last executing test programs: 5m38.317183596s ago: executing program 4 (id=177): syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0404"], 0xd) 5m38.253646978s ago: executing program 4 (id=179): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) sendmsg$NFT_BATCH(r4, 0x0, 0x40000c0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) openat$dir(0xffffffffffffff9c, 0x0, 0x216006, 0x90) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x8000000000000009, 0x8c0002) ioctl$USBDEVFS_GETDRIVER(r6, 0x41045508, 0x0) 5m36.059107611s ago: executing program 4 (id=183): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x9, @loopback, 0x9}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="2d0075cc81b37197da886e3f1eb0cb647db2219f3708ae1fbb945454d55bbc20b3d661cd9aa256a4db603ca1ecf14c5bc86a587be6c68075ab9d83471a67eb582e71b5f7f439d3961d08cddf7bbf5da0f65099a7a22332129150f95b2b54f757a286144cb0d3850f16"], 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@block_validity}, {@errors_remount}, {@nombcache}]}, 0x1, 0x44f, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r4, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1}, 0x6e) accept4(r4, 0x0, 0x0, 0x80000) 5m32.101075347s ago: executing program 4 (id=186): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlinkat(&(0x7f0000000740)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000880)='dummy_udc.0\x00', 0xc) r1 = syz_open_dev$video(&(0x7f00000008c0), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4010565a, &(0x7f0000000900)={0x8000004}) close(r1) 5m31.793668164s ago: executing program 4 (id=189): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000060c0000850000002e000000d313f1fb5100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 5m30.876522817s ago: executing program 4 (id=194): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') write$eventfd(r0, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) 5m21.174196542s ago: executing program 2 (id=212): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@inlinecrypt}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000300)={0x4, 0xd0c, 0x1000, 0xb, 0x6, 0x6, 0x20000001002, 0xf64, 0x697}) syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f00000000c0)) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x8) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000140)={0x1, 0x3, 0xffffffff, 0xc0, 0x9, 0xffff}) fchown(r0, 0xee00, 0xee01) fchown(r0, 0x0, 0x0) 5m17.773148664s ago: executing program 2 (id=216): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/drivers/vfio-pci/bind\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0000', 0x4) 5m16.991475173s ago: executing program 2 (id=219): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) clock_gettime(0x0, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = syz_clone(0xc2100, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000300)=r2, 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 5m16.566126923s ago: executing program 2 (id=224): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlinkat(&(0x7f0000000740)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000880)='dummy_udc.0\x00', 0xc) r1 = syz_open_dev$video(&(0x7f00000008c0), 0x0, 0x2) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4010565b, &(0x7f0000000940)={0x8000004}) close(r1) 5m16.350827909s ago: executing program 2 (id=225): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000c80)={[{@init_itable}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@quota}, {@sysvgroups}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@debug}]}, 0xfc, 0x57d, &(0x7f0000001500)="$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") close(0xffffffffffffffff) mount$9p_fd(0x0, 0x0, 0x0, 0x121484b, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) tgkill(r1, r1, 0x39) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x2, 0x40) 5m15.513438329s ago: executing program 32 (id=194): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') write$eventfd(r0, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) 5m11.245969652s ago: executing program 2 (id=243): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x28000600) fcntl$getflags(0xffffffffffffffff, 0x3) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_group_source_req(r3, 0x29, 0x3c, 0x0, 0x0) 4m56.166978598s ago: executing program 33 (id=243): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x28000600) fcntl$getflags(0xffffffffffffffff, 0x3) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_group_source_req(r3, 0x29, 0x3c, 0x0, 0x0) 1m35.082748645s ago: executing program 1 (id=1200): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x1a, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x6d, &(0x7f0000002280)=""/4090, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0), 0x0, 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) r7 = add_key$user(&(0x7f0000002300), 0x0, &(0x7f0000000540), 0x0, r6) keyctl$dh_compute(0x17, &(0x7f0000000400)={r5, r7, r5}, &(0x7f0000000440)=""/206, 0xce, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r8, 0x1000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 1m32.847404339s ago: executing program 1 (id=1204): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlinkat(&(0x7f0000000740)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000880)='dummy_udc.0\x00', 0xc) r1 = syz_open_dev$video(&(0x7f00000008c0), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4010565a, &(0x7f0000000900)={0x8000004}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4010565b, &(0x7f0000000940)={0x8000004}) close(r1) 1m32.315397151s ago: executing program 1 (id=1211): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000c80)={[{@init_itable}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@quota}, {@sysvgroups}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@debug}]}, 0xfc, 0x57d, &(0x7f0000001500)="$eJzs3d9rW1UcAPDvTX/sp66DMfRFBntwMpeurT8mCM5H0eFA32doszKaLqNJx1oHrg/uxRcZgogD8Q/w3cfhP+BfMdDBkFH0QYTITW+2tE2atkuXbPl84G7n5N6bc7+593t6Tm5CAhhYJ9J/chGvRsS3ScSRpnXDka08sbbd6qOb0+mSRK322V9JJNljje2T7P9DWeWViPjt64jTuc3tVpaW5wqlUnEhq49X56+NV5aWz1yZL8wWZ4tXJ6emzr09Nfneu+90LdY3Lv7zw6f3Pjr3zcnV7395cPROEufjcLauOY6ncKu5cqLwX1YaifMbNpzoQmP9JOn1AbArQ1mej0TaBxyJoSzrgRffVxFRAwZUIv9hQDXGAY25fZfmwc+Nhx+uTYDqsY82xz+89t5I7K/PjQ6uJutmRul8d6wL7adt/Prn3TvpElu/D3GgQx1gR26tRMTZ4eHN/X+S9X+7d7b+5vHWNrYxaH9/oJfupeOfN1uN/3KPxz/RYvxzqEXu7kbn/M896EIzbaXjv/dbjn8fd11jQ1ntpfqYbyS5fKVUPBsRL0fEqah1vPVxbvV+rd265vFfuqTtN8aC2XE8GN63fp+ZQrUQEaO7DHmdhyv14W2qTf+/vz7W3Xj+09fj4jbbOF68+1q7dZ3j31u1nyNeb3n+n5zWZOv7k+P162G8cVVs9vft47+3a7/X8T9ciTi4dfxjSfP92srO2/hp/7/Fdut2e/2PJp/Xy40kuFGoVhcmIkaTTzY/Pvlk30a9sX0a/6mTW/d/ra7/dPL1xTbjv33sdttN++H8z+zo/O+8cP/jL39s1/72zv9b9dKp7JGs/2stu1a2e4BP+/oBAAAAAABAP8lFxOFIcvnH5Vwun1/7fMexOJgrlSvV05fLi1dnov5d2bEYyTXudB9p+jzERPZ52EZ9ckN9KiKORsR3Qwfq9fx0uTTT6+ABAAAAAAAAAAAAAAAAAACgTxxq8/3/1B9DvT46YM/Vf9hgX6+PAuiFjj/5341fegL6Usf8B15Y8h8Gl/yHwSX/YXDJfxhc8h8Gl/yHwSX/AQAAAAAAAAAAAAAAAAAAAAAAAAAAoKsuXriQLrXVRzen0/rM9aXFufL1MzPFylx+fnE6P11euJafLZdnS8X8dHm+0/OVyuVrE5OxeGO8WqxUxytLy5fmy4tXq5euzBdmi5eKI88kKgAAAAAAAAAAAAAAAAAAAHi+VJaW5wqlUnGhC4UkIrrxPP1W+CD64jD2MsA1u9p9uF+i2OvCyB6kzDMprGQHvrO9etQhAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAL/wcAAP//eBcqGw==") close(0xffffffffffffffff) mount$9p_fd(0x0, 0x0, 0x0, 0x121484b, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) tgkill(r1, r1, 0x39) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) 1m31.702932356s ago: executing program 1 (id=1214): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f0000000140)={[{@nodioread_nolock}, {@noload}, {@noblock_validity}, {@dioread_lock}, {@nouid32}, {@data_err_ignore}]}, 0x1, 0x54e, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @auto="b2fc991555cf4f1b83cafc8889c21fcf"}}) newfstatat(0xffffffffffffff9c, &(0x7f00000083c0)='./file2\x00', 0x0, 0x100) 1m31.57152319s ago: executing program 1 (id=1217): bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) connect$unix(r2, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f000099c000/0x2000)=nil, 0x2000, 0x1000000, 0x1010, r4, 0x5efaa000) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 1m29.267203166s ago: executing program 1 (id=1226): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000c80)={[{@init_itable}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@quota}, {@sysvgroups}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@debug}]}, 0xfc, 0x57d, &(0x7f0000001500)="$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") close(0xffffffffffffffff) mount$9p_fd(0x0, 0x0, 0x0, 0x121484b, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) tgkill(r1, r1, 0x39) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) 1m14.131200173s ago: executing program 34 (id=1226): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000c80)={[{@init_itable}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@quota}, {@sysvgroups}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@debug}]}, 0xfc, 0x57d, &(0x7f0000001500)="$eJzs3d9rW1UcAPDvTX/sp66DMfRFBntwMpeurT8mCM5H0eFA32doszKaLqNJx1oHrg/uxRcZgogD8Q/w3cfhP+BfMdDBkFH0QYTITW+2tE2atkuXbPl84G7n5N6bc7+593t6Tm5CAhhYJ9J/chGvRsS3ScSRpnXDka08sbbd6qOb0+mSRK322V9JJNljje2T7P9DWeWViPjt64jTuc3tVpaW5wqlUnEhq49X56+NV5aWz1yZL8wWZ4tXJ6emzr09Nfneu+90LdY3Lv7zw6f3Pjr3zcnV7395cPROEufjcLauOY6ncKu5cqLwX1YaifMbNpzoQmP9JOn1AbArQ1mej0TaBxyJoSzrgRffVxFRAwZUIv9hQDXGAY25fZfmwc+Nhx+uTYDqsY82xz+89t5I7K/PjQ6uJutmRul8d6wL7adt/Prn3TvpElu/D3GgQx1gR26tRMTZ4eHN/X+S9X+7d7b+5vHWNrYxaH9/oJfupeOfN1uN/3KPxz/RYvxzqEXu7kbn/M896EIzbaXjv/dbjn8fd11jQ1ntpfqYbyS5fKVUPBsRL0fEqah1vPVxbvV+rd265vFfuqTtN8aC2XE8GN63fp+ZQrUQEaO7DHmdhyv14W2qTf+/vz7W3Xj+09fj4jbbOF68+1q7dZ3j31u1nyNeb3n+n5zWZOv7k+P162G8cVVs9vft47+3a7/X8T9ciTi4dfxjSfP92srO2/hp/7/Fdut2e/2PJp/Xy40kuFGoVhcmIkaTTzY/Pvlk30a9sX0a/6mTW/d/ra7/dPL1xTbjv33sdttN++H8z+zo/O+8cP/jL39s1/72zv9b9dKp7JGs/2stu1a2e4BP+/oBAAAAAABAP8lFxOFIcvnH5Vwun1/7fMexOJgrlSvV05fLi1dnov5d2bEYyTXudB9p+jzERPZ52EZ9ckN9KiKORsR3Qwfq9fx0uTTT6+ABAAAAAAAAAAAAAAAAAACgTxxq8/3/1B9DvT46YM/Vf9hgX6+PAuiFjj/5341fegL6Usf8B15Y8h8Gl/yHwSX/YXDJfxhc8h8Gl/yHwSX/AQAAAAAAAAAAAAAAAAAAAAAAAAAAoKsuXriQLrXVRzen0/rM9aXFufL1MzPFylx+fnE6P11euJafLZdnS8X8dHm+0/OVyuVrE5OxeGO8WqxUxytLy5fmy4tXq5euzBdmi5eKI88kKgAAAAAAAAAAAAAAAAAAAHi+VJaW5wqlUnGhC4UkIrrxPP1W+CD64jD2MsA1u9p9uF+i2OvCyB6kzDMprGQHvrO9etQhAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAL/wcAAP//eBcqGw==") close(0xffffffffffffffff) mount$9p_fd(0x0, 0x0, 0x0, 0x121484b, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) tgkill(r1, r1, 0x39) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) 48.546754963s ago: executing program 7 (id=1289): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/target/core/rd_mcp_0/ramdisk_0\x00', 0x1ff) 48.368825987s ago: executing program 7 (id=1410): bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) connect$unix(r2, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) mmap(&(0x7f000099c000/0x2000)=nil, 0x2000, 0x1000000, 0x1010, 0xffffffffffffffff, 0x5efaa000) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 42.865913151s ago: executing program 7 (id=1443): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/target/core/rd_mcp_0/ramdisk_0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/target/core/rd_mcp_0/ramdisk_0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000b00)='rd_pages=8\n', 0xb) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/target/core/rd_mcp_0/ramdisk_0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000d00)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/target/usb_gadget/naa.1234567890123456\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0\x00', 0x1ff) symlinkat(&(0x7f0000001200)='./config/target/core/rd_mcp_0/ramdisk_0\x00', 0xffffffffffffff9c, &(0x7f0000001300)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0/d0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x1, 0x0) write(r2, &(0x7f0000001500)='1\n', 0x2) close(r2) 42.632998607s ago: executing program 7 (id=1449): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x200000, &(0x7f0000000480)={[{@nombcache}, {@resuid}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@user_xattr}]}, 0x3, 0x480, &(0x7f0000000a40)="$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") r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x800007a1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 41.351837317s ago: executing program 7 (id=1457): setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x8}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8, 0x40, 0x4]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0, 0xdddd0000}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000002700)={0x2, 0x0, [{0x0, 0x13, &(0x7f0000000040)=""/19}, {0x100000, 0x35, &(0x7f00000026c0)=""/53}]}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000180)=0x1) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x4008af04, &(0x7f0000000300)) mknodat$loop(0xffffffffffffff9c, 0x0, 0xc000, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000140)=0x20100003b) 38.954882595s ago: executing program 7 (id=1472): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlinkat(&(0x7f0000000740)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) r0 = syz_open_dev$video(&(0x7f00000008c0), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4010565a, &(0x7f0000000900)={0x8000004}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4010565b, &(0x7f0000000940)={0x8000004}) close(r0) 38.087261007s ago: executing program 35 (id=1472): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlinkat(&(0x7f0000000740)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) r0 = syz_open_dev$video(&(0x7f00000008c0), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4010565a, &(0x7f0000000900)={0x8000004}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4010565b, &(0x7f0000000940)={0x8000004}) close(r0) 16.5046712s ago: executing program 0 (id=1580): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/target/core/rd_mcp_0/ramdisk_0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000b00)='rd_pag', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1/lun/lun_0\x00', 0x1ff) 16.156962539s ago: executing program 0 (id=1582): r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x50180, 0x0) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000b80), 0xc008, &(0x7f0000000280)={[{@metacopy_off}]}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$cgroup_ro(r1, &(0x7f0000000240)='cgroup.freeze\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071182a000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @cgroup_sock=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') lseek(r4, 0x2000, 0x0) 9.88392766s ago: executing program 0 (id=1615): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(0x0, 0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlinkat(&(0x7f0000000740)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000880)='dummy_udc.0\x00', 0xc) r1 = syz_open_dev$video(&(0x7f00000008c0), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4010565a, &(0x7f0000000900)={0x8000004}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4010565b, &(0x7f0000000940)={0x8000004}) close(r1) 9.658753846s ago: executing program 0 (id=1618): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{0x0}, {&(0x7f0000000640)="18f2539a86f4267acf60e40dadcc211bb186706861b663e404ae5430d948a3deeb5982fbb1551c83edaad587e700949a9d32f5e7ab7cf7f52b86771efac9c04f3e30497f94e49127658062a15683e89b0aceb57d125d3b4ea3d1ad05f4e14c85034917bea1f128a1f6f3", 0x6a}, {&(0x7f0000000800)="1c98baccf3c4dda10bf3823360bf673a13af18c90ee53a5b0ab6833eee1edc56059d6fdcb3227e7e06079dc9725423d66f47694787ec855a7fa2310330b220642ee8afcbd20fd692957d850174c2a1e64e225bad95c1c5ca477757bb1d8b4785dd0cba2804aa", 0x66}], 0x3}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000ac0)="a19168e24152c670ecff4e0ee89533187a9206e8b223bed2e89af6709b054a05bafbd8bdb01fe87a3b63a17eff007ee93b40c121e355801159a45e36111175f8d8453960c864bdcf3826be3ffadaa7dba08508123324e0a45a93818ebf5c0fbac285cd0f399da8e4257170efbebf70", 0x6f}], 0x1}}], 0x2, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="91f8a9849519def2f8eb48d9173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000f38a6a4cb6b275ee91bd0196db0af38f2665cbbb4e66534143d02eac997657cf0a3df3cc8df5281ca813b255039632532f021a46b78fb7892513e4d3307f2dc6eca9986be03dfdd7dea5a59b3af0f59c39d0edaaf273933db78b8653e664f28ca6a3f8803662958348e8bef4a1370e5fc0c803eeb3e1154bab13b3", 0xbc}, {&(0x7f0000001000)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb604000000", 0xf7}, {&(0x7f0000000140)="641a6a2b863c080000003a3f97a834ebb75a925ab48c8442", 0x18}, {&(0x7f00000001c0)="985e44efeaab001cabcf3d8673c3a254a9a2d3197970cb347b70", 0x1a}], 0x4}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001e00)="03deba91c25995772ba981874cf3617e5a5f26d296be0bcb1ab619b901e1588b23e68431025b444671a918fd8ca862eb4494e52e10561f1dcac08771bcb099d2ac19ac81be56580fbf8a31fc043df05d4f9a1ca963f95a0dad514caf83c851eec544ac66993e0aa8aac7013f19af84202254eadfd12b56f2ebc32396500466e9f16d358dd5354ef69bb8caedf66a220372311a092a4f03a336f27222302c6364b738a58c3b8e99d1a40552dfad46ba27", 0xb0}], 0x1}}], 0x2, 0x4000900) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 7.777389622s ago: executing program 0 (id=1625): r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x50180, 0x0) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000b80), 0xc008, &(0x7f0000000280)={[{@metacopy_off}]}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$cgroup_ro(r1, &(0x7f0000000240)='cgroup.freeze\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071182a000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @cgroup_sock=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') lseek(r4, 0x2000, 0x0) 6.579433671s ago: executing program 3 (id=1631): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x40000c0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 4.95477873s ago: executing program 3 (id=1637): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000f80), &(0x7f0000000fc0)=0x4) 4.416928273s ago: executing program 3 (id=1639): unshare(0x6020400) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x40, &(0x7f0000000700)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x98}) 4.220730788s ago: executing program 6 (id=1643): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000280)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) syz_clone3(&(0x7f0000000340)={0xc6107700, &(0x7f00000000c0), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4.165885909s ago: executing program 5 (id=1644): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) 3.141590354s ago: executing program 5 (id=1646): socket$nl_rdma(0x10, 0x3, 0x14) socket$rxrpc(0x21, 0x2, 0xc) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, &(0x7f00000001c0)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x60044084) 3.137293214s ago: executing program 6 (id=1647): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x40000c0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 3.078328805s ago: executing program 3 (id=1649): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1001a, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@inlinecrypt}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nojournal_checksum}, {@jqfmt_vfsv1}]}, 0xff, 0x439, &(0x7f00000004c0)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) symlink(&(0x7f0000000240)='./file0\x00', &(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) 2.554632908s ago: executing program 5 (id=1650): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x2006}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f00000006c0)="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", 0x15a}], 0x1}}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000000000)="0085cd2f34", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000480)='=', 0x1}], 0x1}}], 0x3, 0x119e75c40277adee) 2.171975358s ago: executing program 6 (id=1651): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r0, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{0x0}, {&(0x7f0000000040)=""/35, 0x23}], 0x2}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x20001f, &(0x7f0000000040)={[{@jqfmt_vfsold}, {@noauto_da_alloc}, {@delalloc}]}, 0x3, 0x54f, &(0x7f0000000600)="$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") r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r1, &(0x7f00000000c0)='.\x00', 0x0) 2.009174112s ago: executing program 8 (id=1652): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002200)=ANY=[@ANYBLOB="120000002a0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000740)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r2, &(0x7f0000000ac0)="af9c6fa3bda784e5d48621278a8771f6e69484095730", 0x0}, 0x20) 1.998545462s ago: executing program 6 (id=1653): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a2a1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0007000024c1020000ff8807c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 1.841505516s ago: executing program 8 (id=1654): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlinkat(&(0x7f0000000740)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000880)='dummy_udc', 0x9) r1 = syz_open_dev$video(&(0x7f00000008c0), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4010565a, &(0x7f0000000900)={0x8000004}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4010565b, &(0x7f0000000940)={0x8000004}) close(r1) 1.65249777s ago: executing program 8 (id=1655): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x635d, 0x5, 0xffffffff, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r6, 0x3f}, 0x80, &(0x7f0000003340)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf7", 0x10}, {&(0x7f00000022c0)="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", 0x268}], 0x2}, 0x4000000) 1.581346902s ago: executing program 3 (id=1656): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) 1.500941644s ago: executing program 6 (id=1657): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$peekuser(0x3, 0x0, 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x1, 0x9, 0x0, 0x0, 0x1}]}, &(0x7f0000000100)='syzkaller\x00', 0x2}, 0x94) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, 0x0, 0xf21, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) socket$nl_generic(0x10, 0x3, 0x10) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740), 0x2, 0x5}}, 0x20) 1.24556879s ago: executing program 5 (id=1658): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000080)={0x24, @none={0x0, 0x3}}, 0x14) 1.23461918s ago: executing program 3 (id=1659): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, 0x0, 0x0) sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x1) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0x7d, &(0x7f00000000c0)={0x108, 0x0, 0x8206, 0x6, 0x44, 0x400004, 0x0, 0x8, r2}, &(0x7f0000000000)=0x20) 1.181056102s ago: executing program 8 (id=1660): socket$nl_rdma(0x10, 0x3, 0x14) socket$rxrpc(0x21, 0x2, 0xc) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, &(0x7f00000001c0)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x60044084) 400.994151ms ago: executing program 0 (id=1661): bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) connect$unix(r2, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f000099c000/0x2000)=nil, 0x2000, 0x1000000, 0x1010, r4, 0x5efaa000) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 387.035011ms ago: executing program 6 (id=1662): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffea}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0xfffffff7, 0xb47e, 0xb, 0x20000003, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000030}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 386.855581ms ago: executing program 5 (id=1663): unshare(0x2040400) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, 0x0, &(0x7f0000000000)) 249.138034ms ago: executing program 8 (id=1664): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlinkat(0x0, 0xffffffffffffff9c, &(0x7f00000007c0)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000880)='dummy_udc.0\x00', 0xc) r1 = syz_open_dev$video(&(0x7f00000008c0), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4010565a, &(0x7f0000000900)={0x8000004}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4010565b, &(0x7f0000000940)={0x8000004}) close(r1) 36.305839ms ago: executing program 5 (id=1665): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlinkat(&(0x7f0000000740)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000880)='dummy_udc.0', 0xb) r1 = syz_open_dev$video(&(0x7f00000008c0), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4010565a, &(0x7f0000000900)={0x8000004}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4010565b, &(0x7f0000000940)={0x8000004}) close(r1) 0s ago: executing program 8 (id=1666): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) r5 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) kernel console output (not intermixed with test programs): ee_read_buf_block+0x1db/0x2d0" at daddr 0x14 len 4 error 74 [ 194.918269][ T5991] tipc: Disabling bearer [ 194.928130][ T5929] XFS (loop5): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1540/0x1b30 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 194.988447][ T5929] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 195.074764][ T5166] XFS (loop5): Unmounting Filesystem [ 196.243960][ T6030] udc-core: couldn't find an available UDC or it's busy [ 198.001328][ T4337] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.181937][ T4337] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.327158][ T4337] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.441560][ T4337] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.725225][ T6060] chnl_net:caif_netlink_parms(): no params data found [ 198.936822][ T6060] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.982685][ T6060] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.104697][ T6060] device bridge_slave_0 entered promiscuous mode [ 199.148656][ T6060] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.192932][ T6060] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.235983][ T6060] device bridge_slave_1 entered promiscuous mode [ 199.399875][ T6060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.473600][ T6060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.741386][ T6060] team0: Port device team_slave_0 added [ 199.753675][ T6060] team0: Port device team_slave_1 added [ 199.842270][ T6060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.855389][ T6060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.925423][ T6060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.982983][ T6060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.990155][ T6060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.052670][ T6060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.175292][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 200.203642][ T6060] device hsr_slave_0 entered promiscuous mode [ 200.255583][ T6060] device hsr_slave_1 entered promiscuous mode [ 200.295229][ T6060] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.302839][ T6060] Cannot create hsr debugfs directory [ 201.237027][ T6107] fuse: Bad value for 'fd' [ 201.394818][ T6118] udc-core: couldn't find an available UDC or it's busy [ 201.553990][ T6060] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 201.606287][ T6060] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 201.650705][ T6100] chnl_net:caif_netlink_parms(): no params data found [ 201.703675][ T6060] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 201.744994][ T4337] device hsr_slave_0 left promiscuous mode [ 201.774784][ T4337] device hsr_slave_1 left promiscuous mode [ 201.784207][ T4337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.810053][ T4337] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.828354][ T4337] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.868339][ T4337] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.879742][ T4337] device bridge_slave_1 left promiscuous mode [ 201.890057][ T4337] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.903217][ T4337] device bridge_slave_0 left promiscuous mode [ 201.913207][ T4337] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.930295][ T4337] device veth1_macvtap left promiscuous mode [ 201.943260][ T4337] device veth0_macvtap left promiscuous mode [ 201.951984][ T4337] device veth1_vlan left promiscuous mode [ 201.966608][ T4337] device veth0_vlan left promiscuous mode [ 202.255301][ T4229] Bluetooth: hci0: command 0x041b tx timeout [ 202.282129][ T4337] team0 (unregistering): Port device team_slave_1 removed [ 202.312548][ T4337] team0 (unregistering): Port device team_slave_0 removed [ 202.329774][ T4337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.353350][ T4337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.482736][ T4337] bond0 (unregistering): Released all slaves [ 202.628101][ T6060] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 202.929288][ T6100] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.953887][ T6100] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.969990][ T6100] device bridge_slave_0 entered promiscuous mode [ 203.035738][ T6100] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.045571][ T4261] Bluetooth: hci4: command 0x0409 tx timeout [ 203.081976][ T6100] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.118303][ T6100] device bridge_slave_1 entered promiscuous mode [ 203.169150][ T6060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.251994][ T5805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 203.264289][ T5805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 203.280087][ T6060] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.306326][ T6100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.346599][ T5805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 203.365015][ T5805] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 203.392699][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.399843][ T5805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.455060][ T6100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.478169][ T5805] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 203.522738][ T5805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 203.554523][ T5805] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 203.603250][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.610401][ T5805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.682677][ T5805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 203.751432][ T5805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 203.766140][ T5805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 203.818365][ T5805] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 203.866079][ T5805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 203.915459][ T5805] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 203.929730][ T5805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 203.986264][ T5805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 204.010606][ T6060] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 204.054154][ T6060] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 204.108035][ T5805] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 204.140322][ T5805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 204.163484][ T5805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 204.202493][ T6100] team0: Port device team_slave_0 added [ 204.237815][ T6100] team0: Port device team_slave_1 added [ 204.325430][ T1108] Bluetooth: hci0: command 0x040f tx timeout [ 204.362435][ T6100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.442268][ T6100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.565255][ T6100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.610163][ T6100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.661639][ T6100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.802129][ T6100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.950347][ T5805] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 204.977016][ T5805] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 204.988967][ T6060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.028917][ T6100] device hsr_slave_0 entered promiscuous mode [ 205.122354][ T6100] device hsr_slave_1 entered promiscuous mode [ 205.128724][ T4229] Bluetooth: hci4: command 0x041b tx timeout [ 205.179766][ T6100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.199566][ T6100] Cannot create hsr debugfs directory [ 205.718803][ T6100] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.917956][ T6100] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.012513][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 206.039278][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 206.094163][ T6100] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.192990][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 206.205871][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 206.255102][ T6060] device veth0_vlan entered promiscuous mode [ 206.292750][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 206.309482][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 206.358071][ T6060] device veth1_vlan entered promiscuous mode [ 206.394338][ T6100] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.415336][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 206.517728][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 206.553379][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 206.583413][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 206.627316][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 206.682849][ T6060] device veth0_macvtap entered promiscuous mode [ 206.722508][ T6060] device veth1_macvtap entered promiscuous mode [ 206.839398][ T6060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.881171][ T6060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.933380][ T6060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.969905][ T6060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.026848][ T6060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.078271][ T6060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.146657][ T6060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.161792][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 207.190810][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 207.205511][ T4229] Bluetooth: hci4: command 0x040f tx timeout [ 207.228493][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 207.292319][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 207.317137][ T6060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.352475][ T6060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.385155][ T6060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.421891][ T6060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.453509][ T6060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.464365][ T6060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.496603][ T6060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.516854][ T6100] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 207.550441][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 207.566381][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 207.598625][ T6100] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 207.619740][ T6060] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.646253][ T6060] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.654997][ T6060] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.705239][ T6060] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.745139][ T6100] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 207.801415][ T6100] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 208.017342][ T5805] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.036043][ T5805] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.045737][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 208.160800][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.176761][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.955831][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 208.979155][ T6100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.074078][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 209.085049][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 209.185157][ T6100] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.287449][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 209.296378][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 209.317498][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 209.388952][ T3052] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.396088][ T3052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.475997][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 209.499492][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 209.545361][ T3052] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.552469][ T3052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.604924][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 209.642887][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 209.732551][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 209.746251][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 209.842423][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 209.866061][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 209.911575][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 209.946752][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 209.993728][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 210.029069][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 210.075841][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 210.114742][ T6100] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 210.155790][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 210.535221][ T6219] loop6: detected capacity change from 0 to 32768 [ 210.843638][ T6100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.858955][ T6219] XFS (loop6): Mounting V5 Filesystem [ 210.924029][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 210.947224][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 210.957721][ T4337] tipc: Left network mode [ 211.199462][ T6219] XFS (loop6): Ending clean mount [ 211.396377][ T6219] XFS (loop6): Metadata CRC error detected at xfs_rmapbt_read_verify+0x3a/0xd0, xfs_rmapbt block 0x14 [ 211.437915][ T6219] XFS (loop6): Unmount and run xfs_repair [ 211.443723][ T6219] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 211.501903][ T6219] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 211.525984][ T6219] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 211.548298][ T6219] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 211.567840][ T6219] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 211.599569][ T6219] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 211.689577][ T6219] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 211.744720][ T6219] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 211.788571][ T6219] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 211.813596][ T6219] XFS (loop6): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x14 len 4 error 74 [ 211.855563][ T6219] XFS (loop6): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1540/0x1b30 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 211.912804][ T6219] XFS (loop6): Please unmount the filesystem and rectify the problem(s) [ 212.951806][ T6060] XFS (loop6): Unmounting Filesystem [ 213.138471][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 213.157787][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 213.203020][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 213.233997][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 213.265664][ T6100] device veth0_vlan entered promiscuous mode [ 213.274818][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 213.297441][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 213.332643][ T6100] device veth1_vlan entered promiscuous mode [ 213.475390][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 213.484692][ T6286] loop0: detected capacity change from 0 to 512 [ 213.510329][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 213.565898][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 213.582644][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 213.593318][ T6100] device veth0_macvtap entered promiscuous mode [ 213.640178][ T6286] EXT4-fs (loop0): Test dummy encryption mode enabled [ 214.953460][ T6286] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.448: inode has both inline data and extents flags [ 214.982447][ T6100] device veth1_macvtap entered promiscuous mode [ 214.993640][ T6286] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.448: couldn't read orphan inode 15 (err -117) [ 215.010546][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 215.034044][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 215.053678][ T6100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.071821][ T6100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.082419][ T6100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.100038][ T6100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.111404][ T6100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.128779][ T6100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.145645][ T6100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.163874][ T6100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.175604][ T6100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.185286][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 215.202997][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 215.217731][ T6100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.254285][ T6100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.280954][ T6100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.317727][ T6100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.335939][ T6100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.353714][ T6100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.366753][ T6100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.387056][ T6100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.403123][ T6100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.414754][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 215.430639][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 215.447687][ T6100] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.467381][ T6100] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.482828][ T6100] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.496856][ T6100] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.546947][ T5807] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.581039][ T5807] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.628512][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 216.674087][ T3052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.707540][ T3052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.777687][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 216.813667][ T6286] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 219.970536][ T4337] device hsr_slave_0 left promiscuous mode [ 220.959202][ T4337] device hsr_slave_1 left promiscuous mode [ 220.987614][ T4337] device veth1_macvtap left promiscuous mode [ 220.993715][ T4337] device veth0_macvtap left promiscuous mode [ 221.007095][ T4337] device veth1_vlan left promiscuous mode [ 221.012997][ T4337] device veth0_vlan left promiscuous mode [ 222.208068][ T4337] bond0 (unregistering): Released all slaves [ 222.514132][ T6368] udc-core: couldn't find an available UDC or it's busy [ 223.665715][ T6358] tipc: Started in network mode [ 223.670643][ T6358] tipc: Node identity 0a17705e26cd, cluster identity 4711 [ 223.722963][ T6358] tipc: Enabled bearer , priority 0 [ 223.752096][ T6359] tipc: Resetting bearer [ 223.807777][ T6349] tipc: Disabling bearer [ 224.974497][ T6398] device syzkaller0 entered promiscuous mode [ 225.017248][ T6398] tipc: Enabled bearer , priority 0 [ 225.084344][ T6397] tipc: Resetting bearer [ 225.122749][ T6397] tipc: Disabling bearer [ 225.460518][ T6410] se_dev->se_dev_ptr already set for storage object [ 225.828428][ T6407] chnl_net:caif_netlink_parms(): no params data found [ 226.084967][ T6407] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.134310][ T6407] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.166960][ T6407] device bridge_slave_0 entered promiscuous mode [ 226.207577][ T6407] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.252926][ T6407] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.283169][ T6407] device bridge_slave_1 entered promiscuous mode [ 226.392372][ T6407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.427832][ T6407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.544921][ T6407] team0: Port device team_slave_0 added [ 226.583047][ T6407] team0: Port device team_slave_1 added [ 226.692627][ T6407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.724231][ T6407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.816207][ T6429] fuse: Bad value for 'fd' [ 226.855115][ T6407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.911001][ T6407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.955108][ T6407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.958820][ T6435] udc-core: couldn't find an available UDC or it's busy [ 227.035135][ T6407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.158899][ T6407] device hsr_slave_0 entered promiscuous mode [ 227.202885][ T6407] device hsr_slave_1 entered promiscuous mode [ 227.226090][ T6407] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.233707][ T6407] Cannot create hsr debugfs directory [ 227.405391][ T6419] loop3: detected capacity change from 0 to 32768 [ 227.447850][ T5366] Bluetooth: hci4: command 0x0409 tx timeout [ 227.737723][ T6419] XFS (loop3): Mounting V5 Filesystem [ 227.947322][ T6407] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.118592][ T6407] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.157046][ T6450] tipc: Enabled bearer , priority 0 [ 228.169272][ T6458] tipc: Resetting bearer [ 228.190999][ T6449] tipc: Disabling bearer [ 228.221963][ T6407] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.329132][ T6407] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.378542][ T6419] XFS (loop3): Ending clean mount [ 228.448897][ T6469] fuse: Bad value for 'fd' [ 228.511415][ T6467] device syzkaller0 entered promiscuous mode [ 228.578094][ T6467] tipc: Enabled bearer , priority 0 [ 228.633933][ T6466] tipc: Resetting bearer [ 228.665715][ T6419] XFS (loop3): Metadata CRC error detected at xfs_rmapbt_read_verify+0x3a/0xd0, xfs_rmapbt block 0x14 [ 228.716032][ T6419] XFS (loop3): Unmount and run xfs_repair [ 228.723477][ T6466] tipc: Disabling bearer [ 228.747474][ T6419] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 228.774435][ T6419] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 228.800030][ T6419] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 228.862131][ T6419] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 228.865459][ T6407] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 228.926866][ T6419] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 228.946523][ T6407] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 228.966875][ T6419] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 229.015968][ T6407] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 229.025620][ T6419] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 229.036495][ T6489] udc-core: couldn't find an available UDC or it's busy [ 229.068720][ T6419] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 229.086643][ T6407] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 229.116539][ T6419] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 229.161762][ T6419] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x14 len 4 error 74 [ 229.395697][ T6407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.405303][ T6419] XFS (loop3): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1540/0x1b30 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 229.479419][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 229.516012][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 229.525549][ T4229] Bluetooth: hci4: command 0x041b tx timeout [ 229.987939][ T6407] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.399348][ T5807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 230.422447][ T5807] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.451777][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.458941][ T5807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.580023][ T6512] loop0: detected capacity change from 0 to 512 [ 230.595231][ T6419] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 230.608565][ T5807] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 230.660706][ T6512] EXT4-fs (loop0): Test dummy encryption mode enabled [ 230.680519][ T5807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 230.700841][ T4995] XFS (loop3): Unmounting Filesystem [ 230.722417][ T6512] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.497: inode has both inline data and extents flags [ 230.727789][ T5807] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 230.763826][ T6512] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.497: couldn't read orphan inode 15 (err -117) [ 230.790241][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.797409][ T5807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.814372][ T6512] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 230.849016][ T5807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 230.916494][ T5807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 230.997949][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 231.026897][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 231.063217][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 231.072233][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 231.138601][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 231.203018][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 231.217078][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 231.226570][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 231.235355][ T3052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 231.246204][ T6407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 231.625220][ T4229] Bluetooth: hci4: command 0x040f tx timeout [ 231.675307][ T6542] tipc: Enabled bearer , priority 0 [ 231.683499][ T6545] udc-core: couldn't find an available UDC or it's busy [ 231.698958][ T6542] tipc: Resetting bearer [ 231.734782][ T6540] tipc: Disabling bearer [ 231.823212][ T6407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.032453][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 232.061179][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 232.676726][ T144] device hsr_slave_0 left promiscuous mode [ 232.683301][ T144] device hsr_slave_1 left promiscuous mode [ 232.807427][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.814978][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.832619][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.840446][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.855750][ T144] device bridge_slave_1 left promiscuous mode [ 232.861986][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.880708][ T144] device bridge_slave_0 left promiscuous mode [ 232.903799][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.940785][ T144] device veth1_macvtap left promiscuous mode [ 232.953506][ T144] device veth0_macvtap left promiscuous mode [ 232.961582][ T144] device veth1_vlan left promiscuous mode [ 232.978528][ T144] device veth0_vlan left promiscuous mode [ 233.024021][ T6582] loop6: detected capacity change from 0 to 512 [ 233.102522][ T6582] EXT4-fs (loop6): Test dummy encryption mode enabled [ 233.203657][ T6582] EXT4-fs error (device loop6): ext4_orphan_get:1406: inode #15: comm syz.6.518: inode has both inline data and extents flags [ 233.219881][ T6562] loop3: detected capacity change from 0 to 32768 [ 233.367525][ T6582] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.518: couldn't read orphan inode 15 (err -117) [ 233.450153][ T6582] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 233.590007][ T6582] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 233.664044][ T144] team0 (unregistering): Port device team_slave_1 removed [ 233.685785][ T4261] Bluetooth: hci4: command 0x0419 tx timeout [ 233.746402][ T144] team0 (unregistering): Port device team_slave_0 removed [ 233.813556][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.841853][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.986921][ T144] bond0 (unregistering): Released all slaves [ 235.070746][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 235.096960][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 235.155022][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 235.164006][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 235.197740][ T6597] udc-core: couldn't find an available UDC or it's busy [ 235.268094][ T6407] device veth0_vlan entered promiscuous mode [ 235.276809][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 235.299075][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 235.343358][ T6407] device veth1_vlan entered promiscuous mode [ 235.513795][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 235.529736][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 235.597351][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 235.626063][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 235.650279][ T6407] device veth0_macvtap entered promiscuous mode [ 235.710894][ T6407] device veth1_macvtap entered promiscuous mode [ 235.753637][ T6602] device syzkaller0 entered promiscuous mode [ 235.814211][ T6407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.875172][ T6407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.908053][ T6407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.935114][ T6407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.955181][ T6407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.983641][ T6407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.013914][ T6407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.037839][ T6407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.093754][ T6407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.124777][ T6407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.161394][ T6407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.195180][ T6407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.225897][ T6407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.245188][ T6407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.265998][ T6407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.334535][ T6407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.352755][ T6407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.366839][ T6407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.374283][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 236.390431][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 236.402362][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 236.422094][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 236.434341][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 236.446860][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 236.563004][ T6407] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.578648][ T6407] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.592756][ T6407] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.605241][ T6407] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.197078][ T4290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.209853][ T6660] udc-core: couldn't find an available UDC or it's busy [ 237.231714][ T4290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.265635][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 237.348706][ T4241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.369496][ T4241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.456861][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 237.506706][ T6640] loop3: detected capacity change from 0 to 32768 [ 238.973148][ T6684] tipc: Enabled bearer , priority 0 [ 238.987719][ T6684] tipc: Resetting bearer [ 239.955730][ T6682] tipc: Disabling bearer [ 239.985488][ T6704] loop5: detected capacity change from 0 to 512 [ 240.042908][ T6704] EXT4-fs (loop5): Test dummy encryption mode enabled [ 240.050622][ T6705] tipc: Enabling of bearer rejected, failed to enable media [ 240.116340][ T6704] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.546: inode has both inline data and extents flags [ 240.135591][ T6704] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.546: couldn't read orphan inode 15 (err -117) [ 240.176823][ T6704] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 240.310597][ T6716] udc-core: couldn't find an available UDC or it's busy [ 240.339169][ T6704] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 240.691783][ T6728] fuse: Bad value for 'fd' [ 243.132676][ T6806] udc-core: couldn't find an available UDC or it's busy [ 244.185944][ T6812] device syzkaller0 entered promiscuous mode [ 244.270733][ T6812] tipc: Started in network mode [ 244.302903][ T6812] tipc: Node identity 1a4a995526a5, cluster identity 4711 [ 244.331348][ T6812] tipc: Enabled bearer , priority 0 [ 244.382152][ T6813] tipc: Resetting bearer [ 244.981151][ T6811] tipc: Resetting bearer [ 245.080373][ T6811] tipc: Disabling bearer [ 245.102351][ T6822] fuse: Bad value for 'fd' [ 245.224418][ T6832] loop6: detected capacity change from 0 to 512 [ 245.250988][ T6833] tipc: Enabling of bearer rejected, failed to enable media [ 245.318813][ T6832] EXT4-fs (loop6): Test dummy encryption mode enabled [ 245.358241][ T6842] udc-core: couldn't find an available UDC or it's busy [ 245.381597][ T6832] EXT4-fs error (device loop6): ext4_orphan_get:1406: inode #15: comm syz.6.569: inode has both inline data and extents flags [ 245.404367][ T6832] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.569: couldn't read orphan inode 15 (err -117) [ 245.417215][ T6832] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 245.998929][ T6846] loop5: detected capacity change from 0 to 32768 [ 246.171215][ T6846] XFS (loop5): Mounting V5 Filesystem [ 246.267243][ T6846] XFS (loop5): Ending clean mount [ 246.431987][ T6648] XFS (loop5): Metadata CRC error detected at xfs_rmapbt_read_verify+0x3a/0xd0, xfs_rmapbt block 0x14 [ 246.447236][ T6648] XFS (loop5): Unmount and run xfs_repair [ 246.453019][ T6648] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 246.471265][ T6648] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 246.482914][ T6648] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 246.495790][ T6648] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 246.504876][ T6648] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 246.518922][ T6648] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 246.529564][ T6648] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 246.543686][ T6648] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 246.555093][ T6648] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 246.564177][ T6846] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x14 len 4 error 74 [ 246.592513][ T6846] XFS (loop5): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1540/0x1b30 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 246.615020][ T6846] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 246.979680][ T6407] XFS (loop5): Unmounting Filesystem [ 247.445136][ T4229] Bluetooth: hci3: command 0x0406 tx timeout [ 247.984362][ T6864] fuse: Bad value for 'fd' [ 248.195027][ T6875] tipc: Enabling of bearer rejected, failed to enable media [ 249.165864][ T6886] udc-core: couldn't find an available UDC or it's busy [ 249.312684][ T6892] loop6: detected capacity change from 0 to 512 [ 249.361892][ T6892] EXT4-fs (loop6): Test dummy encryption mode enabled [ 249.417288][ T6894] tipc: Enabled bearer , priority 0 [ 249.448213][ T6893] tipc: Disabling bearer [ 249.462110][ T6892] EXT4-fs error (device loop6): ext4_orphan_get:1406: inode #15: comm syz.6.588: inode has both inline data and extents flags [ 249.475595][ T6892] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.588: couldn't read orphan inode 15 (err -117) [ 249.487951][ T6892] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 249.877560][ T6897] loop5: detected capacity change from 0 to 32768 [ 250.020850][ T6897] XFS (loop5): Mounting V5 Filesystem [ 250.097318][ T6897] XFS (loop5): Ending clean mount [ 250.371768][ T21] XFS (loop5): Metadata CRC error detected at xfs_rmapbt_read_verify+0x3a/0xd0, xfs_rmapbt block 0x14 [ 250.393721][ T21] XFS (loop5): Unmount and run xfs_repair [ 250.408403][ T21] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 250.441853][ T21] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 250.501085][ T6925] tipc: Enabling of bearer rejected, failed to enable media [ 250.525446][ T21] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 250.571335][ T21] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 250.610392][ T21] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 250.624503][ T21] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 250.635219][ T21] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 251.958234][ T21] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 251.977700][ T21] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 251.987053][ T6897] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x14 len 4 error 74 [ 252.954442][ T6897] XFS (loop5): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1540/0x1b30 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 252.974226][ T6897] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 253.061167][ T6407] XFS (loop5): Unmounting Filesystem [ 253.594920][ T6947] tipc: Enabled bearer , priority 0 [ 253.615269][ T6945] tipc: Disabling bearer [ 253.752552][ T6952] udc-core: couldn't find an available UDC or it's busy [ 254.038628][ T6956] device syzkaller0 entered promiscuous mode [ 254.051911][ T6956] tipc: Enabled bearer , priority 0 [ 254.070020][ T6956] tipc: Resetting bearer [ 254.078471][ T6955] tipc: Resetting bearer [ 254.141095][ T6955] tipc: Disabling bearer [ 254.423207][ T6957] loop5: detected capacity change from 0 to 32768 [ 254.919167][ T6957] XFS (loop5): Mounting V5 Filesystem [ 255.082379][ T6957] XFS (loop5): Ending clean mount [ 255.314872][ T6648] XFS (loop5): Metadata CRC error detected at xfs_rmapbt_read_verify+0x3a/0xd0, xfs_rmapbt block 0x14 [ 255.353792][ T6648] XFS (loop5): Unmount and run xfs_repair [ 255.380515][ T6648] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 255.410904][ T6648] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 255.439787][ T6648] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 255.460148][ T6648] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 255.482205][ T6648] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 255.496101][ T6648] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 255.510128][ T6648] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 255.520624][ T6648] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 255.535233][ T6648] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 255.544328][ T6957] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x14 len 4 error 74 [ 255.606252][ T6957] XFS (loop5): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1540/0x1b30 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 255.630825][ T6957] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 255.664224][ T6407] XFS (loop5): Unmounting Filesystem [ 255.956551][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.962947][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.043989][ T6993] udc-core: couldn't find an available UDC or it's busy [ 256.286704][ T6997] loop6: detected capacity change from 0 to 512 [ 256.363712][ T6999] tipc: Enabled bearer , priority 0 [ 256.737733][ T6998] tipc: Disabling bearer [ 256.766110][ T6997] EXT4-fs (loop6): Test dummy encryption mode enabled [ 256.851628][ T6997] EXT4-fs error (device loop6): ext4_orphan_get:1406: inode #15: comm syz.6.622: inode has both inline data and extents flags [ 256.948764][ T6997] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.622: couldn't read orphan inode 15 (err -117) [ 256.982903][ T6997] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 259.707398][ T7044] tipc: Enabled bearer , priority 0 [ 259.731669][ T7044] tipc: Resetting bearer [ 259.757442][ T7043] tipc: Disabling bearer [ 259.863547][ T7049] tipc: Enabling of bearer rejected, failed to enable media [ 260.041086][ T7032] loop5: detected capacity change from 0 to 32768 [ 260.366974][ T7032] XFS (loop5): Mounting V5 Filesystem [ 260.857603][ T7032] XFS (loop5): Ending clean mount [ 261.104826][ T1326] XFS (loop5): Metadata CRC error detected at xfs_rmapbt_read_verify+0x3a/0xd0, xfs_rmapbt block 0x14 [ 261.140865][ T1326] XFS (loop5): Unmount and run xfs_repair [ 261.164882][ T1326] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 261.360742][ T7081] udc-core: couldn't find an available UDC or it's busy [ 261.379428][ T1326] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 261.406285][ T1326] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 261.740395][ T1326] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 261.768348][ T1326] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 261.796362][ T1326] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 261.824508][ T1326] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 261.852428][ T1326] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 261.880391][ T1326] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 261.908320][ T7032] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x14 len 4 error 74 [ 261.933119][ T7032] XFS (loop5): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1540/0x1b30 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 261.956927][ T7032] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 262.002465][ T6407] XFS (loop5): Unmounting Filesystem [ 262.018519][ T7092] tipc: Enabled bearer , priority 0 [ 262.062249][ T7092] tipc: Resetting bearer [ 262.087206][ T7091] tipc: Disabling bearer [ 262.210000][ T7100] tipc: Enabling of bearer rejected, failed to enable media [ 262.542362][ T7115] udc-core: couldn't find an available UDC or it's busy [ 265.218399][ T7132] loop6: detected capacity change from 0 to 512 [ 265.394288][ T7132] EXT4-fs (loop6): Test dummy encryption mode enabled [ 265.472445][ T7132] EXT4-fs error (device loop6): ext4_orphan_get:1406: inode #15: comm syz.6.660: inode has both inline data and extents flags [ 265.496224][ T7132] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.660: couldn't read orphan inode 15 (err -117) [ 265.517291][ T7141] tipc: Enabled bearer , priority 0 [ 265.527115][ T7141] tipc: Resetting bearer [ 265.532918][ T7132] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 265.564528][ T7140] tipc: Disabling bearer [ 266.090740][ T7161] udc-core: couldn't find an available UDC or it's busy [ 266.128473][ T7162] udc-core: couldn't find an available UDC or it's busy [ 266.194479][ T7164] tipc: Enabled bearer , priority 0 [ 266.229491][ T7163] tipc: Disabling bearer [ 267.102309][ T7173] tipc: Enabled bearer , priority 0 [ 267.207402][ T7174] tipc: Resetting bearer [ 267.256571][ T7172] tipc: Disabling bearer [ 267.338627][ T7179] loop6: detected capacity change from 0 to 512 [ 267.377294][ T7179] EXT4-fs (loop6): Test dummy encryption mode enabled [ 267.413045][ T7179] EXT4-fs error (device loop6): ext4_orphan_get:1406: inode #15: comm syz.6.677: inode has both inline data and extents flags [ 267.521071][ T7179] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.677: couldn't read orphan inode 15 (err -117) [ 267.555566][ T7179] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 267.816995][ T7196] udc-core: couldn't find an available UDC or it's busy [ 268.168053][ T7200] tipc: Enabled bearer , priority 0 [ 268.217151][ T7198] tipc: Disabling bearer [ 268.217822][ T7203] udc-core: couldn't find an available UDC or it's busy [ 268.600443][ T7191] loop5: detected capacity change from 0 to 32768 [ 269.983972][ T7191] XFS (loop5): Mounting V5 Filesystem [ 270.922738][ T7191] XFS (loop5): log mount failed [ 271.234947][ T7229] loop3: detected capacity change from 0 to 512 [ 271.358440][ T7235] tipc: Enabled bearer , priority 0 [ 271.373735][ T7236] udc-core: couldn't find an available UDC or it's busy [ 271.391542][ T7229] EXT4-fs (loop3): Test dummy encryption mode enabled [ 271.400188][ T7235] tipc: Resetting bearer [ 271.450177][ T7234] tipc: Disabling bearer [ 271.459282][ T7229] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.694: inode has both inline data and extents flags [ 271.565659][ T7229] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.694: couldn't read orphan inode 15 (err -117) [ 271.671360][ T7229] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 271.706376][ T7246] udc-core: couldn't find an available UDC or it's busy [ 271.766633][ T7229] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 271.849268][ T7248] tipc: Enabled bearer , priority 0 [ 271.958760][ T7247] tipc: Disabling bearer [ 272.844616][ T7266] fuse: Bad value for 'fd' [ 273.640178][ T7268] loop6: detected capacity change from 0 to 32768 [ 273.731367][ T7268] XFS (loop6): Mounting V5 Filesystem [ 273.862243][ T7268] XFS (loop6): Ending clean mount [ 274.046589][ T21] XFS (loop6): Metadata CRC error detected at xfs_rmapbt_read_verify+0x3a/0xd0, xfs_rmapbt block 0x14 [ 274.069078][ T21] XFS (loop6): Unmount and run xfs_repair [ 274.093451][ T21] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 274.134824][ T21] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 274.154175][ T21] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 274.177130][ T21] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 274.201009][ T21] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 274.254993][ T21] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 274.282775][ T21] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 274.303773][ T7279] tipc: Enabled bearer , priority 0 [ 274.313925][ T21] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 274.327582][ T7279] tipc: Resetting bearer [ 274.333465][ T21] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 274.349104][ T7268] XFS (loop6): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x14 len 4 error 74 [ 274.369188][ T7278] tipc: Disabling bearer [ 274.382677][ T7268] XFS (loop6): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1540/0x1b30 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 274.408534][ T7268] XFS (loop6): Please unmount the filesystem and rectify the problem(s) [ 274.439210][ T6060] XFS (loop6): Unmounting Filesystem [ 274.770795][ T7286] udc-core: couldn't find an available UDC or it's busy [ 274.783038][ T7287] tipc: Enabled bearer , priority 0 [ 274.867960][ T7284] tipc: Disabling bearer [ 274.984166][ T7298] fuse: Bad value for 'fd' [ 275.091080][ T7302] loop5: detected capacity change from 0 to 1024 [ 275.176711][ T7302] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002] [ 275.193533][ T7302] System zones: 0-1, 3-12 [ 275.206142][ T7302] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_dev=0x0000000000000007,debug,nodioread_nolock,min_batch_time=0x0000000000000006,debug_want_extra_isize=0x0000000000000080,grpquota,nodelalloc,jqfmt=vfsv1,norecovery,,errors=continue. Quota mode: writeback. [ 275.299567][ T7302] EXT4-fs error (device loop5): ext4_search_dir:1549: inode #2: block 16: comm syz.5.719: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=21519, rec_len=0, size=1024 fake=0 [ 275.340037][ T7307] udc-core: couldn't find an available UDC or it's busy [ 275.358946][ T7302] EXT4-fs error (device loop5): ext4_search_dir:1549: inode #2: block 16: comm syz.5.719: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=21519, rec_len=0, size=1024 fake=0 [ 275.699683][ T7323] loop6: detected capacity change from 0 to 512 [ 275.770728][ T7323] EXT4-fs (loop6): Test dummy encryption mode enabled [ 275.841175][ T7323] EXT4-fs error (device loop6): ext4_orphan_get:1406: inode #15: comm syz.6.724: inode has both inline data and extents flags [ 275.891440][ T7323] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.724: couldn't read orphan inode 15 (err -117) [ 275.916563][ T7323] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 277.208308][ T7337] udc-core: couldn't find an available UDC or it's busy [ 277.966566][ T7315] tipc: Enabling of bearer rejected, failed to enable media [ 278.688890][ T7353] fuse: Bad value for 'fd' [ 278.744871][ T7355] loop0: detected capacity change from 0 to 1024 [ 278.885606][ T7355] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002] [ 278.914032][ T7355] System zones: 0-1, 3-12 [ 278.926986][ T7367] udc-core: couldn't find an available UDC or it's busy [ 278.966210][ T7355] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_dev=0x0000000000000007,debug,nodioread_nolock,min_batch_time=0x0000000000000006,debug_want_extra_isize=0x0000000000000080,grpquota,nodelalloc,jqfmt=vfsv1,norecovery,,errors=continue. Quota mode: writeback. [ 279.173273][ T7381] udc-core: couldn't find an available UDC or it's busy [ 279.182344][ T7355] EXT4-fs error (device loop0): ext4_search_dir:1549: inode #2: block 16: comm syz.0.732: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=21519, rec_len=0, size=1024 fake=0 [ 279.234032][ T7384] tipc: Enabling of bearer rejected, failed to enable media [ 279.272721][ T7355] EXT4-fs error (device loop0): ext4_search_dir:1549: inode #2: block 16: comm syz.0.732: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=21519, rec_len=0, size=1024 fake=0 [ 279.876024][ T7392] tipc: Enabled bearer , priority 0 [ 279.946137][ T7392] tipc: Resetting bearer [ 280.011676][ T7391] tipc: Disabling bearer [ 280.528782][ T7408] udc-core: couldn't find an available UDC or it's busy [ 280.816776][ T7414] tipc: Enabling of bearer rejected, failed to enable media [ 281.604156][ T7432] tipc: Enabled bearer , priority 0 [ 281.764010][ T7432] tipc: Resetting bearer [ 281.831316][ T7431] tipc: Disabling bearer [ 282.150820][ T7453] udc-core: couldn't find an available UDC or it's busy [ 282.289527][ T7462] loop6: detected capacity change from 0 to 512 [ 282.458081][ T7462] EXT4-fs (loop6): Test dummy encryption mode enabled [ 283.949833][ T7457] tipc: Enabling of bearer rejected, failed to enable media [ 283.982692][ T7462] EXT4-fs error (device loop6): ext4_orphan_get:1406: inode #15: comm syz.6.765: inode has both inline data and extents flags [ 284.760635][ T7462] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.765: couldn't read orphan inode 15 (err -117) [ 284.840044][ T7462] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 285.660921][ T7480] loop5: detected capacity change from 0 to 32768 [ 286.156080][ T7480] XFS (loop5): Mounting V5 Filesystem [ 286.252906][ T7480] XFS (loop5): Ending clean mount [ 286.974361][ T7543] tipc: Enabling of bearer rejected, failed to enable media [ 288.142930][ T6648] XFS (loop5): Metadata CRC error detected at xfs_rmapbt_read_verify+0x3a/0xd0, xfs_rmapbt block 0x14 [ 288.181964][ T6648] XFS (loop5): Unmount and run xfs_repair [ 288.219483][ T6648] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 288.247874][ T6648] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 288.271502][ T6648] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 288.300679][ T6648] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 288.346197][ T6648] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 288.384310][ T6648] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 288.403752][ T6648] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 288.428863][ T6648] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 288.446677][ T7561] udc-core: couldn't find an available UDC or it's busy [ 288.454905][ T6648] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 288.471559][ T7480] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x14 len 4 error 74 [ 288.501270][ T7480] XFS (loop5): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1540/0x1b30 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 288.523447][ T7480] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 288.558619][ T6407] XFS (loop5): Unmounting Filesystem [ 288.914616][ T7569] loop6: detected capacity change from 0 to 512 [ 288.962004][ T7569] EXT4-fs (loop6): Test dummy encryption mode enabled [ 288.992637][ T7569] EXT4-fs error (device loop6): ext4_orphan_get:1406: inode #15: comm syz.6.792: inode has both inline data and extents flags [ 289.011773][ T7569] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.792: couldn't read orphan inode 15 (err -117) [ 289.024231][ T7569] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 290.916382][ T7601] udc-core: couldn't find an available UDC or it's busy [ 291.309613][ T7615] udc-core: couldn't find an available UDC or it's busy [ 291.969959][ T7605] loop6: detected capacity change from 0 to 32768 [ 292.138357][ T7605] XFS (loop6): Mounting V5 Filesystem [ 292.164603][ T7643] udc-core: couldn't find an available UDC or it's busy [ 292.248084][ T7605] XFS (loop6): Ending clean mount [ 292.623523][ T1108] XFS (loop6): Metadata CRC error detected at xfs_rmapbt_read_verify+0x3a/0xd0, xfs_rmapbt block 0x14 [ 292.651740][ T1108] XFS (loop6): Unmount and run xfs_repair [ 292.667357][ T1108] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 292.718803][ T7670] udc-core: couldn't find an available UDC or it's busy [ 292.736536][ T1108] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 292.769392][ T1108] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 292.809919][ T1108] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 292.863600][ T1108] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 292.876656][ T1108] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 292.891817][ T1108] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 292.901311][ T1108] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 292.916293][ T1108] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 292.930089][ T7605] XFS (loop6): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x14 len 4 error 74 [ 292.984761][ T7605] XFS (loop6): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1540/0x1b30 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 293.028765][ T7605] XFS (loop6): Please unmount the filesystem and rectify the problem(s) [ 293.132416][ T6060] XFS (loop6): Unmounting Filesystem [ 294.842439][ T7704] udc-core: couldn't find an available UDC or it's busy [ 295.096753][ T7716] udc-core: couldn't find an available UDC or it's busy [ 296.159263][ T7752] udc-core: couldn't find an available UDC or it's busy [ 296.190085][ T7723] loop6: detected capacity change from 0 to 32768 [ 296.293992][ T7723] XFS (loop6): Mounting V5 Filesystem [ 296.540931][ T7723] XFS (loop6): Ending clean mount [ 296.937574][ T4261] XFS (loop6): Metadata CRC error detected at xfs_rmapbt_read_verify+0x3a/0xd0, xfs_rmapbt block 0x14 [ 296.991929][ T4261] XFS (loop6): Unmount and run xfs_repair [ 297.042406][ T4261] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 297.112320][ T4261] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 297.160846][ T4261] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 297.199824][ T4261] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 297.249495][ T4261] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 297.278106][ T4261] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 297.298418][ T7798] loop5: detected capacity change from 0 to 512 [ 297.304773][ T4261] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 297.335400][ T7798] EXT4-fs (loop5): Test dummy encryption mode enabled [ 297.344903][ T4261] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 297.371386][ T4261] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 297.389528][ T7723] XFS (loop6): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x14 len 4 error 74 [ 297.408589][ T7723] XFS (loop6): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1540/0x1b30 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 297.431086][ T7723] XFS (loop6): Please unmount the filesystem and rectify the problem(s) [ 297.441035][ T7798] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.842: inode has both inline data and extents flags [ 297.465711][ T7798] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.842: couldn't read orphan inode 15 (err -117) [ 297.503683][ T7798] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 297.525515][ T6060] XFS (loop6): Unmounting Filesystem [ 301.045527][ T7812] udc-core: couldn't find an available UDC or it's busy [ 301.289455][ T7839] tipc: Enabling of bearer rejected, failed to enable media [ 301.604866][ T7856] loop0: detected capacity change from 0 to 512 [ 301.757374][ T7856] EXT4-fs (loop0): Test dummy encryption mode enabled [ 301.836719][ T7856] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.856: inode has both inline data and extents flags [ 301.900532][ T7856] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.856: couldn't read orphan inode 15 (err -117) [ 301.963849][ T7856] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 303.370337][ T7850] loop3: detected capacity change from 0 to 32768 [ 303.456917][ T7880] udc-core: couldn't find an available UDC or it's busy [ 304.619402][ T7902] tipc: Enabling of bearer rejected, failed to enable media [ 305.317147][ T7924] tipc: Enabling of bearer rejected, failed to enable media [ 306.470224][ T7938] udc-core: couldn't find an available UDC or it's busy [ 307.088941][ T7967] se_dev->se_dev_ptr already set for storage object [ 307.422067][ T7983] se_dev->se_dev_ptr already set for storage object [ 307.616212][ T7988] udc-core: couldn't find an available UDC or it's busy [ 308.109457][ T8006] tipc: Enabling of bearer rejected, failed to enable media [ 308.156375][ T8015] se_dev->se_dev_ptr already set for storage object [ 308.210601][ T7971] loop3: detected capacity change from 0 to 32768 [ 308.412800][ T7971] XFS (loop3): Mounting V5 Filesystem [ 308.566699][ T8033] udc-core: couldn't find an available UDC or it's busy [ 308.782332][ T7971] XFS (loop3): Ending clean mount [ 308.980168][ T4189] XFS (loop3): Metadata CRC error detected at xfs_rmapbt_read_verify+0x3a/0xd0, xfs_rmapbt block 0x14 [ 309.018667][ T4189] XFS (loop3): Unmount and run xfs_repair [ 309.035241][ T4189] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 309.061502][ T4189] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 309.081641][ T4189] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 309.100875][ T4189] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 309.120472][ T4189] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 309.141726][ T4189] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 309.167552][ T4189] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 309.186802][ T4189] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 309.206248][ T4189] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 309.225203][ T7971] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x14 len 4 error 74 [ 309.268450][ T7971] XFS (loop3): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1540/0x1b30 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 309.331329][ T7971] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 309.336376][ T8057] se_dev->se_dev_ptr already set for storage object [ 309.412660][ T4995] XFS (loop3): Unmounting Filesystem [ 309.502253][ T8062] se_dev->se_dev_ptr already set for storage object [ 309.710963][ T8069] udc-core: couldn't find an available UDC or it's busy [ 310.045805][ T8080] se_dev->se_dev_ptr already set for storage object [ 310.142666][ T8085] fuse: Bad value for 'fd' [ 311.066578][ T8112] loop6: detected capacity change from 0 to 512 [ 311.105297][ T8112] EXT4-fs (loop6): Test dummy encryption mode enabled [ 311.136722][ T8112] EXT4-fs error (device loop6): ext4_orphan_get:1406: inode #15: comm syz.6.931: inode has both inline data and extents flags [ 311.156284][ T8112] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.931: couldn't read orphan inode 15 (err -117) [ 311.177599][ T8112] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 311.860159][ T8126] se_dev->se_dev_ptr already set for storage object [ 313.569527][ T8164] se_dev->se_dev_ptr already set for storage object [ 313.710405][ T8170] syz.0.948 uses obsolete (PF_INET,SOCK_PACKET) [ 313.750431][ T8172] loop5: detected capacity change from 0 to 512 [ 313.816484][ T8172] EXT4-fs (loop5): Test dummy encryption mode enabled [ 313.869416][ T8172] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.949: inode has both inline data and extents flags [ 313.909695][ T8172] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.949: couldn't read orphan inode 15 (err -117) [ 313.937648][ T8172] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 316.625311][ T8196] loop6: detected capacity change from 0 to 32768 [ 316.659519][ T8193] udc-core: couldn't find an available UDC or it's busy [ 316.746935][ T8196] XFS (loop6): Mounting V5 Filesystem [ 316.878010][ T8196] XFS (loop6): Ending clean mount [ 317.048081][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.054426][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.127175][ T1108] XFS (loop6): Metadata CRC error detected at xfs_rmapbt_read_verify+0x3a/0xd0, xfs_rmapbt block 0x14 [ 317.154424][ T1108] XFS (loop6): Unmount and run xfs_repair [ 317.174578][ T1108] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 317.198667][ T1108] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 317.240598][ T1108] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 317.268874][ T1108] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 317.288093][ T1108] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 317.313863][ T1108] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 317.339098][ T1108] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 317.363062][ T1108] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 317.391039][ T1108] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 317.420690][ T8196] XFS (loop6): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x14 len 4 error 74 [ 317.442949][ T8196] XFS (loop6): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1540/0x1b30 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 317.474826][ T8196] XFS (loop6): Please unmount the filesystem and rectify the problem(s) [ 317.505403][ T6060] XFS (loop6): Unmounting Filesystem [ 319.041713][ T8234] loop0: detected capacity change from 0 to 512 [ 321.055903][ T8234] EXT4-fs (loop0): Test dummy encryption mode enabled [ 321.281203][ T8257] netlink: 'syz.3.972': attribute type 10 has an invalid length. [ 321.283019][ T8234] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.964: inode has both inline data and extents flags [ 321.315447][ T8257] device syz_tun entered promiscuous mode [ 321.378768][ T8257] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 321.428468][ T8234] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.964: couldn't read orphan inode 15 (err -117) [ 321.467252][ T3052] bond0: (slave bond_slave_0): interface is now down [ 321.494955][ T3052] bond0: (slave bond_slave_1): interface is now down [ 321.523112][ T8234] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 321.542551][ T8266] udc-core: couldn't find an available UDC or it's busy [ 321.558472][ T3052] bond0: (slave syz_tun): interface is now down [ 321.623856][ T3052] bond0: now running without any active interface! [ 322.513196][ T8284] se_dev->se_dev_ptr already set for storage object [ 323.174064][ T8306] se_dev->se_dev_ptr already set for storage object [ 323.265331][ T8310] se_dev->se_dev_ptr already set for storage object [ 324.985524][ T4189] Bluetooth: hci0: command 0x0406 tx timeout [ 325.333726][ T8335] se_dev->se_dev_ptr already set for storage object [ 325.464736][ T8337] se_dev->se_dev_ptr already set for storage object [ 325.505638][ T8339] se_dev->se_dev_ptr already set for storage object [ 325.678462][ T8345] device syzkaller0 entered promiscuous mode [ 325.782625][ T8348] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 325.797521][ T8348] device syzkaller0 entered promiscuous mode [ 325.901748][ T8351] capability: warning: `syz.6.1008' uses 32-bit capabilities (legacy support in use) [ 326.192485][ T8363] udc-core: couldn't find an available UDC or it's busy [ 326.369895][ T8370] se_dev->se_dev_ptr already set for storage object [ 326.436515][ T8372] se_dev->se_dev_ptr already set for storage object [ 326.525091][ T8369] se_dev->se_dev_ptr already set for storage object [ 327.392835][ T8383] se_dev->se_dev_ptr already set for storage object [ 327.474983][ T8387] loop0: detected capacity change from 0 to 512 [ 327.536003][ T8387] EXT4-fs (loop0): Test dummy encryption mode enabled [ 327.574523][ T8387] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.1022: inode has both inline data and extents flags [ 327.624252][ T8387] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.1022: couldn't read orphan inode 15 (err -117) [ 327.653258][ T8397] se_dev->se_dev_ptr already set for storage object [ 327.680972][ T8387] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 327.721203][ T8399] se_dev->se_dev_ptr already set for storage object [ 328.540272][ T8428] udc-core: couldn't find an available UDC or it's busy [ 328.694445][ T8434] se_dev->se_dev_ptr already set for storage object [ 328.817297][ T8438] Illegal XDP return value 4294967274, expect packet loss! [ 328.920049][ T8441] se_dev->se_dev_ptr already set for storage object [ 329.657324][ T8455] se_dev->se_dev_ptr already set for storage object [ 329.679054][ T8448] loop5: detected capacity change from 0 to 32768 [ 329.819271][ T8448] XFS (loop5): Mounting V5 Filesystem [ 329.969138][ T8448] XFS (loop5): Ending clean mount [ 330.064425][ T8471] udc-core: couldn't find an available UDC or it's busy [ 330.190457][ T4261] XFS (loop5): Metadata CRC error detected at xfs_rmapbt_read_verify+0x3a/0xd0, xfs_rmapbt block 0x14 [ 330.252644][ T4261] XFS (loop5): Unmount and run xfs_repair [ 330.264522][ T8473] se_dev->se_dev_ptr already set for storage object [ 330.271459][ T4261] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 330.293357][ T4261] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 330.308829][ T8476] loop3: detected capacity change from 0 to 1024 [ 330.319741][ T4261] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 330.334055][ T4261] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 330.343729][ T4261] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 330.354597][ T4261] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 330.370119][ T4261] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 330.379533][ T4261] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 330.398969][ T8476] EXT4-fs (loop3): Ignoring removed bh option [ 330.422501][ T4261] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 330.457396][ T8448] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x14 len 4 error 74 [ 330.490584][ T8448] XFS (loop5): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1540/0x1b30 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 330.495301][ T8476] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec028, mo2=0002] [ 330.509260][ T8448] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 330.554826][ T6407] XFS (loop5): Unmounting Filesystem [ 330.577154][ T8476] System zones: 0-1, 3-12 [ 330.582798][ T8476] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,dioread_lock,barrier=0x0000000000000004,nolazytime,quota,sysvgroups,errors=remount-ro,stripe=0x0000000000000011,bh,debug,. Quota mode: writeback. [ 331.034635][ T8482] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1056'. [ 331.044843][ T8482] device bridge_slave_1 left promiscuous mode [ 331.051247][ T8482] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.132498][ T8482] device bridge_slave_0 left promiscuous mode [ 331.139559][ T8482] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.295410][ T8492] se_dev->se_dev_ptr already set for storage object [ 333.202300][ T8505] udc-core: couldn't find an available UDC or it's busy [ 335.360166][ T8522] loop0: detected capacity change from 0 to 512 [ 335.679274][ T8522] EXT4-fs (loop0): Test dummy encryption mode enabled [ 335.751057][ T8522] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.1069: inode has both inline data and extents flags [ 335.879343][ T8522] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.1069: couldn't read orphan inode 15 (err -117) [ 335.981618][ T8522] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 336.652293][ T8503] Set syz1 is full, maxelem 65536 reached [ 336.898749][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 337.153607][ T8512] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 337.930683][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805fcaf800: rx timeout, send abort [ 338.405577][ T8574] se_dev->se_dev_ptr already set for storage object [ 338.431573][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805fcafc00: rx timeout, send abort [ 338.440638][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805fcaf800: abort rx timeout. Force session deactivation [ 338.551177][ T8579] se_dev->se_dev_ptr already set for storage object [ 340.020890][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805fcafc00: abort rx timeout. Force session deactivation [ 340.091077][ T8608] se_dev->se_dev_ptr already set for storage object [ 342.132594][ T8623] loop6: detected capacity change from 0 to 1024 [ 342.174242][ T8623] EXT4-fs (loop6): Ignoring removed bh option [ 342.288851][ T8623] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec028, mo2=0002] [ 342.308643][ T8623] System zones: 0-1, 3-12 [ 342.332064][ T8623] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable,dioread_lock,barrier=0x0000000000000004,nolazytime,quota,sysvgroups,errors=remount-ro,stripe=0x0000000000000011,bh,debug,. Quota mode: writeback. [ 342.363195][ T8629] loop5: detected capacity change from 0 to 512 [ 343.065885][ T8634] se_dev->se_dev_ptr already set for storage object [ 343.348887][ T8641] loop5: detected capacity change from 0 to 512 [ 343.552230][ T8641] EXT4-fs (loop5): Test dummy encryption mode enabled [ 343.607432][ T8641] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.1114: inode has both inline data and extents flags [ 343.666533][ T8641] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.1114: couldn't read orphan inode 15 (err -117) [ 343.683452][ T8641] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 343.904875][ T8656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1119'. [ 343.924151][ T8656] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.332012][ T8656] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.351547][ T8656] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.366638][ T8656] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.519732][ T8664] se_dev->se_dev_ptr already set for storage object [ 344.712208][ T8668] loop6: detected capacity change from 0 to 1024 [ 344.722994][ T8671] loop3: detected capacity change from 0 to 256 [ 344.757339][ T8668] EXT4-fs (loop6): Ignoring removed bh option [ 344.821072][ T8668] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec028, mo2=0002] [ 344.848105][ T8668] System zones: 0-1, 3-12 [ 344.860897][ T8668] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable,dioread_lock,barrier=0x0000000000000004,nolazytime,quota,sysvgroups,errors=remount-ro,stripe=0x0000000000000011,bh,debug,. Quota mode: writeback. [ 345.538801][ T8682] capability: warning: `syz.1.1127' uses deprecated v2 capabilities in a way that may be insecure [ 345.631967][ T8686] se_dev->se_dev_ptr already set for storage object [ 345.806479][ T8685] loop6: detected capacity change from 0 to 8192 [ 345.903102][ T8696] se_dev->se_dev_ptr already set for storage object [ 346.367264][ T8713] se_dev->se_dev_ptr already set for storage object [ 346.562158][ T8718] loop6: detected capacity change from 0 to 8192 [ 346.670240][ T8718] loop6: p1 < > p3 < p5 > p4 [ 346.754981][ T8718] loop6: p4 size 3081 extends beyond EOD, truncated [ 346.792107][ T8718] loop6: p5 size 3081 extends beyond EOD, truncated [ 347.977322][ T4285] udevd[4285]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 347.978704][ T4262] udevd[4262]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 348.010121][ T8737] se_dev->se_dev_ptr already set for storage object [ 348.017061][ T4286] udevd[4286]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 348.041485][ T4267] udevd[4267]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 348.229068][ T4267] udevd[4267]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 348.249694][ T4286] udevd[4286]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 348.262985][ T4285] udevd[4285]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 348.281935][ T4262] udevd[4262]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 349.051461][ T8764] loop3: detected capacity change from 0 to 512 [ 349.322544][ T8764] EXT4-fs (loop3): Test dummy encryption mode enabled [ 350.190546][ T8781] se_dev->se_dev_ptr already set for storage object [ 351.030067][ T1111] Bluetooth: hci4: command 0x0406 tx timeout [ 352.031141][ T8764] EXT4-fs: error -4 creating inode table initialization thread [ 352.058334][ T8764] EXT4-fs (loop3): mount failed [ 354.059302][ T8820] se_dev->se_dev_ptr already set for storage object [ 354.135942][ T8825] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1177'. [ 359.031452][ T8869] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1191'. [ 359.069124][ T8872] loop5: detected capacity change from 0 to 512 [ 359.112857][ T8872] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 359.176307][ T8872] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 359.221170][ T8872] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #16: comm syz.5.1192: invalid indirect mapped block 32768 (level 2) [ 359.263181][ T8872] EXT4-fs (loop5): Remounting filesystem read-only [ 359.270520][ T8872] EXT4-fs (loop5): 1 orphan inode deleted [ 359.281926][ T8872] EXT4-fs (loop5): 1 truncate cleaned up [ 359.294794][ T8872] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,noblock_validity,lazytime,jqfmt=vfsv0,nolazytime,dioread_nolock,journal_ioprio=0x0000000000000006,. Quota mode: none. [ 359.357833][ T8872] EXT4-fs (loop5): shut down requested (2) [ 359.444242][ T8881] ffs_data_put(): freeing [ 359.721947][ T8890] loop5: detected capacity change from 0 to 1024 [ 359.759641][ T8890] EXT4-fs (loop5): Ignoring removed bh option [ 359.792966][ T8890] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec028, mo2=0002] [ 359.801392][ T8890] System zones: 0-1, 3-12 [ 359.808358][ T8890] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable,dioread_lock,barrier=0x0000000000000004,nolazytime,quota,sysvgroups,errors=remount-ro,stripe=0x0000000000000011,bh,debug,. Quota mode: writeback. [ 362.124583][ T8921] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1206'. [ 362.981376][ T8934] device wlan0 entered promiscuous mode [ 363.112505][ T8942] loop3: detected capacity change from 0 to 512 [ 363.208516][ T8942] EXT4-fs (loop3): Test dummy encryption mode enabled [ 363.335253][ T8950] se_dev->se_dev_ptr already set for storage object [ 365.524847][ T8942] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.1215: inode has both inline data and extents flags [ 365.570365][ T8942] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.1215: couldn't read orphan inode 15 (err -117) [ 365.603649][ T8942] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 365.627427][ T8977] loop0: detected capacity change from 0 to 2048 [ 365.914804][ T8986] se_dev->se_dev_ptr already set for storage object [ 366.213725][ T9001] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.1234'. [ 366.246163][ T8997] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.1234'. [ 369.324388][ T9047] loop5: detected capacity change from 0 to 512 [ 369.371193][ T9047] EXT4-fs (loop5): Test dummy encryption mode enabled [ 369.440048][ T9047] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.1245: inode has both inline data and extents flags [ 369.472792][ T9047] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.1245: couldn't read orphan inode 15 (err -117) [ 369.505365][ T9047] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 370.039173][ T9058] tipc: Enabling of bearer rejected, failed to enable media [ 371.029463][ T9067] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1249'. [ 372.308730][ T9077] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1248'. [ 372.803818][ T9093] loop5: detected capacity change from 0 to 512 [ 372.804484][ T9091] device syzkaller0 entered promiscuous mode [ 372.863457][ T9091] tipc: Enabled bearer , priority 0 [ 372.870679][ T9093] EXT4-fs (loop5): Test dummy encryption mode enabled [ 372.883942][ T9095] [ 372.901628][ T9090] tipc: Resetting bearer [ 372.925968][ T9093] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.1258: inode has both inline data and extents flags [ 372.940512][ T9093] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.1258: couldn't read orphan inode 15 (err -117) [ 372.953387][ T9093] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 373.223760][ T9090] tipc: Disabling bearer [ 375.461805][ T9130] dummy_hcd dummy_hcd.0: remove, state 4 [ 375.496072][ T9130] usb usb1: USB disconnect, device number 1 [ 375.564673][ T9130] dummy_hcd dummy_hcd.0: stopped [ 375.597797][ T9130] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 375.817823][ T9135] dummy_hcd dummy_hcd.0: USB Host+Gadget Emulator, driver 02 May 2005 [ 375.835311][ T9135] dummy_hcd dummy_hcd.0: Dummy host controller [ 376.631387][ T9152] loop5: detected capacity change from 0 to 512 [ 377.054310][ T9135] dummy_hcd dummy_hcd.0: new USB bus registered, assigned bus number 1 [ 377.061549][ T9152] EXT4-fs (loop5): Test dummy encryption mode enabled [ 377.080820][ T9152] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.1275: inode has both inline data and extents flags [ 377.246353][ T9152] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.1275: couldn't read orphan inode 15 (err -117) [ 377.290576][ T9152] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 378.928175][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.934503][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.031022][ T9135] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 5.15 [ 379.055305][ T9135] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 380.045270][ T9135] usb usb1: Product: Dummy host controller [ 380.051245][ T9135] usb usb1: Manufacturer: Linux syzkaller dummy_hcd [ 380.665677][ T9135] usb usb1: SerialNumber: dummy_hcd.0 [ 380.699976][ T9198] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1291'. [ 380.711352][ T9135] hub 1-0:1.0: USB hub found [ 380.726844][ T9135] hub 1-0:1.0: 1 port detected [ 381.277974][ T9214] se_dev->se_dev_ptr already set for storage object [ 381.361771][ T144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.500636][ T4189] Bluetooth: hci1: command 0x0409 tx timeout [ 383.736431][ T144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.153310][ T9206] chnl_net:caif_netlink_parms(): no params data found [ 385.272704][ T144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.384706][ T144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.467525][ T9267] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.1312'. [ 385.553455][ T9206] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.583585][ T9206] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.662495][ T9206] device bridge_slave_0 entered promiscuous mode [ 385.697666][ T9206] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.740741][ T9206] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.755952][ T4231] Bluetooth: hci1: command 0x041b tx timeout [ 385.790728][ T9275] se_dev->se_dev_ptr already set for storage object [ 385.813367][ T9206] device bridge_slave_1 entered promiscuous mode [ 385.940660][ T9206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.964693][ T9286] se_dev->se_dev_ptr already set for storage object [ 385.978504][ T9206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.069669][ T9206] team0: Port device team_slave_0 added [ 386.691653][ T9206] team0: Port device team_slave_1 added [ 386.932230][ T9302] se_dev->se_dev_ptr already set for storage object [ 386.941731][ T9206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.154156][ T9206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.435041][ T9206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.492967][ T144] tipc: Left network mode [ 387.504762][ T9206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.543333][ T9206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.579176][ T9206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.706663][ T9206] device hsr_slave_0 entered promiscuous mode [ 387.744090][ T9206] device hsr_slave_1 entered promiscuous mode [ 387.754904][ T9206] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 387.782505][ T9206] Cannot create hsr debugfs directory [ 387.845219][ T4231] Bluetooth: hci1: command 0x040f tx timeout [ 387.870146][ T9318] se_dev->se_dev_ptr already set for storage object [ 389.095372][ T9206] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 389.143433][ T9206] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 389.494975][ T9206] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 390.296300][ T4231] Bluetooth: hci1: command 0x0419 tx timeout [ 390.297347][ T9206] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 390.344573][ T9364] se_dev->se_dev_ptr already set for storage object [ 390.621460][ T9376] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1349'. [ 390.686305][ T9381] udc-core: couldn't find an available UDC or it's busy [ 390.746410][ T144] device hsr_slave_0 left promiscuous mode [ 390.752963][ T144] device hsr_slave_1 left promiscuous mode [ 390.765728][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.778177][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.813125][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.832593][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.853336][ T144] device bridge_slave_1 left promiscuous mode [ 390.873534][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.899346][ T144] device bridge_slave_0 left promiscuous mode [ 390.915310][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.995338][ T144] device veth1_macvtap left promiscuous mode [ 391.001435][ T144] device veth0_macvtap left promiscuous mode [ 391.036090][ T144] device veth1_vlan left promiscuous mode [ 391.042036][ T144] device veth0_vlan left promiscuous mode [ 392.035725][ T9409] se_dev->se_dev_ptr already set for storage object [ 392.304297][ T9415] loop3: detected capacity change from 0 to 512 [ 392.337841][ T144] team0 (unregistering): Port device team_slave_1 removed [ 392.382756][ T9415] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 392.384759][ T144] team0 (unregistering): Port device team_slave_0 removed [ 392.422339][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.442803][ T9415] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 392.462463][ T9415] System zones: 1-12 [ 392.467001][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.503772][ T9415] EXT4-fs (loop3): 1 truncate cleaned up [ 392.525343][ T9415] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000005,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 392.597960][ T144] bond0 (unregistering): Released all slaves [ 392.709678][ T9206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.822063][ T9206] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.840528][ T5803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 392.850697][ T5803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 392.871775][ T5803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 392.911508][ T5803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 392.961035][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.968232][ T5803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.011237][ T5803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 393.064063][ T5803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 393.082932][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.090118][ T5803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.861754][ T5803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 394.025960][ T9206] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 394.120775][ T9206] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 394.189551][ T5803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 394.212714][ T5803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 394.260548][ T9450] udc-core: couldn't find an available UDC or it's busy [ 394.281429][ T5803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 394.321144][ T5803] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 394.370799][ T5803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 394.380889][ T5803] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 394.439731][ T5803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 394.456259][ T5803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 394.506296][ T5803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 394.542487][ T5803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 394.565629][ T5803] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 394.574767][ T9463] se_dev->se_dev_ptr already set for storage object [ 394.578585][ T5803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 397.566432][ T9493] udc-core: couldn't find an available UDC or it's busy [ 397.775905][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 397.783565][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 397.817698][ T9206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.210996][ T9520] se_dev->se_dev_ptr already set for storage object [ 398.269042][ T9524] se_dev->se_dev_ptr already set for storage object [ 398.625548][ T9534] se_dev->se_dev_ptr already set for storage object [ 398.762255][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 398.793103][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 398.949390][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 399.006296][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 399.071512][ T9206] device veth0_vlan entered promiscuous mode [ 399.087092][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 399.153904][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 400.810420][ T9206] device veth1_vlan entered promiscuous mode [ 401.016387][ T9572] udc-core: couldn't find an available UDC or it's busy [ 401.038421][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 401.093361][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 401.139554][ T9206] device veth0_macvtap entered promiscuous mode [ 401.199050][ T9206] device veth1_macvtap entered promiscuous mode [ 401.340104][ T9206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.397700][ T9206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.462013][ T9206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.508346][ T9206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.570362][ T9206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.640804][ T9206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.721267][ T9206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.806628][ T9206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.862260][ T9206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.930637][ T9206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.035111][ T9206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.106330][ T9206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.153018][ T9206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.254503][ T9206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.738287][ T5803] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 402.762155][ T5803] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 402.786622][ T9603] se_dev->se_dev_ptr already set for storage object [ 402.794024][ T5803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 402.824030][ T5803] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 402.837715][ T5803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 402.885885][ T9206] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.911348][ T9206] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.942690][ T9206] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.951978][ T9206] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.539455][ T5803] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.570350][ T5803] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.680262][ T4337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.705571][ T4337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.773786][ T9627] se_dev->se_dev_ptr already set for storage object [ 406.040856][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 406.061239][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 406.135907][ T9629] process 'syz.5.1409' launched './file0' with NULL argv: empty string added [ 407.359390][ T9640] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1410'. [ 407.368387][ T9640] device bridge_slave_1 left promiscuous mode [ 407.374619][ T9640] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.805714][ T9640] device bridge_slave_0 left promiscuous mode [ 407.812066][ T9640] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.901126][ T9654] binder_alloc: 9651: pid 9651 spamming oneway? 2 buffers allocated for a total size of 5120 [ 407.914892][ T9654] binder_alloc: 9651: pid 9651 spamming oneway? 3 buffers allocated for a total size of 5128 [ 407.927008][ T9653] se_dev->se_dev_ptr already set for storage object [ 408.066653][ T9659] device syzkaller0 entered promiscuous mode [ 408.103437][ T9659] tipc: Enabled bearer , priority 0 [ 408.145675][ T9659] tipc: Resetting bearer [ 408.183305][ T9658] tipc: Resetting bearer [ 408.216293][ T9658] tipc: Disabling bearer [ 408.256847][ T9667] se_dev->se_dev_ptr already set for storage object [ 408.272177][ T9669] loop0: detected capacity change from 0 to 512 [ 408.430260][ T9678] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 408.449147][ T9669] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 408.473494][ T9669] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 408.496339][ T9669] EXT4-fs (loop0): can't mount with commit=1, fs mounted w/o journal [ 410.611507][ T9709] loop3: detected capacity change from 0 to 4096 [ 410.753616][ T9709] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 411.111859][ T9725] syz.5.1434 (9725) used greatest stack depth: 18544 bytes left [ 411.196211][ T9755] se_dev->se_dev_ptr already set for storage object [ 412.057137][ T9765] se_dev->se_dev_ptr already set for storage object [ 412.158818][ T9769] loop0: detected capacity change from 0 to 512 [ 412.271357][ T9777] loop7: detected capacity change from 0 to 512 [ 412.292421][ T9769] EXT4-fs (loop0): inline encryption not supported [ 412.367296][ T9782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1450'. [ 412.521531][ T9777] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 412.554081][ T9769] EXT4-fs (loop0): 1 orphan inode deleted [ 412.608384][ T9769] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,inlinecrypt,usrquota,jqfmt=vfsv1,jqfmt=vfsv0,delalloc,journal_dev=0x000000000000844d,barrier=0x000000000000562a,i_version,,errors=continue. Quota mode: writeback. [ 412.775266][ T9777] EXT4-fs error (device loop7): __ext4_iget:4919: inode #11: block 2: comm syz.7.1449: invalid block [ 413.033806][ T9792] loop5: detected capacity change from 0 to 512 [ 413.060411][ T9777] EXT4-fs error (device loop7): ext4_orphan_get:1411: comm syz.7.1449: couldn't read orphan inode 11 (err -117) [ 413.167810][ T9777] EXT4-fs (loop7): mounted filesystem without journal. Opts: nombcache,resuid=0x0000000000000000,journal_dev=0x0000000000000002,user_xattr,,errors=continue. Quota mode: none. [ 413.282194][ T9792] EXT4-fs (loop5): Test dummy encryption mode enabled [ 413.344939][ T9792] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.1453: inode has both inline data and extents flags [ 413.419975][ T9792] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.1453: couldn't read orphan inode 15 (err -117) [ 413.455195][ T9206] EXT4-fs error (device loop7): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 413.527385][ T9792] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 413.840171][ T9792] fscrypt (loop5): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 415.281501][ T9848] se_dev->se_dev_ptr already set for storage object [ 415.506055][ T9859] loop0: detected capacity change from 0 to 2048 [ 415.705303][ T9859] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,errors=remount-ro,max_dir_size_kb=0x0000000000000003,quota,. Quota mode: writeback. [ 416.352415][ T9859] EXT4-fs error (device loop0): ext4_find_extent:929: inode #2: comm syz.0.1468: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 416.559921][ T9859] EXT4-fs (loop0): Remounting filesystem read-only [ 416.596934][ T9874] EXT4-fs error (device loop0): ext4_ext_precache:608: inode #2: comm syz.0.1468: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 416.685830][ T9874] EXT4-fs (loop0): Remounting filesystem read-only [ 417.696976][ T9898] se_dev->se_dev_ptr already set for storage object [ 417.887826][ T144] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.029512][ T144] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.154917][ T144] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.189205][ T9893] chnl_net:caif_netlink_parms(): no params data found [ 418.290885][ T144] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.441817][ T9893] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.453810][ T9893] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.710228][ T9893] device bridge_slave_0 entered promiscuous mode [ 418.734709][ T9893] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.747254][ T9893] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.759508][ T9893] device bridge_slave_1 entered promiscuous mode [ 418.794700][ T9893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.819253][ T9893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.867321][ T9893] team0: Port device team_slave_0 added [ 418.890300][ T9893] team0: Port device team_slave_1 added [ 418.964197][ T9893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.196928][ T9893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.501133][ T9893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.561732][ T9893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.583454][ T9893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.650894][ T9893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.695382][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 419.888517][ T9893] device hsr_slave_0 entered promiscuous mode [ 419.930360][ T9893] device hsr_slave_1 entered promiscuous mode [ 421.985112][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 422.023041][ T9893] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 422.064040][ T9893] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 422.118761][ T9893] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 422.151866][ T9893] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 422.562681][ T9975] fuse: Bad value for 'fd' [ 422.612184][ T9893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.050456][ T9990] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1498'. [ 424.756108][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 424.815502][ T9893] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.824152][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 424.850418][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 424.939097][ T9990] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1498'. [ 424.959392][ T9995] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1498'. [ 424.984511][ T9990] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1498'. [ 425.151475][ T5803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 425.199955][ T5803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 425.258089][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.265249][ T5803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.273273][ T5803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 425.282614][ T5803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 425.706755][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.713904][ T5803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.722044][ T5803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 425.731155][ T5803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 425.740886][ T5803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 425.765293][T10002] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 425.827578][T10002] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 425.881643][T10002] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 425.934591][T10002] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 425.968322][T10002] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 426.010741][T10002] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 426.048047][T10002] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 426.514568][ T5807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 426.638724][ T5807] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 426.663970][ T5807] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 426.882761][ T4229] Bluetooth: hci1: command 0x0419 tx timeout [ 426.932065][ T5803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 427.163956][ T5803] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 427.201807][ T9893] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 427.252635][ T9893] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 427.617837][ T144] device hsr_slave_0 left promiscuous mode [ 427.679788][ T144] device hsr_slave_1 left promiscuous mode [ 427.898529][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.915111][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.926737][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.944466][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.992313][ T144] device veth1_macvtap left promiscuous mode [ 428.029030][ T144] device veth0_macvtap left promiscuous mode [ 428.075204][ T144] device veth1_vlan left promiscuous mode [ 428.088524][ T144] device veth0_vlan left promiscuous mode [ 428.998872][ T144] team0 (unregistering): Port device team_slave_1 removed [ 429.021907][ T144] team0 (unregistering): Port device team_slave_0 removed [ 429.044224][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.069340][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.191862][ T144] bond0 (unregistering): Released all slaves [ 429.206572][ T5803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 429.215480][ T5803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 429.224187][ T5803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 429.238804][ T5803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 429.376647][T10085] team0: Port device syz_tun added [ 429.399505][ T5803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 430.381214][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 430.412391][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 430.489873][ T9893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.717141][T10123] loop5: detected capacity change from 0 to 256 [ 430.806069][T10127] device bridge0 entered promiscuous mode [ 431.710214][T10155] udc-core: couldn't find an available UDC or it's busy [ 431.786306][ T5803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 431.820886][ T5803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 431.933551][ T5803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 431.978248][ T5803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 432.053222][ T9893] device veth0_vlan entered promiscuous mode [ 432.073473][ T5803] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 432.160606][ T5803] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 432.224586][ T9893] device veth1_vlan entered promiscuous mode [ 432.440239][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 432.453411][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 432.554184][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 432.615917][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 432.626536][ T9893] device veth0_macvtap entered promiscuous mode [ 432.664154][ T9893] device veth1_macvtap entered promiscuous mode [ 432.800172][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 432.816059][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 432.872382][ T9893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.948674][ T9893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.008162][ T9893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.059662][ T9893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.120077][ T9893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.170196][ T9893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.243938][ T9893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.283625][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 433.344262][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 433.518597][ T9893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.582474][ T9893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.642533][ T9893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.698851][ T9893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.760699][ T9893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.821346][ T9893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.949859][ T9893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.017664][ T5803] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 434.032857][ T5803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 434.064538][ T9893] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.093605][ T9893] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.124656][ T9893] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.185079][ T9893] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.259494][T10208] udc-core: couldn't find an available UDC or it's busy [ 435.273300][T10223] device syzkaller0 entered promiscuous mode [ 435.556584][ T1219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.564500][ T1219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.657793][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 435.730104][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.743384][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.813013][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 436.287077][T10247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1559'. [ 436.310481][T10251] udc-core: couldn't find an available UDC or it's busy [ 437.903449][T10291] udc-core: couldn't find an available UDC or it's busy [ 438.588900][T10329] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1583'. [ 438.598071][T10329] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1583'. [ 438.729944][T10332] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1583'. [ 440.015483][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.021874][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.232369][T10341] loop5: detected capacity change from 0 to 128 [ 440.890048][T10341] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 440.941103][T10341] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 441.126369][ T155] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 441.884362][T10371] device syzkaller0 entered promiscuous mode [ 443.356116][T10403] program syz.5.1600 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 443.510667][T10409] udc-core: couldn't find an available UDC or it's busy [ 444.439164][T10422] loop5: detected capacity change from 0 to 512 [ 444.563934][T10422] EXT4-fs (loop5): inline encryption not supported [ 444.595317][T10422] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 444.616694][T10422] EXT4-fs (loop5): 1 truncate cleaned up [ 444.622709][T10422] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,inlinecrypt,debug_want_extra_isize=0x0000000000000080,nojournal_checksum,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 444.693701][T10426] device batadv_slave_1 entered promiscuous mode [ 444.735660][T10426] device batadv_slave_1 left promiscuous mode [ 445.121498][T10450] udc-core: couldn't find an available UDC or it's busy [ 447.799469][T10497] loop3: detected capacity change from 0 to 512 [ 447.860629][T10497] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 448.060614][T10497] EXT4-fs error (device loop3): ext4_validate_block_bitmap:420: comm syz.3.1628: bg 0: bad block bitmap checksum [ 449.202462][T10524] batman_adv: Cannot find parent device [ 449.210793][T10524] batman_adv: batadv0: Adding interface: gretap1 [ 449.217228][T10524] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.242871][T10524] batman_adv: batadv0: Interface activated: gretap1 [ 450.305309][T10542] tipc: Started in network mode [ 450.310237][T10542] tipc: Node identity , cluster identity 4711 [ 450.323970][T10542] tipc: Failed to obtain node identity [ 450.332710][T10542] tipc: Enabling of bearer rejected, failed to enable media [ 450.436236][T10548] loop3: detected capacity change from 0 to 512 [ 450.446949][T10550] udc-core: couldn't find an available UDC or it's busy [ 452.173782][T10577] loop3: detected capacity change from 0 to 512 [ 452.741825][T10577] EXT4-fs (loop3): inline encryption not supported [ 452.778503][T10577] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 452.872061][T10577] EXT4-fs (loop3): 1 truncate cleaned up [ 452.888829][T10577] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,inlinecrypt,debug_want_extra_isize=0x0000000000000080,nojournal_checksum,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 453.014802][T10603] udc-core: couldn't find an available UDC or it's busy [ 453.245369][T10611] device syzkaller0 entered promiscuous mode [ 454.616749][T10646] tipc: Enabling of bearer rejected, failed to enable media [ 454.916518][T10652] configfs-gadget gadget: uvc: uvc_function_bind() [ 454.923108][T10652] configfs-gadget gadget: uvc: Unable to allocate streaming EP [ 455.055920][T10652] ================================================================== [ 455.064529][T10652] BUG: KASAN: slab-out-of-bounds in dummy_free_request+0x3b/0x70 [ 455.072303][T10652] Read of size 8 at addr ffff888060cfc4f0 by task syz.5.1665/10652 [ 455.080228][T10652] [ 455.082595][T10652] CPU: 1 PID: 10652 Comm: syz.5.1665 Not tainted syzkaller #0 [ 455.090079][T10652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 455.100182][T10652] Call Trace: [ 455.103492][T10652] [ 455.106449][T10652] dump_stack_lvl+0x188/0x250 [ 455.111176][T10652] ? show_regs_print_info+0x20/0x20 [ 455.116412][T10652] ? _printk+0xda/0x130 [ 455.120598][T10652] ? dummy_free_request+0x3b/0x70 [ 455.125674][T10652] ? load_image+0x410/0x410 [ 455.130212][T10652] ? _dev_info+0x11b/0x170 [ 455.134659][T10652] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 455.140340][T10652] print_address_description+0x60/0x2d0 [ 455.145948][T10652] ? dummy_free_request+0x3b/0x70 [ 455.151004][T10652] kasan_report+0xdf/0x130 [ 455.155453][T10652] ? dummy_free_request+0x3b/0x70 [ 455.160511][T10652] ? rcu_is_watching+0x11/0xa0 [ 455.165311][T10652] dummy_free_request+0x3b/0x70 [ 455.170199][T10652] uvc_function_bind+0xe24/0x12d0 [ 455.175275][T10652] usb_add_function+0x2d9/0x980 [ 455.180172][T10652] configfs_composite_bind+0xa02/0xf60 [ 455.185681][T10652] ? os_desc_qw_sign_store+0x130/0x130 [ 455.191177][T10652] udc_bind_to_driver+0x203/0x5f0 [ 455.196244][T10652] usb_gadget_probe_driver+0x1fb/0x380 [ 455.201857][T10652] gadget_dev_desc_UDC_store+0x1ba/0x2e0 [ 455.207524][T10652] configfs_write_iter+0x30b/0x400 [ 455.212668][T10652] ? gadget_dev_desc_UDC_show+0x80/0x80 [ 455.218247][T10652] vfs_write+0x748/0xd70 [ 455.222558][T10652] ? file_end_write+0x250/0x250 [ 455.227459][T10652] ? mutex_lock_nested+0x17/0x20 [ 455.232429][T10652] ? __fdget_pos+0x2bf/0x370 [ 455.237048][T10652] ? ksys_write+0x70/0x260 [ 455.241497][T10652] ksys_write+0x153/0x260 [ 455.245859][T10652] ? __ia32_sys_read+0x80/0x80 [ 455.250663][T10652] ? lockdep_hardirqs_on+0x94/0x140 [ 455.256002][T10652] do_syscall_64+0x4c/0xa0 [ 455.260462][T10652] ? clear_bhb_loop+0x30/0x80 [ 455.265190][T10652] ? clear_bhb_loop+0x30/0x80 [ 455.269902][T10652] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 455.275840][T10652] RIP: 0033:0x7fb86357fe99 [ 455.280283][T10652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.299918][T10652] RSP: 002b:00007fb8617d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 455.308373][T10652] RAX: ffffffffffffffda RBX: 00007fb863807fa0 RCX: 00007fb86357fe99 [ 455.316378][T10652] RDX: 000000000000000b RSI: 0000200000000880 RDI: 0000000000000003 [ 455.324380][T10652] RBP: 00007fb863615eaf R08: 0000000000000000 R09: 0000000000000000 [ 455.332385][T10652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 455.340387][T10652] R13: 00007fb863808038 R14: 00007fb863807fa0 R15: 00007ffdb81ef918 [ 455.348409][T10652] [ 455.351444][T10652] [ 455.353785][T10652] Allocated by task 4229: [ 455.358134][T10652] __kasan_kmalloc+0xaf/0xe0 [ 455.362755][T10652] __hw_addr_add_ex+0x1ed/0x780 [ 455.367632][T10652] dev_mc_add+0x91/0x110 [ 455.371905][T10652] igmp6_group_added+0x228/0x7c0 [ 455.376870][T10652] __ipv6_dev_mc_inc+0x959/0xb20 [ 455.381837][T10652] addrconf_dad_work+0x3bd/0x1530 [ 455.386898][T10652] process_one_work+0x867/0xff0 [ 455.391775][T10652] worker_thread+0xad7/0x12a0 [ 455.396505][T10652] kthread+0x42e/0x520 [ 455.400598][T10652] ret_from_fork+0x1f/0x30 [ 455.405041][T10652] [ 455.407383][T10652] Last potentially related work creation: [ 455.413110][T10652] kasan_save_stack+0x35/0x60 [ 455.417807][T10652] kasan_record_aux_stack+0xb8/0x100 [ 455.423127][T10652] kvfree_call_rcu+0x105/0x7f0 [ 455.427916][T10652] __hw_addr_del_ex+0x521/0x620 [ 455.432794][T10652] dev_mc_del+0x8d/0x100 [ 455.437073][T10652] __igmp_group_dropped+0x1e2/0x910 [ 455.442297][T10652] ip_mc_down+0xf2/0x340 [ 455.446564][T10652] inetdev_event+0x332/0x1350 [ 455.451264][T10652] raw_notifier_call_chain+0xcb/0x160 [ 455.456662][T10652] dev_close_many+0x29c/0x400 [ 455.461367][T10652] unregister_netdevice_many+0x4b8/0x1a40 [ 455.467108][T10652] default_device_exit_batch+0x364/0x3c0 [ 455.472771][T10652] cleanup_net+0x78e/0xba0 [ 455.477210][T10652] process_one_work+0x867/0xff0 [ 455.482087][T10652] worker_thread+0xad7/0x12a0 [ 455.486785][T10652] kthread+0x42e/0x520 [ 455.490893][T10652] ret_from_fork+0x1f/0x30 [ 455.495334][T10652] [ 455.497677][T10652] Second to last potentially related work creation: [ 455.504276][T10652] kasan_save_stack+0x35/0x60 [ 455.508977][T10652] kasan_record_aux_stack+0xb8/0x100 [ 455.514292][T10652] kvfree_call_rcu+0x105/0x7f0 [ 455.519087][T10652] dev_addr_flush+0x165/0x200 [ 455.523790][T10652] free_netdev+0x1ec/0x480 [ 455.528232][T10652] netdev_run_todo+0x8d1/0xac0 [ 455.533024][T10652] default_device_exit_batch+0x369/0x3c0 [ 455.538683][T10652] cleanup_net+0x78e/0xba0 [ 455.543123][T10652] process_one_work+0x867/0xff0 [ 455.548002][T10652] worker_thread+0xad7/0x12a0 [ 455.552702][T10652] kthread+0x42e/0x520 [ 455.556793][T10652] ret_from_fork+0x1f/0x30 [ 455.561239][T10652] [ 455.563586][T10652] The buggy address belongs to the object at ffff888060cfc400 [ 455.563586][T10652] which belongs to the cache kmalloc-128 of size 128 [ 455.577660][T10652] The buggy address is located 112 bytes to the right of [ 455.577660][T10652] 128-byte region [ffff888060cfc400, ffff888060cfc480) [ 455.591484][T10652] The buggy address belongs to the page: [ 455.597158][T10652] page:ffffea0001833f00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888060cfc600 pfn:0x60cfc [ 455.608636][T10652] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 455.616216][T10652] raw: 00fff00000000200 ffffea0001833288 ffffea00017cfe88 ffff888016c418c0 [ 455.624822][T10652] raw: ffff888060cfc600 000000000010000e 00000001ffffffff 0000000000000000 [ 455.633423][T10652] page dumped because: kasan: bad access detected [ 455.639870][T10652] page_owner tracks the page as allocated [ 455.645601][T10652] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY), pid 4196, ts 66182070900, free_ts 24322539891 [ 455.661728][T10652] get_page_from_freelist+0x24f6/0x2670 [ 455.667317][T10652] __alloc_pages+0x1ee/0x480 [ 455.671930][T10652] new_slab+0xc0/0x4b0 [ 455.676025][T10652] ___slab_alloc+0x807/0xdd0 [ 455.680646][T10652] kmem_cache_alloc_trace+0xf9/0x290 [ 455.685953][T10652] __hw_addr_add_ex+0x1ed/0x780 [ 455.690835][T10652] dev_mc_add+0x91/0x110 [ 455.695103][T10652] igmp6_group_added+0x228/0x7c0 [ 455.700060][T10652] __ipv6_dev_mc_inc+0x959/0xb20 [ 455.705019][T10652] ipv6_add_dev+0xce2/0x11a0 [ 455.709634][T10652] addrconf_notify+0x66f/0xf20 [ 455.714416][T10652] raw_notifier_call_chain+0xcb/0x160 [ 455.719812][T10652] register_netdevice+0x12a8/0x1720 [ 455.725038][T10652] veth_newlink+0x6af/0xe20 [ 455.729570][T10652] rtnl_newlink+0x139e/0x1920 [ 455.734270][T10652] rtnetlink_rcv_msg+0x7f1/0xf10 [ 455.739237][T10652] page last free stack trace: [ 455.743923][T10652] free_unref_page_prepare+0x637/0x6c0 [ 455.749403][T10652] free_unref_page+0x8f/0x2a0 [ 455.754103][T10652] free_contig_range+0x96/0xf0 [ 455.758896][T10652] destroy_args+0xef/0xa00 [ 455.763347][T10652] debug_vm_pgtable+0x321/0x380 [ 455.768223][T10652] do_one_initcall+0x272/0x730 [ 455.773048][T10652] do_initcall_level+0x13d/0x1f0 [ 455.778028][T10652] do_initcalls+0x4b/0x90 [ 455.782389][T10652] kernel_init_freeable+0x3d5/0x560 [ 455.787626][T10652] kernel_init+0x19/0x1b0 [ 455.791987][T10652] ret_from_fork+0x1f/0x30 [ 455.796433][T10652] [ 455.798775][T10652] Memory state around the buggy address: [ 455.804432][T10652] ffff888060cfc380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 455.812519][T10652] ffff888060cfc400: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 455.820611][T10652] >ffff888060cfc480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 455.828694][T10652] ^ [ 455.836439][T10652] ffff888060cfc500: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 455.844536][T10652] ffff888060cfc580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 455.852632][T10652] ================================================================== [ 455.860713][T10652] Disabling lock debugging due to kernel taint [ 456.357135][T10652] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 456.364396][T10652] CPU: 0 PID: 10652 Comm: syz.5.1665 Tainted: G B syzkaller #0 [ 456.373282][T10652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 456.383399][T10652] Call Trace: [ 456.386708][T10652] [ 456.389667][T10652] dump_stack_lvl+0x188/0x250 [ 456.394383][T10652] ? show_regs_print_info+0x20/0x20 [ 456.399609][T10652] ? load_image+0x410/0x410 [ 456.404163][T10652] panic+0x2f8/0x850 [ 456.408093][T10652] ? bpf_jit_dump+0xd0/0xd0 [ 456.412625][T10652] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 456.418631][T10652] ? _raw_spin_unlock+0x40/0x40 [ 456.423533][T10652] ? print_memory_metadata+0x314/0x400 [ 456.429020][T10652] ? dummy_free_request+0x3b/0x70 [ 456.434075][T10652] check_panic_on_warn+0x80/0xa0 [ 456.439041][T10652] ? dummy_free_request+0x3b/0x70 [ 456.444095][T10652] end_report+0x6d/0xf0 [ 456.448288][T10652] kasan_report+0x102/0x130 [ 456.452834][T10652] ? dummy_free_request+0x3b/0x70 [ 456.457983][T10652] ? rcu_is_watching+0x11/0xa0 [ 456.462783][T10652] dummy_free_request+0x3b/0x70 [ 456.467655][T10652] uvc_function_bind+0xe24/0x12d0 [ 456.472703][T10652] usb_add_function+0x2d9/0x980 [ 456.477583][T10652] configfs_composite_bind+0xa02/0xf60 [ 456.483067][T10652] ? os_desc_qw_sign_store+0x130/0x130 [ 456.488537][T10652] udc_bind_to_driver+0x203/0x5f0 [ 456.493577][T10652] usb_gadget_probe_driver+0x1fb/0x380 [ 456.499055][T10652] gadget_dev_desc_UDC_store+0x1ba/0x2e0 [ 456.504711][T10652] configfs_write_iter+0x30b/0x400 [ 456.509837][T10652] ? gadget_dev_desc_UDC_show+0x80/0x80 [ 456.515399][T10652] vfs_write+0x748/0xd70 [ 456.519664][T10652] ? file_end_write+0x250/0x250 [ 456.524531][T10652] ? mutex_lock_nested+0x17/0x20 [ 456.529479][T10652] ? __fdget_pos+0x2bf/0x370 [ 456.534073][T10652] ? ksys_write+0x70/0x260 [ 456.538511][T10652] ksys_write+0x153/0x260 [ 456.542854][T10652] ? __ia32_sys_read+0x80/0x80 [ 456.547636][T10652] ? lockdep_hardirqs_on+0x94/0x140 [ 456.552868][T10652] do_syscall_64+0x4c/0xa0 [ 456.557297][T10652] ? clear_bhb_loop+0x30/0x80 [ 456.561985][T10652] ? clear_bhb_loop+0x30/0x80 [ 456.566676][T10652] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 456.572584][T10652] RIP: 0033:0x7fb86357fe99 [ 456.577011][T10652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.596624][T10652] RSP: 002b:00007fb8617d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 456.605051][T10652] RAX: ffffffffffffffda RBX: 00007fb863807fa0 RCX: 00007fb86357fe99 [ 456.613028][T10652] RDX: 000000000000000b RSI: 0000200000000880 RDI: 0000000000000003 [ 456.621011][T10652] RBP: 00007fb863615eaf R08: 0000000000000000 R09: 0000000000000000 [ 456.628993][T10652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 456.636973][T10652] R13: 00007fb863808038 R14: 00007fb863807fa0 R15: 00007ffdb81ef918 [ 456.644990][T10652] [ 456.648299][T10652] Kernel Offset: disabled [ 456.652676][T10652] Rebooting in 86400 seconds..