last executing test programs: 13.853595099s ago: executing program 4 (id=451): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000000)='./file1\x00', 0x8800, &(0x7f0000000d80)=ANY=[], 0x23, 0x7f3, &(0x7f0000001800)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) keyctl$setperm(0x5, 0x0, 0x3000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) 13.280015173s ago: executing program 3 (id=453): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000006bc0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x8080, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000180)='L', 0x1}], 0x1}}], 0x1, 0x4040001) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) timerfd_create(0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, 0x0, 0x0, 0x0) 12.152227269s ago: executing program 0 (id=456): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000000)='./file1\x00', 0x8800, &(0x7f0000000d80)=ANY=[], 0x23, 0x7f3, &(0x7f0000001800)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) keyctl$setperm(0x5, 0x0, 0x3000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18000}, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000044c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}}, 0x18) close_range(r1, 0xffffffffffffffff, 0x0) 12.114418851s ago: executing program 3 (id=457): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) 9.867230473s ago: executing program 3 (id=459): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) gettid() timer_create(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000000)='./file1\x00', 0x8800, &(0x7f0000000d80)=ANY=[], 0x23, 0x7f3, &(0x7f0000001800)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) keyctl$setperm(0x5, 0x0, 0x3000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18000}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000044c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r6, &(0x7f0000000080)={0x1d, r7, 0x0, {0x0, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 8.859137042s ago: executing program 1 (id=461): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000000)='./file1\x00', 0x8800, &(0x7f0000000d80)=ANY=[], 0x23, 0x7f3, &(0x7f0000001800)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) keyctl$setperm(0x5, 0x0, 0x3000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18000}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000044c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r7, &(0x7f0000000080)={0x1d, r8, 0x0, {0x0, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 8.858867511s ago: executing program 3 (id=462): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = epoll_create1(0x0) epoll_pwait2(r2, &(0x7f00000001c0)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000080)={0x28000006}) 7.779733695s ago: executing program 1 (id=464): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) gettid() openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000000)='./file1\x00', 0x8800, &(0x7f0000000d80)=ANY=[], 0x23, 0x7f3, &(0x7f0000001800)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) keyctl$setperm(0x5, 0x0, 0x3000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000044c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}}, 0x18) close_range(r1, 0xffffffffffffffff, 0x0) 7.778954875s ago: executing program 3 (id=465): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000000)='./file1\x00', 0x8800, &(0x7f0000000d80)=ANY=[], 0x23, 0x7f3, &(0x7f0000001800)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) keyctl$setperm(0x5, 0x0, 0x3000) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@gettaction={0x20, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000044c0)={'vxcan0\x00', 0x0}) connect$can_j1939(r4, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0xf0}, 0x1}, 0x18) socket$inet_tcp(0x2, 0x1, 0x0) 6.572052676s ago: executing program 4 (id=467): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) eventfd2(0x0, 0x0) 6.570437996s ago: executing program 1 (id=468): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x8000, @loopback, 0xffffffff}, 0x1c) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) accept4$inet6(r2, 0x0, 0x0, 0x800) 6.166770599s ago: executing program 2 (id=469): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000000000/0x4000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x4cafa2) ioctl$CEC_TRANSMIT(r2, 0xc0386105, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(r6, &(0x7f0000000180)='./file0\x00', 0x10000, 0x63962b33e358844d) ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000000540)={0x70, 0x1ff, 0xa, 0x6, 0x80}) r7 = syz_open_procfs(r1, &(0x7f0000000040)='status\x00') lseek(r7, 0x1000000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x4, 0x55a}) 6.166476159s ago: executing program 4 (id=470): r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f00000000c0)=ANY=[@ANYBLOB='uni_xlate=0,iocharset=ep866,errors=continue,utf8=0,shortname=mixed,shortname=win95,nonumtail=0,uni_xlate=1,iocharset=cp857,shortname=mixed,utf8=1,uni_xlate=0,shortname=win95,codepage=936,utf8=1,utf8=0,\x00'], 0xfd, 0x2a8, &(0x7f0000000580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$netlink(0x10, 0x3, 0x15) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRES8=r2, @ANYRESHEX=r3, @ANYRES16, @ANYRESDEC=r0, @ANYRESHEX=r3, @ANYRESOCT=r0], 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x4050) mkdirat(0xffffffffffffff9c, 0x0, 0x181) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file1\x00', 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) mknodat(r5, &(0x7f0000000100)='./file0/file0\x00', 0x8910, 0x4) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x400, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b00000000000000000000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000002050000de0500000400000000000000000000499b68f90549fb2be22f747eecf344f15a6d9c7817c43d21c1e515c34d637a572fa19b3c021e2444734ac015ae52d39ce15eef63cd0d"], 0x50) getdents64(r6, &(0x7f0000000080)=""/78, 0x4e) 6.15587879s ago: executing program 0 (id=480): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0) 5.117999521s ago: executing program 2 (id=471): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) 5.081726913s ago: executing program 0 (id=482): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = epoll_create1(0x0) epoll_pwait2(r2, &(0x7f00000001c0)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000080)={0x28000006}) 5.080538333s ago: executing program 1 (id=472): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000000000/0x4000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x4cafa2) ioctl$CEC_TRANSMIT(r2, 0xc0386105, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(r6, &(0x7f0000000180)='./file0\x00', 0x10000, 0x63962b33e358844d) ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000000540)={0x70, 0x1ff, 0xa, 0x6, 0x80}) r7 = syz_open_procfs(r1, &(0x7f0000000040)='status\x00') lseek(r7, 0x1000000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x4, 0x55a}) 5.079569993s ago: executing program 4 (id=473): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) gettid() timer_create(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000000)='./file1\x00', 0x8800, &(0x7f0000000d80)=ANY=[], 0x23, 0x7f3, &(0x7f0000001800)="$eJzs3U9oHOfZAPBnFMmWFfAX8n3kM8ZxxnZKbeoqu1KiVOSQbFYjeRJpV+yuik0pSYhtMJaTEBPS+NDEl6QtLaWnHtNcQy6FHgo9lPbQFgqF5tBLD4VATiWFFkpLCajM7K71x1pJTmQrTX8/Yb2z7z7zzjOzo3l21ruzAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEUp+pVKrJwYhYOpsOVp9pNRe2uL8/3s/XNVssNyIp/sXoaBzqdh36v9W77yt+HY8j3VtHYrRoRuPa3ffd89j/Dg/1598ioU/q2A7jkog3iqQuPzcUcTsSuYO+87NbnuWfK8XvuayRt5v5Qm0uS/N2M52emqo8dGa2nc7m81n7XLuTLaT1VlbrNFvpyfqptDo9PZlm4+eaS425mdp81u989MsTlcpU+tT4YlZrtZuNh54ab9fP5PPzeWOujJmovBpFzKPFjvh03kk7WW0hTS9eWr4wuV2qRVB1Xc/+dY/XkQfv+fCVD/526UKxQw4aJOntmBPV6sREdeqR6UcerVSGJyoT6zsqG8SNiBiKKCJuy07LZ92B1YPE7h284VMa6tb/iPnIoxFLcTbSSGOo/L36MxKjMROtaMZCcfsPIxvuv6n+f+Ghv/xuq+WW9futoqiP3qjyh1bvPhxl/T/avXV0QP0vDsob89jZz4FbnePKbyPe62aztv9qvBbX4nI8F8uxHBfi5U+Yzx37Gdph3Gj/kdg6bi6yaEQe7WhGHgtRK3vSXk8a0zEVU1GJZ+JMzEY70piNPOYji3aci3Z0Iiv3qHq0IotadKIZrUjjZNTjVKRRjemYjslII4vxOBfNWIpGzMVM1MpRLsalcrtPbsjrvm8+m7zx+w/fLqZvBFW3WJGkeDJXBP11Xff6/aRXzB+IHdX/A70tuD4iiXR4j2sRu6r/p7LT+F04asPuWCnr//BepwEAAADcRkn56nsSESNxfzk1m89nX9vrtAAAAIBdVL6v+UjRjBRT90dSnP9XNol8/47nBgAAAOyOpPyMXRIRY/FAd6r/canNXgQAAAAA/gOV//9/tGjGIl4vO5z/AwAAwOfMtwZdY/+Dfb1r7LcX9yd39aIXzz6YXKkVU7Urvb5e89UbI3ZmDycHe4OUzdTwtbuTiBiuZ0eS/tUvP97fbT8qRzi8egHCQdf6T1qtkeT64ARi6wTKW/HdONaNOXa+257v39NdythsPp+N15vzj1WT3osjnVdeuPSNiGLp324sHEzi4qXlC+PPv7h8vszlejHK9Su9y8Mnt5DLSm8LxP2br/FI+UGM3nLHusutrF3/oe7sQ1svM1m7zDfjeDfm+Fi3HVu//qPFMqvjj1WjVjs41MnOdl5ZWbP2vSyqn3LN34wT3ZgTJ090m02ymFiXxQs3ZzGxNoudbYstsyj0s3j72Otn//6rZpJNbpfF5KfMAmCvXCyv+rNahQ6UVehfK11F/d9Qd/tXNd/0KPfFn/SOoRuOchdXn2X0519T64Zjd6r7m3GyDPnFye7zieHD6+rKE2VdqWxyRH/p0ku/7h3RH373hz/6+tHf/Hi1um04Rj/RfVYwOIt341Q3stfEvb+8qboVQ1TLLfu9DVX1nWKOdwZW1fb8RDISESv/c+Pu8nGKiInJqcrDlcojEzFSPlXoNYMz3b/zvQSAz5ttv2NnB9/C8/DmZ9XRr3j33nhLwXg8Hy/GcpyP0+WnDSLigc1HHVvzNoTT25y1jq35hpfT25xbrsZObIzdfyKJAbGTa7bY//+gbP5x+x4TALjdjm9Th3dS/0/3zrtj8/PuDbX8VPeLc/tnxzG4lm/mK7d7gwDAf4Gs9VEy1nkrabXyxWeq09PVWudMlraa9afTVj4zl6V5o5O16mdqjbksXWw1O816/wXxmaydtpcWF5sfd9LZZitdbLbzs+U3v6e9r35vZwu1xqtRby/OZ7V2ltabjU6t3kln8nY9XVx6cj5vn8la5cztxayez+b1WidvNtJ2c6lVz8bTtJ1lawLzmazRyWfzYrKRLrbyhVrrekTMLy1k6UzWrrfyxU6zO2B/WXljttlaqA1Y/T/fwU0NAJ8ZV1+7dvm55eULL6+fWEk29mw+8ccdxFyNWNnr1QQA1lhbpQEAAAAAAAAAAAAAgM+mmz+uV/Ru+5G+tRMjcQvBGyb2xyeZ6/M78aX3ug/Lbgy4yTj7tpzrrtWeA+se0329nWXvt88tTzz7+OOXB8U8+fqhM3/KIrYfZ/O/lKt337T3xlsHI/b99Pvdnifu1Jq+H921iOFbmn0l2SJmzw5JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADDQvwMAAP//wexOyQ==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) keyctl$setperm(0x5, 0x0, 0x3000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18000}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000044c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r6, &(0x7f0000000080)={0x1d, r7, 0x0, {0x0, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 3.834583286s ago: executing program 0 (id=474): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000000)='./file1\x00', 0x8800, &(0x7f0000000d80)=ANY=[], 0x23, 0x7f3, &(0x7f0000001800)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) keyctl$setperm(0x5, 0x0, 0x3000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18000}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000044c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r7, &(0x7f0000000080)={0x1d, r8, 0x0, {0x0, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 3.833043866s ago: executing program 1 (id=475): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, 0x0) syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000000)='./file1\x00', 0x8800, &(0x7f0000000d80)=ANY=[], 0x23, 0x7f3, &(0x7f0000001800)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) keyctl$setperm(0x5, 0x0, 0x3000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000044c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r6, &(0x7f0000000080)={0x1d, r7, 0x0, {0x0, 0xf0}, 0x1}, 0x18) close_range(r1, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 3.443155999s ago: executing program 2 (id=476): r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f00000000c0)=ANY=[@ANYBLOB='uni_xlate=0,iocharset=ep866,errors=continue,utf8=0,shortname=mixed,shortname=win95,nonumtail=0,uni_xlate=1,iocharset=cp857,shortname=mixed,utf8=1,uni_xlate=0,shortname=win95,codepage=936,utf8=1,utf8=0,\x00'], 0xfd, 0x2a8, &(0x7f0000000580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$netlink(0x10, 0x3, 0x15) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRES8=r2, @ANYRESHEX=r3, @ANYRES16, @ANYRESDEC=r0, @ANYRESHEX=r3, @ANYRESOCT=r0], 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x4050) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) mknodat(r5, &(0x7f0000000100)='./file0/file0\x00', 0x8910, 0x4) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x400, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b00000000000000000000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000002050000de0500000400000000000000000000499b68f90549fb2be22f747eecf344f15a6d9c7817c43d21c1e515c34d637a572fa19b3c021e2444734ac015ae52d39ce15eef63cd0d"], 0x50) getdents64(r6, &(0x7f0000000080)=""/78, 0x4e) 2.75334489s ago: executing program 0 (id=477): socket$l2tp6(0xa, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) userfaultfd(0x80001) socket$netlink(0x10, 0x3, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r2 = open(0x0, 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r2, 0x1e, &(0x7f0000000140), 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x21, 0x0, 0x0, 0x0) timer_create(0x1, &(0x7f0000000040)={0x0, 0x17, 0x4}, &(0x7f0000000080)) syz_open_procfs(r4, &(0x7f0000000180)='fdinfo/3\x00') r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4004, r5, 0x2}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000240)={0x4, 0x1ce, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x5, 0xffffffffffffffff, 0x9, 0x0, 0x1, 0x1000000080000006}, 0x0, 0x0) r6 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_FRONTEND(r6, 0x40246f4c, 0x0) 2.74933833s ago: executing program 1 (id=478): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000000)='./file1\x00', 0x8800, &(0x7f0000000d80)=ANY=[], 0x23, 0x7f3, &(0x7f0000001800)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) keyctl$setperm(0x5, 0x0, 0x3000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 2.078331139s ago: executing program 2 (id=479): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) gettid() openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000000)='./file1\x00', 0x8800, &(0x7f0000000d80)=ANY=[], 0x23, 0x7f3, &(0x7f0000001800)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) keyctl$setperm(0x5, 0x0, 0x3000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000044c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}}, 0x18) close_range(r1, 0xffffffffffffffff, 0x0) 1.397518708s ago: executing program 0 (id=481): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000000)='./file1\x00', 0x8800, &(0x7f0000000d80)=ANY=[], 0x23, 0x7f3, &(0x7f0000001800)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@gettaction={0x20, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18000}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000044c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r7, &(0x7f0000000080)={0x1d, r8, 0x0, {0x0, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 755.228836ms ago: executing program 4 (id=483): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000300)={0x20000002}) epoll_pwait2(0xffffffffffffffff, &(0x7f00000001c0)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000080)={0x28000006}) 521.90698ms ago: executing program 2 (id=484): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000240)}) eventfd2(0x0, 0x0) 260.611995ms ago: executing program 2 (id=485): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x8000, @loopback, 0xffffffff}, 0x1c) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) accept4$inet6(r2, 0x0, 0x0, 0x800) 117.719594ms ago: executing program 3 (id=486): socket$l2tp6(0xa, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) userfaultfd(0x80001) socket$netlink(0x10, 0x3, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r2, 0x1e, &(0x7f0000000140), 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x21, 0x0, 0x0, 0x0) timer_create(0x1, &(0x7f0000000040)={0x0, 0x17, 0x4}, &(0x7f0000000080)) syz_open_procfs(r4, &(0x7f0000000180)='fdinfo/3\x00') r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4004, r5, 0x2}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000240)={0x4, 0x1ce, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x5, 0xffffffffffffffff, 0x9, 0x0, 0x1, 0x1000000080000006}, 0x0, 0x0) r6 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_FRONTEND(r6, 0x40246f4c, 0x0) 0s ago: executing program 4 (id=487): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000300)={0x20000002}) epoll_pwait2(0xffffffffffffffff, &(0x7f00000001c0)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000080)={0x28000006}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.122' (ED25519) to the list of known hosts. [ 55.116498][ T4172] cgroup: Unknown subsys name 'net' [ 55.267175][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 56.752124][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 58.336040][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 58.432490][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 58.471347][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 58.486504][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.493730][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.502590][ T4194] device bridge_slave_0 entered promiscuous mode [ 58.543678][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.550746][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.559290][ T4194] device bridge_slave_1 entered promiscuous mode [ 58.576182][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 58.604789][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.636022][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.700613][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.709846][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.717764][ T4190] device bridge_slave_0 entered promiscuous mode [ 58.725786][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.733022][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.740681][ T4184] device bridge_slave_0 entered promiscuous mode [ 58.754464][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 58.767734][ T4194] team0: Port device team_slave_0 added [ 58.773907][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.780980][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.789244][ T4190] device bridge_slave_1 entered promiscuous mode [ 58.797137][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.804309][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.812396][ T4184] device bridge_slave_1 entered promiscuous mode [ 58.844589][ T4194] team0: Port device team_slave_1 added [ 58.850440][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.857939][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.866713][ T4185] device bridge_slave_0 entered promiscuous mode [ 58.893766][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.910004][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.917498][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.926029][ T4185] device bridge_slave_1 entered promiscuous mode [ 58.958313][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.988893][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.000695][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.015703][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.022841][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.048865][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.062444][ T4184] team0: Port device team_slave_0 added [ 59.069785][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.080354][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.094930][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.102019][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.128722][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.140858][ T4184] team0: Port device team_slave_1 added [ 59.175848][ T4185] team0: Port device team_slave_0 added [ 59.202925][ T4185] team0: Port device team_slave_1 added [ 59.216919][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.223972][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.250236][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.263714][ T4190] team0: Port device team_slave_0 added [ 59.270000][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.277033][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.303278][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.341290][ T4190] team0: Port device team_slave_1 added [ 59.350710][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.358115][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.365951][ T4186] device bridge_slave_0 entered promiscuous mode [ 59.380314][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.387477][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.395494][ T4186] device bridge_slave_1 entered promiscuous mode [ 59.426201][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.433385][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.459728][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.475640][ T4194] device hsr_slave_0 entered promiscuous mode [ 59.482594][ T4194] device hsr_slave_1 entered promiscuous mode [ 59.494822][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.501899][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.527968][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.540260][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.547341][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.573866][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.586133][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.593159][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.619127][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.667694][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.695953][ T4184] device hsr_slave_0 entered promiscuous mode [ 59.702835][ T4184] device hsr_slave_1 entered promiscuous mode [ 59.709542][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.717748][ T4184] Cannot create hsr debugfs directory [ 59.724891][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.750039][ T4190] device hsr_slave_0 entered promiscuous mode [ 59.757393][ T4190] device hsr_slave_1 entered promiscuous mode [ 59.764398][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.772150][ T4190] Cannot create hsr debugfs directory [ 59.824721][ T4185] device hsr_slave_0 entered promiscuous mode [ 59.831623][ T4185] device hsr_slave_1 entered promiscuous mode [ 59.838169][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.845993][ T4185] Cannot create hsr debugfs directory [ 59.866801][ T4186] team0: Port device team_slave_0 added [ 59.898494][ T4186] team0: Port device team_slave_1 added [ 59.962149][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.969114][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.995152][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.029876][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.036907][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.063939][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 60.067851][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.070464][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 60.122449][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 60.128522][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 60.131891][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 60.178974][ T4186] device hsr_slave_0 entered promiscuous mode [ 60.185677][ T4186] device hsr_slave_1 entered promiscuous mode [ 60.192773][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.200335][ T4186] Cannot create hsr debugfs directory [ 60.321435][ T4184] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.332871][ T4184] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.361625][ T4184] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.395131][ T4184] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.409934][ T4190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.419327][ T4190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.443769][ T4190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.459027][ T4190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.514854][ T4194] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.530471][ T4194] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.560025][ T4194] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.583191][ T4194] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.610222][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.634135][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.649392][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.659194][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.704176][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.721116][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.739970][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.750822][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.769018][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.796167][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.817770][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.844051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.855108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.864033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.873082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.882300][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.889449][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.897912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.913704][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.923007][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.931437][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.938537][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.966568][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.994564][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.002243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.010947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.019165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.033342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.043420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.060559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.074436][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.084205][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.093676][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.100796][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.129723][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.140026][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.149101][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.159747][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.168638][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.185107][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.196516][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.215932][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.229589][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.239856][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.251343][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.261372][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.268511][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.276816][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.297925][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.311301][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.347677][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.360810][ T1484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.372802][ T1484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.381401][ T1484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.390662][ T1484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.401374][ T1484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.409729][ T1484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.418199][ T1484] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.431151][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.452742][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.469964][ T1484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.478888][ T1484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.488093][ T1484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.499521][ T1484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.508264][ T1484] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.515349][ T1484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.524453][ T1484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.532391][ T1484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.540084][ T1484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.560391][ T1484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.572211][ T1484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.580374][ T1484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.590781][ T1484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.599479][ T1484] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.606701][ T1484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.617736][ T1484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.628624][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.648867][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.656837][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.671422][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.685527][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.699180][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.712467][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.725097][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.733783][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.741218][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.749620][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.770931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.779993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.789179][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.796294][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.804581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.815093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.823515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.831884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.840048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.848484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.857202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.873021][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.884595][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.906372][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.922608][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.949666][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.956830][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.988451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.012647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.031924][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.039028][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.051170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.073041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.087418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.109680][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.116829][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.126509][ T4265] Bluetooth: hci2: command 0x041b tx timeout [ 62.131894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.133805][ T4265] Bluetooth: hci3: command 0x041b tx timeout [ 62.141334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.155580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.165198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.174530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.182682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.205873][ T1108] Bluetooth: hci0: command 0x041b tx timeout [ 62.217038][ T1108] Bluetooth: hci1: command 0x041b tx timeout [ 62.224015][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.232766][ T1108] Bluetooth: hci4: command 0x041b tx timeout [ 62.239831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.253932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.264031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.273097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.281517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.293008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.301176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.309010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.322819][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.332366][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.355221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.370248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.381242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.398896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.409237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.418460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.428728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.470673][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.478944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.488871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.498630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.509863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.518925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.529686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.546690][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.564256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.574649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.583881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.594076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.603848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.614149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.642670][ T4184] device veth0_vlan entered promiscuous mode [ 62.669996][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.679921][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.694282][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.702314][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.709791][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.718759][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.728927][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.737094][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.752817][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.763371][ T4190] device veth0_vlan entered promiscuous mode [ 62.774792][ T4184] device veth1_vlan entered promiscuous mode [ 62.812325][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.820541][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.830450][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.841151][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.850435][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.860424][ T4194] device veth0_vlan entered promiscuous mode [ 62.872133][ T4190] device veth1_vlan entered promiscuous mode [ 62.909703][ T4186] device veth0_vlan entered promiscuous mode [ 62.917527][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.926333][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.935709][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.944832][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.953876][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.962820][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.970210][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.978046][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.986454][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.995466][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.004032][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.017092][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.040877][ T4194] device veth1_vlan entered promiscuous mode [ 63.056570][ T4190] device veth0_macvtap entered promiscuous mode [ 63.072601][ T4186] device veth1_vlan entered promiscuous mode [ 63.085127][ T4184] device veth0_macvtap entered promiscuous mode [ 63.093164][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.101201][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.109344][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.118404][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.127345][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.136075][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.146312][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.154746][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.170548][ T4190] device veth1_macvtap entered promiscuous mode [ 63.183768][ T4184] device veth1_macvtap entered promiscuous mode [ 63.224440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.233442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.241356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.250359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.259892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.268660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.277602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.289472][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.302481][ T4194] device veth0_macvtap entered promiscuous mode [ 63.312650][ T4194] device veth1_macvtap entered promiscuous mode [ 63.324399][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.346349][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.354416][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.363237][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.372243][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.382829][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.394016][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.406725][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.419365][ T4186] device veth0_macvtap entered promiscuous mode [ 63.440398][ T4186] device veth1_macvtap entered promiscuous mode [ 63.449271][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.458212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.467480][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.476343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.486270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.495162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.503805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.514858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.523921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.536408][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.547031][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.557652][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.568333][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.579826][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.591217][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.603672][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.615107][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.630206][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.639581][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.649157][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.658158][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.669464][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.680123][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.690079][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.700963][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.713072][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.749076][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.757779][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.768355][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.776876][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.786126][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.794885][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.804752][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.813589][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.823982][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.832648][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.843744][ T4194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.854327][ T4194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.863432][ T4194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.873785][ T4194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.892799][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.903686][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.913787][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.924823][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.934713][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.945490][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.957055][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.967856][ T4185] device veth0_vlan entered promiscuous mode [ 63.987513][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.000691][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.022491][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.034085][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.047174][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.057642][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.067537][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.078726][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.089810][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.114027][ T4184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.123424][ T4184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.135293][ T4184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.144297][ T4184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.162461][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.171014][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.182602][ T4185] device veth1_vlan entered promiscuous mode [ 64.208127][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 64.218033][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 64.234012][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.243806][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.258636][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.267687][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.292555][ T1108] Bluetooth: hci4: command 0x040f tx timeout [ 64.301903][ T1108] Bluetooth: hci1: command 0x040f tx timeout [ 64.309962][ T1108] Bluetooth: hci0: command 0x040f tx timeout [ 64.331460][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.341220][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.356243][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.366342][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.375418][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.418962][ T4282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.427188][ T4185] device veth0_macvtap entered promiscuous mode [ 64.432765][ T4282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.454753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.467109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.477098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.517536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.531414][ T4185] device veth1_macvtap entered promiscuous mode [ 64.548793][ T4282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.559373][ T4282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.577185][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.585539][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.604337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.617782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.653956][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.658755][ T4282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.665937][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.684762][ T4282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.700583][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.712017][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.727916][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.738813][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.750842][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.761662][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.774229][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.784431][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.796236][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.796789][ T4282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.807670][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.822862][ T4282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.825362][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.842980][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.855575][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.865784][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.876259][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.887892][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.902764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.915695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.924168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.933135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.942147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.950660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.977213][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.994821][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.028003][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.038362][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.089090][ T4301] loop2: detected capacity change from 0 to 764 [ 65.106571][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.116732][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.136510][ T4304] loop3: detected capacity change from 0 to 764 [ 65.146806][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.160859][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.171290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.202977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.299845][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.505816][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.582178][ T4309] netlink: 'syz.3.4': attribute type 2 has an invalid length. [ 66.016136][ T4312] netlink: 'syz.2.3': attribute type 2 has an invalid length. [ 66.211282][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.316175][ T4308] Bluetooth: hci2: command 0x0419 tx timeout [ 66.339909][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.346895][ T4308] Bluetooth: hci3: command 0x0419 tx timeout [ 66.354129][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.375696][ T4318] loop2: detected capacity change from 0 to 764 [ 66.410703][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 66.428353][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 66.446961][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 66.496996][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.713391][ T4325] netlink: 'syz.3.5': attribute type 2 has an invalid length. [ 67.548968][ T4332] loop4: detected capacity change from 0 to 1024 [ 67.594253][ T4331] loop3: detected capacity change from 0 to 764 [ 67.604765][ T4334] loop1: detected capacity change from 0 to 1024 [ 67.637677][ T1346] cfg80211: failed to load regulatory.db [ 67.667130][ T4332] ======================================================= [ 67.667130][ T4332] WARNING: The mand mount option has been deprecated and [ 67.667130][ T4332] and is ignored by this kernel. Remove the mand [ 67.667130][ T4332] option from the mount to silence this warning. [ 67.667130][ T4332] ======================================================= [ 67.722635][ T4332] EXT4-fs (loop4): Ignoring removed bh option [ 67.729535][ T4332] EXT4-fs (loop4): Ignoring removed nobh option [ 67.761456][ T4332] EXT4-fs (loop4): inline encryption not supported [ 67.781103][ T4334] EXT4-fs (loop1): Ignoring removed bh option [ 67.791378][ T4337] loop2: detected capacity change from 0 to 256 [ 67.929522][ T4332] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 67.943039][ T4334] EXT4-fs (loop1): Ignoring removed nobh option [ 67.949329][ T4334] EXT4-fs (loop1): inline encryption not supported [ 67.963069][ T4334] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 68.595743][ T4332] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,nojournal_checksum,barrier=0x0000000000000002,grpquota,nolazytime,resgid=0x0000000000000000,bh,journal_dev=0x0000000000000800,nobh,inlinecrypt,bsddf,dioread_nolock,,errors=continue. Quota mode: writeback. [ 68.635418][ T4334] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,nojournal_checksum,barrier=0x0000000000000002,grpquota,nolazytime,resgid=0x0000000000000000,bh,journal_dev=0x0000000000000800,nobh,inlinecrypt,bsddf,dioread_nolock,,errors=continue. Quota mode: writeback. [ 68.828075][ T4332] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3887: comm syz.4.9: Allocating blocks 497-513 which overlap fs metadata [ 68.853546][ T4350] loop0: detected capacity change from 0 to 1024 [ 68.946579][ T4350] EXT4-fs (loop0): Ignoring removed bh option [ 68.972492][ T4332] EXT4-fs (loop4): pa ffff88807429ae00: logic 128, phys. 385, len 8 [ 68.980811][ T4332] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4904: group 0, free 0, pa_free 1 [ 69.021705][ T4350] EXT4-fs (loop0): Ignoring removed nobh option [ 69.031737][ T4350] EXT4-fs (loop0): inline encryption not supported [ 69.126367][ T4358] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 69.137433][ T4358] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 69.147756][ T4358] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 69.178279][ T4350] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 69.212510][ T26] audit: type=1800 audit(1770568191.589:2): pid=4358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10" name="file1" dev="loop2" ino=1048591 res=0 errno=0 [ 69.337255][ T4358] syz.2.10 (4358) used greatest stack depth: 21040 bytes left [ 69.417301][ T4357] loop3: detected capacity change from 0 to 764 [ 69.472949][ T4350] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,nojournal_checksum,barrier=0x0000000000000002,grpquota,nolazytime,resgid=0x0000000000000000,bh,journal_dev=0x0000000000000800,nobh,inlinecrypt,bsddf,dioread_nolock,,errors=continue. Quota mode: writeback. [ 69.556926][ T4362] loop1: detected capacity change from 0 to 256 [ 69.670575][ T4362] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 69.736063][ T4350] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3887: comm syz.0.11: Allocating blocks 497-513 which overlap fs metadata [ 69.805221][ T4362] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 69.819451][ T4362] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 69.877113][ T26] audit: type=1800 audit(1770568192.309:3): pid=4362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.12" name="file0" dev="loop1" ino=1048594 res=0 errno=0 [ 69.948476][ T4366] netlink: 'syz.3.23': attribute type 2 has an invalid length. [ 70.119967][ T4350] EXT4-fs (loop0): pa ffff888074344a80: logic 128, phys. 385, len 8 [ 70.128801][ T4350] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4904: group 0, free 0, pa_free 1 [ 70.597060][ T4376] loop4: detected capacity change from 0 to 764 [ 70.608898][ T4378] loop1: detected capacity change from 0 to 764 [ 71.334521][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.524532][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.564784][ T4382] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 71.574340][ T4382] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 71.583938][ T4382] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 71.613787][ T4382] syz.3.17 (4382) used greatest stack depth: 20664 bytes left [ 71.621482][ T26] audit: type=1800 audit(1770568193.999:4): pid=4382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.17" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 71.648733][ T4389] loop2: detected capacity change from 0 to 764 [ 72.385190][ T4397] netlink: 'syz.4.15': attribute type 2 has an invalid length. [ 72.511710][ T4400] netlink: 'syz.1.16': attribute type 2 has an invalid length. [ 72.591902][ T4401] netlink: 'syz.2.20': attribute type 2 has an invalid length. [ 72.884059][ T4393] loop0: detected capacity change from 0 to 764 [ 73.062459][ T4409] loop4: detected capacity change from 0 to 764 [ 73.080269][ T4410] loop1: detected capacity change from 0 to 256 [ 73.191898][ T4413] loop3: detected capacity change from 0 to 764 [ 74.086445][ T4421] netlink: 'syz.3.25': attribute type 2 has an invalid length. [ 74.251553][ C1] sched: RT throttling activated [ 74.252962][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888079b7b800: rx timeout, send abort [ 74.269355][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888079b7b800: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 74.463526][ T4423] netlink: 'syz.0.19': attribute type 2 has an invalid length. [ 74.738530][ T4429] loop2: detected capacity change from 0 to 764 [ 74.798105][ T4431] loop3: detected capacity change from 0 to 764 [ 74.873623][ T4435] netlink: 'syz.1.36': attribute type 2 has an invalid length. [ 75.391693][ T4439] netlink: 'syz.2.26': attribute type 2 has an invalid length. [ 75.975362][ T4437] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 76.141798][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888061249000: rx timeout, send abort [ 76.150309][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888061249000: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 76.226632][ T4448] loop2: detected capacity change from 0 to 764 [ 77.116963][ T4455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29'. [ 77.126522][ T4455] device bridge_slave_1 left promiscuous mode [ 77.142249][ T4455] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.258016][ T4455] device bridge_slave_0 left promiscuous mode [ 77.297921][ T4455] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.335050][ T4462] loop2: detected capacity change from 0 to 764 [ 77.853796][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 77.881556][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 77.890640][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 77.899679][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 77.908762][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 77.917784][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 77.927027][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 77.936043][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 77.945117][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 77.954137][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 79.585496][ T4475] syz.1.35 (4475) used greatest stack depth: 17240 bytes left [ 79.702951][ T4473] loop4: detected capacity change from 0 to 764 [ 79.833572][ T4479] loop3: detected capacity change from 0 to 764 [ 79.904186][ T4481] loop1: detected capacity change from 0 to 764 [ 80.261667][ T4485] netlink: 'syz.3.39': attribute type 2 has an invalid length. [ 81.250174][ T4491] netlink: 'syz.1.38': attribute type 2 has an invalid length. [ 81.292436][ T4489] loop2: detected capacity change from 0 to 764 [ 81.986201][ T4497] netlink: 'syz.2.41': attribute type 2 has an invalid length. [ 82.166778][ T4498] loop3: detected capacity change from 0 to 764 [ 82.597254][ T4506] loop0: detected capacity change from 0 to 764 [ 83.246945][ T4510] loop4: detected capacity change from 0 to 764 [ 83.253885][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805fd10800: rx timeout, send abort [ 83.682420][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88805fd10800: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 83.979844][ T4519] loop0: detected capacity change from 0 to 764 [ 84.331973][ T4523] netlink: 'syz.3.43': attribute type 2 has an invalid length. [ 84.504214][ T4526] loop1: detected capacity change from 0 to 764 [ 84.585352][ T4531] netlink: 'syz.0.58': attribute type 2 has an invalid length. [ 86.109810][ T4536] loop0: detected capacity change from 0 to 764 [ 86.563068][ T4538] netlink: 'syz.0.62': attribute type 2 has an invalid length. [ 86.693561][ T4542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.50'. [ 86.725340][ T4542] device bridge_slave_1 left promiscuous mode [ 86.791832][ T4542] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.801304][ T4542] device bridge_slave_0 left promiscuous mode [ 86.870728][ T4542] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.347586][ T4546] loop1: detected capacity change from 0 to 764 [ 87.822276][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888062390000: rx timeout, send abort [ 87.831251][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888062390000: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 88.397996][ T4559] loop2: detected capacity change from 0 to 764 [ 88.455179][ T4557] loop1: detected capacity change from 0 to 764 [ 88.916555][ T4563] netlink: 'syz.2.54': attribute type 2 has an invalid length. [ 89.200242][ T4566] netlink: 'syz.1.53': attribute type 2 has an invalid length. [ 89.478127][ T4565] loop4: detected capacity change from 0 to 764 [ 89.521743][ T4570] loop3: detected capacity change from 0 to 256 [ 89.941205][ T4574] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 89.952450][ T4574] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 89.962752][ T4574] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 89.985412][ T26] audit: type=1800 audit(1770568212.409:5): pid=4574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.55" name="file1" dev="loop3" ino=1048596 res=0 errno=0 [ 90.506577][ T4576] netlink: 'syz.1.57': attribute type 2 has an invalid length. [ 91.366365][ T4586] loop0: detected capacity change from 0 to 764 [ 91.389997][ T4589] loop2: detected capacity change from 0 to 764 [ 92.800833][ T4603] loop3: detected capacity change from 0 to 764 [ 92.812991][ T4601] loop0: detected capacity change from 0 to 764 [ 93.198254][ T4606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.66'. [ 93.207302][ T4606] device bridge_slave_1 left promiscuous mode [ 93.215557][ T4606] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.803379][ T4606] device bridge_slave_0 left promiscuous mode [ 93.809682][ T4606] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.938126][ T4627] loop4: detected capacity change from 0 to 764 [ 95.255416][ T4632] loop3: detected capacity change from 0 to 764 [ 95.256329][ T4631] loop1: detected capacity change from 0 to 764 [ 95.332943][ T4633] netlink: 'syz.4.72': attribute type 2 has an invalid length. [ 95.870476][ T4635] netlink: 'syz.3.74': attribute type 2 has an invalid length. [ 96.468572][ T4643] loop2: detected capacity change from 0 to 764 [ 96.503262][ T4645] loop0: detected capacity change from 0 to 764 [ 97.542411][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888060a6d000: rx timeout, send abort [ 97.550910][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888060a6d000: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 98.008245][ T4671] loop0: detected capacity change from 0 to 764 [ 98.014870][ T4668] loop3: detected capacity change from 0 to 764 [ 98.077093][ T4675] loop1: detected capacity change from 0 to 764 [ 98.313403][ T4678] loop4: detected capacity change from 0 to 764 [ 99.022663][ T4681] loop2: detected capacity change from 0 to 764 [ 99.555876][ T4691] netlink: 'syz.3.79': attribute type 2 has an invalid length. [ 99.893250][ T4693] netlink: 'syz.4.83': attribute type 2 has an invalid length. [ 100.132308][ T4699] loop0: detected capacity change from 0 to 764 [ 100.140268][ T4696] loop1: detected capacity change from 0 to 764 [ 100.507449][ T4704] netlink: 'syz.0.88': attribute type 2 has an invalid length. [ 101.612365][ T4711] netlink: 'syz.1.90': attribute type 2 has an invalid length. [ 101.774341][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888060488400: rx timeout, send abort [ 102.007473][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888060488400: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 102.297250][ T4715] loop1: detected capacity change from 0 to 764 [ 103.537555][ T4727] loop0: detected capacity change from 0 to 1024 [ 103.576392][ T4726] loop4: detected capacity change from 0 to 764 [ 103.611829][ T4727] EXT4-fs (loop0): Ignoring removed bh option [ 103.617999][ T4727] EXT4-fs (loop0): Ignoring removed nobh option [ 103.624839][ T4727] EXT4-fs (loop0): inline encryption not supported [ 103.631384][ T4727] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 103.674764][ T4732] netlink: 'syz.1.92': attribute type 2 has an invalid length. [ 103.863464][ T4727] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,nojournal_checksum,barrier=0x0000000000000002,grpquota,nolazytime,resgid=0x0000000000000000,bh,journal_dev=0x0000000000000800,nobh,inlinecrypt,bsddf,dioread_nolock,,errors=continue. Quota mode: writeback. [ 104.048520][ T4739] netlink: 'syz.4.95': attribute type 2 has an invalid length. [ 104.313715][ T4727] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3887: comm syz.0.96: Allocating blocks 497-513 which overlap fs metadata [ 104.410471][ T4748] loop2: detected capacity change from 0 to 256 [ 104.511164][ T4727] EXT4-fs (loop0): pa ffff88807429a2a0: logic 128, phys. 385, len 8 [ 104.519313][ T4727] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4904: group 0, free 0, pa_free 1 [ 104.862930][ T4752] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 104.873377][ T4752] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 104.883630][ T4752] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 104.905741][ T26] audit: type=1800 audit(1770568227.329:6): pid=4752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.98" name="file1" dev="loop2" ino=1048599 res=0 errno=0 [ 105.198143][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888061254800: rx timeout, send abort [ 105.407828][ T4755] loop4: detected capacity change from 0 to 764 [ 105.455810][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888061254800: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 105.556622][ T4757] loop0: detected capacity change from 0 to 256 [ 106.411287][ T4765] loop2: detected capacity change from 0 to 764 [ 106.499214][ T4759] loop3: detected capacity change from 0 to 764 [ 106.629313][ T4771] loop4: detected capacity change from 0 to 764 [ 107.658844][ T4774] loop3: detected capacity change from 0 to 764 [ 107.808502][ T4779] netlink: 'syz.4.104': attribute type 2 has an invalid length. [ 108.835685][ T4782] netlink: 'syz.3.106': attribute type 2 has an invalid length. [ 109.679076][ T4785] loop1: detected capacity change from 0 to 764 [ 109.692795][ T4786] loop0: detected capacity change from 0 to 764 [ 109.862855][ T4790] loop2: detected capacity change from 0 to 764 [ 110.241478][ T4795] netlink: 'syz.2.107': attribute type 2 has an invalid length. [ 110.898716][ T4799] netlink: 'syz.1.118': attribute type 2 has an invalid length. [ 111.509181][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88806005d000: rx timeout, send abort [ 111.517851][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88806005d000: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 111.674135][ T4806] loop4: detected capacity change from 0 to 764 [ 111.675506][ T4803] loop1: detected capacity change from 0 to 764 [ 111.774642][ T4809] loop2: detected capacity change from 0 to 764 [ 112.203975][ T4812] netlink: 'syz.2.109': attribute type 2 has an invalid length. [ 112.867195][ T4821] netlink: 'syz.1.121': attribute type 2 has an invalid length. [ 112.899010][ T4820] loop2: detected capacity change from 0 to 764 [ 113.163727][ T4823] netlink: 'syz.4.122': attribute type 2 has an invalid length. [ 113.397775][ T4826] netlink: 'syz.2.111': attribute type 2 has an invalid length. [ 116.858302][ T4836] loop0: detected capacity change from 0 to 256 [ 116.934109][ T4838] loop2: detected capacity change from 0 to 764 [ 117.228486][ T4841] loop4: detected capacity change from 0 to 764 [ 118.670520][ T4849] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 118.681802][ T4849] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 118.693005][ T4849] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 118.703771][ T26] audit: type=1800 audit(1770568241.139:7): pid=4849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.115" name="file1" dev="loop0" ino=1048602 res=0 errno=0 [ 120.358658][ T4861] loop1: detected capacity change from 0 to 764 [ 120.377292][ T4863] loop2: detected capacity change from 0 to 1024 [ 120.429050][ T4863] EXT4-fs (loop2): Ignoring removed bh option [ 120.445756][ T4863] EXT4-fs (loop2): Ignoring removed nobh option [ 120.511219][ T4863] EXT4-fs (loop2): inline encryption not supported [ 120.528414][ T4865] loop4: detected capacity change from 0 to 1024 [ 120.548507][ T4863] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 120.550540][ T4867] loop0: detected capacity change from 0 to 256 [ 120.639245][ T4865] EXT4-fs (loop4): Ignoring removed bh option [ 120.657222][ T4865] EXT4-fs (loop4): Ignoring removed nobh option [ 120.671852][ T4865] EXT4-fs (loop4): inline encryption not supported [ 120.693615][ T4865] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 120.990300][ T4874] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 121.000905][ T4874] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 121.011407][ T4874] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 121.033172][ T26] audit: type=1800 audit(1770568243.459:8): pid=4874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.126" name="file1" dev="loop0" ino=1048605 res=0 errno=0 [ 121.116927][ T4865] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,nojournal_checksum,barrier=0x0000000000000002,grpquota,nolazytime,resgid=0x0000000000000000,bh,journal_dev=0x0000000000000800,nobh,inlinecrypt,bsddf,dioread_nolock,,errors=continue. Quota mode: writeback. [ 121.144534][ T4863] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,nojournal_checksum,barrier=0x0000000000000002,grpquota,nolazytime,resgid=0x0000000000000000,bh,journal_dev=0x0000000000000800,nobh,inlinecrypt,bsddf,dioread_nolock,,errors=continue. Quota mode: writeback. [ 121.593921][ T4876] netlink: 'syz.1.135': attribute type 2 has an invalid length. [ 121.761490][ T4865] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3887: comm syz.4.124: Allocating blocks 497-513 which overlap fs metadata [ 121.809742][ T4863] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3887: comm syz.2.125: Allocating blocks 497-513 which overlap fs metadata [ 121.854345][ T4865] EXT4-fs (loop4): pa ffff888071636000: logic 128, phys. 385, len 8 [ 121.862625][ T4865] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4904: group 0, free 0, pa_free 1 [ 121.892541][ T4863] EXT4-fs (loop2): pa ffff8880716361c0: logic 128, phys. 385, len 8 [ 121.900626][ T4863] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4904: group 0, free 0, pa_free 1 [ 123.071384][ T4884] loop0: detected capacity change from 0 to 764 [ 123.840421][ T4886] netlink: 'syz.0.129': attribute type 2 has an invalid length. [ 125.118660][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805fd17800: rx timeout, send abort [ 125.127245][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88805fd17800: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 125.218275][ T4890] loop1: detected capacity change from 0 to 764 [ 125.228495][ T4894] loop4: detected capacity change from 0 to 764 [ 125.231043][ T4895] loop2: detected capacity change from 0 to 764 [ 125.258654][ T4892] loop3: detected capacity change from 0 to 1024 [ 125.299266][ T4897] loop0: detected capacity change from 0 to 764 [ 125.501436][ T4892] EXT4-fs (loop3): Ignoring removed bh option [ 125.521800][ T4892] EXT4-fs (loop3): Ignoring removed nobh option [ 125.528115][ T4892] EXT4-fs (loop3): inline encryption not supported [ 126.183492][ T4892] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 126.418138][ T4892] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,nojournal_checksum,barrier=0x0000000000000002,grpquota,nolazytime,resgid=0x0000000000000000,bh,journal_dev=0x0000000000000800,nobh,inlinecrypt,bsddf,dioread_nolock,,errors=continue. Quota mode: writeback. [ 126.497480][ T4915] netlink: 'syz.0.130': attribute type 2 has an invalid length. [ 127.145304][ T4892] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3887: comm syz.3.133: Allocating blocks 497-513 which overlap fs metadata [ 127.196562][ T4892] EXT4-fs (loop3): pa ffff8880716368c0: logic 128, phys. 385, len 8 [ 127.204893][ T4892] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4904: group 0, free 0, pa_free 1 [ 127.265433][ T4924] loop4: detected capacity change from 0 to 256 [ 127.303629][ T4924] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 127.351613][ T4924] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 127.375853][ T4924] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 127.506814][ T26] audit: type=1800 audit(1770568249.939:9): pid=4924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.139" name="file0" dev="loop4" ino=1048608 res=0 errno=0 [ 127.692245][ T4928] loop3: detected capacity change from 0 to 256 [ 128.205767][ T4932] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 128.216637][ T4932] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 128.227130][ T4932] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 128.282790][ T26] audit: type=1800 audit(1770568250.669:10): pid=4932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.140" name="file1" dev="loop3" ino=1048610 res=0 errno=0 [ 128.798853][ T4934] loop3: detected capacity change from 0 to 764 [ 128.870049][ T4936] loop4: detected capacity change from 0 to 764 [ 129.109431][ T4938] loop0: detected capacity change from 0 to 764 [ 129.464717][ T4939] netlink: 'syz.0.143': attribute type 2 has an invalid length. [ 129.601208][ T4942] loop2: detected capacity change from 0 to 764 [ 129.891924][ T4945] netlink: 'syz.3.142': attribute type 2 has an invalid length. [ 129.930530][ T4944] netlink: 'syz.2.144': attribute type 2 has an invalid length. [ 130.115495][ T4949] loop0: detected capacity change from 0 to 1024 [ 130.135494][ T4950] netlink: 'syz.4.141': attribute type 2 has an invalid length. [ 130.200924][ T4949] EXT4-fs (loop0): Ignoring removed bh option [ 130.241696][ T4949] EXT4-fs (loop0): Ignoring removed nobh option [ 130.248003][ T4949] EXT4-fs (loop0): inline encryption not supported [ 130.269507][ T4949] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 130.359487][ T4949] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,nojournal_checksum,barrier=0x0000000000000002,grpquota,nolazytime,resgid=0x0000000000000000,bh,journal_dev=0x0000000000000800,nobh,inlinecrypt,bsddf,dioread_nolock,,errors=continue. Quota mode: writeback. [ 130.416940][ T4955] loop1: detected capacity change from 0 to 764 [ 130.726396][ T4949] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3887: comm syz.0.145: Allocating blocks 497-513 which overlap fs metadata [ 130.791347][ T4949] EXT4-fs (loop0): pa ffff888071636a80: logic 128, phys. 385, len 8 [ 130.800372][ T4949] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4904: group 0, free 0, pa_free 1 [ 131.527567][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88801f0ee000: rx timeout, send abort [ 131.537706][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88801f0ee000: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 131.617234][ T4960] loop2: detected capacity change from 0 to 764 [ 131.826125][ T4965] loop0: detected capacity change from 0 to 764 [ 132.179135][ T4969] netlink: 'syz.2.149': attribute type 2 has an invalid length. [ 132.764618][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.771027][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.067497][ T4980] loop0: detected capacity change from 0 to 764 [ 133.126163][ T4981] loop1: detected capacity change from 0 to 764 [ 133.166888][ T4983] EXT4-fs (loop4): Ignoring removed bh option [ 133.174466][ T4983] EXT4-fs (loop4): Ignoring removed nobh option [ 133.180891][ T4983] EXT4-fs (loop4): inline encryption not supported [ 133.221748][ T4983] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 133.336852][ T4983] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,nojournal_checksum,barrier=0x0000000000000002,grpquota,nolazytime,resgid=0x0000000000000000,bh,journal_dev=0x0000000000000800,nobh,inlinecrypt,bsddf,dioread_nolock,,errors=continue. Quota mode: writeback. [ 133.514639][ T4983] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3887: comm syz.4.151: Allocating blocks 497-513 which overlap fs metadata [ 133.529851][ T4983] EXT4-fs (loop4): pa ffff8880714631c0: logic 128, phys. 385, len 8 [ 133.538100][ T4983] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4904: group 0, free 0, pa_free 1 [ 133.632264][ T4988] netlink: 'syz.0.161': attribute type 2 has an invalid length. [ 133.863764][ T4991] set_capacity_and_notify: 1 callbacks suppressed [ 133.863780][ T4991] loop3: detected capacity change from 0 to 764 [ 134.025629][ T4993] loop2: detected capacity change from 0 to 256 [ 134.084005][ T4993] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 134.112066][ T4995] netlink: 'syz.1.162': attribute type 2 has an invalid length. [ 134.112300][ T4993] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 134.170883][ T4993] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 134.280182][ T4997] loop4: detected capacity change from 0 to 764 [ 134.321904][ T26] audit: type=1800 audit(1770568256.759:11): pid=4993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.152" name="file0" dev="loop2" ino=1048613 res=0 errno=0 [ 134.782937][ T5001] netlink: 'syz.4.154': attribute type 2 has an invalid length. [ 134.891738][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888060312000: rx timeout, send abort [ 134.913613][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888060312000: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 135.044833][ T5003] loop2: detected capacity change from 0 to 764 [ 135.273844][ T5006] loop0: detected capacity change from 0 to 764 [ 135.349610][ T5008] loop3: detected capacity change from 0 to 256 [ 135.404833][ T5003] netlink: 'syz.2.155': attribute type 2 has an invalid length. [ 135.919729][ T5011] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 135.930660][ T5011] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 135.940940][ T5011] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 135.963647][ T26] audit: type=1800 audit(1770568258.379:12): pid=5011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.157" name="file1" dev="loop3" ino=1048615 res=0 errno=0 [ 136.741267][ T5014] loop3: detected capacity change from 0 to 764 [ 137.181185][ T5017] loop2: detected capacity change from 0 to 764 [ 137.282813][ T5019] loop0: detected capacity change from 0 to 764 [ 137.680235][ T5021] netlink: 'syz.0.159': attribute type 2 has an invalid length. [ 137.888626][ T5023] loop1: detected capacity change from 0 to 764 [ 138.329183][ T5027] netlink: 'syz.1.160': attribute type 2 has an invalid length. [ 138.970558][ T5035] loop1: detected capacity change from 0 to 764 [ 139.938684][ T5044] loop0: detected capacity change from 0 to 764 [ 139.993215][ T5046] loop1: detected capacity change from 0 to 764 [ 140.451153][ T5050] netlink: 'syz.0.177': attribute type 2 has an invalid length. [ 140.731789][ T5052] netlink: 'syz.1.166': attribute type 2 has an invalid length. [ 141.182602][ T5058] loop4: detected capacity change from 0 to 256 [ 141.252420][ T5054] loop0: detected capacity change from 0 to 16 [ 141.267518][ T5056] loop1: detected capacity change from 0 to 764 [ 141.364555][ T5054] erofs: (device loop0): mounted with root inode @ nid 36. [ 141.447058][ T5054] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 141.558998][ T5054] overlayfs: upper fs is r/o, try multi-lower layers mount [ 141.760839][ T5061] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 141.771297][ T5061] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 141.781628][ T5061] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 142.021398][ T26] audit: type=1800 audit(1770568264.229:13): pid=5061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.169" name="file1" dev="loop4" ino=1048618 res=0 errno=0 [ 142.440337][ T5070] loop3: detected capacity change from 0 to 764 [ 142.878676][ T5072] netlink: 'syz.3.173': attribute type 2 has an invalid length. [ 143.200975][ T5074] loop2: detected capacity change from 0 to 764 [ 143.321090][ T5076] netlink: 'syz.1.170': attribute type 2 has an invalid length. [ 143.592363][ T5074] netlink: 'syz.2.174': attribute type 2 has an invalid length. [ 143.820828][ T5084] loop3: detected capacity change from 0 to 764 [ 143.824063][ T5082] loop0: detected capacity change from 0 to 764 [ 143.976807][ T5087] set_capacity_and_notify: 1 callbacks suppressed [ 143.976823][ T5087] loop2: detected capacity change from 0 to 256 [ 144.539053][ T5091] netlink: 'syz.1.175': attribute type 2 has an invalid length. [ 144.811249][ T5093] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 144.812046][ T5093] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 144.812351][ T5093] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 145.087872][ T26] audit: type=1800 audit(1770568267.249:14): pid=5093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.178" name="file1" dev="loop2" ino=1048620 res=0 errno=0 [ 145.119597][ T5094] netlink: 'syz.3.176': attribute type 2 has an invalid length. [ 145.120210][ T5095] netlink: 'syz.0.186': attribute type 2 has an invalid length. [ 146.287347][ T5101] loop2: detected capacity change from 0 to 256 [ 146.294531][ T5099] loop4: detected capacity change from 0 to 764 [ 146.315446][ T5102] loop1: detected capacity change from 0 to 764 [ 146.374502][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888061fedc00: rx timeout, send abort [ 146.383385][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888061fedc00: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 146.556685][ T5104] loop3: detected capacity change from 0 to 764 [ 147.071920][ T5108] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 147.083397][ T5108] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 147.093852][ T5108] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 147.302075][ T26] audit: type=1800 audit(1770568269.539:15): pid=5108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.181" name="file1" dev="loop2" ino=1048623 res=0 errno=0 [ 147.622401][ T5102] netlink: 'syz.1.190': attribute type 2 has an invalid length. [ 148.067356][ T5115] loop0: detected capacity change from 0 to 764 [ 148.091028][ T5117] loop2: detected capacity change from 0 to 764 [ 148.650847][ T5124] loop3: detected capacity change from 0 to 764 [ 149.035900][ T5130] loop4: detected capacity change from 0 to 256 [ 149.120980][ T5133] loop1: detected capacity change from 0 to 764 [ 150.518571][ T5144] loop4: detected capacity change from 0 to 764 [ 150.625813][ T5146] loop1: detected capacity change from 0 to 764 [ 150.842530][ T5144] netlink: 'syz.4.191': attribute type 2 has an invalid length. [ 151.182799][ T5152] loop3: detected capacity change from 0 to 764 [ 152.069124][ T5161] loop0: detected capacity change from 0 to 764 [ 152.119584][ T5163] loop4: detected capacity change from 0 to 764 [ 152.173266][ T5165] loop1: detected capacity change from 0 to 764 [ 153.217329][ T5172] netlink: 'syz.0.195': attribute type 2 has an invalid length. [ 153.402984][ T5174] loop1: detected capacity change from 0 to 764 [ 153.880775][ T5177] loop4: detected capacity change from 0 to 256 [ 154.455639][ T5184] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 154.466431][ T5184] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 154.476702][ T5184] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 154.498388][ T26] audit: type=1800 audit(1770568276.919:16): pid=5184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.197" name="file1" dev="loop0" ino=1048626 res=0 errno=0 [ 155.001876][ T5187] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 155.012350][ T5187] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 155.022608][ T5187] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 155.290879][ T5183] set_capacity_and_notify: 1 callbacks suppressed [ 155.290895][ T5183] loop2: detected capacity change from 0 to 764 [ 155.373390][ T26] audit: type=1800 audit(1770568277.469:17): pid=5187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.198" name="file1" dev="loop4" ino=1048629 res=0 errno=0 [ 155.725889][ T5183] netlink: 'syz.2.199': attribute type 2 has an invalid length. [ 155.989212][ T5197] loop0: detected capacity change from 0 to 256 [ 156.383508][ T5203] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 156.394563][ T5203] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 156.404898][ T5203] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 156.426703][ T26] audit: type=1800 audit(1770568278.849:18): pid=5203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.202" name="file1" dev="loop0" ino=1048632 res=0 errno=0 [ 156.567204][ T5202] loop4: detected capacity change from 0 to 764 [ 157.027981][ T5206] loop1: detected capacity change from 0 to 764 [ 157.334849][ T5202] netlink: 'syz.4.206': attribute type 2 has an invalid length. [ 157.489269][ T5211] loop2: detected capacity change from 0 to 764 [ 157.680490][ T5216] loop3: detected capacity change from 0 to 764 [ 158.155103][ T5225] netlink: 'syz.2.209': attribute type 2 has an invalid length. [ 158.680247][ T5227] loop0: detected capacity change from 0 to 764 [ 158.813814][ T5231] loop3: detected capacity change from 0 to 764 [ 158.912424][ T5229] loop4: detected capacity change from 0 to 764 [ 158.919834][ T5227] netlink: 'syz.0.221': attribute type 2 has an invalid length. [ 160.985860][ T5257] loop3: detected capacity change from 0 to 256 [ 160.998663][ T5253] loop0: detected capacity change from 0 to 764 [ 161.442634][ T5264] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 161.453108][ T5264] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 161.463420][ T5264] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 161.830635][ T26] audit: type=1800 audit(1770568284.169:19): pid=5264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.215" name="file1" dev="loop3" ino=1048635 res=0 errno=0 [ 162.133493][ T5272] loop3: detected capacity change from 0 to 764 [ 162.143460][ T5273] loop0: detected capacity change from 0 to 764 [ 162.569575][ T5280] loop1: detected capacity change from 0 to 256 [ 162.765235][ T5283] netlink: 'syz.3.217': attribute type 2 has an invalid length. [ 162.955719][ T5287] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 162.966206][ T5287] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 162.976477][ T5287] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 162.998110][ T26] audit: type=1800 audit(1770568285.419:20): pid=5287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.220" name="file1" dev="loop1" ino=1048637 res=0 errno=0 [ 164.799283][ T5296] loop1: detected capacity change from 0 to 256 [ 165.158532][ T5299] loop3: detected capacity change from 0 to 764 [ 165.270206][ T5302] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 165.280681][ T5302] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 165.290947][ T5302] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 165.313243][ T26] audit: type=1800 audit(1770568287.739:21): pid=5302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.224" name="file1" dev="loop1" ino=1048640 res=0 errno=0 [ 165.622081][ T5298] netlink: 'syz.3.226': attribute type 2 has an invalid length. [ 166.716256][ T5309] loop1: detected capacity change from 0 to 764 [ 166.857929][ T5312] loop2: detected capacity change from 0 to 764 [ 167.152502][ T5316] loop3: detected capacity change from 0 to 764 [ 167.775998][ T5323] netlink: 'syz.3.231': attribute type 2 has an invalid length. [ 167.959723][ T5325] loop4: detected capacity change from 0 to 764 [ 169.495218][ T5332] loop3: detected capacity change from 0 to 256 [ 169.925478][ T5342] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 169.935923][ T5342] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 169.946183][ T5342] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 170.509369][ T26] audit: type=1800 audit(1770568292.389:22): pid=5342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.234" name="file1" dev="loop3" ino=1048643 res=0 errno=0 [ 171.171335][ T5339] loop2: detected capacity change from 0 to 764 [ 171.849164][ T5358] netlink: 'syz.2.244': attribute type 2 has an invalid length. [ 171.926305][ T5357] loop3: detected capacity change from 0 to 764 [ 172.207708][ T5357] netlink: 'syz.3.239': attribute type 2 has an invalid length. [ 172.465512][ T5362] loop1: detected capacity change from 0 to 764 [ 172.657116][ T5364] loop4: detected capacity change from 0 to 764 [ 172.794650][ T5366] netlink: 'syz.1.242': attribute type 2 has an invalid length. [ 173.053277][ T5370] damon: invalid nr_regions. min (30786325577728) > max (1023) [ 174.602583][ T5379] loop3: detected capacity change from 0 to 764 [ 174.790119][ T5378] loop2: detected capacity change from 0 to 764 [ 175.060246][ T5382] netlink: 'syz.3.247': attribute type 2 has an invalid length. [ 175.779440][ T5387] loop0: detected capacity change from 0 to 764 [ 175.790163][ T5388] loop1: detected capacity change from 0 to 256 [ 176.204430][ T5391] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 176.214862][ T5391] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 176.225149][ T5391] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 176.282176][ T26] audit: type=1800 audit(1770568298.669:23): pid=5391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.248" name="file1" dev="loop1" ino=1048646 res=0 errno=0 [ 178.859841][ T5405] loop2: detected capacity change from 0 to 764 [ 178.897360][ T5402] loop1: detected capacity change from 0 to 764 [ 178.897750][ T5404] loop3: detected capacity change from 0 to 764 [ 179.153172][ T5408] netlink: 'syz.2.251': attribute type 2 has an invalid length. [ 179.640094][ T5413] netlink: 'syz.1.261': attribute type 2 has an invalid length. [ 180.544609][ T5416] loop1: detected capacity change from 0 to 764 [ 180.603029][ T5419] loop4: detected capacity change from 0 to 256 [ 180.829743][ T5416] netlink: 'syz.1.254': attribute type 2 has an invalid length. [ 180.965256][ T13] Bluetooth: hci2: command 0x0406 tx timeout [ 180.976236][ T13] Bluetooth: hci3: command 0x0406 tx timeout [ 181.009416][ T13] Bluetooth: hci4: command 0x0406 tx timeout [ 181.030237][ T13] Bluetooth: hci1: command 0x0406 tx timeout [ 181.038127][ T5409] netlink: 'syz.3.252': attribute type 2 has an invalid length. [ 181.058890][ T13] Bluetooth: hci0: command 0x0406 tx timeout [ 181.163771][ T5426] loop0: detected capacity change from 0 to 764 [ 181.256897][ T5429] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 181.267454][ T5429] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 181.278518][ T5429] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 181.300799][ T26] audit: type=1800 audit(1770568303.719:24): pid=5429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.255" name="file1" dev="loop4" ino=1048649 res=0 errno=0 [ 181.878453][ T5428] netlink: 'syz.0.256': attribute type 2 has an invalid length. [ 183.267073][ T5440] loop0: detected capacity change from 0 to 764 [ 183.426169][ T5444] loop1: detected capacity change from 0 to 764 [ 183.973036][ T5453] loop0: detected capacity change from 0 to 256 [ 183.973062][ T5452] loop3: detected capacity change from 0 to 764 [ 184.073936][ T5455] loop1: detected capacity change from 0 to 764 [ 184.482666][ T5457] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 184.493196][ T5457] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 184.503448][ T5457] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 184.523551][ T5458] netlink: 'syz.1.265': attribute type 2 has an invalid length. [ 184.544491][ T26] audit: type=1800 audit(1770568306.949:25): pid=5457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.264" name="file1" dev="loop0" ino=1048652 res=0 errno=0 [ 185.140263][ T5461] loop1: detected capacity change from 0 to 512 [ 185.193779][ T5463] loop0: detected capacity change from 0 to 764 [ 185.202376][ T5461] EXT4-fs (loop1): orphan cleanup on readonly fs [ 185.300810][ T5461] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present [ 185.391757][ T5461] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 185.401287][ T5461] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.267: Failed to acquire dquot type 1 [ 185.444014][ T5465] loop4: detected capacity change from 0 to 764 [ 185.488033][ T5461] EXT4-fs (loop1): 1 truncate cleaned up [ 185.542038][ T5461] EXT4-fs (loop1): mounted filesystem without journal. Opts: noinit_itable,,errors=continue. Quota mode: writeback. [ 185.963283][ T5461] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 186.177985][ T5469] netlink: 'syz.4.266': attribute type 2 has an invalid length. [ 186.466811][ T5473] loop3: detected capacity change from 0 to 764 [ 186.924944][ T5477] netlink: 'syz.3.269': attribute type 2 has an invalid length. [ 187.089070][ T5480] loop2: detected capacity change from 0 to 256 [ 187.482297][ T5483] loop4: detected capacity change from 0 to 256 [ 187.552703][ T5485] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 187.563248][ T5485] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 187.573503][ T5485] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 187.652092][ T26] audit: type=1800 audit(1770568310.019:26): pid=5485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.271" name="file1" dev="loop2" ino=1048655 res=0 errno=0 [ 187.686598][ T5484] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 187.856783][ T5484] EXT4-fs warning (device loop1): read_mmp_block:115: Error -117 while reading MMP block 8 [ 188.215979][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805fcde400: rx timeout, send abort [ 188.261125][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88805fcde400: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 188.349319][ T5487] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 188.359999][ T5487] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 188.370266][ T5487] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 188.621611][ T26] audit: type=1800 audit(1770568310.809:27): pid=5487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.272" name="file1" dev="loop4" ino=1048658 res=0 errno=0 [ 188.940651][ T5491] loop3: detected capacity change from 0 to 764 [ 189.417512][ T5494] netlink: 'syz.2.283': attribute type 2 has an invalid length. [ 189.453681][ T5497] netlink: 'syz.3.273': attribute type 2 has an invalid length. [ 189.497266][ T5493] set_capacity_and_notify: 1 callbacks suppressed [ 189.497282][ T5493] loop4: detected capacity change from 0 to 764 [ 189.952193][ T5498] netlink: 'syz.4.284': attribute type 2 has an invalid length. [ 190.060232][ T5500] loop1: detected capacity change from 0 to 764 [ 190.364966][ T5500] netlink: 'syz.1.275': attribute type 2 has an invalid length. [ 191.313533][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880608c8400: rx timeout, send abort [ 191.331569][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff8880608c8400: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 191.696466][ T5514] loop2: detected capacity change from 0 to 764 [ 191.939600][ T5517] loop1: detected capacity change from 0 to 764 [ 191.949206][ T5516] netlink: 'syz.2.278': attribute type 2 has an invalid length. [ 192.276397][ T5520] loop0: detected capacity change from 0 to 764 [ 192.678096][ T5525] loop3: detected capacity change from 0 to 764 [ 192.715600][ T5524] loop1: detected capacity change from 0 to 764 [ 192.881523][ T5527] loop2: detected capacity change from 0 to 764 [ 193.241463][ T5529] netlink: 'syz.2.281': attribute type 2 has an invalid length. [ 193.429334][ T5531] netlink: 'syz.1.293': attribute type 2 has an invalid length. [ 193.443852][ T5533] loop3: detected capacity change from 0 to 256 [ 194.255103][ T5539] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 194.265548][ T5539] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 194.275844][ T5539] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 194.289705][ T5540] netlink: 'syz.1.297': attribute type 2 has an invalid length. [ 194.333211][ T26] audit: type=1800 audit(1770568316.719:28): pid=5539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.285" name="file1" dev="loop3" ino=1048661 res=0 errno=0 [ 194.356033][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.366968][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.601993][ T5545] loop0: detected capacity change from 0 to 256 [ 194.656447][ T5544] loop2: detected capacity change from 0 to 512 [ 194.785275][ T5544] EXT4-fs (loop2): orphan cleanup on readonly fs [ 195.019283][ T5553] loop1: detected capacity change from 0 to 764 [ 195.052527][ T5544] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present [ 195.333890][ T5557] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 195.344357][ T5557] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 195.354638][ T5557] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 195.507311][ T26] audit: type=1800 audit(1770568317.799:29): pid=5557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.287" name="file1" dev="loop0" ino=1048663 res=0 errno=0 [ 195.646135][ T5544] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 195.697379][ T5544] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.286: Failed to acquire dquot type 1 [ 195.834469][ T5544] EXT4-fs (loop2): 1 truncate cleaned up [ 195.871760][ T5544] EXT4-fs (loop2): mounted filesystem without journal. Opts: noinit_itable,,errors=continue. Quota mode: writeback. [ 196.020695][ T5544] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 196.218807][ T5567] loop0: detected capacity change from 0 to 764 [ 196.559273][ T5572] netlink: 'syz.0.291': attribute type 2 has an invalid length. [ 196.641015][ T5544] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 196.657794][ T5544] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 8 [ 196.799216][ T5581] loop4: detected capacity change from 0 to 764 [ 197.237928][ T5586] loop2: detected capacity change from 0 to 764 [ 197.241699][ T5588] loop4: detected capacity change from 0 to 764 [ 197.794970][ T5597] loop0: detected capacity change from 0 to 764 [ 197.874928][ T5599] loop3: detected capacity change from 0 to 764 [ 198.268770][ T5600] netlink: 'syz.3.302': attribute type 2 has an invalid length. [ 198.317895][ T5601] netlink: 'syz.0.301': attribute type 2 has an invalid length. [ 198.363087][ T5603] loop1: detected capacity change from 0 to 256 [ 198.760740][ T5606] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 198.771169][ T5606] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 198.781453][ T5606] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 198.803636][ T26] audit: type=1800 audit(1770568321.229:30): pid=5606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.303" name="file1" dev="loop1" ino=1048666 res=0 errno=0 [ 199.577206][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888060edc400: rx timeout, send abort [ 199.587143][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888060edc400: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 199.892268][ T5616] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 199.902759][ T5616] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 199.913077][ T5616] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 199.971597][ T26] audit: type=1800 audit(1770568322.359:31): pid=5616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.304" name="file1" dev="loop3" ino=1048669 res=0 errno=0 [ 201.799014][ T5624] set_capacity_and_notify: 1 callbacks suppressed [ 201.799030][ T5624] loop1: detected capacity change from 0 to 764 [ 201.831130][ T5626] loop4: detected capacity change from 0 to 256 [ 203.086870][ T5629] loop3: detected capacity change from 0 to 764 [ 203.629763][ T5646] netlink: 'syz.3.312': attribute type 2 has an invalid length. [ 203.909483][ T5650] loop0: detected capacity change from 0 to 764 [ 203.917580][ T5652] loop2: detected capacity change from 0 to 764 [ 203.924911][ T5649] loop1: detected capacity change from 0 to 764 [ 204.754859][ T5658] netlink: 'syz.1.315': attribute type 2 has an invalid length. [ 205.416559][ T5665] loop3: detected capacity change from 0 to 764 [ 205.426400][ T5670] netlink: 'syz.0.324': attribute type 2 has an invalid length. [ 205.598158][ T5673] damon: invalid nr_regions. min (30786325577728) > max (1023) [ 205.629886][ T5675] loop1: detected capacity change from 0 to 764 [ 205.979192][ T5682] netlink: 'syz.1.331': attribute type 2 has an invalid length. [ 206.044858][ T5680] loop2: detected capacity change from 0 to 764 [ 206.331911][ T5683] netlink: 'syz.2.321': attribute type 2 has an invalid length. [ 206.839277][ T5688] loop0: detected capacity change from 0 to 764 [ 207.704889][ T5698] loop2: detected capacity change from 0 to 65536 [ 207.745043][ T5702] loop1: detected capacity change from 0 to 764 [ 208.069240][ T5711] netlink: 'syz.1.339': attribute type 2 has an invalid length. [ 208.139794][ T5698] XFS (loop2): Mounting V5 Filesystem [ 208.220742][ T5698] XFS (loop2): Ending clean mount [ 208.234905][ T5698] XFS (loop2): Quotacheck needed: Please wait. [ 208.282856][ T5698] XFS (loop2): Quotacheck: Done. [ 208.492131][ T4190] XFS (loop2): Unmounting Filesystem [ 208.806083][ T5723] loop1: detected capacity change from 0 to 764 [ 209.387441][ T5729] loop4: detected capacity change from 0 to 764 [ 209.751032][ T5738] loop2: detected capacity change from 0 to 256 [ 209.759244][ T5740] damon: invalid nr_regions. min (30786325577728) > max (1023) [ 210.136623][ T5747] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 210.147075][ T5747] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 210.157942][ T5747] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 210.640220][ T26] audit: type=1800 audit(1770568332.599:32): pid=5747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.329" name="file1" dev="loop2" ino=1048673 res=0 errno=0 [ 210.782315][ T5751] loop0: detected capacity change from 0 to 764 [ 211.194165][ T5756] loop1: detected capacity change from 0 to 764 [ 211.246987][ T5759] loop2: detected capacity change from 0 to 764 [ 211.293058][ T5762] netlink: 'syz.0.337': attribute type 2 has an invalid length. [ 211.596120][ T5766] netlink: 'syz.2.338': attribute type 2 has an invalid length. [ 211.710286][ T5765] loop3: detected capacity change from 0 to 764 [ 212.052303][ T5767] netlink: 'syz.3.343': attribute type 2 has an invalid length. [ 212.246424][ T5770] loop2: detected capacity change from 0 to 764 [ 212.540480][ T5770] netlink: 'syz.2.344': attribute type 2 has an invalid length. [ 212.858786][ T5780] loop4: detected capacity change from 0 to 764 [ 213.670619][ T5788] damon: invalid nr_regions. min (30786325577728) > max (1023) [ 214.844219][ T5800] loop4: detected capacity change from 0 to 256 [ 214.861924][ T5799] loop1: detected capacity change from 0 to 764 [ 215.247284][ T5806] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 215.258018][ T5806] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 215.268410][ T5806] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 215.292254][ T26] audit: type=1800 audit(1770568337.709:33): pid=5806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.354" name="file1" dev="loop4" ino=1048676 res=0 errno=0 [ 216.009133][ T5808] loop3: detected capacity change from 0 to 764 [ 216.031860][ T4299] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 216.100965][ T5813] loop4: detected capacity change from 0 to 764 [ 216.406240][ T5814] netlink: 'syz.3.358': attribute type 2 has an invalid length. [ 216.425771][ T5817] loop1: detected capacity change from 0 to 764 [ 217.271603][ T4299] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 217.337036][ T5824] loop1: detected capacity change from 0 to 764 [ 217.366607][ T4299] usb 3-1: can't read configurations, error -71 [ 217.416952][ T5829] loop4: detected capacity change from 0 to 764 [ 217.470508][ T5830] loop3: detected capacity change from 0 to 764 [ 217.886661][ T5830] netlink: 'syz.3.363': attribute type 2 has an invalid length. [ 218.070689][ T5835] loop2: detected capacity change from 0 to 764 [ 220.819026][ T5859] loop3: detected capacity change from 0 to 764 [ 221.095620][ T5864] loop4: detected capacity change from 0 to 764 [ 221.345801][ T5863] netlink: 'syz.4.373': attribute type 2 has an invalid length. [ 221.496180][ T5869] loop3: detected capacity change from 0 to 764 [ 222.650136][ T5885] loop0: detected capacity change from 0 to 256 [ 223.076453][ T5892] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 223.086896][ T5892] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 223.097178][ T5892] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 223.182603][ T26] audit: type=1800 audit(1770568345.539:34): pid=5892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.378" name="file1" dev="loop0" ino=1048679 res=0 errno=0 [ 223.232293][ T5891] loop3: detected capacity change from 0 to 764 [ 223.391758][ T21] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 224.074981][ T5886] loop4: detected capacity change from 0 to 32768 [ 224.149170][ T5886] loop4: p9 p11 p16 [ 224.278002][ T21] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 224.289333][ T21] usb 5-1: config 0 has no interface number 0 [ 224.309981][ T21] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 224.331593][ T21] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 224.345412][ T21] usb 5-1: config 0 interface 255 has no altsetting 0 [ 224.352264][ T21] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 224.361312][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.396122][ T21] usb 5-1: config 0 descriptor?? [ 224.456189][ T21] cp210x 5-1:0.255: cp210x converter detected [ 224.537262][ T5900] loop1: detected capacity change from 0 to 764 [ 224.559526][ T5903] loop2: detected capacity change from 0 to 256 [ 224.574516][ T5899] loop0: detected capacity change from 0 to 764 [ 226.392997][ T5914] netlink: 'syz.0.391': attribute type 2 has an invalid length. [ 226.403496][ T5912] loop3: detected capacity change from 0 to 764 [ 226.508479][ T5882] input: syz1 as /devices/virtual/input/input7 [ 226.540671][ T5882] input: failed to attach handler leds to device input7, error: -6 [ 226.719182][ T21] cp210x 5-1:0.255: failed to get vendor val 0x000e size 3: -71 [ 226.832318][ T21] usb 5-1: cp210x converter now attached to ttyUSB0 [ 227.062327][ T21] usb 5-1: USB disconnect, device number 2 [ 227.396896][ T21] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 227.790795][ T21] cp210x 5-1:0.255: device disconnected [ 227.877968][ T5922] loop2: detected capacity change from 0 to 764 [ 228.186243][ T5928] netlink: 'syz.2.387': attribute type 2 has an invalid length. [ 228.760834][ T5939] loop1: detected capacity change from 0 to 764 [ 228.817998][ T5938] loop4: detected capacity change from 0 to 764 [ 229.433836][ T5945] loop3: detected capacity change from 0 to 256 [ 229.489454][ T5946] loop2: detected capacity change from 0 to 764 [ 230.312545][ T5950] netlink: 'syz.2.403': attribute type 2 has an invalid length. [ 230.825305][ T5949] loop4: detected capacity change from 0 to 65536 [ 232.325671][ T5963] loop3: detected capacity change from 0 to 764 [ 233.216571][ T5977] loop2: detected capacity change from 0 to 764 [ 234.630120][ T5991] loop3: detected capacity change from 0 to 764 [ 235.488321][ T5998] loop3: detected capacity change from 0 to 764 [ 235.503502][ T6000] loop4: detected capacity change from 0 to 764 [ 236.340740][ T6010] loop1: detected capacity change from 0 to 764 [ 236.750252][ T6012] netlink: 'syz.1.409': attribute type 2 has an invalid length. [ 237.271590][ T5840] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 237.319055][ T6005] loop0: detected capacity change from 0 to 32768 [ 237.418078][ T6005] loop0: p9 p11 p16 [ 237.641426][ T5840] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 237.649731][ T5840] usb 1-1: config 0 has no interface number 0 [ 237.669512][ T5840] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 237.673492][ T6015] loop4: detected capacity change from 0 to 764 [ 237.692171][ T5840] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 237.722176][ T5840] usb 1-1: config 0 interface 255 has no altsetting 0 [ 237.746434][ T6017] loop2: detected capacity change from 0 to 256 [ 237.761803][ T5840] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 237.781404][ T5840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.803979][ T5840] usb 1-1: config 0 descriptor?? [ 237.852866][ T5840] cp210x 1-1:0.255: cp210x converter detected [ 238.009892][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888060a88000: rx timeout, send abort [ 238.084909][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888060a88000: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 238.893660][ T6002] input: syz1 as /devices/virtual/input/input8 [ 238.911671][ T6002] input: failed to attach handler leds to device input8, error: -6 [ 239.011676][ T5840] cp210x 1-1:0.255: failed to get vendor val 0x000e size 3: -71 [ 239.040020][ T5840] usb 1-1: cp210x converter now attached to ttyUSB0 [ 239.051789][ T6027] loop2: detected capacity change from 0 to 764 [ 239.107674][ T5840] usb 1-1: USB disconnect, device number 2 [ 239.318936][ T5840] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 239.856325][ T5840] cp210x 1-1:0.255: device disconnected [ 240.347241][ T6047] loop1: detected capacity change from 0 to 764 [ 240.374957][ T6040] loop2: detected capacity change from 0 to 764 [ 240.399936][ T6049] loop3: detected capacity change from 0 to 764 [ 241.300729][ T6056] loop4: detected capacity change from 0 to 764 [ 241.381193][ T6057] loop3: detected capacity change from 0 to 764 [ 241.854331][ T6062] netlink: 'syz.3.423': attribute type 2 has an invalid length. [ 242.380116][ T6066] loop2: detected capacity change from 0 to 764 [ 242.438183][ T6068] loop0: detected capacity change from 0 to 764 [ 242.680796][ T6066] netlink: 'syz.2.425': attribute type 2 has an invalid length. [ 243.113978][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888060864000: rx timeout, send abort [ 243.592409][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888060864000: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 243.945114][ T6080] loop3: detected capacity change from 0 to 764 [ 244.310208][ T6086] loop0: detected capacity change from 0 to 764 [ 244.744622][ T6089] netlink: 'syz.0.429': attribute type 2 has an invalid length. [ 246.138662][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888062a48000: rx timeout, send abort [ 246.147209][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888062a48000: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 246.413663][ T6100] loop3: detected capacity change from 0 to 764 [ 247.351600][ T6109] loop4: detected capacity change from 0 to 764 [ 248.337725][ T6124] loop1: detected capacity change from 0 to 764 [ 249.263368][ T6129] loop2: detected capacity change from 0 to 764 [ 249.359693][ T6124] netlink: 'syz.1.438': attribute type 2 has an invalid length. [ 249.741708][ T6135] loop0: detected capacity change from 0 to 256 [ 250.006683][ T6143] loop1: detected capacity change from 0 to 764 [ 250.132476][ T6144] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 250.143080][ T6144] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 250.153446][ T6144] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 250.314928][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807a0a5c00: rx timeout, send abort [ 250.581941][ T26] audit: type=1800 audit(1770568372.599:35): pid=6144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.440" name="file1" dev="loop0" ino=1048682 res=0 errno=0 [ 250.602288][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88807a0a5c00: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 250.838852][ T6146] loop4: detected capacity change from 0 to 764 [ 250.889027][ T6148] loop3: detected capacity change from 0 to 764 [ 252.441730][ T6168] loop0: detected capacity change from 0 to 764 [ 253.923654][ T6190] loop0: detected capacity change from 0 to 764 [ 255.841482][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.847818][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.343524][ T6204] loop3: detected capacity change from 0 to 764 [ 257.246149][ T6215] loop1: detected capacity change from 0 to 764 [ 257.353668][ T6212] loop2: detected capacity change from 0 to 764 [ 257.744420][ T6219] Zero length message leads to an empty skb [ 258.317558][ T6221] loop3: detected capacity change from 0 to 764 [ 258.409007][ T6225] loop1: detected capacity change from 0 to 764 [ 259.874637][ T6240] loop4: detected capacity change from 0 to 256 [ 260.624205][ T6250] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 260.634770][ T6250] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 260.645815][ T6250] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 260.902911][ T26] audit: type=1800 audit(1770568383.089:36): pid=6250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.470" name="file1" dev="loop4" ino=1048683 res=0 errno=0 [ 262.299398][ T6263] loop0: detected capacity change from 0 to 764 [ 262.364460][ T6265] loop1: detected capacity change from 0 to 764 [ 262.626859][ T6268] loop2: detected capacity change from 0 to 256 [ 263.039286][ T6272] loop4: detected capacity change from 0 to 764 [ 264.114691][ T6283] loop1: detected capacity change from 0 to 764 [ 264.407099][ T6285] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 264.559719][ T6287] loop2: detected capacity change from 0 to 764 [ 264.820251][ T6295] loop0: detected capacity change from 0 to 764 [ 265.119315][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880619f8000: rx timeout, send abort [ 265.128041][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff8880619f8000: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 265.603550][ T6297] netlink: 'syz.0.481': attribute type 2 has an invalid length. [ 266.513994][ T6315] ================================================================== [ 266.522423][ T6315] BUG: KASAN: use-after-free in dvb_device_open+0xc6/0x370 [ 266.529656][ T6315] Read of size 8 at addr ffff88814acadc18 by task syz.3.486/6315 [ 266.537392][ T6315] [ 266.539728][ T6315] CPU: 0 PID: 6315 Comm: syz.3.486 Not tainted syzkaller #0 [ 266.547024][ T6315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 266.557094][ T6315] Call Trace: [ 266.560391][ T6315] [ 266.563338][ T6315] dump_stack_lvl+0x188/0x250 [ 266.568044][ T6315] ? show_regs_print_info+0x20/0x20 [ 266.573270][ T6315] ? _printk+0xda/0x130 [ 266.577450][ T6315] ? dvb_device_open+0xc6/0x370 [ 266.582331][ T6315] ? load_image+0x400/0x400 [ 266.586861][ T6315] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 266.592350][ T6315] print_address_description+0x60/0x2d0 [ 266.597916][ T6315] ? dvb_device_open+0xc6/0x370 [ 266.602788][ T6315] kasan_report+0xdf/0x130 [ 266.607226][ T6315] ? dvb_device_open+0xc6/0x370 [ 266.612194][ T6315] dvb_device_open+0xc6/0x370 [ 266.616889][ T6315] ? do_raw_spin_unlock+0x11d/0x230 [ 266.622111][ T6315] chrdev_open+0x5c5/0x6a0 [ 266.626556][ T6315] ? cd_forget+0x160/0x160 [ 266.630997][ T6315] ? fsnotify_perm+0x3a7/0x560 [ 266.635783][ T6315] ? cd_forget+0x160/0x160 [ 266.640228][ T6315] do_dentry_open+0x7ff/0xf80 [ 266.645226][ T6315] path_openat+0x26f5/0x2fa0 [ 266.649869][ T6315] ? verify_lock_unused+0x140/0x140 [ 266.655097][ T6315] ? slab_post_alloc_hook+0x4c/0x380 [ 266.660425][ T6315] ? do_filp_open+0x410/0x410 [ 266.665151][ T6315] do_filp_open+0x1e2/0x410 [ 266.669686][ T6315] ? vfs_tmpfile+0x300/0x300 [ 266.674331][ T6315] ? _raw_spin_unlock+0x24/0x40 [ 266.679205][ T6315] ? alloc_fd+0x598/0x630 [ 266.683570][ T6315] do_sys_openat2+0x150/0x4b0 [ 266.688276][ T6315] ? __lock_acquire+0x7d10/0x7d10 [ 266.693333][ T6315] ? do_sys_open+0xe0/0xe0 [ 266.697769][ T6315] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 266.703779][ T6315] ? lock_chain_count+0x20/0x20 [ 266.708649][ T6315] ? vtime_user_exit+0x2c8/0x3e0 [ 266.713610][ T6315] __x64_sys_openat+0x135/0x160 [ 266.718492][ T6315] do_syscall_64+0x4c/0xa0 [ 266.722935][ T6315] ? clear_bhb_loop+0x30/0x80 [ 266.727645][ T6315] ? clear_bhb_loop+0x30/0x80 [ 266.732346][ T6315] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 266.738268][ T6315] RIP: 0033:0x7fa8cc25f78e [ 266.742724][ T6315] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 266.762353][ T6315] RSP: 002b:00007fa8ca4b7b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 266.770796][ T6315] RAX: ffffffffffffffda RBX: 00007fa8ca4b86c0 RCX: 00007fa8cc25f78e [ 266.778788][ T6315] RDX: 0000000000040002 RSI: 00007fa8ca4b7c00 RDI: ffffffffffffff9c [ 266.786781][ T6315] RBP: 00007fa8ca4b7c00 R08: 0000000000000000 R09: 0000000000000000 [ 266.794772][ T6315] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 266.802766][ T6315] R13: 00007fa8cc51a218 R14: 00007fa8cc51a180 R15: 00007ffc65d67d08 [ 266.810778][ T6315] [ 266.813827][ T6315] [ 266.816162][ T6315] Allocated by task 1: [ 266.820245][ T6315] __kasan_kmalloc+0xb5/0xf0 [ 266.824871][ T6315] dvb_register_device+0x311/0x2170 [ 266.830086][ T6315] dvb_register_frontend+0x645/0x920 [ 266.835402][ T6315] vidtv_bridge_probe+0x9a1/0xf70 [ 266.840530][ T6315] platform_probe+0x137/0x1c0 [ 266.845224][ T6315] really_probe+0x284/0xc80 [ 266.849750][ T6315] __driver_probe_device+0x18c/0x330 [ 266.855054][ T6315] driver_probe_device+0x4f/0x420 [ 266.860095][ T6315] __driver_attach+0x46b/0x670 [ 266.864964][ T6315] bus_for_each_dev+0x182/0x1f0 [ 266.869835][ T6315] bus_add_driver+0x30a/0x5a0 [ 266.874530][ T6315] driver_register+0x32d/0x430 [ 266.879310][ T6315] vidtv_bridge_init+0x39/0x70 [ 266.884094][ T6315] do_one_initcall+0x272/0x730 [ 266.888883][ T6315] do_initcall_level+0x137/0x1f0 [ 266.893844][ T6315] do_initcalls+0x4b/0x90 [ 266.898193][ T6315] kernel_init_freeable+0x3e9/0x570 [ 266.903403][ T6315] kernel_init+0x19/0x1b0 [ 266.907749][ T6315] ret_from_fork+0x1f/0x30 [ 266.912184][ T6315] [ 266.914521][ T6315] Freed by task 6285: [ 266.918509][ T6315] kasan_set_track+0x4b/0x70 [ 266.923118][ T6315] kasan_set_free_info+0x1f/0x40 [ 266.928077][ T6315] ____kasan_slab_free+0xd5/0x110 [ 266.933127][ T6315] slab_free_freelist_hook+0xea/0x170 [ 266.938514][ T6315] kfree+0xef/0x2a0 [ 266.942345][ T6315] dvb_device_open+0x2e7/0x370 [ 266.947126][ T6315] chrdev_open+0x5c5/0x6a0 [ 266.951565][ T6315] do_dentry_open+0x7ff/0xf80 [ 266.956261][ T6315] path_openat+0x26f5/0x2fa0 [ 266.960882][ T6315] do_filp_open+0x1e2/0x410 [ 266.965405][ T6315] do_sys_openat2+0x150/0x4b0 [ 266.970093][ T6315] __x64_sys_openat+0x135/0x160 [ 266.974959][ T6315] do_syscall_64+0x4c/0xa0 [ 266.979499][ T6315] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 266.985419][ T6315] [ 266.987759][ T6315] The buggy address belongs to the object at ffff88814acadc00 [ 266.987759][ T6315] which belongs to the cache kmalloc-256 of size 256 [ 267.001837][ T6315] The buggy address is located 24 bytes inside of [ 267.001837][ T6315] 256-byte region [ffff88814acadc00, ffff88814acadd00) [ 267.015048][ T6315] The buggy address belongs to the page: [ 267.020694][ T6315] page:ffffea00052b2b00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88814acad800 pfn:0x14acac [ 267.032265][ T6315] head:ffffea00052b2b00 order:1 compound_mapcount:0 [ 267.038882][ T6315] flags: 0x57ff00000010200(slab|head|node=1|zone=2|lastcpupid=0x7ff) [ 267.046992][ T6315] raw: 057ff00000010200 ffffea0005026a88 ffffea00050dea88 ffff888016c41b40 [ 267.055606][ T6315] raw: ffff88814acad800 0000000000100002 00000001ffffffff 0000000000000000 [ 267.064289][ T6315] page dumped because: kasan: bad access detected [ 267.070717][ T6315] page_owner tracks the page as allocated [ 267.076440][ T6315] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 12613315805, free_ts 0 [ 267.094444][ T6315] get_page_from_freelist+0x1bbd/0x1ca0 [ 267.100023][ T6315] __alloc_pages+0x1ee/0x480 [ 267.104633][ T6315] alloc_page_interleave+0x24/0x1e0 [ 267.109855][ T6315] new_slab+0xc0/0x4b0 [ 267.113944][ T6315] ___slab_alloc+0x80a/0xdd0 [ 267.118550][ T6315] __kmalloc_node+0x200/0x3b0 [ 267.123247][ T6315] kvmalloc_node+0x84/0x130 [ 267.127773][ T6315] v4l2_ctrl_new+0x70f/0x1310 [ 267.132482][ T6315] v4l2_ctrl_new_custom+0x54d/0x7b0 [ 267.137705][ T6315] vivid_create_controls+0x2200/0x3460 [ 267.143191][ T6315] vivid_probe+0x3c47/0x67a0 [ 267.147805][ T6315] platform_probe+0x137/0x1c0 [ 267.152503][ T6315] really_probe+0x284/0xc80 [ 267.157025][ T6315] __driver_probe_device+0x18c/0x330 [ 267.162326][ T6315] driver_probe_device+0x4f/0x420 [ 267.167368][ T6315] __driver_attach+0x46b/0x670 [ 267.172151][ T6315] page_owner free stack trace missing [ 267.177529][ T6315] [ 267.179865][ T6315] Memory state around the buggy address: [ 267.185516][ T6315] ffff88814acadb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 267.193596][ T6315] ffff88814acadb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 267.201684][ T6315] >ffff88814acadc00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 267.209757][ T6315] ^ [ 267.214617][ T6315] ffff88814acadc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 267.222690][ T6315] ffff88814acadd00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 267.230774][ T6315] ================================================================== [ 267.238857][ T6315] Disabling lock debugging due to kernel taint [ 267.255301][ T6315] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 267.262537][ T6315] CPU: 1 PID: 6315 Comm: syz.3.486 Tainted: G B syzkaller #0 [ 267.271230][ T6315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 267.281313][ T6315] Call Trace: [ 267.284606][ T6315] [ 267.287548][ T6315] dump_stack_lvl+0x188/0x250 [ 267.292246][ T6315] ? show_regs_print_info+0x20/0x20 [ 267.297443][ T6315] ? load_image+0x400/0x400 [ 267.301999][ T6315] panic+0x2e5/0x810 [ 267.305890][ T6315] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 267.312035][ T6315] ? bpf_jit_dump+0xd0/0xd0 [ 267.316527][ T6315] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 267.322495][ T6315] ? _raw_spin_unlock+0x40/0x40 [ 267.327331][ T6315] ? dvb_device_open+0xc6/0x370 [ 267.332256][ T6315] check_panic_on_warn+0x80/0xa0 [ 267.337183][ T6315] ? dvb_device_open+0xc6/0x370 [ 267.342023][ T6315] end_report+0x6d/0xf0 [ 267.346171][ T6315] kasan_report+0x102/0x130 [ 267.350661][ T6315] ? dvb_device_open+0xc6/0x370 [ 267.355504][ T6315] dvb_device_open+0xc6/0x370 [ 267.360172][ T6315] ? do_raw_spin_unlock+0x11d/0x230 [ 267.365356][ T6315] chrdev_open+0x5c5/0x6a0 [ 267.369856][ T6315] ? cd_forget+0x160/0x160 [ 267.374263][ T6315] ? fsnotify_perm+0x3a7/0x560 [ 267.379021][ T6315] ? cd_forget+0x160/0x160 [ 267.383445][ T6315] do_dentry_open+0x7ff/0xf80 [ 267.388132][ T6315] path_openat+0x26f5/0x2fa0 [ 267.392750][ T6315] ? verify_lock_unused+0x140/0x140 [ 267.397957][ T6315] ? slab_post_alloc_hook+0x4c/0x380 [ 267.403236][ T6315] ? do_filp_open+0x410/0x410 [ 267.407911][ T6315] do_filp_open+0x1e2/0x410 [ 267.412416][ T6315] ? vfs_tmpfile+0x300/0x300 [ 267.417018][ T6315] ? _raw_spin_unlock+0x24/0x40 [ 267.421867][ T6315] ? alloc_fd+0x598/0x630 [ 267.426196][ T6315] do_sys_openat2+0x150/0x4b0 [ 267.430891][ T6315] ? __lock_acquire+0x7d10/0x7d10 [ 267.435910][ T6315] ? do_sys_open+0xe0/0xe0 [ 267.440318][ T6315] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 267.446289][ T6315] ? lock_chain_count+0x20/0x20 [ 267.451153][ T6315] ? vtime_user_exit+0x2c8/0x3e0 [ 267.456091][ T6315] __x64_sys_openat+0x135/0x160 [ 267.460932][ T6315] do_syscall_64+0x4c/0xa0 [ 267.465343][ T6315] ? clear_bhb_loop+0x30/0x80 [ 267.470011][ T6315] ? clear_bhb_loop+0x30/0x80 [ 267.474762][ T6315] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 267.480644][ T6315] RIP: 0033:0x7fa8cc25f78e [ 267.485051][ T6315] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 267.504646][ T6315] RSP: 002b:00007fa8ca4b7b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 267.513059][ T6315] RAX: ffffffffffffffda RBX: 00007fa8ca4b86c0 RCX: 00007fa8cc25f78e [ 267.521031][ T6315] RDX: 0000000000040002 RSI: 00007fa8ca4b7c00 RDI: ffffffffffffff9c [ 267.528994][ T6315] RBP: 00007fa8ca4b7c00 R08: 0000000000000000 R09: 0000000000000000 [ 267.536963][ T6315] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 267.544952][ T6315] R13: 00007fa8cc51a218 R14: 00007fa8cc51a180 R15: 00007ffc65d67d08 [ 267.552946][ T6315] [ 267.556056][ T6315] Kernel Offset: disabled [ 267.560375][ T6315] Rebooting in 86400 seconds..