last executing test programs: 2.960868116s ago: executing program 3 (id=532): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40000000000000079100200000000007b0a00ff000000009500740cb6000000278ae922a98a43e15297e75ae6e7ee4b53dd"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd0b, &(0x7f0000000000)="0400000000000000000000007e01") 2.922340583s ago: executing program 3 (id=533): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0xa, 0x11, r0, 0x291cc000) 2.895527371s ago: executing program 4 (id=535): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x10, 0x5}]}, 0x10) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x1, @empty, 0xfffffffc}, 0x1c) listen(r0, 0x40) 2.551159939s ago: executing program 4 (id=536): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000bfffffff0000000000000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000000000000704000000ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0xccee5849be245758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e9900", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.503638016s ago: executing program 4 (id=537): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000200)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 2.173979289s ago: executing program 2 (id=545): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 2.087539401s ago: executing program 2 (id=546): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x200000, &(0x7f0000000000)={[{@noinit_itable}]}, 0xfe, 0x596, &(0x7f00000026c0)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1/file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) 2.035201307s ago: executing program 3 (id=547): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newsa={0x144, 0x10, 0x1, 0xbffffffd, 0x800fe, {{@in=@multicast2, @in=@broadcast, 0x3, 0x794, 0x4e23, 0x20, 0x2, 0x20, 0x0, 0x3c}, {@in=@loopback, 0x4d6, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, {0x4, 0x9, 0x6, 0xffff, 0x8251c, 0x1, 0x83}, {0xfffffffffffffffc, 0x7fff, 0x1f, 0x1ff}, {0x2, 0x2, 0x9}, 0x70bd2c, 0x0, 0x2, 0x0, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075d, 0xfffffff1}}]}, 0x144}, 0x1, 0x0, 0x0, 0xc801}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0xe599, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x8000000000000006, 0x1}, {0xfffffffffffffffc, 0x3}, 0x0, 0x0, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x41}, 0x4d6, 0x6c}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x400000}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3a00, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 1.835734826s ago: executing program 2 (id=550): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030f00000000000000000800"], 0x2c}, 0x1, 0x0, 0x0, 0x20010004}, 0x0) 1.734952952s ago: executing program 1 (id=551): openat$sw_sync(0xffffffffffffff9c, 0x0, 0x8a80, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x404, &(0x7f0000000000)={0x0, 0x4}) 1.612459692s ago: executing program 3 (id=552): r0 = msgget$private(0x0, 0x480) msgsnd(r0, &(0x7f0000000f40)=ANY=[@ANYBLOB="01"], 0x401, 0x0) msgsnd(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="02"], 0x401, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x2000) msgctl$IPC_RMID(r0, 0x0) 1.598913326s ago: executing program 4 (id=553): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800, &(0x7f0000000580), 0x26, 0x756, &(0x7f00000005c0)="$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") chdir(&(0x7f0000000d40)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file0\x00', 0x0, 0x1) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000dc0)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000e40)={0x1, 0x0, 0x0, 0x0, 0x4000}) 1.572092344s ago: executing program 1 (id=554): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='-cpu -pids'], 0xb) 1.533709547s ago: executing program 2 (id=556): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x200}, @TCA_FQ_RATE_ENABLE={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.366439622s ago: executing program 4 (id=557): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@newtclass={0xc6c, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0xc40, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0x8, 0xd, 0x1c0000, 0x2, 0x81, 0x2, 0x1, 0x1ff, 0x81, 0x8, 0x8, 0x100, 0x8, 0xf, 0x3, 0xdbd4, 0xfffffff8, 0xd37, 0x1, 0x5, 0x9, 0x804, 0x5, 0x3, 0x800, 0x8, 0xb43, 0x7, 0x7, 0xfffffffc, 0xffffff4e, 0x1, 0x9, 0x1, 0x81, 0x7ff, 0x4, 0x3, 0xfffffeff, 0x8, 0x4, 0x10, 0x3, 0x9, 0xfffffff7, 0x5, 0x8, 0x6, 0x0, 0xd3e, 0x2d, 0x276, 0x9, 0x4, 0x748, 0x7f, 0x9, 0xffffffff, 0x8, 0x7, 0x4, 0xfffffffb, 0x56, 0x9, 0xdf, 0x1ff, 0xc7, 0x8, 0xff, 0x0, 0x3, 0x2, 0x400, 0x7, 0xfff, 0x101, 0x1, 0xc0000, 0x5, 0xffff, 0x6, 0x7fffffff, 0x3, 0x477, 0x9, 0x4, 0xbe, 0x100, 0x0, 0x6, 0x1, 0x7, 0xe, 0x3, 0x9, 0x4, 0x9000000, 0x8, 0xd, 0xee11, 0x6, 0x6, 0x405, 0x4, 0x5, 0xc, 0x80, 0xffffffff, 0x1, 0x0, 0x3, 0x1, 0x8, 0x401, 0x6, 0xbdd, 0x3, 0x2, 0xd, 0x100, 0x5, 0xfffffffc, 0x200, 0x3, 0xe4f6, 0x7f, 0x3, 0x7, 0x5, 0x80, 0x100, 0x5a6, 0x7, 0x4, 0xeebe, 0x47ac1a21, 0xff, 0x5, 0x9, 0x1ff, 0x101, 0x19, 0x8, 0x6, 0xfff, 0x9, 0x2, 0x100, 0x2, 0x2, 0x8, 0xfff, 0x7fff, 0x2, 0x0, 0x1, 0x1ff, 0x2, 0xffffffff, 0x3039, 0x1, 0x2, 0x5a, 0x0, 0x7, 0x7, 0x9, 0x5, 0xfffffb5b, 0x101, 0x3, 0x485, 0xfffffeff, 0x400, 0x5, 0x7, 0x200, 0x585, 0xfffffffd, 0x0, 0xa, 0x1, 0x6, 0x7fff, 0x9000, 0xb, 0x917, 0xfffff000, 0x505, 0x8, 0x5, 0xfffffffc, 0xb, 0xfffff70f, 0x80000001, 0x4, 0x3355d8d5, 0x1, 0x81, 0x7fff, 0xfffffffd, 0xb5d, 0x7, 0x7, 0x600, 0x791f, 0x3, 0x1, 0x6, 0x1ff, 0x1000, 0x8, 0x1000, 0x72e, 0x100, 0x0, 0x25, 0xfffffffb, 0x7, 0xff, 0x0, 0x7, 0xfff, 0x401, 0xffffffff, 0x81, 0x3, 0x1, 0x8, 0x7, 0x8cc0, 0x1, 0xffff, 0x7, 0x2, 0xfffffff4, 0x8000, 0x9, 0x5, 0x1, 0x100, 0x350, 0x3, 0x7d84, 0xf75, 0x78e, 0xfff, 0x2e, 0x20000000, 0x2, 0xc, 0x5, 0x5, 0x2, 0x5, 0x9]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x9, 0x1, 0x0, 0x3f1, 0x2, 0x5}, {0x8, 0x0, 0x8, 0x7b, 0x7ff, 0x4}, 0x4, 0x7, 0xffff, 0x8, 0x644}}, @TCA_HTB_CTAB={0x404, 0x3, [0xb, 0x3, 0x6, 0x8, 0xfffffffc, 0x9, 0xb, 0xfffffff9, 0x10000, 0x5, 0x2, 0x6, 0x8, 0x5a, 0x2, 0x1, 0x1, 0x2, 0x5, 0x0, 0xb3, 0x3, 0x0, 0x1, 0x800, 0x1ff, 0x922, 0x91, 0xa236f736, 0x8, 0x4, 0xff, 0x2, 0x10000, 0x5, 0x5, 0x0, 0x8000, 0x9, 0x8, 0xfffff800, 0x6, 0x0, 0xfffffffc, 0x5, 0xffff, 0x7, 0x0, 0x1, 0xf56, 0x1ff, 0x1, 0x2, 0x3, 0x5, 0x7, 0xfffffffb, 0xfffffff8, 0x7, 0x4, 0x1000, 0x6, 0x7f, 0x4, 0x9, 0x0, 0x80000000, 0x7, 0x0, 0x3ff, 0xe, 0x3, 0x2, 0x7, 0x4, 0x1, 0x1, 0x1, 0x96c, 0x4, 0x38, 0xc, 0x8001, 0x1, 0x1, 0x8668, 0x400, 0xb, 0x8, 0x7, 0x2400000, 0x6, 0x200, 0x9, 0xfffffff9, 0x0, 0x7, 0x6, 0x53d7, 0xfff, 0xffffffff, 0x5, 0x1, 0x400, 0xd, 0x9, 0x90, 0x8, 0x3, 0x2, 0x2, 0x80000000, 0x1, 0x1000, 0x6, 0xa, 0x7, 0x8, 0x4, 0x7, 0x0, 0x8, 0xffff, 0xfffff801, 0x8, 0x10000, 0xffff, 0x4, 0x8008, 0x5, 0x1, 0x9, 0x6, 0xfff, 0x4, 0xffff, 0x401, 0x579, 0xd, 0x1, 0xe62, 0xfffffff8, 0x3, 0x7, 0x0, 0x8, 0x80, 0x81, 0x9, 0x0, 0x1, 0x8, 0x80000001, 0x8, 0xfff, 0x9, 0x6, 0x7, 0x5, 0x6, 0x0, 0x4, 0x3, 0x0, 0xfffffffe, 0x7f, 0x1, 0x2, 0x400, 0x3, 0x80000000, 0x7, 0x5, 0x6, 0x8, 0x8, 0x449f, 0x5, 0x4, 0x4, 0x9, 0x0, 0x168, 0xcec, 0x4de, 0x7, 0x0, 0x2, 0x6, 0x3, 0x7, 0x61a, 0x7, 0x4, 0x5, 0x7, 0x7, 0x0, 0x7f, 0x4, 0xa14, 0x90000000, 0x9, 0x2, 0x8000, 0x200, 0x1, 0x242, 0x6, 0x3, 0xa, 0x2f, 0xfff, 0x0, 0x0, 0x19, 0x6, 0x3, 0x0, 0xfffffffd, 0x15, 0x8, 0x3, 0x4, 0x5, 0xffffffff, 0x5ffad104, 0x6, 0xdbfe, 0xfffffff9, 0x0, 0x5, 0x10000, 0x0, 0x0, 0x8, 0x3, 0x4, 0x1, 0xffffc993, 0x653e, 0xffffffff, 0x8, 0x8001, 0x7, 0xb, 0xac1, 0xffff, 0x2, 0x2, 0x4, 0x1ff, 0x0, 0x3, 0x40, 0x6]}, @TCA_HTB_CTAB={0x404, 0x3, [0x9, 0x1, 0x5, 0x2, 0x1, 0xa, 0x0, 0x6, 0x40000000, 0x3, 0x15, 0x3, 0x7, 0x0, 0x9, 0xf6, 0x8001, 0xffffffff, 0x0, 0xfffffffe, 0x40, 0x8, 0xfffffffc, 0x80000000, 0x1, 0x2, 0x7, 0x2, 0x7, 0x2, 0x7, 0xffff, 0x101, 0x5, 0x7, 0x81, 0x306, 0x5, 0x3, 0x620f8cf2, 0x4, 0x8, 0x7, 0x10000, 0xdac4, 0x6, 0x6, 0xd, 0x2, 0x4f08, 0x9a12a13, 0x0, 0x5, 0x0, 0xfdb, 0x8, 0x5, 0x7, 0x2, 0xf, 0x80000001, 0x6e61, 0xffff, 0x7, 0x7, 0xc, 0x10, 0x77, 0x0, 0xe, 0x63, 0x9, 0x8, 0x2bc4, 0x7fff, 0x4, 0x8, 0x2, 0x363a, 0xeb45, 0x9, 0x6, 0xd, 0x8, 0x30d962b1, 0x0, 0x101, 0x8, 0x4, 0x6, 0x5, 0x5, 0x0, 0x8, 0x10001, 0x0, 0x200, 0x0, 0x5, 0x4335f8e, 0x5, 0x8, 0x7, 0x9, 0x1, 0x8, 0x2, 0xffffffd6, 0x1, 0x3, 0x6, 0x7fffffff, 0x7, 0x1, 0x2, 0x3, 0x81, 0x5, 0x2768, 0x1, 0x9, 0x8, 0x5ef, 0xc7, 0xfffff800, 0x1ff, 0x4, 0x5e, 0x7, 0x8, 0x9, 0x4, 0xf, 0x4a, 0x800, 0x8, 0x5, 0x9, 0x400, 0x9e, 0x2, 0x1000, 0x2, 0xffffffff, 0xd, 0x0, 0x8000, 0x33b, 0x1, 0x4, 0xc8, 0xffff, 0x0, 0xf3, 0x7, 0xb1, 0x7, 0x6, 0xfffeffff, 0x8cf8, 0x1, 0x8, 0x5e, 0xf, 0x3, 0xa, 0x1, 0x6, 0xf, 0x55, 0x64b, 0x3, 0x7fff, 0x200, 0x0, 0xb, 0x1, 0x8000, 0xfffffffd, 0x3, 0xfffffff7, 0x9, 0x80000001, 0x8, 0x2b0, 0x166, 0x5, 0x2, 0x2, 0x101, 0x1, 0xffffffff, 0x80000000, 0x5dc0, 0x1, 0x23f1, 0x80000001, 0xfff, 0x7, 0x1000, 0x3, 0x4, 0x3, 0xe, 0x8, 0xffffffff, 0x40, 0x0, 0x7, 0x9fdc, 0x6, 0x4, 0x16e3, 0x101, 0xc9, 0xfffffffa, 0x10001, 0x5, 0x3, 0xc, 0x1, 0x0, 0x3ff, 0x81, 0x9, 0x6, 0x2, 0x3, 0x3, 0x4, 0x80000000, 0x5, 0x1, 0x917, 0x2, 0x7f, 0xc3f, 0x96, 0x9, 0x60000, 0x0, 0x2, 0xc000, 0xe3, 0x7, 0x7, 0x8, 0x8, 0xfffffe01, 0x2c, 0x60000000, 0x2, 0x0, 0xb1, 0x0, 0x3]}]}}]}, 0xc6c}}, 0x0) 1.347132414s ago: executing program 1 (id=558): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24000045, &(0x7f0000000400)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) recvmmsg(r0, &(0x7f0000004e40)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000240)=""/35, 0x23}], 0x1}, 0x1}], 0x1, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000340)='.', 0x1, 0x805, 0x0, 0x0) 1.175900409s ago: executing program 1 (id=559): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x1022002, 0x0) r1 = dup(r0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x80040, 0x0) sendfile(r0, r2, 0x0, 0x8000fffffffe) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 1.099114826s ago: executing program 3 (id=560): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x1000040, &(0x7f0000000100)={[{@nobarrier}, {@oldalloc}, {@orlov}, {@dioread_lock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x90d42, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x20) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020660b, &(0x7f0000001380)={0x0, 0xfffffffffffffffa, 0x5, 0x3}) 1.093856894s ago: executing program 0 (id=561): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, 0x0) 951.512394ms ago: executing program 1 (id=562): syz_emit_ethernet(0x76, &(0x7f0000000580)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d3ffff", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a}, @srh={0xc, 0x0, 0x4, 0x0, 0x9, 0x20, 0x2}]}}}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000005fc0)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012, r2}) 858.64671ms ago: executing program 0 (id=563): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x68e0, &(0x7f0000000040)={0x0, 0x7000, 0x400, 0x0, 0x1005}, &(0x7f00000000c0)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) close(0x3) openat$nullb(0xffffffffffffff9c, &(0x7f00000045c0), 0x0, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0x1200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000041c0)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x11}}}, &(0x7f0000000300)) 831.934505ms ago: executing program 2 (id=564): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1018e58, &(0x7f00000002c0), 0x4, 0x636, &(0x7f0000003240)="$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") r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r0, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x402, 0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) 727.039937ms ago: executing program 0 (id=565): clock_gettime(0x0, &(0x7f0000000400)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {}, 0xa}}, 0x26) sendmmsg$inet(r1, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107678bfecb64da14096962db497a0299399ab6101c3b", 0x18}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000002c0), 0x1a}}], 0x2, 0x8040) 676.930871ms ago: executing program 0 (id=566): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x12, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x8, 0x40000000000000]}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x8383) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001280)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) 607.861007ms ago: executing program 0 (id=567): r0 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) write(0xffffffffffffffff, &(0x7f0000001000)="4f4f4f4fff", 0x5) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000001c0)=0x2) 443.56766ms ago: executing program 0 (id=568): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) 90.912474ms ago: executing program 4 (id=569): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@void, @void, @eth={@broadcast, @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x4000, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @multicast1}, {0x0, 0x17c1, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "6cb8ec4860855e3665d8c7e2cbc3879f1d80baa2f5c55e54", "f1e1df33cf5d887d818801de4189e0c45a16f9158f77b93aaf537d6e0aba6b79"}}}}}}}, 0x6e) 63.267593ms ago: executing program 3 (id=570): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="89", 0x1) mremap(&(0x7f000004f000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f000016c000/0x2000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x67) 40.56119ms ago: executing program 2 (id=571): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839c", 0x1f) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd01, &(0x7f0000000140)="0400000000000000000000003801") 0s ago: executing program 1 (id=572): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x10}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.65' (ED25519) to the list of known hosts. [ 23.542463][ T4695] cgroup: Unknown subsys name 'net' [ 23.682311][ T4695] cgroup: Unknown subsys name 'cpuset' [ 23.683596][ T4695] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 23.841551][ T4695] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 24.655129][ T4721] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 24.655167][ T4722] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 24.656211][ T4721] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 24.656304][ T4722] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 24.656611][ T4721] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 24.656746][ T4721] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 24.657172][ T4722] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 24.657401][ T4722] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 24.657710][ T4721] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 24.657720][ T4722] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 24.657868][ T4722] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 24.658187][ T4722] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 24.658323][ T4722] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 24.658499][ T4722] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 24.658989][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 24.659186][ T4722] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 24.659283][ T4722] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 24.659601][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 24.660159][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 24.660392][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 24.660510][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 24.660652][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 24.700937][ T4724] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 24.701929][ T4712] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 24.702948][ T4712] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 24.848982][ T4710] rxe_eth0 speed is unknown, defaulting to 1000 [ 24.849257][ T4710] rxe_eth0 speed is unknown, defaulting to 1000 [ 24.849630][ T4710] rxe_eth0 speed is unknown, defaulting to 1000 [ 24.863344][ T4706] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 24.889139][ T4709] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 24.917886][ T4713] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 24.920017][ T4714] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 24.944273][ T4710] infiniband rxe0: set active [ 24.944491][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 24.944554][ T4710] infiniband rxe0: added rxe_eth0 [ 24.970717][ T4713] rxe_eth0 speed is unknown, defaulting to 1000 [ 24.993277][ T4710] RDS/IB: rxe0: added [ 24.993361][ T4710] smc: adding ib device rxe0 with port count 1 [ 24.993384][ T4710] smc: ib device rxe0 port 1 has no pnetid [ 25.013840][ T4717] rxe_eth0 speed is unknown, defaulting to 1000 [ 25.052620][ T4714] rxe_eth0 speed is unknown, defaulting to 1000 [ 25.054096][ T4717] rxe_eth0 speed is unknown, defaulting to 1000 [ 25.072395][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 25.140543][ T4710] rxe_eth0 speed is unknown, defaulting to 1000 [ 25.182806][ T4706] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.183083][ T4706] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.183149][ T4706] bridge_slave_0: entered allmulticast mode [ 25.183684][ T4706] bridge_slave_0: entered promiscuous mode [ 25.192042][ T4710] rxe_eth0 speed is unknown, defaulting to 1000 [ 25.194198][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.194223][ T4709] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.194282][ T4709] bridge_slave_0: entered allmulticast mode [ 25.194854][ T4709] bridge_slave_0: entered promiscuous mode [ 25.200099][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.200126][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.200176][ T4709] bridge_slave_1: entered allmulticast mode [ 25.200592][ T4709] bridge_slave_1: entered promiscuous mode [ 25.216302][ T4706] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.216344][ T4706] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.216435][ T4706] bridge_slave_1: entered allmulticast mode [ 25.216988][ T4706] bridge_slave_1: entered promiscuous mode [ 25.238267][ T4709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.240029][ T4709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.241043][ T4706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.250007][ T4706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.267300][ T4706] team0: Port device team_slave_0 added [ 25.268131][ T4706] team0: Port device team_slave_1 added [ 25.293059][ T4706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.293072][ T4706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.293086][ T4706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.294062][ T4709] team0: Port device team_slave_0 added [ 25.294107][ T4710] rxe_eth0 speed is unknown, defaulting to 1000 [ 25.294835][ T4709] team0: Port device team_slave_1 added [ 25.320642][ T4706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.320653][ T4706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.320667][ T4706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.331097][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.331108][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.331121][ T4709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.331727][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.331734][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.331747][ T4709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.341834][ T4706] hsr_slave_0: entered promiscuous mode [ 25.342163][ T4706] hsr_slave_1: entered promiscuous mode [ 25.383771][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.383861][ T4713] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.383913][ T4713] bridge_slave_0: entered allmulticast mode [ 25.384362][ T4713] bridge_slave_0: entered promiscuous mode [ 25.398083][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.398114][ T4713] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.398211][ T4713] bridge_slave_1: entered allmulticast mode [ 25.398627][ T4713] bridge_slave_1: entered promiscuous mode [ 25.420817][ T4709] hsr_slave_0: entered promiscuous mode [ 25.421369][ T4709] hsr_slave_1: entered promiscuous mode [ 25.421576][ T4709] debugfs: 'hsr0' already exists in 'hsr' [ 25.421622][ T4709] Cannot create hsr debugfs directory [ 25.443537][ T4713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.445854][ T4713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.474807][ T4713] team0: Port device team_slave_0 added [ 25.477754][ T4706] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 25.480164][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 25.480659][ T4706] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 25.488832][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 25.490564][ T4706] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 25.494866][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 25.495654][ T4713] team0: Port device team_slave_1 added [ 25.515575][ T4706] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 25.517201][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 25.541380][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.541393][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.541406][ T4713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.542008][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.542015][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.542029][ T4713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.591955][ T4714] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.591986][ T4714] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.592087][ T4714] bridge_slave_0: entered allmulticast mode [ 25.592528][ T4714] bridge_slave_0: entered promiscuous mode [ 25.593865][ T4714] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.593885][ T4714] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.593968][ T4714] bridge_slave_1: entered allmulticast mode [ 25.594376][ T4714] bridge_slave_1: entered promiscuous mode [ 25.605094][ T4714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.607396][ T4714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.607909][ T4706] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.607954][ T4706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.608093][ T4706] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.608122][ T4706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.613954][ T4709] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 25.619172][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 25.641586][ T4709] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 25.642765][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 25.644425][ T4713] hsr_slave_0: entered promiscuous mode [ 25.644723][ T4713] hsr_slave_1: entered promiscuous mode [ 25.644910][ T4713] debugfs: 'hsr0' already exists in 'hsr' [ 25.644920][ T4713] Cannot create hsr debugfs directory [ 25.644973][ T4709] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 25.646029][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 25.655675][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.655762][ T4710] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.656312][ T4710] bridge_slave_0: entered allmulticast mode [ 25.656763][ T4710] bridge_slave_0: entered promiscuous mode [ 25.674269][ T4709] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 25.675315][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 25.676143][ T4714] team0: Port device team_slave_0 added [ 25.676303][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.676332][ T4710] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.676426][ T4710] bridge_slave_1: entered allmulticast mode [ 25.676860][ T4710] bridge_slave_1: entered promiscuous mode [ 25.681839][ T4714] team0: Port device team_slave_1 added [ 25.687734][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.687744][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.687756][ T4714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.692774][ T4710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.693715][ T4710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.700130][ T4710] team0: Port device team_slave_0 added [ 25.701419][ T4710] team0: Port device team_slave_1 added [ 25.717155][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.717169][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.717183][ T4714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.728768][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.728778][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.728790][ T4710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.729296][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.729302][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.729314][ T4710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.738795][ T4710] hsr_slave_0: entered promiscuous mode [ 25.739057][ T4710] hsr_slave_1: entered promiscuous mode [ 25.739225][ T4710] debugfs: 'hsr0' already exists in 'hsr' [ 25.739235][ T4710] Cannot create hsr debugfs directory [ 25.760162][ T4706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.775582][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.775611][ T4709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.775685][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.775720][ T4709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.784217][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.785321][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.786943][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.788472][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.814128][ T4706] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.816621][ T4714] hsr_slave_0: entered promiscuous mode [ 25.816990][ T4714] hsr_slave_1: entered promiscuous mode [ 25.817198][ T4714] debugfs: 'hsr0' already exists in 'hsr' [ 25.817208][ T4714] Cannot create hsr debugfs directory [ 25.833724][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.833760][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.846587][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.846613][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.887276][ T4713] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 25.888761][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 25.899709][ T4713] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 25.900624][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 25.901298][ T4713] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 25.903694][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 25.909324][ T4709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.913633][ T4713] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 25.914676][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 25.928497][ T4706] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.937839][ T4709] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.945760][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.945787][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.946084][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.946102][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.960233][ T4710] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 25.965912][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 25.966604][ T4710] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 25.967651][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 25.977094][ T4710] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 25.979016][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 25.987446][ T4710] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 25.989039][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 26.011734][ T4713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.018974][ T4714] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 26.020145][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 26.038584][ T4714] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 26.039691][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 26.040046][ T4714] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 26.042497][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 26.043506][ T4713] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.053353][ T4714] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 26.055259][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 26.056899][ T1180] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.056923][ T1180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.072189][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.072217][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.096018][ T4710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.106354][ T4713] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 26.106370][ T4713] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.126410][ T4706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.129792][ T4710] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.143571][ T4710] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 26.143592][ T4710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.147513][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.147540][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.148033][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.148051][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.161952][ T4714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.175208][ T4706] veth0_vlan: entered promiscuous mode [ 26.178286][ T4706] veth1_vlan: entered promiscuous mode [ 26.186838][ T4706] veth0_macvtap: entered promiscuous mode [ 26.187959][ T4706] veth1_macvtap: entered promiscuous mode [ 26.194426][ T4706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.195998][ T4706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.199277][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.199347][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.221587][ T4714] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.246583][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.246611][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.247107][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.247127][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.251980][ T924] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.252020][ T924] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.287383][ T4714] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 26.287401][ T4714] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.302070][ T924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 26.302084][ T924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 26.318705][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 26.318719][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 26.347023][ T4709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.363013][ T4709] veth0_vlan: entered promiscuous mode [ 26.365026][ T4709] veth1_vlan: entered promiscuous mode [ 26.366767][ T4706] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.387825][ T4709] veth0_macvtap: entered promiscuous mode [ 26.401249][ T4709] veth1_macvtap: entered promiscuous mode [ 26.404456][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.405909][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.421777][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.426358][ T4713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.458721][ T4713] veth0_vlan: entered promiscuous mode [ 26.472624][ T4713] veth1_vlan: entered promiscuous mode [ 26.486296][ T4713] veth0_macvtap: entered promiscuous mode [ 26.487540][ T4713] veth1_macvtap: entered promiscuous mode [ 26.494079][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.495586][ T1180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 26.495598][ T1180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 26.501922][ T1180] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.503508][ T4128] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.503600][ T4128] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.514571][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.529497][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 26.529512][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 26.537271][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.539755][ T4710] veth0_vlan: entered promiscuous mode [ 26.577762][ T4710] veth1_vlan: entered promiscuous mode [ 26.587279][ T4714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.593310][ T1180] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.600477][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 26.600499][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 26.607644][ T4710] veth0_macvtap: entered promiscuous mode [ 26.608777][ T4710] veth1_macvtap: entered promiscuous mode [ 26.618274][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.624344][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.644323][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.646240][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.646436][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 26.646444][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 26.646585][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.698806][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.698982][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.699127][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.699216][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.724603][ T924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 26.724621][ T924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 26.731078][ T4720] Bluetooth: hci1: command tx timeout [ 26.741111][ T4720] Bluetooth: hci3: command tx timeout [ 26.741303][ T4720] Bluetooth: hci0: command tx timeout [ 26.741309][ T4712] Bluetooth: hci4: command tx timeout [ 26.741508][ T4720] Bluetooth: hci2: command tx timeout [ 26.764617][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 26.764631][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 26.815261][ T4714] veth0_vlan: entered promiscuous mode [ 26.818229][ T4714] veth1_vlan: entered promiscuous mode [ 26.840541][ T4714] veth0_macvtap: entered promiscuous mode [ 26.852105][ T4714] veth1_macvtap: entered promiscuous mode [ 26.862533][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.871720][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.938459][ T4128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 26.938476][ T4128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 26.942480][ T1180] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.942591][ T1180] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.942710][ T1180] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.942821][ T1180] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.985099][ T4128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 26.985115][ T4128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.117334][ T4969] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16'. [ 27.117356][ T4969] netlink: 48 bytes leftover after parsing attributes in process `syz.1.16'. [ 27.158761][ T4978] syzkaller1: entered allmulticast mode [ 27.205736][ T4986] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 27.437024][ T5037] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 27.494791][ T5048] loop4: detected capacity change from 0 to 512 [ 27.495638][ T5048] EXT4-fs: Ignoring removed nobh option [ 27.497488][ T5048] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 27.497503][ T5048] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 27.530323][ T5048] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 27.531092][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 27.531104][ C1] EXT4-fs (loop4): initial error at time 27: ext4_mb_generate_buddy:1317 [ 27.531117][ C1] EXT4-fs (loop4): last error at time 27: ext4_mb_generate_buddy:1317 [ 27.542824][ T5048] EXT4-fs (loop4): Remounting filesystem read-only [ 27.543177][ T5048] EXT4-fs (loop4): 1 truncate cleaned up [ 27.543640][ T5048] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 27.549333][ T5048] netlink: 12 bytes leftover after parsing attributes in process `syz.4.29'. [ 27.549753][ T4724] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:200' [ 27.549765][ T4724] CPU: 0 UID: 0 PID: 4724 Comm: kworker/u9:8 Not tainted syzkaller #0 PREEMPT [ 27.549776][ T4724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 27.549781][ T4724] Workqueue: hci0 hci_rx_work [ 27.549796][ T4724] Call trace: [ 27.549799][ T4724] show_stack+0x2c/0x3c (C) [ 27.549821][ T4724] __dump_stack+0x30/0x40 [ 27.549837][ T4724] dump_stack_lvl+0xd8/0x12c [ 27.549850][ T4724] dump_stack+0x1c/0x28 [ 27.549862][ T4724] sysfs_warn_dup+0x9c/0xb8 [ 27.549871][ T4724] sysfs_create_dir_ns+0x190/0x1f4 [ 27.549879][ T4724] kobject_add_internal+0x290/0x6f0 [ 27.549891][ T4724] kobject_add_varg+0x9c/0xe8 [ 27.549900][ T4724] kobject_add+0x110/0x1c8 [ 27.549909][ T4724] device_add+0x394/0x9e0 [ 27.549921][ T4724] hci_conn_add_sysfs+0xbc/0x1e8 [ 27.549933][ T4724] le_conn_complete_evt+0xc84/0x122c [ 27.549944][ T4724] hci_le_conn_complete_evt+0x114/0x3d8 [ 27.549953][ T4724] hci_le_meta_evt+0x2b0/0x46c [ 27.549965][ T4724] hci_event_packet+0x4c0/0x9c8 [ 27.549975][ T4724] hci_rx_work+0x2f4/0xd78 [ 27.549983][ T4724] process_scheduled_works+0x91c/0x1250 [ 27.549995][ T4724] worker_thread+0x798/0xbd0 [ 27.550005][ T4724] kthread+0x304/0x3d4 [ 27.550015][ T4724] ret_from_fork+0x10/0x20 [ 27.550045][ T4724] kobject: kobject_add_internal failed for hci0:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 27.550061][ T4724] Bluetooth: hci0: failed to register connection device [ 27.568614][ T4714] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.653640][ T5063] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 27.676601][ T5065] syz.4.36 uses obsolete (PF_INET,SOCK_PACKET) [ 27.774600][ T5069] loop4: detected capacity change from 0 to 2048 [ 27.792733][ T5069] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 27.853884][ T5069] fs-verity (loop4, inode 13): Error -28 writing Merkle tree block 1441 [ 27.853924][ T5069] fs-verity (loop4, inode 13): Error -28 building Merkle tree [ 27.884908][ T4714] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.924420][ T5076] netlink: 'syz.4.40': attribute type 11 has an invalid length. [ 28.000251][ T5082] bond0: option arp_validate: invalid value () [ 28.118436][ T5099] loop1: detected capacity change from 0 to 1024 [ 28.125211][ T5099] ======================================================= [ 28.125211][ T5099] WARNING: The mand mount option has been deprecated and [ 28.125211][ T5099] and is ignored by this kernel. Remove the mand [ 28.125211][ T5099] option from the mount to silence this warning. [ 28.125211][ T5099] ======================================================= [ 28.150421][ T5099] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 28.237743][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 28.306950][ T5125] loop2: detected capacity change from 0 to 128 [ 28.355452][ T5133] loop2: detected capacity change from 0 to 512 [ 28.374761][ T5133] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.423494][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.448598][ T5144] loop1: detected capacity change from 0 to 4096 [ 28.458247][ T5144] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.470014][ T5144] EXT4-fs (loop1): shut down requested (0) [ 28.471060][ T5148] warning: `syz.4.69' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 28.515451][ T5150] netlink: 1180 bytes leftover after parsing attributes in process `syz.0.73'. [ 28.549650][ T5158] loop4: detected capacity change from 0 to 512 [ 28.557162][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.557734][ T5158] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 28.557750][ T5158] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 28.559798][ T5158] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:487: comm syz.4.75: Invalid block bitmap block 0 in block_group 0 [ 28.559870][ T5158] loop4: lost filesystem error report for type 5 error -117 [ 28.560019][ T5158] EXT4-fs (loop4): Remounting filesystem read-only [ 28.560091][ T5158] EXT4-fs (loop4): 1 truncate cleaned up [ 28.560534][ T5158] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.607307][ T4714] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.616270][ T5165] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 28.684842][ T5178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.85'. [ 28.727701][ T5183] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 28.749818][ T5185] loop0: detected capacity change from 0 to 512 [ 28.759698][ T5185] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.88: corrupted in-inode xattr: invalid ea_ino [ 28.759778][ T5185] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 28.760784][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 28.760801][ C0] EXT4-fs (loop0): initial error at time 28: ext4_iget_extra_inode:5210: inode 15 [ 28.760819][ C0] EXT4-fs (loop0): last error at time 28: ext4_iget_extra_inode:5210: inode 15 [ 28.767906][ T5185] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.88: couldn't read orphan inode 15 (err -117) [ 28.767932][ T5185] loop0: lost filesystem error report for type 5 error -117 [ 28.768591][ T5185] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.811625][ T4720] Bluetooth: hci2: command tx timeout [ 28.811654][ T4720] Bluetooth: hci1: command tx timeout [ 28.811670][ T4720] Bluetooth: hci0: command tx timeout [ 28.811686][ T4720] Bluetooth: hci3: command tx timeout [ 28.811861][ T4712] Bluetooth: hci4: command tx timeout [ 28.817530][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.900520][ T5202] loop1: detected capacity change from 0 to 512 [ 28.929928][ T5202] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 28.929993][ T5202] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.972845][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 28.997191][ T5215] loop0: detected capacity change from 0 to 512 [ 29.003241][ T5215] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 29.003259][ T5215] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 29.022941][ T5215] EXT4-fs (loop0): 1 truncate cleaned up [ 29.023518][ T5215] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.038357][ T5215] EXT4-fs error (device loop0): ext4_find_dest_de:2052: inode #2: block 13: comm syz.0.102: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 29.045788][ T5215] EXT4-fs (loop0): Remounting filesystem read-only [ 29.048094][ T5215] syz.0.102 (pid 5215) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 29.058849][ T5220] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 29.064295][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.081289][ T4820] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 29.171860][ T5230] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 29.175028][ T5230] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.235153][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.235394][ T5242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.113'. [ 29.303643][ T5250] nvme nvme0: syz.1.117: nsid (0) in cmd does not match nsid (1) of namespace [ 29.344859][ T5253] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.345506][ T5253] ext4 filesystem being mounted at /27/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.374314][ T5155] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 29.392932][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.430938][ T24] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 29.449136][ T5265] Set syz1 is full, maxelem 1029 reached [ 29.480024][ T5268] FAULT_INJECTION: forcing a failure. [ 29.480024][ T5268] name failslab, interval 1, probability 0, space 0, times 1 [ 29.480047][ T5268] CPU: 1 UID: 0 PID: 5268 Comm: syz.1.126 Not tainted syzkaller #0 PREEMPT [ 29.480058][ T5268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 29.480063][ T5268] Call trace: [ 29.480067][ T5268] show_stack+0x2c/0x3c (C) [ 29.480089][ T5268] __dump_stack+0x30/0x40 [ 29.480101][ T5268] dump_stack_lvl+0xd8/0x12c [ 29.480113][ T5268] dump_stack+0x1c/0x28 [ 29.480124][ T5268] should_fail_ex+0x418/0x58c [ 29.480133][ T5268] should_failslab+0xc4/0x120 [ 29.480141][ T5268] __kmalloc_flags_noprof+0x140/0x724 [ 29.480151][ T5268] alloc_slab_obj_exts+0x70/0x1bc [ 29.480159][ T5268] __memcg_slab_post_alloc_hook+0x408/0x824 [ 29.480173][ T5268] __kmalloc_cache_noprof+0x348/0x5fc [ 29.480182][ T5268] alloc_fs_context+0x7c/0xba4 [ 29.480192][ T5268] fs_context_for_mount+0x34/0x44 [ 29.480201][ T5268] __arm64_sys_fsopen+0xe8/0x1a4 [ 29.480211][ T5268] invoke_syscall+0x98/0x244 [ 29.480223][ T5268] el0_svc_common+0xec/0x23c [ 29.480235][ T5268] do_el0_svc+0x4c/0x5c [ 29.480246][ T5268] el0_svc+0x60/0x1d8 [ 29.480255][ T5268] el0t_64_sync_handler+0x44/0x104 [ 29.480263][ T5268] el0t_64_sync+0x198/0x19c [ 29.537586][ T5272] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 29.537707][ T5272] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.566885][ T5272] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #15: comm syz.0.127: lblock 0 mapped to illegal pblock 0 (length 6) [ 29.567886][ T5272] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 29.567902][ T5272] EXT4-fs (loop0): This should not happen!! Data will be lost [ 29.567902][ T5272] [ 29.584522][ T4128] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm kworker/u8:7: bg 0: block 112: padding at end of block bitmap is not set [ 29.585638][ T4128] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 32 with error 28 [ 29.585733][ T4128] EXT4-fs (loop0): This should not happen!! Data will be lost [ 29.585733][ T4128] [ 29.585740][ T4128] EXT4-fs (loop0): Total free blocks count 0 [ 29.585748][ T4128] EXT4-fs (loop0): Free/Dirty block details [ 29.585758][ T4128] EXT4-fs (loop0): free_blocks=0 [ 29.585769][ T4128] EXT4-fs (loop0): dirty_blocks=32 [ 29.585775][ T4128] EXT4-fs (loop0): Block reservation details [ 29.624227][ T4872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.630547][ T4872] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 29.723580][ T5294] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 29.726056][ T5294] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 29.729454][ T5296] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.136: inode has both inline data and extents flags [ 29.729486][ T5296] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 29.730739][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 29.730755][ C0] EXT4-fs (loop0): initial error at time 1700000001: ext4_orphan_get:1403: inode 15 [ 29.730772][ C0] EXT4-fs (loop0): last error at time 1700000001: ext4_orphan_get:1403: inode 15 [ 29.732136][ T5296] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.136: couldn't read orphan inode 15 (err -117) [ 29.732160][ T5296] loop0: lost filesystem error report for type 5 error -117 [ 29.732780][ T5296] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.748250][ T5296] EXT4-fs (loop0): shut down requested (0) [ 29.788662][ T4713] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 29.830614][ T5306] netlink: 20 bytes leftover after parsing attributes in process `syz.3.140'. [ 29.846794][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.874023][ T5310] netlink: 28 bytes leftover after parsing attributes in process `syz.2.143'. [ 29.986837][ T5325] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 29.986878][ T5325] System zones: 1-12 [ 29.987581][ T5325] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #12: comm syz.3.151: missing EA_INODE flag [ 29.987597][ T5325] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 29.988762][ T5328] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.988818][ T5328] ext4 filesystem being mounted at /20/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.988824][ T5325] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.151: error while reading EA inode 12 err=-117 [ 29.988847][ T5325] loop3: lost filesystem error report for type 5 error -117 [ 29.989532][ T5325] EXT4-fs (loop3): 1 orphan inode deleted [ 29.990003][ T5325] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.022292][ T5328] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.150: corrupted xattr block 33: overlapping e_value [ 30.023155][ T5328] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.150: corrupted xattr block 33: overlapping e_value [ 30.023313][ T5328] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.150: corrupted xattr block 33: overlapping e_value [ 30.029422][ T5328] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.150: corrupted xattr block 33: overlapping e_value [ 30.033572][ T5327] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.033630][ T5327] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.064786][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.095671][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.129709][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.201513][ T5349] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.201571][ T5349] ext4 filesystem being mounted at /36/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.261466][ T5359] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.163: inode has both inline data and extents flags [ 30.261500][ T5359] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 30.261623][ T5359] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.163: couldn't read orphan inode 15 (err -117) [ 30.261639][ T5359] loop3: lost filesystem error report for type 5 error -117 [ 30.262152][ T5359] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.296505][ T5359] EXT4-fs error (device loop3): ext4_check_dx_root:2203: inode #2: comm syz.3.163: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 30.322111][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.375712][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.478150][ T5385] FAULT_INJECTION: forcing a failure. [ 30.478150][ T5385] name failslab, interval 1, probability 0, space 0, times 0 [ 30.478174][ T5385] CPU: 0 UID: 0 PID: 5385 Comm: syz.4.174 Not tainted syzkaller #0 PREEMPT [ 30.478185][ T5385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 30.478191][ T5385] Call trace: [ 30.478194][ T5385] show_stack+0x2c/0x3c (C) [ 30.478213][ T5385] __dump_stack+0x30/0x40 [ 30.478225][ T5385] dump_stack_lvl+0xd8/0x12c [ 30.478237][ T5385] dump_stack+0x1c/0x28 [ 30.478248][ T5385] should_fail_ex+0x418/0x58c [ 30.478256][ T5385] should_failslab+0xc4/0x120 [ 30.478265][ T5385] __kmalloc_noprof+0x108/0x6c8 [ 30.478274][ T5385] udpv6_init_sock+0x15c/0x398 [ 30.478287][ T5385] inet6_create+0xb4c/0xfc8 [ 30.478297][ T5385] __sock_create+0x31c/0x670 [ 30.478309][ T5385] __sys_socket_create+0xc0/0x11c [ 30.478319][ T5385] __sys_socket+0x44/0xec [ 30.478330][ T5385] __arm64_sys_socket+0x84/0x9c [ 30.478340][ T5385] invoke_syscall+0x98/0x244 [ 30.478352][ T5385] el0_svc_common+0xec/0x23c [ 30.478364][ T5385] do_el0_svc+0x4c/0x5c [ 30.478375][ T5385] el0_svc+0x60/0x1d8 [ 30.478384][ T5385] el0t_64_sync_handler+0x44/0x104 [ 30.478392][ T5385] el0t_64_sync+0x198/0x19c [ 30.559733][ T5398] Bluetooth: MGMT ver 1.23 [ 30.620600][ T5406] EXT4-fs error (device loop4): ext4_iget_extra_inode:5210: inode #15: comm syz.4.184: corrupted in-inode xattr: invalid ea_ino [ 30.624217][ T5406] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 30.624515][ T5406] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.184: couldn't read orphan inode 15 (err -117) [ 30.624531][ T5406] loop4: lost filesystem error report for type 5 error -117 [ 30.625092][ T5406] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.657355][ T4714] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.692906][ T5412] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 30.692924][ T5412] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 30.696851][ T5412] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm syz.0.186: bg 0: block 104: invalid block bitmap [ 30.696879][ T5412] loop0: lost filesystem error report for type 5 error -117 [ 30.697210][ T5412] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 30.697222][ T5412] loop0: lost filesystem error report for type 5 error -117 [ 30.697452][ T5412] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.186: invalid indirect mapped block 1 (level 1) [ 30.697466][ T5412] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 30.698280][ T5412] EXT4-fs (loop0): 1 truncate cleaned up [ 30.699176][ T5412] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.704725][ T5412] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 30.706906][ T5412] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 30.714703][ T5412] overlayfs: inode number too big (/, ino=4611686018427387906, xinobits=3) [ 30.714882][ T5412] overlayfs: d_ino too big (., ino=4611686018427387916, xinobits=3) [ 30.714895][ T5412] overlayfs: d_ino too big (file0, ino=4611686018427387917, xinobits=3) [ 30.714903][ T5412] overlayfs: d_ino too big (file1, ino=4611686018427387918, xinobits=3) [ 30.744630][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.848246][ T4723] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.848720][ T4723] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.848948][ T4723] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.849263][ T4723] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.849496][ T4723] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.871053][ T5419] overlayfs: statfs failed on './file0' [ 30.901927][ T4712] Bluetooth: hci3: command tx timeout [ 30.901954][ T4712] Bluetooth: hci0: command 0x040f tx timeout [ 30.902290][ T4724] Bluetooth: hci1: command tx timeout [ 30.902308][ T4724] Bluetooth: hci2: command tx timeout [ 30.988331][ T5422] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.114591][ T40] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.150095][ T5422] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.151653][ T5422] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.151727][ T5422] bridge_slave_0: entered allmulticast mode [ 31.152757][ T5422] bridge_slave_0: entered promiscuous mode [ 31.155494][ T5422] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.155551][ T5422] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.155604][ T5422] bridge_slave_1: entered allmulticast mode [ 31.156982][ T5422] bridge_slave_1: entered promiscuous mode [ 31.181181][ T5422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.183178][ T5422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.203671][ T40] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.213615][ T5422] team0: Port device team_slave_0 added [ 31.220453][ T5422] team0: Port device team_slave_1 added [ 31.221166][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 31.235191][ T5422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.235202][ T5422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.235214][ T5422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.235794][ T5422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.235801][ T5422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.235815][ T5422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.264223][ T5469] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 31.275782][ T5422] hsr_slave_0: entered promiscuous mode [ 31.277284][ T5469] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #3: block 1: comm syz.4.204: lblock 1 mapped to illegal pblock 1 (length 1) [ 31.277321][ T5469] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 31.278169][ T5422] hsr_slave_1: entered promiscuous mode [ 31.278413][ T5422] debugfs: 'hsr0' already exists in 'hsr' [ 31.278424][ T5422] Cannot create hsr debugfs directory [ 31.279394][ T5469] Quota error (device loop4): write_blk: dquota write failed [ 31.279420][ T5469] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 31.279455][ T5469] EXT4-fs error (device loop4): ext4_acquire_dquot:7070: comm syz.4.204: Failed to acquire dquot type 0 [ 31.279468][ T5469] loop4: lost filesystem error report for type 5 error -117 [ 31.279999][ T5469] EXT4-fs error (device loop4): ext4_free_blocks:6719: comm syz.4.204: Freeing blocks not in datazone - block = 0, count = 4096 [ 31.280015][ T5469] loop4: lost filesystem error report for type 5 error -117 [ 31.283171][ T5469] EXT4-fs error (device loop4): ext4_read_inode_bitmap:141: comm syz.4.204: Invalid inode bitmap blk 0 in block_group 0 [ 31.286081][ T5469] EXT4-fs error (device loop4) in ext4_free_inode:363: Corrupt filesystem [ 31.288303][ T5469] EXT4-fs (loop4): 1 orphan inode deleted [ 31.289696][ T5469] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.314369][ T4128] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 31.315129][ T4128] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 31.315148][ T4128] EXT4-fs error (device loop4): ext4_release_dquot:7106: comm kworker/u8:7: Failed to release dquot type 0 [ 31.318378][ T5469] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:487: comm syz.4.204: Invalid block bitmap block 0 in block_group 0 [ 31.342581][ T4714] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.350161][ T40] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.428711][ T40] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.558468][ T40] bridge_slave_1: left allmulticast mode [ 31.558502][ T40] bridge_slave_1: left promiscuous mode [ 31.558916][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.565243][ T5495] vhci_hcd vhci_hcd.0: failed to lookup sock [ 31.594231][ T40] bridge_slave_0: left allmulticast mode [ 31.594253][ T40] bridge_slave_0: left promiscuous mode [ 31.594346][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.625259][ T5502] FAULT_INJECTION: forcing a failure. [ 31.625259][ T5502] name failslab, interval 1, probability 0, space 0, times 0 [ 31.625286][ T5502] CPU: 0 UID: 0 PID: 5502 Comm: syz.2.219 Not tainted syzkaller #0 PREEMPT [ 31.625298][ T5502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 31.625304][ T5502] Call trace: [ 31.625307][ T5502] show_stack+0x2c/0x3c (C) [ 31.625329][ T5502] __dump_stack+0x30/0x40 [ 31.625341][ T5502] dump_stack_lvl+0xd8/0x12c [ 31.625353][ T5502] dump_stack+0x1c/0x28 [ 31.625364][ T5502] should_fail_ex+0x418/0x58c [ 31.625373][ T5502] should_failslab+0xc4/0x120 [ 31.625382][ T5502] __kmalloc_cache_noprof+0x94/0x5fc [ 31.625392][ T5502] proc_thread_self_get_link+0x100/0x19c [ 31.625402][ T5502] pick_link+0x5cc/0xcf4 [ 31.625413][ T5502] step_into_slowpath+0x4f4/0x7c8 [ 31.625425][ T5502] link_path_walk+0xb34/0x1584 [ 31.625437][ T5502] path_openat+0x160/0x18f0 [ 31.625447][ T5502] do_file_open+0x1c8/0x2e8 [ 31.625457][ T5502] do_sys_openat2+0x114/0x1e8 [ 31.625470][ T5502] do_sys_open+0xb0/0xe0 [ 31.625491][ T5502] __arm64_sys_openat+0xa8/0xc4 [ 31.625503][ T5502] invoke_syscall+0x98/0x244 [ 31.625515][ T5502] el0_svc_common+0xec/0x23c [ 31.625527][ T5502] do_el0_svc+0x4c/0x5c [ 31.625538][ T5502] el0_svc+0x60/0x1d8 [ 31.625547][ T5502] el0t_64_sync_handler+0x44/0x104 [ 31.625555][ T5502] el0t_64_sync+0x198/0x19c [ 31.626630][ T5507] FAULT_INJECTION: forcing a failure. [ 31.626630][ T5507] name failslab, interval 1, probability 0, space 0, times 0 [ 31.626645][ T5507] CPU: 1 UID: 0 PID: 5507 Comm: syz.3.222 Not tainted syzkaller #0 PREEMPT [ 31.626654][ T5507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 31.626659][ T5507] Call trace: [ 31.626662][ T5507] show_stack+0x2c/0x3c (C) [ 31.626677][ T5507] __dump_stack+0x30/0x40 [ 31.626689][ T5507] dump_stack_lvl+0xd8/0x12c [ 31.626701][ T5507] dump_stack+0x1c/0x28 [ 31.626712][ T5507] should_fail_ex+0x418/0x58c [ 31.626720][ T5507] should_failslab+0xc4/0x120 [ 31.626728][ T5507] kmem_cache_alloc_noprof+0x94/0x5d4 [ 31.626737][ T5507] do_getname+0x48/0x234 [ 31.626746][ T5507] __arm64_sys_renameat2+0xc4/0x124 [ 31.626758][ T5507] invoke_syscall+0x98/0x244 [ 31.626770][ T5507] el0_svc_common+0xec/0x23c [ 31.626782][ T5507] do_el0_svc+0x4c/0x5c [ 31.626793][ T5507] el0_svc+0x60/0x1d8 [ 31.626801][ T5507] el0t_64_sync_handler+0x44/0x104 [ 31.626809][ T5507] el0t_64_sync+0x198/0x19c [ 31.647728][ T10] kernel read not supported for file /kmsg (pid: 10 comm: kworker/0:1) [ 31.695002][ T5511] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.723506][ T5511] EXT4-fs error (device loop2): ext4_validate_block_bitmap:427: comm syz.2.223: bg 0: bad block bitmap checksum [ 31.747029][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.796870][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 31.823823][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 31.845541][ T40] bond0 (unregistering): Released all slaves [ 32.128102][ T5571] netlink: 24 bytes leftover after parsing attributes in process `syz.3.245'. [ 32.128436][ T5571] bond0: invalid ARP target 0.0.0.0 specified for addition [ 32.128447][ T5571] bond0: option arp_ip_target: invalid value (0) [ 32.316136][ T40] hsr_slave_0: left promiscuous mode [ 32.325416][ T40] hsr_slave_1: left promiscuous mode [ 32.325889][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 32.325909][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 32.326387][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 32.326397][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 32.348947][ T40] veth1_macvtap: left promiscuous mode [ 32.348992][ T40] veth0_macvtap: left promiscuous mode [ 32.349065][ T40] veth1_vlan: left promiscuous mode [ 32.349110][ T40] veth0_vlan: left promiscuous mode [ 32.356186][ T5593] FAULT_INJECTION: forcing a failure. [ 32.356186][ T5593] name failslab, interval 1, probability 0, space 0, times 0 [ 32.356206][ T5593] CPU: 0 UID: 0 PID: 5593 Comm: syz.4.251 Not tainted syzkaller #0 PREEMPT [ 32.356218][ T5593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 32.356224][ T5593] Call trace: [ 32.356227][ T5593] show_stack+0x2c/0x3c (C) [ 32.356248][ T5593] __dump_stack+0x30/0x40 [ 32.356260][ T5593] dump_stack_lvl+0xd8/0x12c [ 32.356272][ T5593] dump_stack+0x1c/0x28 [ 32.356283][ T5593] should_fail_ex+0x418/0x58c [ 32.356293][ T5593] should_failslab+0xc4/0x120 [ 32.356301][ T5593] kmem_cache_alloc_noprof+0x94/0x5d4 [ 32.356311][ T5593] __kernfs_new_node+0xf0/0x7d8 [ 32.356323][ T5593] kernfs_new_node+0xe8/0x130 [ 32.356333][ T5593] __kernfs_create_file+0x60/0x2e0 [ 32.356345][ T5593] cgroup_addrm_files+0x694/0xaf8 [ 32.356354][ T5593] css_populate_dir+0xe0/0x348 [ 32.356366][ T5593] cgroup_apply_control_enable+0x618/0xae8 [ 32.356379][ T5593] cgroup_mkdir+0x768/0xbac [ 32.356391][ T5593] kernfs_iop_mkdir+0xe0/0x128 [ 32.356402][ T5593] vfs_mkdir+0x2e4/0x46c [ 32.356413][ T5593] filename_mkdirat+0x228/0x3f4 [ 32.356424][ T5593] __arm64_sys_mkdirat+0x9c/0xc0 [ 32.356435][ T5593] invoke_syscall+0x98/0x244 [ 32.356447][ T5593] el0_svc_common+0xec/0x23c [ 32.356459][ T5593] do_el0_svc+0x4c/0x5c [ 32.356470][ T5593] el0_svc+0x60/0x1d8 [ 32.356486][ T5593] el0t_64_sync_handler+0x44/0x104 [ 32.356494][ T5593] el0t_64_sync+0x198/0x19c [ 32.356511][ T5593] cgroup: cgroup_addrm_files: failed to add state, err=-12 [ 32.458252][ T5605] capability: warning: `syz.4.253' uses deprecated v2 capabilities in a way that may be insecure [ 32.474210][ T4827] lg-g15 0003:046D:0A07.0002: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 32.481724][ T4827] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0002/input/input2 [ 32.567792][ T5617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.257'. [ 32.583969][ T40] team0 (unregistering): Port device team_slave_1 removed [ 32.587699][ T5619] ip_tables: iptables: counters copy to user failed while replacing table [ 32.588304][ T5619] nfnetlink_queue: nf_queue: full at 0 entries, dropping packets(s) [ 32.589194][ T40] team0 (unregistering): Port device team_slave_0 removed [ 32.663917][ T5422] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.681415][ T5422] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.682552][ T5422] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.687608][ T5422] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.687933][ T5422] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.697364][ T5625] set_capacity_and_notify: 16 callbacks suppressed [ 32.697376][ T5625] loop3: detected capacity change from 0 to 512 [ 32.710977][ T5625] EXT4-fs (loop3): 1 truncate cleaned up [ 32.713735][ T5422] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.715540][ T5422] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.718127][ T5422] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.720273][ T5625] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.736073][ T5625] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.261: bg 0: block 465: padding at end of block bitmap is not set [ 32.737322][ T5625] EXT4-fs (loop3): Remounting filesystem read-only [ 32.771535][ T5422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.779473][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.800231][ T5422] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.804958][ T5637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.264'. [ 32.804973][ T5637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.264'. [ 32.814128][ T5637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.264'. [ 32.814145][ T5637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.264'. [ 32.816717][ T4128] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.816742][ T4128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.817664][ T4128] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.817687][ T4128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.891593][ T4712] Bluetooth: hci4: command tx timeout [ 32.902190][ T5646] netlink: 64 bytes leftover after parsing attributes in process `syz.4.265'. [ 32.970655][ T4724] Bluetooth: hci1: command tx timeout [ 32.970681][ T4724] Bluetooth: hci3: command tx timeout [ 32.970709][ T4723] Bluetooth: hci2: command tx timeout [ 32.970730][ T4712] Bluetooth: hci0: command 0x040f tx timeout [ 33.011542][ T5656] loop2: detected capacity change from 0 to 8 [ 33.071695][ T5422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.096591][ T5422] veth0_vlan: entered promiscuous mode [ 33.103023][ T5422] veth1_vlan: entered promiscuous mode [ 33.117324][ T5422] veth0_macvtap: entered promiscuous mode [ 33.124510][ T5422] veth1_macvtap: entered promiscuous mode [ 33.129336][ T5422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.135154][ T5422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.201101][ T5026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.201111][ T5026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.217846][ T5026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.217859][ T5026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.222444][ T924] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.223104][ T924] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.223122][ T924] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.223136][ T924] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.365846][ T5708] ip_tables: iptables: counters copy to user failed while replacing table [ 33.379349][ T5710] loop4: detected capacity change from 0 to 128 [ 33.386392][ T5710] EXT4-fs (loop4): Test dummy encryption mode enabled [ 33.395943][ T5710] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 33.396204][ T5710] ext4 filesystem being mounted at /87/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 33.410136][ T5711] sit1: entered allmulticast mode [ 33.426381][ T4714] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 33.522789][ T5729] syz_tun: entered allmulticast mode [ 33.525156][ T5729] pim6reg: entered allmulticast mode [ 33.555386][ T4872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 33.559169][ T4872] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 33.589704][ T5741] gretap0: entered promiscuous mode [ 33.606133][ T5741] Zero length message leads to an empty skb [ 33.666996][ T5743] loop4: detected capacity change from 0 to 4096 [ 33.667507][ T5743] EXT4-fs: Ignoring removed orlov option [ 33.673579][ T5743] EXT4-fs (loop4): Test dummy encryption mode enabled [ 33.685779][ T5743] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.735020][ T4714] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.755044][ T5752] netlink: 116 bytes leftover after parsing attributes in process `syz.2.307'. [ 33.878502][ T5769] loop0: detected capacity change from 0 to 256 [ 33.918019][ T5771] device-mapper: table: 248:0: multipath: priority group count mismatch (-EINVAL) [ 33.918035][ T5771] device-mapper: ioctl: error adding target to table [ 34.115190][ T5782] FAULT_INJECTION: forcing a failure. [ 34.115190][ T5782] name failslab, interval 1, probability 0, space 0, times 0 [ 34.115210][ T5782] CPU: 1 UID: 0 PID: 5782 Comm: syz.3.320 Not tainted syzkaller #0 PREEMPT [ 34.115221][ T5782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 34.115226][ T5782] Call trace: [ 34.115230][ T5782] show_stack+0x2c/0x3c (C) [ 34.115249][ T5782] __dump_stack+0x30/0x40 [ 34.115261][ T5782] dump_stack_lvl+0xd8/0x12c [ 34.115273][ T5782] dump_stack+0x1c/0x28 [ 34.115284][ T5782] should_fail_ex+0x418/0x58c [ 34.115293][ T5782] should_failslab+0xc4/0x120 [ 34.115301][ T5782] __kmalloc_noprof+0x108/0x6c8 [ 34.115311][ T5782] __register_sysctl_table+0x70/0xb4c [ 34.115323][ T5782] setup_mq_sysctls+0x160/0x1f4 [ 34.115332][ T5782] copy_ipcs+0x3ec/0x63c [ 34.115340][ T5782] create_new_namespaces+0x1a8/0x50c [ 34.115351][ T5782] unshare_nsproxy_namespaces+0x120/0x170 [ 34.115362][ T5782] ksys_unshare+0x438/0x6e0 [ 34.115371][ T5782] __arm64_sys_unshare+0x40/0x54 [ 34.115380][ T5782] invoke_syscall+0x98/0x244 [ 34.115392][ T5782] el0_svc_common+0xec/0x23c [ 34.115404][ T5782] do_el0_svc+0x4c/0x5c [ 34.115415][ T5782] el0_svc+0x60/0x1d8 [ 34.115424][ T5782] el0t_64_sync_handler+0x44/0x104 [ 34.115432][ T5782] el0t_64_sync+0x198/0x19c [ 34.140282][ T5784] loop3: detected capacity change from 0 to 512 [ 34.146783][ T5784] nvme nvme0: using deprecated NVME_IOCTL_IO_CMD ioctl on the char device! [ 34.246602][ T5790] use of bytesused == 0 is deprecated and will be removed in the future, [ 34.246614][ T5790] use the actual size instead. [ 34.430321][ T5804] loop0: detected capacity change from 0 to 512 [ 34.466279][ T5804] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.466330][ T5804] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.486174][ T5804] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.327: corrupted xattr block 33: invalid header [ 34.487910][ T5804] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.327: corrupted xattr block 33: invalid header [ 34.488323][ T5804] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.327: corrupted xattr block 33: invalid header [ 34.523525][ T5818] pimreg: entered allmulticast mode [ 34.539654][ T5804] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.327: corrupted xattr block 33: invalid header [ 34.564932][ T5024] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 34.568023][ T5024] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 8 with error 28 [ 34.568038][ T5024] EXT4-fs (loop0): This should not happen!! Data will be lost [ 34.568038][ T5024] [ 34.568046][ T5024] EXT4-fs (loop0): Total free blocks count 0 [ 34.568053][ T5024] EXT4-fs (loop0): Free/Dirty block details [ 34.568060][ T5024] EXT4-fs (loop0): free_blocks=65280 [ 34.568067][ T5024] EXT4-fs (loop0): dirty_blocks=8 [ 34.568073][ T5024] EXT4-fs (loop0): Block reservation details [ 34.568078][ T5024] EXT4-fs (loop0): i_reserved_data_blocks=8 [ 34.570041][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.664482][ T5838] sctp: [Deprecated]: syz.4.333 (pid 5838) Use of struct sctp_assoc_value in delayed_ack socket option. [ 34.664482][ T5838] Use struct sctp_sack_info instead [ 34.870178][ T4720] Bluetooth: hci4: connection err: -111 [ 34.872508][ T5876] loop3: detected capacity change from 0 to 256 [ 34.929501][ T5882] syzkaller1: entered promiscuous mode [ 34.929520][ T5882] syzkaller1: entered allmulticast mode [ 34.972518][ T4720] Bluetooth: hci4: command tx timeout [ 35.050522][ T4720] Bluetooth: hci0: command 0x040f tx timeout [ 35.391077][ T5924] netlink: 'syz.2.367': attribute type 11 has an invalid length. [ 35.407407][ T5926] netlink: 20 bytes leftover after parsing attributes in process `syz.3.368'. [ 35.416885][ T5926] netlink: 20 bytes leftover after parsing attributes in process `syz.3.368'. [ 35.472517][ T5932] WARNING! power/level is deprecated; use power/control instead [ 35.579267][ T5945] mmap: syz.1.375 (5945) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 35.595531][ T5949] loop0: detected capacity change from 0 to 2048 [ 35.628085][ T5949] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.728713][ T5959] Illegal XDP return value 3447560376 on prog (id 15) dev N/A, expect packet loss! [ 35.780977][ T12] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 35.781655][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 977 with error 28 [ 35.781669][ T12] EXT4-fs (loop0): This should not happen!! Data will be lost [ 35.781669][ T12] [ 35.781677][ T12] EXT4-fs (loop0): Total free blocks count 0 [ 35.781683][ T12] EXT4-fs (loop0): Free/Dirty block details [ 35.781691][ T12] EXT4-fs (loop0): free_blocks=4096 [ 35.781698][ T12] EXT4-fs (loop0): dirty_blocks=992 [ 35.781704][ T12] EXT4-fs (loop0): Block reservation details [ 35.781709][ T12] EXT4-fs (loop0): i_reserved_data_blocks=62 [ 35.807881][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.889229][ T5977] loop1: detected capacity change from 0 to 8192 [ 35.941409][ T5983] input: syz1 as /devices/virtual/input/input3 [ 36.085217][ T5992] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 36.085270][ T5992] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.107453][ T5992] Quota error (device loop2): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 36.107515][ T5992] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 36.107538][ T5992] EXT4-fs error (device loop2): ext4_acquire_dquot:7070: comm syz.2.397: Failed to acquire dquot type 0 [ 36.153523][ T6002] batman_adv: batadv0: Adding interface: syz_tun [ 36.153537][ T6002] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.153554][ T6002] batman_adv: batadv0: Interface activated: syz_tun [ 36.154817][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 36.273757][ T6012] ip6erspan0: entered allmulticast mode [ 36.499683][ T6042] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 36.499733][ T6042] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.513673][ T6042] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.419: bg 0: block 112: padding at end of block bitmap is not set [ 36.517401][ T6042] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 36.517422][ T6042] EXT4-fs (loop3): This should not happen!! Data will be lost [ 36.517422][ T6042] [ 36.517431][ T6042] EXT4-fs (loop3): Total free blocks count 0 [ 36.517438][ T6042] EXT4-fs (loop3): Free/Dirty block details [ 36.517464][ T6042] EXT4-fs (loop3): free_blocks=0 [ 36.517478][ T6042] EXT4-fs (loop3): dirty_blocks=16 [ 36.517491][ T6042] EXT4-fs (loop3): Block reservation details [ 36.517497][ T6042] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 36.557885][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 36.668888][ T6062] FAULT_INJECTION: forcing a failure. [ 36.668888][ T6062] name failslab, interval 1, probability 0, space 0, times 0 [ 36.668907][ T6062] CPU: 1 UID: 0 PID: 6062 Comm: syz.2.428 Not tainted syzkaller #0 PREEMPT [ 36.668918][ T6062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 36.668923][ T6062] Call trace: [ 36.668926][ T6062] show_stack+0x2c/0x3c (C) [ 36.668944][ T6062] __dump_stack+0x30/0x40 [ 36.668956][ T6062] dump_stack_lvl+0xd8/0x12c [ 36.668967][ T6062] dump_stack+0x1c/0x28 [ 36.668979][ T6062] should_fail_ex+0x418/0x58c [ 36.668987][ T6062] should_failslab+0xc4/0x120 [ 36.668996][ T6062] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 36.669006][ T6062] __d_alloc+0x50/0x600 [ 36.669015][ T6062] d_alloc_parallel+0xc4/0xf2c [ 36.669025][ T6062] __lookup_slow+0x90/0x2b4 [ 36.669034][ T6062] lookup_slow+0x60/0x84 [ 36.669043][ T6062] link_path_walk+0xb0c/0x1584 [ 36.669055][ T6062] path_openat+0x160/0x18f0 [ 36.669065][ T6062] do_file_open+0x1c8/0x2e8 [ 36.669075][ T6062] do_sys_openat2+0x114/0x1e8 [ 36.669087][ T6062] do_sys_open+0xb0/0xe0 [ 36.669098][ T6062] __arm64_sys_openat+0xa8/0xc4 [ 36.669110][ T6062] invoke_syscall+0x98/0x244 [ 36.669122][ T6062] el0_svc_common+0xec/0x23c [ 36.669133][ T6062] do_el0_svc+0x4c/0x5c [ 36.669144][ T6062] el0_svc+0x60/0x1d8 [ 36.669153][ T6062] el0t_64_sync_handler+0x44/0x104 [ 36.669161][ T6062] el0t_64_sync+0x198/0x19c [ 36.815220][ T6074] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.815268][ T6074] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.831305][ T6077] tipc: Started in network mode [ 36.831323][ T6077] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 36.831412][ T6077] tipc: Enabled bearer , priority 0 [ 36.832274][ T6077] tipc: Disabling bearer [ 36.902537][ T6074] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 36.930147][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.963785][ T6092] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 36.963844][ T6092] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.001026][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 37.043255][ T4827] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.050846][ T4720] Bluetooth: hci4: command tx timeout [ 37.107337][ T6117] tun0: tun_chr_ioctl cmd 1074025675 [ 37.107355][ T6117] tun0: persist enabled [ 37.113874][ T6117] tun0: tun_chr_ioctl cmd 1074025675 [ 37.113889][ T6117] tun0: persist enabled [ 37.140410][ T4720] Bluetooth: hci0: command 0x040f tx timeout [ 37.283683][ T6159] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.462: iget: bad i_size value: 38620345925642 [ 37.283717][ T6159] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 37.283915][ T6159] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.462: couldn't read orphan inode 15 (err -117) [ 37.283929][ T6159] fserror_report: 2 callbacks suppressed [ 37.283935][ T6159] loop1: lost filesystem error report for type 5 error -117 [ 37.284484][ T6159] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.304877][ T30] audit: type=1326 audit(1700000009.420:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6164 comm="syz.3.464" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91f79e28 code=0x7ffc0000 [ 37.305175][ T30] audit: type=1326 audit(1700000009.420:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6164 comm="syz.3.464" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91f79e28 code=0x7ffc0000 [ 37.307082][ T30] audit: type=1326 audit(1700000009.420:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6164 comm="syz.3.464" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=71 compat=0 ip=0xffff91f79e28 code=0x7ffc0000 [ 37.307110][ T30] audit: type=1326 audit(1700000009.420:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6164 comm="syz.3.464" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91f79e28 code=0x7ffc0000 [ 37.307129][ T30] audit: type=1326 audit(1700000009.420:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6164 comm="syz.3.464" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91f79e28 code=0x7ffc0000 [ 37.307406][ T30] audit: type=1326 audit(1700000009.420:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6164 comm="syz.3.464" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=435 compat=0 ip=0xffff91f79e28 code=0x7ffc0000 [ 37.314001][ T30] audit: type=1326 audit(1700000009.430:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6164 comm="syz.3.464" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91f79e28 code=0x7ffc0000 [ 37.314249][ T30] audit: type=1326 audit(1700000009.430:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6166 comm="syz.3.464" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff91f5ccec code=0x7ffc0000 [ 37.314917][ T30] audit: type=1326 audit(1700000009.430:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6164 comm="syz.3.464" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91f79e28 code=0x7ffc0000 [ 37.327762][ T30] audit: type=1326 audit(1700000009.440:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6164 comm="syz.3.464" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=0 compat=0 ip=0xffff91f79e28 code=0x7ffc0000 [ 37.342259][ T5422] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.395057][ T6170] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 37.395078][ T6170] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 37.395117][ T6170] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 37.395872][ T6170] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #3: comm syz.3.466: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 37.395890][ T6170] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 37.396004][ T6170] EXT4-fs (loop3): no journal found [ 37.396012][ T6170] EXT4-fs (loop3): can't get journal size [ 37.397346][ T6170] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 37.427108][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.450169][ T4720] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:200' [ 37.450188][ T4720] CPU: 1 UID: 0 PID: 4720 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT [ 37.450200][ T4720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 37.450207][ T4720] Workqueue: hci1 hci_rx_work [ 37.450222][ T4720] Call trace: [ 37.450226][ T4720] show_stack+0x2c/0x3c (C) [ 37.450246][ T4720] __dump_stack+0x30/0x40 [ 37.450258][ T4720] dump_stack_lvl+0xd8/0x12c [ 37.450271][ T4720] dump_stack+0x1c/0x28 [ 37.450282][ T4720] sysfs_warn_dup+0x9c/0xb8 [ 37.450291][ T4720] sysfs_create_dir_ns+0x190/0x1f4 [ 37.450299][ T4720] kobject_add_internal+0x290/0x6f0 [ 37.450310][ T4720] kobject_add_varg+0x9c/0xe8 [ 37.450319][ T4720] kobject_add+0x110/0x1c8 [ 37.450328][ T4720] device_add+0x394/0x9e0 [ 37.450338][ T4720] hci_conn_add_sysfs+0xbc/0x1e8 [ 37.450349][ T4720] le_conn_complete_evt+0xc84/0x122c [ 37.450359][ T4720] hci_le_conn_complete_evt+0x114/0x3d8 [ 37.450368][ T4720] hci_le_meta_evt+0x2b0/0x46c [ 37.450379][ T4720] hci_event_packet+0x4c0/0x9c8 [ 37.450390][ T4720] hci_rx_work+0x2f4/0xd78 [ 37.450397][ T4720] process_scheduled_works+0x91c/0x1250 [ 37.450409][ T4720] worker_thread+0x798/0xbd0 [ 37.450419][ T4720] kthread+0x304/0x3d4 [ 37.450428][ T4720] ret_from_fork+0x10/0x20 [ 37.450627][ T4720] kobject: kobject_add_internal failed for hci1:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 37.450641][ T4720] Bluetooth: hci1: failed to register connection device [ 37.456293][ T6174] device-mapper: ioctl: Unable to rename non-existent device, to .2\´£«.j—DH [ 37.936135][ T6208] __nla_validate_parse: 1 callbacks suppressed [ 37.936150][ T6208] netlink: 16 bytes leftover after parsing attributes in process `syz.2.484'. [ 37.997985][ T6212] set_capacity_and_notify: 6 callbacks suppressed [ 37.997999][ T6212] loop2: detected capacity change from 0 to 256 [ 38.006482][ T6212] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 38.052894][ T6214] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 38.093251][ T6219] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779264) [ 38.093270][ T6219] FAT-fs (loop2): Filesystem has been set read-only [ 38.093615][ T6219] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 38.093637][ T6219] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 38.143076][ T6223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.491'. [ 38.435955][ T6261] loop2: detected capacity change from 0 to 512 [ 38.475100][ T6261] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.475154][ T6261] ext4 filesystem being mounted at /79/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.496910][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.567968][ T6272] bridge1: entered promiscuous mode [ 38.567986][ T6272] bridge1: entered allmulticast mode [ 38.569564][ T6272] team0: Port device bridge1 added [ 38.580003][ T6272] bridge0: port 3(team0) entered blocking state [ 38.580297][ T6272] bridge0: port 3(team0) entered disabled state [ 38.580446][ T6272] team0: entered allmulticast mode [ 38.580455][ T6272] team_slave_0: entered allmulticast mode [ 38.580473][ T6272] team_slave_1: entered allmulticast mode [ 38.581989][ T6272] team0: entered promiscuous mode [ 38.581999][ T6272] team_slave_0: entered promiscuous mode [ 38.582063][ T6272] team_slave_1: entered promiscuous mode [ 38.582443][ T6272] bridge0: port 3(team0) entered blocking state [ 38.582477][ T6272] bridge0: port 3(team0) entered forwarding state [ 38.619606][ T6277] loop0: detected capacity change from 0 to 512 [ 38.622099][ T6277] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 38.622116][ T6277] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 38.625925][ T6277] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm syz.0.514: bg 0: block 104: invalid block bitmap [ 38.625970][ T6277] loop0: lost filesystem error report for type 5 error -117 [ 38.626345][ T6277] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 38.626359][ T6277] loop0: lost filesystem error report for type 5 error -117 [ 38.626709][ T6277] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.514: invalid indirect mapped block 1 (level 1) [ 38.626728][ T6277] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 38.627414][ T6277] EXT4-fs (loop0): 1 truncate cleaned up [ 38.634072][ T6277] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.658316][ T6277] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 38.666375][ T6277] overlayfs: failed to look up (fi) for ino (-13) [ 38.674186][ T6277] EXT4-fs error (device loop0): ext4_lookup:1787: inode #17: comm syz.0.514: iget: bad i_size value: 6597069766756 [ 38.677196][ T6277] overlayfs: failed to look up (file.cold) for ino (-117) [ 38.697767][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.837598][ T6289] FAULT_INJECTION: forcing a failure. [ 38.837598][ T6289] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 38.837620][ T6289] CPU: 1 UID: 0 PID: 6289 Comm: syz.2.520 Not tainted syzkaller #0 PREEMPT [ 38.837631][ T6289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 38.837637][ T6289] Call trace: [ 38.837640][ T6289] show_stack+0x2c/0x3c (C) [ 38.837660][ T6289] __dump_stack+0x30/0x40 [ 38.837672][ T6289] dump_stack_lvl+0xd8/0x12c [ 38.837684][ T6289] dump_stack+0x1c/0x28 [ 38.837695][ T6289] should_fail_ex+0x418/0x58c [ 38.837704][ T6289] should_fail+0x14/0x24 [ 38.837711][ T6289] should_fail_usercopy+0x20/0x30 [ 38.837719][ T6289] strncpy_from_user+0x48/0x388 [ 38.837730][ T6289] path_getxattrat+0x12c/0x2cc [ 38.837741][ T6289] __arm64_sys_getxattr+0xb0/0xc8 [ 38.837751][ T6289] invoke_syscall+0x98/0x244 [ 38.837763][ T6289] el0_svc_common+0xec/0x23c [ 38.837775][ T6289] do_el0_svc+0x4c/0x5c [ 38.837786][ T6289] el0_svc+0x60/0x1d8 [ 38.837795][ T6289] el0t_64_sync_handler+0x44/0x104 [ 38.837803][ T6289] el0t_64_sync+0x198/0x19c [ 38.923680][ T6298] FAULT_INJECTION: forcing a failure. [ 38.923680][ T6298] name failslab, interval 1, probability 0, space 0, times 0 [ 38.923702][ T6298] CPU: 1 UID: 0 PID: 6298 Comm: syz.3.524 Not tainted syzkaller #0 PREEMPT [ 38.923713][ T6298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 38.923719][ T6298] Call trace: [ 38.923723][ T6298] show_stack+0x2c/0x3c (C) [ 38.923744][ T6298] __dump_stack+0x30/0x40 [ 38.923757][ T6298] dump_stack_lvl+0xd8/0x12c [ 38.923769][ T6298] dump_stack+0x1c/0x28 [ 38.923781][ T6298] should_fail_ex+0x418/0x58c [ 38.923790][ T6298] should_failslab+0xc4/0x120 [ 38.923799][ T6298] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 38.923809][ T6298] __d_alloc+0x50/0x600 [ 38.923818][ T6298] d_alloc_pseudo+0x2c/0xd8 [ 38.923828][ T6298] alloc_path_pseudo+0xe8/0x1d4 [ 38.923837][ T6298] alloc_file_pseudo+0xb0/0x198 [ 38.923846][ T6298] __arm64_sys_memfd_secret+0x258/0x4bc [ 38.923856][ T6298] invoke_syscall+0x98/0x244 [ 38.923868][ T6298] el0_svc_common+0xec/0x23c [ 38.923880][ T6298] do_el0_svc+0x4c/0x5c [ 38.923895][ T6298] el0_svc+0x60/0x1d8 [ 38.923903][ T6298] el0t_64_sync_handler+0x44/0x104 [ 38.923911][ T6298] el0t_64_sync+0x198/0x19c [ 39.130407][ T4712] Bluetooth: hci4: command tx timeout [ 39.570633][ T4720] Bluetooth: hci1: command 0x2016 tx timeout [ 40.041781][ T6354] loop2: detected capacity change from 0 to 1024 [ 40.071731][ T6354] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.124204][ T6354] EXT4-fs error (device loop2): ext4_generic_delete_entry:2675: inode #2: block 16: comm syz.2.546: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 40.137993][ T6354] EXT4-fs error (device loop2) in ext4_delete_entry:2746: Corrupt filesystem [ 40.138185][ T6354] EXT4-fs warning (device loop2): ext4_rename_delete:3741: inode #2: comm syz.2.546: Deleting old file: nlink 1, error=-117 [ 40.284521][ T4710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.599416][ T6374] loop4: detected capacity change from 0 to 2048 [ 40.623064][ T6374] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.623114][ T6374] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.775148][ T4714] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.075776][ T6396] loop3: detected capacity change from 0 to 1024 [ 41.092627][ T6396] EXT4-fs: Ignoring removed oldalloc option [ 41.092642][ T6396] EXT4-fs: Ignoring removed orlov option [ 41.143961][ T6396] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 41.144025][ T6396] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.334966][ T6411] loop2: detected capacity change from 0 to 1024 [ 41.610131][ T4720] Bluetooth: hci1: command 0x2016 tx timeout [ 41.836671][ T6411] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 41.837702][ T6411] EXT4-fs warning (device loop2): ext4_enable_quotas:7305: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 41.837950][ T6411] EXT4-fs (loop2): mount failed [ 42.055893][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 64.678926][ T1593] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.690428][ T1593] ieee802154 phy1 wpan1: encryption failed: -22 [ 83.934032][ C1] sched: DL replenish lagged too much [ 120.805415][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 48s! [ 120.805455][ C0] Showing busy workqueues and worker pools: [ 120.805460][ C0] workqueue events: flags=0x100 [ 120.805504][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=11 refcnt=12 [ 120.805522][ C0] in-flight: 9:request_firmware_work_func for 117s [ 120.805546][ C0] pending: psi_avgs_work, ovs_dp_masks_rebalance, vmstat_shepherd, ovs_dp_masks_rebalance, free_obj_work, 2*nsim_dev_hwstats_traffic_work, psi_avgs_work, drm_fb_helper_damage_work, delayed_vfree_work [ 120.805624][ C0] workqueue events_unbound: flags=0x2 [ 120.805629][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=3 refcnt=4 [ 120.805642][ C0] in-flight: 5026:bpf_map_free_deferred for 80s ,5035:cfg80211_wiphy_work for 67s cfg80211_wiphy_work [ 120.805683][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=15 refcnt=16 [ 120.805696][ C0] in-flight: 5028:nsim_dev_trap_report_work for 3s ,58:cfg80211_wiphy_work for 25s cfg80211_wiphy_work ,49:cfg80211_wiphy_work for 19s ,924:nsim_dev_trap_report_work for 1s ,1180:cfg80211_wiphy_work for 62s cfg80211_wiphy_work ,4128:cfg80211_wiphy_work for 70s cfg80211_wiphy_work ,40:cfg80211_wiphy_work for 71s cfg80211_wiphy_work [ 120.805803][ C0] pending: nsim_dev_trap_report_work, toggle_allocation_gate, 2*nsim_dev_trap_report_work [ 120.805828][ C0] workqueue events_power_efficient: flags=0x82 [ 120.805833][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 120.805845][ C0] in-flight: 13:neigh_periodic_work for 11s [ 120.805865][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=4 refcnt=5 [ 120.805877][ C0] in-flight: 5024:gc_worker for 7s [ 120.805894][ C0] pending: neigh_periodic_work, fb_flashcursor, wg_ratelimiter_gc_entries [ 120.805921][ C0] workqueue events_dfl_long: flags=0x2 [ 120.805927][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=6 refcnt=7 [ 120.805939][ C0] pending: 6*defense_work_handler [ 120.805953][ C0] workqueue mm_percpu_wq: flags=0x108 [ 120.805957][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 120.805972][ C0] pending: vmstat_update [ 120.806030][ C0] workqueue bat_events: flags=0x6000a [ 120.806035][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=47 MAYDAY [ 120.806047][ C0] in-flight: 2854(RESCUER):batadv_tt_purge for 14s [ 120.806062][ C0] inactive: batadv_tt_purge, batadv_mcast_mla_update, batadv_bla_periodic_work, batadv_dat_purge, batadv_bla_periodic_work, batadv_dat_purge, 2*batadv_bla_periodic_work, 2*batadv_dat_purge, batadv_mcast_mla_update, batadv_tt_purge, 2*batadv_iv_send_outstanding_bat_ogm_packet, 3*batadv_purge_orig, 3*batadv_iv_send_outstanding_bat_ogm_packet, batadv_purge_orig, batadv_iv_send_outstanding_bat_ogm_packet, batadv_bla_periodic_work, batadv_dat_purge, 4*batadv_iv_send_outstanding_bat_ogm_packet, 2*batadv_mcast_mla_update, 7*batadv_iv_send_outstanding_bat_ogm_packet, batadv_purge_orig, batadv_mcast_mla_update, 2*batadv_tt_purge [ 120.806236][ C0] workqueue wg-kex-wg0: flags=0x124 [ 120.806241][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 120.806255][ C0] pending: wg_packet_handshake_receive_worker [ 120.806268][ C0] workqueue wg-kex-wg0: flags=0x6 [ 120.806273][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 120.806285][ C0] in-flight: 12:wg_packet_handshake_send_worker for 4s [ 120.806302][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 120.806307][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 120.806321][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker [ 120.806343][ C0] workqueue wg-kex-wg1: flags=0x124 [ 120.806348][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 120.806362][ C0] pending: wg_packet_handshake_receive_worker [ 120.806373][ C0] pwq 6: cpus=1 node=0 flags=0x2 nice=0 active=2 refcnt=3 [ 120.806388][ C0] in-flight: 4810:wg_packet_handshake_receive_worker for 36s wg_packet_handshake_receive_worker [ 120.806411][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 120.806415][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 120.806429][ C0] pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker, wg_packet_tx_worker [ 120.806451][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 120.806456][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 120.806470][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker [ 120.806497][ C0] pwq 6: cpus=1 node=0 flags=0x2 nice=0 active=1 refcnt=2 [ 120.806511][ C0] in-flight: 4717:wg_packet_encrypt_worker for 7s [ 120.806527][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 120.806531][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 120.806546][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker [ 120.806568][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 120.806572][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 120.806586][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 120.806602][ C0] workqueue wg-kex-wg2: flags=0x124 [ 120.806607][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 120.806621][ C0] pending: wg_packet_handshake_receive_worker [ 120.806631][ C0] pwq 6: cpus=1 node=0 flags=0x2 nice=0 active=2 refcnt=3 [ 120.806645][ C0] in-flight: 24:wg_packet_handshake_receive_worker for 65s wg_packet_handshake_receive_worker [ 120.806667][ C0] workqueue wg-kex-wg2: flags=0x6 [ 120.806673][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=2 [ 120.806685][ C0] pending: wg_packet_handshake_send_worker [ 120.806696][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 120.806700][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 120.806714][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 120.806734][ C0] workqueue wg-kex-wg1: flags=0x124 [ 120.806738][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 120.806752][ C0] pending: wg_packet_handshake_receive_worker [ 120.806763][ C0] pwq 6: cpus=1 node=0 flags=0x2 nice=0 active=1 refcnt=2 [ 120.806777][ C0] in-flight: 4820:wg_packet_handshake_receive_worker for 2s [ 120.806794][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 120.806798][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 120.806812][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 120.806829][ C0] workqueue wg-kex-wg2: flags=0x124 [ 120.806833][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 120.806847][ C0] pending: wg_packet_handshake_receive_worker [ 120.806859][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 120.806864][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 120.806878][ C0] pending: wg_packet_tx_worker, wg_packet_encrypt_worker [ 120.806894][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 120.806899][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 120.806913][ C0] pending: wg_packet_encrypt_worker, wg_packet_decrypt_worker, wg_packet_tx_worker [ 120.806935][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 120.806940][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 120.806954][ C0] pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker, wg_packet_tx_worker [ 120.806976][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 120.806980][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 120.806994][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 120.807020][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 120.807024][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 120.807038][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker [ 120.807060][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 120.807064][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 120.807078][ C0] pending: wg_packet_encrypt_worker, wg_packet_decrypt_worker, wg_packet_tx_worker [ 120.807100][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 120.807104][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 120.807119][ C0] pending: wg_packet_tx_worker, wg_packet_encrypt_worker [ 120.807139][ C0] pool 2: cpus=0 node=0 flags=0x0 nice=0 hung=48s workers=8 idle: 4827 4845 6437 4872 4322 10 1094 [ 120.807189][ C0] pool 6: cpus=1 node=0 flags=0x2 nice=0 hung=0s workers=7 manager: 4837 idle: 1461 26 [ 120.807218][ C0] pool 8: cpus=0-1 flags=0x6 nice=0 hung=1s workers=13 manager: 6438 [ 120.807236][ C0] Showing backtraces of busy workers in stalled worker pools: [ 120.807241][ C0] pool 2: [ 120.807244][ C0] task:kworker/0:0 state:R running task stack:0 pid:9 tgid:9 ppid:2 task_flags:0x4288060 flags:0x00000010 [ 120.807258][ C0] Workqueue: events request_firmware_work_func [ 120.807268][ C0] Call trace: [ 120.807271][ C0] __switch_to+0x2b4/0x6e4 (T) [ 120.807285][ C0] __schedule+0x135c/0x2b00 [ 120.807295][ C0] preempt_schedule_common+0xd4/0x190 [ 120.807306][ C0] preempt_schedule+0x60/0x78 [ 120.807316][ C0] _raw_spin_unlock_irqrestore+0x94/0x98 [ 120.807324][ C0] debug_check_no_obj_freed+0x2c8/0x3a4 [ 120.807332][ C0] __free_frozen_pages+0x470/0xbd0 [ 120.807340][ C0] free_frozen_pages+0x14/0x20 [ 120.807348][ C0] __free_slab+0x11c/0x1b4 [ 120.807357][ C0] free_slab+0x2c/0x154 [ 120.807366][ C0] discard_slab+0x48/0x90 [ 120.807375][ C0] __slab_free+0x1a0/0x1d0 [ 120.807383][ C0] ___cache_free+0x80/0x94 [ 120.807391][ C0] qlist_free_all+0xb4/0x120 [ 120.807402][ C0] kasan_quarantine_reduce+0x118/0x124 [ 120.807412][ C0] __kasan_slab_alloc+0x2c/0x88 [ 120.807421][ C0] kmem_cache_alloc_node_noprof+0x318/0x604 [ 120.807429][ C0] __alloc_skb+0x1f0/0x610 [ 120.807440][ C0] alloc_uevent_skb+0x78/0x1ec [ 120.807449][ C0] kobject_uevent_net_broadcast+0x2d4/0x53c [ 120.807458][ C0] kobject_uevent_env+0x518/0x944 [ 120.807467][ C0] kobject_uevent+0x2c/0x3c [ 120.807481][ C0] device_del+0x5f8/0x71c [ 120.807492][ C0] firmware_fallback_sysfs+0x330/0x930 [ 120.807501][ C0] _request_firmware+0xb34/0xf5c [ 120.807509][ C0] request_firmware_work_func+0xa4/0x24c [ 120.807517][ C0] process_scheduled_works+0x91c/0x1250 [ 120.807527][ C0] worker_thread+0x798/0xbd0 [ 120.807536][ C0] kthread+0x304/0x3d4 [ 120.807544][ C0] ret_from_fork+0x10/0x20 [ 127.277835][ T1593] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.289680][ T1593] ieee802154 phy1 wpan1: encryption failed: -22