last executing test programs: 194.279463ms ago: executing program 1 (id=2): r0 = syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x100) truncate(&(0x7f0000000080)='./file0\x00', 0x3a6800) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8080c61) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) write$tun(r2, &(0x7f0000000040)=ANY=[], 0x1043) fallocate(r1, 0x3, 0x5000000, 0x8000c62) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1442, 0x0) pwrite64(r0, &(0x7f0000000180)="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", 0xfe, 0x5081) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000003c0), 0x4) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 0s ago: executing program 2 (id=3): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xd0, r2, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_HE_OBSS_PD={0x40, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x3}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x3f}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "014849a31d88b56a"}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x2}]}, @NL80211_ATTR_HE_OBSS_PD={0x28, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "56abd06da96012c3"}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x10}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5}]}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xf2}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1cd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1ff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_PRIVACY={0x4}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000404}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0xc080) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0xc00) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x4000010) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800714, &(0x7f0000000500), 0x0, 0x4a0, &(0x7f0000000a00)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV7EFFR8KAg6KEeY5LW2m0jTQq2BI0i9SgF7+JR8C/wpBdRDyJ4VfAohaJBaOppZWZnmm2ySTdpkm2znw9s9r2Zt/ved2fe7pt5mQmgbfVmf5KIbRHxe0R017I3FuitPc1MTw5fm54cTqJaffPvJC93dXpyuCxavm5rkTmYRqSfJvFCMr/e8fMXTg1VKqNni3z/xOn3+8fPX3jq5OmhE6MnRs8MHj165PDAs88MPr0icWZxXd374di+Pa++fen14WOX3vnpm6xZu/fX1tfHcVPXGgTU0HcR/1Rzc9c82nRld4btdemks4UNYUk6IiLbXF15/++OjpjdeN3xyictbRywqrLfpo0Lr56qzpdGg4XAnSjRnaFNlT/02fFv+Vijocdt4cqLERuK9Mz05PDM9fg7Iy2Wd61i/b0RcWzqvy+zRyz1PAQAwDLkY5snG43/0tidP9fmOnYUcyg9EXFX9MTOiLg7InZFxD0Redl7I+K+2our3U3W3zsnP3/8k15u2OYVko3/nqsb+83UxV889XQUue15/F3J8ZOV0UPFZ3IwujZm+YFF6vj+5d8+X2hd/fgve2T1l2PBogGXO+ecoBsZmhhaqQ/hyscRezsbxZ+cK8tke8CeiNi7tLfeUSZOPv71voUK3Tz+RazAPFP1q4jHatt/KtKoj/96mWTx+cn+TVEZPdRf7hXz/fzrxTcWqv+W4l8B2fbfcuP+P6dE979Jbb62KyqV0bPjS6/j4h+fLXhMs9z9f0PyVj5n/cu7tWUfDE1MnB2I2JC8lufLY7p8+eDsa8t8WT6L/+CBxv1/Z/GaLP77I2JfNWJ/RDwQEQ8WbX8oIh6OiAOLxP/jS4+8t0j8SSTR0u0/0vD77/r+35PUz9cvI9Fx6odvF5oxb277H4mp/Lu2Jv/+q/P81vnv22wDV+IzBAAAgNtdGhHbIkn7aunebZGmfX21/+HfFVvSytj4xBPHx86dGaldI9ATXWl5pqu77nzoQDJVvGMtP1icKy7XH87PG0d80bE5z/cNj1VGWhw7tLutN/b/KPt/5q+OVrcOWHWu14L2Nbf/py1qB7D2mvn9dywA61OD/r+5Fe0A1p7jf2hfjfr/R3Pyxv+wPs3v/382uGUdsB4Z/0P70v+hfS3e/3esWTuANXUr1/UvP1FeLLD899nU9BX+7ZIo73ixmnVtjtklkbY85GYT5c0nbpf2LCOR9Zi1rXT2HioAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB3sv8DAAD//0yK4mU=") r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r4) mount$tmpfs(0x0, 0x0, 0x0, 0x10a40a2, &(0x7f0000000040)=ANY=[@ANYBLOB="f4697a653d"]) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.228' (ED25519) to the list of known hosts. [ 24.322578][ T4306] cgroup: Unknown subsys name 'net' [ 24.571392][ T4306] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 24.838273][ T4306] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 25.556278][ T4320] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 25.563183][ T4324] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 25.567444][ T4327] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 25.568804][ T4327] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 25.571166][ T4331] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 25.572316][ T4331] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 25.573554][ T4331] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 25.574770][ T4331] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 25.575271][ T4334] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 25.576126][ T4331] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 25.577053][ T4334] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 25.578203][ T4331] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 25.579856][ T4335] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 25.581081][ T4331] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 25.581705][ T4335] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 25.582775][ T4331] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 25.583470][ T4335] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 25.584481][ T4331] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 25.585628][ T4335] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 25.586664][ T4331] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 25.587730][ T4335] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 25.588456][ T4331] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 25.589617][ T4335] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 25.591202][ T4331] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 25.592728][ T4335] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 25.594003][ T4335] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 25.594433][ T4331] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 25.598303][ T4331] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 25.604704][ T4335] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 25.615277][ T4331] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 25.682045][ T4318] chnl_net:caif_netlink_parms(): no params data found [ 25.741867][ T4318] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.743011][ T4318] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.744402][ T4318] device bridge_slave_0 entered promiscuous mode [ 25.756008][ T4318] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.757105][ T4318] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.758499][ T4318] device bridge_slave_1 entered promiscuous mode [ 25.774073][ T4326] chnl_net:caif_netlink_parms(): no params data found [ 25.785392][ T4323] chnl_net:caif_netlink_parms(): no params data found [ 25.795163][ T4318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.796538][ T4332] chnl_net:caif_netlink_parms(): no params data found [ 25.799572][ T4318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.809483][ T4319] chnl_net:caif_netlink_parms(): no params data found [ 25.818867][ T4318] team0: Port device team_slave_0 added [ 25.821256][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.822330][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.823609][ T4326] device bridge_slave_0 entered promiscuous mode [ 25.826460][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.827504][ T4326] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.829283][ T4326] device bridge_slave_1 entered promiscuous mode [ 25.831043][ T4318] team0: Port device team_slave_1 added [ 25.855747][ T4326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.863229][ T4318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.864337][ T4318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.868179][ T4318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.877573][ T4326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.879285][ T4323] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.880468][ T4323] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.881882][ T4323] device bridge_slave_0 entered promiscuous mode [ 25.884878][ T4318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.885969][ T4318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.890076][ T4318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.893268][ T4332] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.894431][ T4332] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.895972][ T4332] device bridge_slave_0 entered promiscuous mode [ 25.900352][ T4323] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.901575][ T4323] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.902966][ T4323] device bridge_slave_1 entered promiscuous mode [ 25.912059][ T4332] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.913259][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.914691][ T4332] device bridge_slave_1 entered promiscuous mode [ 25.921290][ T4319] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.922537][ T4319] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.923978][ T4319] device bridge_slave_0 entered promiscuous mode [ 25.931349][ T4326] team0: Port device team_slave_0 added [ 25.936469][ T4319] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.937536][ T4319] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.939369][ T4319] device bridge_slave_1 entered promiscuous mode [ 25.969800][ T4318] device hsr_slave_0 entered promiscuous mode [ 26.009489][ T4318] device hsr_slave_1 entered promiscuous mode [ 26.049586][ T4326] team0: Port device team_slave_1 added [ 26.051723][ T4323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.056188][ T4332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.065806][ T4323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.069111][ T4332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.085133][ T4319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.086878][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.087986][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.092246][ T4326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.103617][ T4319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.105295][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.106371][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.110448][ T4326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.113309][ T4323] team0: Port device team_slave_0 added [ 26.116214][ T4332] team0: Port device team_slave_0 added [ 26.123288][ T4323] team0: Port device team_slave_1 added [ 26.126106][ T4332] team0: Port device team_slave_1 added [ 26.130834][ T4319] team0: Port device team_slave_0 added [ 26.141688][ T4319] team0: Port device team_slave_1 added [ 26.155571][ T4323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.156707][ T4323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.160909][ T4323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.164597][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.165649][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.169757][ T4332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.174499][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.175579][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.179797][ T4319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.182029][ T4323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.183172][ T4323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.187136][ T4323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.193471][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.194483][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.198074][ T4332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.229563][ T4326] device hsr_slave_0 entered promiscuous mode [ 26.288790][ T4326] device hsr_slave_1 entered promiscuous mode [ 26.348616][ T4326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.349879][ T4326] Cannot create hsr debugfs directory [ 26.351002][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.352094][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.355911][ T4319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.410122][ T4332] device hsr_slave_0 entered promiscuous mode [ 26.448774][ T4332] device hsr_slave_1 entered promiscuous mode [ 26.488799][ T4332] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.490038][ T4332] Cannot create hsr debugfs directory [ 26.529592][ T4323] device hsr_slave_0 entered promiscuous mode [ 26.568737][ T4323] device hsr_slave_1 entered promiscuous mode [ 26.608655][ T4323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.609784][ T4323] Cannot create hsr debugfs directory [ 26.679698][ T4319] device hsr_slave_0 entered promiscuous mode [ 26.748830][ T4319] device hsr_slave_1 entered promiscuous mode [ 26.788616][ T4319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.789674][ T4319] Cannot create hsr debugfs directory [ 26.857263][ T4318] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 26.904809][ T4318] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 26.945121][ T4318] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 26.994886][ T4318] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.054172][ T4323] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.112454][ T4323] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.149741][ T4323] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.192636][ T4323] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.237619][ T4332] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.279696][ T4332] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.323015][ T4332] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.364780][ T4332] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.421058][ T4318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.432111][ T4326] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.464927][ T4326] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.491286][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.493271][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.494737][ T4326] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.521386][ T4326] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.571635][ T4318] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.582717][ T4319] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.608757][ T4331] Bluetooth: hci2: command 0x0409 tx timeout [ 27.608956][ T4324] Bluetooth: hci1: command 0x0409 tx timeout [ 27.612531][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.614138][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.615709][ T1608] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.616771][ T1608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.618747][ T4324] Bluetooth: hci0: command 0x0409 tx timeout [ 27.621940][ T4319] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.688638][ T4324] Bluetooth: hci4: command 0x0409 tx timeout [ 27.688738][ T4335] Bluetooth: hci3: command 0x0409 tx timeout [ 27.699642][ T4319] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.750506][ T4319] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.789823][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.792502][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.793951][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.795621][ T1608] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.796686][ T1608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.809512][ T4323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.825314][ T4318] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 27.826995][ T4318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.832541][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 27.834254][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 27.835785][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 27.837438][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 27.840877][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 27.842437][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 27.843842][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.845461][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.847064][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.848516][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.852460][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 27.853964][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 27.867001][ T4332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.871930][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.873381][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.876212][ T4323] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.885932][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.887480][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.889632][ T4366] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.890806][ T4366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.892292][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.895426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.896882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.898171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.900661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.902130][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.903228][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.910061][ T4332] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.913862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 27.915404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 27.917866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 27.919798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 27.922313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 27.937900][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.939898][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.941256][ T4366] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.942380][ T4366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.943653][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.945101][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.946463][ T4366] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.947541][ T4366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.949106][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.955108][ T4319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.957361][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 27.959124][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 27.961644][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 27.968268][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.970143][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.971575][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.972990][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.976674][ T4326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.980936][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 27.982155][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 27.984175][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 27.987400][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 27.993885][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.995226][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.999595][ T4318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.001918][ T4319] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.003107][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.004727][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.006368][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.010311][ T4326] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.014395][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.015809][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.017156][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.019690][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.029004][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.030779][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.032275][ T1608] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.033368][ T1608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.034760][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.036410][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.037807][ T1608] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.038922][ T1608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.041648][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.043408][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.045378][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.047013][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.049759][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.051428][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.052972][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.054306][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.055655][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.057239][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.066513][ T4319] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.068147][ T4319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.076070][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.077496][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.079426][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.080932][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.082357][ T1608] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.083439][ T1608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.084784][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.086275][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.087820][ T1608] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.089032][ T1608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.091129][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.092796][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.094386][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.096177][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.097609][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.102004][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.103586][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.104944][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.106467][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.107912][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.110601][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.112073][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.113458][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.116027][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.127725][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.129858][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.131332][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.132780][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.146588][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.148057][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.150770][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.151849][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.155198][ T4323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.160786][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.165470][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.166900][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.168550][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.170821][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.178088][ T4318] device veth0_vlan entered promiscuous mode [ 28.183345][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.184992][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.204494][ T4318] device veth1_vlan entered promiscuous mode [ 28.214577][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 28.215966][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.217444][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.219915][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.221220][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.222887][ T4323] device veth0_vlan entered promiscuous mode [ 28.234350][ T4326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.237705][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 28.239315][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.240506][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.250434][ T4319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.253172][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.254418][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.260595][ T4323] device veth1_vlan entered promiscuous mode [ 28.264886][ T4318] device veth0_macvtap entered promiscuous mode [ 28.267222][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 28.269075][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.270641][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.272163][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.273680][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.276243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 28.290735][ T4318] device veth1_macvtap entered promiscuous mode [ 28.295739][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 28.297183][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.298528][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.301335][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.303127][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.304417][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.306019][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.307578][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.313231][ T4318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.315925][ T4318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.317968][ T4318] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.320267][ T4318] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.321570][ T4318] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.322914][ T4318] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.326770][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.328241][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.332834][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.334416][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.335993][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.337570][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.341500][ T4323] device veth0_macvtap entered promiscuous mode [ 28.344687][ T4323] device veth1_macvtap entered promiscuous mode [ 28.347838][ T4326] device veth0_vlan entered promiscuous mode [ 28.353512][ T4332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.360975][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.362533][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.364789][ T4323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.366730][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 28.368234][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.373249][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.374887][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.380785][ T4326] device veth1_vlan entered promiscuous mode [ 28.394371][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.396152][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.398208][ T4323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.400039][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 28.401730][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 28.403627][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.405122][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.406637][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.408188][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.418335][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.419942][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.421404][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.422698][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.427125][ T4332] device veth0_vlan entered promiscuous mode [ 28.435513][ T4326] device veth0_macvtap entered promiscuous mode [ 28.438029][ T4323] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.440478][ T4323] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.441896][ T4323] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.443274][ T4323] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.445445][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.446970][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.448429][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.453313][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.454854][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 28.462466][ T4326] device veth1_macvtap entered promiscuous mode [ 28.475623][ T4332] device veth1_vlan entered promiscuous mode [ 28.477895][ T4319] device veth0_vlan entered promiscuous mode [ 28.481545][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.482934][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.485546][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 28.487116][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.488469][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.491261][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.492783][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 28.494342][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.495763][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.513863][ T4319] device veth1_vlan entered promiscuous mode [ 28.516035][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.517267][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.519675][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.521937][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.523495][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.525156][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.527181][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.532338][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 28.533833][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 28.535232][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 28.536636][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 28.538020][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.540480][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.541873][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.543522][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.551157][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.552569][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.554676][ T4319] device veth0_macvtap entered promiscuous mode [ 28.556807][ T4319] device veth1_macvtap entered promiscuous mode [ 28.561630][ T4332] device veth0_macvtap entered promiscuous mode [ 28.565372][ T4332] device veth1_macvtap entered promiscuous mode [ 28.570211][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.571759][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.573295][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.574848][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.576908][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.584030][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.585655][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.587107][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.591709][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.593130][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.594678][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.596690][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.598151][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 28.599857][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.601246][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 28.602629][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.604037][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.605505][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.606943][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.608403][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.617216][ T4326] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.619109][ T4326] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.620424][ T4326] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.621631][ T4326] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.624401][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.626069][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.627574][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.630044][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.631442][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.633009][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.635113][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.636984][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.639218][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.641176][ T1608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.642422][ T1608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.644055][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 28.649789][ T4319] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.651221][ T4319] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.656601][ T4319] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.658270][ T4319] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.664262][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.665879][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.667311][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.672161][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.673593][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.675088][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.676435][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.677848][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.680516][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.687183][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.688874][ T1608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.701620][ T4431] loop1: detected capacity change from 0 to 8192 [ 28.706860][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.709420][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.711025][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.712514][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.713860][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.714736][ T4431] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 28.715305][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.717226][ T4431] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 28.719618][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.721817][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.724166][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.726330][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.727831][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.734086][ T4431] REISERFS (device loop1): using ordered data mode [ 28.735164][ T4431] reiserfs: using flush barriers [ 28.737910][ T4431] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 28.742435][ T4431] REISERFS (device loop1): checking transaction log (loop1) [ 28.750902][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.752219][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.754377][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 28.756255][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.760903][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.764788][ T4332] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.766104][ T4332] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.767444][ T4332] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.771623][ T4332] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.774717][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 28.806454][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.807776][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.820910][ T4431] REISERFS (device loop1): Using tea hash to sort names [ 28.822639][ T4431] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 28.825869][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 28.840718][ T4366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.842123][ T4366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.843826][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 28.866034][ T1289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.867314][ T1289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.869371][ T4366] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.870568][ T4366] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.874243][ T1289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.875508][ T1289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.887497][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 28.891312][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 28.895790][ T4431] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 28.898166][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 28.901515][ T4431] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 28.919055][ T4431] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 28.921290][ T4431] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 28.923691][ T4431] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 28.925721][ T4431] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 28.928038][ T4431] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 28.931598][ T4431] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 28.933559][ T4431] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 28.935658][ T4431] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 28.937666][ T4431] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 28.940666][ T4431] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 28.945005][ T4431] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 28.947220][ T4431] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 28.950279][ T4431] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 28.953286][ T4431] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 28.955405][ T4431] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 28.957561][ T4431] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 28.960665][ T4437] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 6 0x0 SD] (nlink == 1) not found (pos 1) [ 28.963119][ T4431] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 28.965822][ T4431] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 28.968080][ T4431] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 28.971743][ T4431] REISERFS warning (device loop1): PAP-5710 reiserfs_paste_into_item: entry or pasted byte ([2 5 0x7e9001 IND]) exists [ 28.973989][ T4431] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 28.976293][ T4437] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 6 0x0 SD] (nlink == 1) not found (pos 1) [ 28.978396][ T4437] ================================================================== [ 28.979665][ T4437] BUG: KASAN: use-after-free in leaf_paste_in_buffer+0x66c/0xa14 [ 28.980854][ T4437] Write of size 4048 at addr ffff0000e26f5030 by task syz.1.2/4437 [ 28.981966][ T4437] [ 28.982299][ T4437] CPU: 1 PID: 4437 Comm: syz.1.2 Not tainted syzkaller #0 [ 28.983369][ T4437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 28.984719][ T4437] Call trace: [ 28.985170][ T4437] dump_backtrace+0x1c8/0x1f4 [ 28.985852][ T4437] show_stack+0x2c/0x3c [ 28.986504][ T4437] __dump_stack+0x30/0x40 [ 28.987153][ T4437] dump_stack_lvl+0xf8/0x160 [ 28.987777][ T4437] print_address_description+0x88/0x218 [ 28.988630][ T4437] print_report+0x50/0x68 [ 28.989278][ T4437] kasan_report+0xa8/0x100 [ 28.989993][ T4437] kasan_check_range+0x260/0x2a0 [ 28.990719][ T4437] memcpy+0x60/0x90 [ 28.991333][ T4437] leaf_paste_in_buffer+0x66c/0xa14 [ 28.992077][ T4437] balance_leaf+0x2658/0xd2f4 [ 28.992752][ T4437] do_balance+0x260/0x774 [ 28.993437][ T4437] reiserfs_paste_into_item+0x5b4/0x6d0 [ 28.994214][ T4437] reiserfs_get_block+0x1444/0x3524 [ 28.995007][ T4437] __block_write_begin_int+0x34c/0x13b8 [ 28.995799][ T4437] __block_write_begin+0x7c/0xa0 [ 28.996557][ T4437] reiserfs_write_begin+0x328/0x71c [ 28.997288][ T4437] generic_perform_write+0x230/0x4e4 [ 28.998096][ T4437] __generic_file_write_iter+0x130/0x250 [ 28.998902][ T4437] generic_file_write_iter+0xb4/0x2b0 [ 28.999714][ T4437] vfs_write+0x5ac/0x7c4 [ 29.000364][ T4437] ksys_write+0x120/0x210 [ 29.001034][ T4437] __arm64_sys_write+0x7c/0x90 [ 29.001775][ T4437] invoke_syscall+0x98/0x2bc [ 29.002414][ T4437] el0_svc_common+0x138/0x258 [ 29.003073][ T4437] do_el0_svc+0x58/0x13c [ 29.003674][ T4437] el0_svc+0x58/0x138 [ 29.004288][ T4437] el0t_64_sync_handler+0x84/0xf0 [ 29.005057][ T4437] el0t_64_sync+0x18c/0x190 [ 29.005686][ T4437] [ 29.006038][ T4437] The buggy address belongs to the physical page: [ 29.006707][ T4438] loop2: detected capacity change from 0 to 512 [ 29.006934][ T4437] page:0000000029c8d804 refcount:1 mapcount:0 mapping:000000000015eebc index:0x5 pfn:0x1226f5 [ 29.009343][ T4437] memcg:ffff0000d1ace000 [ 29.009939][ T4437] aops:shmem_aops ino:5 dentry name(?):"memfd:syzkaller" [ 29.010943][ T4437] flags: 0x5ffd8000008001e(referenced|uptodate|dirty|lru|swapbacked|node=0|zone=2|lastcpupid=0x7ff) [ 29.011900][ T4438] EXT4-fs (loop2): bad s_want_extra_isize: 192 [ 29.012623][ T4437] raw: 05ffd8000008001e fffffc000389bd08 fffffc000389bd88 ffff0000f5f1fb58 [ 29.012631][ T4437] raw: 0000000000000005 0000000000000000 00000001ffffffff ffff0000d1ace000 [ 29.016368][ T4437] page dumped because: kasan: bad access detected [ 29.017375][ T4437] [ 29.017760][ T4437] Memory state around the buggy address: [ 29.018693][ T4437] ffff0000e26f4f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 29.019909][ T4437] ffff0000e26f4f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 29.021152][ T4437] >ffff0000e26f5000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 29.022343][ T4437] ^ [ 29.023237][ T4437] ffff0000e26f5080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 29.024351][ T4437] ffff0000e26f5100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 29.025494][ T4437] ================================================================== [ 29.032693][ T4437] Disabling lock debugging due to kernel taint [ 29.033682][ T4437] REISERFS panic (device loop1): vs-12195 balance_leaf: CFR not initialized [ 29.035146][ T4437] ------------[ cut here ]------------ [ 29.036017][ T4437] kernel BUG at fs/reiserfs/prints.c:390! [ 29.036894][ T4437] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 29.038078][ T4437] Modules linked in: [ 29.038649][ T4437] CPU: 0 PID: 4437 Comm: syz.1.2 Tainted: G B syzkaller #0 [ 29.040001][ T4437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 29.041519][ T4437] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 29.042740][ T4437] pc : __reiserfs_panic+0x13c/0x140 [ 29.043560][ T4437] lr : __reiserfs_panic+0x13c/0x140 [ 29.044315][ T4437] sp : ffff8000215964c0 [ 29.044917][ T4437] x29: ffff800021596560 x28: ffff800021596d60 x27: ffff800021596d78 [ 29.046177][ T4437] x26: ffff0000e26e6027 x25: dfff800000000000 x24: ffff800021596f00 [ 29.047335][ T4437] x23: ffff8000215964e0 x22: ffff800011b5eba0 x21: ffff0000cbc3a000 [ 29.048499][ T4437] x20: ffff800011b5eb80 x19: ffff800014770cbe x18: ffff800011a5bd40 [ 29.049674][ T4437] x17: 6e6920746f6e2052 x16: ffff800008042d90 x15: 0000000000000002 [ 29.050870][ T4437] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000080000 [ 29.052102][ T4437] x11: 000000000007ffff x10: ffff800025b2a000 x9 : 87beb21cf7e02200 [ 29.053342][ T4437] x8 : 87beb21cf7e02200 x7 : 0000000000000001 x6 : 0000000000000001 [ 29.054541][ T4437] x5 : ffff800021595f98 x4 : ffff800015134e00 x3 : ffff80000852f9b8 [ 29.055750][ T4437] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000049 [ 29.056917][ T4437] Call trace: [ 29.057389][ T4437] __reiserfs_panic+0x13c/0x140 [ 29.058149][ T4437] balance_leaf+0xa0a8/0xd2f4 [ 29.058828][ T4437] do_balance+0x260/0x774 [ 29.059471][ T4437] reiserfs_paste_into_item+0x5b4/0x6d0 [ 29.060306][ T4437] reiserfs_get_block+0x1444/0x3524 [ 29.061083][ T4437] __block_write_begin_int+0x34c/0x13b8 [ 29.061904][ T4437] __block_write_begin+0x7c/0xa0 [ 29.062623][ T4437] reiserfs_write_begin+0x328/0x71c [ 29.063378][ T4437] generic_perform_write+0x230/0x4e4 [ 29.064127][ T4437] __generic_file_write_iter+0x130/0x250 [ 29.064979][ T4437] generic_file_write_iter+0xb4/0x2b0 [ 29.065826][ T4437] vfs_write+0x5ac/0x7c4 [ 29.066469][ T4437] ksys_write+0x120/0x210 [ 29.067097][ T4437] __arm64_sys_write+0x7c/0x90 [ 29.067830][ T4437] invoke_syscall+0x98/0x2bc [ 29.068537][ T4437] el0_svc_common+0x138/0x258 [ 29.069262][ T4437] do_el0_svc+0x58/0x13c [ 29.069979][ T4437] el0_svc+0x58/0x138 [ 29.070581][ T4437] el0t_64_sync_handler+0x84/0xf0 [ 29.071345][ T4437] el0t_64_sync+0x18c/0x190 [ 29.072050][ T4437] Code: 912d80a5 911aa2a1 aa1303e4 97ffe397 (d4210000) [ 29.073179][ T4437] ---[ end trace 0000000000000000 ]--- [ 29.312555][ T4437] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 29.313563][ T4437] SMP: stopping secondary CPUs [ 29.314192][ T4437] Kernel Offset: disabled [ 29.314801][ T4437] CPU features: 0x080000,000f0097,a65bfea7 [ 29.315605][ T4437] Memory Limit: none [ 29.551514][ T4437] Rebooting in 86400 seconds..