last executing test programs: 1m40.026321336s ago: executing program 1 (id=62): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) pipe2$9p(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000580)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x80, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB]) 1m39.339583187s ago: executing program 1 (id=66): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x2) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0x920) 1m38.970997925s ago: executing program 1 (id=69): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x43, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) sendmsg$nl_route(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000004840)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000004880)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) sched_setscheduler(r2, 0x1, &(0x7f00000048c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000004900), 0x0, 0x0) read$msr(r3, &(0x7f000000d000)=""/102368, 0x18fe0) r4 = add_key$keyring(&(0x7f0000026000), &(0x7f0000026040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000026080)='asymmetric\x00', &(0x7f00000260c0)=@chain) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev={0xac, 0x14, 0x14, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0xe599, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x6, 0x0, 0xffffffff7fffffff}, {0xfffffffffffffffc, 0x6, 0xffffffffffffff7f}, 0x1, 0x0, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x41}, 0x4d5, 0x6c}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x3, 0x3, 0x0, 0x400000}}, 0xe8) connect$inet6(r5, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x50) 1m36.013689918s ago: executing program 1 (id=76): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0x40, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0x3, 0x4, 0x8, 0x9, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000006c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x24, 0x29, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff}, {0x2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40400dc}, 0x0) 1m32.263093712s ago: executing program 1 (id=80): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1c0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x400008bf) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) syz_open_procfs$namespace(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000700)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000780)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000007c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000880)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000900), 0x318, 0x0) recvmmsg(r3, &(0x7f0000000940), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000980)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="280000002100050125bd70000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x28}}, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000002180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 1m31.245787327s ago: executing program 1 (id=83): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000054c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000005500)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000005540)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000005580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000055c0)=@abs, 0x6e) syz_clone(0xa1209200, 0x0, 0x44, 0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000005640), 0x651, 0x0) recvmmsg(r1, &(0x7f0000005680), 0x4000087, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000040)=0xc, 0x4) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r3) write(r3, &(0x7f0000001b00)="66000000220047000500fc0f8980e8ff06006d20002b1ffec0906849199f90e90101c7bb0000d3e7ff0b317cfdc617ab685b77fa89b5843e9fb69ea04aab8950a19d1cb58605cc23e7c515927d846ba9769d3cd91cfc183ce736f56a28e5145ba2f94812237d", 0x66) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000001b80)=0x1000, 0x4) recvmmsg$unix(r3, &(0x7f0000001cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001d00)}}], 0x1, 0x20000, 0x0) r5 = syz_mount_image$vfat(&(0x7f00000056c0), &(0x7f0000005700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x99c455, 0x0, 0x40, 0x0, &(0x7f0000005800)) syz_mount_image$vfat(&(0x7f0000005840), &(0x7f0000005880)='./file0\x00', 0x2018000, &(0x7f00000058c0)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES8, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0, @ANYRESDEC, @ANYRES16, @ANYRES64=r5], 0x1, 0x304, &(0x7f0000005940)="$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") syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES32=r4, @ANYRES64=r3], 0x3, 0x1521, &(0x7f0000000540)="$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") truncate(&(0x7f0000001a80)='./file1\x00', 0x400) open(&(0x7f0000001ac0)='./file1\x00', 0x109942, 0x6e) sync_file_range(r3, 0x4, 0x7f, 0x3) 1m16.130021506s ago: executing program 32 (id=83): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000054c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000005500)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000005540)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000005580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000055c0)=@abs, 0x6e) syz_clone(0xa1209200, 0x0, 0x44, 0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000005640), 0x651, 0x0) recvmmsg(r1, &(0x7f0000005680), 0x4000087, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000040)=0xc, 0x4) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r3) write(r3, &(0x7f0000001b00)="66000000220047000500fc0f8980e8ff06006d20002b1ffec0906849199f90e90101c7bb0000d3e7ff0b317cfdc617ab685b77fa89b5843e9fb69ea04aab8950a19d1cb58605cc23e7c515927d846ba9769d3cd91cfc183ce736f56a28e5145ba2f94812237d", 0x66) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000001b80)=0x1000, 0x4) recvmmsg$unix(r3, &(0x7f0000001cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001d00)}}], 0x1, 0x20000, 0x0) r5 = syz_mount_image$vfat(&(0x7f00000056c0), &(0x7f0000005700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x99c455, 0x0, 0x40, 0x0, &(0x7f0000005800)) syz_mount_image$vfat(&(0x7f0000005840), &(0x7f0000005880)='./file0\x00', 0x2018000, &(0x7f00000058c0)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES8, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0, @ANYRESDEC, @ANYRES16, @ANYRES64=r5], 0x1, 0x304, &(0x7f0000005940)="$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") syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES32=r4, @ANYRES64=r3], 0x3, 0x1521, &(0x7f0000000540)="$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") truncate(&(0x7f0000001a80)='./file1\x00', 0x400) open(&(0x7f0000001ac0)='./file1\x00', 0x109942, 0x6e) sync_file_range(r3, 0x4, 0x7f, 0x3) 18.427240011s ago: executing program 3 (id=380): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x10, &(0x7f00000002c0), 0x4, 0x61f, &(0x7f0000000880)="$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") r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000ec0)=@file={0x1, './file0\x00'}, 0x6e) 17.691448027s ago: executing program 3 (id=381): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x43, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) sendmsg$nl_route(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000004840)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000004880)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) sched_setscheduler(r2, 0x1, &(0x7f00000048c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000004900), 0x0, 0x0) read$msr(r3, &(0x7f000000d000)=""/102368, 0x18fe0) r4 = add_key$keyring(&(0x7f0000026000), &(0x7f0000026040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000026080)='asymmetric\x00', &(0x7f00000260c0)=@chain) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev={0xac, 0x14, 0x14, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0xe599, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x6, 0x0, 0xffffffff7fffffff}, {0xfffffffffffffffc, 0x6, 0xffffffffffffff7f}, 0x1, 0x0, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x41}, 0x4d5, 0x6c}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x3, 0x3, 0x0, 0x400000}}, 0xe8) connect$inet6(r6, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000001000000010400000200000000520000", @ANYRES32=0x1, @ANYBLOB="8d0f00"/15, @ANYRES32=r5, @ANYBLOB="030000000300000002ed0000000000000000000000000000000000006680cd09875d94079edee465f367604f98766945b9146ac558"], 0x50) 15.693663772s ago: executing program 3 (id=386): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000001280)={[{@resuid}, {@usrjquota, 0x2e}, {@jqfmt_vfsv1}, {@resuid}, {@grpquota}, {@errors_continue}, {@journal_checksum}], [], 0x2e}, 0x1, 0x472, &(0x7f0000000340)="$eJzs20tvG0UcAPD/OnH6JqGURx9AoCAiHkmTFuiBCwikXpCQ4FCOIU2r0rRBTZBoVdGAUDmifgLgiMQn4AQXBJxAXEHigoSQKtQLhQNatPZu6ya28Stxi38/ye3M7mxm/rs79uyMHcDAGs/+SSK2R8RPIxGj1ezNBcar/127emHur6sX5pJI01f/SCrl/rx6Ya4oWhy3Lc9MlCJKHySxt069S+fOn5pdWJg/m+enlk+/NbV07vxTJ0/Pnpg/MX9m5vDhQwenn31m5umexLkja+uedxf37T7y+uWX545efuPbz7Pt2/P9tXFUjXVd53iM33wuazwa8Wuapl3XcavYUZNOhvvYENoyFBHZ5Spn/T9GYyhuXLzReOn9vjYOWFdpmqab1mwdKhIrKfA/lkS/WwD0R/FBnz3/Fq8NHH703ZXnqw9AWdzX8ld1z3CU8jLlVc+3vTQeEUdX/v44e0XdeQgAgN76Mhv/PFlv/FeKe2rK3RHVtaGxiLgzInZGxF0RsSsi7o6olL03Iu5rs/7xVfm1458ftnQUWIuy8d9z+drWzeO/YvQXY0N5bkcl/nJy/OTC/IH8nExEeVOWn25Sx1cv/vhRo32147/sldVfjAXzdvw+vGqC7tjs8mw3Mde68l7EnuF68SfXVwKSiNgdEXs6+PvZOTv5+Gf7Gu3/7/ib6ME6U/ppxGPV678Sq+IvJM3XJ6c2x8L8ganirljru+8vvdKo/q7i74Hs+m+te/9fj38sqV2vXWq/jks/f9jwmabT+38kea2SHsm3vTO7vHx2OmIkWVm7febGsUW+KJ/FP7G/fv/fGfHPJ/lxeyMiu4nvj4gHIuLBvO0PRcTDEbG/SfzfvPDIm53Hv76y+I+1df3bTwyd+vqLRvW3dv0PVVIT+ZZW3v9abWA35w4AAABuF0nlO/BJaTKf49wepdLkZPU7/Ltia2lhcWn5ieOLb585Vv2u/FiUS8VM12jNfOh0Pjdc5GdW5Q9W5o3TNE23VPKTc4sL67WmDrRmW4P+n/ltqN+tA9ZdW+tojX7RBtyW/F4TBpf+D4Or1f5fXud2ABvP5z8Mrnr9/2LEtT40BdhgPv9hcOn/MLj0fxhc+j8MpG5+198ssfNIx4enXdW+OQ+sw8N/WZez0SwxtIF19TIRpbq7yhFxi7SwSaJ0azSjmtgUEa0Wvtjpjd12os9vTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3ybwAAAP//pCzokA==") sched_setscheduler(0x0, 0x2, &(0x7f0000000800)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000840)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000880)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000900)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000980), 0x651, 0x0) recvmmsg(r1, &(0x7f00000009c0), 0x4000087, 0x2, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) gettid() syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000001c0)='./file1\x00', 0x8, &(0x7f0000000200)={[{@shortname_win95}, {@utf8no}, {@uni_xlate}, {@fat=@check_strict}, {@rodir}, {@fat=@flush}, {@rodir}, {@shortname_winnt}, {@uni_xlate}, {@fat=@dos1xfloppy}, {@numtail}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@uni_xlateno}, {@rodir}, {@shortname_lower}]}, 0x1, 0x2a7, &(0x7f0000000b40)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xf, 0x4, 0x8, 0xc, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x6, 0xd, &(0x7f0000000f40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000fc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001080)={0x14, 0x42, 0x201, 0x0, 0x25dfdbfd, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x24040000}, 0x400ccc0) syz_genetlink_get_family_id$tipc2(&(0x7f00000010c0), r4) mount$9p_fd(0x0, 0x0, &(0x7f0000000ac0), 0x2010001, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000b00)='.\x00', 0x100, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000f00), 0xffffffffffffffff) 7.304107352s ago: executing program 3 (id=425): setns(0xc9, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001980)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1"], 0xa4}}, 0x0) 7.071449705s ago: executing program 3 (id=428): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000006c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x24, 0x29, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff}, {0x2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40400dc}, 0x0) 6.8296542s ago: executing program 3 (id=431): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x43, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) sendmsg$nl_route(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000004840)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000004880)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) sched_setscheduler(r2, 0x1, &(0x7f00000048c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000004900), 0x0, 0x0) read$msr(r3, &(0x7f000000d000)=""/102368, 0x18fe0) r4 = add_key$keyring(&(0x7f0000026000), &(0x7f0000026040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000026080)='asymmetric\x00', &(0x7f00000260c0)=@chain) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev={0xac, 0x14, 0x14, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0xe599, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x6, 0x0, 0xffffffff7fffffff}, {0xfffffffffffffffc, 0x6, 0xffffffffffffff7f}, 0x1, 0x0, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x41}, 0x4d5, 0x6c}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x3, 0x3, 0x0, 0x400000}}, 0xe8) connect$inet6(r6, &(0x7f0000000540)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000001000000010400000200000000520000", @ANYRES32=0x1, @ANYBLOB="8d0f00"/15, @ANYRES32=r5, @ANYBLOB="030000000300000002ed0000000000000000000000000000000000006680cd09875d94079edee465f367604f98766945b9146ac558c998466507cddd9c65d4256521374c74c2ffcfaa678a564b199d"], 0x50) 6.804584583s ago: executing program 4 (id=432): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000200)) 6.595113614s ago: executing program 0 (id=434): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) io_setup(0x9, &(0x7f0000000040)=0x0) r2 = eventfd2(0x7, 0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xff45, r0, &(0x7f0000000100)="d1", 0x1, 0x6, 0x0, 0x5, r2}]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.589436895s ago: executing program 4 (id=435): r0 = syz_open_procfs(0x0, &(0x7f0000001880)='coredump_filter\x00') writev(r0, &(0x7f00000018c0)=[{&(0x7f0000001900)='4', 0x1}], 0x1) 4.863261972s ago: executing program 4 (id=437): unshare(0x2c040480) setuid(0xee01) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000c61) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0) 4.760596072s ago: executing program 0 (id=438): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000280), 0x318, 0x0) recvmmsg(r3, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) mkdirat(r0, 0x0, 0x3) gettid() timer_create(0x1, &(0x7f0000000340)={0x0, 0x21, 0x4}, &(0x7f0000000380)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./file2\x00', 0x0, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0xb, 0xfffff038}, {0x20, 0x81, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x2000000}]}, 0x10) sendmmsg(r5, &(0x7f0000001c00), 0x400000000000159, 0x40840) 4.647093654s ago: executing program 4 (id=440): openat$dir(0xffffffffffffff9c, 0x0, 0x1c3040, 0x0) r0 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000840)='./file0\x00', 0x104) r2 = open$dir(&(0x7f0000000880)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x2, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000a00)='GPL\x00', 0x1, 0x0, 0x0, 0x100, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000380)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a80)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)=[0x0], &(0x7f0000000b40)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x1080000000000) 4.10842746s ago: executing program 4 (id=442): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000001140)={0xa, 0xe22, 0xcffb, @mcast1, 0x4}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000011c0)=[{&(0x7f0000001200)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b0009008000", 0x2c}], 0x1) 3.727346658s ago: executing program 0 (id=443): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x161) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000480)='10', 0x2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) r2 = dup(r0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000004c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 3.302653582s ago: executing program 4 (id=444): syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000a40)='./bus\x00', 0x8, &(0x7f0000000a80), 0x5, 0x50c, &(0x7f0000002180)="$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") syz_mount_image$vfat(&(0x7f00000026c0), &(0x7f0000002700)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f0000002740)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xe, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) finit_module(r0, &(0x7f0000000140)='\x00', 0x1) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x4000087, 0x2, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, r1, 0x0, 0x5005) socket$key(0xf, 0x3, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8001, 0x1000005, 0x2172, 0xffffffffffffffff, 0x0) r4 = add_key(&(0x7f0000000200)='asymmetric\x00', 0x0, &(0x7f0000000ac0), 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000001040)={r4}, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ee) 3.198971542s ago: executing program 2 (id=445): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000800)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000840)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000880)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000900)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000980), 0x651, 0x0) recvmmsg(r1, &(0x7f00000009c0), 0x4000087, 0x2, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) gettid() syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000001c0)='./file1\x00', 0x8, &(0x7f0000000200)={[{@shortname_win95}, {@utf8no}, {@uni_xlate}, {@fat=@check_strict}, {@rodir}, {@fat=@flush}, {@rodir}, {@shortname_winnt}, {@uni_xlate}, {@fat=@dos1xfloppy}, {@numtail}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@uni_xlateno}, {@rodir}, {@shortname_lower}]}, 0x1, 0x2a7, &(0x7f0000000b40)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xf, 0x4, 0x8, 0xc, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x6, 0xd, &(0x7f0000000f40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000fc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001080)={0x14, 0x42, 0x201, 0x0, 0x25dfdbfd, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x24040000}, 0x400ccc0) syz_genetlink_get_family_id$tipc2(&(0x7f00000010c0), r4) mount$9p_fd(0x0, 0x0, &(0x7f0000000ac0), 0x2010001, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000b00)='.\x00', 0x100, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000f00), 0xffffffffffffffff) 2.993380553s ago: executing program 0 (id=446): mkdirat(0xffffffffffffff9c, &(0x7f0000001040)='./proc\x00', 0x1fc) mount(0x0, &(0x7f0000001080)='./proc\x00', &(0x7f00000010c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) lseek(r0, 0x400000000000a, 0x3) 1.549314422s ago: executing program 2 (id=447): setns(0xc9, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001980)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1"], 0xa4}}, 0x0) 1.357616271s ago: executing program 2 (id=448): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f00000003c0)={0x2b, "381dea61a169a5197897d6c8971e7f2791afbb2d439a1b5e053aa97215d21cb156eaeec943eef56de23a8b72d24dc855da745ba68387217977ae821ece2ca5792fb7da336253e4ba16cbcf0581d98707d7ededc589f8c33b1e94c076aa62208659826ea5b18a4a903cfdec464f6840d0bd9f540d9252d5df44f5debb0741df86"}) 1.239098654s ago: executing program 0 (id=449): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000006c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x24, 0x29, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff}, {0x2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40400dc}, 0x0) 1.202433247s ago: executing program 2 (id=450): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0x1) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) 955.718703ms ago: executing program 0 (id=451): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) r3 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$md_new_array(r3, &(0x7f0000000100)={'md', @num=0x0}, 0x3) r4 = openat$md_sysfs(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$md_sysfs(r4, &(0x7f0000000180)=@str='raid1', 0x5) r5 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000240)={'/sys/block/md', @num=0x0, '/md/', @array='raid_disks\x00'}, 0x1, 0x0) write$md_sysfs(r5, &(0x7f0000000280)=@str='2', 0x1) r6 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f00000002c0)={'/sys/block/md', @num=0x0, '/md/', @array='component_size\x00'}, 0x1, 0x0) write$md_sysfs(r6, &(0x7f0000000300)=@str='512', 0x3) r7 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000340)={'/sys/block/md', @num=0x0, '/md/', @array='new_dev\x00'}, 0x1, 0x0) write$md_sysfs(r7, &(0x7f0000000380)=@dev={'1:', 0x0}, 0x16) write$md_sysfs(r7, &(0x7f00000003c0)=@dev={'1:', 0x1}, 0x16) r8 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000400)={'/sys/block/md', @num=0x0, '/md/', @rdev={@ram={'dev-ram', 0x0}, 'slot\x00'}}, 0x1, 0x0) write$md_sysfs(r8, &(0x7f0000000440)=@str='0', 0x1) r9 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000480)={'/sys/block/md', @num=0x0, '/md/', @rdev={@ram={'dev-ram', 0x1}, 'slot\x00'}}, 0x1, 0x0) write$md_sysfs(r9, &(0x7f00000004c0)=@str='1', 0x1) r10 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000500)={'/sys/block/md', @num=0x0, '/md/', @array='array_state\x00'}, 0x1, 0x0) write$md_sysfs(r10, &(0x7f0000000540)=@str='active', 0x6) r11 = openat$md(0xffffffffffffff9c, &(0x7f0000000580)={'/dev/md', @num=0x0}, 0x2, 0x0) pwrite64(r11, &(0x7f00000005c0)="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0x20, 0x1000) close(r11) write$md_sysfs(r10, &(0x7f0000000600)=@str='clear', 0x5) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xe) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x25dfdbfd, {0x54}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) 105.1725ms ago: executing program 2 (id=452): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000001140)={0xa, 0xe22, 0xcffb, @mcast1, 0x4}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000011c0)=[{&(0x7f0000001200)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b0009008000", 0x2c}], 0x1) 0s ago: executing program 2 (id=453): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x81, 0x40, 0x4}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cc, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @loopback, 0x8}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0xf, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}}, 0x0, 0x0, 0x2, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.59' (ED25519) to the list of known hosts. syzkaller login: [ 71.589525][ T5771] cgroup: Unknown subsys name 'net' [ 71.723579][ T5771] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.086334][ T5771] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.624415][ T5791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.634388][ T5791] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.643016][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.654333][ T5794] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.657245][ T5791] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.669577][ T5794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.676909][ T5794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.685438][ T5794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.692684][ T5797] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.701395][ T5797] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.703594][ T5795] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.709851][ T5797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.717373][ T5795] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.722611][ T5794] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.738930][ T5794] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.739202][ T5795] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.746897][ T5794] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.771647][ T5793] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.782262][ T5793] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.787539][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.789947][ T5793] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 74.797139][ T5791] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 74.804899][ T5793] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.812081][ T5791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.895863][ T5784] (null): rxe_set_mtu: Set mtu to 1024 [ 74.904996][ T5785] (null): rxe_set_mtu: Set mtu to 1024 [ 74.911268][ T5783] (null): rxe_set_mtu: Set mtu to 1024 [ 74.917980][ T5783] rxe_eth0 speed is unknown, defaulting to 1000 [ 74.926227][ T5784] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 74.932865][ T5785] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 74.937583][ T5782] (null): rxe_set_mtu: Set mtu to 1024 [ 74.945444][ T5782] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 74.957805][ T5783] rxe_eth0 speed is unknown, defaulting to 1000 [ 74.965723][ T5783] rxe_eth0 speed is unknown, defaulting to 1000 [ 75.209074][ T5783] infiniband rxe0: set active [ 75.214582][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 75.221390][ T5783] infiniband rxe0: added rxe_eth0 [ 75.329748][ T5783] RDS/IB: rxe0: added [ 75.334500][ T5783] smc: adding ib device rxe0 with port count 1 [ 75.357947][ T5783] smc: ib device rxe0 port 1 has pnetid [ 75.383097][ T5788] rxe_eth0 speed is unknown, defaulting to 1000 [ 75.410382][ T5783] rxe_eth0 speed is unknown, defaulting to 1000 [ 75.584318][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 75.617220][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 75.630875][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 75.772273][ T5783] rxe_eth0 speed is unknown, defaulting to 1000 [ 75.938160][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.945899][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.967207][ T5784] bridge_slave_0: entered allmulticast mode [ 75.974942][ T5784] bridge_slave_0: entered promiscuous mode [ 75.993696][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.001071][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.009120][ T5782] bridge_slave_0: entered allmulticast mode [ 76.015890][ T5782] bridge_slave_0: entered promiscuous mode [ 76.026618][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.033782][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.041735][ T5784] bridge_slave_1: entered allmulticast mode [ 76.049881][ T5784] bridge_slave_1: entered promiscuous mode [ 76.098735][ T5783] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.105148][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.112417][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.120058][ T5785] bridge_slave_0: entered allmulticast mode [ 76.127470][ T5785] bridge_slave_0: entered promiscuous mode [ 76.136846][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.143992][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.152399][ T5782] bridge_slave_1: entered allmulticast mode [ 76.159978][ T5782] bridge_slave_1: entered promiscuous mode [ 76.216964][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.224697][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.242767][ T5785] bridge_slave_1: entered allmulticast mode [ 76.250812][ T5785] bridge_slave_1: entered promiscuous mode [ 76.291997][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.309648][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.338595][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.373121][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.406059][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.422313][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.465615][ T5783] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.534312][ T5782] team0: Port device team_slave_0 added [ 76.549368][ T5782] team0: Port device team_slave_1 added [ 76.584321][ T5784] team0: Port device team_slave_0 added [ 76.603358][ T5784] team0: Port device team_slave_1 added [ 76.695520][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.703235][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.737458][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.755774][ T5785] team0: Port device team_slave_0 added [ 76.762765][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.769878][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.796728][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.814755][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.817454][ T5787] Bluetooth: hci2: command tx timeout [ 76.824853][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.853398][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.865034][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.873927][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.887467][ T5787] Bluetooth: hci0: command tx timeout [ 76.903357][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.905826][ T5100] Bluetooth: hci3: command tx timeout [ 76.921912][ T5791] Bluetooth: hci1: command tx timeout [ 76.935498][ T5785] team0: Port device team_slave_1 added [ 76.963421][ T5788] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.979770][ T5449] infiniband rxe0: set active [ 77.022034][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.029210][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.056217][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.075363][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.086996][ T5784] hsr_slave_0: entered promiscuous mode [ 77.093422][ T5784] hsr_slave_1: entered promiscuous mode [ 77.107160][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.114128][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.141228][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.244188][ T5782] hsr_slave_0: entered promiscuous mode [ 77.250540][ T5782] hsr_slave_1: entered promiscuous mode [ 77.257467][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.265321][ T5782] Cannot create hsr debugfs directory [ 77.288079][ T5785] hsr_slave_0: entered promiscuous mode [ 77.294592][ T5785] hsr_slave_1: entered promiscuous mode [ 77.301311][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.309121][ T5785] Cannot create hsr debugfs directory [ 77.569326][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 77.743535][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.750921][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.758585][ T5783] bridge_slave_0: entered allmulticast mode [ 77.765802][ T5783] bridge_slave_0: entered promiscuous mode [ 77.784410][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.792408][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.799827][ T5783] bridge_slave_1: entered allmulticast mode [ 77.809226][ T5783] bridge_slave_1: entered promiscuous mode [ 77.843270][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.856572][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.908260][ T5784] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.921616][ T5784] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.935901][ T5783] team0: Port device team_slave_0 added [ 77.944875][ T5783] team0: Port device team_slave_1 added [ 77.962096][ T5784] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.972677][ T5784] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.993628][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.000744][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.027131][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.065910][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.073001][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.099895][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.157803][ T5782] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.168439][ T5782] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.178732][ T5782] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.204324][ T5783] hsr_slave_0: entered promiscuous mode [ 78.211155][ T5783] hsr_slave_1: entered promiscuous mode [ 78.217524][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.225121][ T5783] Cannot create hsr debugfs directory [ 78.241761][ T5782] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.361297][ T5785] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.389460][ T5785] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.430904][ T5785] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.442068][ T5785] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.533986][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.620096][ T5783] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.630094][ T5783] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.647994][ T5783] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.661534][ T5783] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.676119][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.701089][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.708378][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.739668][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.750907][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.760734][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.767912][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.822055][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.868541][ T2983] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.875667][ T2983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.887453][ T5100] Bluetooth: hci2: command tx timeout [ 78.889456][ T2983] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.900227][ T2983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.912665][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.940989][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.948507][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.967229][ T5791] Bluetooth: hci3: command tx timeout [ 78.967272][ T5787] Bluetooth: hci1: command tx timeout [ 78.972709][ T5100] Bluetooth: hci0: command tx timeout [ 79.008810][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.015903][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.177863][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.250500][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.285498][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.292738][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.331858][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.339085][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.469495][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.491632][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.635437][ T5785] veth0_vlan: entered promiscuous mode [ 79.651880][ T5785] veth1_vlan: entered promiscuous mode [ 79.691243][ T5784] veth0_vlan: entered promiscuous mode [ 79.728206][ T5784] veth1_vlan: entered promiscuous mode [ 79.743567][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.787236][ T5785] veth0_macvtap: entered promiscuous mode [ 79.841459][ T5785] veth1_macvtap: entered promiscuous mode [ 79.865109][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.893698][ T5784] veth0_macvtap: entered promiscuous mode [ 79.907996][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.932940][ T5784] veth1_macvtap: entered promiscuous mode [ 79.946085][ T5782] veth0_vlan: entered promiscuous mode [ 79.963103][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.986878][ T5782] veth1_vlan: entered promiscuous mode [ 79.994249][ T5785] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.003912][ T5785] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.012986][ T5785] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.023422][ T5785] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.044935][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.056142][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.069633][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.081250][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.092353][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.104612][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.137431][ T5784] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.147508][ T5784] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.156254][ T5784] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.165632][ T5784] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.239653][ T5783] veth0_vlan: entered promiscuous mode [ 80.282593][ T5783] veth1_vlan: entered promiscuous mode [ 80.333861][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.345639][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.365999][ T5782] veth0_macvtap: entered promiscuous mode [ 80.404087][ T5782] veth1_macvtap: entered promiscuous mode [ 80.444193][ T2983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.445086][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.464508][ T2983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.465299][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.484649][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.495893][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.513149][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.543818][ T5783] veth0_macvtap: entered promiscuous mode [ 80.577801][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.592319][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.604050][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.615114][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.628932][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.641977][ T5783] veth1_macvtap: entered promiscuous mode [ 80.701292][ T5785] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 80.701600][ T5782] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.741510][ T5782] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.753923][ T5782] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.763878][ T5782] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.783556][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.809490][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.809558][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.841587][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.855810][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.868011][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.869399][ T5884] syz.2.3[5884]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 80.881412][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.902810][ T5884] loop2: detected capacity change from 0 to 512 [ 80.906947][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.940252][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.953593][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.963146][ T5884] EXT4-fs error (device loop2): ext4_orphan_get:1408: inode #15: comm syz.2.3: iget: bad i_size value: 38620345925642 [ 80.964193][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.987928][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.998540][ T5100] Bluetooth: hci2: command tx timeout [ 81.005448][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.018814][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.026802][ T5884] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.3: couldn't read orphan inode 15 (err -117) [ 81.029606][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.048612][ T5884] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.051779][ T5100] Bluetooth: hci0: command tx timeout [ 81.066674][ T5787] Bluetooth: hci3: command tx timeout [ 81.068604][ T5100] Bluetooth: hci1: command tx timeout [ 81.085735][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.119792][ T5886] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 81.129980][ T28] audit: type=1800 audit(1794435663.200:2): pid=5884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 81.146952][ T5783] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.196561][ T5783] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.208753][ T5783] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.220647][ T5783] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.250955][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.362220][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.371859][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.504909][ T2983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.528718][ T2983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.575075][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.589054][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.672763][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.698861][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.731321][ T2983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.751420][ T2983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.890508][ T5898] loop2: detected capacity change from 0 to 512 [ 82.029068][ T5898] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.057175][ T5898] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.185941][ T5907] loop0: detected capacity change from 0 to 512 [ 82.225399][ T5898] EXT4-fs error (device loop2): ext4_empty_dir:3141: inode #12: comm syz.2.9: Directory hole found for htree leaf block 0 [ 82.369049][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.548925][ T5907] EXT4-fs (loop0): Test dummy encryption mode enabled [ 82.555757][ T5907] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 82.613589][ T5907] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 82.792463][ T5907] EXT4-fs error (device loop0): ext4_orphan_get:1434: comm syz.0.1: bad orphan inode 131083 [ 82.900154][ T5907] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.982810][ T5929] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 83.056877][ T5100] Bluetooth: hci2: command tx timeout [ 83.127154][ T5791] Bluetooth: hci3: command tx timeout [ 83.132686][ T5787] Bluetooth: hci0: command tx timeout [ 83.138382][ T5100] Bluetooth: hci1: command tx timeout [ 83.787605][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.845915][ T5944] syzkaller1: entered promiscuous mode [ 83.860257][ T5944] syzkaller1: entered allmulticast mode [ 84.114127][ T5948] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 84.430496][ T5954] FAULT_INJECTION: forcing a failure. [ 84.430496][ T5954] name failslab, interval 1, probability 0, space 0, times 1 [ 84.455699][ T5954] CPU: 0 PID: 5954 Comm: syz.1.27 Not tainted syzkaller #0 [ 84.462963][ T5954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 84.473066][ T5954] Call Trace: [ 84.476365][ T5954] [ 84.479307][ T5954] dump_stack_lvl+0x18c/0x250 [ 84.484023][ T5954] ? show_regs_print_info+0x20/0x20 [ 84.489239][ T5954] ? load_image+0x420/0x420 [ 84.493774][ T5954] ? __might_sleep+0xe0/0xe0 [ 84.498392][ T5954] ? __lock_acquire+0x7eb0/0x7eb0 [ 84.503433][ T5954] ? kasan_set_track+0x5f/0x70 [ 84.508228][ T5954] ? __kasan_kmalloc+0x8f/0xa0 [ 84.513034][ T5954] ? pty_common_install+0xda/0x770 [ 84.518172][ T5954] should_fail_ex+0x394/0x4c0 [ 84.522887][ T5954] should_failslab+0x9/0x20 [ 84.527441][ T5954] slab_pre_alloc_hook+0x59/0x300 [ 84.533879][ T5954] ? alloc_tty_struct+0xa7/0x7a0 [ 84.538854][ T5954] __kmem_cache_alloc_node+0x53/0x260 [ 84.544358][ T5954] ? alloc_tty_struct+0xa7/0x7a0 [ 84.549328][ T5954] kmalloc_trace+0x2a/0xe0 [ 84.553788][ T5954] alloc_tty_struct+0xa7/0x7a0 [ 84.559301][ T5954] ? tty_init_dev+0x4c0/0x4c0 [ 84.564034][ T5954] pty_common_install+0x166/0x770 [ 84.569094][ T5954] tty_init_dev+0xd3/0x4c0 [ 84.573530][ T5954] ptmx_open+0xdf/0x2c0 [ 84.577702][ T5954] ? pty_start+0x140/0x140 [ 84.582137][ T5954] chrdev_open+0x58c/0x600 [ 84.586580][ T5954] ? cd_forget+0x160/0x160 [ 84.591401][ T5954] ? fsnotify_perm+0x3ed/0x5e0 [ 84.596198][ T5954] do_dentry_open+0x880/0x14b0 [ 84.600994][ T5954] ? cd_forget+0x160/0x160 [ 84.605467][ T5954] path_openat+0x284f/0x3270 [ 84.610110][ T5954] ? do_sys_openat2+0xda/0x1d0 [ 84.614919][ T5954] ? do_filp_open+0x430/0x430 [ 84.619646][ T5954] do_filp_open+0x1f2/0x430 [ 84.624176][ T5954] ? vfs_tmpfile+0x620/0x620 [ 84.628905][ T5954] ? _raw_spin_unlock+0x28/0x40 [ 84.634167][ T5954] ? alloc_fd+0x590/0x640 [ 84.638537][ T5954] do_sys_openat2+0x134/0x1d0 [ 84.643241][ T5954] ? do_sys_open+0xe0/0xe0 [ 84.647681][ T5954] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 84.654323][ T5954] ? lock_chain_count+0x20/0x20 [ 84.659253][ T5954] __x64_sys_openat+0x139/0x160 [ 84.664148][ T5954] do_syscall_64+0x55/0xb0 [ 84.668588][ T5954] ? clear_bhb_loop+0x40/0x90 [ 84.673288][ T5954] ? clear_bhb_loop+0x40/0x90 [ 84.677986][ T5954] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 84.683918][ T5954] RIP: 0033:0x7fe7f1da8f19 [ 84.688363][ T5954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.707997][ T5954] RSP: 002b:00007fe7f2bca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 84.716448][ T5954] RAX: ffffffffffffffda RBX: 00007fe7f2025fa0 RCX: 00007fe7f1da8f19 [ 84.724446][ T5954] RDX: 0000000000000041 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 84.732445][ T5954] RBP: 00007fe7f1e37f6d R08: 0000000000000000 R09: 0000000000000000 [ 84.740445][ T5954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.748448][ T5954] R13: 00007fe7f2026038 R14: 00007fe7f2025fa0 R15: 00007ffe7d54ccd8 [ 84.756469][ T5954] [ 84.923524][ T5964] netlink: 'syz.0.31': attribute type 21 has an invalid length. [ 85.223384][ T5973] FAULT_INJECTION: forcing a failure. [ 85.223384][ T5973] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 85.223414][ T5973] CPU: 1 PID: 5973 Comm: syz.0.33 Not tainted syzkaller #0 [ 85.223432][ T5973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 85.223443][ T5973] Call Trace: [ 85.223450][ T5973] [ 85.223459][ T5973] dump_stack_lvl+0x18c/0x250 [ 85.223489][ T5973] ? show_regs_print_info+0x20/0x20 [ 85.223513][ T5973] ? load_image+0x420/0x420 [ 85.223535][ T5973] ? __might_fault+0xaa/0x120 [ 85.223557][ T5973] ? __lock_acquire+0x7eb0/0x7eb0 [ 85.223584][ T5973] should_fail_ex+0x394/0x4c0 [ 85.223610][ T5973] strncpy_from_user+0x36/0x2f0 [ 85.223640][ T5973] getname_flags+0xf6/0x500 [ 85.223663][ T5973] __se_sys_mq_unlink+0x8a/0x310 [ 85.223693][ T5973] do_syscall_64+0x55/0xb0 [ 85.223714][ T5973] ? clear_bhb_loop+0x40/0x90 [ 85.223737][ T5973] ? clear_bhb_loop+0x40/0x90 [ 85.223763][ T5973] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 85.223786][ T5973] RIP: 0033:0x7fe8dada8f19 [ 85.223803][ T5973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.223818][ T5973] RSP: 002b:00007fe8dbc74028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f1 [ 85.223840][ T5973] RAX: ffffffffffffffda RBX: 00007fe8db025fa0 RCX: 00007fe8dada8f19 [ 85.223853][ T5973] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 85.223864][ T5973] RBP: 00007fe8dae37f6d R08: 0000000000000000 R09: 0000000000000000 [ 85.223877][ T5973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.223888][ T5973] R13: 00007fe8db026038 R14: 00007fe8db025fa0 R15: 00007fff8a119f98 [ 85.223915][ T5973] [ 85.593127][ T5981] loop0: detected capacity change from 0 to 512 [ 85.596650][ T5981] EXT4-fs (loop0): Test dummy encryption mode enabled [ 85.604130][ T5981] EXT4-fs error (device loop0): ext4_orphan_get:1408: inode #15: comm syz.0.35: inode has both inline data and extents flags [ 85.612136][ T5981] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.35: couldn't read orphan inode 15 (err -117) [ 85.618505][ T5981] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.834344][ T5788] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 86.028863][ T5788] usb 2-1: Using ep0 maxpacket: 16 [ 86.038543][ T5788] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 86.064634][ T5788] usb 2-1: config 0 interface 0 has no altsetting 0 [ 86.078407][ T5788] usb 2-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 86.093473][ T5788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.109457][ T5788] usb 2-1: Product: syz [ 86.114210][ T5788] usb 2-1: Manufacturer: syz [ 86.119589][ T5788] usb 2-1: SerialNumber: syz [ 86.175553][ T5788] usb 2-1: config 0 descriptor?? [ 86.259739][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.280588][ T5986] loop2: detected capacity change from 0 to 2048 [ 86.340215][ T5986] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.513943][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 86.523519][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.543937][ T5788] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input5 [ 86.591431][ T5788] imon:send_packet: packet tx failed (-71) [ 86.620775][ T5788] imon 2-1:0.0: panel buttons/knobs setup failed [ 86.672266][ T28] audit: type=1326 audit(1794435924.797:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5992 comm="syz.0.40" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8dada8f19 code=0x7ffc0000 [ 86.719954][ T28] audit: type=1326 audit(1794435924.847:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5992 comm="syz.0.40" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8dada8f19 code=0x7ffc0000 [ 86.744603][ C1] vkms_vblank_simulate: vblank timer overrun [ 86.758803][ T5788] rc_core: IR keymap rc-imon-pad not found [ 86.770181][ T5788] Registered IR keymap rc-empty [ 86.777375][ T5788] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 86.794155][ T5788] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 86.813411][ T5788] imon:send_packet: packet tx failed (-71) [ 86.823068][ T28] audit: type=1326 audit(1794435924.847:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5992 comm="syz.0.40" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8dada8f19 code=0x7ffc0000 [ 86.852649][ T5788] imon 2-1:0.0: remote input dev register failed [ 86.859913][ T5788] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 86.879713][ T28] audit: type=1326 audit(1794435924.887:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5992 comm="syz.0.40" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8dada8f19 code=0x7ffc0000 [ 86.913834][ T5997] FAULT_INJECTION: forcing a failure. [ 86.913834][ T5997] name failslab, interval 1, probability 0, space 0, times 0 [ 86.932204][ T5997] CPU: 1 PID: 5997 Comm: syz.0.41 Not tainted syzkaller #0 [ 86.939555][ T5997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 86.949637][ T5997] Call Trace: [ 86.952939][ T5997] [ 86.956712][ T5997] dump_stack_lvl+0x18c/0x250 [ 86.961524][ T5997] ? show_regs_print_info+0x20/0x20 [ 86.966772][ T5997] ? load_image+0x420/0x420 [ 86.971404][ T5997] ? __might_sleep+0xe0/0xe0 [ 86.976057][ T5997] ? __lock_acquire+0x7eb0/0x7eb0 [ 86.981146][ T5997] should_fail_ex+0x394/0x4c0 [ 86.985869][ T5997] should_failslab+0x9/0x20 [ 86.990402][ T5997] slab_pre_alloc_hook+0x59/0x300 [ 86.995486][ T5997] ? d_instantiate+0x6f/0x90 [ 87.000110][ T5997] kmem_cache_alloc+0x5a/0x2d0 [ 87.004941][ T5997] ? alloc_empty_file+0x9e/0x1d0 [ 87.010001][ T5997] alloc_empty_file+0x9e/0x1d0 [ 87.014794][ T5997] alloc_file+0x5b/0x600 [ 87.019109][ T5997] alloc_file_pseudo+0x184/0x210 [ 87.024289][ T5997] ? fput+0x1a0/0x1a0 [ 87.028324][ T5997] ? alloc_fd+0x590/0x640 [ 87.032693][ T5997] sock_alloc_file+0xb7/0x280 [ 87.037406][ T5997] __sys_socket+0x140/0x1b0 [ 87.041938][ T5997] __x64_sys_socket+0x7a/0x90 [ 87.046639][ T5997] do_syscall_64+0x55/0xb0 [ 87.051095][ T5997] ? clear_bhb_loop+0x40/0x90 [ 87.055811][ T5997] ? clear_bhb_loop+0x40/0x90 [ 87.060518][ T5997] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 87.066436][ T5997] RIP: 0033:0x7fe8dada8f19 [ 87.070880][ T5997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.090513][ T5997] RSP: 002b:00007fe8dbc74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 87.098956][ T5997] RAX: ffffffffffffffda RBX: 00007fe8db025fa0 RCX: 00007fe8dada8f19 [ 87.106970][ T5997] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 000000000000001d [ 87.114968][ T5997] RBP: 00007fe8dae37f6d R08: 0000000000000000 R09: 0000000000000000 [ 87.122961][ T5997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.130953][ T5997] R13: 00007fe8db026038 R14: 00007fe8db025fa0 R15: 00007fff8a119f98 [ 87.138963][ T5997] [ 87.142130][ C1] vkms_vblank_simulate: vblank timer overrun [ 87.153465][ T972] cfg80211: failed to load regulatory.db [ 87.166279][ T5788] imon 2-1:0.0: unable to initialize intf0, err 0 [ 87.186709][ T5788] imon:imon_probe: failed to initialize context! [ 87.209010][ T5788] imon 2-1:0.0: unable to register, err -19 [ 87.237188][ T28] audit: type=1326 audit(1794435924.887:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5992 comm="syz.0.40" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fe8dada8f19 code=0x7ffc0000 [ 87.267469][ T28] audit: type=1326 audit(1794435924.887:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5992 comm="syz.0.40" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8dada8f19 code=0x7ffc0000 [ 87.355636][ T28] audit: type=1326 audit(1794435924.887:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5992 comm="syz.0.40" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8dada8f19 code=0x7ffc0000 [ 87.396935][ T5788] usb 2-1: USB disconnect, device number 2 [ 87.509675][ T28] audit: type=1326 audit(1794435924.887:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5992 comm="syz.0.40" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe8dada8f19 code=0x7ffc0000 [ 87.515023][ T6008] loop0: detected capacity change from 0 to 512 [ 87.628980][ T6008] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.642616][ T28] audit: type=1326 audit(1794435924.887:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5992 comm="syz.0.40" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe8dada8f19 code=0x7ffc0000 [ 87.656621][ T6008] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.847047][ T5788] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 87.993158][ T6017] loop2: detected capacity change from 0 to 512 [ 88.043575][ T6017] EXT4-fs error (device loop2): ext4_get_journal_inode:5826: comm syz.2.44: inode #1792: comm syz.2.44: iget: illegal inode # [ 88.066562][ T5788] usb 2-1: Using ep0 maxpacket: 16 [ 88.079281][ T5788] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 88.102222][ T6017] EXT4-fs (loop2): Remounting filesystem read-only [ 88.122505][ T5788] usb 2-1: config 0 interface 0 has no altsetting 0 [ 88.132666][ T6017] EXT4-fs (loop2): no journal found [ 88.149808][ T6017] EXT4-fs (loop2): can't get journal size [ 88.157148][ T5788] usb 2-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 88.166227][ T5788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.187465][ T6017] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 88.190879][ T5788] usb 2-1: Product: syz [ 88.211486][ T6017] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 88.216486][ T5788] usb 2-1: Manufacturer: syz [ 88.226881][ T5788] usb 2-1: SerialNumber: syz [ 88.230522][ T6017] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.255865][ T5788] usb 2-1: config 0 descriptor?? [ 88.508190][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 88.537072][ T5788] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input7 [ 88.577601][ T5788] imon:send_packet: packet tx failed (-71) [ 88.617000][ T5788] imon 2-1:0.0: panel buttons/knobs setup failed [ 88.843119][ T6034] loop1: detected capacity change from 0 to 512 [ 88.860280][ T6034] EXT4-fs (loop1): Test dummy encryption mode enabled [ 88.902383][ T6034] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #15: comm syz.1.47: inode has both inline data and extents flags [ 88.937969][ T6034] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.47: couldn't read orphan inode 15 (err -117) [ 88.952855][ T6034] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.006664][ T5788] rc_core: IR keymap rc-imon-pad not found [ 89.020525][ T8] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.043510][ T5788] Registered IR keymap rc-empty [ 89.058603][ T5788] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 89.128593][ T5788] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 89.176518][ T5788] imon:send_packet: packet tx failed (-71) [ 89.251787][ T5788] imon 2-1:0.0: remote input dev register failed [ 89.282352][ T5788] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 89.407794][ T5788] imon 2-1:0.0: unable to initialize intf0, err 0 [ 89.444740][ T5788] imon:imon_probe: failed to initialize context! [ 89.577998][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.587505][ T5788] imon 2-1:0.0: unable to register, err -19 [ 89.606290][ T5788] usb 2-1: USB disconnect, device number 3 [ 90.864328][ T6086] loop1: detected capacity change from 0 to 512 [ 90.876572][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 90.884582][ T6086] EXT4-fs (loop1): Test dummy encryption mode enabled [ 90.936617][ T6086] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 90.997113][ T6086] EXT4-fs error (device loop1): ext4_orphan_get:1434: comm syz.1.58: bad orphan inode 131083 [ 91.037301][ T6086] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.076666][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 91.083748][ T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 91.095005][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 91.115208][ T8] usb 4-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 91.124812][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.136444][ T8] usb 4-1: Product: syz [ 91.140654][ T8] usb 4-1: Manufacturer: syz [ 91.147359][ T8] usb 4-1: SerialNumber: syz [ 91.160367][ T8] usb 4-1: config 0 descriptor?? [ 91.399172][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 91.887617][ T8] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input9 [ 91.921540][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.960582][ T8] imon:send_packet: packet tx failed (-71) [ 92.001606][ T8] imon 4-1:0.0: panel buttons/knobs setup failed [ 92.196480][ T8] rc_core: IR keymap rc-imon-pad not found [ 92.202462][ T8] Registered IR keymap rc-empty [ 92.212971][ T8] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 92.225735][ T8] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 92.248602][ T8] imon:send_packet: packet tx failed (-71) [ 92.276742][ T8] imon 4-1:0.0: remote input dev register failed [ 92.283382][ T8] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 92.299693][ T8] imon 4-1:0.0: unable to initialize intf0, err 0 [ 92.306585][ T8] imon:imon_probe: failed to initialize context! [ 92.313086][ T8] imon 4-1:0.0: unable to register, err -19 [ 92.340730][ T8] usb 4-1: USB disconnect, device number 2 [ 92.786654][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 92.986523][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 92.999158][ T6095] loop1: detected capacity change from 0 to 1024 [ 93.017764][ T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 93.047413][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 93.092251][ T6095] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 93.102019][ T8] usb 4-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 93.116582][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.126248][ T6095] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 93.134071][ T8] usb 4-1: Product: syz [ 93.134091][ T8] usb 4-1: Manufacturer: syz [ 93.134106][ T8] usb 4-1: SerialNumber: syz [ 93.149557][ T8] usb 4-1: config 0 descriptor?? [ 93.213192][ T6095] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.909591][ T6100] netlink: 12 bytes leftover after parsing attributes in process `syz.2.61'. [ 94.977839][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.004171][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 95.019712][ T8] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input11 [ 95.055681][ T8] imon:send_packet: packet tx failed (-71) [ 95.096519][ T8] imon 4-1:0.0: panel buttons/knobs setup failed [ 95.190127][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.266591][ T8] rc_core: IR keymap rc-imon-pad not found [ 95.322578][ T8] Registered IR keymap rc-empty [ 95.338196][ T8] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 95.367836][ T8] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 95.381168][ T8] imon:send_packet: packet tx failed (-71) [ 95.410091][ T8] imon 4-1:0.0: remote input dev register failed [ 95.423384][ T8] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 95.491222][ T8] imon 4-1:0.0: unable to initialize intf0, err 0 [ 95.507936][ T8] imon:imon_probe: failed to initialize context! [ 95.538077][ T8] imon 4-1:0.0: unable to register, err -19 [ 95.576774][ T8] usb 4-1: USB disconnect, device number 3 [ 95.771936][ T6120] qrtr: Invalid version 0 [ 96.155952][ T6134] loop0: detected capacity change from 0 to 512 [ 96.286112][ T6134] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.448116][ T6139] netlink: 12 bytes leftover after parsing attributes in process `syz.3.71'. [ 97.226608][ T6134] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.477157][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.566639][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 97.776559][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 97.804734][ T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 97.853727][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 97.896846][ T8] usb 4-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 97.908621][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.932610][ T8] usb 4-1: Product: syz [ 97.941936][ T8] usb 4-1: Manufacturer: syz [ 97.951438][ T8] usb 4-1: SerialNumber: syz [ 97.973706][ T8] usb 4-1: config 0 descriptor?? [ 98.273048][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 98.289893][ T8] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input13 [ 98.422088][ T8] imon:send_packet: packet tx failed (-71) [ 98.452528][ T8] imon 4-1:0.0: panel buttons/knobs setup failed [ 98.696498][ T8] rc_core: IR keymap rc-imon-pad not found [ 98.710721][ T8] Registered IR keymap rc-empty [ 98.730729][ T8] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 98.769549][ T8] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 98.800824][ T8] imon:send_packet: packet tx failed (-71) [ 98.836543][ T8] imon 4-1:0.0: remote input dev register failed [ 98.853276][ T8] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 98.898534][ T8] imon 4-1:0.0: unable to initialize intf0, err 0 [ 98.905153][ T8] imon:imon_probe: failed to initialize context! [ 98.911864][ T6124] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 98.925011][ T8] imon 4-1:0.0: unable to register, err -19 [ 98.952944][ T8] usb 4-1: USB disconnect, device number 4 [ 98.979479][ T6153] loop0: detected capacity change from 0 to 512 [ 99.038781][ T6153] ext3: Unknown parameter '.' [ 99.319899][ T6161] loop0: detected capacity change from 0 to 256 [ 101.053889][ T6157] sched: RT throttling activated [ 101.296959][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 102.645775][ T6169] loop3: detected capacity change from 0 to 1024 [ 102.662787][ T6169] EXT4-fs: Ignoring removed bh option [ 102.721518][ T6169] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 102.796368][ T6169] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.906636][ T6183] netlink: 12 bytes leftover after parsing attributes in process `syz.1.80'. [ 103.758881][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.028450][ T6190] loop3: detected capacity change from 0 to 1024 [ 104.067743][ T6190] EXT4-fs: Ignoring removed bh option [ 104.138973][ T6197] loop0: detected capacity change from 0 to 512 [ 104.149521][ T6190] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 104.153540][ T6197] ext3: Unknown parameter '.' [ 104.227674][ T6190] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.373238][ T6201] loop1: detected capacity change from 0 to 128 [ 104.552591][ T6203] loop0: detected capacity change from 0 to 256 [ 107.641137][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.457345][ T6222] loop0: detected capacity change from 0 to 1024 [ 108.468131][ T6222] EXT4-fs: Ignoring removed bh option [ 108.508129][ T6222] EXT4-fs (loop0): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 108.710899][ T6226] netlink: 12 bytes leftover after parsing attributes in process `syz.3.92'. [ 109.553271][ T6222] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.620783][ T6231] loop3: detected capacity change from 0 to 512 [ 109.688798][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.689814][ T6231] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.713757][ T6231] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.849144][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.048211][ T6237] loop3: detected capacity change from 0 to 128 [ 110.208192][ T6237] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 110.276609][ T6237] FAT-fs (loop3): Filesystem has been set read-only [ 110.305707][ T6237] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 110.371282][ T6237] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 110.392806][ T6237] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 110.415525][ T6237] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 110.444664][ T6237] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 110.470423][ T6237] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 110.495188][ T6237] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 110.505728][ T6237] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 110.526809][ T6237] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 110.535381][ T6237] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 110.566889][ T6237] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 110.585788][ T6237] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 110.605910][ T6237] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 110.626521][ T6237] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 110.658143][ T6237] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 110.686665][ T6237] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 110.707264][ T6237] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 110.744258][ T6237] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 110.795260][ T6237] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 110.894357][ T6259] netlink: 12 bytes leftover after parsing attributes in process `syz.0.102'. [ 111.662721][ T6237] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 111.754085][ T6237] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 111.795087][ T6264] loop0: detected capacity change from 0 to 512 [ 111.887877][ T6267] FAULT_INJECTION: forcing a failure. [ 111.887877][ T6267] name failslab, interval 1, probability 0, space 0, times 0 [ 111.906641][ T6237] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 111.922232][ T6267] CPU: 1 PID: 6267 Comm: syz.2.105 Not tainted syzkaller #0 [ 111.929577][ T6267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 111.939649][ T6267] Call Trace: [ 111.942935][ T6267] [ 111.945865][ T6267] dump_stack_lvl+0x18c/0x250 [ 111.950550][ T6267] ? show_regs_print_info+0x20/0x20 [ 111.955745][ T6267] ? load_image+0x420/0x420 [ 111.960247][ T6267] ? __might_sleep+0xe0/0xe0 [ 111.964835][ T6267] ? __lock_acquire+0x7eb0/0x7eb0 [ 111.969865][ T6267] should_fail_ex+0x394/0x4c0 [ 111.974544][ T6267] should_failslab+0x9/0x20 [ 111.979060][ T6267] slab_pre_alloc_hook+0x59/0x300 [ 111.984202][ T6267] ? __lock_acquire+0x7eb0/0x7eb0 [ 111.989234][ T6267] ? dummy_alloc_request+0x7f/0x130 [ 111.994438][ T6267] __kmem_cache_alloc_node+0x53/0x260 [ 111.999838][ T6267] ? dummy_alloc_request+0x7f/0x130 [ 112.005062][ T6267] kmalloc_trace+0x2a/0xe0 [ 112.009517][ T6267] dummy_alloc_request+0x7f/0x130 [ 112.014547][ T6267] usb_ep_alloc_request+0x61/0x250 [ 112.019681][ T6267] gadget_bind+0xec/0x5b0 [ 112.024015][ T6267] ? kernfs_put+0x309/0x360 [ 112.028545][ T6267] ? gadget_disconnect+0x10/0x10 [ 112.033481][ T6267] gadget_bind_driver+0x2b3/0x770 [ 112.038513][ T6267] ? gadget_match_driver+0x130/0x130 [ 112.043796][ T6267] really_probe+0x24a/0xae0 [ 112.048322][ T6267] ? pm_runtime_barrier+0x14b/0x1c0 [ 112.053544][ T6267] __driver_probe_device+0x1f5/0x390 [ 112.058852][ T6267] driver_probe_device+0x4f/0x420 [ 112.063905][ T6267] __driver_attach+0x444/0x6d0 [ 112.068677][ T6267] bus_for_each_dev+0x235/0x2b0 [ 112.073617][ T6267] ? driver_attach+0x50/0x50 [ 112.078294][ T6267] ? bus_remove_file+0x140/0x140 [ 112.083243][ T6267] ? do_raw_spin_unlock+0x121/0x230 [ 112.088568][ T6267] bus_add_driver+0x340/0x630 [ 112.093465][ T6267] driver_register+0x23a/0x310 [ 112.098246][ T6267] usb_gadget_register_driver_owner+0xf9/0x270 [ 112.104421][ T6267] raw_ioctl+0x1613/0x3d80 [ 112.108853][ T6267] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 112.114487][ T6267] ? tomoyo_path_number_perm+0x217/0x5e0 [ 112.120123][ T6267] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 112.125588][ T6267] ? make_qualifier+0x260/0x260 [ 112.130461][ T6267] ? __fget_files+0x28/0x460 [ 112.135063][ T6267] ? bpf_lsm_file_ioctl+0x9/0x10 [ 112.140014][ T6267] ? security_file_ioctl+0x80/0xa0 [ 112.145386][ T6267] ? make_qualifier+0x260/0x260 [ 112.150232][ T6267] __se_sys_ioctl+0xfd/0x170 [ 112.154824][ T6267] do_syscall_64+0x55/0xb0 [ 112.159347][ T6267] ? clear_bhb_loop+0x40/0x90 [ 112.164023][ T6267] ? clear_bhb_loop+0x40/0x90 [ 112.168699][ T6267] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 112.174596][ T6267] RIP: 0033:0x7fd6f0ba8bab [ 112.179012][ T6267] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 112.198622][ T6267] RSP: 002b:00007fd6f1a59f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 112.207043][ T6267] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fd6f0ba8bab [ 112.215018][ T6267] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 112.223072][ T6267] RBP: 00007fd6f1a5afd0 R08: 0000000000000001 R09: 00000000ffffffff [ 112.231042][ T6267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.239030][ T6267] R13: 0000200000000340 R14: 0000000000000000 R15: 0000000000000000 [ 112.247021][ T6267] [ 112.272077][ T6237] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 112.281088][ T6267] raw-gadget.0 gadget.2: usb_ep_alloc_request failed [ 112.295771][ T6237] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 112.305764][ T6267] udc dummy_udc.2: failed to start USB Raw Gadget: -12 [ 112.332978][ T6267] raw-gadget.0: probe of gadget.2 failed with error -12 [ 112.340405][ T6237] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 112.354294][ T6267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.370056][ T6237] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 112.381508][ T6267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.381920][ T6264] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.403020][ T6237] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 112.436674][ T6264] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.462242][ T6237] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 112.507250][ T6237] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 112.537217][ T6237] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 112.575081][ T6237] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 112.600283][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.615723][ T6237] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 112.648302][ T6237] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 112.665477][ T6237] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 112.706460][ T28] audit: type=1800 audit(1794436206.858:12): pid=6237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.96" name="file1" dev="loop3" ino=1048620 res=0 errno=0 [ 112.770131][ T6237] syz.3.96 (6237) used greatest stack depth: 19568 bytes left [ 112.802608][ T28] audit: type=1800 audit(1794436206.868:13): pid=6242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.96" name="file1" dev="loop3" ino=1048620 res=0 errno=0 [ 112.888774][ T6277] netlink: 16 bytes leftover after parsing attributes in process `syz.3.107'. [ 113.894928][ T6301] netlink: 12 bytes leftover after parsing attributes in process `syz.2.113'. [ 114.713060][ T6303] loop3: detected capacity change from 0 to 512 [ 115.994047][ T6303] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.036835][ T6303] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.228677][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.448185][ T6341] Illegal XDP return value 4294967274 on prog (id 8) dev N/A, expect packet loss! [ 119.495702][ T6342] loop0: detected capacity change from 0 to 512 [ 119.851111][ T6342] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.081484][ T6342] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.339434][ T5791] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 120.348809][ T5791] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 120.367156][ T5791] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 120.662548][ T5791] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 120.674064][ T5791] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 120.685071][ T5791] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 120.982856][ T6350] rxe_eth0 speed is unknown, defaulting to 1000 [ 122.009246][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.533640][ T6350] chnl_net:caif_netlink_parms(): no params data found [ 122.806704][ T5791] Bluetooth: hci4: command tx timeout [ 123.098485][ T1094] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.887367][ T5100] Bluetooth: hci4: command tx timeout [ 125.709100][ T1094] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.158672][ T6350] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.167126][ T6350] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.174797][ T6350] bridge_slave_0: entered allmulticast mode [ 126.189143][ T6350] bridge_slave_0: entered promiscuous mode [ 126.203301][ T6350] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.210680][ T6350] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.219644][ T6350] bridge_slave_1: entered allmulticast mode [ 126.238119][ T6350] bridge_slave_1: entered promiscuous mode [ 126.293956][ T1094] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.345786][ T6401] loop0: detected capacity change from 0 to 1024 [ 126.381675][ T6401] EXT4-fs: Ignoring removed bh option [ 126.411900][ T6401] EXT4-fs (loop0): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 126.473906][ T6401] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.477228][ T1094] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.620590][ T6350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.665577][ T6350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.688774][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.865513][ T6350] team0: Port device team_slave_0 added [ 126.976781][ T5100] Bluetooth: hci4: command tx timeout [ 127.112436][ T6350] team0: Port device team_slave_1 added [ 127.269900][ T6350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.301361][ T6350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.501350][ T6350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.137525][ T5100] Bluetooth: hci4: command tx timeout [ 129.208356][ T6434] loop3: detected capacity change from 0 to 1024 [ 129.236279][ T6434] EXT4-fs: Ignoring removed bh option [ 129.276594][ T6434] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 129.317563][ T6434] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.209540][ T6350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.262691][ T6350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.296360][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.305863][ T6350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.411463][ T6350] hsr_slave_0: entered promiscuous mode [ 131.438004][ T6350] hsr_slave_1: entered promiscuous mode [ 131.464885][ T6350] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.466717][ T6462] Zero length message leads to an empty skb [ 131.489798][ T6350] Cannot create hsr debugfs directory [ 131.521892][ T6467] loop0: detected capacity change from 0 to 512 [ 131.591205][ T6467] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.640798][ T6467] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 131.674071][ T6471] bond0: (slave bond_slave_1): Releasing backup interface [ 133.119098][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.125832][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.367004][ T5788] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 133.576810][ T5788] usb 4-1: Using ep0 maxpacket: 16 [ 133.605530][ T5788] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 133.659749][ T5788] usb 4-1: config 0 interface 0 has no altsetting 0 [ 133.691253][ T5788] usb 4-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 133.711408][ T5788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.748387][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.777822][ T5788] usb 4-1: Product: syz [ 133.782067][ T5788] usb 4-1: Manufacturer: syz [ 133.796630][ T5788] usb 4-1: SerialNumber: syz [ 133.834002][ T5788] usb 4-1: config 0 descriptor?? [ 134.056245][ T6350] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 134.162836][ C1] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 134.174404][ T6350] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 134.189887][ T5788] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input15 [ 134.251536][ T6350] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 134.264620][ T5788] imon:send_packet: packet tx failed (-71) [ 134.292322][ T6350] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 134.302663][ T5788] imon 4-1:0.0: panel buttons/knobs setup failed [ 134.556588][ T5788] rc_core: IR keymap rc-imon-pad not found [ 134.562473][ T5788] Registered IR keymap rc-empty [ 134.588690][ T5788] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 134.614299][ T5788] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 134.644206][ T5788] imon:send_packet: packet tx failed (-71) [ 134.667023][ T5788] imon 4-1:0.0: remote input dev register failed [ 134.686257][ T5788] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 134.775510][ T1094] hsr_slave_0: left promiscuous mode [ 134.784110][ T5788] imon 4-1:0.0: unable to initialize intf0, err 0 [ 134.794063][ T1094] hsr_slave_1: left promiscuous mode [ 134.801435][ T5788] imon:imon_probe: failed to initialize context! [ 134.822033][ T5788] imon 4-1:0.0: unable to register, err -19 [ 134.822310][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.851697][ T5788] usb 4-1: USB disconnect, device number 6 [ 134.860874][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.909822][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.946705][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.016280][ T1094] bridge_slave_1: left allmulticast mode [ 135.044952][ T1094] bridge_slave_1: left promiscuous mode [ 135.063898][ T1094] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.111705][ T1094] bridge_slave_0: left allmulticast mode [ 135.120726][ T1094] bridge_slave_0: left promiscuous mode [ 135.126812][ T1094] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.204763][ T1094] veth1_macvtap: left promiscuous mode [ 135.210961][ T1094] veth0_macvtap: left promiscuous mode [ 135.231287][ T1094] veth1_vlan: left promiscuous mode [ 135.255129][ T1094] veth0_vlan: left promiscuous mode [ 135.276623][ T5788] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 135.466647][ T5788] usb 4-1: Using ep0 maxpacket: 16 [ 135.478742][ T5788] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 135.494236][ T5788] usb 4-1: config 0 interface 0 has no altsetting 0 [ 135.506643][ T5788] usb 4-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 135.521599][ T5788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.540052][ T5788] usb 4-1: Product: syz [ 135.544882][ T5788] usb 4-1: Manufacturer: syz [ 135.552704][ T5788] usb 4-1: SerialNumber: syz [ 135.592701][ T5788] usb 4-1: config 0 descriptor?? [ 135.857306][ T5788] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input17 [ 136.126619][ T5788] rc_core: IR keymap rc-imon-pad not found [ 136.133935][ T5788] Registered IR keymap rc-empty [ 136.143682][ T5788] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 136.176694][ T5788] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 136.211319][ T5788] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 136.238802][ T5788] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input18 [ 136.341876][ T5788] imon 4-1:0.0: iMON device (15c2:0045, intf0) on usb<4:7> initialized [ 136.411073][ T6489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.421642][ T6489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.450110][ T6489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.488378][ T6489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.110735][ C1] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 137.122123][ T5788] usb 4-1: USB disconnect, device number 7 [ 137.129902][ T6532] imon:send_packet: packet tx failed (-71) [ 137.166923][ T6532] imon:lcd_write: send packet failed! [ 137.466249][ T1094] team0 (unregistering): Port device team_slave_1 removed [ 137.525886][ T1094] team0 (unregistering): Port device team_slave_0 removed [ 137.587802][ T1094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.665874][ T1094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.289856][ T1094] bond0 (unregistering): Released all slaves [ 138.385489][ T6517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.175'. [ 138.395382][ T6517] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 138.603437][ T6350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.628641][ T6542] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 138.692430][ T6350] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.736089][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.743328][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.786059][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.793284][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.032364][ T6350] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 139.418618][ T6558] loop0: detected capacity change from 0 to 512 [ 139.493728][ T6350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.520781][ T6558] EXT4-fs error (device loop0): ext4_do_update_inode:5294: inode #3: comm syz.0.185: corrupted inode contents [ 139.589465][ T6558] EXT4-fs error (device loop0): ext4_dirty_inode:6188: inode #3: comm syz.0.185: mark_inode_dirty error [ 139.674333][ T6558] EXT4-fs error (device loop0): ext4_do_update_inode:5294: inode #3: comm syz.0.185: corrupted inode contents [ 139.762916][ T6558] EXT4-fs error (device loop0): __ext4_ext_dirty:208: inode #3: comm syz.0.185: mark_inode_dirty error [ 139.799897][ T6558] Quota error (device loop0): write_blk: dquota write failed [ 139.813361][ T6558] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 139.823692][ T6558] EXT4-fs error (device loop0): ext4_acquire_dquot:6958: comm syz.0.185: Failed to acquire dquot type 0 [ 139.849785][ T6558] EXT4-fs error (device loop0): ext4_do_update_inode:5294: inode #16: comm syz.0.185: corrupted inode contents [ 140.866626][ T6535] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 141.527091][ T6558] EXT4-fs error (device loop0): ext4_dirty_inode:6188: inode #16: comm syz.0.185: mark_inode_dirty error [ 141.572973][ T6558] EXT4-fs error (device loop0): ext4_do_update_inode:5294: inode #16: comm syz.0.185: corrupted inode contents [ 141.656747][ T6558] EXT4-fs error (device loop0): __ext4_ext_dirty:208: inode #16: comm syz.0.185: mark_inode_dirty error [ 141.759487][ T6558] EXT4-fs error (device loop0): ext4_do_update_inode:5294: inode #16: comm syz.0.185: corrupted inode contents [ 141.811027][ T6558] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 141.901057][ T6558] EXT4-fs error (device loop0): ext4_do_update_inode:5294: inode #16: comm syz.0.185: corrupted inode contents [ 141.933588][ T6558] EXT4-fs error (device loop0): ext4_truncate:4314: inode #16: comm syz.0.185: mark_inode_dirty error [ 141.934809][ T6350] veth0_vlan: entered promiscuous mode [ 141.980415][ T6558] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 142.017720][ T6350] veth1_vlan: entered promiscuous mode [ 142.041950][ T6558] EXT4-fs (loop0): 1 truncate cleaned up [ 142.051183][ T6350] veth0_macvtap: entered promiscuous mode [ 142.068295][ T6558] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.094731][ T6558] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.100002][ T6350] veth1_macvtap: entered promiscuous mode [ 142.282033][ T6350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.320554][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.336776][ T6350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.354698][ T6350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.365944][ T6350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.386190][ T6350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.426501][ T6350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.476773][ T6350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.512876][ T6350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.540939][ T6350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.568257][ T6350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.586605][ T6350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.604510][ T6350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.628128][ T6350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.667083][ T6350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.712229][ T6350] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.738784][ T6350] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.748309][ T6350] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.752452][ T6607] ip_tables: iptables: counters copy to user failed while replacing table [ 142.757610][ T6350] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.855967][ T6607] syz.3.197 uses obsolete (PF_INET,SOCK_PACKET) [ 142.987415][ T6607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.197'. [ 143.149511][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.169088][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.396974][ T2983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.434355][ T2983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.296684][ T6659] netlink: 'syz.4.209': attribute type 15 has an invalid length. [ 145.353130][ T6660] loop0: detected capacity change from 0 to 256 [ 145.514262][ T6502] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 145.973536][ T6670] FAULT_INJECTION: forcing a failure. [ 145.973536][ T6670] name failslab, interval 1, probability 0, space 0, times 0 [ 146.016585][ T6670] CPU: 1 PID: 6670 Comm: syz.2.214 Not tainted syzkaller #0 [ 146.024037][ T6670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 146.036066][ T6670] Call Trace: [ 146.040343][ T6670] [ 146.044174][ T6670] dump_stack_lvl+0x18c/0x250 [ 146.049626][ T6670] ? show_regs_print_info+0x20/0x20 [ 146.055392][ T6670] ? load_image+0x420/0x420 [ 146.060007][ T6670] ? __lock_acquire+0x7eb0/0x7eb0 [ 146.065088][ T6670] should_fail_ex+0x394/0x4c0 [ 146.069819][ T6670] should_failslab+0x9/0x20 [ 146.074350][ T6670] slab_pre_alloc_hook+0x59/0x300 [ 146.079508][ T6670] ? tcp_sigpool_alloc_ahash+0x239/0xcc0 [ 146.085187][ T6670] ? tcp_sigpool_alloc_ahash+0x239/0xcc0 [ 146.090861][ T6670] __kmem_cache_alloc_node+0x53/0x260 [ 146.096278][ T6670] ? tcp_sigpool_alloc_ahash+0x239/0xcc0 [ 146.101965][ T6670] __kmalloc_node+0xa6/0x240 [ 146.106611][ T6670] tcp_sigpool_alloc_ahash+0x239/0xcc0 [ 146.112125][ T6670] ? tcp_illinois_init+0x2b0/0x2b0 [ 146.117285][ T6670] tcp_md5_alloc_sigpool+0x1b/0x50 [ 146.122442][ T6670] tcp_md5_do_add+0x104/0x3b0 [ 146.127175][ T6670] tcp_v6_parse_md5_keys+0x54d/0x680 [ 146.132510][ T6670] ? sock_put+0x80/0x80 [ 146.136733][ T6670] ? __local_bh_enable_ip+0x13a/0x1c0 [ 146.142137][ T6670] ? _local_bh_enable+0xa0/0xa0 [ 146.147039][ T6670] do_tcp_setsockopt+0x1089/0x1c50 [ 146.152197][ T6670] ? tcp_set_window_clamp+0x4e0/0x4e0 [ 146.157617][ T6670] ? aa_af_perm+0x330/0x330 [ 146.162163][ T6670] ? __fget_files+0x28/0x460 [ 146.166796][ T6670] ? aa_sock_opt_perm+0x74/0x100 [ 146.171766][ T6670] ? sock_common_setsockopt+0x36/0xc0 [ 146.177166][ T6670] ? tcp_setsockopt+0x3d/0xe0 [ 146.181866][ T6670] ? tcp_enable_tx_delay+0x70/0x70 [ 146.186995][ T6670] ? sock_common_recvmsg+0x190/0x190 [ 146.192308][ T6670] do_sock_setsockopt+0x175/0x1a0 [ 146.197367][ T6670] ? __fdget+0x180/0x210 [ 146.201655][ T6670] __x64_sys_setsockopt+0x182/0x200 [ 146.206896][ T6670] do_syscall_64+0x55/0xb0 [ 146.211352][ T6670] ? clear_bhb_loop+0x40/0x90 [ 146.216067][ T6670] ? clear_bhb_loop+0x40/0x90 [ 146.220789][ T6670] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 146.226726][ T6670] RIP: 0033:0x7fd6f0ba8f19 [ 146.231207][ T6670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.250845][ T6670] RSP: 002b:00007fd6f1a5c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 146.259310][ T6670] RAX: ffffffffffffffda RBX: 00007fd6f0e25fa0 RCX: 00007fd6f0ba8f19 [ 146.267318][ T6670] RDX: 000000000000000e RSI: 0000000000000006 RDI: 000000000000000b [ 146.275322][ T6670] RBP: 00007fd6f0c37f6d R08: 00000000000000d8 R09: 0000000000000000 [ 146.283346][ T6670] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000 [ 146.291360][ T6670] R13: 00007fd6f0e26038 R14: 00007fd6f0e25fa0 R15: 00007ffda7df45f8 [ 146.299395][ T6670] [ 146.498703][ T6701] loop4: detected capacity change from 0 to 512 [ 146.578123][ T6701] EXT4-fs error (device loop4): ext4_do_update_inode:5294: inode #3: comm syz.4.221: corrupted inode contents [ 146.654235][ T6701] EXT4-fs error (device loop4): ext4_dirty_inode:6188: inode #3: comm syz.4.221: mark_inode_dirty error [ 146.668569][ T6707] loop5: detected capacity change from 0 to 7 [ 146.730755][ T6707] Dev loop5: unable to read RDB block 7 [ 146.753701][ T6701] EXT4-fs error (device loop4): ext4_do_update_inode:5294: inode #3: comm syz.4.221: corrupted inode contents [ 146.765639][ T6707] loop5: unable to read partition table [ 146.776921][ T6707] loop5: partition table beyond EOD, truncated [ 146.786495][ T6701] EXT4-fs error (device loop4): __ext4_ext_dirty:208: inode #3: comm syz.4.221: mark_inode_dirty error [ 146.816484][ T6707] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 146.855904][ T6701] Quota error (device loop4): write_blk: dquota write failed [ 146.896072][ T6701] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 146.909128][ T5154] Dev loop5: unable to read RDB block 7 [ 146.915668][ T6701] EXT4-fs error (device loop4): ext4_acquire_dquot:6958: comm syz.4.221: Failed to acquire dquot type 0 [ 146.929686][ T5154] loop5: unable to read partition table [ 146.935601][ T5154] loop5: partition table beyond EOD, truncated [ 146.971778][ T6701] EXT4-fs error (device loop4): ext4_do_update_inode:5294: inode #16: comm syz.4.221: corrupted inode contents [ 147.029587][ T6701] EXT4-fs error (device loop4): ext4_dirty_inode:6188: inode #16: comm syz.4.221: mark_inode_dirty error [ 147.071614][ T6716] ======================================================= [ 147.071614][ T6716] WARNING: The mand mount option has been deprecated and [ 147.071614][ T6716] and is ignored by this kernel. Remove the mand [ 147.071614][ T6716] option from the mount to silence this warning. [ 147.071614][ T6716] ======================================================= [ 147.120162][ T6701] EXT4-fs error (device loop4): ext4_do_update_inode:5294: inode #16: comm syz.4.221: corrupted inode contents [ 147.159772][ T6701] EXT4-fs error (device loop4): __ext4_ext_dirty:208: inode #16: comm syz.4.221: mark_inode_dirty error [ 147.190710][ T6701] EXT4-fs error (device loop4): ext4_do_update_inode:5294: inode #16: comm syz.4.221: corrupted inode contents [ 147.221827][ T6701] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 147.259934][ T6701] EXT4-fs error (device loop4): ext4_do_update_inode:5294: inode #16: comm syz.4.221: corrupted inode contents [ 147.281565][ T6701] EXT4-fs error (device loop4): ext4_truncate:4314: inode #16: comm syz.4.221: mark_inode_dirty error [ 147.331121][ T6701] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 147.360124][ T6701] EXT4-fs (loop4): 1 truncate cleaned up [ 147.368643][ T6701] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.399835][ T6701] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.556272][ T6350] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.626780][ T972] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 148.778903][ T6773] loop4: detected capacity change from 0 to 512 [ 148.800153][ T6773] EXT4-fs: Ignoring removed nomblk_io_submit option [ 148.826596][ T972] usb 4-1: Using ep0 maxpacket: 32 [ 148.842498][ T972] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 148.876880][ T972] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 148.880949][ T6773] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 148.900885][ T972] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 148.927088][ T972] usb 4-1: Product: syz [ 148.936172][ T972] usb 4-1: Manufacturer: syz [ 148.939379][ T6773] EXT4-fs (loop4): 1 truncate cleaned up [ 148.955005][ T6773] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.634271][ T972] usb 4-1: SerialNumber: syz [ 149.652693][ T972] usb 4-1: config 0 descriptor?? [ 149.659760][ T6757] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 149.669703][ T972] hub 4-1:0.0: bad descriptor, ignoring hub [ 149.675963][ T972] hub: probe of 4-1:0.0 failed with error -5 [ 149.777853][ T6350] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.093021][ T6785] loop0: detected capacity change from 0 to 512 [ 150.111599][ T6785] EXT4-fs (loop0): Test dummy encryption mode enabled [ 150.144217][ T6785] EXT4-fs error (device loop0): ext4_orphan_get:1408: inode #15: comm syz.0.247: inode has both inline data and extents flags [ 150.170144][ T6785] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.247: couldn't read orphan inode 15 (err -117) [ 150.185364][ T6785] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.311878][ T6797] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.351570][ T6785] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 150.483656][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.645912][ T6808] tap0: tun_chr_ioctl cmd 1074025681 [ 151.445811][ T972] usb 4-1: USB disconnect, device number 8 [ 151.631593][ T6848] loop0: detected capacity change from 0 to 512 [ 151.639765][ T6848] EXT4-fs (loop0): Test dummy encryption mode enabled [ 151.694546][ T972] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 151.722996][ T6848] EXT4-fs error (device loop0): ext4_orphan_get:1408: inode #15: comm syz.0.259: inode has both inline data and extents flags [ 151.738070][ T6848] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.259: couldn't read orphan inode 15 (err -117) [ 151.755692][ T6848] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.929791][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.927552][ T972] usb 4-1: device descriptor read/all, error -71 [ 153.911848][ T6900] syzkaller0: entered promiscuous mode [ 153.919782][ T6900] syzkaller0: entered allmulticast mode [ 154.004127][ T6904] capability: warning: `syz.2.273' uses 32-bit capabilities (legacy support in use) [ 154.276558][ T972] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 154.476550][ T972] usb 4-1: Using ep0 maxpacket: 32 [ 154.485177][ T972] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 154.504077][ T972] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 154.521335][ T972] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 154.532232][ T972] usb 4-1: Product: syz [ 154.544768][ T972] usb 4-1: Manufacturer: syz [ 154.550917][ T972] usb 4-1: SerialNumber: syz [ 154.558481][ T972] usb 4-1: config 0 descriptor?? [ 154.564648][ T6902] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 154.624448][ T972] hub 4-1:0.0: bad descriptor, ignoring hub [ 154.642686][ T972] hub: probe of 4-1:0.0 failed with error -5 [ 156.755967][ T6948] syzkaller0: entered promiscuous mode [ 156.776545][ T6948] syzkaller0: entered allmulticast mode [ 156.806003][ T6948] tipc: Started in network mode [ 156.820437][ T6948] tipc: Node identity ce807eddf275, cluster identity 4711 [ 156.841996][ T6948] tipc: Enabled bearer , priority 0 [ 156.887572][ T6948] tipc: Resetting bearer [ 156.902815][ T6947] tipc: Resetting bearer [ 156.955529][ T6947] tipc: Disabling bearer [ 156.976852][ T5858] usb 4-1: USB disconnect, device number 10 [ 157.142092][ T6967] netlink: 28 bytes leftover after parsing attributes in process `syz.0.289'. [ 157.166808][ T6967] netlink: 28 bytes leftover after parsing attributes in process `syz.0.289'. [ 157.182302][ T6967] netlink: 24 bytes leftover after parsing attributes in process `syz.0.289'. [ 157.219676][ T6970] loop4: detected capacity change from 0 to 512 [ 157.250693][ T6970] ext3: Unknown parameter '.' [ 157.346508][ T5858] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 157.544451][ T5858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 158.932505][ T5858] usb 4-1: string descriptor 0 read error: -71 [ 158.939178][ T5858] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 158.956473][ T5858] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 158.991131][ T5858] usb 4-1: config 0 descriptor?? [ 159.087769][ T7004] loop4: detected capacity change from 0 to 256 [ 159.479796][ T5858] usb 4-1: can't set config #0, error -71 [ 159.574148][ T5858] usb 4-1: USB disconnect, device number 11 [ 160.788045][ T7037] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.50.0), cmd(8) [ 160.806893][ T5858] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 161.002671][ T7053] netlink: 'syz.4.311': attribute type 1 has an invalid length. [ 161.020807][ T5858] usb 3-1: Using ep0 maxpacket: 32 [ 161.051754][ T5858] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 161.093394][ T5858] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 161.126299][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 161.154920][ T5858] usb 3-1: Product: syz [ 161.175405][ T5858] usb 3-1: Manufacturer: syz [ 161.196920][ T5858] usb 3-1: SerialNumber: syz [ 161.226189][ T5858] usb 3-1: config 0 descriptor?? [ 161.255552][ T7027] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 161.291770][ T5858] hub 3-1:0.0: bad descriptor, ignoring hub [ 161.302496][ T5858] hub: probe of 3-1:0.0 failed with error -5 [ 161.403763][ T7068] loop4: detected capacity change from 0 to 512 [ 161.423587][ T7068] ext3: Unknown parameter '.' [ 162.007236][ T7091] loop4: detected capacity change from 0 to 256 [ 162.216930][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 162.467935][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 162.485640][ T8] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 162.519769][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 162.543713][ T8] usb 1-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 162.566514][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.591734][ T8] usb 1-1: Product: syz [ 162.596198][ T8] usb 1-1: Manufacturer: syz [ 162.601298][ T8] usb 1-1: SerialNumber: syz [ 162.617995][ T8] usb 1-1: config 0 descriptor?? [ 162.631770][ T972] usb 3-1: USB disconnect, device number 2 [ 162.839215][ C0] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 162.848439][ T972] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 162.874648][ T8] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input19 [ 162.945094][ T8] imon:send_packet: packet tx failed (-71) [ 162.979769][ T8] imon 1-1:0.0: panel buttons/knobs setup failed [ 163.115442][ T972] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 163.146991][ T972] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 163.156628][ T972] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 163.164818][ T972] usb 3-1: Product: syz [ 163.169216][ T972] usb 3-1: Manufacturer: syz [ 163.173807][ T972] usb 3-1: SerialNumber: syz [ 163.309980][ T7108] loop3: detected capacity change from 0 to 512 [ 163.321518][ T7108] EXT4-fs (loop3): Test dummy encryption mode enabled [ 163.339659][ T7108] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #15: comm syz.3.327: inode has both inline data and extents flags [ 163.354605][ T7108] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.327: couldn't read orphan inode 15 (err -117) [ 163.375939][ T7108] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.417479][ T8] rc_core: IR keymap rc-imon-pad not found [ 163.429167][ T8] Registered IR keymap rc-empty [ 163.439053][ T8] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 163.459488][ T972] usb 3-1: config 0 descriptor?? [ 163.484259][ T8] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 163.516036][ T8] imon:send_packet: packet tx failed (-71) [ 163.532060][ T972] usb 3-1: can't set config #0, error -71 [ 163.552180][ T972] usb 3-1: USB disconnect, device number 3 [ 163.566714][ T8] imon 1-1:0.0: remote input dev register failed [ 163.579318][ T8] imon 1-1:0.0: imon_init_intf0: rc device setup failed [ 163.601218][ T8] imon 1-1:0.0: unable to initialize intf0, err 0 [ 163.613202][ T8] imon:imon_probe: failed to initialize context! [ 163.624568][ T8] imon 1-1:0.0: unable to register, err -19 [ 163.645220][ T8] usb 1-1: USB disconnect, device number 2 [ 164.022915][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.036637][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 164.130095][ T7135] syzkaller1: entered promiscuous mode [ 164.135833][ T7135] syzkaller1: entered allmulticast mode [ 164.204770][ T7133] 9pnet_fd: Insufficient options for proto=fd [ 164.236483][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 164.244896][ T8] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 164.268099][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 164.292768][ T7142] loop3: detected capacity change from 0 to 512 [ 164.312956][ T8] usb 1-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 164.314483][ T7142] ext3: Unknown parameter '.' [ 164.333056][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.361768][ T8] usb 1-1: Product: syz [ 164.366000][ T8] usb 1-1: Manufacturer: syz [ 164.403467][ T8] usb 1-1: SerialNumber: syz [ 164.435183][ T8] usb 1-1: config 0 descriptor?? [ 164.676540][ T27] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 164.718278][ T8] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input21 [ 164.876570][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 164.894726][ T27] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 164.926628][ T8] rc_core: IR keymap rc-imon-pad not found [ 164.946499][ T8] Registered IR keymap rc-empty [ 164.961486][ T8] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 164.999539][ T8] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 165.011776][ T7159] loop3: detected capacity change from 0 to 256 [ 165.077895][ T8] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 165.101052][ T27] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 165.112054][ T7157] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 165.131293][ T27] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 165.151353][ T27] usb 3-1: Product: syz [ 165.155684][ T27] usb 3-1: Manufacturer: syz [ 165.165482][ T27] usb 3-1: SerialNumber: syz [ 165.178241][ T27] usb 3-1: config 0 descriptor?? [ 165.213030][ T7144] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 165.237281][ T27] hub 3-1:0.0: bad descriptor, ignoring hub [ 165.254446][ T7088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.267607][ T8] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input22 [ 165.278939][ T7088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.287697][ T27] hub: probe of 3-1:0.0 failed with error -5 [ 165.292872][ T7088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.306494][ T8] imon 1-1:0.0: iMON device (15c2:0045, intf0) on usb<1:3> initialized [ 165.316712][ T7088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.453295][ C0] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 165.468647][ T8] usb 1-1: USB disconnect, device number 3 [ 165.488595][ T7144] imon:display_open: display port is already open [ 166.146006][ T7186] loop0: detected capacity change from 0 to 1024 [ 166.172219][ T7186] EXT4-fs: Ignoring removed bh option [ 166.207354][ T7188] syzkaller1: entered promiscuous mode [ 166.214418][ T7188] syzkaller1: entered allmulticast mode [ 166.224845][ T7186] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 166.257511][ T8] usb 3-1: USB disconnect, device number 4 [ 166.285155][ T7186] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.488685][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.616529][ T5858] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 166.633501][ T7199] loop4: detected capacity change from 0 to 512 [ 166.679265][ T7199] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.743243][ T7199] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 166.808315][ T5858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 166.821638][ T5858] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 166.836411][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 166.854848][ T5858] usb 3-1: Product: syz [ 166.859233][ T5858] usb 3-1: Manufacturer: syz [ 166.863863][ T5858] usb 3-1: SerialNumber: syz [ 166.883619][ T5858] usb 3-1: config 0 descriptor?? [ 166.907291][ T7144] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 166.923583][ T7201] 9pnet_fd: Insufficient options for proto=fd [ 166.926047][ T5858] hub 3-1:0.0: bad descriptor, ignoring hub [ 166.946080][ T5858] hub: probe of 3-1:0.0 failed with error -5 [ 167.149882][ T7144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.191550][ T7144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.232599][ T7144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.266683][ T7144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.426866][ T5858] usb 3-1: USB disconnect, device number 5 [ 168.897366][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 169.522464][ T7246] block device autoloading is deprecated and will be removed. [ 169.663767][ T7246] md: invalid raid superblock magic on ram4 [ 169.704529][ T7246] md: ram4 does not have a valid v0.0 superblock, not importing! [ 169.727539][ T7246] md: md_import_device returned -22 [ 170.217149][ T7262] 9pnet_fd: Insufficient options for proto=fd [ 170.366720][ T5858] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 170.576439][ T5858] usb 3-1: Using ep0 maxpacket: 32 [ 171.418046][ T5858] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 171.432617][ T5858] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 171.442259][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 171.450865][ T5858] usb 3-1: Product: syz [ 171.455062][ T5858] usb 3-1: Manufacturer: syz [ 171.473051][ T5858] usb 3-1: SerialNumber: syz [ 171.499240][ T5858] usb 3-1: config 0 descriptor?? [ 171.527117][ T7265] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 171.536110][ T5858] hub 3-1:0.0: bad descriptor, ignoring hub [ 171.556442][ T5858] hub: probe of 3-1:0.0 failed with error -5 [ 171.706997][ T7285] loop3: detected capacity change from 0 to 512 [ 171.728358][ T7285] ext3: Unknown parameter '.' [ 172.652878][ T7303] loop3: detected capacity change from 0 to 256 [ 172.917351][ T972] usb 3-1: USB disconnect, device number 6 [ 172.984001][ T6350] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.076613][ T972] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 173.308454][ T972] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 173.381329][ T972] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 173.412562][ T972] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 173.448348][ T972] usb 3-1: Product: syz [ 173.465261][ T972] usb 3-1: Manufacturer: syz [ 173.486412][ T972] usb 3-1: SerialNumber: syz [ 173.541281][ T972] usb 3-1: config 0 descriptor?? [ 173.558170][ T7313] netlink: 40 bytes leftover after parsing attributes in process `syz.4.366'. [ 173.577186][ T7288] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 173.586390][ T972] hub 3-1:0.0: bad descriptor, ignoring hub [ 173.596526][ T972] hub: probe of 3-1:0.0 failed with error -5 [ 173.926769][ T5858] usb 3-1: USB disconnect, device number 7 [ 174.206559][ T972] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 174.416445][ T972] usb 5-1: Using ep0 maxpacket: 16 [ 174.433080][ T972] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 174.454466][ T972] usb 5-1: config 0 interface 0 has no altsetting 0 [ 174.473280][ T972] usb 5-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 174.491343][ T972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.516483][ T972] usb 5-1: Product: syz [ 174.529641][ T972] usb 5-1: Manufacturer: syz [ 174.544403][ T972] usb 5-1: SerialNumber: syz [ 174.574093][ T972] usb 5-1: config 0 descriptor?? [ 174.923978][ C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 174.951536][ T972] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input23 [ 175.017793][ T972] imon:send_packet: packet tx failed (-71) [ 175.056567][ T972] imon 5-1:0.0: panel buttons/knobs setup failed [ 175.262313][ T972] rc_core: IR keymap rc-imon-pad not found [ 175.286413][ T972] Registered IR keymap rc-empty [ 175.311729][ T972] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 175.336496][ T972] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 175.354541][ T972] imon:send_packet: packet tx failed (-71) [ 175.396572][ T972] imon 5-1:0.0: remote input dev register failed [ 175.403244][ T972] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 175.453053][ T972] imon 5-1:0.0: unable to initialize intf0, err 0 [ 175.494388][ T972] imon:imon_probe: failed to initialize context! [ 175.526413][ T972] imon 5-1:0.0: unable to register, err -19 [ 175.582482][ T972] usb 5-1: USB disconnect, device number 2 [ 175.953268][ T7335] netlink: 40 bytes leftover after parsing attributes in process `syz.0.375'. [ 175.966794][ T972] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 176.166564][ T972] usb 5-1: Using ep0 maxpacket: 16 [ 176.176976][ T972] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 176.202211][ T972] usb 5-1: config 0 interface 0 has no altsetting 0 [ 176.228906][ T972] usb 5-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 176.249322][ T972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.286551][ T972] usb 5-1: Product: syz [ 176.296802][ T972] usb 5-1: Manufacturer: syz [ 176.301726][ T972] usb 5-1: SerialNumber: syz [ 176.327943][ T972] usb 5-1: config 0 descriptor?? [ 176.516823][ T5788] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 176.552467][ T7349] loop3: detected capacity change from 0 to 1024 [ 176.568233][ T7349] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 176.604181][ T972] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input25 [ 176.645087][ T7349] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #3: block 1: comm syz.3.380: lblock 1 mapped to illegal pblock 1 (length 1) [ 176.683462][ T7349] Quota error (device loop3): write_blk: dquota write failed [ 176.691578][ T7349] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 176.702559][ T7349] EXT4-fs error (device loop3): ext4_acquire_dquot:6958: comm syz.3.380: Failed to acquire dquot type 0 [ 176.736610][ T5788] usb 1-1: Using ep0 maxpacket: 32 [ 176.757233][ T7349] EXT4-fs error (device loop3): ext4_free_blocks:6699: comm syz.3.380: Freeing blocks not in datazone - block = 0, count = 4096 [ 176.781565][ T5788] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 176.796586][ T972] rc_core: IR keymap rc-imon-pad not found [ 176.805068][ T972] Registered IR keymap rc-empty [ 176.811700][ T972] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 176.812777][ T5788] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 176.823038][ T972] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 176.851560][ T7349] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.380: Invalid inode bitmap blk 0 in block_group 0 [ 176.865591][ T5788] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 176.874224][ T2983] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 176.892260][ T972] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 176.893203][ T7349] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem [ 176.921467][ T5788] usb 1-1: Product: syz [ 176.930010][ T2983] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 176.938660][ T5788] usb 1-1: Manufacturer: syz [ 176.943304][ T5788] usb 1-1: SerialNumber: syz [ 176.952174][ T2983] EXT4-fs error (device loop3): ext4_release_dquot:6994: comm kworker/u4:12: Failed to release dquot type 0 [ 176.952774][ T972] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input26 [ 176.985960][ T7349] EXT4-fs (loop3): 1 orphan inode deleted [ 176.993876][ T5788] usb 1-1: config 0 descriptor?? [ 177.000459][ T7349] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.016276][ T972] imon 5-1:0.0: iMON device (15c2:0045, intf0) on usb<5:3> initialized [ 177.018426][ T7340] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 177.036664][ T5788] hub 1-1:0.0: bad descriptor, ignoring hub [ 177.042638][ T5788] hub: probe of 1-1:0.0 failed with error -5 [ 177.065830][ T7319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.079868][ T7319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.157771][ T7319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.167203][ T7319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.228411][ T5783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.276234][ T7340] imon:display_open: display port is already open [ 177.286324][ T1094] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 177.304197][ T1094] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 177.312946][ T1094] EXT4-fs error (device loop3): ext4_release_dquot:6994: comm kworker/u4:7: Failed to release dquot type 0 [ 177.703299][ T7340] imon:display_open: display port is already open [ 177.743507][ T7359] imon:display_open: display port is already open [ 178.037722][ T5788] usb 1-1: USB disconnect, device number 4 [ 178.396560][ T5788] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 178.608588][ T5788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 178.643390][ T5788] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 178.663409][ T5788] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 178.688605][ T5788] usb 1-1: Product: syz [ 178.701327][ T5788] usb 1-1: Manufacturer: syz [ 178.723479][ T5788] usb 1-1: SerialNumber: syz [ 178.738667][ T5788] usb 1-1: config 0 descriptor?? [ 178.758934][ T7340] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 178.768043][ C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 178.768643][ T27] usb 5-1: USB disconnect, device number 3 [ 178.811633][ T5788] hub 1-1:0.0: bad descriptor, ignoring hub [ 178.826619][ T5788] hub: probe of 1-1:0.0 failed with error -5 [ 179.015758][ T7340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.043367][ T7340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.077182][ T7340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.107176][ T7340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.249436][ T5788] usb 1-1: USB disconnect, device number 5 [ 179.274874][ T7368] netlink: 40 bytes leftover after parsing attributes in process `syz.4.385'. [ 179.338179][ T7370] loop3: detected capacity change from 0 to 512 [ 179.367014][ T7370] ext3: Unknown parameter '.' [ 180.243013][ T7387] netlink: 24 bytes leftover after parsing attributes in process `syz.2.391'. [ 180.370561][ T7392] loop3: detected capacity change from 0 to 256 [ 180.577716][ T7394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.395'. [ 181.076228][ T7402] loop4: detected capacity change from 0 to 512 [ 181.199835][ T7402] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.246667][ T27] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 181.524771][ T7402] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 181.698062][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 181.734660][ T27] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 181.768152][ T27] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 181.781463][ T27] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 181.796491][ T27] usb 1-1: Product: syz [ 181.811098][ T27] usb 1-1: Manufacturer: syz [ 181.816269][ T27] usb 1-1: SerialNumber: syz [ 181.852003][ T27] usb 1-1: config 0 descriptor?? [ 181.867331][ T7400] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 181.879414][ T27] hub 1-1:0.0: bad descriptor, ignoring hub [ 181.893562][ T27] hub: probe of 1-1:0.0 failed with error -5 [ 183.323121][ T6350] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.705655][ T7422] ip_tables: iptables: counters copy to user failed while replacing table [ 183.882084][ T7426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.404'. [ 183.929551][ T5859] usb 1-1: USB disconnect, device number 6 [ 184.147568][ T5859] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 184.360240][ T5859] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 184.395852][ T5859] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 184.406201][ T5859] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 184.449839][ T5859] usb 1-1: Product: syz [ 184.474221][ T5859] usb 1-1: Manufacturer: syz [ 184.489035][ T5859] usb 1-1: SerialNumber: syz [ 184.513875][ T5859] usb 1-1: config 0 descriptor?? [ 184.534897][ T5859] usb 1-1: can't set config #0, error -71 [ 184.561597][ T5859] usb 1-1: USB disconnect, device number 7 [ 184.661214][ T28] audit: type=1800 audit(1794437303.057:14): pid=7433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.408" name=08 dev="sda1" ino=2046 res=0 errno=0 [ 185.640481][ T7451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.415'. [ 185.908152][ T7456] netlink: 68 bytes leftover after parsing attributes in process `syz.0.416'. [ 186.036729][ T7458] FAULT_INJECTION: forcing a failure. [ 186.036729][ T7458] name failslab, interval 1, probability 0, space 0, times 0 [ 186.078108][ T7460] loop0: detected capacity change from 0 to 1024 [ 186.105508][ T7460] EXT4-fs: Ignoring removed bh option [ 186.111346][ T7458] CPU: 1 PID: 7458 Comm: syz.4.418 Not tainted syzkaller #0 [ 186.118697][ T7458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 186.128780][ T7458] Call Trace: [ 186.132061][ T7458] [ 186.134988][ T7458] dump_stack_lvl+0x18c/0x250 [ 186.139678][ T7458] ? show_regs_print_info+0x20/0x20 [ 186.144903][ T7458] ? load_image+0x420/0x420 [ 186.149454][ T7458] ? __might_sleep+0xe0/0xe0 [ 186.154042][ T7458] ? __lock_acquire+0x7eb0/0x7eb0 [ 186.159069][ T7458] should_fail_ex+0x394/0x4c0 [ 186.163770][ T7458] should_failslab+0x9/0x20 [ 186.168262][ T7458] slab_pre_alloc_hook+0x59/0x300 [ 186.173296][ T7458] kmem_cache_alloc+0x5a/0x2d0 [ 186.178081][ T7458] ? security_inode_alloc+0x34/0x110 [ 186.183381][ T7458] security_inode_alloc+0x34/0x110 [ 186.188505][ T7458] inode_init_always+0x914/0xc90 [ 186.193475][ T7458] new_inode_pseudo+0x95/0x1d0 [ 186.198244][ T7458] new_inode+0x22/0x1d0 [ 186.202446][ T7458] shmem_get_inode+0x34d/0xcd0 [ 186.207252][ T7458] shmem_symlink+0xa3/0x470 [ 186.211777][ T7458] ? inode_permission+0xf3/0x480 [ 186.216731][ T7458] ? bpf_lsm_inode_symlink+0x9/0x10 [ 186.221968][ T7458] vfs_symlink+0x138/0x2b0 [ 186.226403][ T7458] do_symlinkat+0x1ba/0x400 [ 186.230922][ T7458] ? vfs_symlink+0x2b0/0x2b0 [ 186.235527][ T7458] ? getname_flags+0x20a/0x500 [ 186.240290][ T7458] __x64_sys_symlink+0x7e/0x90 [ 186.245055][ T7458] do_syscall_64+0x55/0xb0 [ 186.249468][ T7458] ? clear_bhb_loop+0x40/0x90 [ 186.254138][ T7458] ? clear_bhb_loop+0x40/0x90 [ 186.258821][ T7458] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 186.264758][ T7458] RIP: 0033:0x7f44215a8f19 [ 186.269166][ T7458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.288782][ T7458] RSP: 002b:00007f442255a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 186.297195][ T7458] RAX: ffffffffffffffda RBX: 00007f4421825fa0 RCX: 00007f44215a8f19 [ 186.305164][ T7458] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000200000000680 [ 186.313132][ T7458] RBP: 00007f4421637f6d R08: 0000000000000000 R09: 0000000000000000 [ 186.321099][ T7458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.329063][ T7458] R13: 00007f4421826038 R14: 00007f4421825fa0 R15: 00007fff07f917c8 [ 186.337062][ T7458] [ 186.392202][ T7460] EXT4-fs (loop0): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 186.504766][ T7460] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.583073][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.739141][ T7468] netlink: 40 bytes leftover after parsing attributes in process `syz.4.421'. [ 187.485297][ T7473] gretap0: entered promiscuous mode [ 187.511112][ T7473] vlan2: entered promiscuous mode [ 187.812517][ T7479] autofs4:pid:7479:autofs_fill_super: called with bogus options [ 191.277419][ T7527] FAULT_INJECTION: forcing a failure. [ 191.277419][ T7527] name failslab, interval 1, probability 0, space 0, times 0 [ 191.314060][ T7527] CPU: 0 PID: 7527 Comm: syz.0.443 Not tainted syzkaller #0 [ 191.321425][ T7527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 191.331495][ T7527] Call Trace: [ 191.334766][ T7527] [ 191.337688][ T7527] dump_stack_lvl+0x18c/0x250 [ 191.342370][ T7527] ? show_regs_print_info+0x20/0x20 [ 191.347577][ T7527] ? load_image+0x420/0x420 [ 191.352089][ T7527] ? __might_sleep+0xe0/0xe0 [ 191.356683][ T7527] ? __lock_acquire+0x7eb0/0x7eb0 [ 191.361731][ T7527] should_fail_ex+0x394/0x4c0 [ 191.366420][ T7527] should_failslab+0x9/0x20 [ 191.370926][ T7527] slab_pre_alloc_hook+0x59/0x300 [ 191.375937][ T7527] ? call_usermodehelper_setup+0x8e/0x260 [ 191.381661][ T7527] __kmem_cache_alloc_node+0x53/0x260 [ 191.387039][ T7527] ? call_usermodehelper_setup+0x8e/0x260 [ 191.392777][ T7527] kmalloc_trace+0x2a/0xe0 [ 191.397200][ T7527] call_usermodehelper_setup+0x8e/0x260 [ 191.402755][ T7527] ? __request_module+0x600/0x600 [ 191.407798][ T7527] __request_module+0x3bb/0x600 [ 191.412666][ T7527] ? module_enforce_rwx_sections+0x150/0x150 [ 191.418642][ T7527] ? dev_load+0x21/0x1f0 [ 191.422902][ T7527] ? bpf_lsm_capable+0x9/0x10 [ 191.427571][ T7527] ? dev_load+0x21/0x1f0 [ 191.431838][ T7527] dev_load+0x18b/0x1f0 [ 191.435987][ T7527] dev_ioctl+0x79f/0x1140 [ 191.440334][ T7527] sock_do_ioctl+0x239/0x310 [ 191.444918][ T7527] ? sock_show_fdinfo+0xb0/0xb0 [ 191.449782][ T7527] sock_ioctl+0x5be/0x7e0 [ 191.454107][ T7527] ? sock_poll+0x460/0x460 [ 191.458526][ T7527] ? bpf_lsm_file_ioctl+0x9/0x10 [ 191.463470][ T7527] ? security_file_ioctl+0x80/0xa0 [ 191.468599][ T7527] ? sock_poll+0x460/0x460 [ 191.473020][ T7527] __se_sys_ioctl+0xfd/0x170 [ 191.477611][ T7527] do_syscall_64+0x55/0xb0 [ 191.482017][ T7527] ? clear_bhb_loop+0x40/0x90 [ 191.486709][ T7527] ? clear_bhb_loop+0x40/0x90 [ 191.491392][ T7527] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 191.497292][ T7527] RIP: 0033:0x7fe8dada8f19 [ 191.501700][ T7527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.521319][ T7527] RSP: 002b:00007fe8dbc74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.529743][ T7527] RAX: ffffffffffffffda RBX: 00007fe8db025fa0 RCX: 00007fe8dada8f19 [ 191.537716][ T7527] RDX: 00002000000004c0 RSI: 0000000000008914 RDI: 0000000000000005 [ 191.545678][ T7527] RBP: 00007fe8dae37f6d R08: 0000000000000000 R09: 0000000000000000 [ 191.553651][ T7527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.561630][ T7527] R13: 00007fe8db026038 R14: 00007fe8db025fa0 R15: 00007fff8a119f98 [ 191.569607][ T7527] [ 191.673713][ T7536] loop4: detected capacity change from 0 to 512 [ 191.793995][ T7536] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.812893][ T7536] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 194.494953][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.501387][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.882817][ T7560] general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] PREEMPT SMP KASAN [ 194.894591][ T7560] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 194.903016][ T7560] CPU: 0 PID: 7560 Comm: syz.0.451 Not tainted syzkaller #0 [ 194.910313][ T7560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 194.920367][ T7560] RIP: 0010:__percpu_ref_switch_mode+0x123/0x5f0 [ 194.926701][ T7560] Code: 31 ff 89 c6 e8 6e 7a 59 fd 45 85 ff 0f 84 5a 04 00 00 e8 b0 76 59 fd eb 05 e8 a9 76 59 fd 4d 8d 74 24 10 4d 89 f5 49 c1 ed 03 <41> 80 7c 1d 00 00 74 08 4c 89 f7 e8 3d 7f b2 fd 49 83 3e 00 0f 84 [ 194.946319][ T7560] RSP: 0018:ffffc9000cb6f8e0 EFLAGS: 00010002 [ 194.952408][ T7560] RAX: ffffffff842e67f0 RBX: dffffc0000000000 RCX: 0000000000080000 [ 194.960372][ T7560] RDX: ffffc9000d1db000 RSI: 00000000000028b1 RDI: 00000000000028b2 [ 194.968335][ T7560] RBP: ffffc9000cb6f9f8 R08: 0000000000000003 R09: 0000000000000004 [ 194.976307][ T7560] R10: dffffc0000000000 R11: fffff5200196df1c R12: 0000000000000000 [ 194.984273][ T7560] R13: 0000000000000002 R14: 0000000000000010 R15: 0000000000000001 [ 194.992242][ T7560] FS: 00007fe8dbc746c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 195.001167][ T7560] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 195.007744][ T7560] CR2: 0000001b2e41aff8 CR3: 0000000031f6e000 CR4: 00000000003506f0 [ 195.015737][ T7560] Call Trace: [ 195.019014][ T7560] [ 195.021943][ T7560] ? percpu_ref_switch_to_atomic+0xa0/0xa0 [ 195.027752][ T7560] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 195.033217][ T7560] ? _raw_spin_lock+0x40/0x40 [ 195.037898][ T7560] percpu_ref_kill_and_confirm+0x9b/0x130 [ 195.043643][ T7560] __mddev_suspend+0x2d1/0x630 [ 195.048430][ T7560] ? rcu_read_unlock+0xa0/0xa0 [ 195.053196][ T7560] ? _parse_integer_limit+0x19c/0x1e0 [ 195.058568][ T7560] ? kstrtoull+0x130/0x1d0 [ 195.062980][ T7560] raid_disks_store+0xb8/0x550 [ 195.067735][ T7560] ? md_attr_store+0x175/0x390 [ 195.072488][ T7560] ? __lock_acquire+0x7eb0/0x7eb0 [ 195.077505][ T7560] ? raid_disks_show+0x140/0x140 [ 195.082429][ T7560] ? do_raw_spin_unlock+0x121/0x230 [ 195.087657][ T7560] md_attr_store+0x19c/0x390 [ 195.092238][ T7560] ? sysfs_kf_read+0x360/0x360 [ 195.096989][ T7560] kernfs_fop_write_iter+0x3a4/0x520 [ 195.102266][ T7560] vfs_write+0x474/0x9a0 [ 195.106503][ T7560] ? file_end_write+0x250/0x250 [ 195.111350][ T7560] ? __fget_files+0x3fc/0x460 [ 195.116024][ T7560] ? __fdget_pos+0x2a3/0x330 [ 195.120694][ T7560] ? ksys_write+0x74/0x260 [ 195.125205][ T7560] ksys_write+0x151/0x260 [ 195.129531][ T7560] ? __ia32_sys_read+0x90/0x90 [ 195.134293][ T7560] ? lockdep_hardirqs_on+0x98/0x150 [ 195.139570][ T7560] do_syscall_64+0x55/0xb0 [ 195.143985][ T7560] ? clear_bhb_loop+0x40/0x90 [ 195.148662][ T7560] ? clear_bhb_loop+0x40/0x90 [ 195.153338][ T7560] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.159226][ T7560] RIP: 0033:0x7fe8dada8f19 [ 195.163630][ T7560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.183232][ T7560] RSP: 002b:00007fe8dbc74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 195.191637][ T7560] RAX: ffffffffffffffda RBX: 00007fe8db025fa0 RCX: 00007fe8dada8f19 [ 195.199600][ T7560] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000006 [ 195.207651][ T7560] RBP: 00007fe8dae37f6d R08: 0000000000000000 R09: 0000000000000000 [ 195.215617][ T7560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.223587][ T7560] R13: 00007fe8db026038 R14: 00007fe8db025fa0 R15: 00007fff8a119f98 [ 195.231585][ T7560] [ 195.234606][ T7560] Modules linked in: [ 195.238501][ T7560] ---[ end trace 0000000000000000 ]--- [ 195.243946][ T7560] RIP: 0010:__percpu_ref_switch_mode+0x123/0x5f0 [ 195.250277][ T7560] Code: 31 ff 89 c6 e8 6e 7a 59 fd 45 85 ff 0f 84 5a 04 00 00 e8 b0 76 59 fd eb 05 e8 a9 76 59 fd 4d 8d 74 24 10 4d 89 f5 49 c1 ed 03 <41> 80 7c 1d 00 00 74 08 4c 89 f7 e8 3d 7f b2 fd 49 83 3e 00 0f 84 [ 195.269883][ T7560] RSP: 0018:ffffc9000cb6f8e0 EFLAGS: 00010002 [ 195.275965][ T7560] RAX: ffffffff842e67f0 RBX: dffffc0000000000 RCX: 0000000000080000 [ 195.283945][ T7560] RDX: ffffc9000d1db000 RSI: 00000000000028b1 RDI: 00000000000028b2 [ 195.292174][ T7560] RBP: ffffc9000cb6f9f8 R08: 0000000000000003 R09: 0000000000000004 [ 195.300178][ T7560] R10: dffffc0000000000 R11: fffff5200196df1c R12: 0000000000000000 [ 195.308149][ T7560] R13: 0000000000000002 R14: 0000000000000010 R15: 0000000000000001 [ 195.316211][ T7560] FS: 00007fe8dbc746c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 195.325137][ T7560] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 195.331718][ T7560] CR2: 0000001b2e41aff8 CR3: 0000000031f6e000 CR4: 00000000003506f0 [ 195.339689][ T7560] Kernel panic - not syncing: Fatal exception [ 195.345976][ T7560] Kernel Offset: disabled [ 195.350285][ T7560] Rebooting in 86400 seconds..