last executing test programs: 15.668005186s ago: executing program 0 (id=583): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shutdown(0xffffffffffffffff, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r3 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000140)={@random="e90c610faca2", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100, @val=0x80}}}}}}}, 0x0) 14.895532155s ago: executing program 1 (id=585): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={0x0}, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(r0, 0xc, &(0x7f0000000180)={0x8, 0x6}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000019180)=""/102349, 0x18fcd, 0x80002) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000d80)="f2435f010008babe008508004dae", 0xe, 0x45, &(0x7f0000000100)={0x11, 0xf5, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) r6 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffc04, 0x0, 0x2, r6, 0x11}) 14.661361247s ago: executing program 0 (id=586): socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f00000002c0)=0x101) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x80800) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521", 0x1d}], 0x1}, 0x0) 12.822844957s ago: executing program 0 (id=588): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000000c0)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", r2, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r3, 0xc0383e04, &(0x7f0000000240)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)=[{}]}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$tun(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, 0x0, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) sendmmsg$inet6(r4, 0x0, 0x0, 0x4001c00) creat(0x0, 0x10b) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, 0x1) readv(0xffffffffffffffff, 0x0, 0x0) syz_read_part_table(0x5c4, &(0x7f0000000000)="$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") 12.822552948s ago: executing program 1 (id=589): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r3 = syz_open_dev$video(&(0x7f0000000040), 0x3, 0x101002) ioctl$VIDIOC_S_FMT(r3, 0xc0d05640, &(0x7f0000000340)={0xa, @pix={0x0, 0x3, 0x0, 0x3, 0x0, 0x4, 0x9, 0xfeedcafe, 0x3, 0x0, 0x8002, 0x4}}) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x3a) write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='+rdma -cpu'], 0xe) 12.55624272s ago: executing program 3 (id=590): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x20004800) 12.430995192s ago: executing program 0 (id=591): sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="5c0000002d00f1605cc92c5d2c5f7b71b38ee06bcd9e3fe3dc6e48aa31086b7a968cdd25be1280040016000d000a8a0d0000a1225366dfcd60bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0", 0x55}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\r\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 12.430270342s ago: executing program 3 (id=592): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = io_uring_setup(0x2a69, &(0x7f0000002240)={0x0, 0x0, 0x100, 0x2}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x18, &(0x7f0000000000), 0x1) 11.467091172s ago: executing program 1 (id=593): semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000280)={'wpan0\x00'}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x800) add_key$user(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYRES32=0x0], 0x0, 0xa5a, &(0x7f0000001f40)="$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") chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x181042, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x404c004) 10.432195334s ago: executing program 0 (id=595): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, &(0x7f0000000240)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)=[{}]}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/fscaps', 0x101001, 0x391) write$tun(r3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r5 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000280)) creat(0x0, 0x10b) setreuid(0xffffffffffffffff, 0xee01) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, 0x1) syz_read_part_table(0x5c4, &(0x7f0000000000)="$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") 8.391124947s ago: executing program 3 (id=596): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYBLOB="01000000000000001800040000000000000003fa03dfd0cf3bf15b5f798e8e47a40021f309332f4234381f492657b1e21a4050ee300758ccbd4b5962719897170c8dbce92508cd6fee62ee61043eab57ae8f052613b34658a5faf49af31e22b15bd60904b59504efba089b61aa9a20add382f7379313e687f26e4cbf93accaa26f0ecd2780"], 0x40}}, 0x0) 8.389788677s ago: executing program 1 (id=597): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) 7.607839715s ago: executing program 2 (id=598): socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f00000002c0)=0x101) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x80800) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e", 0x2b}], 0x1}, 0x0) 6.30986538s ago: executing program 2 (id=599): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000000c0)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", r2, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r3, 0xc0383e04, &(0x7f0000000240)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)=[{}]}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$tun(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, 0x0, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) sendmmsg$inet6(r4, 0x0, 0x0, 0x4001c00) creat(0x0, 0x10b) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, 0x1) readv(0xffffffffffffffff, 0x0, 0x0) syz_read_part_table(0x5c4, &(0x7f0000000000)="$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") 6.147192192s ago: executing program 1 (id=600): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) setitimer(0x2, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x15) 5.981627284s ago: executing program 2 (id=601): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f0000000fc0)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT, @ANYRESDEC, @ANYRESHEX, @ANYRES64, @ANYBLOB="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", @ANYRESHEX, @ANYRES32=0x0], 0x1, 0x1f1, &(0x7f0000000b80)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) mount(0x0, 0x0, 0x0, 0x22be836, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 5.031408754s ago: executing program 1 (id=602): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xfffffd74, 0x0, &(0x7f0000000780)="e0857f9f582f0300000000001000", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x39) 4.759552997s ago: executing program 2 (id=603): sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="5c0000002d00f1605cc92c5d2c5f7b71b38ee06bcd9e3fe3dc6e48aa31086b7a968cdd25be1280040016000d000a8a0d0000a1225366dfcd60bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0", 0x55}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\r\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 3.716599099s ago: executing program 2 (id=604): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = io_uring_setup(0x2a69, &(0x7f0000002240)={0x0, 0x0, 0x100, 0x2}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x18, &(0x7f0000000000), 0x1) 2.546833941s ago: executing program 2 (id=605): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x34, r1, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}]}, 0x34}}, 0x0) 2.546488771s ago: executing program 3 (id=606): semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000280)={'wpan0\x00'}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x800) add_key$user(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYRES32=0x0], 0x0, 0xa5a, &(0x7f0000001f40)="$eJzs3U2MW0cBAOB53vWm+WnjlIQuaWkTCm356W6zWcJPBE3VXIiaigNSpYpLlKYlIg2IVIJWlZrkxI1WVbjyI07lUAFCohe06olLJRqJS0+FAweiIFVCCArJovXOvLUnNs/eP9vr75Nmx/Nm7JnnfX5+fu/NTADGVq35d35+ugjhyluvH//bA3/dvrTk0bJEo/l3siVVDyEUMT2Zvd77E8vxjQ9ePt0pLsJc829Khyevl8/dGUK4GA6EhdAI+69cfe2duSdOXjpx+eC7bxy9tjFrDwAA4+XrC0fn9/35j3fv+fDNe4+FbeXydHzeiOld8bj/WDzwT8f/tdCeLlpCq6ms3GQMtazcRIdyrfXUs3KTXeqfyl633qXctor6J1qWdVpvGGVpO26EojbTlq7VZmaWf5OH5u/6qWLm/Nlzz14YUEOBdfeP+0IIBwRh/cMrQ9AG4f+Hxd2D3gMBLMuvF97iYn5mYW3KV5vsrf7rj9U6Px/WwWZv/+ofrfp/cckeh/WzVbemtF7pc7QrpvPrCPn9S/1+/tPr5dcj6j22s9t1hFG5vtCtnROb3I7V6tb+fLvYqr4S4/Q+fDXLb/385P/TUfkfA539y/l/QRjbsDjoHRAwtPL75hajlJ/f15fnb6vIv60if3t7/it5/o6K5++syIdx9psXfhReLVZ+5+e/6fs9H5bOs90e4zv6bE9+PrLf+vP7fvu11vrz+4lhmP3u1FNnvvjM01eX7/8vyu3/ZtzeD8R0I362FmKBdL4wP69e3vvfaK+n1qXcnVl7bu9Qvvl4b3u5Yu/K64SW/cxS2bM7WvKm25+3u1t772kv18jKbY/htqy92fFJeTySnpeOP9J+Nb1fk9n61rP1mMrakfYre2KctwNWI22P3e7/T9vndKgXz549d+aRmE7b6R8m6tuWlh/a5HYDa1d+3v+5/KO4W/+f6dDe/2dXubxea90v7L6jXF607hcaoX35XJflh2M6fc99a2J7c/nM6e+ce2bd1x7G24UXX/r2qXPnznzPAw888KB8MOg9E7DRZl94/ruzF1586eGzz5967sxzZ84fPnLk8NzckS8dnp9tHtfPth7dA1vJypf+oFsCAAAAAAAAAAAA9Or7J45f/dPbX3hvuf//Sv+/1P8/3fmb+v//MOv/n/eTT/3gUz/7PR3ym2WyAVansnL1GD6StXdvVs++7HkfjXE5j1/s/5+qy8d1Te25K1uej9+bymXDCdwyXspUNgZJ+3yBl8InYvpyjH8eYICK7Z0Xx7hqfOu0rafxKYxLMZrS/y1tDWkck9T/u9u4Tmn/v2cT2sj624zuhINeR6Czv2/e+N+/LCsdgnGPhyfUvSfCwMLiolk8gOEw6Pk/03nPFJ///dduWwqp2PXH2veX+filsBbDPv/k1q3/GwOuP7TXfyxsyvyf5fx3Pe//shnzGqur998/ufZeS7Vhf6/15+ufxoHe26Wizqe3w4ex/rQ2D4be6l/8WVZ/fkGoR//J6t/RY/23rH8at7rPzeK/sf70tj10f6/1L7e4qLVXmJ83Ttf/8vPGyY1s/dPYnn2v/yonarwZ64dxNirzzPZrVOb/7Sa/D+PzMZ12hOk+h3y+k37bn+6vSN8D+7LXLyq+31Y1/+8QnXIa9/l/vxzjqs9Dmv83bY+NDulaTC/E18vf2626r4FR9b75fwWhGcq524agLZsVFhcXN/aEVoWBVs7A3/9B/xQYdP2Dfv+r5PP/5sfw+fy/eX4+/2+en8//m+fn8+vl+fn8v/n7mc//m+fflb1uPj/wdEX+xyry91fk312Rf09F/scr8g9W5N9bkX9fRf6dFfn3V+R/siL/UxX5D7TmFysFUv5DFc//dEX+Vpf6o4zr+sM4a+mfl75qff5hTKTrP92+//dW5AOj68dvHnr86V9/s7Hc/3+qPB+Srusdi+l6/Hn1g5jOr3uHlvRS3tsx/Zcsf9jPd8A4ycfPyL/fH6zIB0ZXus/L5xvGUNF5xJ78elu3cau6HeczWj4T48/G+HMxfjjGMzGejfGhGM9tUvvYGI//6rdHXy1Wfu/vzvJ7vZ887w+UjxN1uMf25OcH+r2fPR/Hr19rrX+V3cEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGptb8Oz8/XYRw5a3Xjz918uzs0pJHyxKN5t/JllS9fF4Ij8R4IsY/jQ9ufPDy6db4ZoyLMBeKUJTLw5PXy5p2hhAuhgNhITTC/itXX3tn7omTl05cPvjuG0evbdw7AAAAAFvf/wIAAP//0/kPdw==") chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x181042, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x404c004) 1.284248526s ago: executing program 3 (id=607): socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f00000002c0)=0x101) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x80800) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e", 0x2b}], 0x1}, 0x0) 21.18132ms ago: executing program 3 (id=608): prctl$PR_SET_THP_DISABLE(0x44, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x100) renameat2(r3, &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r3, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r4, &(0x7f0000000140)=ANY=[], 0xff2e) r5 = syz_open_pts(r4, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$TIOCSTI(r6, 0x5412, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {{@in=@dev, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x4}}, 0xe8) connect$pppl2tp(r7, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) 0s ago: executing program 0 (id=609): socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) ptrace$cont(0xf7aef61bbe72383, 0x0, 0x276, 0x401) r0 = socket$kcm(0x23, 0x5, 0x0) listen(r0, 0x800) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) accept4(r0, 0x0, 0x0, 0x80000) syz_open_dev$sndmidi(0x0, 0x2, 0x143102) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.252' (ED25519) to the list of known hosts. syzkaller login: [ 77.599374][ T5758] cgroup: Unknown subsys name 'net' [ 77.770375][ T5758] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.424800][ T5758] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.663371][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.673574][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.681672][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.688471][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.690217][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.696555][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.705902][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.712493][ T5783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.718879][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.732106][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.732655][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.740124][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.746926][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.763151][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.771178][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.779521][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.781523][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.787811][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.795799][ T5776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.801351][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.810244][ T5776] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.823707][ T5776] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.835621][ T5776] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.853998][ T5776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.412872][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 82.443383][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 82.579896][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 82.622350][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 82.851175][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.859153][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.866753][ T5770] bridge_slave_0: entered allmulticast mode [ 82.873846][ T5770] bridge_slave_0: entered promiscuous mode [ 82.892244][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.899422][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.909299][ T5773] bridge_slave_0: entered allmulticast mode [ 82.916322][ T5773] bridge_slave_0: entered promiscuous mode [ 82.925643][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.932878][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.940151][ T5773] bridge_slave_1: entered allmulticast mode [ 82.949518][ T5773] bridge_slave_1: entered promiscuous mode [ 82.969250][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.976921][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.986420][ T5770] bridge_slave_1: entered allmulticast mode [ 82.993617][ T5770] bridge_slave_1: entered promiscuous mode [ 83.020258][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.027544][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.034784][ T5772] bridge_slave_0: entered allmulticast mode [ 83.042100][ T5772] bridge_slave_0: entered promiscuous mode [ 83.049857][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.057135][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.064452][ T5771] bridge_slave_0: entered allmulticast mode [ 83.071259][ T5771] bridge_slave_0: entered promiscuous mode [ 83.111784][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.119481][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.126978][ T5772] bridge_slave_1: entered allmulticast mode [ 83.133839][ T5772] bridge_slave_1: entered promiscuous mode [ 83.140361][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.150312][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.157663][ T5771] bridge_slave_1: entered allmulticast mode [ 83.165278][ T5771] bridge_slave_1: entered promiscuous mode [ 83.174549][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.187091][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.198732][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.250381][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.280664][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.304001][ T5773] team0: Port device team_slave_0 added [ 83.313263][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.326366][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.337836][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.361353][ T5773] team0: Port device team_slave_1 added [ 83.425678][ T5770] team0: Port device team_slave_0 added [ 83.436594][ T5772] team0: Port device team_slave_0 added [ 83.462743][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.469924][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.496317][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.512461][ T5770] team0: Port device team_slave_1 added [ 83.520241][ T5772] team0: Port device team_slave_1 added [ 83.530994][ T5771] team0: Port device team_slave_0 added [ 83.540759][ T5771] team0: Port device team_slave_1 added [ 83.547862][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.555735][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.582387][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.666760][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.676479][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.703496][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.727693][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.734722][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.760895][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.773941][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.780933][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.807100][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.820027][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.827754][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.854080][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.865752][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.873386][ T5776] Bluetooth: hci2: command tx timeout [ 83.873740][ T51] Bluetooth: hci0: command tx timeout [ 83.885228][ T5785] Bluetooth: hci1: command tx timeout [ 83.886445][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.922640][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.953196][ T51] Bluetooth: hci3: command tx timeout [ 83.962992][ T5773] hsr_slave_0: entered promiscuous mode [ 83.969875][ T5773] hsr_slave_1: entered promiscuous mode [ 83.995299][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.002660][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.029035][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.085143][ T5772] hsr_slave_0: entered promiscuous mode [ 84.091567][ T5772] hsr_slave_1: entered promiscuous mode [ 84.098067][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.106883][ T5772] Cannot create hsr debugfs directory [ 84.127569][ T5771] hsr_slave_0: entered promiscuous mode [ 84.137443][ T5771] hsr_slave_1: entered promiscuous mode [ 84.144144][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.151710][ T5771] Cannot create hsr debugfs directory [ 84.245246][ T5770] hsr_slave_0: entered promiscuous mode [ 84.251619][ T5770] hsr_slave_1: entered promiscuous mode [ 84.258579][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.266330][ T5770] Cannot create hsr debugfs directory [ 84.638328][ T5773] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.658772][ T5773] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.670113][ T5773] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.687703][ T5773] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.765837][ T5771] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.779159][ T5771] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.789074][ T5771] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.811559][ T5771] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.875643][ T5770] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.891871][ T5770] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.916729][ T5770] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.943218][ T5770] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.029711][ T5772] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.040321][ T5772] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.060248][ T5772] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.074738][ T5772] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.178085][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.230991][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.240515][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.270204][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.277811][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.321463][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.339280][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.346631][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.378440][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.385587][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.400947][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.424857][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.455485][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.462785][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.494030][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.525367][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.532596][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.570202][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.577378][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.590186][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.627447][ T5771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.669884][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.677287][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.780477][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.787795][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.818248][ T5772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.963302][ T51] Bluetooth: hci2: command tx timeout [ 85.965246][ T5785] Bluetooth: hci0: command tx timeout [ 85.969119][ T51] Bluetooth: hci1: command tx timeout [ 86.034866][ T51] Bluetooth: hci3: command tx timeout [ 86.145567][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.246011][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.310005][ T5773] veth0_vlan: entered promiscuous mode [ 86.350824][ T5773] veth1_vlan: entered promiscuous mode [ 86.377878][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.428055][ T5771] veth0_vlan: entered promiscuous mode [ 86.475168][ T5773] veth0_macvtap: entered promiscuous mode [ 86.485194][ T5771] veth1_vlan: entered promiscuous mode [ 86.501475][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.535193][ T5773] veth1_macvtap: entered promiscuous mode [ 86.571409][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.601455][ T5772] veth0_vlan: entered promiscuous mode [ 86.619722][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.638020][ T5773] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.647522][ T5773] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.657401][ T5773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.666385][ T5773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.699536][ T5772] veth1_vlan: entered promiscuous mode [ 86.749135][ T5771] veth0_macvtap: entered promiscuous mode [ 86.793554][ T5770] veth0_vlan: entered promiscuous mode [ 86.809842][ T5771] veth1_macvtap: entered promiscuous mode [ 86.853174][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.860991][ T5772] veth0_macvtap: entered promiscuous mode [ 86.861708][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.918845][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.936391][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.947709][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.958694][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.969773][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.981493][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.990954][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.005138][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.008022][ T5772] veth1_macvtap: entered promiscuous mode [ 87.023284][ T5770] veth1_vlan: entered promiscuous mode [ 87.045759][ T5771] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.055413][ T5771] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.067723][ T5771] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.077961][ T5771] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.170760][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.184371][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.194273][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.204999][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.216820][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.234335][ T9] cfg80211: failed to load regulatory.db [ 87.284947][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.322559][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.333293][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.343963][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.355506][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.371834][ T5770] veth0_macvtap: entered promiscuous mode [ 87.501009][ T5772] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.511377][ T5772] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.530276][ T5772] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.541654][ T5772] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.571785][ T5770] veth1_macvtap: entered promiscuous mode [ 87.590537][ T3439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.617019][ T3439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.676782][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.689845][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.706825][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.723196][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.740489][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.751322][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.766657][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.787846][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.815896][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.849502][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.860492][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.881143][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.899806][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.911056][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.926316][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.946833][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.975749][ T5770] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.993952][ T5770] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.009966][ T5770] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.019161][ T5770] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.032717][ T51] Bluetooth: hci1: command tx timeout [ 88.042305][ T51] Bluetooth: hci0: command tx timeout [ 88.044557][ T5776] Bluetooth: hci2: command tx timeout [ 88.114464][ T5776] Bluetooth: hci3: command tx timeout [ 88.261720][ T3439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.283254][ T3439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.373659][ T5846] syz.0.1[5846]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 89.212672][ T3439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.272092][ T3439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.352287][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.380389][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.499880][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.530099][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.139409][ T5776] Bluetooth: hci0: command tx timeout [ 90.139436][ T51] Bluetooth: hci1: command tx timeout [ 90.139475][ T51] Bluetooth: hci2: command tx timeout [ 90.202361][ T51] Bluetooth: hci3: command tx timeout [ 90.566639][ T5855] loop3: detected capacity change from 0 to 32768 [ 90.584931][ T5855] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.6 (5855) [ 90.624564][ T5855] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 90.635742][ T5855] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 90.645480][ T5855] BTRFS info (device loop3): enabling disk space caching [ 90.652627][ T5855] BTRFS info (device loop3): force clearing of disk cache [ 90.659903][ T5855] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 90.669609][ T5855] BTRFS info (device loop3): use zstd compression, level 3 [ 90.677167][ T5855] BTRFS info (device loop3): disk space caching is enabled [ 90.895518][ T5855] BTRFS info (device loop3): enabling ssd optimizations [ 90.902858][ T5855] BTRFS info (device loop3): auto enabling async discard [ 90.997778][ T5855] BTRFS info (device loop3): rebuilding free space tree [ 91.061391][ T5855] BTRFS info (device loop3): disabling free space tree [ 91.068465][ T5855] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 91.079255][ T5855] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 91.651289][ T5855] syz.3.6 (5855) used greatest stack depth: 20752 bytes left [ 95.045742][ T5912] loop0: detected capacity change from 0 to 2048 [ 95.125124][ T5913] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 95.151163][ T5912] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=62992, name_len=255 [ 95.176785][ T5912] Remounting filesystem read-only [ 95.928103][ T5918] loop1: detected capacity change from 0 to 512 [ 95.943185][ T5918] ======================================================= [ 95.943185][ T5918] WARNING: The mand mount option has been deprecated and [ 95.943185][ T5918] and is ignored by this kernel. Remove the mand [ 95.943185][ T5918] option from the mount to silence this warning. [ 95.943185][ T5918] ======================================================= [ 95.997484][ T5772] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 95.997645][ T5918] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 96.062341][ T5918] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0102] [ 96.082907][ T5918] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 96.113365][ T5918] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 96.130977][ T5918] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 96.931385][ T5924] loop2: detected capacity change from 0 to 2048 [ 98.374069][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.897662][ T5962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.531176][ T5974] loop0: detected capacity change from 0 to 2048 [ 103.753128][ T5979] loop1: detected capacity change from 0 to 512 [ 103.885072][ T5979] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 103.908224][ T5979] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0102] [ 103.924417][ T5979] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 103.960836][ T5979] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 103.972653][ T5979] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 105.436717][ T5993] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 107.456806][ T6009] loop2: detected capacity change from 0 to 1024 [ 107.638022][ T6009] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 107.651165][ T6009] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.861710][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.095532][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 109.069123][ T6022] loop2: detected capacity change from 0 to 2048 [ 112.746938][ T6042] loop1: detected capacity change from 0 to 512 [ 112.782680][ T6042] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 112.941231][ T6042] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0102] [ 112.998089][ T6042] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 113.042106][ T6042] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 113.102336][ T6042] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 113.476033][ T6048] loop3: detected capacity change from 0 to 2048 [ 114.929271][ T6051] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 115.073755][ T6048] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=62992, name_len=255 [ 115.096532][ T6048] Remounting filesystem read-only [ 116.485875][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.141382][ T6093] futex_wake_op: syz.3.56 tries to shift op by 144; fix this program [ 126.061388][ T6122] loop0: detected capacity change from 0 to 8 [ 128.433490][ T6147] loop2: detected capacity change from 0 to 512 [ 128.518020][ T6147] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.595098][ T6147] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.614918][ T6150] loop1: detected capacity change from 0 to 1024 [ 128.655719][ T6150] EXT4-fs: Ignoring removed nomblk_io_submit option [ 128.692275][ T6150] EXT4-fs: Ignoring removed bh option [ 128.728382][ T6150] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 128.805317][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.359781][ T6157] loop0: detected capacity change from 0 to 2048 [ 129.623495][ T6159] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 129.792316][ T6157] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=62992, name_len=255 [ 129.934025][ T6157] Remounting filesystem read-only [ 133.479247][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.485994][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.007872][ T6204] loop1: detected capacity change from 0 to 1024 [ 135.054359][ T6204] EXT4-fs: Ignoring removed nomblk_io_submit option [ 135.061044][ T6204] EXT4-fs: Ignoring removed bh option [ 135.126928][ T6204] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 135.299189][ T6205] loop3: detected capacity change from 0 to 2048 [ 135.482196][ T6208] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 135.584470][ T6205] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=62992, name_len=255 [ 135.697094][ T6205] Remounting filesystem read-only [ 136.346602][ T6215] loop0: detected capacity change from 0 to 2048 [ 136.432596][ T6216] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.464602][ T6215] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=62992, name_len=255 [ 136.567972][ T6215] Remounting filesystem read-only [ 142.339040][ T6257] loop0: detected capacity change from 0 to 2048 [ 143.100993][ T6258] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 143.144973][ T6255] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=62992, name_len=255 [ 143.161703][ T6255] Remounting filesystem read-only [ 143.471709][ T6260] loop2: detected capacity change from 0 to 1024 [ 144.263510][ T6260] EXT4-fs: Ignoring removed nomblk_io_submit option [ 144.270292][ T6260] EXT4-fs: Ignoring removed bh option [ 144.302151][ T6260] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 144.522625][ T5788] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 149.840727][ T6295] loop0: detected capacity change from 0 to 2048 [ 150.636089][ T6296] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 150.673027][ T6294] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=62992, name_len=255 [ 150.754737][ T6294] Remounting filesystem read-only [ 152.597802][ T6310] loop0: detected capacity change from 0 to 2048 [ 153.306826][ T6311] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 153.342423][ T6307] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=62992, name_len=255 [ 153.362151][ T6307] Remounting filesystem read-only [ 154.699021][ T6309] loop3: detected capacity change from 0 to 32768 [ 154.719143][ T6309] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.102 (6309) [ 154.783602][ T6309] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 154.809064][ T6309] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 154.828271][ T6309] BTRFS info (device loop3): enabling disk space caching [ 154.848531][ T6309] BTRFS info (device loop3): force clearing of disk cache [ 154.886433][ T6309] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 154.925684][ T6309] BTRFS info (device loop3): use zstd compression, level 3 [ 154.954547][ T6309] BTRFS info (device loop3): disk space caching is enabled [ 155.165318][ T6309] BTRFS info (device loop3): enabling ssd optimizations [ 155.173095][ T6309] BTRFS info (device loop3): auto enabling async discard [ 155.211164][ T6309] BTRFS info (device loop3): rebuilding free space tree [ 155.326004][ T6309] BTRFS info (device loop3): disabling free space tree [ 155.355220][ T6309] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 155.410556][ T6309] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 155.806943][ T5772] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 157.983982][ T6352] loop0: detected capacity change from 0 to 2048 [ 158.795930][ T6353] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 158.834464][ T6351] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=62992, name_len=255 [ 158.854207][ T6351] Remounting filesystem read-only [ 163.338664][ T6387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.514188][ T6398] loop3: detected capacity change from 0 to 512 [ 165.585942][ T6398] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 165.624960][ T6398] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0102] [ 165.672569][ T6398] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 165.742196][ T6398] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 165.778458][ T6398] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 166.657121][ T6406] loop2: detected capacity change from 0 to 2048 [ 167.192951][ T6410] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 167.240610][ T6406] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=62992, name_len=255 [ 167.306758][ T6406] Remounting filesystem read-only [ 167.642746][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.014637][ T6423] loop3: detected capacity change from 0 to 1024 [ 169.041058][ T6423] EXT4-fs: Ignoring removed nomblk_io_submit option [ 169.068829][ T6423] EXT4-fs: Ignoring removed bh option [ 169.106147][ T6423] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 170.467687][ T6433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.262013][ C0] sched: RT throttling activated [ 171.434435][ T6434] loop0: detected capacity change from 0 to 2048 [ 171.622362][ T6439] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 171.694302][ T6434] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=62992, name_len=255 [ 171.769118][ T6434] Remounting filesystem read-only [ 173.989636][ T6454] loop3: detected capacity change from 0 to 512 [ 174.074272][ T6454] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 174.112110][ T6454] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0102] [ 174.150908][ T6454] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 174.170979][ T6454] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 174.304407][ T6454] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 176.737407][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.925986][ T6483] loop1: detected capacity change from 0 to 2048 [ 177.945294][ T6484] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 177.994604][ T6483] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=62992, name_len=255 [ 178.060230][ T6483] Remounting filesystem read-only [ 178.781898][ T6491] loop2: detected capacity change from 0 to 1024 [ 178.817045][ T6491] EXT4-fs: Ignoring removed nomblk_io_submit option [ 178.844212][ T6491] EXT4-fs: Ignoring removed bh option [ 178.867311][ T6491] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 179.045346][ T6494] loop0: detected capacity change from 0 to 2048 [ 179.158850][ T6495] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 179.232845][ T6494] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=62992, name_len=255 [ 179.319071][ T6494] Remounting filesystem read-only [ 183.194322][ T6524] loop2: detected capacity change from 0 to 512 [ 183.243875][ T6524] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 183.251866][ T6524] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0102] [ 183.296148][ T6524] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 183.305886][ T6524] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 183.321475][ T6524] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 184.157312][ T6530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.073156][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.640451][ T6547] loop0: detected capacity change from 0 to 2048 [ 186.700378][ T6550] loop1: detected capacity change from 0 to 1024 [ 186.727954][ T6550] EXT4-fs: Ignoring removed nomblk_io_submit option [ 186.746076][ T6548] loop3: detected capacity change from 0 to 2048 [ 186.752638][ T6551] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 186.768533][ T6550] EXT4-fs: Ignoring removed bh option [ 186.802300][ T6550] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 186.830694][ T6547] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=62992, name_len=255 [ 186.922107][ T6547] Remounting filesystem read-only [ 186.974696][ T6553] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 187.011216][ T6548] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=62992, name_len=255 [ 187.075354][ T6548] Remounting filesystem read-only [ 187.560139][ T6556] loop2: detected capacity change from 0 to 2048 [ 187.689748][ T6558] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 187.784455][ T6556] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=62992, name_len=255 [ 187.865480][ T6556] Remounting filesystem read-only [ 190.141543][ T6574] loop1: detected capacity change from 0 to 512 [ 190.183799][ T6574] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 190.191864][ T6574] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0102] [ 190.227421][ T6574] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 190.287947][ T6574] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 190.336136][ T6574] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 192.889024][ T6592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.855424][ T6600] loop0: detected capacity change from 0 to 2048 [ 193.994185][ T6601] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 194.038663][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.057711][ T6600] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=62992, name_len=255 [ 194.110580][ T6600] Remounting filesystem read-only [ 194.769719][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.777120][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.196522][ T6610] loop1: detected capacity change from 0 to 2048 [ 195.235320][ T6611] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 195.288150][ T6610] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=62992, name_len=255 [ 195.315602][ T6610] Remounting filesystem read-only [ 195.483327][ T6614] loop2: detected capacity change from 0 to 1024 [ 195.503570][ T6614] EXT4-fs: Ignoring removed nomblk_io_submit option [ 195.510248][ T6614] EXT4-fs: Ignoring removed bh option [ 195.606842][ T6614] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 199.285641][ T6638] loop1: detected capacity change from 0 to 512 [ 199.327537][ T6638] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 199.351810][ T6638] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0102] [ 199.371165][ T6638] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 199.396895][ T6638] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 199.433852][ T6638] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 200.898413][ T6650] loop0: detected capacity change from 0 to 512 [ 201.042558][ T6650] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 201.071132][ T6650] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0102] [ 201.101563][ T6650] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 201.111614][ T6650] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 201.124666][ T6650] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 201.157397][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.295380][ T6653] loop3: detected capacity change from 0 to 2048 [ 201.349624][ T6654] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 201.401508][ T6653] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=62992, name_len=255 [ 201.424505][ T6653] Remounting filesystem read-only [ 202.879902][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.247158][ T6663] loop0: detected capacity change from 0 to 1024 [ 203.280880][ T6663] EXT4-fs: Ignoring removed nomblk_io_submit option [ 203.317314][ T6663] EXT4-fs: Ignoring removed bh option [ 203.345967][ T6663] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 203.444260][ T6667] loop2: detected capacity change from 0 to 2048 [ 203.490373][ T6668] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 203.535505][ T6667] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=62992, name_len=255 [ 203.559068][ T6667] Remounting filesystem read-only [ 204.125535][ T6670] loop1: detected capacity change from 0 to 2048 [ 204.213421][ T6671] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 204.272357][ T6670] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=62992, name_len=255 [ 204.339825][ T6670] Remounting filesystem read-only [ 207.139435][ T5779] Bluetooth: hci0: command 0x0406 tx timeout [ 207.147727][ T5779] Bluetooth: hci2: command 0x0406 tx timeout [ 207.154492][ T5779] Bluetooth: hci1: command 0x0406 tx timeout [ 207.160587][ T5779] Bluetooth: hci3: command 0x0406 tx timeout [ 207.478708][ T6692] loop0: detected capacity change from 0 to 512 [ 207.706480][ T6692] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 207.717703][ T6698] loop3: detected capacity change from 0 to 512 [ 207.724218][ T6692] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0102] [ 207.746391][ T6692] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 207.769698][ T6698] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 207.807251][ T6692] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 207.821856][ T6698] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0102] [ 207.830777][ T6698] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 207.841913][ T6698] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 207.853880][ T6698] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 207.867386][ T6692] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 208.785646][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.591316][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.552209][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 211.085599][ T6715] loop3: detected capacity change from 0 to 2048 [ 211.138249][ T6716] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 211.177947][ T6715] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=62992, name_len=255 [ 211.196117][ T6719] loop1: detected capacity change from 0 to 1024 [ 211.207901][ T6715] Remounting filesystem read-only [ 211.233422][ T6719] EXT4-fs: Ignoring removed nomblk_io_submit option [ 211.251255][ T6719] EXT4-fs: Ignoring removed bh option [ 211.275653][ T6719] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 211.376248][ T6720] loop0: detected capacity change from 0 to 2048 [ 211.433431][ T6721] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 211.523889][ T6720] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=62992, name_len=255 [ 211.543077][ T6720] Remounting filesystem read-only [ 213.963836][ T5838] kernel write not supported for file bpf-prog (pid: 5838 comm: kworker/1:4) [ 214.040919][ T6735] loop0: detected capacity change from 0 to 512 [ 214.067813][ T6735] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 214.076934][ T6735] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0102] [ 214.086528][ T6735] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 214.098805][ T6735] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 214.123447][ T6735] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 214.411485][ T6740] loop2: detected capacity change from 0 to 512 [ 214.457182][ T6740] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 214.477028][ T6740] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0102] [ 214.487917][ T6740] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 214.499001][ T6740] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 214.510675][ T6740] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 215.044273][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.375187][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.955372][ T6760] loop2: detected capacity change from 0 to 2048 [ 218.030502][ T6761] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 218.078271][ T6760] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=62992, name_len=255 [ 218.104488][ T6760] Remounting filesystem read-only [ 218.856242][ T6768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.206'. [ 219.899358][ T6773] loop1: detected capacity change from 0 to 1024 [ 219.973964][ T6773] EXT4-fs: Ignoring removed nomblk_io_submit option [ 220.048650][ T6773] EXT4-fs: Ignoring removed bh option [ 220.231942][ T6773] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 220.477676][ T5838] kernel write not supported for file bpf-prog (pid: 5838 comm: kworker/1:4) [ 220.730134][ T6778] loop2: detected capacity change from 0 to 512 [ 220.811231][ T6778] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 220.839207][ T6778] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0102] [ 220.882697][ T6778] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 221.090962][ T6778] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 221.102246][ T6778] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 222.237652][ T6790] loop3: detected capacity change from 0 to 512 [ 222.467335][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.489427][ T6790] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 222.724698][ T6790] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0102] [ 223.008082][ T6790] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 223.339902][ T6790] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 223.373456][ T6790] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 226.155502][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.557328][ T6824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.419510][ T6830] 9pnet_fd: Insufficient options for proto=fd [ 228.544507][ T6831] loop3: detected capacity change from 0 to 512 [ 229.011615][ T6831] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 229.203909][ T6831] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0102] [ 229.259787][ T6831] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 229.332498][ T6831] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 229.384363][ T6831] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 229.882626][ T6844] loop1: detected capacity change from 0 to 1024 [ 229.908418][ T6844] EXT4-fs: Ignoring removed nomblk_io_submit option [ 229.938315][ T6844] EXT4-fs: Ignoring removed bh option [ 230.018945][ T6844] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 230.049426][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.017330][ T6877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.751900][ T6883] loop0: detected capacity change from 0 to 512 [ 235.841868][ T6883] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 235.872847][ T6883] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0102] [ 235.881271][ T6883] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 235.891045][ T6883] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 235.901531][ T6883] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 237.699124][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.122059][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 240.863026][ T6919] loop0: detected capacity change from 0 to 2048 [ 240.917211][ T6921] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 240.942929][ T6919] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=62992, name_len=255 [ 240.959537][ T6919] Remounting filesystem read-only [ 241.211518][ T6923] loop3: detected capacity change from 0 to 1024 [ 241.228498][ T6923] EXT4-fs: Ignoring removed nomblk_io_submit option [ 241.237521][ T6923] EXT4-fs: Ignoring removed bh option [ 241.279746][ T6923] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 243.241682][ T6940] loop1: detected capacity change from 0 to 512 [ 243.272190][ T6940] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 243.280232][ T6940] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0102] [ 243.299990][ T6940] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 243.310481][ T6940] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 243.322367][ T6940] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 244.389858][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.392249][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 247.306274][ T6964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.257'. [ 248.904368][ T6976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.411487][ T6982] loop0: detected capacity change from 0 to 512 [ 251.485389][ T6982] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 251.512759][ T6982] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0102] [ 251.563668][ T6982] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 251.606877][ T6982] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 251.646330][ T6982] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 253.868576][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.833648][ T7002] loop0: detected capacity change from 0 to 1024 [ 254.851811][ T7002] EXT4-fs: Ignoring removed nomblk_io_submit option [ 254.898729][ T7002] EXT4-fs: Ignoring removed bh option [ 255.161867][ T7002] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 256.383193][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.392089][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.904592][ T7039] loop3: detected capacity change from 0 to 512 [ 261.149323][ T7039] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 261.298413][ T7039] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0102] [ 261.503672][ T7039] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 261.552612][ T7039] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 261.610379][ T7039] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 262.628464][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.369092][ T7055] loop1: detected capacity change from 0 to 2048 [ 263.470170][ T7056] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 263.490723][ T7055] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=62992, name_len=255 [ 263.516666][ T7055] Remounting filesystem read-only [ 265.282157][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 266.611476][ T7075] loop2: detected capacity change from 0 to 1024 [ 266.637142][ T7075] EXT4-fs: Ignoring removed nomblk_io_submit option [ 266.698785][ T7075] EXT4-fs: Ignoring removed bh option [ 266.717504][ T7078] loop0: detected capacity change from 0 to 512 [ 266.767087][ T7075] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 266.810213][ T7078] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 266.818834][ T7078] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0102] [ 266.827491][ T7078] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 266.973241][ T7078] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 267.084027][ T7078] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 268.504020][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.715753][ T7089] loop1: detected capacity change from 0 to 512 [ 269.270439][ T7089] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 269.306413][ T7089] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0102] [ 269.316001][ T7089] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 269.326437][ T7089] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 269.353375][ T7089] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 270.251781][ T7101] loop2: detected capacity change from 0 to 2048 [ 270.363627][ T7102] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 270.381408][ T7101] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=62992, name_len=255 [ 270.403322][ T7101] Remounting filesystem read-only [ 271.992216][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 273.060822][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.326716][ T7118] loop1: detected capacity change from 0 to 512 [ 273.373616][ T7118] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 273.381602][ T7118] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0102] [ 273.439251][ T7118] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 273.479675][ T7118] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 273.521384][ T7118] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 274.172658][ T7131] futex_wake_op: syz.0.299 tries to shift op by 144; fix this program [ 275.146641][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.228262][ T7144] loop0: detected capacity change from 0 to 2048 [ 276.308673][ T7146] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 276.338068][ T7144] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=62992, name_len=255 [ 276.355671][ T7144] Remounting filesystem read-only [ 276.868831][ T7148] netlink: 'syz.0.303': attribute type 1 has an invalid length. [ 276.993532][ T7150] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 277.032207][ T7150] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 277.077955][ T7150] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 277.099456][ T7150] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 277.134726][ T7150] bond1: (slave geneve2): making interface the new active one [ 277.181784][ T7150] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 277.205237][ T7148] netlink: 28 bytes leftover after parsing attributes in process `syz.0.303'. [ 277.263268][ T7148] 8021q: adding VLAN 0 to HW filter on device bond1 [ 277.311423][ T7150] syz.0.303 (7150) used greatest stack depth: 19920 bytes left [ 278.020716][ T7165] loop0: detected capacity change from 0 to 512 [ 278.164816][ T7165] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 278.232158][ T7165] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0102] [ 278.241233][ T7165] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 278.264729][ T7165] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 278.282316][ T7165] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 279.895941][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.996519][ T7180] loop3: detected capacity change from 0 to 2048 [ 280.012744][ T1201] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 280.040919][ T7181] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 280.063262][ T7180] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=62992, name_len=255 [ 280.085624][ T7180] Remounting filesystem read-only [ 280.402318][ T1201] usb 2-1: Using ep0 maxpacket: 8 [ 280.427369][ T1201] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 280.452407][ T1201] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 280.460674][ T1201] usb 2-1: Product: syz [ 280.465294][ T1201] usb 2-1: Manufacturer: syz [ 280.470075][ T1201] usb 2-1: SerialNumber: syz [ 280.490725][ T1201] usb 2-1: config 0 descriptor?? [ 280.619573][ T1201] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 281.156266][ T1201] gspca_zc3xx: reg_r err -32 [ 281.184360][ T1201] gspca_zc3xx: probe of 2-1:0.0 failed with error -32 [ 281.866466][ T7201] netlink: 'syz.1.317': attribute type 1 has an invalid length. [ 281.968930][ T7203] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 281.992062][ T7203] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 282.001297][ T7203] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 282.010274][ T7203] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 282.021690][ T7203] bond1: (slave geneve2): making interface the new active one [ 282.031833][ T7203] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 282.809519][ T7211] loop2: detected capacity change from 0 to 512 [ 282.879299][ T7211] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 282.892438][ T7211] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0102] [ 282.935130][ T7211] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 282.981063][ T7211] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 282.991905][ T7211] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 284.785291][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.825091][ T7217] loop3: detected capacity change from 0 to 2048 [ 284.857442][ T7218] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 284.903326][ T7217] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=62992, name_len=255 [ 284.923726][ T7217] Remounting filesystem read-only [ 285.454584][ T7229] 9pnet_fd: Insufficient options for proto=fd [ 286.481731][ T7234] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 286.491315][ T7235] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 287.351076][ T7254] input: syz1 as /devices/virtual/input/input5 [ 289.125287][ T7272] loop1: detected capacity change from 0 to 2048 [ 289.169732][ T7273] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 289.186032][ T7272] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=62992, name_len=255 [ 289.206555][ T7272] Remounting filesystem read-only [ 291.812548][ T7290] comedi comedi0: reset error (fatal) [ 292.234685][ T7298] netlink: 'syz.1.342': attribute type 1 has an invalid length. [ 292.537817][ T7304] loop2: detected capacity change from 0 to 2048 [ 292.590565][ T7307] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 292.616397][ T7304] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=62992, name_len=255 [ 292.633134][ T7304] Remounting filesystem read-only [ 296.824445][ T7339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.816730][ T7348] loop1: detected capacity change from 0 to 2048 [ 297.841403][ T7350] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 297.903485][ T7348] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=62992, name_len=255 [ 298.057096][ T7348] Remounting filesystem read-only [ 303.017693][ T7399] loop0: detected capacity change from 0 to 2048 [ 303.054802][ T7400] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 303.090098][ T7399] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=62992, name_len=255 [ 303.112853][ T7399] Remounting filesystem read-only [ 307.527484][ T7426] futex_wake_op: syz.1.374 tries to shift op by 144; fix this program [ 310.096209][ T7444] loop2: detected capacity change from 0 to 2048 [ 310.138441][ T7445] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 310.164708][ T7444] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=62992, name_len=255 [ 310.182012][ T7444] Remounting filesystem read-only [ 314.161805][ T7462] futex_wake_op: syz.3.384 tries to shift op by 144; fix this program [ 317.718757][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.725431][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.152245][ T7491] futex_wake_op: syz.1.393 tries to shift op by 144; fix this program [ 324.660383][ T7529] futex_wake_op: syz.1.403 tries to shift op by 144; fix this program [ 328.427854][ T7560] futex_wake_op: syz.3.413 tries to shift op by 144; fix this program [ 331.513089][ T7572] syz.3.416 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 335.683465][ T7591] Zero length message leads to an empty skb [ 338.277123][ T7600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.576136][ T7641] loop2: detected capacity change from 0 to 512 [ 343.606399][ T7641] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 343.635522][ T7641] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 343.727367][ T7641] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 343.763490][ T7641] EXT4-fs (loop2): 1 truncate cleaned up [ 343.770672][ T7641] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.073743][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.354785][ T7692] loop3: detected capacity change from 0 to 2048 [ 353.884447][ T7694] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 353.997896][ T7690] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=62992, name_len=255 [ 354.016959][ T7690] Remounting filesystem read-only [ 354.036044][ T7693] loop0: detected capacity change from 0 to 32768 [ 354.045219][ T7693] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.450 (7693) [ 354.072579][ T7693] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 354.083011][ T7693] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 354.091771][ T7693] BTRFS info (device loop0): enabling disk space caching [ 354.099073][ T7693] BTRFS info (device loop0): force clearing of disk cache [ 354.106412][ T7693] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 354.115884][ T7693] BTRFS info (device loop0): use zstd compression, level 3 [ 354.124178][ T7693] BTRFS info (device loop0): disk space caching is enabled [ 354.452288][ T7693] BTRFS info (device loop0): enabling ssd optimizations [ 354.459378][ T7693] BTRFS info (device loop0): auto enabling async discard [ 354.475270][ T7693] BTRFS info (device loop0): rebuilding free space tree [ 354.501657][ T7693] BTRFS info (device loop0): disabling free space tree [ 354.509971][ T7693] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 354.519771][ T7693] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 355.324250][ T5771] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 356.472217][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 358.595599][ T7740] loop1: detected capacity change from 0 to 2048 [ 358.734703][ T7740] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=62992, name_len=255 [ 358.760440][ T7740] Remounting filesystem read-only [ 358.774785][ T7741] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 359.032450][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 360.499161][ T7736] loop3: detected capacity change from 0 to 2048 [ 361.930247][ T7754] loop2: detected capacity change from 0 to 32768 [ 361.938585][ T7754] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.461 (7754) [ 361.969381][ T7754] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 361.979797][ T7754] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 361.988654][ T7754] BTRFS info (device loop2): enabling disk space caching [ 361.995887][ T7754] BTRFS info (device loop2): force clearing of disk cache [ 362.004039][ T7754] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 362.013632][ T7754] BTRFS info (device loop2): use zstd compression, level 3 [ 362.020894][ T7754] BTRFS info (device loop2): disk space caching is enabled [ 362.156746][ T7754] BTRFS info (device loop2): enabling ssd optimizations [ 362.164074][ T7754] BTRFS info (device loop2): auto enabling async discard [ 362.176058][ T7754] BTRFS info (device loop2): rebuilding free space tree [ 362.202440][ T7754] BTRFS info (device loop2): disabling free space tree [ 362.210360][ T7754] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 362.220226][ T7754] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 362.987358][ T7774] loop0: detected capacity change from 0 to 2048 [ 363.107300][ T7773] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=62992, name_len=255 [ 363.127406][ T7778] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 363.141369][ T7773] Remounting filesystem read-only [ 363.244531][ T5773] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 363.682412][ T7783] loop1: detected capacity change from 0 to 2048 [ 363.969231][ T7784] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 364.070927][ T7783] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=62992, name_len=255 [ 364.090903][ T7783] Remounting filesystem read-only [ 366.203102][ T7802] loop0: detected capacity change from 0 to 2048 [ 366.307700][ T7804] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 366.343757][ T7801] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=62992, name_len=255 [ 366.393509][ T7801] Remounting filesystem read-only [ 366.853805][ T7813] loop1: detected capacity change from 0 to 2048 [ 366.972282][ T7815] loop0: detected capacity change from 0 to 1024 [ 367.159853][ T7815] hfsplus: request for non-existent node 33423360 in B*Tree [ 367.180203][ T7815] hfsplus: request for non-existent node 33423360 in B*Tree [ 367.216350][ T7816] hfsplus: request for non-existent node 33423360 in B*Tree [ 367.237482][ T7816] hfsplus: request for non-existent node 33423360 in B*Tree [ 367.407978][ T7815] hfsplus: request for non-existent node 33423360 in B*Tree [ 367.449600][ T7815] hfsplus: request for non-existent node 33423360 in B*Tree [ 367.622829][ T7815] hfsplus: request for non-existent node 33423360 in B*Tree [ 367.645758][ T7815] hfsplus: request for non-existent node 33423360 in B*Tree [ 367.702535][ T7816] hfsplus: request for non-existent node 33423360 in B*Tree [ 367.722040][ T7816] hfsplus: request for non-existent node 33423360 in B*Tree [ 367.915837][ T7822] loop2: detected capacity change from 0 to 2048 [ 368.023405][ T7819] hfsplus: request for non-existent node 33423360 in B*Tree [ 368.102816][ T7823] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 368.146553][ T7822] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=62992, name_len=255 [ 368.234875][ T7822] Remounting filesystem read-only [ 368.297184][ T7819] hfsplus: request for non-existent node 33423360 in B*Tree [ 368.484706][ T7821] hfsplus: request for non-existent node 33423360 in B*Tree [ 368.532746][ T7821] hfsplus: request for non-existent node 33423360 in B*Tree [ 368.602312][ T7815] hfsplus: request for non-existent node 33423360 in B*Tree [ 368.609790][ T7815] hfsplus: request for non-existent node 33423360 in B*Tree [ 369.181706][ T7836] kvm: user requested TSC rate below hardware speed [ 370.119185][ T7844] 9pnet_fd: Insufficient options for proto=fd [ 371.871216][ T7861] netlink: 132 bytes leftover after parsing attributes in process `syz.3.483'. [ 372.263238][ T7870] loop1: detected capacity change from 0 to 2048 [ 374.652077][ T7902] loop1: detected capacity change from 0 to 2048 [ 374.831654][ T7903] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 374.972096][ T7902] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=62992, name_len=255 [ 374.995474][ T7902] Remounting filesystem read-only [ 375.961602][ T7910] 9pnet_fd: Insufficient options for proto=fd [ 376.656432][ T7921] loop3: detected capacity change from 0 to 2048 [ 379.516280][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.524784][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.685711][ T7947] 9pnet_fd: Insufficient options for proto=fd [ 381.050327][ T7964] loop1: detected capacity change from 0 to 2048 [ 382.597585][ T7983] 9pnet_fd: Insufficient options for proto=fd [ 385.909634][ T8007] loop3: detected capacity change from 0 to 2048 [ 386.623988][ T8019] 9pnet_fd: Insufficient options for proto=fd [ 391.846273][ T8051] loop2: detected capacity change from 0 to 2048 [ 391.956889][ T8052] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 391.992007][ T8051] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=62992, name_len=255 [ 392.018171][ T8051] Remounting filesystem read-only [ 393.629220][ T8060] loop2: detected capacity change from 0 to 2048 [ 396.574581][ T8091] loop2: detected capacity change from 0 to 2048 [ 396.676226][ T8092] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 396.702618][ T8088] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=62992, name_len=255 [ 396.723223][ T8088] Remounting filesystem read-only [ 397.164595][ T8098] netlink: 132 bytes leftover after parsing attributes in process `syz.2.546'. [ 397.404842][ T8102] netlink: 40 bytes leftover after parsing attributes in process `syz.2.548'. [ 397.921138][ T8107] loop0: detected capacity change from 0 to 2048 [ 400.769250][ T8131] netlink: 132 bytes leftover after parsing attributes in process `syz.2.557'. [ 404.103576][ T8154] loop0: detected capacity change from 0 to 2048 [ 405.152736][ T8164] kvm: user requested TSC rate below hardware speed [ 406.835165][ T8176] loop3: detected capacity change from 0 to 2048 [ 412.362210][ T8213] loop1: detected capacity change from 0 to 2048 [ 412.603775][ T5137] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 412.657188][ T5137] Buffer I/O error on dev loop1, logical block 0, async page read [ 412.693774][ T5137] ldm_validate_partition_table(): Disk read failed. [ 412.733084][ T5137] Dev loop1: unable to read RDB block 0 [ 412.738847][ T5137] loop1: unable to read partition table [ 412.757460][ T5137] loop1: partition table beyond EOD, truncated [ 412.766034][ T8218] loop2: detected capacity change from 0 to 8 [ 415.682121][ T8246] loop0: detected capacity change from 0 to 2048 [ 417.912452][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 418.149415][ T8266] loop1: detected capacity change from 0 to 2048 [ 418.257037][ T8267] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 418.324832][ T8265] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=62992, name_len=255 [ 418.380770][ T8265] Remounting filesystem read-only [ 422.341517][ T8283] loop2: detected capacity change from 0 to 2048 [ 426.199994][ T8306] loop3: detected capacity change from 0 to 2048 [ 426.874423][ T8306] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=62992, name_len=255 [ 426.890932][ T8307] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 426.902137][ T8306] Remounting filesystem read-only [ 428.712602][ T8315] netlink: 'syz.0.609': attribute type 2 has an invalid length. [ 430.516830][ C0] [ 430.519336][ C0] ================================ [ 430.524558][ C0] WARNING: inconsistent lock state [ 430.529860][ C0] syzkaller #0 Not tainted [ 430.534295][ C0] -------------------------------- [ 430.539505][ C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 430.546369][ C0] syz.0.609/8315 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 430.552630][ C0] ffff888079f19370 (slock-AF_PHONET/1){+.?.}-{2:2}, at: __sk_receive_skb+0x180/0x990 [ 430.562341][ C0] {SOFTIRQ-ON-W} state was registered at: [ 430.568171][ C0] lock_acquire+0x19e/0x420 [ 430.572797][ C0] _raw_spin_lock_nested+0x32/0x50 [ 430.578112][ C0] __sk_receive_skb+0x180/0x990 [ 430.583281][ C0] pep_do_rcv+0x682/0xa90 [ 430.587894][ C0] __release_sock+0x1e5/0x460 [ 430.592897][ C0] release_sock+0x5f/0x1c0 [ 430.597425][ C0] pep_sock_accept+0xd58/0x12d0 [ 430.602460][ C0] pn_socket_accept+0x12a/0x370 [ 430.607525][ C0] do_accept+0x4d8/0x6c0 [ 430.611882][ C0] __sys_accept4+0x9b/0x100 [ 430.616607][ C0] __x64_sys_accept4+0x9a/0xb0 [ 430.621485][ C0] do_syscall_64+0x55/0xa0 [ 430.626039][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 430.632151][ C0] irq event stamp: 694 [ 430.636229][ C0] hardirqs last enabled at (694): [] _raw_spin_unlock_irq+0x23/0x50 [ 430.645885][ C0] hardirqs last disabled at (693): [] _raw_spin_lock_irq+0x8a/0xf0 [ 430.655378][ C0] softirqs last enabled at (688): [] netif_rx+0x79/0x90 [ 430.664010][ C0] softirqs last disabled at (689): [] do_softirq+0xfa/0x1a0 [ 430.672891][ C0] [ 430.672891][ C0] other info that might help us debug this: [ 430.680977][ C0] Possible unsafe locking scenario: [ 430.680977][ C0] [ 430.688449][ C0] CPU0 [ 430.691748][ C0] ---- [ 430.695064][ C0] lock(slock-AF_PHONET/1); [ 430.699710][ C0] [ 430.703204][ C0] lock(slock-AF_PHONET/1); [ 430.708011][ C0] [ 430.708011][ C0] *** DEADLOCK *** [ 430.708011][ C0] [ 430.716185][ C0] 5 locks held by syz.0.609/8315: [ 430.721229][ C0] #0: ffff888076ca2020 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x9b/0x230 [ 430.731561][ C0] #1: ffff888079f18db0 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: pep_sock_close+0x86/0x5b0 [ 430.741357][ C0] #2: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: process_backlog+0x2cf/0x6f0 [ 430.750905][ C0] #3: ffff888079f186f0 (slock-AF_PHONET){+.-.}-{2:2}, at: __sk_receive_skb+0x18f/0x990 [ 430.760797][ C0] #4: ffff888079f18770 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: phonet_rcv+0x78f/0xc80 [ 430.770237][ C0] [ 430.770237][ C0] stack backtrace: [ 430.776238][ C0] CPU: 0 PID: 8315 Comm: syz.0.609 Not tainted syzkaller #0 [ 430.783738][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 430.793830][ C0] Call Trace: [ 430.797219][ C0] [ 430.800098][ C0] dump_stack_lvl+0x18c/0x250 [ 430.804930][ C0] ? show_regs_print_info+0x20/0x20 [ 430.810188][ C0] ? __kernel_text_address+0xd/0x30 [ 430.815430][ C0] ? unwind_get_return_address+0x91/0xc0 [ 430.821100][ C0] valid_state+0x13b/0x1d0 [ 430.825555][ C0] mark_lock_irq+0xad/0x900 [ 430.830110][ C0] ? stack_trace_save+0xaa/0x100 [ 430.835204][ C0] ? save_trace+0xcd0/0xcd0 [ 430.839929][ C0] ? mark_lock+0x94/0x320 [ 430.844303][ C0] ? save_trace+0x5d/0xcd0 [ 430.848757][ C0] mark_lock+0x208/0x320 [ 430.853042][ C0] __lock_acquire+0xd1a/0x7d40 [ 430.857839][ C0] ? verify_lock_unused+0x140/0x140 [ 430.863075][ C0] ? mark_lock+0x94/0x320 [ 430.867699][ C0] ? verify_lock_unused+0x140/0x140 [ 430.873112][ C0] ? sk_filter_trim_cap+0x18a/0x900 [ 430.878354][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 430.883503][ C0] lock_acquire+0x19e/0x420 [ 430.888035][ C0] ? __sk_receive_skb+0x180/0x990 [ 430.893140][ C0] ? read_lock_is_recursive+0x20/0x20 [ 430.898550][ C0] ? sk_filter_trim_cap+0x18a/0x900 [ 430.903860][ C0] ? copy_bpf_fprog_from_user+0x2d0/0x2d0 [ 430.909606][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 430.914671][ C0] ? __lock_acquire+0x1273/0x7d40 [ 430.919811][ C0] _raw_spin_lock_nested+0x32/0x50 [ 430.924953][ C0] ? __sk_receive_skb+0x180/0x990 [ 430.930002][ C0] __sk_receive_skb+0x180/0x990 [ 430.934892][ C0] pep_do_rcv+0x682/0xa90 [ 430.939249][ C0] ? pep_recvmsg+0x600/0x600 [ 430.943872][ C0] ? phonet_rcv+0x78f/0xc80 [ 430.948490][ C0] __sk_receive_skb+0x436/0x990 [ 430.953387][ C0] phonet_rcv+0x78f/0xc80 [ 430.957745][ C0] ? phonet_proto_unregister+0x130/0x130 [ 430.963400][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 430.969409][ C0] ? read_lock_is_recursive+0x20/0x20 [ 430.974809][ C0] ? _raw_spin_lock_irq+0xbb/0xf0 [ 430.979870][ C0] ? phonet_proto_unregister+0x130/0x130 [ 430.985616][ C0] __netif_receive_skb+0xcc/0x290 [ 430.990673][ C0] ? process_backlog+0x2cf/0x6f0 [ 430.995640][ C0] process_backlog+0x391/0x6f0 [ 431.000440][ C0] ? trigger_rx_softirq+0x60/0x60 [ 431.005489][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 431.011506][ C0] ? lock_chain_count+0x20/0x20 [ 431.016477][ C0] __napi_poll+0xc0/0x460 [ 431.020843][ C0] ? net_rx_action+0x3a0/0xc40 [ 431.025645][ C0] net_rx_action+0x616/0xc40 [ 431.030359][ C0] ? net_tx_action+0x980/0x980 [ 431.035166][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 431.041196][ C0] ? lock_chain_count+0x20/0x20 [ 431.046076][ C0] ? lapic_next_event+0x11/0x20 [ 431.050958][ C0] handle_softirqs+0x280/0x820 [ 431.055751][ C0] ? irq_work_single+0x199/0x230 [ 431.060714][ C0] ? do_softirq+0xfa/0x1a0 [ 431.065249][ C0] ? do_softirq+0x1a0/0x1a0 [ 431.069781][ C0] ? rcu_is_watching+0x15/0xb0 [ 431.074579][ C0] ? netif_rx+0x79/0x90 [ 431.078933][ C0] do_softirq+0xfa/0x1a0 [ 431.083213][ C0] [ 431.086167][ C0] [ 431.089220][ C0] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 431.094624][ C0] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 431.100635][ C0] ? rcu_is_watching+0x15/0xb0 [ 431.105416][ C0] __local_bh_enable_ip+0x184/0x1c0 [ 431.110629][ C0] ? _local_bh_enable+0xa0/0xa0 [ 431.115578][ C0] netif_rx+0x83/0x90 [ 431.119680][ C0] pn_send+0x553/0x7f0 [ 431.123859][ C0] pn_skb_send+0x218/0x510 [ 431.128285][ C0] pep_sock_close+0x2c1/0x5b0 [ 431.132982][ C0] pn_socket_release+0x95/0xb0 [ 431.137764][ C0] sock_close+0xbd/0x230 [ 431.142018][ C0] ? sock_mmap+0xa0/0xa0 [ 431.146275][ C0] __fput+0x234/0x970 [ 431.150267][ C0] task_work_run+0x1d4/0x260 [ 431.154955][ C0] ? task_work_cancel+0x220/0x220 [ 431.159991][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 431.165463][ C0] exit_to_user_mode_loop+0xe6/0x110 [ 431.170755][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 431.176316][ C0] syscall_exit_to_user_mode+0x1a/0x50 [ 431.181876][ C0] do_syscall_64+0x61/0xa0 [ 431.186303][ C0] ? clear_bhb_loop+0x40/0x90 [ 431.190987][ C0] ? clear_bhb_loop+0x40/0x90 [ 431.195696][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 431.201602][ C0] RIP: 0033:0x7f41cab9cdd9 [ 431.206032][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.225734][ C0] RSP: 002b:00007f41cb9de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 431.234190][ C0] RAX: 0000000000000000 RBX: 00007f41cae15fa0 RCX: 00007f41cab9cdd9 [ 431.242181][ C0] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000008 [ 431.250248][ C0] RBP: 00007f41cac32d69 R08: 0000000000000000 R09: 0000000000000000 [ 431.258310][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.266287][ C0] R13: 00007f41cae16038 R14: 00007f41cae15fa0 R15: 00007fff01d7ce68 [ 431.274274][ C0]