSACTION_ERROR: 29201 [ 33.663909][ T4474] svc: failed to register nfsdv3 RPC service (errno 111). [ 33.672329][ T4474] svc: failed to register nfsaclv3 RPC service (errno 111). [ 33.937678][ T4334] Bluetooth: hci1: command 0x041b tx timeout [ 33.937789][ T4330] Bluetooth: hci4: command 0x041b tx timeout [ 33.939020][ T4334] Bluetooth: hci0: command 0x041b tx timeout [ 34.005813][ T4499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.013940][ T4499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.017649][ T4334] Bluetooth: hci2: command 0x041b tx timeout [ 34.292254][ T4512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 34.618358][ T4546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.625890][ T4546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.645588][ T4546] FAULT_INJECTION: forcing a failure. [ 34.645588][ T4546] name failslab, interval 1, probability 0, space 0, times 1 [ 34.651306][ T4546] CPU: 0 PID: 4546 Comm: syz.2.39 Not tainted syzkaller #0 [ 34.652627][ T4546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 34.654438][ T4546] Call trace: [ 34.655031][ T4546] dump_backtrace+0x1c4/0x1f0 [ 34.655906][ T4546] show_stack+0x2c/0x3c [ 34.656789][ T4546] __dump_stack+0x30/0x40 [ 34.657562][ T4546] dump_stack_lvl+0xf4/0x15c [ 34.658390][ T4546] dump_stack+0x1c/0x5c [ 34.659142][ T4546] should_fail_ex+0x3cc/0x524 [ 34.660010][ T4546] __should_failslab+0xc0/0x11c [ 34.660849][ T4546] should_failslab+0x10/0x28 [ 34.661655][ T4546] kmem_cache_alloc+0x88/0x310 [ 34.662555][ T4546] __kernfs_new_node+0xec/0x5fc [ 34.663451][ T4546] kernfs_new_node+0x120/0x230 [ 34.664318][ T4546] __kernfs_create_file+0x60/0x2e0 [ 34.665222][ T4546] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 34.666178][ T4546] sysfs_create_file_ns+0x10c/0x19c [ 34.667115][ T4546] driver_create_file+0x54/0x70 [ 34.667955][ T4546] bus_add_driver+0x3a8/0x518 [ 34.668772][ T4546] driver_register+0x200/0x37c [ 34.669614][ T4546] usb_gadget_register_driver_owner+0xf0/0x25c [ 34.670699][ T4546] raw_ioctl+0x1014/0x326c [ 34.671493][ T4546] __arm64_sys_ioctl+0x14c/0x1c8 [ 34.672389][ T4546] invoke_syscall+0x98/0x290 [ 34.673221][ T4546] el0_svc_common+0x13c/0x258 [ 34.674107][ T4546] do_el0_svc+0x5c/0x134 [ 34.674897][ T4546] el0_svc+0x58/0x12c [ 34.675596][ T4546] el0t_64_sync_handler+0x84/0xf0 [ 34.676489][ T4546] el0t_64_sync+0x18c/0x190 [ 34.686088][ T4546] bus_add_driver: add_bind_files(raw-gadget.1) failed [ 34.689185][ T4546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.693143][ T4546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.748425][ T4563] netlink: 28 bytes leftover after parsing attributes in process `syz.4.47'. [ 34.750077][ T4563] netlink: 28 bytes leftover after parsing attributes in process `syz.4.47'. [ 34.793349][ T4563] device gretap0 entered promiscuous mode [ 34.825282][ T4567] block device autoloading is deprecated and will be removed. [ 34.838432][ T4563] device gretap0 left promiscuous mode [ 34.910885][ T4577] batman_adv: batadv0: Adding interface: syzkaller0 [ 34.912327][ T4577] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.917018][ T4577] batman_adv: batadv0: Interface activated: syzkaller0 [ 34.922590][ T4576] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 34.975141][ T4576] batman_adv: batadv0: Removing interface: syzkaller0 [ 35.043425][ T4592] Zero length message leads to an empty skb [ 35.083927][ T4595] MTDSB: Device #1 doesn't appear to exist [ 35.083927][ T4595] [ 35.217243][ T4611] FAULT_INJECTION: forcing a failure. [ 35.217243][ T4611] name fail_futex, interval 1, probability 0, space 0, times 1 [ 35.222534][ T4611] CPU: 1 PID: 4611 Comm: syz.0.68 Not tainted syzkaller #0 [ 35.223913][ T4611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 35.226070][ T4611] Call trace: [ 35.226738][ T4611] dump_backtrace+0x1c4/0x1f0 [ 35.227780][ T4611] show_stack+0x2c/0x3c [ 35.228503][ T4611] __dump_stack+0x30/0x40 [ 35.229318][ T4611] dump_stack_lvl+0xf4/0x15c [ 35.230124][ T4611] dump_stack+0x1c/0x5c [ 35.230891][ T4611] should_fail_ex+0x3cc/0x524 [ 35.231723][ T4611] should_fail+0x14/0x24 [ 35.232493][ T4611] get_futex_key+0x904/0xfb0 [ 35.233278][ T4611] futex_wait_setup+0xbc/0x320 [ 35.234127][ T4611] futex_wait+0x164/0x424 [ 35.234888][ T4611] do_futex+0x2e8/0x340 [ 35.235649][ T4611] __arm64_sys_futex+0x390/0x414 [ 35.236523][ T4611] invoke_syscall+0x98/0x290 [ 35.237363][ T4611] el0_svc_common+0x13c/0x258 [ 35.238216][ T4611] do_el0_svc+0x5c/0x134 [ 35.238984][ T4611] el0_svc+0x58/0x12c [ 35.239705][ T4611] el0t_64_sync_handler+0x84/0xf0 [ 35.240635][ T4611] el0t_64_sync+0x18c/0x190 [ 35.266485][ T4615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.275170][ T4615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.386228][ T4627] device-mapper: multipath: bio-based multipath doesn't allow hardware handler args [ 35.388964][ T4627] device-mapper: table: 248:1: multipath: error getting device (-ENODEV) [ 35.390674][ T4627] device-mapper: ioctl: error adding target to table [ 35.475191][ T4634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.78'. [ 35.645538][ T4654] FAULT_INJECTION: forcing a failure. [ 35.645538][ T4654] name failslab, interval 1, probability 0, space 0, times 0 [ 35.651394][ T4654] CPU: 1 PID: 4654 Comm: syz.1.84 Not tainted syzkaller #0 [ 35.652825][ T4654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 35.654880][ T4654] Call trace: [ 35.655484][ T4654] dump_backtrace+0x1c4/0x1f0 [ 35.656378][ T4654] show_stack+0x2c/0x3c [ 35.657171][ T4654] __dump_stack+0x30/0x40 [ 35.658109][ T4654] dump_stack_lvl+0xf4/0x15c [ 35.659034][ T4654] dump_stack+0x1c/0x5c [ 35.659850][ T4654] should_fail_ex+0x3cc/0x524 [ 35.660768][ T4654] __should_failslab+0xc0/0x11c [ 35.661732][ T4654] should_failslab+0x10/0x28 [ 35.662620][ T4654] kmem_cache_alloc+0x88/0x310 [ 35.663514][ T4654] seq_open_private+0x80/0x1a0 [ 35.664403][ T4654] mounts_open_common+0x2f8/0x5b4 [ 35.665354][ T4654] mounts_open+0x30/0x40 [ 35.666114][ T4654] do_dentry_open+0x738/0xf8c [ 35.666944][ T4654] vfs_open+0x7c/0x90 [ 35.667632][ T4654] path_openat+0x1fc0/0x27a0 [ 35.668402][ T4654] do_filp_open+0x198/0x38c [ 35.669169][ T4654] do_sys_openat2+0x134/0x3fc [ 35.669987][ T4654] __arm64_sys_openat+0x11c/0x150 [ 35.670826][ T4654] invoke_syscall+0x98/0x290 [ 35.671685][ T4654] el0_svc_common+0x13c/0x258 [ 35.672488][ T4654] do_el0_svc+0x5c/0x134 [ 35.673207][ T4654] el0_svc+0x58/0x12c [ 35.673888][ T4654] el0t_64_sync_handler+0x84/0xf0 [ 35.674784][ T4654] el0t_64_sync+0x18c/0x190 [ 35.675608][ C1] vkms_vblank_simulate: vblank timer overrun [ 35.836794][ T4666] ip_tables: iptables: counters copy to user failed while replacing table [ 35.986207][ T4666] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.988249][ T4666] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.017466][ T4345] Bluetooth: hci4: command 0x040f tx timeout [ 36.017685][ T4334] Bluetooth: hci1: command 0x040f tx timeout [ 36.018786][ T4345] Bluetooth: hci0: command 0x040f tx timeout [ 36.097686][ T4330] Bluetooth: hci2: command 0x040f tx timeout [ 36.287267][ T4695] nvme nvme1: failed to connect socket: -111 [ 36.355670][ T4666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.367237][ T4666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.644565][ T4666] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.646438][ T4666] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.648234][ T4666] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.649833][ T4666] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.817902][ T4345] Bluetooth: hci3: command 0x040f tx timeout [ 36.973652][ T4345] Bluetooth: hci0: unexpected cc 0x2040 length: 2 > 1 [ 37.451204][ T4752] tmpfs: Unknown parameter 'grpquota' [ 37.526317][ T4764] FAULT_INJECTION: forcing a failure. [ 37.526317][ T4764] name failslab, interval 1, probability 0, space 0, times 0 [ 37.538307][ T4764] CPU: 0 PID: 4764 Comm: syz.3.128 Not tainted syzkaller #0 [ 37.539679][ T4764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 37.541526][ T4764] Call trace: [ 37.542139][ T4764] dump_backtrace+0x1c4/0x1f0 [ 37.542987][ T4764] show_stack+0x2c/0x3c [ 37.543756][ T4764] __dump_stack+0x30/0x40 [ 37.544555][ T4764] dump_stack_lvl+0xf4/0x15c [ 37.545386][ T4764] dump_stack+0x1c/0x5c [ 37.546166][ T4764] should_fail_ex+0x3cc/0x524 [ 37.547027][ T4764] __should_failslab+0xc0/0x11c [ 37.547894][ T4764] should_failslab+0x10/0x28 [ 37.548750][ T4764] __kmem_cache_alloc_node+0x7c/0x318 [ 37.549722][ T4764] __kmalloc+0xc4/0x180 [ 37.550498][ T4764] io_wq_create+0x104/0xba4 [ 37.551323][ T4764] io_uring_alloc_task_context+0x228/0x4c4 [ 37.552405][ T4764] __io_uring_add_tctx_node+0x2ac/0x3dc [ 37.553413][ T4764] io_uring_install_fd+0x48/0xa0 [ 37.554301][ T4764] io_uring_create+0x740/0xb34 [ 37.555182][ T4764] __arm64_sys_io_uring_setup+0x2a4/0x2e8 [ 37.556236][ T4764] invoke_syscall+0x98/0x290 [ 37.557064][ T4764] el0_svc_common+0x13c/0x258 [ 37.557931][ T4764] do_el0_svc+0x5c/0x134 [ 37.558719][ T4764] el0_svc+0x58/0x12c [ 37.559423][ T4764] el0t_64_sync_handler+0x84/0xf0 [ 37.560321][ T4764] el0t_64_sync+0x18c/0x190 [ 37.713923][ T4789] device-mapper: table: 248:2: raid: max_write_behind option is only valid for RAID1 (-EINVAL) [ 37.716090][ T4789] device-mapper: ioctl: error adding target to table [ 37.856760][ T4804] Boot memory [50000000 58000000] offlining attempted [ 37.875526][ T4814] ip_tables: iptables: counters copy to user failed while replacing table [ 38.086707][ T4840] Bluetooth: MGMT ver 1.22 [ 38.097858][ T4330] Bluetooth: hci1: command 0x0419 tx timeout [ 38.098937][ T4330] Bluetooth: hci4: command 0x0419 tx timeout [ 38.178067][ T4334] Bluetooth: hci2: command 0x0419 tx timeout [ 38.485826][ T4891] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.675321][ T4924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.684507][ T4924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.718542][ T4935] device-mapper: table: 248:4: thin: Error opening origin device (-ENODEV) [ 38.720514][ T4935] device-mapper: ioctl: error adding target to table [ 38.835282][ T4952] Cannot find set identified by id 0 to match [ 38.897890][ T4334] Bluetooth: hci3: command 0x0419 tx timeout [ 39.085886][ T4961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.088506][ T4961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.098964][ T4975] ======================================================= [ 39.098964][ T4975] WARNING: The mand mount option has been deprecated and [ 39.098964][ T4975] and is ignored by this kernel. Remove the mand [ 39.098964][ T4975] option from the mount to silence this warning. [ 39.098964][ T4975] ======================================================= [ 39.553223][ T5040] ieee802154 phy0 wpan0: encryption failed: -22 [ 39.608737][ T4330] Bluetooth: hci0: unexpected event for opcode 0x0404 [ 39.622833][ T5059] device-mapper: table: 248:3: zero-length target [ 39.624134][ T5059] device-mapper: ioctl: error adding target to table [ 39.651375][ T5064] Bluetooth: hci0: Invalid link address type 151 for 66:55:44:33:22:11 [ 39.743759][ T5069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.745480][ T5069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.823643][ T4410] rxe_eth0 speed is unknown, defaulting to 1000 [ 39.905660][ T5084] nvme_rdma: malformed address passed: 1å:4420 [ 39.947598][ T3432] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 40.097449][ T4345] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 40.141924][ T3432] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 40.143710][ T3432] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 40.148505][ T3432] usb 1-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 40.150132][ T3432] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.151654][ T3432] usb 1-1: Product: syz [ 40.152460][ T3432] usb 1-1: Manufacturer: syz [ 40.153352][ T3432] usb 1-1: SerialNumber: syz [ 40.288301][ T5125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.290149][ T5125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.362679][ T3432] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 40.587588][ T5148] device-mapper: raid: Choosing default region size of 4MiB [ 40.589131][ T5148] device-mapper: table: 248:5: raid: Invalid flags combination (-EINVAL) [ 40.590631][ T5148] device-mapper: ioctl: error adding target to table [ 40.604460][ T5151] device-mapper: table: 248:6: raid: max_write_behind option is only valid for RAID1 (-EINVAL) [ 40.606486][ T5151] device-mapper: ioctl: error adding target to table [ 40.765986][ T5160] netlink: 20 bytes leftover after parsing attributes in process `syz.1.289'. [ 40.768589][ T5160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.289'. [ 40.770223][ T4409] usb 1-1: USB disconnect, device number 2 [ 40.773900][ T4409] usblp0: removed [ 40.835946][ T5170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.294'. [ 41.089797][ T5215] netlink: 'syz.1.299': attribute type 1 has an invalid length. [ 41.095812][ T5215] device bond1 entered promiscuous mode [ 41.096984][ T5215] 8021q: adding VLAN 0 to HW filter on device bond1 [ 41.109574][ T5215] 8021q: adding VLAN 0 to HW filter on device bond1 [ 41.111465][ T5215] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 41.113659][ T5215] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 41.117972][ T5215] bond1: (slave ip6gre1): making interface the new active one [ 41.119463][ T5215] device ip6gre1 entered promiscuous mode [ 41.122486][ T5215] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 41.124099][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 41.154706][ T5221] binder: 5220:5221 tried to acquire reference to desc 0, got 1 instead [ 41.158086][ T5224] syz.1.301 uses obsolete (PF_INET,SOCK_PACKET) [ 41.160733][ T5221] binder: 5220:5221 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 41.163520][ T5221] binder: 5221 RLIMIT_NICE not set [ 41.164788][ T5221] binder: 5221 RLIMIT_NICE not set [ 41.166187][ T5221] binder: release 5220:5221 transaction 17 out, still active [ 41.168038][ T5221] binder: release 5220:5221 transaction 10 in, still active [ 41.171288][ T5221] binder: undelivered TRANSACTION_COMPLETE [ 41.192157][ T4409] binder: release 5220:5221 transaction 10 out, still active [ 41.193752][ T4409] binder: undelivered TRANSACTION_COMPLETE [ 41.194818][ T4409] binder: send failed reply for transaction 17, target dead [ 41.199835][ T4409] binder: send failed reply for transaction 10, target dead [ 41.377941][ T5261] FAULT_INJECTION: forcing a failure. [ 41.377941][ T5261] name failslab, interval 1, probability 0, space 0, times 0 [ 41.380189][ T5261] CPU: 0 PID: 5261 Comm: syz.3.306 Not tainted syzkaller #0 [ 41.381460][ T5261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 41.383149][ T5261] Call trace: [ 41.383713][ T5261] dump_backtrace+0x1c4/0x1f0 [ 41.384524][ T5261] show_stack+0x2c/0x3c [ 41.385182][ T5261] __dump_stack+0x30/0x40 [ 41.385912][ T5261] dump_stack_lvl+0xf4/0x15c [ 41.386700][ T5261] dump_stack+0x1c/0x5c [ 41.387531][ T5261] should_fail_ex+0x3cc/0x524 [ 41.388481][ T5261] __should_failslab+0xc0/0x11c [ 41.389455][ T5261] should_failslab+0x10/0x28 [ 41.390331][ T5261] __kmem_cache_alloc_node+0x7c/0x318 [ 41.391349][ T5261] kmalloc_trace+0x48/0x94 [ 41.392161][ T5261] snd_seq_oss_timer_new+0x58/0x1fc [ 41.393098][ T5261] snd_seq_oss_open+0x6ec/0xca4 [ 41.393971][ T5261] odev_open+0x84/0xbc [ 41.394827][ T5261] soundcore_open+0x2f8/0x47c [ 41.395839][ T5261] chrdev_open+0x3d0/0x51c [ 41.396754][ T5261] do_dentry_open+0x738/0xf8c [ 41.397666][ T5261] vfs_open+0x7c/0x90 [ 41.398450][ T5261] path_openat+0x1fc0/0x27a0 [ 41.399336][ T5261] do_filp_open+0x198/0x38c [ 41.400270][ T5261] do_sys_openat2+0x134/0x3fc [ 41.401127][ T5261] __arm64_sys_openat+0x11c/0x150 [ 41.402047][ T5261] invoke_syscall+0x98/0x290 [ 41.402911][ T5261] el0_svc_common+0x13c/0x258 [ 41.403757][ T5261] do_el0_svc+0x5c/0x134 [ 41.404668][ T5261] el0_svc+0x58/0x12c [ 41.405549][ T5261] el0t_64_sync_handler+0x84/0xf0 [ 41.406588][ T5261] el0t_64_sync+0x18c/0x190 [ 41.409126][ T5261] ALSA: seq_oss: can't alloc timer [ 41.520511][ T5278] device syzkaller0 entered promiscuous mode [ 41.546935][ T5285] device-mapper: table: 248:7: raid: max_write_behind option is only valid for RAID1 (-EINVAL) [ 41.549858][ T5285] device-mapper: ioctl: error adding target to table [ 41.598663][ T5295] device-mapper: raid: Choosing default region size of 8589934592 sectors [ 41.600396][ T5295] device-mapper: table: 248:8: raid: Component device(s) too small (-EINVAL) [ 41.602030][ T5295] device-mapper: ioctl: error adding target to table [ 41.605542][ T5298] block device autoloading is deprecated and will be removed. [ 41.616834][ T5298] md: invalid raid superblock magic on ram7 [ 41.622262][ T5298] md: ram7 does not have a valid v0.0 superblock, not importing! [ 41.624293][ T5298] md: md_import_device returned -22 [ 41.629787][ T5300] zram0: detected capacity change from 0 to 8 [ 41.683431][ T5309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.318'. [ 41.818510][ T5325] device-mapper: table: 248:9: raid: max_write_behind option is only valid for RAID1 (-EINVAL) [ 41.820366][ T5325] device-mapper: ioctl: error adding target to table [ 41.891453][ T5337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.893236][ T5337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.896461][ T5337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.898594][ T5337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.934829][ T5341] ubi0: attaching mtd0 [ 41.936517][ T5341] ubi0: scanning is finished [ 41.938047][ T5341] ubi0: empty MTD device detected [ 41.974095][ T5341] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 41.975798][ T5341] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 41.978161][ T5341] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 41.979697][ T5341] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 41.981256][ T5341] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 41.982797][ T5341] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 41.984512][ T5341] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4064810087 [ 41.990221][ T5341] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 41.993030][ T5342] ubi0: background thread "ubi_bgt0d" started, PID 5342 [ 42.062371][ T14] logitech-hidpp-device 0005:046D:B012.0001: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 42.087911][ T5350] fido_id[5350]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 42.167266][ T5354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.336'. [ 42.524462][ T5374] device syzkaller0 entered promiscuous mode [ 42.538761][ T5378] FAULT_INJECTION: forcing a failure. [ 42.538761][ T5378] name failslab, interval 1, probability 0, space 0, times 0 [ 42.541054][ T5378] CPU: 0 PID: 5378 Comm: syz.4.348 Not tainted syzkaller #0 [ 42.542359][ T5378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 42.544133][ T5378] Call trace: [ 42.544718][ T5378] dump_backtrace+0x1c4/0x1f0 [ 42.545501][ T5378] show_stack+0x2c/0x3c [ 42.546206][ T5378] __dump_stack+0x30/0x40 [ 42.546956][ T5378] dump_stack_lvl+0xf4/0x15c [ 42.547801][ T5378] dump_stack+0x1c/0x5c [ 42.548606][ T5378] should_fail_ex+0x3cc/0x524 [ 42.549503][ T5378] __should_failslab+0xc0/0x11c [ 42.550556][ T5378] should_failslab+0x10/0x28 [ 42.551473][ T5378] __kmem_cache_alloc_node+0x7c/0x318 [ 42.552550][ T5378] __kmalloc_node_track_caller+0xb8/0x174 [ 42.553688][ T5378] kstrdup+0x68/0xb0 [ 42.554492][ T5378] __request_module+0x384/0xae8 [ 42.555462][ T5378] dev_load+0x1d8/0x1ec [ 42.556332][ T5378] wext_ioctl_dispatch+0xb8/0x3d0 [ 42.557295][ T5378] wext_handle_ioctl+0x1ac/0x370 [ 42.558281][ T5378] sock_ioctl+0x138/0x828 [ 42.559135][ T5378] __arm64_sys_ioctl+0x14c/0x1c8 [ 42.560079][ T5378] invoke_syscall+0x98/0x290 [ 42.560973][ T5378] el0_svc_common+0x13c/0x258 [ 42.561875][ T5378] do_el0_svc+0x5c/0x134 [ 42.562675][ T5378] el0_svc+0x58/0x12c [ 42.563433][ T5378] el0t_64_sync_handler+0x84/0xf0 [ 42.564398][ T5378] el0t_64_sync+0x18c/0x190 [ 42.588855][ T5387] fuse: Bad value for 'fd' [ 42.590261][ T5387] process 'syz.1.352' launched './file0' with NULL argv: empty string added [ 42.674209][ T5401] usb usb8: usbfs: process 5401 (syz.4.360) did not claim interface 0 before use [ 42.792001][ T5403] netlink: 12 bytes leftover after parsing attributes in process `syz.0.359'. [ 42.891681][ T5440] 9pnet_virtio: no channels available for device syz [ 42.893115][ T5439] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.372'. [ 43.125257][ T5475] binder: 5474:5475 tried to acquire reference to desc 0, got 1 instead [ 43.137582][ T5475] binder: 5474:5475 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 43.139985][ T5475] binder: 5475 RLIMIT_NICE not set [ 43.140836][ T5475] binder: 5475 RLIMIT_NICE not set [ 43.141970][ T5475] binder: release 5474:5475 transaction 29 out, still active [ 43.143259][ T5475] binder: release 5474:5475 transaction 22 in, still active [ 43.145422][ T5475] binder: undelivered TRANSACTION_COMPLETE [ 43.146872][ T5475] binder: 5475 RLIMIT_NICE not set [ 43.167432][ T5475] binder: 5475 RLIMIT_NICE not set [ 43.235728][ T5491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.394'. [ 43.241604][ T5484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.391'. [ 43.261742][ T5494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.263429][ T5494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.426144][ T5516] netlink: 'syz.0.405': attribute type 1 has an invalid length. [ 43.437094][ T5516] 8021q: adding VLAN 0 to HW filter on device bond1 [ 43.451687][ T5516] bond1: (slave geneve2): making interface the new active one [ 43.454631][ T5516] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 43.456250][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 43.518918][ T5521] block nbd0: shutting down sockets [ 43.849775][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 43.850511][ T27] audit: type=1400 audit(43.830:2): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=5549 comm="syz.4.416" [ 43.851648][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 43.864813][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x48f2 instead [ 43.866703][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x5829 instead [ 43.870797][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 43.873144][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 43.874795][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 43.876533][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 43.878539][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 43.880658][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 43.882559][ T5551] jffs2: Further such events for this erase block will not be printed [ 43.888769][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 43.893569][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 43.895420][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x48f2 instead [ 43.898466][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x5829 instead [ 43.901104][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 43.903236][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 43.905499][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 43.908008][ T5557] block nbd0: shutting down sockets [ 43.923619][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 43.925788][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 43.928901][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 43.930883][ T5551] jffs2: Further such events for this erase block will not be printed [ 43.932518][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 43.934687][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 43.936686][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x48f2 instead [ 43.946806][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x5829 instead [ 43.954260][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 43.964569][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 43.966597][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x48f2 instead [ 43.976986][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x5829 instead [ 43.979229][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 43.987452][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 43.989521][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x48f2 instead [ 43.991552][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x5829 instead [ 43.998255][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 44.000312][ T5571] ip_tables: iptables: counters copy to user failed while replacing table [ 44.007409][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 44.011850][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x48f2 instead [ 44.014952][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x5829 instead [ 44.017021][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 44.020473][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 44.022398][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x48f2 instead [ 44.024362][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x5829 instead [ 44.026774][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 44.028894][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 44.045870][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x48f2 instead [ 44.048511][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x5829 instead [ 44.050613][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 44.052675][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 44.054584][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x48f2 instead [ 44.067393][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x5829 instead [ 44.069644][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 44.073721][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 44.079981][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x48f2 instead [ 44.083722][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x5829 instead [ 44.085515][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 44.087244][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 44.089717][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x48f2 instead [ 44.094273][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x5829 instead [ 44.096148][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 44.110087][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 44.111923][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x48f2 instead [ 44.113761][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x5829 instead [ 44.115494][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 44.117214][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 44.125361][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x48f2 instead [ 44.127201][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x5829 instead [ 44.132187][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 44.134136][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 44.141294][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x48f2 instead [ 44.143074][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x5829 instead [ 44.144801][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 44.146796][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 44.160066][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x48f2 instead [ 44.161920][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x5829 instead [ 44.163623][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 44.165323][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 44.167021][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x48f2 instead [ 44.177477][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x5829 instead [ 44.179553][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 44.181641][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 44.189467][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x48f2 instead [ 44.191365][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x5829 instead [ 44.193278][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 44.204127][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 44.206196][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x48f2 instead [ 44.210586][ T5600] ip_tables: iptables: counters copy to user failed while replacing table [ 44.212234][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x5829 instead [ 44.215335][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 44.225009][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 44.226955][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x48f2 instead [ 44.232665][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x5829 instead [ 44.234581][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 44.247561][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 44.249233][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x48f2 instead [ 44.251713][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x5829 instead [ 44.253468][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 44.255730][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 44.259049][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x48f2 instead [ 44.261176][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x5829 instead [ 44.263324][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 44.265321][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 44.267259][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x48f2 instead [ 44.269683][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x5829 instead [ 44.271679][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 44.273905][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 44.275967][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x48f2 instead [ 44.283454][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x5829 instead [ 44.285330][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 44.289794][ T5609] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 44.290239][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 44.293144][ T5609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.293174][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x48f2 instead [ 44.294683][ T5609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.296402][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x5829 instead [ 44.300472][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 44.301529][ T5609] device bridge_slave_0 left promiscuous mode [ 44.302341][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 44.303643][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.307720][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x48f2 instead [ 44.314820][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x5829 instead [ 44.316829][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 44.327468][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 44.329735][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x48f2 instead [ 44.331586][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x5829 instead [ 44.333377][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 44.335196][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 44.345847][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x48f2 instead [ 44.348363][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x5829 instead [ 44.350971][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 44.351773][ T5609] device bridge_slave_1 left promiscuous mode [ 44.352974][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 44.354172][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.360923][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x48f2 instead [ 44.365521][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x5829 instead [ 44.380558][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 44.382733][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 44.384807][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x48f2 instead [ 44.386816][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x5829 instead [ 44.391376][ T5609] bond0: (slave bond_slave_0): Releasing backup interface [ 44.399754][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 44.404405][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 44.406357][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x48f2 instead [ 44.411575][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x5829 instead [ 44.413924][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 44.423912][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 44.426001][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x48f2 instead [ 44.431905][ T5609] bond0: (slave bond_slave_1): Releasing backup interface [ 44.434244][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x5829 instead [ 44.436357][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 44.439790][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 44.441622][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x48f2 instead [ 44.443720][ T5551] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x5829 instead [ 44.445728][ T5551] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 44.447881][ T5551] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 44.476346][ T5609] team0: Port device team_slave_0 removed [ 44.493070][ T5609] team0: Port device team_slave_1 removed [ 44.494665][ T5609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.496466][ T5609] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.503186][ T5609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.504639][ T5609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.510550][ T5609] bond1: (slave geneve2): Releasing active interface [ 44.577037][ T5614] team0: Port device xfrm0 added [ 44.578893][ T5623] tipc: Started in network mode [ 44.581151][ T5623] tipc: Node identity 564421739c0c, cluster identity 4711 [ 44.582808][ T5623] tipc: Enabled bearer , priority 0 [ 44.731656][ T5659] binder: 5658:5659 ioctl c0306201 20000500 returned -14 [ 44.736483][ T5659] binder_alloc: 5658: pid 5658 spamming oneway? 2 buffers allocated for a total size of 5120 [ 44.742122][ T5659] binder_alloc: 5658: pid 5658 spamming oneway? 3 buffers allocated for a total size of 5128 [ 45.138095][ T5687] device-mapper: table: 248:6: ram4 too small for target: start=4096, len=10248, dev_size=8192 [ 45.140511][ T5687] device-mapper: core: Cannot calculate initial queue limits [ 45.141982][ T5687] device-mapper: ioctl: unable to set up device queue for new table. [ 45.288938][ T5694] lo speed is unknown, defaulting to 1000 [ 45.290297][ T5694] lo speed is unknown, defaulting to 1000 [ 45.292061][ T5694] lo speed is unknown, defaulting to 1000 [ 45.295490][ T5694] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 45.309527][ T5694] lo speed is unknown, defaulting to 1000 [ 45.311460][ T5694] lo speed is unknown, defaulting to 1000 [ 45.313420][ T5694] lo speed is unknown, defaulting to 1000 [ 45.314895][ T5694] lo speed is unknown, defaulting to 1000 [ 45.316376][ T5694] lo speed is unknown, defaulting to 1000 [ 45.361581][ T5698] device-mapper: table: 248:10: thin: Error opening pool device (-ENODEV) [ 45.363694][ T5698] device-mapper: ioctl: error adding target to table [ 45.403618][ T5704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.405572][ T5704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.698003][ T14] tipc: Node number set to 3393724787 [ 47.782765][ T5667] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 47.952321][ T5735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.475'. [ 47.982130][ T5730] FAULT_INJECTION: forcing a failure. [ 47.982130][ T5730] name failslab, interval 1, probability 0, space 0, times 0 [ 47.984277][ T5730] CPU: 0 PID: 5730 Comm: syz.2.472 Not tainted syzkaller #0 [ 47.985462][ T5730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 47.987272][ T5730] Call trace: [ 47.987862][ T5730] dump_backtrace+0x1c4/0x1f0 [ 47.988726][ T5730] show_stack+0x2c/0x3c [ 47.989513][ T5730] __dump_stack+0x30/0x40 [ 47.990358][ T5730] dump_stack_lvl+0xf4/0x15c [ 47.991229][ T5730] dump_stack+0x1c/0x5c [ 47.992022][ T5730] should_fail_ex+0x3cc/0x524 [ 47.992972][ T5730] __should_failslab+0xc0/0x11c [ 47.993893][ T5730] should_failslab+0x10/0x28 [ 47.994714][ T5730] __kmem_cache_alloc_node+0x7c/0x318 [ 47.995741][ T5730] kmalloc_node_trace+0x44/0x90 [ 47.996621][ T5730] __get_vm_area_node+0x14c/0x31c [ 47.997562][ T5730] __vmalloc_node_range+0x1d4/0xe70 [ 47.998497][ T5730] vzalloc+0x9c/0xd4 [ 47.999223][ T5730] n_tty_open+0x24/0x174 [ 48.000030][ T5730] tty_ldisc_setup+0xc4/0x40c [ 48.000924][ T5730] tty_init_dev+0x208/0x3f4 [ 48.001763][ T5730] ptmx_open+0xfc/0x2d4 [ 48.002516][ T5730] chrdev_open+0x3d0/0x51c [ 48.003362][ T5730] do_dentry_open+0x738/0xf8c [ 48.004248][ T5730] vfs_open+0x7c/0x90 [ 48.004989][ T5730] path_openat+0x1fc0/0x27a0 [ 48.005853][ T5730] do_filp_open+0x198/0x38c [ 48.006717][ T5730] do_sys_openat2+0x134/0x3fc [ 48.007566][ T5730] __arm64_sys_openat+0x11c/0x150 [ 48.008508][ T5730] invoke_syscall+0x98/0x290 [ 48.009391][ T5730] el0_svc_common+0x13c/0x258 [ 48.010242][ T5730] do_el0_svc+0x5c/0x134 [ 48.011061][ T5730] el0_svc+0x58/0x12c [ 48.011805][ T5730] el0t_64_sync_handler+0x84/0xf0 [ 48.012708][ T5730] el0t_64_sync+0x18c/0x190 [ 48.020681][ T5743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.024499][ T5743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.043349][ T5730] syz.2.472: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0 [ 48.046301][ T5730] CPU: 0 PID: 5730 Comm: syz.2.472 Not tainted syzkaller #0 [ 48.047630][ T5730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 48.049480][ T5730] Call trace: [ 48.050162][ T5730] dump_backtrace+0x1c4/0x1f0 [ 48.051025][ T5730] show_stack+0x2c/0x3c [ 48.051784][ T5730] __dump_stack+0x30/0x40 [ 48.052610][ T5730] dump_stack_lvl+0xf4/0x15c [ 48.053469][ T5730] dump_stack+0x1c/0x5c [ 48.054245][ T5730] warn_alloc+0x214/0x324 [ 48.055046][ T5730] __vmalloc_node_range+0x24c/0xe70 [ 48.056003][ T5730] vzalloc+0x9c/0xd4 [ 48.056736][ T5730] n_tty_open+0x24/0x174 [ 48.057525][ T5730] tty_ldisc_setup+0xc4/0x40c [ 48.058389][ T5730] tty_init_dev+0x208/0x3f4 [ 48.059192][ T5730] ptmx_open+0xfc/0x2d4 [ 48.059972][ T5730] chrdev_open+0x3d0/0x51c [ 48.060813][ T5730] do_dentry_open+0x738/0xf8c [ 48.061678][ T5730] vfs_open+0x7c/0x90 [ 48.062416][ T5730] path_openat+0x1fc0/0x27a0 [ 48.063294][ T5730] do_filp_open+0x198/0x38c [ 48.064275][ T5730] do_sys_openat2+0x134/0x3fc [ 48.065247][ T5730] __arm64_sys_openat+0x11c/0x150 [ 48.066250][ T5730] invoke_syscall+0x98/0x290 [ 48.067156][ T5730] el0_svc_common+0x13c/0x258 [ 48.068057][ T5730] do_el0_svc+0x5c/0x134 [ 48.068859][ T5730] el0_svc+0x58/0x12c [ 48.069616][ T5730] el0t_64_sync_handler+0x84/0xf0 [ 48.070553][ T5730] el0t_64_sync+0x18c/0x190 [ 48.093709][ T5730] Mem-Info: [ 48.094402][ T5730] active_anon:5101 inactive_anon:0 isolated_anon:0 [ 48.094402][ T5730] active_file:5076 inactive_file:2084 isolated_file:0 [ 48.094402][ T5730] unevictable:768 dirty:1870 writeback:0 [ 48.094402][ T5730] slab_reclaimable:19127 slab_unreclaimable:96837 [ 48.094402][ T5730] mapped:29774 shmem:953 pagetables:662 [ 48.094402][ T5730] sec_pagetables:0 bounce:0 [ 48.094402][ T5730] kernel_misc_reclaimable:0 [ 48.094402][ T5730] free:1437718 free_pcp:4405 free_cma:7360 [ 48.114166][ T5730] Node 0 active_anon:20032kB inactive_anon:0kB active_file:20304kB inactive_file:8336kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:119044kB dirty:7480kB writeback:0kB shmem:3812kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:9028kB pagetables:2552kB sec_pagetables:0kB all_unreclaimable? no [ 48.124948][ T5730] Node 0 DMA free:3076864kB boost:0kB min:20720kB low:25900kB high:31080kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:29440kB [ 48.133008][ T5730] lowmem_reserve[]: 0 0 3532 3532 3532 [ 48.134259][ T5730] Node 0 Normal free:2672984kB boost:0kB min:24332kB low:30412kB high:36492kB reserved_highatomic:0KB active_anon:20132kB inactive_anon:0kB active_file:20304kB inactive_file:8336kB unevictable:3072kB writepending:7480kB present:5242880kB managed:3620620kB mlocked:0kB bounce:0kB free_pcp:18612kB local_pcp:6580kB free_cma:0kB [ 48.140535][ T5730] lowmem_reserve[]: 0 0 0 0 0 [ 48.141346][ T5730] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 0*1024kB 0*2048kB 751*4096kB (MC) = 3076864kB [ 48.143913][ T5730] Node 0 Normal: 316*4kB (U) 35*8kB (M) 33*16kB (M) 36*32kB (UME) 19*64kB (UME) 10*128kB (UME) 3*256kB (UM) 4*512kB (ME) 4*1024kB (UM) 5*2048kB (UME) 647*4096kB (M) = 2672984kB [ 48.150205][ T5730] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 48.152187][ T5730] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 48.153770][ T5730] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 48.155382][ T5730] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 48.156914][ T5730] 8113 total pagecache pages [ 48.158643][ T5730] 0 pages in swap cache [ 48.160174][ T5730] Free swap = 124996kB [ 48.160939][ T5730] Total swap = 124996kB [ 48.161640][ T5730] 2097152 pages RAM [ 48.162342][ T5730] 0 pages HighMem/MovableOnly [ 48.163116][ T5730] 421949 pages reserved [ 48.163789][ T5730] 8192 pages cma reserved [ 48.166049][ T5730] 0 pages hwpoisoned [ 48.166817][ T5730] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 48.225580][ T5768] tipc: Can't bind to reserved service type 2 [ 48.412779][ T5803] binder_user_error: 1 callbacks suppressed [ 48.412788][ T5803] binder: 5801:5803 tried to acquire reference to desc 0, got 1 instead [ 48.415641][ T5803] binder: 5801:5803 got transaction with invalid handle, 2 [ 48.417085][ T5803] binder_debug: 12 callbacks suppressed [ 48.417097][ T5803] binder: 5803:5801 translate handle failed [ 48.420424][ T5803] binder: 5801:5803 transaction call to 5801:0 failed 42/29201/-22, size 88-24 line 3410 [ 48.422428][ T112] binder: undelivered TRANSACTION_ERROR: 29201 [ 48.478864][ T5813] 9pnet_virtio: no channels available for device syz [ 48.637199][ T5838] rnbd_client L600: Mapping device /dev/ram0 on session s0, (access_mode: rw, nr_poll_queues: 0) [ 48.676369][ T9] rtrs_client L1789: : Resolving route failed, err: -19 [ 48.688220][ T5838] rtrs_client L2627: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 48.694090][ T5827] netlink: 36 bytes leftover after parsing attributes in process `syz.1.502'. [ 48.745166][ T5851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.750991][ T5851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.756837][ T5851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.761243][ T5851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.963786][ T5851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.965673][ T5851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.292352][ T5880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.517'. [ 49.513370][ T5907] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 49.522466][ T5911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.529'. [ 49.564011][ T5916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.566650][ T5916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.782661][ T5955] Bluetooth: ISO socket layer initialized [ 50.151527][ T6010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.154724][ T6010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.551839][ T6078] netlink: 'syz.2.577': attribute type 10 has an invalid length. [ 50.727597][ T6100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.734256][ T6100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.265119][ T3432] hid-generic 0005:15C2:8000.0002: item fetching failed at offset 0/4 [ 51.267622][ T3432] hid-generic: probe of 0005:15C2:8000.0002 failed with error -22 [ 53.300299][ T6042] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 53.421856][ T6139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.427829][ T6139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.459147][ T6147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.461593][ T6147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.544773][ T6158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.547181][ T6158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.551809][ T6158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.554138][ T6158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.756660][ T6158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.758526][ T6158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.897363][ T3901] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 53.949492][ T6197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.951777][ T6197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.962613][ T6158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.971019][ T6158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.080871][ T3901] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.082935][ T3901] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.085118][ T3901] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 54.086754][ T3901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.498502][ T3901] hid-picolcd 0003:04D8:C002.0003: unknown main item tag 0x0 [ 54.500476][ T3901] hid-picolcd 0003:04D8:C002.0003: unknown main item tag 0x0 [ 54.501875][ T3901] hid-picolcd 0003:04D8:C002.0003: unknown main item tag 0x0 [ 54.503137][ T3901] hid-picolcd 0003:04D8:C002.0003: unknown main item tag 0x0 [ 54.504604][ T3901] hid-picolcd 0003:04D8:C002.0003: unknown main item tag 0x0 [ 54.506003][ T3901] hid-picolcd 0003:04D8:C002.0003: unknown main item tag 0x1 [ 54.507222][ T3901] hid-picolcd 0003:04D8:C002.0003: unknown main item tag 0x0 [ 54.508995][ T3901] hid-picolcd 0003:04D8:C002.0003: unknown main item tag 0x0 [ 54.510265][ T3901] hid-picolcd 0003:04D8:C002.0003: unknown main item tag 0x4 [ 54.543211][ T6218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.544786][ T6218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.548711][ T6218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.550198][ T6218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.552201][ T6218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.553923][ T6218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.589005][ T3901] input: HID 04d8:c002 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:04D8:C002.0003/input/input3 [ 54.592367][ T3901] Registered IR keymap rc-rc6-mce [ 54.657367][ T3901] rc_core: Loaded IR protocol module ir-rc6-decoder, but protocol rc-6 still not available [ 54.659900][ T3901] rc rc0: HID 04d8:c002 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:04D8:C002.0003/rc/rc0 [ 54.662331][ T3901] input: HID 04d8:c002 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:04D8:C002.0003/rc/rc0/input4 [ 54.675161][ T3901] hid-picolcd 0003:04D8:C002.0003: No report with id 0x94 found [ 54.676702][ T3901] hid-picolcd 0003:04D8:C002.0003: failed to configure display [ 54.841647][ T3901] usb 1-1: USB disconnect, device number 3 [ 55.078327][ T6227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.080142][ T6227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.084204][ T6227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.086372][ T6227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.090755][ T6227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.092676][ T6227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.124756][ T6229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.126533][ T6229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.295045][ T6227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.303044][ T6227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.306232][ T6227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.309073][ T6227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.223928][ T6250] binder: 6249:6250 tried to acquire reference to desc 0, got 1 instead [ 56.230326][ T6250] binder: 6249:6250 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 56.232708][ T6250] binder: 6250 RLIMIT_NICE not set [ 56.233599][ T6250] binder: 6250 RLIMIT_NICE not set [ 56.235328][ T6250] binder: release 6249:6250 transaction 54 out, still active [ 56.236553][ T6250] binder: release 6249:6250 transaction 47 in, still active [ 56.238078][ T6250] binder: undelivered TRANSACTION_COMPLETE [ 56.239529][ T6250] binder: 6250 RLIMIT_NICE not set [ 56.240994][ T6250] binder: 6250 RLIMIT_NICE not set [ 56.242014][ T6250] binder: 6250:6249 reply target not found [ 56.243201][ T6250] binder: 6249:6250 transaction reply to 0:0 failed 55/29189/0, size 0-0 line 2992 [ 56.244864][ T6250] binder: send failed reply for transaction 54, target dead [ 56.246180][ T6250] binder: send failed reply for transaction 47 to 6249:6250 [ 56.256932][ T4411] binder: undelivered TRANSACTION_ERROR: 29190 [ 56.258250][ T4411] binder: undelivered TRANSACTION_ERROR: 29189 [ 56.501651][ T6260] FAULT_INJECTION: forcing a failure. [ 56.501651][ T6260] name failslab, interval 1, probability 0, space 0, times 0 [ 56.504046][ T6260] CPU: 1 PID: 6260 Comm: syz.4.630 Not tainted syzkaller #0 [ 56.505321][ T6260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 56.507049][ T6260] Call trace: [ 56.507648][ T6260] dump_backtrace+0x1c4/0x1f0 [ 56.508495][ T6260] show_stack+0x2c/0x3c [ 56.509306][ T6260] __dump_stack+0x30/0x40 [ 56.510084][ T6260] dump_stack_lvl+0xf4/0x15c [ 56.510916][ T6260] dump_stack+0x1c/0x5c [ 56.511677][ T6260] should_fail_ex+0x3cc/0x524 [ 56.512541][ T6260] __should_failslab+0xc0/0x11c [ 56.513431][ T6260] should_failslab+0x10/0x28 [ 56.514288][ T6260] __kmem_cache_alloc_node+0x7c/0x318 [ 56.515238][ T6260] kmalloc_trace+0x48/0x94 [ 56.516058][ T6260] snd_seq_port_connect+0x7c/0x3a0 [ 56.516969][ T6260] snd_seq_ioctl_subscribe_port+0x270/0x650 [ 56.518050][ T6260] snd_seq_kernel_client_ctl+0x5a8/0x618 [ 56.519062][ T6260] snd_seq_oss_midi_open+0x33c/0x5fc [ 56.520012][ T6260] snd_seq_oss_midi_open_all+0x84/0xec [ 56.521037][ T6260] snd_seq_oss_open+0x7a0/0xca4 [ 56.521916][ T6260] odev_open+0x84/0xbc [ 56.522735][ T6260] soundcore_open+0x2f8/0x47c [ 56.523606][ T6260] chrdev_open+0x3d0/0x51c [ 56.524429][ T6260] do_dentry_open+0x738/0xf8c [ 56.525292][ T6260] vfs_open+0x7c/0x90 [ 56.526019][ T6260] path_openat+0x1fc0/0x27a0 [ 56.526874][ T6260] do_filp_open+0x198/0x38c [ 56.527718][ T6260] do_sys_openat2+0x134/0x3fc [ 56.528569][ T6260] __arm64_sys_openat+0x11c/0x150 [ 56.529521][ T6260] invoke_syscall+0x98/0x290 [ 56.530390][ T6260] el0_svc_common+0x13c/0x258 [ 56.531352][ T6260] do_el0_svc+0x5c/0x134 [ 56.532142][ T6260] el0_svc+0x58/0x12c [ 56.532869][ T6260] el0t_64_sync_handler+0x84/0xf0 [ 56.533815][ T6260] el0t_64_sync+0x18c/0x190 [ 57.081942][ T6207] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 57.121846][ T6278] binder: tried to use weak ref as strong ref [ 57.123465][ T6278] binder: 6277:6278 Acquire 1 refcount change on invalid ref 0 ret -22 [ 57.125365][ T6278] binder: 6277:6278 got transaction to invalid handle, 1 [ 57.132131][ T6278] binder: 6278:6277 cannot find target node [ 57.134217][ T6278] binder: 6277:6278 got reply transaction with no transaction stack [ 57.165405][ T6286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.173272][ T6286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.259598][ T6304] rnbd_client L600: Mapping device /dev/ram0 on session s0, (access_mode: rw, nr_poll_queues: 0) [ 57.272732][ T11] rtrs_client L1789: : Resolving route failed, err: -19 [ 57.288113][ T6304] rtrs_client L2627: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 57.388343][ T6286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.390115][ T6286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.395139][ T6286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.401825][ T6286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.408559][ T6286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.413230][ T6286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.658229][ T6359] device syzkaller0 entered promiscuous mode [ 58.178951][ T6406] device syzkaller0 entered promiscuous mode [ 58.637460][ T3901] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 58.817333][ T3901] usb 1-1: Using ep0 maxpacket: 32 [ 58.821479][ T3901] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 58.823007][ T3901] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 58.824873][ T3901] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 58.826718][ T3901] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 58.830711][ T3901] usb 1-1: config 0 interface 0 has no altsetting 0 [ 58.833781][ T3901] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 58.835324][ T3901] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 58.836800][ T3901] usb 1-1: Product: syz [ 58.837955][ T3901] usb 1-1: Manufacturer: syz [ 58.838844][ T3901] usb 1-1: SerialNumber: syz [ 58.844364][ T3901] usb 1-1: config 0 descriptor?? [ 58.853409][ T3901] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 58.859507][ T3901] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 59.173546][ T6428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.176332][ T6428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.237333][ T6413] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 59.238842][ T4411] usb 1-1: USB disconnect, device number 4 [ 59.239947][ C0] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 59.241402][ T6428] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 59.244264][ T4411] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 59.578202][ T6437] device syzkaller0 entered promiscuous mode [ 59.737352][ T4408] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 59.927732][ T4408] usb 1-1: Using ep0 maxpacket: 32 [ 59.930147][ T4408] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 59.931541][ T4408] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 59.933420][ T4408] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 59.935387][ T4408] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 59.938241][ T4408] usb 1-1: config 0 interface 0 has no altsetting 0 [ 59.940809][ T4408] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 59.942440][ T4408] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 59.943808][ T4408] usb 1-1: Product: syz [ 59.944508][ T4408] usb 1-1: Manufacturer: syz [ 59.945300][ T4408] usb 1-1: SerialNumber: syz [ 59.947175][ T4408] usb 1-1: config 0 descriptor?? [ 59.949598][ T4408] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 59.952602][ T4408] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 60.164445][ T6413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.166150][ T6413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.169835][ T4408] usb 1-1: USB disconnect, device number 5 [ 60.173653][ T4408] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 60.312759][ T6445] loop2: detected capacity change from 0 to 512 [ 60.340967][ T6445] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 60.446938][ T6328] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 61.343441][ T6463] binder_user_error: 29 callbacks suppressed [ 61.343450][ T6463] binder: 6462:6463 tried to acquire reference to desc 0, got 1 instead [ 61.362496][ T6463] binder: 6462:6463 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 61.364740][ T6463] binder: 6463 RLIMIT_NICE not set [ 61.365600][ T6463] binder: 6463 RLIMIT_NICE not set [ 61.389297][ T6463] binder_debug: 38 callbacks suppressed [ 61.389307][ T6463] binder: release 6462:6463 transaction 121 out, still active [ 61.391511][ T6463] binder: release 6462:6463 transaction 114 in, still active [ 61.470963][ T4337] EXT4-fs (loop2): unmounting filesystem. [ 61.474113][ T6468] binder: 6462:6468 got reply transaction with no transaction stack [ 61.475519][ T6468] binder: 6462:6468 transaction reply to 0:0 failed 122/29201/-71, size 0-0 line 2963 [ 61.476574][ T6463] binder: undelivered TRANSACTION_COMPLETE [ 61.584368][ T6473] netlink: 12 bytes leftover after parsing attributes in process `syz.4.692'. [ 62.264719][ T4409] binder: release 6462:6463 transaction 114 out, still active [ 62.266225][ T4409] binder: undelivered TRANSACTION_COMPLETE [ 62.267234][ T4409] binder: send failed reply for transaction 121, target dead [ 62.269755][ T4409] binder: send failed reply for transaction 114, target dead [ 62.271086][ T4409] binder: undelivered TRANSACTION_ERROR: 29201 [ 62.317140][ T6478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.325433][ T6478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.388934][ T6480] device syzkaller0 entered promiscuous mode [ 62.546631][ T6478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.550146][ T6478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.583248][ T6497] [ 62.583724][ T6497] ====================================================== [ 62.585132][ T6497] WARNING: possible circular locking dependency detected [ 62.586560][ T6497] syzkaller #0 Not tainted [ 62.587437][ T6497] ------------------------------------------------------ [ 62.588855][ T6497] syz.0.699/6497 is trying to acquire lock: [ 62.590004][ T6497] ffff0000f68b6350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_start_poll+0x450/0xadc [ 62.591929][ T6497] [ 62.591929][ T6497] but task is already holding lock: [ 62.593377][ T6497] ffff0000f68b4528 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1a0/0x2f4 [ 62.595446][ T6497] [ 62.595446][ T6497] which lock already depends on the new lock. [ 62.595446][ T6497] [ 62.597464][ T6497] [ 62.597464][ T6497] the existing dependency chain (in reverse order) is: [ 62.599083][ T6497] [ 62.599083][ T6497] -> #3 (&genl_data->genl_data_mutex){+.+.}-{3:3}: [ 62.600664][ T6497] __mutex_lock_common+0x1a0/0x1f3c [ 62.601884][ T6497] mutex_lock_nested+0x38/0x44 [ 62.602876][ T6497] nfc_urelease_event_work+0x108/0x2b8 [ 62.603987][ T6497] process_one_work+0x7e4/0x13bc [ 62.605161][ T6497] worker_thread+0x8cc/0xfe8 [ 62.606233][ T6497] kthread+0x254/0x2e0 [ 62.607192][ T6497] ret_from_fork+0x10/0x20 [ 62.608230][ T6497] [ 62.608230][ T6497] -> #2 (nfc_devlist_mutex){+.+.}-{3:3}: [ 62.609868][ T6497] __mutex_lock_common+0x1a0/0x1f3c [ 62.611051][ T6497] mutex_lock_nested+0x38/0x44 [ 62.612069][ T6497] nfc_register_device+0x48/0x300 [ 62.613131][ T6497] nci_register_device+0x6b8/0x7e4 [ 62.614196][ T6497] virtual_ncidev_open+0x6c/0xd8 [ 62.615299][ T6497] misc_open+0x310/0x388 [ 62.616214][ T6497] chrdev_open+0x3d0/0x51c [ 62.617223][ T6497] do_dentry_open+0x738/0xf8c [ 62.618351][ T6497] vfs_open+0x7c/0x90 [ 62.619253][ T6497] path_openat+0x1fc0/0x27a0 [ 62.619310][ T6502] binder: 6501:6502 tried to acquire reference to desc 0, got 1 instead [ 62.620218][ T6497] do_filp_open+0x198/0x38c [ 62.622608][ T6497] do_sys_openat2+0x134/0x3fc [ 62.622899][ T6502] binder: 6501:6502 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 62.623722][ T6497] __arm64_sys_openat+0x11c/0x150 [ 62.626120][ T6502] binder: 6502 RLIMIT_NICE not set [ 62.627126][ T6497] invoke_syscall+0x98/0x290 [ 62.627143][ T6497] el0_svc_common+0x13c/0x258 [ 62.629306][ T6502] binder: 6502 RLIMIT_NICE not set [ 62.630051][ T6497] do_el0_svc+0x5c/0x134 [ 62.631915][ T6497] el0_svc+0x58/0x12c [ 62.632654][ T6502] binder: 6502 RLIMIT_NICE not set [ 62.632761][ T6497] el0t_64_sync_handler+0x84/0xf0 [ 62.634619][ T6497] el0t_64_sync+0x18c/0x190 [ 62.635552][ T6497] [ 62.635552][ T6497] -> #1 (nci_mutex){+.+.}-{3:3}: [ 62.636879][ T6497] __mutex_lock_common+0x1a0/0x1f3c [ 62.637249][ T4409] binder: release 6501:6502 transaction 134 in, still active [ 62.637935][ T6497] mutex_lock_nested+0x38/0x44 [ 62.637953][ T6497] virtual_nci_close+0x28/0x58 [ 62.637962][ T6497] nci_dev_up+0x704/0xaa0 [ 62.637970][ T6497] nfc_dev_up+0x138/0x2e0 [ 62.637974][ T6497] nfc_genl_dev_up+0x98/0xdc [ 62.637979][ T6497] genl_family_rcv_msg_doit+0x210/0x308 [ 62.637986][ T6497] genl_rcv_msg+0x424/0x600 [ 62.637990][ T6497] netlink_rcv_skb+0x220/0x3ec [ 62.637996][ T6497] genl_rcv+0x38/0x50 [ 62.638000][ T6497] netlink_unicast+0x5fc/0x80c [ 62.638005][ T6497] netlink_sendmsg+0x6f0/0x9d8 [ 62.638012][ T6497] ____sys_sendmsg+0x588/0x90c [ 62.638017][ T6497] __sys_sendmsg+0x288/0x374 [ 62.638021][ T6497] __arm64_sys_sendmsg+0x80/0x94 [ 62.638026][ T6497] invoke_syscall+0x98/0x290 [ 62.638032][ T6497] el0_svc_common+0x13c/0x258 [ 62.638038][ T6497] do_el0_svc+0x5c/0x134 [ 62.638044][ T6497] el0_svc+0x58/0x12c [ 62.638049][ T6497] el0t_64_sync_handler+0x84/0xf0 [ 62.638055][ T6497] el0t_64_sync+0x18c/0x190 [ 62.638059][ T6497] [ 62.638059][ T6497] -> #0 (&ndev->req_lock){+.+.}-{3:3}: [ 62.660906][ T6497] __lock_acquire+0x3504/0x7280 [ 62.661927][ T6497] lock_acquire+0x210/0x63c [ 62.662836][ T6497] __mutex_lock_common+0x1a0/0x1f3c [ 62.663986][ T6497] mutex_lock_nested+0x38/0x44 [ 62.664990][ T6497] nci_start_poll+0x450/0xadc [ 62.665934][ T6497] nfc_start_poll+0x124/0x284 [ 62.666881][ T6497] nfc_genl_start_poll+0x1b0/0x2f4 [ 62.667881][ T6497] genl_family_rcv_msg_doit+0x210/0x308 [ 62.668939][ T6497] genl_rcv_msg+0x424/0x600 [ 62.669850][ T6497] netlink_rcv_skb+0x220/0x3ec [ 62.670825][ T6497] genl_rcv+0x38/0x50 [ 62.671635][ T6497] netlink_unicast+0x5fc/0x80c [ 62.672577][ T6497] netlink_sendmsg+0x6f0/0x9d8 [ 62.673511][ T6497] ____sys_sendmsg+0x588/0x90c [ 62.674483][ T6497] __sys_sendmsg+0x288/0x374 [ 62.675448][ T6497] __arm64_sys_sendmsg+0x80/0x94 [ 62.676448][ T6497] invoke_syscall+0x98/0x290 [ 62.677396][ T6497] el0_svc_common+0x13c/0x258 [ 62.678327][ T6497] do_el0_svc+0x5c/0x134 [ 62.679206][ T6497] el0_svc+0x58/0x12c [ 62.680008][ T6497] el0t_64_sync_handler+0x84/0xf0 [ 62.681027][ T6497] el0t_64_sync+0x18c/0x190 [ 62.681951][ T6497] [ 62.681951][ T6497] other info that might help us debug this: [ 62.681951][ T6497] [ 62.683765][ T6497] Chain exists of: [ 62.683765][ T6497] &ndev->req_lock --> nfc_devlist_mutex --> &genl_data->genl_data_mutex [ 62.683765][ T6497] [ 62.686298][ T6497] Possible unsafe locking scenario: [ 62.686298][ T6497] [ 62.687590][ T6497] CPU0 CPU1 [ 62.688511][ T6497] ---- ---- [ 62.689451][ T6497] lock(&genl_data->genl_data_mutex); [ 62.690414][ T6497] lock(nfc_devlist_mutex); [ 62.691715][ T6497] lock(&genl_data->genl_data_mutex); [ 62.693148][ T6497] lock(&ndev->req_lock); [ 62.693934][ T6497] [ 62.693934][ T6497] *** DEADLOCK *** [ 62.693934][ T6497] [ 62.695324][ T6497] 4 locks held by syz.0.699/6497: [ 62.696185][ T6497] #0: ffff800018afd110 (cb_lock){++++}-{3:3}, at: genl_rcv+0x28/0x50 [ 62.697652][ T6497] #1: ffff800018afcf28 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0xec/0x600 [ 62.699232][ T6497] #2: ffff0000f68b4528 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1a0/0x2f4 [ 62.701146][ T6497] #3: ffff0000f68b4100 (&dev->mutex){....}-{3:3}, at: nfc_start_poll+0x5c/0x284 [ 62.702864][ T6497] [ 62.702864][ T6497] stack backtrace: [ 62.703940][ T6497] CPU: 0 PID: 6497 Comm: syz.0.699 Not tainted syzkaller #0 [ 62.705260][ T6497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 62.707129][ T6497] Call trace: [ 62.707740][ T6497] dump_backtrace+0x1c4/0x1f0 [ 62.708577][ T6497] show_stack+0x2c/0x3c [ 62.709317][ T6497] __dump_stack+0x30/0x40 [ 62.710075][ T6497] dump_stack_lvl+0xf4/0x15c [ 62.710865][ T6497] dump_stack+0x1c/0x5c [ 62.711594][ T6497] print_circular_bug+0x148/0x1b0 [ 62.712498][ T6497] check_noncircular+0x290/0x370 [ 62.713389][ T6497] __lock_acquire+0x3504/0x7280 [ 62.714259][ T6497] lock_acquire+0x210/0x63c [ 62.715039][ T6497] __mutex_lock_common+0x1a0/0x1f3c [ 62.715941][ T6497] mutex_lock_nested+0x38/0x44 [ 62.716788][ T6497] nci_start_poll+0x450/0xadc [ 62.717608][ T6497] nfc_start_poll+0x124/0x284 [ 62.718426][ T6497] nfc_genl_start_poll+0x1b0/0x2f4 [ 62.719558][ T6497] genl_family_rcv_msg_doit+0x210/0x308 [ 62.720685][ T6497] genl_rcv_msg+0x424/0x600 [ 62.721608][ T6497] netlink_rcv_skb+0x220/0x3ec [ 62.722567][ T6497] genl_rcv+0x38/0x50 [ 62.723329][ T6497] netlink_unicast+0x5fc/0x80c [ 62.724305][ T6497] netlink_sendmsg+0x6f0/0x9d8 [ 62.725250][ T6497] ____sys_sendmsg+0x588/0x90c [ 62.726188][ T6497] __sys_sendmsg+0x288/0x374 [ 62.727069][ T6497] __arm64_sys_sendmsg+0x80/0x94 [ 62.728034][ T6497] invoke_syscall+0x98/0x290 [ 62.728916][ T6497] el0_svc_common+0x13c/0x258 [ 62.729898][ T6497] do_el0_svc+0x5c/0x134 [ 62.730728][ T6497] el0_svc+0x58/0x12c [ 62.731596][ T6497] el0t_64_sync_handler+0x84/0xf0 [ 62.732631][ T6497] el0t_64_sync+0x18c/0x190 [ 64.497942][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.499129][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.501365][ T6497] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 65.503192][ T6497] nci: nci_start_poll: failed to set local general bytes [ 65.504754][ T6487] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 69.617568][ T24] cfg80211: failed to load regulatory.db