last executing test programs: 1.293347643s ago: executing program 3 (id=94): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x2480, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) 1.173320233s ago: executing program 3 (id=101): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x1, 0x373, &(0x7f00000006c0)="$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") open(&(0x7f0000000040)='./file1\x00', 0xc0242, 0x1df2a23c5997fa5f) 1.173239903s ago: executing program 4 (id=102): ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, &(0x7f00000001c0)={0x2, 0x1, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x4}) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000540)={0x280, 0x20, 0x60, 0xf0, 0x4, 0xae, 0x0, 0x0, {0x1000, 0x11c00}, {0x401, 0xfffffffe}, {0x9, 0xd, 0x8b0}, {0xbca, 0x2c9, 0x1}, 0x3, 0x1, 0xfff, 0x80000000, 0x1, 0x7, 0x8, 0x20000000, 0x80000001, 0x1, 0x3, 0xe48, 0x14, 0x100, 0x0, 0x8}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x1e6, @tick=0x9}) 1.158759334s ago: executing program 4 (id=103): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0x10}, {0x0, 0xd}}, [@TCA_STAB={0x78, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x3b, 0xd, 0x357, 0x1, 0x8, 0xfffffffd}}, {0x4}}, {{0x1c, 0x1, {0x9f, 0xce, 0x100, 0x100, 0x2, 0x6394, 0x6d98, 0x6}}, {0x10, 0x2, [0xfff7, 0x4, 0xffff, 0x1, 0x2, 0x5]}}, {{0x1c, 0x1, {0x2, 0x9, 0x1, 0x0, 0x1, 0x5, 0x5, 0x4}}, {0xc, 0x2, [0x1, 0x4, 0x1, 0xff]}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8080}, 0x40020) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=@newtfilter={0x44, 0x2c, 0xd27, 0x72bd25, 0x5, {0x0, 0x0, 0x0, r3, {0x0, 0xfffc}, {}, {0x4, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x99}, @TCA_ROUTE4_IIF={0x8, 0x4, r3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc004884}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x32b}], 0x1, 0x9) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x38, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.141608816s ago: executing program 3 (id=104): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018ed8, &(0x7f0000000180)={[{@sysvgroups}, {@noload}, {@nobh}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@norecovery}, {@errors_continue}, {@quota}]}, 0x1, 0x644, &(0x7f00000006c0)="$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") r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x94) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$netlink(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000840)={0x3b8, 0x22, 0x100, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x3a5, 0x6c, 0x0, 0x1, [@generic="108ec52f3f", @generic="4f44355cea02ab8059f5d03752e504d465ce74d1676740a5248c06f2b8df838774c8018c009b9af7809481fd1a2bd1f1b6a7f3e05734642d6d583ec35cdca5450d7fe8e31077a772b72866d9478986889748ae3ec9a3b617bac8e58353ea8bef345aef5bef4825c5db6fae3b704a0716a2924f41d98803cd14ef94175a6e57f68e4c57141d91bad83bf4388fd30a50d910", @generic="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", @typed={0x8, 0xd9, 0x0, 0x0, @uid}, @generic="971ff708713584390e6ba4ec54163596d8cfe48a71944d8791cc91dcb0ac7483787c4bd9a8881ad649f5ef73f4d64a9f97bd522591b9129e92fef6d0799ae4a46d0df5d8c2e74369a2f54b130d43dc69700508fce01188faf60fe873b42be0706dee1e1ef7d4da33aa205a12cabe5a1e137e77061c416754ec002e9cf0ea702da2129f893a67622e994a0407fcaf14236d84863fdd99d8", @generic="e68049388314848f0cbc963793b7367ad4c1550d5d56342e00a648e870339e2148327b304327853baf7a7c50ceee40f38e8157c1c46737f7f71e0052e00a95bbdb28e5f437c64fc42ce42c6206aa6755f84b1c184a41d32e756c4e7e7ac5acf9caec27a5440c35e0f74650bcbbc183bb59a3ff678da5209aec0cf8054ddfa865613338ab2b522892a71f7faa232192e2a6a2f180aabd0c6c02894a87e505eab3b1a017263d76983a71029eeb8fff7bf5ed3857d8552471dcf0069d243c224ad1acf1204046e25c7faa8e683b3680e81dc7455e31f24c715239a93e339606b8", @typed={0x14, 0x4e, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}}, @typed={0x7b, 0xf3, 0x0, 0x0, @binary="250c224930cda6f426e87e278184d9906d568e416aee69e3914674585c9727d1b17c0f9efd4d69a31d2724a186ccec0d0bd4098ff9e86646cbc70a33795ec7c1de4f0f761b51b264944091b37caac3dc92d70ae4389b56e957eac93e18866aabf9a34e8fe6c42ec7c61624d1dd5f4e6c2786106a206fd1"}]}]}, 0x3b8}], 0x1}, 0x80) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.082118401s ago: executing program 4 (id=106): ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0x1, 0x27f, &(0x7f0000000480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000980)="d1e860", 0x3}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 976.190569ms ago: executing program 3 (id=109): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}}, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) 975.97233ms ago: executing program 4 (id=110): socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 733.59127ms ago: executing program 0 (id=116): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 634.125198ms ago: executing program 0 (id=120): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0xf) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) unshare(0x22020600) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, 0x0, 0x0}, 0x20) 573.575383ms ago: executing program 0 (id=122): r0 = openat$comedi(0xffffff9c, &(0x7f0000000200)='/dev/comedi4\x00', 0x181202, 0x0) ioctl$COMEDI_CMDTEST(r0, 0x8040640a, &(0x7f0000000380)={0x0, 0x30000, 0x10, 0x800, 0x100, 0x6, 0x80, 0x0, 0x2, 0x5dd, 0xffffffff, 0xa, &(0x7f0000000240)=[0x3, 0xfffffffd], 0x2, 0x0}) 573.348293ms ago: executing program 0 (id=124): syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f00000001c0)=ANY=[@ANYBLOB="8000000008021100000108fa76450c2745345cc23c1bfd4446"], 0x52) 523.621357ms ago: executing program 4 (id=127): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000012c0)={0x24, &(0x7f0000000d80)={0x40, 0x0, 0x4, "5e54b339"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 365.45977ms ago: executing program 2 (id=131): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c000780180001801400"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 365.18155ms ago: executing program 2 (id=132): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000240)="ab3e29113b0daad3436c980b9ab0d681b439c0d30b40378acb973ae0cae288031f19398452bf1a84d0083d97a9d545a7a6242e7c1ca026c48d1ca07ecf73f04f8ab29fae1f24dcfeb83c8d74cad17e23"}) 364.969621ms ago: executing program 2 (id=133): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000009c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000300)=""/65, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000500)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000200)=0x0) 309.613905ms ago: executing program 1 (id=134): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0xa41) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000280)={"1b00", 0x3, 0x6, 0x1, 0x0, 0x9, "0400b7e79bf500000000fcfc00", '\x00', "0300", "e8cc1304", ["ffff00000400", '\x00', '\x00', "000b00000000000000cb8200"]}) 309.390405ms ago: executing program 1 (id=135): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) readv(r0, &(0x7f0000003180)=[{&(0x7f0000000080)=""/4096, 0x1000}, {0x0}], 0x2) 309.240195ms ago: executing program 1 (id=136): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000005e80), 0x0, 0x102, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080), 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0xf71509a7b60ff854, 0x1000) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) 303.254315ms ago: executing program 2 (id=137): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, 0x0) 278.484277ms ago: executing program 1 (id=138): socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) socket$unix(0x1, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x0, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x33e, 0x730, 0x80, 0x7fffffff, 0xe}}]}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 160.173767ms ago: executing program 2 (id=139): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0x10}, {0x0, 0xd}}, [@TCA_STAB={0x78, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x3b, 0xd, 0x357, 0x1, 0x8, 0xfffffffd}}, {0x4}}, {{0x1c, 0x1, {0x9f, 0xce, 0x100, 0x100, 0x2, 0x6394, 0x6d98, 0x6}}, {0x10, 0x2, [0xfff7, 0x4, 0xffff, 0x1, 0x2, 0x5]}}, {{0x1c, 0x1, {0x2, 0x9, 0x1, 0x0, 0x1, 0x5, 0x5, 0x4}}, {0xc, 0x2, [0x1, 0x4, 0x1, 0xff]}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8080}, 0x40020) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=@newtfilter={0x44, 0x2c, 0xd27, 0x72bd25, 0x5, {0x0, 0x0, 0x0, r3, {0x0, 0xfffc}, {}, {0x4, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x99}, @TCA_ROUTE4_IIF={0x8, 0x4, r3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc004884}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="62af263ea3c1befb3bd81deb2fc1cacaa4d2f3c7d8ed578a43f7c4bb44173641f1fd8524ba1d6678d41a89626989170aadb2c8de3262863630637e1f80b2b4b51ee58b9299e10879e5e7cf131a96d45102b25ddcd1a9c1396236f8a9e1be48f3df174a31122fc89187100d16d31e65e68a314119e411a442d36d25fa1a910a16926bbe70937af1a2daffcd5c3a62c21741d80998ec5bdc21609f993fe686eab92a3d9509e824ba65d8ca5a278c2daaa30bae078462870b37ea7868c8f4793a95dfe47a9c60ea83231e51dda3ae07e726e228a4b101565798f3c4d0633da550910f4615720e9ca37e6f3e77bb52ae52a1312724d2f1a641035db3e81b35e55ca077ae17a98a375b6c3f56395c052113c3f125304a41a735b325b05243c1b8a0b8e47ad70f831e640e4d68e32614faef764f07940dbd655c7c45a7a22630e1c3d77bd86fd2c51621f5196efd4844bc327210f9d34141daa5acc425005e38ccdbeba7eafd392b4f3eb9f297aa6dbc28320b48b3f878d9e45916396519eb2f5c4084d210892cc8bd34489e4e12d78c16e5abcf841243e65dddfd7cbe36ec49b51d4ad368a01bba176ecdd8d147bedd7464a07dc59ad833ab8d26639de4131d324c8c1c1401a6758e660e0c7f0c9bd612f5f3589acba3b06198c30d6beb86a76c18cffff86ea6ebc282411a12ea8959b84672e17f10146575abcf6064ff36821f10c23c2e555b4c8d0af9f368e7db70ba47218a5947a1ecd42e08e6dc08ec3f3d51c522caed9d102a44f6d8f5944fa3307b7234f27483b285ef16925815cd9c05fbeee24b369c18fd05d3e7f034e99462de5f6b45c54f137b4b86e88ae17906071194223638760200d6e185e111301f039780bd9ab2d62682da82b0b752ef85f36a2308ced8b395405d2d30c3c883754767ed379aefbb8e4ff465ac1c6e938a41cb04915a16ab25eed7c2e54cd151821e0620fc314472c57b51d003d07a287d256744b8c8f6ac08fb3c143670b3b8318218d6be5e2ee5b71ad03a7c327a272de129875f170b5f1ea10473c3dac826e96a845aa809905b02c8e3e2e1b451d00f437271af7689f93920db839aba8c8c632cc31c7043b3b7e358c4f5725b31db55aa4f260504f6a78c6ff74d59c480", 0x32b}], 0x1, 0x9) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 133.72213ms ago: executing program 1 (id=140): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x70, 0x2c, 0xe27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {}, {0x5, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x7}}, @filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x70}}, 0x20040054) 93.891073ms ago: executing program 2 (id=141): syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x14002, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f000000a3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="32f46257fcb4d4840732e65be15f2600ff7f7388649aff7b1599a6bcf3d0442f7eca1b5d02b009ffc89b91ce8b5250886992c1edc522ed125a5337f8c4b39d303dd636de06f6bca465482d9e64f32b54925f8a39c3e017ba55ee9d6bf1b92665b5d083d7a644dc833dcb681eba455ab78276efd1d588e9b5daaf6044dc9f26a73fd5dc57e6fb8d9bbae761c7c5e86887d7a77a4d44c5d5b00c37f3105acffa65240cfe42909095b2879f6eb6f9d804ab8fce4813d907ef01a111aded0c20507659aaa8ea80876a369063e3e58fb6bceb6999aa729cba82f1eef30007cd65a956deec2921fbcf403b4dad56da6a74247dfb2028ef3a52a773a35156d483c3d4f14f8ef06711459c41db3cb2b0e48f47141af99e208f5c687c2193cc45cf134c92ad35b58cc17bfe80d145c1ee0adb217a277411e9886230037257897f6d6d976b113ce30cf982f3c7a941a8a2011fb0de93ab052ca71cf3375361ab09f411d3b85336adcb23b412ced08853deef5b2419b10415c5c3140309ea1b5e48206d3d505bed09e06be66f315d9ba1364260d71f05c908ddd7e7d0625c4c428e7e00ef09916a69176254f96e440a4c454d3b2cc8aec13678ea5243ff8161b31d6e18f560879c9c6fc8fd6c8f402b8a37409562a0b5da4d9d2dc7530683c1adad3725690ec51b8fd0f0cc717a40e31c6e553ff1621cc4cc970932b9b6655b460cb5f55970bb9cd7f3ed738e6dc4e008569ff67a77c430db15faa40ec0872471e096a180517d4368d133bfd839cf90bc5c6f60e07f0ed17b189f278d1a0334a7cc779d68bff3b6f539c5da365c8c74a94b5442930b8098ec90043f2fca81cea6d646119be3d3f50301e17ca0fa6a39bd8d691a12d338c7be1166232f2867764446af348aa3e3cd621875cd14cca47ce9ea9b70f5a7e31ddbcf0358f9ca84949365e9df9015f63ca80fd3938c36ab8aeaa782aa5582681ba32cf87a0e4f5de2763dff74a1e1993298ddbdc7d681cae97f6d63c9cf77d6766d71f8b2b2473fa06f67d6673da17592323498bb630eeee48972959fad41b64068d496c57c7eb233f3773e50a4166e1a075c289ee54155d3123fe4b9a0e93f04b0b0fbdd742f7e71ce1476ef6cd4226d1a5c9c65db9e246b0a0196538ce9ea27b6058cb5b0c62dd0988ac218b6bf6b38f277e8e063dbc8590f12409c1a63df1ca52f8c6c4edaaee2482d0f2034e2997100fdd5a1810b07337e8a668e25b5dc7216925e49f8c18d377f8da0b5adc008ed537f8c64a3006e29654f22d0afb118f5b6ea7ba5d087232dfb575732dc06e4c629d451f720a30c2d3694859abe23c0fb684f2cc6cbdf975693dfb95663a9b816e7c7e00b48ded8b0c06698248d53e6aef85cf2c0d0c09c2931a0daa11a2b65df57d85868e40fe2e0d7b2c8ad86436b7e6f091c681ebf5b3173087385a93eac1f57cb289034c189fe7940b26b1853d7a592f1af6b9e67a208f18157d9192785db7478ae676db55a09a90eaad99022af700a4824ef6b5f60d21841270061520579f8a6d1fe2ff0a94a3eedc9b37bd28337d0fba9a196c9370e65c4089a0dd600b60f93a31ad912bbb638e82389a0f8137587faa2e461092f7913142ce7dfa3f945444a523682c8524a94eeed8134bb918406f3a71a7fa73515f5ddec8b90a2670d2e7cc5b1015cfbcc785099ea3e5d9fd0572e1481c2a171b2037da6207d9119c3fd49cbccc0351855e3fcfacb299b7077274eea1033b0551df66f9b22c7712049c66d29068c753c8613cd11cf49fd4841af5b30523368a47546c19259c27c7f138e429da89ec94946d8f6b2c807125a4f4b504537e091a3ff3c78b5544db18670824fb985ed69502276554b2750ef9ef34d6c2b60aeac56ca707f75e77a06b5e2a4a30487fe5a44e945ade1d44218926e4e8f6c4e7ce2249cc17d3d6ecaeaed8a94f89a8fe3ec9d494d4a7ea8834cdbb0670b711749588489cbafd7905ec3652dd2235f7d838574397baa67b9d0c9cab04ad0ff02fcb098ead45607a440a0f484fbeed40bf647014528367907ef6fbf0d3dbbe8138baf3f44f98779cecdd8cf9fce2dcf958cc9d5ef3d6a0bccd65a0330565c93c48e4e6c98e283b1a78b3289c4f7b4b28e11a1d9bb6c18404ad4df66d7334113f98dafa238dd6bffeed62dc47215005251f53f96db0acb5b507c8378e862ba096887361fdd25914c1571c02842162c5b8e16b8416466d59c43a7345f7ecc74108a45899282c251f66552b6cff6cba5d50f70918d2d7d392dfc2be68425ebc00c2247598bb7f1b8338a13ee37ea39761fa00f05e09ddd74e955c2a1907f7c436439f685f58ecba52398d009284f291573decca4612d98758868b30d337076f613cbdce3578d7ba2aac90bd643c3571bce2ff3a5fad7d79e0a8377c3d8c480a4906ad42d56670930d087deef26cea1e0d5c2264666782c1d111ac6e04e569a7011319ebc43e8046951ea6fd09f487ba893168ce0990086d005e6631db690b89fcf323547b7cf9859a3d0ed3ced9553f9f31456897c1b8977563e4c76fd1ba02a8115f266f29958b1ecd9e2964776322e87c99ea08c02da1f5d75b1e2374f90013d8e3f6cd538d401f864b5c87d26ecf57b9cff820fa64fd4203f639bf77e51fcf708781507d3ef0f92f079aaf913678969aaeb919f64ada4813a9c6d3d823a7fae0032b3051c1592c83607481112cf35c851a247a86be316cc74886ffc75bc5476218b236ed2ad0e5d036e68efd8137a7e112520cd9c3b5c77ece19e449253c3694a111742bb54140cd46d644e6cbd1b3474577177a4b188d954d3b9a08eda12f71f1aabd0312704ae6fdd2b0e207afaed95b713f6be936b2222b43a80e9187aab90c624cb6e578e74458657a1b17f8caac5793704022989609340ac4a2a513c0d7fc496cd76a3024523161b16cb486fbf0edec8552f03637dc334e6c79ed2c5f216180b396f868cc7e8a73aa62f03428f4e3018274251144ccc431ba0b168ffef084ca2bbed114fc2f76c270d0d7fa34dec480ef0119f4b600f73f2925cce71f1f1e10b6ec5f6f9b9f3fac4b054af950dc4b874176cf1b2d6706b67c7de87e0c00edb34c96abdda7b1f2a5765c81a9264e7b21851ec0bda0b88e9f38ddb981f9cc56bb1d8bf556ee78ada18897e097364794ff2b41f303e6ace76fde4caaf21542afa4c004349d420aa5dfc09caa44df1c4c47cd968a6af6c627c119c84178dc5ca790ea071603d352ef8f8fdd705e6aa9f35c0fba20c6111eb095e1c225610f77ff3cf9e960fd6993f82677beb0a27ff34c62a0ef993b51d0b046572b03b5aa05eca22b05999544eec93d42e424766db7ff6b10bc03f8b722a065dca5fced274c595e8e8c09bf5e5390930b1f4aa5b144691c8be4464678e0e6d6a42ad3701b840523aa848c28c2443a5bb68c48a553a8f916e0d48e4536f6ad532144055ec244d318eaceb6ee9168b38e88db3d4027cc090ebda193ede19debb22d6b6c4129bdcfdbaec40fb9dca8432e206f56402ca87560a158663d6a883f8189bc3fdb773962c550fcab1f87472178710b4007773f671a2b8e4591649a8195a71c61f1b6f7ce8334e867704b2dbca6ce9affe969febeb46abdbced72a17cc3d8a519b6f31bcb6787c50b719367f5058cada3d8a844ef16a734f1ee82a6df823f555fe02461adf965b35fd4224fb371285ecaa29f05772c0e043c5bb77022614bd47bdf2f6a1a4c11f634eb4d1f982a80e4aeb7998eefc21c7edd2fc8825e5535b0230b8dad8dc5e3e6147a98aa42983358b1df70f9708a86aabac4050592a6d593b8a7d6b539acbdd94d4ac3c16a57c611883e53a546658d0fe00bab65aa6d89af6b2c30bc9624bd8ec6901d58606c82f555a12fee3ebedcb8c8b5cad3e76c53fd46655f3ac93c5d00b801dc9a348a86c4b580b7c2b0b44c1017c8768e0d9de659894c0854e2b3b0c75bed53673007f228c5883032294391f5a61828c9cce584782ce9a5b0a9cc306014ab562043056bb93c400e981ae6b97ac8e22e7ac7d34227afb91b47e9bf2aebd243e92886902ed99a2efc70b96b9ff02e569a4a10cd3969d7970f4696612324081fae96ffb24ecc32d68912c629f642cc560a0da579fca655ae2f98bbe9ab7d7c46c3b0b8d603f652930eca103ea58d21664b58f0a9c3471e6bd56dab9b9020300fa2ce42d59b0a1a165fd6204a68b1d1f47d6427470db2feaf8aad03d4e186cf3e5f3bf8b58cc4551c60a9d9120903d53f70f43f0497667571353511e93358e18b09f53fadf8aca2aa1e5851aa00eb55fef889fd55ce8c2377d58adbab8302feb9212a1c86792399b1180163906554b53d8b4f196d635e69ef36000dc817a1bf82b07bf7fd54eab849922b215b24a69d8f3385a1dcc19b84b379716d6be3549a50394ff348ee823f26e88262054d707d36de7ace2dac80cb5116baf3ee43f770698446f0ef6839533195cdfaf12ee0018ab12b6ac857587335f2448a4def01c45fbdff033227908efde30eaf631ead6c0eed9342e82b63d68704acb375f2055143b60eda18f88df9bd615c89a9afdc7bf77fd53f8eba06d939706a1242409d9d1f14059eb83bac6a983e6a6f2043ceb687b0bd912e65bfdfd2c9fe6fcd082d7e6de9c39c626d4935f66ab5cfa893ee1cf6909cac0531b144795f48050f835e3619b062d1b37746ca772d2be068ab630e9a1ecb97a635d45fda7dae36212f2be4c295fbabac62c90f99dd74beda80d0577a56a7d85bea9b5017745b678e5bdca87a1968002891772c4c763a25a97bfb2d00de36dde9a267ce478bdb3622dc996dd0ae1e72b04672190b83300e85d3ea1f9933413c7557852308f23f8a3b51339b57ab0420c68193a881ce0d3b33b8b7e3e2da85c24559c759aa45cccdda4ef0f15527743361c1c582d2f7be084376106bfb9dd6dc1372d014f8f3f7cdbccdb7fc2a9e7f878e5aeced525c368408950cf3972cb98f9b6e814a8a20ea441aadc0057a387983a524b852de9cda2d154a2993c9c6da6d5fb98bb51b5406516fc8d3fdcfc4d362371f4bc7945f8f926db15542a38de7a9df6675f6452430f0d1ef6a915dd61771247a8ae0c08446c03f24f45b65c6c4f03302d83a44ceff5de233626b617f8645d0f88d456e7fc6056869a1dba0f406cddeb4c4fef1d751d5a8ac6aa44e3afacd470d4c28d658ef7b9b7781d6e91fb77bd61eb0515f0b80f82627836cd0052b3e81601fceb534239aaee1fec2cedd5cd0e262164711f32b791e9843082d22cdcea0c798ee422cb7d20b4acc27cfcff5a1eff29d16a99debac5c4ae689e0428eb6344cd611aac6fef8ec9ccf32ad560947eee6de12dfa6e674731a596ca1962ffba72bed7f3d98d05d62b809cef30d8b51bf08fb3f578b50501f1aab7d49d8a0e365dda3391667ddbff13c44cb7da4f4522c3de885480e61c1e30b5e7456b91cafe57bd10e24bf9351349095f2521b6745e6d44a5dbabee413c85ca362452953375d8c38cea4fa8e97f1d04068fc0e1b9b87824d0694b674c588c6afbb8c03c5ca45257f4c2c2db7ba810bbb04c319d290f31b5d2696848f10aab76c547cd4cb53de9f2e5a2ed3ba5b78f68f0dc377ed77292cb03743109bb1f68b8a68dc26ed7572598e52bd4c18c4e509b553e66400a7611895d06a1d52daaea4a89cd5ee42a5f8521b9899e9ac7180366a8fbd317f041dc97fdf13ea413a5a202816eda176dfc9728f5fd0ecd21a3d3b0e3c37275875457e7587b4fa56aa9c53a96ef66730ed23849bde371583a3d63f86970b20a4b46635f2ac3d1e259a8da9387f59ed3c72bd092b4ae17e927a56fffee5911038a80e66c66b3f1f03adfef496003acbaf0c6aaf2728fa94ec096de1e06d392f86a2e0d9315422bb4bfe60c5de102dcf7052aad349e1561458d286de19433973bd9530bb1bc4605d1e89a9ebad18dada9b070b7e0c2daaed44ce359f12c21b31d50e66b6d963191e21ac8eeb61f08d49cdbe7fa6622ea71916041b98572b5ce2f4cc3a3758802a0f21c1715fbe039ed12157b4bd317c295998fe52308b91bc8d5a28c4a8a36a941ae1c2a913a33a84d87000643d8825033774f01c48e2f6f43a726931dfb991430c55f0b280332b6ef4f6094cde6cc7b46cdc51f5688b793eec0910efb09b356c12c1dffebcb966e999d6e9013c57ad632c0712375cebd5c563351b598b2c0af1c7f31584a05ca08bb10befd3fbd5f3f40f6c766608c3891db62d5e1565ee8eb44af50b24096f3a35da12fc80941257bc006b4d2ab5814bb512219c90936891ffc7e63bedd552700c5623931101c9407403ae532a3fee0f24422071db55dbb6dc8f010d2ad90167fb6e79328aaf857e5da7b6238cdf446dfe98d54540ccbd06d51beeaecacb53e33f22bd39e1b98374ade1c9a2dd2c54811d7172246311d3d7f0a86a33a5be94f87687e138c7e302d23e5e765ab9381166b2725f992d2464db459ee96b7b96b1cf1de1bff4b2c03276ed5bc14b0a67d4298f7fac5721d2aec6d517478b06adf5515771920162fb49351f08944216594c66a868adf4a2711b6b97b46651426f73c9874c330e8de8db0ce7c3e2304082ec83d7d436515e59739aee5aba08ca1f67b9f05e9350d2a13415a437fecb4aaaa07a5aea8e893283304f65e19af8f65324eb38e194dea5bbde4a0082323d2beccae380350e21f9d77cf86f87a1ad57b04018dac35e9b21028ec65bc8886eff1b463a8782115a1bcbf3a829a99616e95aef723d6efb80289aae132b2dfe658cd40e9d66ecb7edf50d8df3d1cc7b639e7a353f5bb8788d927f3f7ec535769fc2c880a03a4b8657ef91561bf0600af5462b289eb07030df4f8f431be46b930503d2c21eb212adfa2c1b506c761f1d429ab86b730ab0c75114634ed8207e0599cb823fb1eeb19a56ba1665ed5ff0cb3d55c993c14f186902223aa61e931ca472aa3556680409a574de477a1e094db494b073be4b88cded733fbb113807cabcbf6155989696096f73017dd6a0286617ed87f4019a0431c39fb58a20a37b6d03c245d238fa5e6e0cfe59d1b6c0120397c6ed888d46a49c14d21ddfcb6107cbfe17a61b495dcf082163f10f91331140d3bc785e457c049a7ea1ee2e13bfa894f6c0cc7aa6a4845efb8c13812c9ddb0169ec4adf441af38a8fc8ffbe4df1f7701f95937c8969718c3a53e37e260c0dc6329178d4207c1ea37e10f7650fa3c3a69387c49a89173795c5719bfc962827c30a5dc067b601316f5c9fa3af800e4e3fb1ea6eff3988e47cd52a62e83b4f808aa1ab58507aa639dfea5249bcf8a44bc65b846567304643aea196368705ebad8c8810196bf47459b3fe684510be6779da88bf0c949d3dbb35250f45ee81e64f5f45b35d66b6e008280ad27e4aa2f5b8bca82e46c46ab9f2a2266600c0e5b857d1ce4621b9abc036817c9ad734de9e93f433d859ca0c552adafd632b917ab9cbc1d4c8271dc549ac6258f4053515457b000c1e5728c8a0669313a1252e7d79a1438ded23f155df96293d9137e1db3d200d4e85c905c2d44ff1ac89a06cb6ad89992d6745e395643cc0175b66623481d4963521acbf0ea7fe300d99dceb1d395d59bd7ce2b40cb6762315ee0c4a0fb15626289721df052cfdf94d419d21a351cab9a34064a43e95416cfa7799a2570074f72a7463d900a4f1b027d9e39fc8e90446cba1bf9e05e0b6747de1257992ea5730918be2db7aa686f7ae2a73957d3476972d23776807a7fe8296396294b6a25444e911359d18a5a1a28eb4f8d43802e683f9fde7da95b9c26bb44890a6ef88d4fc44787b7821bfc9ec064ad25142e7dc5898e45c08159523184e3d2e3cc982747871361dcfa45b431be55a61dbe53dab82ed841268b2dce22a22d92b55c1f8e6a505d3cf6cebb44d93179762eeb1ed30b7d42c0e565c677064c3ca596bddbe7977b0d3829f41546c5e24085b07a545c2a842bd8ff23b03427ce1ebb7f09ac5de542a89e78968911571af297f28e7dac2b002636665e9f8a77dc23cffeb239ad1da4f36ccfe1db0117bb0dde5cfae54d6a788a34894552fd87fc11f3ef3439c8f97de904c48a54d868be619edbba1caad619e61f3a8ecbc05d38751da0393bb7438818c22b0f0fc14c3ad0911add4372d05f03161a04342758bf4d871e17873d942185f651810d95873f1eadf96928d155d1c6dd47fec7b73b8444b6b90b8ccc265079588f945d0da4817941ba02318d1ca3bce9cd4afbc835dfe53a514d19dfa53b124587d12b58f089023aa111e19daa4fb379d7b2d2245ba2deecc418d55d174902df61abb87326dd7ff6bd41599704e3fe7e147d8fdc6c542394d704d2055deb699e658a2a1a6661e071a357a3c096c414e7b4d68feba5312d71b4a6617e80135cb79393a39ea53f762a9a688ad340f41952a52524a7038d717401a5182eb0bd93562474c436f5609ae0a5c3ca0e64d14b15448ff2b609c79f263ed6cf7e0d5f8b040f8c5dab5531524837d655e751778e630514632591f3b46ab78ae493e577a641a725534f2ad65e8683aca8cba94e3c7ed7b08d74dd65517646280f9cdb6e90f495f26737321d2c7e0d8d53f53ef888efd8091345360818a38d242875dcadb616bb57a515f1212f737dd17b821e451a8feee26d511334120da99a9e3161f1d76afbf3ae71e4c0500301f3969ae6a68ec261bbfde9f80aaf63c35669a11e1845da785a32c09ac2fb41522adf8a34362c8f2a92584cbc94f496cdc2e50e11f3000ab66f1b691d1ea75c5dd27a6cfbc3d4411c590ba9ebe1e50de77650224e4d2c4246bb6ce98a441322ef560142b2dc959279d5a9eb04131c1ae95120af500d6fc3abcea149d1fc5e91b5bc82fa7e3496f262ae16d587790150fb7084738b45e45e44e1167be09fd111659cd74f0b6fab2f86fa1ada4c3cc94ebbbd75a249925200092b88f5323f042c3162d3e5b5c18dca8260b2c570a73accb84944967d57bbb3ffe7ca5f8006993281d197f8d4e0c4d11aef7ffed53ea84d8a050e10a3a43c6c11fb78f49032e10c77d16bf30228cf1f69c3aaeaf529770a0f8ebfbceb60fe1d56bfc8a26a714b6965f4e38544db021225732367a080fc4c8e6c0a84c6467bb46155eb48d5bfcf96a7af5f905ec46cd8bc8993760cfc0b6c75323091b6fda336ecd5cd31866bd8a24e410d55064ccb40c0d597d83daed8ea26c15b5e2e1c7afb1ca4ef0f4de585bf718d11b67365f424993bba467bff6d1338163b030edbeb2986064dbc14fea39cb98543c467a5978983688919095213d3b77dcb880d9ec5d0a44b300f3be71c6e1285cbd97394a79790fce292bdd265430300e1e04441c59c56e00b08f7c2f072a20e30960e0cbbc1c8630c5c53357051bd66647c707b216bf76d3fa9d434c42cfa33d1b85ee023131c9e70555ae1a92834866e4661921c6411d0fadc0821a884976283feb57350d7266a05ffaa8315d98e8e6ac032fbf1bd69ca881489cff37a1e0aee29cae0d66a97cfa6fe7de8cd783045e0c182352f67cb6bfa78375cff0c5f0bcd173844c004f2eabec53b36ce9bf8b7e32c6d4b26439bf296329a39ef2b15054b8f945aaca48d75f0aca4427b5282579c22aa746fab94b4a4d765225bcbe6b28336c6e31c088391b0399efa0b8b1209a8911193e8dd45ef51145d1c740229b8bf7e64a2313fa64d373523570206c032341ce7e35753663246b38e1b631bff85fa6014db34284b6db59381f812ebe22681bcdbf26affa2dedfedfb2447d5ee95b570eb1caaa86512488ce59d827fe96fd51a4bb1e12d3ea594a3955f0eda8b076c2408ee5d9ec4c4956a8443ee60cedcf9015671274fbef1ca850543b596aa25873ea1f6cd0bade9c85e52311d7e7f2d1a92ce064ce8660fc337315ff5444a9c39e3e95154982b7655f0a1ae670f9a1fc8b877376217c4ba8c2937879f348fdc3c2707705e4bb7be5a37b397857d97208a12d6100e0df978bdc66b73d82301e2e7fae7164d2c35272bb1d4708ed0fd164439346a1909dd50c337a4769c5acc205faededcd4a8b3ddc88fc236079bc48517ed9bdf9e4ee3965d851aa8177394d1e9a782db08f18f2079c1b2fc2f9c313b89093b0005bb2e982ac9912595cb7125ebe961737cee682bf8e8400ff8fe53b91dc20eb0ed4ef496228374010c9504b54949aef348722921375175faa211db6ce8b066cd8bb37ed0cc8c2d74b5916eff72070e1132efb2cb4d1dbb769573fc0fa1f7bac262c479ed929c92165e17b250e57872f2196986d6651e19db882acbb8e39a7506b5666925525d124933fe721e1d7e2cc70e8881c9b936ac4c602dc2f99d6f23f92dc81540d2e406a712a487864954f2ad7aa6dca0773baf38ec0968e2a46a2f167e18982f9f63ff6d73119511af4cccfa0420709b490f62c8b1611ca10f15ab4847832cc3d44301c796fb9acb30f4931cf1879ca634f8dee30ec7154eb57150ec5809884cdfd2c8c39db0a8d519b7fc7d4a51c1deba3f5605b51221b71338826540ef939c2bcb46db7608ccc839d2302d0646afa46fd4c56dd915a297d5cdfd8c9af6d62133634e853f5f97b8efbb4ef97911d4ce91b94942034c8308b17f8c13646bc7d6c179783a15964787876b302a541f580e1b7afa7d27b5133237ddeb89d2a47a2aff90d6a100aa01da6b2074ef5317cd7a4b4fbf7a62e20b5349383e66f005dbb1de9e2415242692d1a218185b3e96e0b5a0d8a99aa47d36a5a1c58ebb84afa98eed20411275e3170da483a5b3e00b33c680c54d860da7a1724ed7533d5850d82ef681c3fa4e2ff93c2b21ecbc57557da5819aae759fb9fd7db22adbaa691ebcc3d2e5cc4e72dfc52c92efa6ba0662e7d91016773e60f77dc834c895d951f2059ea64a018d0c50d6a7ce00d362038ed32af9b0e5eff3ea9c9eb1e1540c35f7d5d01d3087c19c7547dd20df08fe9155256f4bfdf5731b0bd0bda3d81dc276677a00c77afa583a019f3c26748d3d00b35f5ef945ee7946aa9bfdd0d1192373c64879456ceff5203890801ae843b91486234af68cbd4b569218004c722e852242c998c7690b350fd5de1af440f201c8b57ec8437a303b743bd8e3b71b8b0a74a71cb61bbff18422ce49ee883c3b9471ea19cfe14b328b457355362b22af6dc1698cfc80b6719ae73b6a9b0fbdfb4d6b20661800da876b0cf2b77f8680149a36fd311e1cbc49e761a921e0221c5af22982b6ec6335f3a0cc60bb8f5a0f6e9a29115683ef0f83ea50f6082c1401c29afac28e4fae0812b3ee28f2e6bd7a491ae62f52a76dfa777bea8eb5cc9245fd4694d19e09c8fc149689b2c4fd4f70cb600819a2044114c19323c3e0ea749f5667133845343f1d7faf6a5cb8b275a8dace2d944f8a293f2164821372d4cf01fe1f6a226bb84e0bdac80bc2cf664d1874deafeba857ae4412fcaaed4a08bc9b6ca797f6115b5210ab0e8192de909a8154576c908c4042bbb445d1bcc2604ee845e029cdb63730163d1839360080cb74c50d39eb14195fb8ec3335474dc000", 0x2000, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="5001000000000000ffffffffffffffff060000000000000003000000000000000400000000000000f8ffffffffffffff04000000ffffffff020000000000000007000000000000000000000000000000448e00000000000001000000000000000000000000000080000800000e0000000100000000a000003f0a0000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="010000000dcd6100000000000500000000000000070000000000000001000000985b00005c000000000000000200000000000000020000000000000007000000000000006a09000000000000010000800000000005000000000000000500000000000000010000000000000080000000000000000900000000000000ef26000000000000001000000c0000000000001810d0000009000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="0900000080000000000000000100000000000000c40a00000000000002"], 0x0, 0x0, 0x0}) getdents64(r4, 0x0, 0xc0) 64.197535ms ago: executing program 1 (id=142): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001540)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000580)={0x40, 0x14, 0x54, "eb2f7a1dcdf112172fdbff0137e83999789364c89563f6231bacf815bf2f88c64f195cb93c0af8abde0ff8ebdbf2c71142bcda7d7b2efbd8866adbe5e018eff1a1a61d00174eb038289eabf799408324e7a7facf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f00000003c0)={0x20, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17.654119ms ago: executing program 3 (id=143): r0 = syz_open_dev$loop(&(0x7f0000000600), 0x6, 0xa0041) ioctl$BLKGETSIZE64(r0, 0x80041272, &(0x7f0000000640)) 17.462469ms ago: executing program 0 (id=144): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000240)="ab3e29113b0daad3436c980b9ab0d681b439c0d30b40378acb973ae0cae288031f19398452bf1a84d0083d97a9d545a7a6242e7c1ca026c48d1ca07ecf73f04f8ab29fae1f24dcfeb83c8d74cad17e23"}) 17.377949ms ago: executing program 3 (id=145): r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000400)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "8000"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x18, &(0x7f00000001c0)={0x0, 0xf, 0x1, '\\'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 9.10586ms ago: executing program 0 (id=146): sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000006580)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)={0x38, 0x0, 0x7, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}, @NFACCT_FILTER, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x401}, @NFACCT_FLAGS={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20044805) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) socket$unix(0x1, 0x5, 0x0) 0s ago: executing program 4 (id=147): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000240)=[{0x0}], 0x1, &(0x7f0000000940)=[@ip_retopts={{0x14, 0x84, 0x8, {[@timestamp={0x44, 0x4, 0x47, 0x0, 0x8}]}}}], 0x18}}], 0x2, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) socket(0x10, 0x80002, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, 0x0, 0x0, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(r2) socket$inet(0x2, 0x2, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r8], 0x3c}}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.168' (ED25519) to the list of known hosts. [ 30.668061][ T4034] cgroup: Unknown subsys name 'net' [ 30.915401][ T4034] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 31.208085][ T4034] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 32.073187][ T4047] chnl_net:caif_netlink_parms(): no params data found [ 32.089472][ T4044] chnl_net:caif_netlink_parms(): no params data found [ 32.110841][ T4051] chnl_net:caif_netlink_parms(): no params data found [ 32.118488][ T4054] chnl_net:caif_netlink_parms(): no params data found [ 32.120498][ T4057] chnl_net:caif_netlink_parms(): no params data found [ 32.144652][ T4044] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.145844][ T4044] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.147436][ T4044] device bridge_slave_0 entered promiscuous mode [ 32.150937][ T4044] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.152392][ T4044] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.153910][ T4044] device bridge_slave_1 entered promiscuous mode [ 32.168760][ T4047] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.169886][ T4047] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.171343][ T4047] device bridge_slave_0 entered promiscuous mode [ 32.174971][ T4047] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.176132][ T4047] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.177667][ T4047] device bridge_slave_1 entered promiscuous mode [ 32.195344][ T4044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.209381][ T4044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.217771][ T4047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.219374][ T4051] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.220529][ T4051] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.222394][ T4051] device bridge_slave_0 entered promiscuous mode [ 32.224314][ T4051] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.225419][ T4051] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.226923][ T4051] device bridge_slave_1 entered promiscuous mode [ 32.234849][ T4047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.236460][ T4057] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.237671][ T4057] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.239169][ T4057] device bridge_slave_0 entered promiscuous mode [ 32.258215][ T4057] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.259319][ T4057] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.260776][ T4057] device bridge_slave_1 entered promiscuous mode [ 32.266436][ T4051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.270442][ T4054] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.271615][ T4054] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.273486][ T4054] device bridge_slave_0 entered promiscuous mode [ 32.276164][ T4044] team0: Port device team_slave_0 added [ 32.278245][ T4047] team0: Port device team_slave_0 added [ 32.280086][ T4051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.285689][ T4057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.288234][ T4057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.289635][ T4054] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.290841][ T4054] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.293194][ T4054] device bridge_slave_1 entered promiscuous mode [ 32.295172][ T4044] team0: Port device team_slave_1 added [ 32.299590][ T4047] team0: Port device team_slave_1 added [ 32.320492][ T4051] team0: Port device team_slave_0 added [ 32.322165][ T4044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.323256][ T4044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.327477][ T4044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.334637][ T4054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.337102][ T4057] team0: Port device team_slave_0 added [ 32.341485][ T4051] team0: Port device team_slave_1 added [ 32.346208][ T4044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.347337][ T4044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.351591][ T4044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.357318][ T4054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.359552][ T4057] team0: Port device team_slave_1 added [ 32.360779][ T4047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.362008][ T4047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.366247][ T4047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.371287][ T4051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.372596][ T4051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.376609][ T4051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.385717][ T4047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.386823][ T4047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.391276][ T4047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.396486][ T4051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.397554][ T4051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.401322][ T4051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.443085][ T4047] device hsr_slave_0 entered promiscuous mode [ 32.482122][ T4047] device hsr_slave_1 entered promiscuous mode [ 32.523482][ T4054] team0: Port device team_slave_0 added [ 32.527832][ T4057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.528973][ T4057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.533778][ T4057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.539551][ T4054] team0: Port device team_slave_1 added [ 32.542446][ T4057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.543502][ T4057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.547401][ T4057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.623133][ T4044] device hsr_slave_0 entered promiscuous mode [ 32.662103][ T4044] device hsr_slave_1 entered promiscuous mode [ 32.701966][ T4044] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.703270][ T4044] Cannot create hsr debugfs directory [ 32.710738][ T4054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.711797][ T4054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.715879][ T4054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.772958][ T4051] device hsr_slave_0 entered promiscuous mode [ 32.824967][ T4051] device hsr_slave_1 entered promiscuous mode [ 32.861903][ T4051] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.863132][ T4051] Cannot create hsr debugfs directory [ 32.864958][ T4054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.866129][ T4054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.870324][ T4054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.943111][ T4057] device hsr_slave_0 entered promiscuous mode [ 32.982057][ T4057] device hsr_slave_1 entered promiscuous mode [ 33.032003][ T4057] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.033203][ T4057] Cannot create hsr debugfs directory [ 33.112828][ T4054] device hsr_slave_0 entered promiscuous mode [ 33.152172][ T4054] device hsr_slave_1 entered promiscuous mode [ 33.191964][ T4054] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.193230][ T4054] Cannot create hsr debugfs directory [ 33.282760][ T4047] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.334762][ T4047] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.383434][ T4047] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.433807][ T4047] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.493436][ T4044] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.524022][ T4044] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.565999][ T4044] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.613080][ T4044] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.673988][ T4051] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 33.706844][ T4051] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 33.743058][ T4051] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 33.799993][ T4051] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 33.865600][ T4057] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.908515][ T4057] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.922231][ T4096] Bluetooth: hci0: command 0x0409 tx timeout [ 33.922251][ T4095] Bluetooth: hci1: command 0x0409 tx timeout [ 33.924290][ T4095] Bluetooth: hci3: command 0x0409 tx timeout [ 33.955159][ T4057] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.997085][ T4054] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.012032][ T4111] Bluetooth: hci4: command 0x0409 tx timeout [ 34.013054][ T4111] Bluetooth: hci2: command 0x0409 tx timeout [ 34.043890][ T4057] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.094462][ T4047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.097670][ T4054] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.134016][ T4054] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.189681][ T4047] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.193335][ T4054] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.234062][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.236020][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.237509][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.239212][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.240946][ T359] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.242038][ T359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.247192][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.261961][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.263612][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.265077][ T359] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.266145][ T359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.271149][ T4044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.276967][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.290402][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.296446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.298197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.299810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.301223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.304381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.311245][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.316424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.321020][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.323026][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.326021][ T4044] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.336559][ T4051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.339928][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.341363][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.343567][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.344691][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.346042][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.347455][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.348936][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.356305][ T4047] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.364972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.366533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.368002][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.369079][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.375894][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.380971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.383208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.384525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.389425][ T4051] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.399883][ T4054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.402953][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.404887][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.406539][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.416903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.418550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.419960][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.421135][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.423166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.433929][ T4057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.436836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.438482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.439966][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.441115][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.442764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.453712][ T4057] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.456094][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.457795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.459411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.460892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.463433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.464906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.466345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.467726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.474049][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.485038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.486797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.488658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.490223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.493188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.494873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.496423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.497875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.499475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.500974][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.502122][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.504729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.506140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.507483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.508784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.510780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.513409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.517480][ T4051] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.519527][ T4051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.525627][ T4047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.530182][ T4054] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.535145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.536816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.541051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.543522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.545060][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.546202][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.547616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.558436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.560191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.563762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.565669][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.567260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.568712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.570419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.571805][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.572920][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.587773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.589234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.590655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.592964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.594408][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.595445][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.596679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.598361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.599981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.601753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.604048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.605682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.607203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.608459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.610633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.615145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.616786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.620336][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.622171][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.624670][ T4044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.630699][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.633023][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.641258][ T4054] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.644480][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.646038][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.647454][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.648879][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.650420][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.651779][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.657908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.659304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.667160][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.668749][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.670351][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.671629][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.676570][ T4047] device veth0_vlan entered promiscuous mode [ 34.678982][ T4057] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.683719][ T4051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.692789][ T4047] device veth1_vlan entered promiscuous mode [ 34.709337][ T4044] device veth0_vlan entered promiscuous mode [ 34.713403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.714982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.716503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.718256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.719545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.721612][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.724093][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.733444][ T4044] device veth1_vlan entered promiscuous mode [ 34.741784][ T4044] device veth0_macvtap entered promiscuous mode [ 34.744225][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.745755][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.747267][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.748681][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.750136][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.752518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.766772][ T4047] device veth0_macvtap entered promiscuous mode [ 34.768953][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.770517][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.773089][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.774300][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.775600][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.778670][ T4044] device veth1_macvtap entered promiscuous mode [ 34.785563][ T4047] device veth1_macvtap entered promiscuous mode [ 34.788457][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.790042][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.791451][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.793813][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.798356][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.799841][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.806031][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.807255][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.809655][ T4051] device veth0_vlan entered promiscuous mode [ 34.814348][ T4054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.820133][ T4057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.826666][ T4051] device veth1_vlan entered promiscuous mode [ 34.830927][ T4047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.835198][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.836874][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.838894][ T4044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.840990][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.842790][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.844257][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.845824][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.847269][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.855172][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.856724][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.858318][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.864053][ T4047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.866368][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.868079][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.870280][ T4044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.874773][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.876522][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.878122][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.879531][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.886704][ T4047] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.888030][ T4047] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.889232][ T4047] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.890456][ T4047] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.895711][ T4054] device veth0_vlan entered promiscuous mode [ 34.898763][ T4044] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.900049][ T4044] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.901448][ T4044] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.903699][ T4044] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.905923][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.907473][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.909034][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.910297][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.920776][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.923104][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.924607][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.926138][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.928728][ T4051] device veth0_macvtap entered promiscuous mode [ 34.931008][ T4054] device veth1_vlan entered promiscuous mode [ 34.947010][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.948554][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.950003][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.951392][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.957086][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.958705][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.960121][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.964494][ T4051] device veth1_macvtap entered promiscuous mode [ 34.967025][ T4057] device veth0_vlan entered promiscuous mode [ 34.995732][ T4057] device veth1_vlan entered promiscuous mode [ 35.007768][ T4051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.009425][ T4051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.011000][ T4051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.013596][ T4051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.015955][ T4051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.018809][ T4051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.020562][ T4051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.022589][ T4051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.024181][ T4051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.026109][ T4051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.033869][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.035351][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.036894][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.038268][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.039724][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.041078][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.043198][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.044733][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.046246][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.051776][ T1385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.053499][ T1385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.054174][ T4054] device veth0_macvtap entered promiscuous mode [ 35.055876][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.057396][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.067005][ T1385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.068383][ T1385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.070278][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.071803][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.074204][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.076248][ T4051] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.077597][ T4051] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.078921][ T4051] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.080307][ T4051] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.089267][ T4054] device veth1_macvtap entered promiscuous mode [ 35.094001][ T359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.095279][ T359] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.099602][ T4057] device veth0_macvtap entered promiscuous mode [ 35.101040][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.102619][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.103990][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.114687][ T4057] device veth1_macvtap entered promiscuous mode [ 35.128533][ T359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.129738][ T359] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.131407][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.133060][ T1385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.139956][ T4054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.141752][ T4054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.144567][ T4054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.146238][ T4054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.147857][ T4054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.157532][ T4054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.159916][ T4054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.164079][ T4054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.166017][ T4054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.167455][ T4054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.168994][ T4054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.170603][ T4054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.172831][ T4054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.175070][ T4054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.177215][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.178734][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.180204][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.181748][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.193556][ T4057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.195184][ T4057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.196758][ T4057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.198471][ T4057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.200042][ T4057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.201554][ T4057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.206015][ T4057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.207629][ T4057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.209844][ T4057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.217168][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.218850][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.223449][ T4057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.225107][ T4057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.226738][ T4057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.235247][ T4057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.236890][ T4057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.239378][ T4057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.240870][ T4057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.242880][ T4057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.245158][ T4057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.246753][ T4054] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.248012][ T4054] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.257159][ T4054] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.258611][ T4054] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.265514][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.267158][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.277559][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.278875][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.280575][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.283436][ T4057] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.284823][ T4057] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.286440][ T4057] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.287878][ T4057] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.318890][ T1385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.320174][ T1385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.326144][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.381375][ T4164] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 35.384203][ T4163] Zero length message leads to an empty skb [ 35.434669][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.436044][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.437664][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.438970][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.451113][ T4166] binder: BINDER_SET_CONTEXT_MGR already set [ 35.459833][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.461357][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.464835][ T4166] binder: 4165:4166 ioctl 4018620d 20000040 returned -16 [ 35.465321][ T359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.466336][ T4166] binder: 4165:4166 got transaction to invalid handle, 1 [ 35.467263][ T359] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.468442][ T4166] binder: 4165:4166 transaction failed 29201/-22, size 0-0 line 2917 [ 35.473501][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.500621][ T4166] binder: 4165:4166 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 35.504261][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.505507][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.507204][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.512635][ T4166] binder: 4166 RLIMIT_NICE not set [ 35.513465][ T4166] binder: 4165:4166 ioctl c0306201 20000140 returned -11 [ 35.519579][ T4096] binder: undelivered TRANSACTION_ERROR: 29201 [ 35.627367][ T4177] tipc: Started in network mode [ 35.629641][ T4177] tipc: Node identity ba3d112b43e3, cluster identity 4711 [ 35.632640][ T4177] tipc: Enabled bearer , priority 0 [ 35.636670][ T4181] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5'. [ 35.640157][ T4177] device syzkaller0 entered promiscuous mode [ 35.660730][ T4177] tipc: Resetting bearer [ 35.674908][ T4186] loop4: detected capacity change from 0 to 64 [ 35.693228][ T4176] tipc: Resetting bearer [ 35.717448][ T4176] tipc: Disabling bearer [ 35.810338][ T4194] loop4: detected capacity change from 0 to 764 [ 35.818688][ T4194] Symlink component flag not implemented [ 35.819764][ T4194] Symlink component flag not implemented (101) [ 35.894141][ T4196] loop4: detected capacity change from 0 to 256 [ 35.896701][ T4196] ======================================================= [ 35.896701][ T4196] WARNING: The mand mount option has been deprecated and [ 35.896701][ T4196] and is ignored by this kernel. Remove the mand [ 35.896701][ T4196] option from the mount to silence this warning. [ 35.896701][ T4196] ======================================================= [ 35.918134][ T4196] FAT-fs (loop4): Directory bread(block 64) failed [ 35.919513][ T4196] FAT-fs (loop4): Directory bread(block 65) failed [ 35.920756][ T4196] FAT-fs (loop4): Directory bread(block 66) failed [ 35.936903][ T4196] FAT-fs (loop4): Directory bread(block 67) failed [ 35.939192][ T4196] FAT-fs (loop4): Directory bread(block 68) failed [ 35.940701][ T4196] FAT-fs (loop4): Directory bread(block 69) failed [ 35.943118][ T4196] FAT-fs (loop4): Directory bread(block 70) failed [ 35.944317][ T4196] FAT-fs (loop4): Directory bread(block 71) failed [ 35.945506][ T4196] FAT-fs (loop4): Directory bread(block 72) failed [ 35.946779][ T4196] FAT-fs (loop4): Directory bread(block 73) failed [ 35.970637][ T4202] loop2: detected capacity change from 0 to 64 [ 36.002414][ T3626] Bluetooth: hci3: command 0x041b tx timeout [ 36.003789][ T3626] Bluetooth: hci1: command 0x041b tx timeout [ 36.004746][ T3626] Bluetooth: hci0: command 0x041b tx timeout [ 36.046684][ T4204] binder: 4203:4204 got transaction to invalid handle, 1 [ 36.048039][ T4204] binder: 4203:4204 transaction failed 29201/-22, size 0-0 line 2917 [ 36.050893][ T4204] binder: 4203:4204 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 36.057255][ T4204] binder: 4204 RLIMIT_NICE not set [ 36.058085][ T4204] binder: 4203:4204 ioctl c0306201 20000140 returned -11 [ 36.059688][ T4096] binder: undelivered TRANSACTION_ERROR: 29201 [ 36.074962][ T4206] udc-core: couldn't find an available UDC or it's busy [ 36.076070][ T4206] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 36.092689][ T3626] Bluetooth: hci2: command 0x041b tx timeout [ 36.093820][ T3626] Bluetooth: hci4: command 0x041b tx timeout [ 36.101020][ T4208] binder: 4207:4208 ioctl c0306201 0 returned -14 [ 36.105928][ T4208] binder: 4207:4208 got transaction to invalid handle, 1 [ 36.107100][ T4208] binder: 4207:4208 transaction failed 29201/-22, size 72-0 line 2917 [ 36.109008][ T3626] binder: undelivered TRANSACTION_ERROR: 29201 [ 36.126049][ T4210] loop2: detected capacity change from 0 to 512 [ 36.159064][ T4210] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 36.247538][ T4216] syz.2.24 uses obsolete (PF_INET,SOCK_PACKET) [ 36.410983][ T4220] tipc: Enabling of bearer rejected, media not registered [ 36.492739][ T4228] loop2: detected capacity change from 0 to 512 [ 36.553657][ T4228] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.30: casefold flag without casefold feature [ 36.559336][ T4228] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.30: couldn't read orphan inode 15 (err -117) [ 36.572347][ T4228] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 36.601015][ T4234] loop3: detected capacity change from 0 to 256 [ 36.606630][ T4235] binder: tried to use weak ref as strong ref [ 36.607969][ T4235] binder: 4233:4235 Acquire 1 refcount change on invalid ref 0 ret -22 [ 36.609590][ T4235] binder: 4233:4235 got transaction to invalid handle, 1 [ 36.610816][ T4235] binder: 4233:4235 transaction failed 29201/-22, size 0-0 line 2917 [ 36.613822][ T4235] binder: 4233:4235 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 36.615890][ T4235] binder: 4235 RLIMIT_NICE not set [ 36.617037][ T4088] binder: undelivered TRANSACTION_ERROR: 29201 [ 36.693146][ T4245] loop4: detected capacity change from 0 to 4096 [ 36.766900][ T4245] EXT4-fs (loop4): Test dummy encryption mode enabled [ 36.773091][ T4245] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 36.775572][ T4245] System zones: 0-5 [ 36.780375][ T4245] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,data_err=ignore,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 36.821387][ T4260] loop3: detected capacity change from 0 to 512 [ 36.858930][ T4260] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.43: iget: bad extended attribute block 1 [ 36.861477][ T4260] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.43: couldn't read orphan inode 15 (err -117) [ 36.885580][ T4260] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,acl,noload,journal_dev=0x0000000000000008,nodiscard,,errors=continue. Quota mode: none. [ 36.886759][ T4268] binder: tried to use weak ref as strong ref [ 36.911745][ T4268] binder: 4267:4268 Acquire 1 refcount change on invalid ref 0 ret -22 [ 36.925454][ T4268] binder: 4267:4268 got transaction to invalid handle, 1 [ 36.926640][ T4268] binder: 4267:4268 transaction failed 29201/-22, size 0-0 line 2917 [ 36.928323][ T4268] binder: 4267:4268 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 36.933082][ T4268] binder: 4268 RLIMIT_NICE not set [ 36.934223][ T4096] binder: undelivered TRANSACTION_ERROR: 29201 [ 36.940698][ T4272] loop2: detected capacity change from 0 to 1024 [ 36.957392][ T4274] loop3: detected capacity change from 0 to 512 [ 37.008177][ T4272] EXT4-fs (loop2): Ignoring removed orlov option [ 37.009298][ T4272] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 37.031529][ T4274] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 37.071017][ T4272] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,mblk_io_submit,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 37.155854][ T4292] loop3: detected capacity change from 0 to 1024 [ 37.186137][ T4290] loop2: detected capacity change from 0 to 4096 [ 37.194168][ T4292] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 37.195631][ T4292] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 37.201633][ T4292] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 37.204827][ T4292] System zones: 0-1, 3-36 [ 37.206935][ T4292] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 37.214937][ T4292] EXT4-fs (loop3): shut down requested (2) [ 37.228237][ T4290] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 37.235508][ T4297] udc-core: couldn't find an available UDC or it's busy [ 37.236576][ T4297] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 37.311644][ T4301] binder: tried to use weak ref as strong ref [ 37.314009][ T4301] binder: 4300:4301 Acquire 1 refcount change on invalid ref 0 ret -22 [ 37.315835][ T4301] binder: 4300:4301 got transaction to invalid handle, 1 [ 37.317036][ T4301] binder: 4300:4301 transaction failed 29201/-22, size 0-0 line 2917 [ 37.318630][ T4301] binder: 4300:4301 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 37.320635][ T4301] binder: 4301 RLIMIT_NICE not set [ 37.321772][ T4155] binder: undelivered TRANSACTION_ERROR: 29201 [ 37.337178][ T4303] udc-core: couldn't find an available UDC or it's busy [ 37.338755][ T4303] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 37.361574][ T4305] device syzkaller0 entered promiscuous mode [ 37.862644][ T4311] tipc: Enabled bearer , priority 0 [ 37.864145][ T4311] device syzkaller0 entered promiscuous mode [ 37.875545][ T4313] loop3: detected capacity change from 0 to 1024 [ 37.879770][ T4311] tipc: Resetting bearer [ 37.884930][ T4313] EXT4-fs (loop3): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 37.886930][ T4313] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 37.888534][ T4310] tipc: Resetting bearer [ 37.896157][ T4310] tipc: Disabling bearer [ 37.935373][ T4313] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 37.937283][ T4313] EXT4-fs (loop3): orphan cleanup on readonly fs [ 37.939921][ T4313] EXT4-fs error (device loop3): ext4_map_blocks:739: inode #3: block 3: comm syz.3.66: lblock 3 mapped to illegal pblock 3 (length 1) [ 37.943079][ T4313] Quota error (device loop3): write_blk: dquota write failed [ 37.944283][ T4313] Quota error (device loop3): find_free_dqentry: Can't write quota data block 3 [ 37.945807][ T4313] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 37.949711][ T4313] EXT4-fs error (device loop3): ext4_acquire_dquot:6207: comm syz.3.66: Failed to acquire dquot type 0 [ 37.951732][ T4313] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 3: comm syz.3.66: lblock 3 mapped to illegal pblock 3 (length 1) [ 37.957490][ T4313] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 37.959123][ T4313] EXT4-fs error (device loop3): ext4_acquire_dquot:6207: comm syz.3.66: Failed to acquire dquot type 0 [ 37.961287][ T4313] EXT4-fs error (device loop3): ext4_free_blocks:6223: comm syz.3.66: Freeing blocks not in datazone - block = 0, count = 4096 [ 37.964728][ T4313] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #3: block 3: comm syz.3.66: lblock 3 mapped to illegal pblock 3 (length 1) [ 37.967541][ T4313] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 37.969097][ T4313] EXT4-fs error (device loop3): ext4_acquire_dquot:6207: comm syz.3.66: Failed to acquire dquot type 0 [ 37.971509][ T4313] EXT4-fs (loop3): 1 orphan inode deleted [ 37.973205][ T4313] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,auto_da_alloc=0x0000000000000006,max_batch_time=0x0000000000000007,acl,journal_dev=0x0000000000000001,dax=always,jqfmt=vfsold,dax=never,usrjquota=,,errors=continue. Quota mode: writeback. [ 37.981097][ T4313] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 38.030013][ T4321] loop4: detected capacity change from 0 to 512 [ 38.038845][ T4321] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 38.040333][ T4321] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 38.057347][ T4321] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.69: couldn't read orphan inode 26 (err -116) [ 38.059725][ T4321] EXT4-fs (loop4): Remounting filesystem read-only [ 38.060779][ T4321] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,jqfmt=vfsv0,nolazytime,journal_ioprio=0x0000000000000003,dax=never,barrier,. Quota mode: writeback. [ 38.082346][ T4096] Bluetooth: hci0: command 0x040f tx timeout [ 38.083474][ T4096] Bluetooth: hci1: command 0x040f tx timeout [ 38.084685][ T4096] Bluetooth: hci3: command 0x040f tx timeout [ 38.106439][ T4327] binder: 4326:4327 tried to acquire reference to desc 0, got 1 instead [ 38.108208][ T4327] binder_alloc: 4326: binder_alloc_buf, no vma [ 38.109257][ T4327] binder: 4326:4327 transaction failed 29189/-3, size 0-0 line 3085 [ 38.110926][ T4327] binder: 4326:4327 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 38.113405][ T4327] binder: 4327 RLIMIT_NICE not set [ 38.114422][ T4327] binder: 4326:4327 ioctl c0306201 20000140 returned -11 [ 38.116141][ T4095] binder: undelivered TRANSACTION_ERROR: 29189 [ 38.140531][ T4333] udc-core: couldn't find an available UDC or it's busy [ 38.141674][ T4333] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 38.146187][ T4331] loop4: detected capacity change from 0 to 1024 [ 38.162462][ T4096] Bluetooth: hci4: command 0x040f tx timeout [ 38.163654][ T4096] Bluetooth: hci2: command 0x040f tx timeout [ 38.282506][ T4337] tipc: Started in network mode [ 38.283309][ T4337] tipc: Node identity 66aeb1627215, cluster identity 4711 [ 38.284392][ T4337] tipc: Enabled bearer , priority 0 [ 38.285684][ T4337] device syzkaller0 entered promiscuous mode [ 38.297514][ T4337] tipc: Resetting bearer [ 38.299942][ T4336] tipc: Resetting bearer [ 38.304460][ T4336] tipc: Disabling bearer [ 38.964642][ T4354] netlink: 1319 bytes leftover after parsing attributes in process `syz.3.83'. [ 38.988588][ T4356] binder: 4355:4356 tried to acquire reference to desc 0, got 1 instead [ 38.990546][ T4356] binder_alloc: 4355: binder_alloc_buf, no vma [ 38.991522][ T4356] binder: 4355:4356 transaction failed 29189/-3, size 0-0 line 3085 [ 38.993750][ T4356] binder: 4355:4356 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 38.995828][ T4356] binder: 4356 RLIMIT_NICE not set [ 38.996689][ T4356] binder: 4355:4356 ioctl c0306201 20000140 returned -11 [ 38.998246][ T4096] binder: undelivered TRANSACTION_ERROR: 29189 [ 39.165392][ T4361] loop0: detected capacity change from 0 to 4096 [ 39.290930][ T4364] loop0: detected capacity change from 0 to 4096 [ 39.656623][ T4374] capability: warning: `syz.3.91' uses deprecated v2 capabilities in a way that may be insecure [ 39.698282][ T4381] binder: BINDER_SET_CONTEXT_MGR already set [ 39.699486][ T4381] binder: 4380:4381 ioctl 4018620d 20000040 returned -16 [ 39.701357][ T4381] binder: tried to use weak ref as strong ref [ 39.705636][ T4381] binder: 4380:4381 Acquire 1 refcount change on invalid ref 0 ret -22 [ 39.707127][ T4381] binder: 4380:4381 got transaction to invalid handle, 1 [ 39.708608][ T4381] binder: 4380:4381 transaction failed 29201/-22, size 0-0 line 2917 [ 39.710680][ T4381] binder: 4380:4381 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 39.714141][ T4381] binder: 4381 RLIMIT_NICE not set [ 39.714967][ T4381] binder: 4380:4381 ioctl c0306201 20000140 returned -11 [ 39.716437][ T4095] binder: undelivered TRANSACTION_ERROR: 29201 [ 39.744213][ T4386] netlink: 64 bytes leftover after parsing attributes in process `syz.0.97'. [ 39.768456][ T4390] udc-core: couldn't find an available UDC or it's busy [ 39.769672][ T4390] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 39.797950][ T4396] loop3: detected capacity change from 0 to 512 [ 39.824287][ T4396] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 39.901533][ T4411] loop3: detected capacity change from 0 to 1024 [ 39.922088][ T4413] loop4: detected capacity change from 0 to 64 [ 39.924633][ T4416] binder: tried to use weak ref as strong ref [ 39.925657][ T4416] binder: 4415:4416 Acquire 1 refcount change on invalid ref 0 ret -22 [ 39.927532][ T4416] binder: 4415:4416 got transaction to invalid handle, 1 [ 39.928699][ T4416] binder: 4415:4416 transaction failed 29201/-22, size 0-0 line 2917 [ 39.930364][ T25] binder: undelivered TRANSACTION_ERROR: 29201 [ 39.944226][ T4411] EXT4-fs (loop3): Ignoring removed nobh option [ 39.949065][ T4411] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #11: comm syz.3.104: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 39.955762][ T4411] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.104: couldn't read orphan inode 11 (err -117) [ 39.958018][ T4411] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 40.027257][ T4425] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.110235][ T4425] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.115823][ T4442] device syzkaller0 entered promiscuous mode [ 40.162719][ T25] Bluetooth: hci3: command 0x0419 tx timeout [ 40.166442][ T25] Bluetooth: hci1: command 0x0419 tx timeout [ 40.167418][ T25] Bluetooth: hci0: command 0x0419 tx timeout [ 40.181123][ T4425] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.231473][ T4425] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.242665][ T4103] Bluetooth: hci2: command 0x0419 tx timeout [ 40.243791][ T4103] Bluetooth: hci4: command 0x0419 tx timeout [ 40.326792][ T4462] binder: tried to use weak ref as strong ref [ 40.327775][ T4462] binder: 4461:4462 Acquire 1 refcount change on invalid ref 0 ret -22 [ 40.329579][ T4462] binder: 4461:4462 got transaction to invalid handle, 1 [ 40.377505][ T4425] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.386418][ T4425] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.395222][ T4425] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.405157][ T4425] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.413622][ T4474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 40.477712][ T4481] udc-core: couldn't find an available UDC or it's busy [ 40.478910][ T4481] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 40.611815][ T4491] binder: tried to use weak ref as strong ref [ 40.614669][ T4491] binder: 4490:4491 Acquire 1 refcount change on invalid ref 0 ret -22 [ 40.616240][ T4491] binder: 4490:4491 got transaction to invalid handle, 1 [ 40.617429][ T4491] binder_transaction: 1 callbacks suppressed [ 40.617439][ T4491] binder: 4490:4491 transaction failed 29201/-22, size 0-0 line 2917 [ 40.621025][ T4096] binder_release_work: 1 callbacks suppressed [ 40.621034][ T4096] binder: undelivered TRANSACTION_ERROR: 29201 [ 40.746287][ T4505] tipc: Enabled bearer , priority 0 [ 40.756609][ T4505] device syzkaller0 entered promiscuous mode [ 40.764369][ T4505] tipc: Resetting bearer [ 40.766740][ T4504] tipc: Resetting bearer [ 40.771421][ T4504] tipc: Disabling bearer [ 40.944546][ T4517] binder: BINDER_SET_CONTEXT_MGR already set [ 40.945616][ T4517] binder: 4516:4517 ioctl 4018620d 20000040 returned -16 [ 40.951429][ T4513] udc-core: couldn't find an available UDC or it's busy [ 40.952523][ T4517] binder: 4516:4517 got transaction to invalid handle, 1 [ 40.953809][ T4517] binder: 4516:4517 transaction failed 29201/-22, size 0-0 line 2917 [ 40.955355][ T4517] binder: 4516:4517 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 40.956544][ T4513] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 40.963573][ T4517] binder: 4517 RLIMIT_NICE not set [ 40.964429][ T4517] binder: 4516:4517 ioctl c0306201 20000140 returned -11 [ 40.967257][ T4520] udc-core: couldn't find an available UDC or it's busy [ 40.968346][ T4520] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 40.971331][ T4103] binder: undelivered TRANSACTION_ERROR: 29201 [ 41.010761][ T4518] Internal error: Oops - BTI: 0000000036000001 [#1] PREEMPT SMP [ 41.011946][ T4518] Modules linked in: [ 41.012493][ T4518] CPU: 0 PID: 4518 Comm: syz.2.141 Not tainted 5.15.189-syzkaller #0 [ 41.013671][ T4518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 41.015126][ T4518] pstate: 42400405 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=jc) [ 41.016380][ T4518] pc : filldir64+0x37c/0x9e4 [ 41.017086][ T4518] lr : filldir64+0x358/0x9e4 [ 41.017758][ T4518] sp : ffff800021b975f0 [ 41.018396][ T4518] x29: ffff800021b97660 x28: 0000000000000008 x27: 0000000000000800 [ 41.019565][ T4518] x26: ffff800021b97cb8 x25: 0000000000000005 x24: 0000000000000000 [ 41.020745][ T4518] x23: 0000000000000001 x22: ffff0000d2cb2098 x21: dfff800000000000 [ 41.021912][ T4518] x20: 0000000000400040 x19: 00000000fffffff2 x18: 0000000000000000 [ 41.023135][ T4518] x17: ffff800016d04000 x16: ffff800008925a48 x15: ffff8000167e4500 [ 41.024421][ T4518] x14: ffff0000c626dbc0 x13: dfff800000000000 x12: 0000000000ff0100 [ 41.025727][ T4518] x11: 0000000000000000 x10: 0000000000000008 x9 : 0000ffffffffffff [ 41.027014][ T4518] x8 : 0000000000000008 x7 : 0000000000000000 x6 : 0000000000000000 [ 41.028298][ T4518] x5 : ffff800016ef7780 x4 : 0000000000000008 x3 : ffff8000082bfb8c [ 41.029523][ T4518] x2 : 0000000000000001 x1 : 0000000000000001 x0 : 0000000000000000 [ 41.030789][ T4518] Call trace: [ 41.031271][ T4518] filldir64+0x37c/0x9e4 [ 41.031916][ T4518] fuse_emit+0x2a0/0x670 [ 41.032534][ T4518] fuse_readdir+0x13f8/0x224c [ 41.033259][ T4518] iterate_dir+0x1f0/0x4cc [ 41.033954][ T4518] __arm64_sys_getdents64+0x11c/0x340 [ 41.034757][ T4518] invoke_syscall+0x98/0x2b8 [ 41.035478][ T4518] el0_svc_common+0x138/0x258 [ 41.036184][ T4518] do_el0_svc+0x58/0x14c [ 41.036695][ T4529] loop0: detected capacity change from 0 to 4096 [ 41.036826][ T4518] el0_svc+0x78/0x1e0 [ 41.038461][ T4518] el0t_64_sync_handler+0xcc/0xe4 [ 41.039262][ T4518] el0t_64_sync+0x1a0/0x1a4 [ 41.039989][ T4518] Code: d503229f 2a1f03f3 2a1f03e0 f8000958 (2a1303e1) [ 41.041083][ T4518] ---[ end trace d45a4ed19eda9622 ]--- [ 41.234080][ T4518] Kernel panic - not syncing: Oops - BTI: Fatal exception [ 41.235157][ T4518] SMP: stopping secondary CPUs [ 41.236005][ T4518] Kernel Offset: disabled [ 41.236643][ T4518] CPU features: 0x8,000003c1,7d33ffd9 [ 41.237460][ T4518] Memory Limit: none [ 41.421863][ T4518] Rebooting in 86400 seconds..